last executing test programs: 56.408391926s ago: executing program 1 (id=1256): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000009c0)={{0x12, 0x1, 0x0, 0x3a, 0x98, 0x2a, 0x8, 0xccd, 0x10a3, 0x23a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x57, 0x33, 0x19}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x10, &(0x7f0000000040)={0x0, 0x2, 0x6, "92afc102df3e"}, 0x0, 0x0}) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(r1) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$sierra_net(r0, &(0x7f0000000ac0)={0x14, &(0x7f0000000900)={0x20, 0x30, 0x97, {0x97, 0xc, "af1c02885a8278800f86528c66a7456c3b1e2188776557c2fa91239c479e8614ee163837368700ead87d85b207a83e159a52f5ee89a991a5bfdcba6ade55d60a71fd3a2634cd5529bf730ef51e3808ef694807a40235ce733f6e33f705ca12a8bfc3ec1377c58ff5989f98cc4df1242250f73f9cf37f0c6c8fb8df997e257bfa391959736cd129dd4fa81bbf26175552095d7a4f8b"}}, &(0x7f0000000a00)={0x0, 0x3, 0xab, @string={0xab, 0x3, "db6fa89c7da5c4083e841076cb9fcc0b458a390a7776608dc9609665dde7fdd9c4d86626b46812586908f00aa8853be90c6a7deabf86e595676c3cf0c4aee9f98189fa210b562944032ad92f00da0e6f3dfce5d14d9b6fd5c06c339f7062d26350ec9b17c018519165c185a7bf0fbb50324e7a162aa2ff30f66fb80be6137952f3f8f012fc158e39e4a3ebbfab4ecf97a3dd58b098ca712cd0455407c9e07fff3a870c0d10b8c0a0e5"}}}, &(0x7f0000001080)={0x1c, &(0x7f0000000b00)={0x40, 0x31, 0xc2, "aa80463229a63b6442957482c9ca422fbec0de22e8f13bc7ed4c97f74b06536146975cdc8143e358c1306b8ffe0d1ab3cc029aec3b63273a1cee4df91012507ec60bd3e5aee26a38ebcebdaaef2ac7fbc3cdec023b032bf4f0a38a6874d335fa9de0087425e206be23ec9f99a3747bfbcd9a7864ce905d8572d9f046127a7d4f675a0276ff20387225f2575ac8b7e10a4273f6dccd8469be5654270f0b7ec00aad286832119b0dfbf28141efb6ff9dec4373db0abeaf22a2fd2df485492148839184"}, &(0x7f0000000c00)={0xa1, 0x1, 0x400, "04a00b03bae07f4cde0d13dc1f3ff1d06bb352b1cd043fe0ebfb37708c207104e953b7a2b4dfda4fb777a662dcdba204a21b2119a0eb62f2e63c35eb7da410c68f2890b5c04d472f886009ac08a1b5a1264bea9521da2a0f367e4ddf48568840b3365811e8df95d11b41787fcf9364812dbbd647e373373c22b506c1f02396cd09e717d7582c4ee71cc27b003207b3030b2aacfac4dce2f71a3144cb72ef380a766a63249a8f33877cf4be89f47f39b4d79f5dbcb9ec8ac796ccf20c376ce4dafdec3e52736e6b8d74b768c0cd6e4829fe881a40b17d721d09ea67bdc381bb4f64136f32c4d0ab88248413ecad78a8dc3ad907380b7bfa2d76fe7a0dd471709b96207cc1065aacfe895bdcfa8de9c70c663f8a176d38ca3ed2c3a37b495c2fb57e54add43bc7264a36143f3a9a655072dff8c3f49f99b028ea274d67cf0f7a1266757e72063c02230a38ce9bad024bcfd64a78c3043b6372d18790ff1bc1ad9bb5a09dde8e12ed2724c5b832833415338e83cdfcee408f2e9c8c6e49c5249b2d62acbb10ceef8047f5e355ecbef6488fbc519d33dc3abc00d4c642c2335baeef684ec0207c8da62527d8f123ed5be173d164b7fa1be69686e9c38c1a6675c21d0d99d0c94bb7faa57b62ce8df972cf0b1519db8c4c8481bc0c3bc33ca67b50b362ea57d8eaa1a83a19ccb754bffe85e64455b6fa9a39a4e183c1651b60d25aaf9b5ec6a6d1afef76284498f372a202cd2109f96c0818d52a4df1b5de718c09ff7f8b31e17235efab481537995817e09974d5a8d5e34646e655e43ca76dab015d6dd27905e455994e142e9a28728dbf9db564a372f7505d4ba79cbcc75711e34f70e14d32a383874280e564b03f0c91184f07516ae3cdf2d8225c354453f539ff87462681dbc99047a543ee4b2468283d4984c65cfc30e167842acfd290cfbdd8b74d065e81246a4561dd734b63e8fdd53a53e4e2fba79cdca375b83a79769b94a92a759fd9b1b8b1c861435badcaf7f0d8e4e0b33d82f41d5a8224beb19040d8f22cf034b89b6b9d7e883bf5445a7f5cdd0ee41bb4cd99c36b5d982a44f709fb51a7795189cdc120d5414b599b9a87324ef91b7f935c7786421b50cf5f567cffba605c6ddb74a649e1b6b2824db9b608889acce35fe453f895b0d2fb1b136744ace4076da58fcf6a6b68d0ea2015883b37740a8580de82104c8f3c6f9ae22956bd3126a9cda44fe7a6839749b01e1e4a8ffaf9bb6a6ec259062361ad0c6fc2106cfddc8c32091728ec6297cfaaa46718f74b3bc61b8cf17b6ef2aabd5b9e7a8eb3c7f6cd98ff54ec9f52c57cd4dc9f932330100b99e5963cccf2dd8f0c1084b375d83272f4e9cec1a25ba83c6e8faa2a18772664e069df553d37ab098048f85a9d93f5aea3bdc9e900af6ee3b4fa1ffd2a9060cc6e759b3f64c14a6f51f249e7"}, &(0x7f0000001040)={0x21, 0x0, 0x4, "a95af2c1"}}) syz_usb_control_io$printer(r0, &(0x7f0000000680)={0x14, &(0x7f0000000480)={0x40, 0x11, 0xdd, {0xdd, 0x8, "610479f5d98cd3c4027fd72a0ba9cedf45ca12f1f7d74552056179108a750ea07639b6663371c031f65232e14b13d3f499a98f1fdb321265c89a5e9d97921eb9b4ba1a3ab10c5570c24b3ce6fcf23618ad0b0b493b5f7646f96d5479411ab32764017609a9d8eab9a296df73aee2fbf1fb23fd2c3e0d7d2546f4f7778fef2407ab14acb89e0be7df73e86308e49e73971054bd67a341e6e27e5a2ac3c432ad21dd7b09b8c9f7181112bec02a6920992fb833047a0efb212509e785ec47e3ddee112d186758bd5c95ee205c901b8b6b7aa6287dd5f157e2e096efd6"}}, &(0x7f0000000580)={0x0, 0x3, 0xc2, @string={0xc2, 0x3, "071022133c8fb51cb2f68f4da74396892c42518010c4665045e14886f332c1e3c6d429c89550a368f6e47b839413b238110e52fa65e5327865e996a8e9ab4e502190e171e5e8530780da6d30b1639af8436da564ab54cf22fec682634745f60d9c11b9bc68f9445c3eb90d1dd141e09527bc015906687aab059307179b4f5ca2f63f4a77b25c16a00e49f803726e0f19d50073d3ab0927cf56961a44ee05f87a0c28c35301884e9ed899f06dcb1ec9cb98ccf632c0298faab1a2ad9e6fa72eaf"}}}, &(0x7f00000008c0)={0x34, &(0x7f00000006c0)={0x0, 0xa, 0x8a, "980f0d7f148e2f04afa570c48f87eb774d7310f9d88c052b997df71cff36a0d190f384209453183a70835639eb9b6df9f7a88bdc17823a13569aff48a90df6302eca9fb66e4e5d39f74abb8e6074614779f9a86b2d8d81849eff57ff232ee7c2ddfa1772d2b2b91acb9ea804054a517c83329b5b90355d8531c279326656a35c5de1fb476aad30d1c8e3"}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000800)={0x20, 0x0, 0x7, {0x5, "22e1523ccd"}}, &(0x7f0000000840)={0x20, 0x1, 0x1, 0xba}, &(0x7f0000000880)={0x20, 0x0, 0x1, 0x80}}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 55.668197611s ago: executing program 1 (id=1266): r0 = socket$nl_generic(0x10, 0x3, 0x10) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905"], 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x20, 0x2b, 0xb, 0x0, 0x4, {0x3}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}]}]}, 0x20}}, 0x0) 55.012316533s ago: executing program 1 (id=1269): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/rcu_expedited', 0x161f82, 0x130) write$cgroup_int(r0, &(0x7f0000000040), 0x12) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e21, 0xd, @local, 0xff}}, 0x47, 0x1}, &(0x7f0000000280)=0x90) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000300)={r2, 0x4, 0x2, [0xfff7, 0x8]}, 0xc) 54.935960156s ago: executing program 1 (id=1272): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x48020080) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 54.653390668s ago: executing program 1 (id=1276): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008031, 0xffffffffffffffff, 0x78477000) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x8, 0x50, 0xffffffffffffffff, 0xd012b000) mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f00009ba000/0x1000)=nil) madvise(&(0x7f00003a6000/0x11000)=nil, 0x11000, 0x65) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) 54.007348466s ago: executing program 1 (id=1280): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f00000000c0)={0xe8, 0x1000f4, 0x100000}, 0x20) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x200}, {r0, 0x556556ed8ffbb82}, {0xffffffffffffffff, 0x2258}, {r0, 0x40}], 0x5, 0x0, &(0x7f0000000180)={[0xfffffffffffffff7]}, 0x8) syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x2) ioctl$BLKROSET(r3, 0x125d, &(0x7f00000002c0)) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @mcast1, 0x7}, 0x1c) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="01002abd7000020000000600000008000d000800000008000100", @ANYBLOB="d19dea8b"], 0x2c}, 0x1, 0x0, 0x0, 0x400a885}, 0x0) 38.854377202s ago: executing program 32 (id=1280): mount_setattr(0xffffffffffffffff, 0x0, 0x9100, &(0x7f00000000c0)={0xe8, 0x1000f4, 0x100000}, 0x20) r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00008fb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000eb4000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_io_uring_setup(0x7688, &(0x7f0000000040)={0x0, 0x800389b, 0x4000, 0x1, 0x19e}, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x81) ioctl$HIDIOCSFEATURE(r2, 0xc0404806, &(0x7f0000000040)) ppoll(&(0x7f0000000080)=[{r0, 0x400}, {r0, 0x200}, {r0, 0x556556ed8ffbb82}, {0xffffffffffffffff, 0x2258}, {r0, 0x40}], 0x5, 0x0, &(0x7f0000000180)={[0xfffffffffffffff7]}, 0x8) syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), 0xffffffffffffffff) r3 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x2) ioctl$BLKROSET(r3, 0x125d, &(0x7f00000002c0)) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @mcast1, 0x7}, 0x1c) sendmsg$NFC_CMD_START_POLL(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYRESDEC, @ANYRESOCT, @ANYBLOB="01002abd7000020000000600000008000d000800000008000100", @ANYBLOB="d19dea8b"], 0x2c}, 0x1, 0x0, 0x0, 0x400a885}, 0x0) 16.556151323s ago: executing program 2 (id=1521): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000f80)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0xd, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x0, 0x0, 0xffff, 0xc, 0x3, 0x8, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x8, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0x10001, 0x3, 0x1, 0x8, 0x6, 0x9, 0x7, 0x9, 0xdc7, 0x2, 0x1, 0x5, 0x4, 0x1, 0x4, 0xa, 0x8, 0x3, 0x8, 0x4, 0x2, 0x0, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x2, 0x56f00ca6, 0x5, 0x2a, 0x1, 0x22], [0x1, 0x9, 0x9, 0x1, 0x5, 0xe, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0x8, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x3, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1ff, 0x2a0, 0x8, 0x6, 0x8, 0x7, 0x7], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x7, 0x5, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x4, 0x0, 0x9, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x140, 0x2, 0x4, 0xb, 0x4, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x6, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x9, 0x3889, 0xffff9a7f, 0x200, 0x3, 0x2, 0x3, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x101, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xffffff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x7, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x2, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$binfmt_misc(r0, 0x0, 0x0) 16.527613114s ago: executing program 2 (id=1522): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x24, 0x0, &(0x7f00000006c0)) r1 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x3}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x7fffffff) close(r2) 13.466299761s ago: executing program 2 (id=1537): r0 = syz_open_dev$mouse(&(0x7f0000000000), 0x5, 0x40c02) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003640)={0x24, 0x2b, 0x107, 0xfffffffe, 0x0, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @ipv4=@broadcast}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000400)={0x0, 0x9, 0x0, [0x1c000000, 0x7, 0x3, 0x4, 0xfffffffffffffff5], [0x8, 0x40, 0x3, 0x9, 0x400, 0xd6, 0x7, 0x80, 0x4, 0x3ff, 0x4af8, 0x8000, 0x2, 0x8, 0x0, 0x8, 0x9, 0x1, 0xa042, 0x9, 0xfffffffffffffff7, 0x3, 0xfffffffffffffb82, 0x7, 0xf48, 0x6, 0x4, 0x9, 0x0, 0x1000000, 0x9, 0x7f, 0x0, 0x4, 0x40, 0x10000000000, 0x1, 0xa5c6, 0x9, 0x5, 0x0, 0x7, 0x7fff, 0x6, 0x6, 0x80000001, 0x5, 0x4, 0x8001, 0x8, 0x1, 0x8, 0x0, 0x9, 0x5, 0x3, 0x6acd, 0x4, 0xa0000000, 0x7, 0x3, 0x65b, 0x9, 0x1, 0x6, 0x2, 0x2, 0x2, 0x7fff, 0x1, 0xf, 0xffffffffffffff7a, 0x4, 0x6, 0x0, 0x9, 0x3, 0x2, 0x0, 0x0, 0x7fff, 0x7, 0x6, 0x1, 0x9, 0x2, 0xfa, 0x4, 0xa, 0x3, 0x2, 0x642, 0x3, 0xe, 0xffff, 0x7fffffffffffffff, 0x8000000000000001, 0x4, 0x4, 0x1, 0x2, 0x1, 0x5, 0xd2, 0x5b, 0x4, 0x6, 0x3, 0x8, 0x9, 0x0, 0x100, 0x100000000000000, 0x1, 0x4, 0x5, 0xae, 0x800, 0x4, 0x3ff, 0x2]}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000840)={{r1}, 0x0, 0x30, @unused=[0x7f, 0x0, 0xee79], @devid=r2}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r4, &(0x7f0000001240)=ANY=[@ANYBLOB="000086dd00032800ff000000000060fc03000f982c00fe8000000000000000000000000000aaff02000000000000000000000000000184"], 0xfce) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x4}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f00000002c0)={r6, 0x2800000}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000100)={r7, 0x6}, &(0x7f0000000140)=0x8) r8 = openat$sysfs(0xffffff9c, &(0x7f00000003c0)='/sys/power/pm_trace_dev_match', 0x20800, 0x2) finit_module(r8, 0x0, 0x3) 13.27219812s ago: executing program 2 (id=1538): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffff9}) (async, rerun: 32) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x103001) (rerun: 32) ioctl$SG_IO(r1, 0x2285, &(0x7f00000010c0)={0x53, 0xfffffffffffffffc, 0x6, 0xb0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000001080)="12be69ae6200", 0x0, 0x1, 0x34, 0x22, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$printer(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0}) 10.236134815s ago: executing program 2 (id=1563): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) (async) close(0xffffffffffffffff) (async) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000080), &(0x7f00000000c0), 0x0) (async, rerun: 32) openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) (async, rerun: 32) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r3, 0x104, 0x1, 0x0, 0x0) r4 = syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x56a, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x0, 0xfe, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x4, 0x8, 0x1, {0x22, 0x8}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x7, 0x2, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x7, 0x8, 0x2}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0xa, {[@global=@item_4={0x3, 0x1, 0x1, "fafddb58"}, @local=@item_4={0x3, 0x2, 0x4, "bdbb50fa"}]}}, 0x0}, 0x0) (async) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000100), &(0x7f0000000140), 0x0) r5 = syz_usb_connect$uac1(0x5, 0xb4, &(0x7f00000003c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa2, 0x3, 0x1, 0xbb, 0x10, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x775, 0x4}, [@extension_unit={0x9, 0x24, 0x8, 0x3, 0x2, 0x5, "e041"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x7, 0x2, 0x3, 0x4, "", "dd"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x3, 0x3, 0x8, 0x8, "96", "d81b49"}, @format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x6, 0x4, 0x7, 0x40, "", "618459"}, @format_type_i_discrete={0xa, 0x24, 0x2, 0x1, 0x9, 0x3, 0x4, 0x9, "dea7"}, @as_header={0x7, 0x24, 0x1, 0x4, 0xf0, 0x1002}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x10, 0x3, 0xff, {0x7, 0x25, 0x1, 0x81, 0x2, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0xda, 0x44, 'X'}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0xc, 0x4, {0x7, 0x25, 0x1, 0x2, 0x4, 0x2}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x3, 0x3, 0xc, 0x20, 0xe1}, 0x1d, &(0x7f0000000480)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x10001, 0xf0f, 0x3913, [0xff3f00, 0xc0, 0xc00f]}]}, 0x7, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x457}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x42a}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x445}}, {0xb6, &(0x7f0000000580)=@string={0xb6, 0x3, "25e387000bca76a52e8a372f8e21a7a4f1819c83d483b8de30499ba5191fc69d6d69c710eff0c8ac0a1a3e20fe340c3bf2f3f80f48e098a2d337ebcd7f185d7c78d29f0132f0792aeaaf6bcbad691fc7a1c53a2a302527ef6d919e8b5cb2c7411ce96568b6a7fa741fdbcabc44d1871616a35c09e1bdf10fd7bca55f84c4e2bff8656aa325b3d0b2a9693c68e55125220ff0bd473d0de12d11dc5eda1b3dba407576a5bc03d2ec296e4e7e2d65d615f56e3e02b6"}}, {0x3c, &(0x7f0000000640)=@string={0x3c, 0x3, "3788c3bb261c88e13c8883b385a5e1d41f593ced3d59477211b996ffc6a5032a98a54c02d9a28967b12c8bfeccb4d4d3fc41c25b74c8712efc44"}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x42f}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x413}}]}) syz_usb_control_io$uac1(r5, &(0x7f00000008c0)={0x14, &(0x7f0000000780)={0x40, 0xa, 0xf2, {0xf2, 0x10, "558a26071d1480830c2fcb4ef028768bb82fed5959b8cdd257568c06f5cfbb97da1b60b89a30e697ca786e7706e5aaf8ad61f7c9557d699f239056128aac979ad7085372710deab51ecc4906f40c498c11fb84b16ea74b312023d0f2d70100b3ad9e3b5a5eca83c583cd24a00c710ac25f05066f202d4ca343085805df4c316f98c6bb17df1167247e058a8c7347502f96db7e7e4117449c0fdec39f6389340863de06e3a1f9436ec183bb6bd7356038a0792a3dc6c5ca9be72dd2efde21657874d4d5e5b13ef0b9f71b0384601e32f66663067dab2b36e613dcc1155c45ee83c34e7975a46b71398759469cf01fb53e"}}, &(0x7f0000000880)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x457}}}, &(0x7f0000000b80)={0x44, &(0x7f0000000980)={0x0, 0xf, 0x3f, "37533553242daf1522d448e9bd603f4c452cebb5312e8ff03757f3d09bdb9a1c175c236e9bc0e38786549d0cada72a1571c179a5ada6e57e7f37e7ebc03b7c"}, &(0x7f0000000900)={0x0, 0xa, 0x1, 0xd}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000a40)={0x20, 0x81, 0x2, "ecdb"}, &(0x7f0000000a80)={0x20, 0x82, 0x2, '[L'}, &(0x7f0000000ac0)={0x20, 0x83, 0x3, "2ef030"}, &(0x7f0000000b00)={0x20, 0x84, 0x2, 'C*'}, &(0x7f0000000b40)={0x20, 0x85, 0x3, "6b97f0"}}) openat$binfmt(0xffffffffffffff9c, r2, 0x2, 0x0) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f00000001c0), &(0x7f0000000200), 0x0) (async, rerun: 64) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (rerun: 64) execveat$binfmt(0xffffffffffffff9c, r2, &(0x7f0000000340), &(0x7f0000000380), 0x0) (async, rerun: 64) r6 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') (rerun: 64) execveat$binfmt(0xffffffffffffff9c, r6, 0x0, &(0x7f0000000140)={[&(0x7f0000000180)='-*{\x00\x9aM\xcb\xe7\xd7\xae\xcd\x81f8\xb1\x06l[\x8c\"\x017\x18\x13I\x7f(\xc5J\xa5\xdfs+\x16\x97\xde5\f\xba \xd2\xbdREr\x92\xcc\xd2z\x8b\xad\x9e-G\x8d', &(0x7f00000000c0)=']F/\')@-\\\x00', &(0x7f0000000100)='{{-\x00']}, 0x800) 7.231142333s ago: executing program 2 (id=1581): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000040)='./bus\x00', 0x0) removexattr(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)=@random={'system.', '/dev/snapshot\x00'}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 4.064107019s ago: executing program 4 (id=1606): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000001600)={&(0x7f00000003c0)={0x34, r2, 0x1, 0x4000, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5, 0x18, 0x1}]}, 0x34}}, 0x0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x40000000000000d, 0x2000, 0x0) 4.026411585s ago: executing program 4 (id=1608): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x5b6f, 0x50313134, 0x80, 0x7, 0x1, @discrete={0xf4a0, 0x8}}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='devices.list\x00', 0x0, 0x0) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, &(0x7f00000000c0)={0x3, 0x1, @stop_pts=0x4}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r2, 0x8010671f, &(0x7f0000000280)={&(0x7f0000000180)=""/194, 0xc2}) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$FICLONE(r0, 0x40049409, r3) r4 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc2}, &(0x7f0000000340)={0x0, "f27e791be823d71d385d2082a4fef198c8c0cf79b2480554387dbd64ac73cf6c75c4613584b92aac655d64f25268543c6d00ebfadd3144b62c7587b5f9756c77", 0x39}, 0x48, r4) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000440), &(0x7f0000000480)=0x4) r5 = ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f00000004c0)={r2, 0x1, 0x1000}) ioctl$AUTOFS_IOC_CATATONIC(r5, 0x9362, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000500)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000540)=0x28) r6 = fcntl$getown(r1, 0x9) capset(&(0x7f0000000580)={0x19980330, r6}, &(0x7f00000005c0)={0x9, 0x6, 0x9, 0x81, 0x3ff, 0x8}) keyctl$reject(0x13, r4, 0x8, 0x800, r4) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000600)={@dev, 0x0}, &(0x7f0000000640)=0x14) sendmsg$xdp(r1, &(0x7f0000000800)={&(0x7f0000000680)={0x2c, 0xd, r7, 0x26}, 0x10, &(0x7f00000007c0)=[{&(0x7f00000006c0)="a2e39f669b05411cba9eafa1c5772f9e4c646519bd5700923acd40f71411b517a01ca4d96a983e55214227723a35b969e07347b1a03e39eb012a35c919fcebfe269b54600e0e3b6222e4f27304e515e0f0dd33be2294bdefc81443c07203530aa8aef91567bf52d533d402d741f3fb1a7950b094b7899607aae0409953c59750849338fd5f909f2e51d9b355d09734a297654b0fe2ec4199307e0ff1bfbe5a3075e7781be769cabad955ccf523e34e812cb1fbc564b561e3aa92ef36fbbdb81ba4307b295a4c8ad5a3f9ae684ec7ca5de28e659b1b363c9482d6799d48bfb8", 0xdf}], 0x1, 0x0, 0x0, 0x90}, 0x8810) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000840)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f00000008c0)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r2, 0x3ba0, &(0x7f0000000900)={0x48, 0xa, r8, 0x0, r9}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000980)=0xf, 0x8) preadv2(r0, &(0x7f0000000b00)=[{&(0x7f00000009c0)=""/94, 0x5e}, {&(0x7f0000000a40)=""/71, 0x47}, {&(0x7f0000000ac0)=""/9, 0x9}], 0x3, 0x5, 0x80000001, 0x1) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f0000000b40)={0x3, {0x1, 0x6, 0x80000000, 0xfffffff6}}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r10 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000b80)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x172f, 0x37, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x20, 0x3, [{{0x9, 0x4, 0x0, 0xe, 0x2, 0x3, 0x1, 0x2, 0x40, {0x9, 0x21, 0x4, 0x3, 0x1, {0x22, 0x2e2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x10, 0xff, 0xcf}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7, 0x6, 0x1}}]}}}]}}]}}, &(0x7f0000001240)={0xa, &(0x7f0000000bc0)={0xa, 0x6, 0x110, 0x5, 0x4, 0x3, 0x20, 0x3}, 0x1c, &(0x7f0000000c00)={0x5, 0xf, 0x1c, 0x2, [@ext_cap={0x7, 0x10, 0x2, 0x12, 0x3, 0xb, 0x7}, @ssp_cap={0x10, 0x10, 0xa, 0x0, 0x1, 0x6, 0xff0f, 0x3, [0x14f]}]}, 0xa, [{0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x418}}, {0xfb, &(0x7f0000000c80)=@string={0xfb, 0x3, "3c624a3ff99675af1fbd981102c31259a09b75cc92d920056f0223e84286b797c7c42aeb733391cd94691fcf4f1b06ce6738af04d2a82df7aa123a470786a5de61f430e424162eac0cfa2f735ac1cc9478903a88ace39dbe26203019902516d557d7c54ded2988363e735772950a38e651af7fb41ae21f7f9adb1f60b91ec7bd204fd2500b17e54e0152053e9f75af8346c2775f02371bd7397b8cfd48e088af6461537e6a7eabb3557af3b5478de76bc7dcfd97940380f3aa8b35abc1af1465b99bf5118fafdd038c40d120637f7f1ed4750dd97acec9aa5c7b31aa0f8bf388fa43c9e9c05aa79732af5cf8bfd3e9b14c598749a1853433a7"}}, {0x4, &(0x7f0000000d80)=@lang_id={0x4, 0x3, 0x3472}}, {0x4, &(0x7f0000000dc0)=@lang_id={0x4, 0x3, 0x4c0a}}, {0xef, &(0x7f0000000e00)=@string={0xef, 0x3, "eae6d2f7b51eb9f976a0bd2e3842ba64a3061c3aab30fd0e3c12dd57341babfe9728a9d4ed9c2f9a1f787645ad437887a506bbfb5355ee200c543fc834641fa4784130e05336afff953a6168a06a689b05cd6e47219dc6c2d7ddbe13dec1dadb69ec75408f8e4df5e1344faaa8a608e08d9b2bc093ae21ef3ee50f62b82847aca68d50606a3d03030b926b94962db36ea59b5c8387e2be6f9ddd16153889797cb340e907a9bb56e5406edac82b1732448e9310f8a4a816e6d2273c7aabb4b088ae145dfea7ac934f9b1085e09c56b89fd14fe573f35be0ac313c0536fe30419b5f628078a54937cc10ed43cce3"}}, {0x4, &(0x7f0000000f00)=@lang_id={0x4, 0x3, 0x2801}}, {0xaf, &(0x7f0000000f40)=@string={0xaf, 0x3, "6160db2efd0ce2b603f19f28fa2181a8a856821281126cffe1ad4f55afd393ec84f2cfe4da28ff2706ca80e495b3d79eb0bda34f399a8cfa06451b148416a6f54d87770f20dccd804df7c30851fbf4e9cb9e40c9ed51cbf776784414b7fd732c56b56f975e4aab26210063caf859ba542f935741fc8e63fac7a843a29c791337bc44a0f36f96b22e4ce64181cc10e4a9ddcdfb381583bc79f5db2437c8d80d4edac12a2cc28524bb4389c67c61"}}, {0xee, &(0x7f0000001000)=@string={0xee, 0x3, "f5ae113589aa42c15fcd62c09e228bdbd57f1b8d3a8149dfef65dd666003bb8e64e8252d7a19216334ce718cbd01dec86a88169c83287ddf670433a264de72079301ab2fbb7e8b17ac623b60170da8c92b769b23ee8e93c589c594a37c8d6b3765ed1b001e6f613622c61536d39c4f7253b3fe442b21f8f369a7931e9894ee941b247f40d2e7d310b717da6bde555cd3e46539d29503862ef8cbe44e4f2372284d62fa299c44071958d7a222fa8ce0de4011a7ac2c6b7700615f170b6d1b2d25cd552dc6978c658bc5067f04a48ab8636ba6349831a90ef95fd1ec778a1642d2dbbd17391cda2ab5f1edfd7d"}}, {0xe6, &(0x7f0000001100)=@string={0xe6, 0x3, "e9223b0149e7dc1d6e1d54171b0ebd4d6ffc8b9463ef8d56495634c48247377442d26c25144a851e2b4c42a34f2d6f81bd0acec636e1892a6c8b909ef90e24abcc4af787e5a361cd09c21ed2f6fb04e2d4fdf4aa33b1dcec850360b62a479de1a57118c06744f708caed4c420ad3638d0a9950644f06c1d7531dd58d4725a4510a8c2995abd220eae4362413de7f2f9f0d6339dee082da98c5b98d0612f4749bc55729b53f03296e6f1a985210288d28e3d1a906b645279128a636e30aa984d3047c5f060c5248f9b880d1c4a3a33537605392b9192c4d244fb60eea9f599f1ff5b12f55"}}, {0x4, &(0x7f0000001200)=@lang_id={0x4, 0x3, 0x843}}]}) syz_usb_control_io(r10, &(0x7f00000015c0)={0x2c, &(0x7f0000001300)={0x0, 0x10, 0xf, {0xf, 0x23, "021d8064ca49ebddf3069d2722"}}, &(0x7f0000001340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000001380)={0x0, 0xf, 0x1a3, {0x5, 0xf, 0x1a3, 0x5, [@generic={0x47, 0x10, 0x2, "6282d4518a486572bd075ad64089118dba134e8e7fd776cbcb83cffa880e122e61cee8bcb687e9b322b1796579642d706cee57a183a2ecf2a6055f7b445e983cf1418bf7"}, @ss_container_id={0x14, 0x10, 0x4, 0x3a, "f465b201640a27dcb2928fb6a7a16ba9"}, @generic={0x8a, 0x10, 0x3, "ae390c26278be598e6b03d3183369103b308392fb9a3afcd3554b855c2e115bc479a282300bc075e62429cf85cf2e584fc089c7086e433cb1ad6d1ab7aaf5fb9f2b89e7ff59794490ab057bd49b37175e0eac01f7c7e756e886abfcdb7a460f21588eb5f97bedb111fb6cbe3d5a77e8eedbb4374f2023d99cf4a48e6157b8837161fdb408d75d2"}, @ssp_cap={0x1c, 0x10, 0xa, 0xa4, 0x4, 0x6, 0xf000, 0x0, [0xf, 0x0, 0x3fc0, 0xcf]}, @generic={0x9d, 0x10, 0x8, "c57039ea963fa31a1f5e6a6c7607576dd514e207a962207c06594658a6069d9245c3999523685c453ebbe7c6e7515f50f464fbdcbbecf0c832a318cffe18d4176c43dbec5d6c6fc3523ccecf7c45b6ae805331b69e46109a3f16d727b9dd1a9f1b981cce336de34ae745fcaf87398265a17ab431ed292ad3e5c41dee8482c346fc52efe3449e55215dcd2d4a91d815c7eb76e9b5285095586da1"}]}}, &(0x7f0000001540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x5, 0x0, "b2126d2a", "073e64e0"}}, &(0x7f0000001580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4b, 0x10, 0x6, 0x2c, 0x7, 0x5, 0x9}}}, &(0x7f0000001a80)={0x84, &(0x7f0000001600)={0x0, 0x16, 0xb3, "93b0f5d62080306cf33653ae419c52cf402b54ec1ce5555064f237c3a3b14e2df13467c693199e63de7f39c97888246ed4eac076df892e97e2ef6b0f4f4c1d6fd5ad79ea00520a7545bec82b1b7833f665cafe1e29018bd586860288391dbd4066c29ae03041936f521e31a85586b2acfafddf4d8c80a2cf07fdb2e0ad1c58959e226248fde8a907d763ec15f55821569c973081a9117209531a31fc5322797bc9dd84065e8f5063db958c1e011a308d64f586"}, &(0x7f00000016c0)={0x0, 0xa, 0x1, 0xa}, &(0x7f0000001700)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000001740)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000001780)={0x20, 0x0, 0x4, {0x20, 0x6c}}, &(0x7f00000017c0)={0x40, 0x7, 0x2}, &(0x7f0000001800)={0x40, 0x9, 0x1, 0x10}, &(0x7f0000001840)={0x40, 0xb, 0x2, 'p@'}, &(0x7f0000001880)={0x40, 0xf, 0x2, 0x9}, &(0x7f00000018c0)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f0000001900)={0x40, 0x17, 0x6}, &(0x7f0000001940)={0x40, 0x19, 0x2, '},'}, &(0x7f0000001980)={0x40, 0x1a, 0x2, 0x3}, &(0x7f00000019c0)={0x40, 0x1c, 0x1}, &(0x7f0000001a00)={0x40, 0x1e, 0x1, 0xfa}, &(0x7f0000001a40)={0x40, 0x21, 0x1, 0x4}}) add_key$user(&(0x7f0000001b40), &(0x7f0000001b80)={'syz', 0x1}, &(0x7f0000001bc0)="c0af35d8e93166ab4d2ae86166192c7f2a591770049a5d9dd73a190fd27bc24f7e3969fd8e7df9aa9d1b93339afcd2701e7747fea87fe0c7f97308548009dcba3f9aad0a77a98c06bd378e5b0f1b79e6a6d2d948d5a48ff8a346b17bfdfb68a104e4ae905936b3e179f034dd428d5f6325c2e1702127319d402e0fd7e839a1d7422c5ecda892440d7132d0cfd3758fc601e9ea1da211f288c3d615204e2822893e428d548452d239757b54877c89d10501f7d763135c269220ee5d2bbb30ae2378c08b29e362081b0b0c82d35b55e8c28caa1f4d95d144152f9ae6d614fe346e6c8d5f3307d6e6", 0xe7, r4) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000001cc0)="e895e6075be78c8ff5b5a4bcae726397", 0x10) 2.440150368s ago: executing program 4 (id=1617): r0 = syz_usb_connect(0x0, 0xff, &(0x7f0000000380)={{0x12, 0x1, 0x0, 0x4a, 0xef, 0x77, 0x20, 0x19d2, 0x1276, 0x851d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xed, 0x1, 0x1, 0xfe, 0x0, 0x4, [{{0x9, 0x4, 0xe2, 0x0, 0x5, 0xff, 0xff, 0xff, 0x8, [@hid_hid={0x9, 0x21, 0x7f, 0x4, 0x1, {0x22, 0xf7f}}], [{{0x9, 0x5, 0xb, 0x4, 0x8, 0x2, 0x5, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x28}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x521}]}}, {{0x9, 0x5, 0x0, 0x8, 0x20, 0x5a, 0x6, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2c, 0x5}, @generic={0x89, 0xc, "f0882d5f1a0d60b9587871a455b02ef3900fcd8bc66dd9439334cb2267b2aafe124fd258d976c045dbfb01537450ae5e0477cf4f41f14b05d07e5c6150e4ad7d7268bad4401ef7e54066c24d114456e5f6cd1e09efbaefa7d7f96912cadc56decd72ca6514a9c59773862ffa4b14930bac625ad611b44a996792134c7d535a6dd2f308b2d9eebb"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x20, 0x3, 0xf8, 0xa2}}, {{0x9, 0x5, 0x8, 0x4, 0x20, 0x9, 0x0, 0x6}}, {{0x9, 0x5, 0xb, 0x3, 0x400, 0x34, 0xc, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0x1}]}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)={0x20, 0x14, 0x51, "434ef1225177cbf94d3cc5a35fbfb80ffe25c59407102bb9f4fb6ae9cab93f3113ffef7ead6c168b974bcc7590fdfc980166f7fbea9de54f18918f089e2d334908d1ab4f85f65c400ebe75dd22be2a0c3c"}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$sierra_net(r0, &(0x7f0000000100)={0x14, 0x0, 0x0}, &(0x7f00000001c0)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="008c449b9ba4961007651e2707f8"], 0x0, 0x0}) 2.39618236s ago: executing program 3 (id=1619): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904000001020d0000052406000105240000000d240f01ffffffff000000000006241a00000008241c030008070009057f0300020000000904010000020d00000904010102020d00000905820200020000000905030200020d"], 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x80000) (async, rerun: 64) r3 = socket(0x2, 0x1, 0x0) (rerun: 64) r4 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r4, 0xab00, r3) (async) ioctl$NBD_SET_SOCK(r2, 0xab00, r3) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) r5 = socket(0xa, 0x5, 0x0) getsockopt$inet_mreqn(r5, 0x29, 0x4, 0x0, &(0x7f0000000240)) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x7f9, 0x10, 0x10, 0x4009, 0x8000, 0x12, 0x1}}, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000680)={'batadv0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xb00, &(0x7f0000000080)={0x11, 0x4305, r6, 0x1, 0x0, 0x6, @local}, 0x14) 2.17019905s ago: executing program 3 (id=1622): syz_open_dev$tty1(0xc, 0x4, 0x1) 2.130581468s ago: executing program 3 (id=1623): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) connect$inet(r1, &(0x7f0000000280)={0x2, 0x4, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x7e1f, 0x0}, 0xee0000b0}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000001100)="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", 0xc3}, {&(0x7f0000000d80)="7d68e6de85f9b0cbc9d710267f321ec64eab043ecad9af7e01e9463218ec45924a99867163e468d36a682fadd749caa325e685d75559a87139e02fae7271be8f55671cfd32a09896278d1941370174720838039d0989bc3394b8a4c4f4a30f0496be313d6d60fe47966c634a3ee1f659e8ef310647725bda0130d5de5028220a4cf5fc808a75694738ee26cb21302b4bba4265b845a5d5dce706d9820c6936b122f9658446d74a9016b94424971dd443a6907eb5c73b6b200e92b23f2c36a214729b0bc231511e4c", 0xc8}, {&(0x7f0000000380)="73fd71361e8d6c80ae1bc9953e2a4aeac7a314273066fc7f65a51969b46df1774bb0be94ccd4824f2d57ad2cd37242b1258402395481f9f07e067652e52aa8ccefcd0962ba0c48757b68d493f3ad702e65d4daa7dfc1605a173185472ae12470eea64c70ef4e64793b8a830447de0f423bef3964934eef4243cac42939ba6fa68d821b9373b5f3e2c26e7ca75ed8fb3203aef3a6637cecdd0251532b99537e02f604058f50e66c8a657d59beeed127695475f082d3d2b9790181fc987ad000ac00887d1506be89f388ecb405660b4ea196ee8f5a92b12ec43bbf49567db613d478ebe2358364f7600bf4f80ef4b2756fb13416c4fa22880cc96a03f07888575aedb001d5a74bb2f906797912b5ac080a0a3d361425f1a92ab03bbe65d5dcb235f43b5ad1162a16ebdc647baac013bf076945126cdd5a080853976a97ad55184601102fbb8df86b21aa8162858d74465c5fb7dc766602a3567f6eaf441f85ec50ca7fb3a4fdb450d1420531da25d01a412958a5e3895c59542238cf8e188e7fb5641eb24a5f1819bf8d2e9dd6c1d0e93564d723e311db9cd268bb1e477036e822b135cdbaf40f812aa7db01d22c829ab01ae24997dae96ddeed49e62d285701d5419e3f94a8b95790cf5a296ed15bffae1f71470c6a6eda872528844a2df42590d898630263cab5cccec57b7cea365ad8c91bfbe7cb419635ce6bf340a56115c0ad922b6fade9538e543bc5def2a85d35ab16d20c219c4733837be2c14ba4d3d32c3a6882ce6857626f55109b4cdcb634425d710bf3108f9b31b4af0cc17a58e49e871a56126dd8bed08e038ba64008587237b3442d28032e52fc9fae1a5784ba59d0edfa03d38352724903ed6f6970b3f4dfa6e40bf933b6765c6ee648174765f1e8ec71b80cac86abd065a3005b40a43a665707cc590997c5048183006a9dd8026d39def05950183b3d4f12f4e1644ef78cddac7c5569985c2c232bb350f28857675339e53f63a868704d2e0b38993dc57a02d3e297fc9a5b9384622841018c303a05bac25d509df5a2d0e3232927283fcc3ec67e4fa7b71d22f115cf693851dcceab4bce38cbfbb32829e211cdcb6a359e14fe416663541050d340aef2555dbd292bd9cbab8fcf20378149cc994569c2bc95fb33fd2d9321b8ac8e5160b02e202492f470eb719a8f2ac3a4be37ea0918b54b14789b7aa228d47f7b13fd9af608740c5a8fe02109a7cc0e555b22628ef790e513ecadfd338d30aed8ca219e64ee4fb0bd0e21e5101bf2072ffa071eb1aa0454caccc015ff1e166813f819a142b56a22e4ff387bb319288a0ef747c6fc8fdee3a0e193b0d086eb816e97e0322fcdaa30da61cd26ac9d8d0748fccd911ce0fd4adc953e9486e137fe66bc8aedfd5b78c562ebfc578ac9f96a453311766564541e16955e30b95914e9411a0b4cd95e0d8732d5ff7a4f921ef41d986a195334266585353b16b9449955523913a30c087532bcb899f733af3abea59baea174cf04359547a633b5f8a582ae3ef12a1d0125bef8c6e8c9fb589d3597c5ab3879491b0c5e3607203f06836a6805d3f7979c4325f9fecb2aceddedb272237132460cda812ef7d613a585898d59f92ef68ec95f12b47b440f6d899ecbfab48055e0c1605ba4cd9dbc17c4cbfec8a953ebbd38c45a6737a57ee58e21a20e530171137968ae4f0d0366cdb0b9d6a4667b011fcd7cd9e77364e5221989d8f0d80793260e748e3bd394849c090c744f6044328304cd6f02e941c5405647daffc1fd2f2864b37f92bbf4931c8e4a7c6bafd0ea79d39d330e70e6776bf6a926de227e5a43653bba04883e98d67bb64aa86e8bf271ba87604bc598e47f2992c7618ad25068860a481554b53352c7339de7e79c3bd1aed5bef8f398432858c888a5d8651969ea40eb3d486e9fe61d49b20500fdfd1548f567da970103d36730657c35d03d2c36b142665f62203b1fb12d616478cfef6f38b34cda87a634dd06d359f33e98b94a5e5b46b2a8d73126352d1d5b65af75055455cc903e384c41876fbdff935d047284d9d203b147a6ba0e9cb50beef7798886c33d2f2f0c0d9abe0e32c7c809f8b0b28fc59471987353c862a311776b8275bf319d5cb9a59f8f103b6e567ef5dd8859973cc3fe41e356bf5bd3186240e49286977eca36a8ad44185973b276cd7958b73e14a221b7fd567818bebf54ad27ee95161bd2aeeb356482ff467500a7d36f0464f58a591ec6b728f984ec78d0abe14c6d3411ac3ffc4c3179d1f95d029f26cceb545723519d3d4209a2b1243e78767273c13dc2bd320512674b6f1a50313bae7b9d16aebb476dbc829e8fd8dd46a1696efaff5795cf75de57c90f05ed9ef4a5cdfbf20d3d9ed95fb4114b1d5c9ade0856212e7ba330ce5bccf2c993dff89112b28bd3b17d3fcfacef7590f62bf948977dd79e2d8025946c80bf263e34035409b5ba1443d4929727180761bd56d258c3670a0aa4de21111fc3172367582de2d164ff3a18d0696b8dd8e5c1423b2ea1e2c0cfe141e4cf04f8cdaed48976b94c40d6a581300458661bbdbfeeb4969af6319eb1798843d0872f68f0c6537bbc9c7dd1e9b0564bf442d8d25f8aa884aba1df074d374f99750d9227bb821ba0355f60de2829a5c8cd47c89d29a2e3d7d53d59db5c3ace8f484664202c210c68a3b33076fb00d59938e84fbad6d6618c0bb89cf94035fa2de4da351e0d71df416450ea7ec3af33aa5c0313c63e654bd79c73b39dc1933636956761058d76648746daca469f8fce62c17a8160cdefc6a927eef9ec4a8dd684e46f35282546ce2362ab8afedd39bf699fd7c2cde538f52ea43c08558f42ba77b2986b800c45fa76a130b30919b3e1d504573e3c1e7dd2dc5d81379df53d736511f1da4ad8791e46adb27bb5c38129e89edda0aed99dcc03fe400f7d05d48e3e9e17744e8487f8ac464c86f7332211fb9799e9d27a6832d5f17ccd1a2da255f6da047e4728dd80860c04391bca4b7833f0346866401ec20033bcf6dfa85fd1520de5a03b4f9f6f5d2f8d7b6e7d7df1cbe5c05e23e080cf335639c94c48aaeb0bfebbe79530d67d35fb101c91839954c0e50dd4b90a86428b22b0be1e906fee30f68d7ce4bf9c68eafe695f07f5e4e4d473d77104b7b1b5dcfeb84e8c83624c0068d4e1cccfe740f8e5d5699603f8481ef2a1f2d4b8fd2314c5cb1985fe34cf8ede7d2e8bddea269422490903489c7f5951114d7ccb29a19455a987d538955712a460243105b25ccb6e6f34c370a6bbb234bee150dbcea5188e45305253f1014f7c0b5d60d517d2d05707f5ca9249a921d6c5307caf41deca0509b49102d801320db65c00f6e1c05fb8c2e1cc554673bf6168dd64086b19af28eec508fd0c304837e802173ac9947c4d73929c61d9632ab929a25f2a04350954612c2de705c1c25215284fe933fc8ccfd30ab3fc9ff5e04dd68d4720d95a29d6da176ac9d332c9ce77358f3c262777ea828fe6473638bc77be2aa586a3733e275744bc42c3742c1ad8f89d25c31958902f2f498c58fc85e9b78fb7a331734cb081cfa9ccfd262df927c0ff46983f8765af4add3532de2b91f2436df028", 0x9fd}], 0x3}}, {{0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000001700)="a6", 0x1}], 0x300}}], 0x3, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000002b000b00000000000000000007000000040031001800018014000280100049800c0044000600000000000000130002006661756c745f696e6a656369696f6e00"], 0x44}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket$packet(0x11, 0x3, 0x300) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r4, 0x1, 0x3, 0x0, &(0x7f0000000040)) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000000)=0x7f, 0x4) (async, rerun: 32) r6 = socket$inet6(0xa, 0x3, 0x3c) (rerun: 32) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) (async) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (async, rerun: 32) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e24, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, {0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00', 0x2}, 0xfffc, {[0x3, 0x201, 0x5bb, 0x1748, 0x7, 0x3, 0x2, 0x3]}}, 0x5c) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000040)=0x200, 0x4) (async) sendto$packet(r3, &(0x7f00000000c0)="3f030e0033e6140006001e0089e9aaa911d7c2290f0086dd1327c9167c64114a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe94f, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, r7, 0x1, {0x1, 0xf0}, 0xff}, 0x18) 2.09071873s ago: executing program 0 (id=1624): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)={@val={0x3, 0x800}, @val={0x0, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x14, 0x1400, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x3, 0x9, 0x0, 0x0, 0xff, 0xfffe, {0x20, 0x4, 0x2, 0x3, 0x0, 0x64, 0x6, 0x1, 0x21, 0xff, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x23, 0xd2, [@loopback, @empty, @broadcast, @empty, @dev={0xac, 0x14, 0x14, 0x33}, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}]}, @noop, @ssrr={0x89, 0x23, 0x67, [@remote, @dev={0xac, 0x14, 0x14, 0x26}, @dev={0xac, 0x14, 0x14, 0x11}, @loopback, @rand_addr=0x64010102, @loopback, @multicast1, @rand_addr=0x64010101]}, @generic={0x82, 0xe, "47d11734e129460e22ca598c"}, @timestamp={0x44, 0x14, 0x83, 0x0, 0x9, [0x66, 0x4, 0x9cdf, 0x0]}]}}}}}, 0xaa) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x60000002}]}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2d}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x90}, 0x1, 0x0, 0x0, 0x8054}, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x4008, 0x501902) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc0405519, 0x0) 2.00813451s ago: executing program 3 (id=1625): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace(0x19, r0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x7fffffff, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000500)=ANY=[@ANYBLOB="7f454c4604070003070000000000000002000300060000000903000038000000000000000e000000000020000100050000000000000000000300000008000000f30000007f00000026"], 0x58) close(r3) write$binfmt_misc(r3, &(0x7f0000000100)="dfc5d14681b6caf582fac4cf5f8cd0afbcd8e0d8ea7dd904fe10e292e851362aac971b96c2d45ea9967104e1ddfc51f5b92fe267e88aecd9f39bc21bdef5c725766e8ece181d1b2576a95bbe29867b8fbe118cc588aeb35c1aaf309cc11916d72819fd56595e7a3893c60ebd9875a9515f01fe5444bf1388a96654b66d9afa56eb828d7d83f3ce3c67b881713ff50248dafb543c4db0f00205a6d07e4c41f2b15da3b43c04a2e9b05d62167c23df8dbc1ac1217cd2a54b977db5cc157ab6ae9d982b9a2da44642d77524cd477742ee1e6b0bd1b4a37134535a31472fac2be08f98c2d6db3c9021e4725523212da8d2d9", 0xf0) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000440)={r1, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x12, 0x13, 0x1c, "339f020bbe05000000d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaaef2a565ef1e83323695c58d665000000000100", "a1163939c787a16c1ca43f8539f3d328970e00000072a964a019363e8776fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) r4 = signalfd(r1, &(0x7f0000000000), 0x8) ioctl$SNDRV_PCM_IOCTL_PAUSE(r4, 0x40044145, &(0x7f00000000c0)=0x101) r5 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0) close(r5) ioctl$BLKBSZSET(r2, 0x40081271, &(0x7f0000000200)=0x1) 1.963415404s ago: executing program 3 (id=1626): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) openat(r1, &(0x7f0000000940)='./file0\x00', 0x0, 0x19) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r2, 0x4d, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x1, 0x0, r0, &(0x7f0000000040)="9880378312a63e112602d9670ab688dbd0d40a0f4d8b9cb3af17658e2e4f8be7a2f40caf8cadd95b1c97eda546798277b267dc15abe1a12eaf2f0ce524588df014e8d7e56e49bf5e852f0b98aa", 0x3e8000072a, 0x1000000, 0x0, 0x10}]) 1.850628038s ago: executing program 0 (id=1627): r0 = syz_open_dev$video(&(0x7f0000000000), 0x8000, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfd, 0x0, 0x0, 0x2}, 0xe) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000000c0)={r2, 0x1, 0x4}, &(0x7f0000000100)=0x10) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x8, @raw_data="24c68d6a23e49bb0d4b5e7813d9d11b799b508b3643d1d213807b8ef1b8984ddba6ffc5f5d1411423f2b3bb545b61201ce62c16137bcf57c565a6287b9671ef47bbe381bcb378921bb13f489dcaf4f5f2edbefb84d75d32c899b3943ea607442bfb00c56ba7048bd50558250130f1e54b4df9f939a1dfa4496e7e1fe0ec0a3e9ae24420e6630625b304c7a8102a1fa8824edf26fbef59238ec895e9d35d234feebdbaebf84720ee47b9357c745e7ac2390a8825cda2e1cba0b75c519cb175a194023d672f843ce0a"}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$getregset(0x4205, r3, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1.743670993s ago: executing program 0 (id=1628): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x15, 0x0, &(0x7f0000000280)) (async) socketpair(0x3f, 0x1, 0xa, &(0x7f0000000000)) 1.731803524s ago: executing program 0 (id=1629): r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) (async) r1 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) tkill(r1, 0xb) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x4040, 0x0) close_range(r0, r0, 0x2) 1.671572068s ago: executing program 4 (id=1630): r0 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x40c100) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000080)=0x9, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000800)={0x3, 0x1, 0x4, 0x7, 0x3, 0x0, [{0x1, 0x100, 0xffffffffffffffde, '\x00', 0x405}, {0x1, 0x3, 0x0, '\x00', 0x8}, {0x800000000000000, 0xfffffffffffff001, 0xa, '\x00', 0x9}]}) (async) sendmmsg$inet6(r1, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, &(0x7f0000002880)=[{&(0x7f0000001780)="9c435a7de4c0ff7c4563074aa91bee4f6e90607e890a47d0be6a17fdc0c6a1796db4fe7dd11538645e1058e812536c926690b1b24c7efd5c00ecfb64781df49eab06e8d9c153ad38a9b439a4db81dc1e36f1e6f032183ebd46c2fd9827fc48c8cdb4f07e93b48410a25fdeded74f2bc99f878a19012e6b7b623763f2b4a717576faa2825abf02e2090bb34084a971ec99e558675a54179a2c8eec2cde79ad3c2f6dd3131a464f396a63c07a34b7e7016b5af1b7d7417c22a72fc036ac41b0ade14bf538417", 0xffe3}], 0x1}}], 0x1, 0x4001c00) preadv(r1, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/120, 0x78}, {&(0x7f0000000240)=""/103, 0x67}, {&(0x7f00000002c0)=""/217, 0xd9}, {&(0x7f00000003c0)=""/219, 0xdb}, {&(0x7f0000000700)=""/200, 0xc8}, {&(0x7f0000000580)=""/163, 0xa3}], 0x6, 0x1, 0x8) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2800000033000701000000000000005c927c00000c0001800600060080d800000800028004007280"], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x100000e, 0x80010, r0, 0xd4c8000) (async) r4 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000a00)={{0x14, 0x10, 0x7c, 0x0, 0x6000, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "d1"}]}]}]}]}], {0x20, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x40) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r4, 0xc004500a, &(0x7f0000000080)=0x1) (async) ioctl$VIDIOC_S_CROP(r0, 0x4014563c, &(0x7f00000000c0)={0x9, {0xfffffffc, 0x10001, 0x8, 0x9}}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, &(0x7f00000006c0)) (async) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, &(0x7f0000000180)=0xa) 1.507533136s ago: executing program 4 (id=1631): syz_usb_connect(0x5, 0x58, &(0x7f0000000000)=ANY=[@ANYBLOB="12010103892ca9201107300260810102030109024600018181900409040780052c2b6b080905000c02030a09cf09050a0208000f040909050e10ff03087f4009050b080002d5030909050102ff030005050725010208ff01"], &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000040)='FROZEN\x00', 0x7) sendfile(r1, r1, 0x0, 0x9) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000100)={0x0, 0xfffffffe, 0x1e, 0xe, 0x200, &(0x7f0000000140)="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"}) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KDFONTOP_SET(r3, 0x4b72, &(0x7f0000000100)={0x2000000, 0x0, 0x13, 0x4, 0x200, 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000003d00090000000000000000000100000004000000100001800c00108008500800e0000001080002"], 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000016c0)={'syztnl2\x00', &(0x7f0000001640)={'syztnl0\x00', 0x0, 0x40, 0x8000, 0x4, 0xffff, {{0xf, 0x4, 0x2, 0x2, 0x3c, 0x66, 0x0, 0x7, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @local, {[@timestamp_prespec={0x44, 0x1c, 0x51, 0x3, 0x5, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@dev={0xac, 0x14, 0x14, 0x3d}, 0xaff9}, {@multicast1, 0x53a7}]}, @lsrr={0x83, 0xb, 0x2c, [@multicast1, @local]}]}}}}}) sendmmsg$inet6(r2, &(0x7f0000003fc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)="17331cfdc4c34c234bc213aa98e3a7343ca18115c3f966a12d2da4139018570ebec61aad4be27e08c0ab23204826b8d358964938f1c22c8ad2431a526d2624c1e1422b14498e461b2c83457c2a57e798715684455e8b1d9cc9dc596dc83f09132f9e574597cafb7e29aa3c69db83be08160d8542029fad390d8f5af988624e5527bb97b93519d1dc2df74b739a1ac720b147cc93c1224bc45aba44eae9d0c28c28e19da784fe62f8f9689cad62d79ed983010d19e361f0899ba508bd89bc598749ca42f6eba0959b0cec3776fe", 0xcd}, {&(0x7f0000000200)="f8f7e3de61e4ee5f0bc3e8106bf8f66c2772604813c6e6eea2028521d1b5", 0x1e}], 0x2, &(0x7f00000003c0)=[@hopopts={{0x20, 0x29, 0x36, {0x5e, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0xc}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x32, 0x6, 0x2, 0x7, 0x0, [@local, @rand_addr=' \x01\x00', @private1]}}}], 0x68}}, {{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)="c6fb821d395308406bb489d4b71c59c1df1edbb760cce13067b2a9a0fc97aaa7b7caad8fccb7fc9a67115dcaa923961d4d11162f1b2e8f4304d79ce0a955ea9b33b803db1341e8dd5ea5234bc14d1c7d04a55be393afc57d35bacd7a6e6d955f5af2babfaf802eaec4847362893354868f0dc6cff2bb704b706ac3ad07a975fa0dcad98f2548009b032cded5c539bd5611feb5da27b9d5dcee091f260d7c95e9590960a8b6d71e", 0xa7}, {&(0x7f0000000440)="572d2a480dd7fc03c5545cfa388788d25bfee9a09fe92520c66370bae96326206477", 0x22}, {&(0x7f00000005c0)="c0175104a12f941437fab8dd2b965f815877b5ca81f2dda9881189e313ea024b26888e1cf95ad0c90c9e9fe3bb550cf8138b4d1b7f406c183dc2c9865985d11e3feb406a38968f5b0eddf8ee1a8d84b70d650762e2bb5c7f5a5ec1132b78dc4f7a1b456092cefdac4e8e60a9bde4763ac9394bd5da7c3e7a5256ae708087de918c1c487bfc42b46f158171353ba3d00be298b2f13e629c7070a05502f3", 0x9d}, {&(0x7f0000000680)="2ca992e47dec3a5371c916f199874a1597b2a45654150ee8f391ec941b959f1acc7f522964adc111ddf470f51dded8695cad56967fd5a6e37f1858e4a3e41592a26e9c0b0055f0e4ad895aabba7b806fc86fb639df2538272fd3fc6c76c50a51e6b6b9e2e9ae3414a3a81009353a4b957f5ebed50303278e7cd4a71bb5ca6fe3836690982b717b784e90cf13a06d714b15687f79bc8ef6ddb643149d22a37304d1af172d180b04ccdc25d2347e50f2f990a03454311e84315d94ffc9a426b22bb7535eeb15", 0xc5}, {&(0x7f0000000800)="351575fd8e0daad51f3331ff8187b8d68140b64ffeb1d7a4f9157104cc0475ce024ddb1ce3f73d8558889f66b5504af5dbc90b45ec58fc91ea017369510a44cdd7234af6fe8adee97df65722b035e9d5ba8327e09abd1d6763a8c8d47183a551eccb2dcc3e70803a4d84822e3da6959f6f8217bbb76bfb566d02083a2a2f9b23183ae5d352107975ec95295bba81839ea832fcbd34edd006ffd535852c9a9684979997a9741f3a055fb18f49", 0xac}, {&(0x7f00000008c0)="cf18d087e6cf6ef8a1a67d1398fdbdd9037c85f4cd29315f593c8cc7384e028faad971e8fc3de87a4948192ed3d5b6c77e65889e1287c2425d2af1757a9dd3f468f2fd8a4af3eaedb210e2a5d584c633bc2c16722a6003a70ba26d1edfddf20f25bdbef889e79059d15dad4f2b5a5151c474202372a40baaeb2f4630f045381cb391cbd335a1b4157c7199f2d8fc44ab59d3d3b825d370100af7f1645524ae8a9f2b9936766edbda5804c257e9f0ae", 0xaf}], 0x6, &(0x7f0000004140)=ANY=[@ANYBLOB="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"], 0x188}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000480)}, {&(0x7f0000000bc0)="5abfb4a196c48319b0f98c36c2d871a98462771a6a2b969db5f1fc11b34aa7c67e004584b71ea591a25a94f7fcb5cfbae7f1752b27a4ab5b1960e062894551e193772f0e643b64e57e539d76a12bdc30ca8f798fa0bf5462e5660f81789e0d418c6f5543506b22bf4f878b08e0179a8c68b20fdb447e10c0fe455858383ec209c7b89302a8bda82bb4b198f134524911dd8f6f30f1509047c45619ee847fa88f92768fe90b6934139873daa22cdb8fd9a1006998e9d62e7de126ea2466b566b2afd1", 0xc2}, {&(0x7f0000000cc0)="5b59542923b7386b544ce00445cf9f88108071a2248868b0fcc381ce9490a69b460857743a6d0fc1111cf1b2f7f663aff43c7246bd88c17c72e92b3ea22060fdfd60f4913f347c36ba6ccae8187ead2a7e54ddea0ea7dc611c2ac26ef8839b8c0f364088e4382d02f882c47910cc18b959d3ba0e14f386cff9fa7a14bbc42d51fa14bb66115244b8aef3dc80bf106584d2163e3e8216f45f92d9bd682daaa57465", 0xa1}, {&(0x7f0000001c00)="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", 0x1000}], 0x4, &(0x7f0000000d80)=[@dstopts={{0x150, 0x29, 0x37, {0x2c, 0x27, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x7}, @jumbo={0xc2, 0x4, 0x2}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x2, [0x0, 0x0]}, @generic={0x3, 0xdb, "b46b76d5c5c513734985d7b7e48cbee3f3478ba189550d701e10fb4e147c87c07e4cb1d5e08ee2e229b5ba280c889e4469f0901020862207dc1c15176d10cd993ffcf77a623384c5338f22ac2924cf816929f9b75c20abe037a975eda33567400fdad89968f13ea738b4b044c007b7114b06c30534daa54c7337b4c75f17f7fe20529fce003c43a50dbdf16fc8273bf1e8d8ed3c5a66073f06d01348d9eee7d4e63dfa72d23d1ed776634400f2fc7c843c7650a5de5e384e9c82900fb1988a1454a41e5938aa18b962073efe120d463b298beac79b9c0c9d36e4fc"}, @calipso={0x7, 0x40, {0x0, 0xe, 0x4, 0x7, [0xfffffffffffffffe, 0x81, 0x80000000, 0x1ff, 0x10000, 0x1000, 0x1]}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}, @hoplimit={{0x14, 0x29, 0x34, 0xe9c}}, @dstopts_2292={{0x20, 0x29, 0x4, {0x33, 0x0, '\x00', [@ra={0x5, 0x2, 0x4}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x62}}}], 0x1b8}}, {{&(0x7f0000000f40)={0xa, 0x4e23, 0x3, @private0, 0x7}, 0x1c, &(0x7f0000001480)=[{&(0x7f0000000f80)="d182eeb83b634154ef2f2d69507b42cccb51eb0e3f38fe57fec453616e748c7011f29cb2e34524fc739fde32fa8d059320dc7b075fdbea363e720aa758d3f6e2ec415f4a5a1958c588eb9f8e502c6adaf0471b05ccbba257ad5aeb862d3a94a141799e005b2f8950fd091175ef080f143aaa3d393de5ac9099369c74c7e24cf54ac1e6a7831cfdbb24d644d17542b50042c3f6483fcb3a5e936053b06846a5e165c501c27b781285d3d77dcd529e94fa07a3cc3725eec653ae05dd", 0xbb}, {&(0x7f0000002c00)="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", 0x1000}, {&(0x7f0000001040)="e17b762932a12f4793de7ced386ae988444a1b8fe3a1e43e6f5a2e78dfb6c12c", 0x20}, {&(0x7f0000001080)="f03e541fe175c6b4b582603918cd0859b0ff682960db3043438914990eaa4b6342a65dc055a7e95c6d4649f3bcd0eab1d4eafc95a323209c7110053b5d8b4b11ba03f5111186b1a2d4a0fed8e0682cccb20efca01a4585e6e170be6179756544485a37c095249b08f55e2cf3d24f0c69e24a7d76f43f3779f3e1bc6e9af9cefc5f8616792223e7d7cd84", 0x8a}, {&(0x7f0000001140)="02a9ef71fb943616dedbbe267db4ece74efe845198a6de49a1483a499fc913960ecbdf98b502c43b86e60f8e446f415f03b94174e2402b1d1baa07d7bbfe607cdc2f59593d43de058d4e8156b6efab2c18da17730d3d97a29fcc6707e258d3a4763b67ec94cbe9bf63021b70127e290dedd6b7933c7e94979a3595e46f368c95ab5261a46ab2c285c011c9cf6d8c6b43683bde6049a9f429fa76cb579d337845ccae7b74001ae8f60dfa18a0d5ab67cce41ab0bca68a6087a7ce8af949b209f3bdaf2ccf5e8a025e62508f1f2a6844cc1b556698c56b6937553623dbb639531b95ff16b91613", 0xe6}, {&(0x7f0000001240)="4b8ad118aa4fcd9dc73bfdabb7ba7cf57aac78feefae98abf73a43a536b9977d7b10263e1588e8605ce52c8ad1046c92ef84557136075ddb0e8af89ffda42649b5c3e71e1087c9ee6cb99da83fe5175d0e32f740ff9dac60a8147d417cac5e0c0f251f2de96086cf626e4852996ac4ec9189b027125d77c64eb894038cc8dd54094ba3dd2411122a3e067463a6e6452e098071a0c3e1da5b7c048d41c73ab02229c0450ff9f492faa2fcc27b60d42d21aec920b899000590fd35dfedc4431130dc5d3cc950535ac042d8ad1630617cd58ae7510bbf33ab17ffa9945e8ac8d0e1d64769af0bdfb19447a06b247e6c772417051180648112", 0xf7}, {&(0x7f0000001340)="6601eecc4468", 0x6}, {&(0x7f0000001380)="f05047fe66f942bc17d668d17d53b8d11a0c661fb84e9b26f9415bdd9c92ebbc7d3a4d39e3bcb23e38b6483f491f4fb12416f6f0142c0ef3282aec49f279d0f513d2b07dc21f57e4305f93c9c151aa221412e2d6d5584f031a1f33244fd70114b4af9a967b5c079b94bb9ecf46e3dcaaab01cf6330bfd369dc89af48a0abb8076513faac764a9f503be2d56a268e53eb6df0bb20de09d7bb7627e16d2c3d97c5e1e122e5949df1e6cd6de555", 0xac}, {&(0x7f0000001440)='|', 0x1}], 0x9}}, {{&(0x7f0000001540)={0xa, 0x4e24, 0x10001, @loopback, 0x5}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000001580)="e2de98e43f949cf5c996272f6c78ffefc57ef1fafacf34cc2182cf93e512f322620577bab69f3ca08a03f6eb0a1de7032c89ede6739deca7ea4db4d54f0ff518c6ba33f017df699513ade26d42d600cd76cc96f48e7d82d94a39680b42b15ac803ac268b356f87", 0x67}], 0x1, &(0x7f0000001700)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @pktinfo={{0x24, 0x29, 0x32, {@private1={0xfc, 0x1, '\x00', 0x1}, r6}}}, @rthdr={{0x98, 0x29, 0x39, {0x2e, 0x10, 0x1, 0xf, 0x0, [@private2, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @empty, @remote]}}}, @dstopts={{0x38, 0x29, 0x37, {0x32, 0x3, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x6, 0x6, [0xfffffffffffffff7]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @hopopts_2292={{0x70, 0x29, 0x36, {0x3c, 0xa, '\x00', [@calipso={0x7, 0x48, {0x3, 0x10, 0x2, 0x8000, [0x4, 0x80, 0x6, 0x0, 0x5, 0xffffffffffffffff, 0x8f8, 0xffffffffffffff81]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}]}}}, @rthdrdstopts={{0x130, 0x29, 0x37, {0xff, 0x22, '\x00', [@jumbo={0xc2, 0x4, 0x7fffffff}, @jumbo={0xc2, 0x4, 0x9ae9}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @ra={0x5, 0x2, 0xffff}, @calipso={0x7, 0x10, {0x3, 0x2, 0x9, 0x2, [0x90]}}, @generic={0x8, 0xbe, "feac0cb7408c1a52d606e97857a54f88494016a8b21fc68d29df5713baf4cd725c66c4447ce096a4c58f6d2a4293a2fd6e8e410138266690ef273abec1d2538fc6e1d31d03d2b5d2df58c7b0477b35e6e0875803555dfd597d85f2088362fdfb94fbaeb6341ad2b0c0ddc90f5defdd2f2193aa2f77e1d83cb83e94989792623c26a90887ab8585c96d5b9cf0bbdaf292fdcb13a1af6c8a1337ac016bf212d6f807d25a9ac0a97dbd01db7ce9a8041a5f5d47c02753675c863a8f50bd1477"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x4}}], 0x2c8}}, {{&(0x7f0000001a00)={0xa, 0x4e24, 0x6, @mcast1, 0x1103}, 0x1c, &(0x7f0000001a40)=[{&(0x7f0000003c00)="6bbd15938dd7ee645f68a157d756973958208a657e784ccfa5a2c0804216fd401e946ae05ce9271a65c83cf066d559cdc4f1e2fed64924b062d5521a4537585fc46f71bfb2129c6cca5324d05e526ff93349d1913f89c20b64234de1c2d0a50e85087db6bda7a62e6c9ac08b760d2edf254795190e668bdf5e1c6b1ccd9796a93622111b48bca9047d05f51a170568c980cb", 0x92}, {&(0x7f0000003cc0)="6c67444270361eb3775d003469f4de5c5ac4467d053c70a50089acb73e90344815259dbd6d4c011eb043c32295aa6c857bd572c2e099c63073a46fb5d7acefd3a84bee9ac8a0fe454963d3aef352ed8201758c2aae10b540dff2c7b088b25e39f0be14cd4db75ae663937eb545a6bf5766bee2407225a0c1c43cfa03498a32d15d0a71fd2fa2d9a6136e4a7014ab4232b8cae9faa8e2", 0x96}, {&(0x7f0000003d80)="308adc592e720f8d9e4c18c1964505effd84b57ff9fc13d4370ee358e7368de318022934397d4a36f167fbcc2fbf92fc80f0884ac7457bc7e8d71544b89090afd2ef215a49a7aaeedcae5570a25a044e90e79e23f3a1d04ef3a63134225495253ce632806227c3fadc7091a7e54c2dd1f9353bdc32bf3b124cfee80800a448f50afffda2f836df95802ad66c2d762e67d2dd3c7d1f64524be7db6f9dc613b2652c78aa021c", 0xa5}, {&(0x7f0000003e40)="d9d2cc40658ccfb4d5a26a4ad25aa507c21e9e5ba66a0ea2394002d087fd1dfae34ec8e2eda44dd8725504d632bbe5e57543dd3aa9544ba13e8510b311b96106d248f6771f260cb3d612f30b1ce4cd9107882eff0a1fc24f1888a9ce5b6b698620276f353733716d1df6a850d44295a8a165b791e238adacda682fb39088448fc06b75ef2867125c7583c03ec7c755389b50d09c2407162935d81012b045bdc8978e7ad5c4fba78ef0f0838b3ba690d20942769261082f5e1b55d98121caebf4ff567b844e688bee850055a44014396066a6c3b577449f9ccb2d", 0xda}], 0x4, &(0x7f0000003f40)=[@tclass={{0x14, 0x29, 0x43, 0x5}}, @tclass={{0x14, 0x29, 0x43, 0xffffffff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x2}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x84}}}, @tclass={{0x14, 0x29, 0x43, 0x5f7}}], 0x78}}], 0x6, 0x8084) setsockopt$sock_linger(r5, 0x1, 0x45, &(0x7f0000000000)={0x0, 0x4}, 0x8) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x14, 0x2, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f00000001c0)) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000001ac0)={r7, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "ff9f020bbe82b398b1c4369d03740250ceaac594b1b3d741dd17c1ac0d38ef2a565ef1e83363000000000000d3ab00", "a9103939c787a16c1ca43f80026d1f1e4da069630089d130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b7e7772fd29f35239d2", "24431a1e0400000000000000000000000010e200000000000000000100001600", [0x80]}}) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xd2, 0x2ac, 0x0, 0x9, 0x13, 0x1d, "8975301576b0cf0900245518580ce0c8bf604cca41f31c108938fcfa39f77b156fc043cffd00000000000900000000000000d0f08e8ad896ba67a00973defa00", "8b609009aaa722681a1e2513b6e5ae9ba9e306ee1dba533f02e1b69da6da6ec889fee40080000827cc7d24fdc26f2395d702020000adb8fb1703e47463b969e4", "ca1bf5ff2b4a000000000000008218040000db00", [0x0, 0x2040000]}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) 1.507234065s ago: executing program 0 (id=1632): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00130000017c0000040042800c0001"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1303000054009155090893b31b71a54a07"], 0xfe33) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000011006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004000202080002000300010004000400eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, 0x0) 1.474595384s ago: executing program 0 (id=1633): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, &(0x7f0000000740)={0x1, @vbi={0x1d, 0x7, 0x9, 0x34324948, [0xfffffff9, 0x4], [0xdf61, 0x4], 0x1}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') ppoll(&(0x7f0000000180)=[{r1}], 0x1, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmmsg(r2, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4040000) syz_open_dev$video(&(0x7f0000000000), 0x7, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006"], 0x69) close(r3) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000000c0)=0x9, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000001280)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x800, 0x1, 0x2, 0x3, 0x4, 0x8}, 0x20) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000b40)={{}, "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"}) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 977.098061ms ago: executing program 3 (id=1634): capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$sg(&(0x7f0000000080), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)={{0x14, 0x10, 0x1, 0x2}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_USERDATA={0x22, 0x7, 0x1, 0x0, "254fcd43be705a8dd8679264bed084a9bf2618e268e94421175049df47ea"}]}, @NFT_MSG_DELSETELEM={0x5c, 0xe, 0xa, 0x301, 0x0, 0x0, {0xf}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x44, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0xc0, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800000000000}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x100000001}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x3, 'wg2\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}, @NFTA_HOOK_DEV={0x14, 0x3, 'bond_slave_0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x1c, 0x6, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}]}], {0x14, 0x10}}, 0x244}}, 0x8000) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x2a) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}}) write$P9_RVERSION(r7, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff070000000837"], 0xfffffd97) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xc, {"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", 0x7c4}}, 0x1006) ioctl$sock_bt_hidp_HIDPCONNADD(r9, 0x400448c8, &(0x7f0000000540)={r1, r1, 0x4d, 0x3e, &(0x7f0000000280)="a7abb22a9464060733ac832ef1d0906102bc7039b6ed74d9f39b367e1f8310475351ec6df44828606f6f69e0a638842650b0093bb982faae5cfe11e44d0c", 0xd6, 0xf4, 0xf74, 0x101, 0x9, 0x1, 0x7, 'syz0\x00'}) r10 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) getdents64(r10, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@dev, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) r12 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r12, 0x6, 0x0, 0x0, 0x0) r13 = fsmount(r12, 0x1, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r13, 0x400448c9, &(0x7f0000000480)={@none, 0x7}) fchdir(r13) r14 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) lseek(r14, 0xfffffffffffffffb, 0x0) getgroups(0x1, &(0x7f0000000200)=[0xee01]) fchownat(r10, &(0x7f0000000100)='./file0\x00', r11, r15, 0x400) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 0s ago: executing program 4 (id=1635): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x100) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0xffffffd, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000000)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80024, 0x2, 0x4, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r2, 0x80480911, 0x200000000005) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x7fffffff, 0x0) ioctl$RTC_VL_CLR(r2, 0x7014) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r5) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x14, r6, 0xc8036ab6d6cbef07, 0x0, 0x25dfd3fe}, 0x14}, 0x1, 0x0, 0x0, 0x40c4}, 0x800) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000000440)={r3, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x12, 0x13, 0x1c, "339f020bbe05000000d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaaef2a565ef1e83323695c58d665000000000100", "a1163939c787a16c1ca43f8539f3d328970e00000072a964a019363e8776fd29f35239d200", "24431a3977a68e174f005e95ac6a00"}}) kernel console output (not intermixed with test programs): : fail, usb_gadget_register_driver returned -16 [ 317.167461][ T5937] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 317.217907][ T9474] nbd1: detected capacity change from 0 to 127 [ 317.282585][ T5849] block nbd1: Receive control failed (result -32) [ 317.282585][ T5854] block nbd1: Receive control failed (result -104) [ 317.330742][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 317.339866][ T5937] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 317.349066][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.357057][ T5937] usb 1-1: Product: syz [ 317.362367][ T5937] usb 1-1: Manufacturer: syz [ 317.366977][ T5937] usb 1-1: SerialNumber: syz [ 317.377989][ T5937] usb 1-1: config 0 descriptor?? [ 317.592787][ T5937] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 317.794998][ T9472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.805002][ T9472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.901197][ T9502] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1107'. [ 317.935498][ T9502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1107'. [ 318.146645][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.161222][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.171158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.190793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.199654][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.209191][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.230138][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.474664][ T9522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1114'. [ 318.947793][ T5937] usb write operation failed. (-71) [ 318.964105][ T5937] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 318.978958][ T5937] dvbdev: DVB: registering new adapter (Terratec H7) [ 318.985808][ T5937] usb 1-1: media controller created [ 318.991498][ T5937] usb read operation failed. (-71) [ 318.996987][ T5937] usb write operation failed. (-71) [ 319.008231][ T5937] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 319.027405][ T5937] usb 1-1: USB disconnect, device number 78 [ 319.567927][ T9] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 319.607390][ T5937] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 319.727374][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 319.735295][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 319.747939][ T9] usb 3-1: config 16 has an invalid interface number: 4 but max is 0 [ 319.756162][ T9] usb 3-1: config 16 has no interface number 0 [ 319.762714][ T9] usb 3-1: config 16 interface 4 has no altsetting 0 [ 319.769585][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 319.777416][ T5845] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 319.777793][ T9] usb 3-1: New USB device found, idVendor=1546, idProduct=1342, bcdDevice=eb.4e [ 319.794891][ T5937] usb 1-1: config 3 has an invalid interface number: 173 but max is 0 [ 319.803249][ T5937] usb 1-1: config 3 has no interface number 0 [ 319.810833][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.818955][ T5937] usb 1-1: config 3 interface 173 has no altsetting 0 [ 319.825947][ T9] usb 3-1: Product: syz [ 319.830334][ T9] usb 3-1: Manufacturer: syz [ 319.835314][ T9] usb 3-1: SerialNumber: syz [ 319.841985][ T5937] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b [ 319.851238][ T5937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.860718][ T5937] usb 1-1: Product: syz [ 319.871833][ T5937] usb 1-1: Manufacturer: syz [ 319.879005][ T5937] usb 1-1: SerialNumber: syz [ 319.947357][ T5845] usb 4-1: Using ep0 maxpacket: 32 [ 319.955508][ T5845] usb 4-1: config 0 has an invalid interface number: 37 but max is 1 [ 319.964300][ T5845] usb 4-1: config 0 has no interface number 1 [ 319.979305][ T5845] usb 4-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=20.a3 [ 319.988560][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=3 [ 319.996669][ T5845] usb 4-1: Product: syz [ 320.001019][ T5845] usb 4-1: Manufacturer: syz [ 320.005845][ T5845] usb 4-1: SerialNumber: syz [ 320.015697][ T5845] usb 4-1: config 0 descriptor?? [ 320.081683][ T9539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.090970][ T9539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.148915][ T9] usb 3-1: USB disconnect, device number 87 [ 320.158322][ T5937] usb 1-1: selecting invalid altsetting 3 [ 320.167262][ T5937] comedi comedi5: could not set alternate setting 3 in high speed [ 320.175124][ T5937] usbdux 1-1:3.173: driver 'usbdux' failed to auto-configure device. [ 320.209000][ T5937] usbdux 1-1:3.173: probe with driver usbdux failed with error -22 [ 320.219474][ T5937] usb 1-1: USB disconnect, device number 79 [ 320.231803][ T5845] qcserial 4-1:0.37: Qualcomm USB modem converter detected [ 320.371014][ T9570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 320.380182][ T9570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.539486][ T9593] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1136'. [ 321.548801][ T9593] 0X: renamed from caif0 [ 321.639530][ T9593] 0X: entered allmulticast mode [ 321.645009][ T9593] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 322.512692][ T9] usb 4-1: USB disconnect, device number 93 [ 322.538257][ T9] qcserial 4-1:0.37: device disconnected [ 323.015836][ T9680] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1171'. [ 323.358798][ T9698] binder: 9696:9698 ioctl 400c6615 0 returned -22 [ 323.376139][ T9698] binder: 9696:9698 ioctl 4018620d 0 returned -22 [ 323.395855][ T5845] kernel read not supported for file /vcs (pid: 5845 comm: kworker/1:3) [ 323.924245][ T9732] overlay: Unknown parameter 'euid>00000000000000000000' [ 324.014497][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 324.021114][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.158638][ T9745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.177729][ T9745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.198253][ T9745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.237813][ T9745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.316364][ T9754] mmap: syz.3.1201 (9754) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 324.345576][ T9757] binder: 9756:9757 ioctl 400c6615 0 returned -22 [ 324.353992][ T9757] binder: 9756:9757 ioctl 4018620d 0 returned -22 [ 324.372237][ T5937] kernel read not supported for file /vcs (pid: 5937 comm: kworker/0:7) [ 324.440731][ T9759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1203'. [ 324.548003][ T9765] fuse: Bad value for 'group_id' [ 324.553096][ T9765] fuse: Bad value for 'group_id' [ 324.559253][ T9765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1206'. [ 324.572581][ T9768] fuse: Bad value for 'group_id' [ 324.577848][ T9768] fuse: Bad value for 'group_id' [ 324.584223][ T9768] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1207'. [ 324.639420][ T9770] fuse: Bad value for 'group_id' [ 324.644431][ T9770] fuse: Bad value for 'group_id' [ 324.651519][ T9770] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1208'. [ 324.695383][ T9772] netlink: 'syz.0.1209': attribute type 8 has an invalid length. [ 324.900829][ T9784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.901547][ T9784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.910456][ T9784] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.910968][ T9784] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 325.167335][ T5951] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 325.217461][ T896] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 325.327350][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 325.330573][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.330607][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.330648][ T5951] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 325.330673][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.332975][ T5951] usb 1-1: config 0 descriptor?? [ 325.382515][ T896] usb 3-1: Using ep0 maxpacket: 16 [ 325.393774][ T896] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.393822][ T896] usb 3-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 325.393852][ T896] usb 3-1: config 0 interface 0 has no altsetting 0 [ 325.393886][ T896] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00 [ 325.393912][ T896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.396935][ T896] usb 3-1: config 0 descriptor?? [ 325.551921][ T5951] usbhid 1-1:0.0: can't add hid device: -71 [ 325.552033][ T5951] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 325.562364][ T5951] usb 1-1: USB disconnect, device number 80 [ 325.700475][ T9788] nbd: couldn't find a device at index -373156329 [ 325.831883][ T9800] fuse: Bad value for 'group_id' [ 325.831904][ T9800] fuse: Bad value for 'group_id' [ 325.833017][ T9800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1217'. [ 325.848020][ T9802] netlink: 'syz.0.1218': attribute type 8 has an invalid length. [ 326.077046][ T9812] fuse: Bad value for 'group_id' [ 326.082524][ T9812] fuse: Bad value for 'group_id' [ 326.089627][ T9812] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1222'. [ 326.130079][ T896] usbhid 3-1:0.0: can't add hid device: -71 [ 326.136253][ T896] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 326.150852][ T896] usb 3-1: USB disconnect, device number 88 [ 326.199119][ T9815] svc: failed to register nfsdv3 RPC service (errno 111). [ 326.209825][ T9815] svc: failed to register nfsaclv3 RPC service (errno 111). [ 326.321686][ T9821] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 326.332054][ T9821] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 326.686472][ T9828] netlink: 'syz.3.1227': attribute type 8 has an invalid length. [ 326.928013][ T5951] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 326.987722][ T5845] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 327.098756][ T9842] sctp: [Deprecated]: syz.0.1232 (pid 9842) Use of struct sctp_assoc_value in delayed_ack socket option. [ 327.098756][ T9842] Use struct sctp_sack_info instead [ 327.120050][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.132239][ T5951] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.143662][ T5951] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 327.158290][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 327.164242][ T5951] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 327.187564][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.193728][ T9845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.204775][ T5845] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 327.205656][ T9845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.223178][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.233957][ T5951] usb 3-1: config 0 descriptor?? [ 327.241672][ T5845] usb 4-1: Product: syz [ 327.250163][ T5845] usb 4-1: Manufacturer: syz [ 327.254849][ T5845] usb 4-1: SerialNumber: syz [ 327.263765][ T9845] netlink: 'syz.1.1233': attribute type 27 has an invalid length. [ 327.269426][ T5845] usb 4-1: config 0 descriptor?? [ 327.280312][ T9845] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 327.295270][ T9845] bridge0: port 1(bridge_slave_0) entered learning state [ 327.495696][ T5845] usb 4-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 327.657896][ T9827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.666865][ T9827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.672840][ T9853] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1236'. [ 327.686928][ T5951] plantronics 0003:047F:FFFF.001C: reserved main item tag 0xd [ 327.711652][ T9831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 327.729130][ T9831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 327.729204][ T5951] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 327.771112][ T9857] netlink: 'syz.0.1237': attribute type 4 has an invalid length. [ 327.925457][ T44] usb 3-1: USB disconnect, device number 89 [ 328.035528][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.044336][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.056759][ T9871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.066407][ T9871] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.177346][ T896] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 328.329316][ T896] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.339435][ T896] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 328.348625][ T896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.360347][ T896] usb 1-1: config 0 descriptor?? [ 328.670604][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1245'. [ 328.737788][ T9] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 328.781610][ T896] lenovo 0003:17EF:6047.001D: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0 [ 328.837634][ T5845] usb write operation failed. (-71) [ 328.870193][ T5845] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 328.882625][ T9881] svc: failed to register nfsdv3 RPC service (errno 111). [ 328.892568][ T5845] dvbdev: DVB: registering new adapter (Terratec H7) [ 328.898153][ T9881] svc: failed to register nfsaclv3 RPC service (errno 111). [ 328.899975][ T5845] usb 4-1: media controller created [ 328.917547][ T5845] usb read operation failed. (-71) [ 328.919839][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 328.925287][ T5845] usb write operation failed. (-71) [ 328.939049][ T5845] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -5 [ 328.941061][ T9] usb 3-1: config 3 has an invalid interface number: 173 but max is 0 [ 328.956902][ T9] usb 3-1: config 3 has no interface number 0 [ 328.963195][ T9] usb 3-1: config 3 interface 173 has no altsetting 0 [ 328.963399][ T5845] usb 4-1: USB disconnect, device number 94 [ 328.973305][ T9] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=5a.0b [ 328.992764][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.003097][ T9] usb 3-1: Product: syz [ 329.008306][ T9] usb 3-1: Manufacturer: syz [ 329.013223][ T9] usb 3-1: SerialNumber: syz [ 329.066021][ T9867] kvm: pic: non byte write [ 329.259669][ T9] usb 3-1: selecting invalid altsetting 3 [ 329.268142][ T9] comedi comedi5: could not set alternate setting 3 in high speed [ 329.276528][ T9] usbdux 3-1:3.173: driver 'usbdux' failed to auto-configure device. [ 329.298745][ T9] usbdux 3-1:3.173: probe with driver usbdux failed with error -22 [ 329.314126][ T9] usb 3-1: USB disconnect, device number 90 [ 329.427450][ T5845] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 329.550738][ T896] lenovo 0003:17EF:6047.001D: Fn-lock setting failed: -71 [ 329.551171][ T896] lenovo 0003:17EF:6047.001D: Sensitivity setting failed: -71 [ 329.571604][ T896] usb 1-1: USB disconnect, device number 81 [ 329.598894][ T5845] usb 4-1: Using ep0 maxpacket: 8 [ 329.605534][ T5845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.608416][ T5845] usb 4-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 329.626124][ T5845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.637276][ T5845] usb 4-1: Product: syz [ 329.637302][ T5845] usb 4-1: Manufacturer: syz [ 329.637317][ T5845] usb 4-1: SerialNumber: syz [ 329.648060][ T5845] usb 4-1: config 0 descriptor?? [ 329.675513][ T5845] comedi comedi5: Wrong number of endpoints [ 329.682259][ T5845] dt9812 4-1:0.0: driver 'dt9812' failed to auto-configure device. [ 329.897435][ T9889] netlink: 'syz.3.1248': attribute type 27 has an invalid length. [ 329.897459][ T9889] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 329.897560][ T9889] bridge0: port 1(bridge_slave_0) entered learning state [ 329.900080][ T5845] usb 4-1: USB disconnect, device number 95 [ 330.450644][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.471897][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.493728][ T9911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 330.511275][ T9911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 330.580306][ T9917] netlink: 'syz.0.1260': attribute type 1 has an invalid length. [ 330.597396][ T9917] netlink: 10916 bytes leftover after parsing attributes in process `syz.0.1260'. [ 330.612926][ T9917] nbd: couldn't find device at index 53 [ 330.788562][ T5845] hid-generic 0000:0000:0000.001E: unknown main item tag 0x0 [ 330.811458][ T5845] hid-generic 0000:0000:0000.001E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 331.136884][ T9933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 331.146971][ T9933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 331.148597][ T9933] netlink: 'syz.1.1266': attribute type 1 has an invalid length. [ 332.127341][ T896] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 332.280034][ T896] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 332.280066][ T896] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 332.280109][ T896] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 332.280132][ T896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.485664][ T896] usb 3-1: usb_control_msg returned -32 [ 332.485728][ T896] usbtmc 3-1:16.0: can't read capabilities [ 332.488880][ T9972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 332.489283][ T9972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 332.552509][ T5845] usb 3-1: USB disconnect, device number 91 [ 332.660747][ T9979] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 332.667191][ T9980] 9pnet_fd: Insufficient options for proto=fd [ 332.861163][ T5845] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 332.880828][ T9985] fuse: Bad value for 'group_id' [ 332.885915][ T9985] fuse: Bad value for 'group_id' [ 332.886175][ T5845] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 332.916850][ T9985] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 332.975115][ T9989] fuse: Bad value for 'group_id' [ 332.985837][ T9989] fuse: Bad value for 'group_id' [ 333.005032][ T9989] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1283'. [ 333.396053][T10007] netlink: 'syz.0.1289': attribute type 1 has an invalid length. [ 333.404786][T10007] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1289'. [ 333.413980][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1289'. [ 333.430952][T10007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 333.461722][T10007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 333.531465][T10018] fuse: Bad value for 'group_id' [ 333.536493][T10018] fuse: Bad value for 'group_id' [ 333.546396][T10018] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1293'. [ 333.592796][T10020] fuse: Bad value for 'group_id' [ 333.599005][T10020] fuse: Bad value for 'group_id' [ 333.605118][T10020] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1295'. [ 333.667352][ T9] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 333.840303][ T9] usb 1-1: config 0 interface 0 altsetting 251 has an invalid descriptor for endpoint zero, skipping [ 333.852721][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 333.861991][ T9] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 333.874911][ T9] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 333.885436][ T9] usb 1-1: Product: syz [ 333.890606][ T9] usb 1-1: Manufacturer: syz [ 333.895239][ T9] usb 1-1: SerialNumber: syz [ 333.904944][ T9] usb 1-1: config 0 descriptor?? [ 333.937073][ T9] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 333.967301][ T896] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 333.981751][ T6379] udevd[6379]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 334.115798][ T5845] usb 1-1: USB disconnect, device number 82 [ 334.132950][ T896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.155076][ T896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 334.171638][ T896] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 334.186124][ T896] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 334.195427][ T896] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.205816][ T896] usb 3-1: config 0 descriptor?? [ 334.397329][ T24] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 334.527336][ T24] usb 4-1: device descriptor read/64, error -71 [ 334.618718][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.627726][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.640290][ T896] plantronics 0003:047F:FFFF.0020: reserved main item tag 0xd [ 334.660698][ T896] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 334.767346][ T24] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 334.840972][ T896] usb 3-1: USB disconnect, device number 92 [ 334.897386][ T24] usb 4-1: device descriptor read/64, error -71 [ 335.007551][ T24] usb usb4-port1: attempt power cycle [ 335.347374][ T24] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 335.382324][ T24] usb 4-1: device descriptor read/8, error -71 [ 335.393687][T10047] fuse: Bad value for 'group_id' [ 335.399820][T10047] fuse: Bad value for 'group_id' [ 335.406018][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1306'. [ 335.627304][ T24] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 335.667771][ T24] usb 4-1: device descriptor read/8, error -71 [ 335.723965][T10062] overlayfs: overlapping lowerdir path [ 335.768041][T10065] FAULT_INJECTION: forcing a failure. [ 335.768041][T10065] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 335.781669][T10065] CPU: 1 UID: 0 PID: 10065 Comm: syz.0.1313 Not tainted syzkaller #0 PREEMPT(full) [ 335.781695][T10065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.781714][T10065] Call Trace: [ 335.781725][T10065] [ 335.781734][T10065] dump_stack_lvl+0x189/0x250 [ 335.781760][T10065] ? __pfx____ratelimit+0x10/0x10 [ 335.781782][T10065] ? __pfx_dump_stack_lvl+0x10/0x10 [ 335.781802][T10065] ? __pfx__printk+0x10/0x10 [ 335.781825][T10065] ? __might_fault+0xb0/0x130 [ 335.781856][T10065] should_fail_ex+0x414/0x560 [ 335.781890][T10065] _copy_from_user+0x2d/0xb0 [ 335.781917][T10065] __se_sys_sched_setattr+0x1b1/0x590 [ 335.781938][T10065] ? fput+0xa0/0xd0 [ 335.781968][T10065] ? __pfx___se_sys_sched_setattr+0x10/0x10 [ 335.781986][T10065] ? ksys_write+0x22a/0x250 [ 335.782017][T10065] ? do_syscall_64+0xbe/0xfa0 [ 335.782042][T10065] do_syscall_64+0xfa/0xfa0 [ 335.782064][T10065] ? lockdep_hardirqs_on+0x9c/0x150 [ 335.782085][T10065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.782104][T10065] ? clear_bhb_loop+0x60/0xb0 [ 335.782128][T10065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.782147][T10065] RIP: 0033:0x7f754d38eec9 [ 335.782175][T10065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.782192][T10065] RSP: 002b:00007f754e153038 EFLAGS: 00000246 ORIG_RAX: 000000000000013a [ 335.782212][T10065] RAX: ffffffffffffffda RBX: 00007f754d5e5fa0 RCX: 00007f754d38eec9 [ 335.782227][T10065] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000000 [ 335.782240][T10065] RBP: 00007f754e153090 R08: 0000000000000000 R09: 0000000000000000 [ 335.782252][T10065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.782263][T10065] R13: 00007f754d5e6038 R14: 00007f754d5e5fa0 R15: 00007fffcad218c8 [ 335.782295][T10065] [ 335.979175][ T24] usb usb4-port1: unable to enumerate USB device [ 336.001675][T10067] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1314'. [ 336.153986][T10073] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 336.290872][T10080] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 336.472283][T10089] FAULT_INJECTION: forcing a failure. [ 336.472283][T10089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.486366][T10089] CPU: 1 UID: 0 PID: 10089 Comm: syz.2.1322 Not tainted syzkaller #0 PREEMPT(full) [ 336.486391][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 336.486403][T10089] Call Trace: [ 336.486410][T10089] [ 336.486419][T10089] dump_stack_lvl+0x189/0x250 [ 336.486443][T10089] ? __pfx____ratelimit+0x10/0x10 [ 336.486463][T10089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 336.486483][T10089] ? __pfx__printk+0x10/0x10 [ 336.486512][T10089] should_fail_ex+0x414/0x560 [ 336.486548][T10089] _copy_to_user+0x31/0xb0 [ 336.486575][T10089] simple_read_from_buffer+0xe1/0x170 [ 336.486606][T10089] proc_fail_nth_read+0x1b3/0x220 [ 336.486645][T10089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.486668][T10089] ? rw_verify_area+0x2a6/0x4d0 [ 336.486690][T10089] ? __lock_acquire+0xab9/0xd20 [ 336.486712][T10089] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 336.486732][T10089] vfs_read+0x200/0xa30 [ 336.486751][T10089] ? fdget_pos+0x247/0x320 [ 336.486780][T10089] ? __pfx___mutex_lock+0x10/0x10 [ 336.486804][T10089] ? __pfx_vfs_read+0x10/0x10 [ 336.486825][T10089] ? __fget_files+0x2a/0x420 [ 336.486855][T10089] ? __fget_files+0x3a0/0x420 [ 336.486891][T10089] ? __fget_files+0x2a/0x420 [ 336.486925][T10089] ksys_read+0x145/0x250 [ 336.486945][T10089] ? __pfx_ksys_read+0x10/0x10 [ 336.486963][T10089] ? do_syscall_64+0xbe/0xfa0 [ 336.486982][T10089] do_syscall_64+0xfa/0xfa0 [ 336.486997][T10089] ? lockdep_hardirqs_on+0x9c/0x150 [ 336.487013][T10089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.487026][T10089] ? clear_bhb_loop+0x60/0xb0 [ 336.487043][T10089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.487056][T10089] RIP: 0033:0x7f8fed38d8dc [ 336.487069][T10089] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 336.487092][T10089] RSP: 002b:00007f8fee198030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 336.487106][T10089] RAX: ffffffffffffffda RBX: 00007f8fed5e5fa0 RCX: 00007f8fed38d8dc [ 336.487116][T10089] RDX: 000000000000000f RSI: 00007f8fee1980a0 RDI: 0000000000000003 [ 336.487124][T10089] RBP: 00007f8fee198090 R08: 0000000000000000 R09: 0000000000000000 [ 336.487133][T10089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 336.487140][T10089] R13: 00007f8fed5e6038 R14: 00007f8fed5e5fa0 R15: 00007ffe1da307c8 [ 336.487161][T10089] [ 336.537384][ T896] usb 1-1: new low-speed USB device number 83 using dummy_hcd [ 336.871909][ T896] usb 1-1: device descriptor read/64, error -71 [ 337.135063][ T896] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 337.198385][ T5937] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 337.243082][T10114] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 337.252966][T10114] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1326'. [ 337.267375][ T896] usb 1-1: device descriptor read/64, error -71 [ 337.358189][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 337.378948][ T5937] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.394190][ T896] usb usb1-port1: attempt power cycle [ 337.400484][ T5937] usb 3-1: config 4 has no interfaces? [ 337.409885][ T5937] usb 3-1: string descriptor 0 read error: -22 [ 337.416404][ T5937] usb 3-1: New USB device found, idVendor=1410, idProduct=1110, bcdDevice=77.ca [ 337.428696][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.653199][T10103] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 337.664914][T10103] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 337.686030][ T5845] usb 3-1: USB disconnect, device number 93 [ 337.757617][ T5937] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 337.771126][ T896] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 337.797791][ T896] usb 1-1: device descriptor read/8, error -71 [ 337.909157][ T5937] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 337.918000][ T5937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.928156][ T5937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.937030][ T5937] usb 4-1: config 1 has no interface number 0 [ 337.943340][ T5937] usb 4-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30 [ 337.954126][ T5937] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32 [ 337.969178][ T5937] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 337.978519][ T5937] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.986801][ T5937] usb 4-1: Product: syz [ 337.991030][ T5937] usb 4-1: Manufacturer: syz [ 337.995635][ T5937] usb 4-1: SerialNumber: syz [ 338.037530][ T896] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 338.059433][ T896] usb 1-1: device descriptor read/8, error -71 [ 338.167584][ T896] usb usb1-port1: unable to enumerate USB device [ 338.420561][ T5845] usb 4-1: USB disconnect, device number 100 [ 339.141978][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.151946][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.162915][T10148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.171719][T10148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 339.347347][ T5845] usb 4-1: new low-speed USB device number 101 using dummy_hcd [ 339.499158][ T5845] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 339.517254][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.537331][ T5937] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 339.546654][ T5845] usb 4-1: config 0 descriptor?? [ 339.677337][ T5937] usb 3-1: device descriptor read/64, error -71 [ 339.807414][ T24] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 339.917398][ T5937] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 339.966810][ C1] sd 0:0:1:0: [sda] tag#333 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 339.977178][ C1] sd 0:0:1:0: [sda] tag#333 CDB: Read(6) 08 00 0c 6a 08 48 [ 339.986731][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.994344][T10145] syzkaller1: entered promiscuous mode [ 340.000204][ T24] usb 1-1: New USB device found, idVendor=20b7, idProduct=0713, bcdDevice=3a.ba [ 340.004189][T10145] syzkaller1: entered allmulticast mode [ 340.012349][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.025594][ T24] usb 1-1: Product: syz [ 340.030972][ T24] usb 1-1: Manufacturer: syz [ 340.035626][ T24] usb 1-1: SerialNumber: syz [ 340.042669][ T24] usb 1-1: config 0 descriptor?? [ 340.051773][ T24] ftdi_sio 1-1:0.0: Ignoring interface reserved for JTAG [ 340.057896][ T5937] usb 3-1: device descriptor read/64, error -71 [ 340.167942][ T5937] usb usb3-port1: attempt power cycle [ 340.249909][ T44] usb 1-1: USB disconnect, device number 87 [ 340.280047][ T5845] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 340.290469][ T5845] asix 4-1:0.0: probe with driver asix failed with error -71 [ 340.305062][ T5845] usb 4-1: USB disconnect, device number 101 [ 340.507387][ T5937] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 340.528552][ T5937] usb 3-1: device descriptor read/8, error -71 [ 340.767381][ T5937] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 340.788045][ T5937] usb 3-1: device descriptor read/8, error -71 [ 340.907703][ T5937] usb usb3-port1: unable to enumerate USB device [ 340.984392][T10174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 340.997510][T10174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 341.007999][T10174] tipc: Resetting bearer [ 341.016029][T10174] veth0_vlan: left promiscuous mode [ 341.032426][T10174] tipc: Disabling bearer [ 341.068327][ T5845] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 341.185310][T10181] FAULT_INJECTION: forcing a failure. [ 341.185310][T10181] name failslab, interval 1, probability 0, space 0, times 1 [ 341.198242][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.0.1346 Not tainted syzkaller #0 PREEMPT(full) [ 341.198268][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 341.198279][T10181] Call Trace: [ 341.198287][T10181] [ 341.198294][T10181] dump_stack_lvl+0x189/0x250 [ 341.198318][T10181] ? __pfx____ratelimit+0x10/0x10 [ 341.198339][T10181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.198357][T10181] ? __pfx__printk+0x10/0x10 [ 341.198379][T10181] ? __pfx___might_resched+0x10/0x10 [ 341.198404][T10181] ? fs_reclaim_acquire+0x7d/0x100 [ 341.198429][T10181] should_fail_ex+0x414/0x560 [ 341.198460][T10181] should_failslab+0xa8/0x100 [ 341.198483][T10181] __kmalloc_cache_node_noprof+0x74/0x6f0 [ 341.198502][T10181] ? __get_vm_area_node+0x13f/0x300 [ 341.198536][T10181] __get_vm_area_node+0x13f/0x300 [ 341.198568][T10181] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 341.198587][T10181] ? xstateregs_set+0x13e/0x240 [ 341.198627][T10181] ? __lock_acquire+0xab9/0xd20 [ 341.198652][T10181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 341.198678][T10181] ? xstateregs_set+0x13e/0x240 [ 341.198698][T10181] vmalloc_noprof+0xb2/0xf0 [ 341.198715][T10181] ? xstateregs_set+0x13e/0x240 [ 341.198736][T10181] xstateregs_set+0x13e/0x240 [ 341.198758][T10181] ptrace_request+0x12f9/0x2250 [ 341.198788][T10181] ? do_raw_spin_lock+0x121/0x290 [ 341.198804][T10181] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 341.198829][T10181] ? __pfx_ptrace_request+0x10/0x10 [ 341.198859][T10181] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 341.198879][T10181] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.198901][T10181] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 341.198928][T10181] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 341.198949][T10181] ? do_raw_spin_unlock+0x122/0x240 [ 341.198971][T10181] ? wait_task_inactive+0x45e/0x7e0 [ 341.199014][T10181] ? __pfx_wait_task_inactive+0x10/0x10 [ 341.199053][T10181] arch_ptrace+0x289/0x410 [ 341.199076][T10181] __se_sys_ptrace+0x150/0x3a0 [ 341.199104][T10181] ? __pfx___se_sys_ptrace+0x10/0x10 [ 341.199134][T10181] ? do_syscall_64+0xbe/0xfa0 [ 341.199158][T10181] do_syscall_64+0xfa/0xfa0 [ 341.199175][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.199187][T10181] ? asm_sysvec_call_function_single+0x1a/0x20 [ 341.199201][T10181] ? clear_bhb_loop+0x60/0xb0 [ 341.199216][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.199228][T10181] RIP: 0033:0x7f754d38eec9 [ 341.199240][T10181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.199252][T10181] RSP: 002b:00007f754e153038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 341.199266][T10181] RAX: ffffffffffffffda RBX: 00007f754d5e5fa0 RCX: 00007f754d38eec9 [ 341.199276][T10181] RDX: 0000000000000202 RSI: 000000000000039b RDI: 0000000000004205 [ 341.199284][T10181] RBP: 00007f754e153090 R08: 0000000000000000 R09: 0000000000000000 [ 341.199292][T10181] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 341.199301][T10181] R13: 00007f754d5e6038 R14: 00007f754d5e5fa0 R15: 00007fffcad218c8 [ 341.199321][T10181] [ 341.199470][T10181] syz.0.1346: vmalloc error: size 832, vm_struct allocation failed, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 341.229434][ T5845] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 341.230550][T10181] ,cpuset= [ 341.235401][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.240708][T10181] / [ 341.246669][ T5845] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.251329][T10181] ,mems_allowed=0-1 [ 341.256929][ T5845] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 341.261160][T10181] [ 341.267861][ T5845] usb 4-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 341.271708][T10181] CPU: 0 UID: 0 PID: 10181 Comm: syz.0.1346 Not tainted syzkaller #0 PREEMPT(full) [ 341.271735][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 341.271750][T10181] Call Trace: [ 341.271759][T10181] [ 341.271768][T10181] dump_stack_lvl+0x189/0x250 [ 341.271798][T10181] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 341.271826][T10181] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.271849][T10181] ? __pfx__printk+0x10/0x10 [ 341.271869][T10181] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 341.271906][T10181] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 341.271956][T10181] warn_alloc+0x214/0x310 [ 341.271986][T10181] ? __pfx_warn_alloc+0x10/0x10 [ 341.272016][T10181] ? __get_vm_area_node+0x2b5/0x300 [ 341.272058][T10181] __vmalloc_node_range_noprof+0x331/0x12d0 [ 341.272105][T10181] ? __lock_acquire+0xab9/0xd20 [ 341.272136][T10181] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 341.272166][T10181] ? xstateregs_set+0x13e/0x240 [ 341.272191][T10181] vmalloc_noprof+0xb2/0xf0 [ 341.272210][T10181] ? xstateregs_set+0x13e/0x240 [ 341.272235][T10181] xstateregs_set+0x13e/0x240 [ 341.272261][T10181] ptrace_request+0x12f9/0x2250 [ 341.272297][T10181] ? do_raw_spin_lock+0x121/0x290 [ 341.272317][T10181] ? raw_spin_rq_lock_nested+0x2a/0x140 [ 341.272349][T10181] ? __pfx_ptrace_request+0x10/0x10 [ 341.272383][T10181] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 341.272408][T10181] ? lockdep_hardirqs_on+0x9c/0x150 [ 341.272433][T10181] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 341.272456][T10181] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 341.272485][T10181] ? do_raw_spin_unlock+0x122/0x240 [ 341.272523][T10181] ? wait_task_inactive+0x45e/0x7e0 [ 341.272575][T10181] ? __pfx_wait_task_inactive+0x10/0x10 [ 341.272622][T10181] arch_ptrace+0x289/0x410 [ 341.272653][T10181] __se_sys_ptrace+0x150/0x3a0 [ 341.272687][T10181] ? __pfx___se_sys_ptrace+0x10/0x10 [ 341.272722][T10181] ? do_syscall_64+0xbe/0xfa0 [ 341.272752][T10181] do_syscall_64+0xfa/0xfa0 [ 341.272789][T10181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.272808][T10181] ? asm_sysvec_call_function_single+0x1a/0x20 [ 341.272829][T10181] ? clear_bhb_loop+0x60/0xb0 [ 341.272853][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.272872][T10181] RIP: 0033:0x7f754d38eec9 [ 341.272889][T10181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.272908][T10181] RSP: 002b:00007f754e153038 EFLAGS: 00000246 ORIG_RAX: 0000000000000065 [ 341.272936][T10181] RAX: ffffffffffffffda RBX: 00007f754d5e5fa0 RCX: 00007f754d38eec9 [ 341.272951][T10181] RDX: 0000000000000202 RSI: 000000000000039b RDI: 0000000000004205 [ 341.272965][T10181] RBP: 00007f754e153090 R08: 0000000000000000 R09: 0000000000000000 [ 341.272977][T10181] R10: 0000200000000240 R11: 0000000000000246 R12: 0000000000000001 [ 341.272990][T10181] R13: 00007f754d5e6038 R14: 00007f754d5e5fa0 R15: 00007fffcad218c8 [ 341.273022][T10181] [ 341.273038][T10181] Mem-Info: [ 341.276781][ T5845] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.282056][T10181] active_anon:26701 inactive_anon:0 isolated_anon:0 [ 341.282056][T10181] active_file:18360 inactive_file:4605 isolated_file:0 [ 341.282056][T10181] unevictable:768 dirty:359 writeback:0 [ 341.282056][T10181] slab_reclaimable:10929 slab_unreclaimable:93155 [ 341.282056][T10181] mapped:28178 shmem:21518 pagetables:1744 [ 341.282056][T10181] sec_pagetables:0 bounce:0 [ 341.282056][T10181] kernel_misc_reclaimable:0 [ 341.282056][T10181] free:1337705 free_pcp:16614 free_cma:0 [ 341.297016][ T5845] usb 4-1: config 0 descriptor?? [ 341.327626][T10181] Node 0 active_anon:106804kB inactive_anon:0kB active_file:73440kB inactive_file:18276kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112712kB dirty:1436kB writeback:0kB shmem:84536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12716kB pagetables:6844kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.747661][ T5845] usbhid 4-1:0.0: can't add hid device: -71 [ 341.759055][T10181] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 341.763335][ T5845] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 341.768468][T10181] Node 0 [ 341.785841][ T5845] usb 4-1: USB disconnect, device number 102 [ 341.789784][T10181] DMA free:15344kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:0kB free_cma:0kB [ 341.789858][T10181] lowmem_reserve[]: 0 2495 2497 2497 2497 [ 342.060741][T10181] Node 0 DMA32 free:1450188kB boost:0kB min:34216kB low:42768kB high:51320kB reserved_highatomic:0KB free_highatomic:0KB active_anon:106880kB inactive_anon:0kB active_file:73464kB inactive_file:18276kB unevictable:1536kB writepending:1520kB zspages:0kB present:3129332kB managed:2555800kB mlocked:0kB bounce:0kB free_pcp:38784kB local_pcp:20288kB free_cma:0kB [ 342.095690][T10181] lowmem_reserve[]: 0 0 1 1 1 [ 342.101550][T10181] Node 0 Normal free:0kB boost:0kB min:12kB low:12kB high:12kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 342.131139][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.137376][T10181] lowmem_reserve[]: 0 0 0 0 0 [ 342.142110][T10181] Node 1 Normal free:3884648kB boost:0kB min:55668kB low:69584kB high:83500kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:144kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:27632kB local_pcp:12688kB free_cma:0kB [ 342.175174][T10181] lowmem_reserve[]: 0 0 0 0 0 [ 342.180107][T10181] Node 0 DMA: 0*4kB 0*8kB 1*16kB (U) 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15344kB [ 342.194727][T10181] Node 0 DMA32: 3*4kB (UE) 4*8kB (M) 18*16kB (UME) 1388*32kB (UM) 871*64kB (UME) 270*128kB (UME) 119*256kB (UM) 43*512kB (UM) 19*1024kB (UM) 7*2048kB (ME) 300*4096kB (M) = 1450124kB [ 342.212976][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.220314][T10181] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 342.232974][T10181] Node 1 Normal: 208*4kB (UE) 45*8kB (UME) 44*16kB (UME) 78*32kB (UME) 27*64kB (UME) 7*128kB (UME) 5*256kB (UM) 5*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 944*4096kB (M) = 3884648kB [ 342.253307][T10181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.263883][T10181] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 342.273327][T10181] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 342.286239][T10181] Node 1 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 342.296576][T10181] 44485 total pagecache pages [ 342.301815][T10181] 0 pages in swap cache [ 342.309536][T10181] Free swap = 124996kB [ 342.326151][T10181] Total swap = 124996kB [ 342.333086][T10181] 2097051 pages RAM [ 342.338876][T10181] 0 pages HighMem/MovableOnly [ 342.344878][T10181] 426203 pages reserved [ 342.349701][T10181] 0 pages cma reserved [ 342.532944][T10196] vim2m vim2m.0: Fourcc format (0x47425247) invalid. [ 342.637342][ T5951] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 342.788892][ T5951] usb 4-1: Using ep0 maxpacket: 16 [ 342.809655][ T5951] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 342.818732][ T5951] usb 4-1: config 0 has no interface number 0 [ 342.826396][ T5951] usb 4-1: config 0 interface 48 has no altsetting 0 [ 342.843655][ T5951] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98 [ 342.853003][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.861499][ T5951] usb 4-1: Product: syz [ 342.865713][ T5951] usb 4-1: Manufacturer: syz [ 342.870525][ T5951] usb 4-1: SerialNumber: syz [ 342.877985][ T5951] usb 4-1: config 0 descriptor?? [ 342.987024][T10212] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 342.993867][T10212] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 343.004059][T10212] vhci_hcd vhci_hcd.0: Device attached [ 343.067364][ T5937] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 343.097631][T10188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.106564][T10188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.115967][T10188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.125852][T10188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.177826][ T10] vhci_hcd: vhci_device speed not set [ 343.217343][ T5937] usb 1-1: Using ep0 maxpacket: 8 [ 343.223957][ T5937] usb 1-1: config 0 interface 0 has no altsetting 0 [ 343.230905][ T5937] usb 1-1: New USB device found, idVendor=05ac, idProduct=0264, bcdDevice= 0.00 [ 343.240071][ T10] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 343.247619][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.257286][ T5951] usb 3-1: new low-speed USB device number 98 using dummy_hcd [ 343.259697][ T5937] usb 1-1: config 0 descriptor?? [ 343.408890][ T5951] usb 3-1: config 0 has no interfaces? [ 343.414460][ T5951] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 343.423615][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.434111][ T5951] usb 3-1: config 0 descriptor?? [ 343.481629][ T5937] apple 0003:05AC:0264.0021: unknown main item tag 0x0 [ 343.489133][ T5937] apple 0003:05AC:0264.0021: unknown main item tag 0x0 [ 343.496060][ T5937] apple 0003:05AC:0264.0021: unknown main item tag 0x0 [ 343.510252][ T5937] apple 0003:05AC:0264.0021: unknown main item tag 0x0 [ 343.517925][ T5937] apple 0003:05AC:0264.0021: unknown main item tag 0x0 [ 343.524826][ T5937] apple 0003:05AC:0264.0021: unknown main item tag 0x0 [ 343.532897][ T5937] apple 0003:05AC:0264.0021: unknown main item tag 0x0 [ 343.542648][ T5937] apple 0003:05AC:0264.0021: hidraw0: USB HID v54.8a Device [HID 05ac:0264] on usb-dummy_hcd.0-1/input0 [ 343.562193][ T5937] usb 1-1: USB disconnect, device number 89 [ 343.600883][T10220] fido_id[10220]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 343.641800][T10213] vhci_hcd: unknown pdu 1 [ 343.643630][T10212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.651906][ T5998] vhci_hcd: stop threads [ 343.659496][ T5998] vhci_hcd: release socket [ 343.665274][ T5998] vhci_hcd: disconnect device [ 343.670497][T10212] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 343.680528][ T5951] usb 3-1: USB disconnect, device number 98 [ 343.707792][ T10] vhci_hcd: vhci_device speed not set [ 343.868192][ T5937] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 343.913580][T10229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 343.924261][T10229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.019188][ T5937] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 344.030401][ T5937] usb 1-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 344.039746][ T5937] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.050171][ T5937] usb 1-1: config 0 descriptor?? [ 344.627306][ T5951] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 344.663267][ T5937] usbhid 1-1:0.0: can't add hid device: -71 [ 344.674562][ T5937] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 344.689999][ T5937] usb 1-1: USB disconnect, device number 90 [ 344.695131][T10242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 344.709859][T10242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 344.799336][ T5951] usb 3-1: config 0 has an invalid interface number: 159 but max is 0 [ 344.807715][ T5951] usb 3-1: config 0 has no interface number 0 [ 344.815511][ T5951] usb 3-1: New USB device found, idVendor=10b8, idProduct=1e14, bcdDevice=db.f2 [ 344.824650][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.832703][ T5951] usb 3-1: Product: syz [ 344.836872][ T5951] usb 3-1: Manufacturer: syz [ 344.841554][ T5951] usb 3-1: SerialNumber: syz [ 344.848764][ T5951] usb 3-1: config 0 descriptor?? [ 345.168914][ T5951] dvb-usb: found a 'DiBcom STK7700P reference design' in warm state. [ 345.180068][ T5951] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 345.190857][ T5951] dvbdev: DVB: registering new adapter (DiBcom STK7700P reference design) [ 345.199669][ T5951] usb 3-1: media controller created [ 345.230885][ T5951] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 345.310019][T10250] __nla_validate_parse: 1 callbacks suppressed [ 345.310041][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1369'. [ 345.327579][ T5951] DVB: Unable to find symbol dib7000p_attach() [ 345.327595][ T5951] dvb-usb: no frontend was attached by 'DiBcom STK7700P reference design' [ 345.397302][ T5951] rc_core: IR keymap rc-dib0700-rc5 not found [ 345.403452][ T5951] Registered IR keymap rc-empty [ 345.411830][ T5951] dvb-usb: could not initialize remote control. [ 345.418415][ T5951] dvb-usb: DiBcom STK7700P reference design successfully initialized and connected. [ 345.592279][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1371'. [ 346.437360][ T44] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 346.582045][T10271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.590990][T10271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.600672][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.612264][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.622256][ T44] usb 1-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 346.631438][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.642465][ T44] usb 1-1: config 0 descriptor?? [ 347.057094][ T44] arvo 0003:1E7D:30D4.0022: unknown main item tag 0x0 [ 347.064197][ T44] arvo 0003:1E7D:30D4.0022: unknown main item tag 0x0 [ 347.071073][ T44] arvo 0003:1E7D:30D4.0022: unknown main item tag 0x0 [ 347.080308][ T44] arvo 0003:1E7D:30D4.0022: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.0-1/input0 [ 347.220881][T10276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.229823][T10276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.327421][T10279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 347.329869][T10279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 347.525365][ T5951] usb 3-1: USB disconnect, device number 99 [ 347.601265][ T5951] dvb-usb: DiBcom STK7700P reference design successfully deinitialized and disconnected. [ 347.689601][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 347.689867][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 347.689912][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 347.689954][ T11] block nbd1: Connection timed out, retrying (0/2 alive) [ 347.690072][ T11] block nbd1: Dead connection, failed to find a fallback [ 347.690165][ T11] block nbd1: shutting down sockets [ 347.690230][ T11] blk_print_req_error: 138 callbacks suppressed [ 347.690242][ T11] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.690329][ T11] buffer_io_error: 138 callbacks suppressed [ 347.690340][ T11] Buffer I/O error on dev nbd1, logical block 3, async page read [ 347.690419][ T11] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.690442][ T11] Buffer I/O error on dev nbd1, logical block 2, async page read [ 347.690501][ T11] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.690524][ T11] Buffer I/O error on dev nbd1, logical block 1, async page read [ 347.690581][ T11] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.690605][ T11] Buffer I/O error on dev nbd1, logical block 0, async page read [ 347.691146][ T6433] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.691320][ T6433] Buffer I/O error on dev nbd1, logical block 0, async page read [ 347.691523][ T6433] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.691548][ T6433] Buffer I/O error on dev nbd1, logical block 1, async page read [ 347.691670][ T6433] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.691694][ T6433] Buffer I/O error on dev nbd1, logical block 2, async page read [ 347.691810][ T6433] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.691832][ T6433] Buffer I/O error on dev nbd1, logical block 3, async page read [ 347.691979][ T6433] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.692004][ T6433] Buffer I/O error on dev nbd1, logical block 0, async page read [ 347.692133][ T6433] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 347.692156][ T6433] Buffer I/O error on dev nbd1, logical block 1, async page read [ 347.697184][ T6433] ldm_validate_partition_table(): Disk read failed. [ 347.703037][ T6433] Dev nbd1: unable to read RDB block 0 [ 347.705037][ T6433] nbd1: unable to read partition table [ 347.723560][ T6433] ldm_validate_partition_table(): Disk read failed. [ 347.725358][ T6433] Dev nbd1: unable to read RDB block 0 [ 347.727741][ T6433] nbd1: unable to read partition table [ 347.757129][ T5213] ldm_validate_partition_table(): Disk read failed. [ 347.759648][ T5213] Dev nbd1: unable to read RDB block 0 [ 347.761667][ T5213] nbd1: unable to read partition table [ 347.773392][ T5213] ldm_validate_partition_table(): Disk read failed. [ 347.779059][ T5213] Dev nbd1: unable to read RDB block 0 [ 348.073811][ T5213] nbd1: unable to read partition table [ 348.145349][ T6433] ldm_validate_partition_table(): Disk read failed. [ 348.147057][ T6433] Dev nbd1: unable to read RDB block 0 [ 348.150455][ T6433] nbd1: unable to read partition table [ 348.161715][ T6433] ldm_validate_partition_table(): Disk read failed. [ 348.163522][ T6433] Dev nbd1: unable to read RDB block 0 [ 348.165489][ T6433] nbd1: unable to read partition table [ 348.287513][ T5951] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 348.375734][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.379082][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.447375][ T5951] usb 3-1: Using ep0 maxpacket: 16 [ 348.454254][ T5951] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 348.454288][ T5951] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.454312][ T5951] usb 3-1: config 0 interface 0 has no altsetting 0 [ 348.454345][ T5951] usb 3-1: New USB device found, idVendor=0c12, idProduct=0005, bcdDevice= 0.00 [ 348.454370][ T5951] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.457069][ T5951] usb 3-1: config 0 descriptor?? [ 348.657967][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.661971][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.663750][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.664958][ T5854] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.665820][ T5854] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.682136][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 348.685382][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 348.685759][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 348.686887][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 348.692835][ T5849] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.734167][ T44] usb 2-1: USB disconnect, device number 36 [ 348.874662][ T5951] zeroplus 0003:0C12:0005.0023: ignoring exceeding usage max [ 348.876301][ T5951] zeroplus 0003:0C12:0005.0023: item fetching failed at offset 3/5 [ 348.876999][ T5951] zeroplus 0003:0C12:0005.0023: parse failed [ 348.877068][ T5951] zeroplus 0003:0C12:0005.0023: probe with driver zeroplus failed with error -22 [ 348.947644][T10297] comedi comedi0: Cannot bond this driver to itself! [ 348.949466][T10297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.949830][T10297] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.956677][T10297] comedi comedi0: Cannot bond this driver to itself! [ 349.016178][T10298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 349.016575][T10298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.028497][T10291] chnl_net:caif_netlink_parms(): no params data found [ 349.076048][ T896] usb 3-1: USB disconnect, device number 100 [ 349.146523][T10291] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.146707][T10291] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.146849][T10291] bridge_slave_0: entered allmulticast mode [ 349.149401][T10291] bridge_slave_0: entered promiscuous mode [ 349.152393][T10291] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.152569][T10291] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.152709][T10291] bridge_slave_1: entered allmulticast mode [ 349.154685][T10291] bridge_slave_1: entered promiscuous mode [ 349.198715][T10291] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.202372][T10291] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.342306][T10291] team0: Port device team_slave_0 added [ 349.345709][T10291] team0: Port device team_slave_1 added [ 349.390998][T10291] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.391016][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.391043][T10291] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.393207][T10291] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.393222][T10291] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 349.393249][T10291] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.515035][T10291] hsr_slave_0: entered promiscuous mode [ 349.516302][T10291] hsr_slave_1: entered promiscuous mode [ 349.517139][T10291] debugfs: 'hsr0' already exists in 'hsr' [ 349.517160][T10291] Cannot create hsr debugfs directory [ 349.763376][ T5951] usb 1-1: USB disconnect, device number 91 [ 349.947514][T10291] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 349.959573][T10291] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 349.981708][T10291] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 349.999292][T10291] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 350.115343][T10291] 8021q: adding VLAN 0 to HW filter on device bond0 [ 350.140512][T10291] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.154193][ T6010] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.161460][ T6010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.182301][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.189560][ T5998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.198453][ T5951] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 350.227558][ T5937] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 350.369741][ T5951] usb 1-1: config 0 has an invalid interface number: 156 but max is 0 [ 350.377578][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 350.380004][ T5951] usb 1-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 350.388951][ T5937] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 350.403557][ T5951] usb 1-1: config 0 has no interface number 0 [ 350.414161][ T5951] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 93, changing to 10 [ 350.425847][ T5951] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid maxpacket 25088, setting to 1024 [ 350.437398][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.437426][ T5937] usb 3-1: Product: syz [ 350.437442][ T5937] usb 3-1: Manufacturer: syz [ 350.437458][ T5937] usb 3-1: SerialNumber: syz [ 350.444048][ T5937] usb 3-1: config 0 descriptor?? [ 350.456974][ T5951] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 350.482093][ T5951] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice=d6.b9 [ 350.492297][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.507168][ T5951] usb 1-1: config 0 descriptor?? [ 350.528713][ T5951] gspca_main: spca561-2.14.0 probing abcd:cdee [ 350.605499][T10291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.712169][ T5937] usb read operation failed. (-32) [ 350.735333][ T5849] Bluetooth: hci3: command tx timeout [ 350.745784][ T5951] spca561 1-1:0.156: probe with driver spca561 failed with error -22 [ 350.759278][ T5951] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 350.768321][ T5951] usb 1-1: MIDIStreaming interface descriptor not found [ 350.878519][ T5951] usb 1-1: USB disconnect, device number 92 [ 350.960513][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 350.986586][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.005850][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.018418][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.028944][T10366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.041045][T10366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.076592][T10291] veth0_vlan: entered promiscuous mode [ 351.089742][T10291] veth1_vlan: entered promiscuous mode [ 351.126548][T10291] veth0_macvtap: entered promiscuous mode [ 351.136878][ T5937] usb 3-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 351.140298][T10291] veth1_macvtap: entered promiscuous mode [ 351.168199][T10291] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.182674][T10291] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.190725][ T5937] usb 3-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 351.190756][ T5937] usb 3-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 351.218551][ T6002] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.227509][ T6002] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.239208][ T6002] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.248145][ T6002] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.321126][ T6002] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.337390][ T6002] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.378499][ T6005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.386509][ T6005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.699726][T10383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 351.727158][T10383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 351.969010][T10393] xt_l2tp: unknown flags: 51 [ 352.067349][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 352.217461][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 352.229588][ T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 352.229620][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 352.229646][ T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 352.229671][ T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 352.229713][ T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 352.229737][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.341963][T10407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 352.343450][T10407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 352.434336][ T10] usb 5-1: GET_CAPABILITIES returned 0 [ 352.434382][ T10] usbtmc 5-1:16.0: can't read capabilities [ 352.573235][T10414] tmpfs: User quota block hardlimit too large. [ 352.807449][ T5849] Bluetooth: hci3: command tx timeout [ 352.887512][ T9] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 353.017364][ T9] usb 1-1: device descriptor read/64, error -71 [ 353.071825][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.085216][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.097538][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 353.107979][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 353.257362][ T9] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 353.387447][ T9] usb 1-1: device descriptor read/64, error -71 [ 353.497551][ T9] usb usb1-port1: attempt power cycle [ 353.837368][ T9] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 353.857966][ T9] usb 1-1: device descriptor read/8, error -71 [ 354.097394][ T9] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 354.117849][ T9] usb 1-1: device descriptor read/8, error -71 [ 354.228380][ T9] usb usb1-port1: unable to enumerate USB device [ 354.843004][ T896] usb 5-1: USB disconnect, device number 2 [ 354.888722][ T5849] Bluetooth: hci3: command tx timeout [ 355.347303][ T896] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 355.497415][ T896] usb 5-1: Using ep0 maxpacket: 32 [ 355.504091][ T896] usb 5-1: config 0 has an invalid interface number: 217 but max is 0 [ 355.512407][ T896] usb 5-1: config 0 has no interface number 0 [ 355.518985][ T896] usb 5-1: config 0 interface 217 has no altsetting 0 [ 355.528129][ T896] usb 5-1: New USB device found, idVendor=2040, idProduct=651f, bcdDevice=26.93 [ 355.537186][ T896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.545287][ T896] usb 5-1: Product: syz [ 355.549512][ T896] usb 5-1: Manufacturer: syz [ 355.554147][ T896] usb 5-1: SerialNumber: syz [ 355.561561][ T896] usb 5-1: config 0 descriptor?? [ 355.772005][T10433] netlink: 'syz.4.1429': attribute type 28 has an invalid length. [ 355.787593][ T896] em28xx 5-1:0.217: New device syz syz @ 480 Mbps (2040:651f, interface 217, class 217) [ 355.787631][ T896] em28xx 5-1:0.217: Video interface 217 found: bulk [ 355.857697][ T896] em28xx 5-1:0.217: unknown em28xx chip ID (0) [ 355.936868][ T896] em28xx 5-1:0.217: reading from i2c device at 0xa0 failed (error=-5) [ 355.936970][ T896] em28xx 5-1:0.217: board has no eeprom [ 355.997275][ T896] em28xx 5-1:0.217: Identified as Hauppauge WinTV HVR 850 (card=60) [ 355.997304][ T896] em28xx 5-1:0.217: analog set to bulk mode. [ 355.997476][ T5901] em28xx 5-1:0.217: Registering V4L2 extension [ 356.026544][ T896] usb 5-1: USB disconnect, device number 3 [ 356.028176][ T896] em28xx 5-1:0.217: Disconnecting em28xx [ 356.147058][ T5901] em28xx 5-1:0.217: Config register raw data: 0xffffffed [ 356.147124][ T5901] em28xx 5-1:0.217: AC97 chip type couldn't be determined [ 356.147138][ T5901] em28xx 5-1:0.217: No AC97 audio processor [ 356.147160][ T5901] em28xx 5-1:0.217: em28xx_v4l2_init: Error while setting audio - error [-19]! [ 356.147676][ T5901] em28xx 5-1:0.217: Binding DVB extension [ 356.148088][ T5901] em28xx 5-1:0.217: no endpoint for DVB mode and transfer type 0 [ 356.148106][ T5901] em28xx 5-1:0.217: failed to pre-allocate USB transfer buffers for DVB. [ 356.148155][ T5901] em28xx 5-1:0.217: Registering input extension [ 356.148399][ T896] em28xx 5-1:0.217: Closing input extension [ 356.178696][ T896] em28xx 5-1:0.217: Freeing device [ 356.533802][T10462] fuse: Bad value for 'rootmode' [ 356.663371][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.672179][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.682205][T10470] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1446'. [ 356.692499][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.701347][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.710739][T10470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.725881][T10470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.837423][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 356.967599][ T5849] Bluetooth: hci3: command tx timeout [ 357.010017][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.024681][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.035042][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 357.061903][ T24] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 357.077768][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.096274][ T24] usb 5-1: config 0 descriptor?? [ 357.154223][T10483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.165007][T10483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.515361][ T24] plantronics 0003:047F:FFFF.0024: reserved main item tag 0xd [ 357.531357][ T24] plantronics 0003:047F:FFFF.0024: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 357.784312][ T24] usb 5-1: USB disconnect, device number 4 [ 357.824570][T10492] pim6reg: entered allmulticast mode [ 357.844090][T10492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 357.848317][T10492] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 357.867594][T10492] overlay: Bad value for 'nfs_export' [ 358.710771][T10511] FAULT_INJECTION: forcing a failure. [ 358.710771][T10511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 358.724619][T10511] CPU: 1 UID: 0 PID: 10511 Comm: syz.0.1462 Not tainted syzkaller #0 PREEMPT(full) [ 358.724638][T10511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.724647][T10511] Call Trace: [ 358.724652][T10511] [ 358.724658][T10511] dump_stack_lvl+0x189/0x250 [ 358.724677][T10511] ? __pfx____ratelimit+0x10/0x10 [ 358.724692][T10511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 358.724705][T10511] ? __pfx__printk+0x10/0x10 [ 358.724725][T10511] should_fail_ex+0x414/0x560 [ 358.724749][T10511] _copy_to_user+0x31/0xb0 [ 358.724767][T10511] simple_read_from_buffer+0xe1/0x170 [ 358.724787][T10511] proc_fail_nth_read+0x1b3/0x220 [ 358.724802][T10511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.724817][T10511] ? rw_verify_area+0x2a6/0x4d0 [ 358.724831][T10511] ? __lock_acquire+0xab9/0xd20 [ 358.724846][T10511] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 358.724860][T10511] vfs_read+0x200/0xa30 [ 358.724873][T10511] ? fdget_pos+0x247/0x320 [ 358.724898][T10511] ? __pfx___mutex_lock+0x10/0x10 [ 358.724914][T10511] ? __pfx_vfs_read+0x10/0x10 [ 358.724930][T10511] ? __fget_files+0x2a/0x420 [ 358.724970][T10511] ? __fget_files+0x3a0/0x420 [ 358.724988][T10511] ? __fget_files+0x2a/0x420 [ 358.725013][T10511] ksys_read+0x145/0x250 [ 358.725029][T10511] ? __fget_files+0x2a/0x420 [ 358.725049][T10511] ? __pfx_ksys_read+0x10/0x10 [ 358.725068][T10511] ? do_syscall_64+0xbe/0xfa0 [ 358.725088][T10511] do_syscall_64+0xfa/0xfa0 [ 358.725104][T10511] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.725120][T10511] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.725135][T10511] ? clear_bhb_loop+0x60/0xb0 [ 358.725153][T10511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.725167][T10511] RIP: 0033:0x7f754d38d8dc [ 358.725181][T10511] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 358.725194][T10511] RSP: 002b:00007f754e153030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 358.725211][T10511] RAX: ffffffffffffffda RBX: 00007f754d5e5fa0 RCX: 00007f754d38d8dc [ 358.725222][T10511] RDX: 000000000000000f RSI: 00007f754e1530a0 RDI: 0000000000000005 [ 358.725232][T10511] RBP: 00007f754e153090 R08: 0000000000000000 R09: 0000000000000000 [ 358.725246][T10511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 358.725254][T10511] R13: 00007f754d5e6038 R14: 00007f754d5e5fa0 R15: 00007fffcad218c8 [ 358.725278][T10511] [ 358.787987][ T5901] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 359.001087][T10515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.011168][T10515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.048669][ T5951] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 359.127544][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 359.134325][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.146600][ T5901] usb 5-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 359.155840][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.164047][ T5901] usb 5-1: Product: syz [ 359.168302][ T5901] usb 5-1: Manufacturer: syz [ 359.172914][ T5901] usb 5-1: SerialNumber: syz [ 359.180115][ T5901] usb 5-1: config 0 descriptor?? [ 359.187534][ T5901] usb 5-1: bad CDC descriptors [ 359.193312][ T5901] usb 5-1: unsupported MDLM descriptors [ 359.210894][ T5951] usb 1-1: Using ep0 maxpacket: 32 [ 359.218272][ T5951] usb 1-1: config 0 interface 0 has no altsetting 0 [ 359.226931][ T5951] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 359.236988][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.245145][ T5951] usb 1-1: Product: syz [ 359.249354][ T5951] usb 1-1: Manufacturer: syz [ 359.253933][ T5951] usb 1-1: SerialNumber: syz [ 359.263189][ T5951] usb 1-1: config 0 descriptor?? [ 359.388930][T10499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.397715][T10499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.425772][ T5901] usb 5-1: USB disconnect, device number 5 [ 359.470608][T10513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 359.482265][T10513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 359.702172][ T5951] gs_usb 1-1:0.0: Configuring for 2 interfaces [ 359.711790][ T5951] gs_usb 1-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 359.726089][ T5951] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 359.727189][T10524] fuse: Invalid rootmode [ 359.864077][T10529] fuse: Bad value for 'group_id' [ 359.869562][T10529] fuse: Bad value for 'group_id' [ 359.875814][T10529] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1469'. [ 360.357453][ T44] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 360.528924][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 360.539877][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.549705][ T44] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 360.562673][ T44] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 360.571929][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.587717][ T44] usb 5-1: config 0 descriptor?? [ 360.797516][T10547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.806496][T10547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.008654][ T44] plantronics 0003:047F:FFFF.0025: reserved main item tag 0xd [ 361.021464][ T44] plantronics 0003:047F:FFFF.0025: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 361.269787][ T5901] usb 5-1: USB disconnect, device number 6 [ 361.370082][T10551] vxfs: WRONG superblock magic 00000000 at 1 [ 361.377041][T10551] vxfs: WRONG superblock magic 00000000 at 8 [ 361.383337][T10551] vxfs: can't find superblock. [ 361.422428][T10553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.431747][T10553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.834744][ T44] usb 1-1: USB disconnect, device number 97 [ 362.047412][ T5901] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 362.198745][ T5901] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 362.207267][ T5901] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 362.215920][ T5901] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 362.225787][ T5901] usb 5-1: config 1 has no interface number 0 [ 362.231995][ T5901] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 362.243027][ T5901] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 362.256050][ T5901] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 362.265232][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.281841][ T5901] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 362.658683][T10572] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 362.835275][ T5901] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 362.968927][ T44] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 363.056368][ T5901] usb 5-1: USB disconnect, device number 7 [ 363.072316][ T5901] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 363.138900][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 363.149905][ T44] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 363.160565][ T44] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 363.173921][ T44] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 363.183119][ T44] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.194145][ T44] usb 1-1: config 0 descriptor?? [ 363.611734][ T44] plantronics 0003:047F:FFFF.0026: reserved main item tag 0xd [ 363.637658][ T44] plantronics 0003:047F:FFFF.0026: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 363.675377][T10593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 363.686645][T10593] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 363.869010][ T5901] usb 1-1: USB disconnect, device number 98 [ 364.007471][ T44] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 364.157324][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 364.163822][ T44] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 364.172365][ T44] usb 5-1: config 250 has an invalid interface number: 0 but max is -1 [ 364.180836][ T44] usb 5-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config [ 364.191255][ T44] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 364.202186][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 364.211359][ T44] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 364.220860][ T44] usb 5-1: Product: syz [ 364.225059][ T44] usb 5-1: SerialNumber: syz [ 364.240037][ T44] hub 5-1:250.0: bad descriptor, ignoring hub [ 364.249207][ T44] hub 5-1:250.0: probe with driver hub failed with error -5 [ 364.271972][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.281186][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.292565][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.302584][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.314465][T10602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 364.323231][T10602] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 364.358659][ T30] audit: type=1326 audit(1759793848.567:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10601 comm="syz.3.1498" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cf078eec9 code=0x0 [ 364.700921][ T9] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 364.827318][ T44] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 364.859851][ T9] usb 5-1: device firmware changed [ 364.867944][ T9] usb 5-1: USB disconnect, device number 8 [ 364.958909][ T44] usb 1-1: device descriptor read/64, error -71 [ 365.167391][ T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 365.197298][ T44] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 365.327342][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 365.327430][ T44] usb 1-1: device descriptor read/64, error -71 [ 365.334627][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.348970][ T9] usb 5-1: config 0 has no interfaces? [ 365.356127][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 365.365323][ T9] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 365.373786][ T9] usb 5-1: Product: syz [ 365.378120][ T9] usb 5-1: SerialNumber: syz [ 365.384883][ T9] usb 5-1: config 0 descriptor?? [ 365.448418][ T44] usb usb1-port1: attempt power cycle [ 365.594231][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.595354][ T5914] usb 5-1: USB disconnect, device number 9 [ 365.612158][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.787486][ T44] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 365.807866][ T44] usb 1-1: device descriptor read/8, error -71 [ 365.895095][T10621] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.057405][ T44] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 366.077906][ T44] usb 1-1: device descriptor read/8, error -71 [ 366.177340][ T5914] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 366.187671][ T44] usb usb1-port1: unable to enumerate USB device [ 366.337391][ T5914] usb 5-1: Using ep0 maxpacket: 8 [ 366.344108][ T5914] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 366.353320][ T5914] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.364203][ T5914] usb 5-1: config 0 descriptor?? [ 366.775531][ T5914] hid_parser_main: 4 callbacks suppressed [ 366.775554][ T5914] logitech 0003:046D:C295.0027: unknown main item tag 0x5 [ 366.788611][ T5914] logitech 0003:046D:C295.0027: item fetching failed at offset 4/5 [ 366.796995][ T5914] logitech 0003:046D:C295.0027: parse failed [ 366.803404][ T5914] logitech 0003:046D:C295.0027: probe with driver logitech failed with error -22 [ 366.976351][T10619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.999380][ T5901] usb 5-1: USB disconnect, device number 10 [ 367.364872][T10629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.374245][T10629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.638521][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072fa5800: rx timeout, send abort [ 367.867300][ T5901] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 367.887350][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 367.997399][ T5901] usb 1-1: device descriptor read/64, error -71 [ 368.037298][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 368.043792][ T9] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 368.052782][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 368.063263][ T9] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 368.072280][ T9] usb 5-1: config 1 has no interface number 1 [ 368.078580][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 368.095509][ T9] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 368.107639][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 368.116700][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.125385][ T9] usb 5-1: Product: syz [ 368.129603][ T9] usb 5-1: Manufacturer: syz [ 368.134225][ T9] usb 5-1: SerialNumber: syz [ 368.139342][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072fa5400: rx timeout, send abort [ 368.148422][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072fa5800: abort rx timeout. Force session deactivation [ 368.247478][ T5901] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 368.344875][T10636] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.353820][T10636] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.377308][ T5901] usb 1-1: device descriptor read/64, error -71 [ 368.498101][ T5901] usb usb1-port1: attempt power cycle [ 368.647701][ C1] vcan0: j1939_tp_rxtimer: 0xffff888072fa5400: abort rx timeout. Force session deactivation [ 368.820376][T10642] veth0_vlan: left promiscuous mode [ 368.825856][T10642] vlan0: entered allmulticast mode [ 368.831144][T10642] veth0_vlan: entered allmulticast mode [ 368.840062][ T5901] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 368.867982][ T5901] usb 1-1: device descriptor read/8, error -71 [ 369.107374][ T5901] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 369.128481][ T5901] usb 1-1: device descriptor read/8, error -71 [ 369.169714][T10647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 369.178655][T10647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.238248][ T5901] usb usb1-port1: unable to enumerate USB device [ 370.041270][T10657] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.048067][T10657] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 370.055240][T10657] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 370.063694][T10657] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 370.071728][T10657] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 370.079905][T10657] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 370.086769][T10657] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 370.107570][T10657] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 370.114223][T10657] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 370.121370][T10657] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 370.129300][T10657] comedi comedi3: 8255: I/O port conflict (0xd4,4) [ 370.136060][T10657] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 370.473310][T10667] binder: 10666:10667 ioctl c0306201 200000000640 returned -22 [ 370.481587][T10667] binder: 10666:10667 ioctl 8030ae7c 200000000000 returned -22 [ 370.753365][ T9] usb 5-1: USB disconnect, device number 11 [ 370.947378][T10671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.956158][T10671] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.097487][ T5901] usb 1-1: new high-speed USB device number 107 using dummy_hcd [ 371.107384][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 371.249093][ T5901] usb 1-1: unable to get BOS descriptor or descriptor too short [ 371.258374][ T5901] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 371.269988][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.280377][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df [ 371.289519][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.300599][ T5901] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 371.310105][ T9] usb 5-1: config 0 descriptor?? [ 371.315294][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.323787][ T5901] usb 1-1: Product: syz [ 371.330780][ T9] pwc: Philips PCA646VC USB webcam detected. [ 371.336998][ T5901] usb 1-1: Manufacturer: syz [ 371.341698][ T5901] usb 1-1: SerialNumber: syz [ 371.529225][ T9] pwc: send_video_command error -71 [ 371.545671][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 371.555501][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 371.588133][ T9] usb 5-1: USB disconnect, device number 12 [ 372.132838][T10690] FAULT_INJECTION: forcing a failure. [ 372.132838][T10690] name failslab, interval 1, probability 0, space 0, times 0 [ 372.146563][T10690] CPU: 1 UID: 0 PID: 10690 Comm: syz.4.1532 Not tainted syzkaller #0 PREEMPT(full) [ 372.146589][T10690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.146604][T10690] Call Trace: [ 372.146614][T10690] [ 372.146621][T10690] dump_stack_lvl+0x189/0x250 [ 372.146644][T10690] ? __pfx____ratelimit+0x10/0x10 [ 372.146663][T10690] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.146680][T10690] ? __pfx__printk+0x10/0x10 [ 372.146702][T10690] ? __pfx___might_resched+0x10/0x10 [ 372.146725][T10690] ? fs_reclaim_acquire+0x7d/0x100 [ 372.146750][T10690] should_fail_ex+0x414/0x560 [ 372.146781][T10690] should_failslab+0xa8/0x100 [ 372.146805][T10690] __kvmalloc_node_noprof+0x158/0x910 [ 372.146824][T10690] ? file_tty_write+0x2e7/0xa20 [ 372.146851][T10690] file_tty_write+0x2e7/0xa20 [ 372.146878][T10690] vfs_write+0x5c9/0xb30 [ 372.146902][T10690] ? __pfx_tty_write+0x10/0x10 [ 372.146921][T10690] ? __pfx_vfs_write+0x10/0x10 [ 372.146950][T10690] ? __fget_files+0x2a/0x420 [ 372.146990][T10690] ksys_write+0x145/0x250 [ 372.147012][T10690] ? __pfx_ksys_write+0x10/0x10 [ 372.147036][T10690] ? do_syscall_64+0xbe/0xfa0 [ 372.147060][T10690] do_syscall_64+0xfa/0xfa0 [ 372.147079][T10690] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.147099][T10690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.147116][T10690] ? clear_bhb_loop+0x60/0xb0 [ 372.147138][T10690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.147156][T10690] RIP: 0033:0x7f732878eec9 [ 372.147171][T10690] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.147191][T10690] RSP: 002b:00007f732961b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 372.147209][T10690] RAX: ffffffffffffffda RBX: 00007f73289e5fa0 RCX: 00007f732878eec9 [ 372.147223][T10690] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 372.147235][T10690] RBP: 00007f732961b090 R08: 0000000000000000 R09: 0000000000000000 [ 372.147246][T10690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.147256][T10690] R13: 00007f73289e6038 R14: 00007f73289e5fa0 R15: 00007ffceeb3cb58 [ 372.147286][T10690] [ 372.189552][ T5901] usb 1-1: reset high-speed USB device number 107 using dummy_hcd [ 372.529177][ T5901] usb 1-1: device firmware changed [ 372.543282][ T5901] usb 1-1: USB disconnect, device number 107 [ 372.657350][ T5951] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 372.678135][ T5901] usb 1-1: new high-speed USB device number 108 using dummy_hcd [ 372.729299][T10696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.738619][T10696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.809223][ T5951] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 58586, setting to 1024 [ 372.821344][ T5951] usb 5-1: config 0 interface 0 has no altsetting 0 [ 372.830126][ T5951] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 372.839278][ T5951] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 372.847495][ T5951] usb 5-1: Product: syz [ 372.851663][ T5951] usb 5-1: Manufacturer: syz [ 372.856258][ T5951] usb 5-1: SerialNumber: syz [ 372.861362][ T5901] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 372.864066][ T5951] usb 5-1: config 0 descriptor?? [ 372.881312][ T5901] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 372.885079][ T5951] usb 5-1: selecting invalid altsetting 0 [ 372.891475][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.906249][ T5901] usb 1-1: Product: syz [ 372.911255][ T5901] usb 1-1: Manufacturer: syz [ 372.917397][ T5901] usb 1-1: SerialNumber: syz [ 373.089894][T10692] iommufd_mock iommufd_mock2: Adding to iommu group 2 [ 373.139533][T10677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1528'. [ 373.159062][ T5951] usb 5-1: USB disconnect, device number 13 [ 373.281731][T10700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.294791][T10700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.336548][T10702] netlink: 'syz.2.1537': attribute type 1 has an invalid length. [ 373.951111][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.964125][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.974889][T10712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.987866][T10712] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.016615][T10715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.026531][T10715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.036551][T10718] FAULT_INJECTION: forcing a failure. [ 374.036551][T10718] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.050486][T10718] CPU: 1 UID: 0 PID: 10718 Comm: syz.4.1543 Not tainted syzkaller #0 PREEMPT(full) [ 374.050511][T10718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.050522][T10718] Call Trace: [ 374.050530][T10718] [ 374.050538][T10718] dump_stack_lvl+0x189/0x250 [ 374.050562][T10718] ? __pfx____ratelimit+0x10/0x10 [ 374.050582][T10718] ? __pfx_dump_stack_lvl+0x10/0x10 [ 374.050600][T10718] ? __pfx__printk+0x10/0x10 [ 374.050618][T10718] ? __might_fault+0xb0/0x130 [ 374.050646][T10718] should_fail_ex+0x414/0x560 [ 374.050679][T10718] _copy_from_iter+0x1de/0x1790 [ 374.050716][T10718] ? __pfx__copy_from_iter+0x10/0x10 [ 374.050739][T10718] ? file_tty_write+0x328/0xa20 [ 374.050759][T10718] ? rcu_is_watching+0x15/0xb0 [ 374.050785][T10718] ? file_tty_write+0x328/0xa20 [ 374.050813][T10718] file_tty_write+0x4c1/0xa20 [ 374.050842][T10718] vfs_write+0x5c9/0xb30 [ 374.050868][T10718] ? __pfx_tty_write+0x10/0x10 [ 374.050888][T10718] ? __pfx_vfs_write+0x10/0x10 [ 374.050920][T10718] ? __fget_files+0x2a/0x420 [ 374.050952][T10718] ksys_write+0x145/0x250 [ 374.050976][T10718] ? __pfx_ksys_write+0x10/0x10 [ 374.051001][T10718] ? do_syscall_64+0xbe/0xfa0 [ 374.051026][T10718] do_syscall_64+0xfa/0xfa0 [ 374.051046][T10718] ? lockdep_hardirqs_on+0x9c/0x150 [ 374.051066][T10718] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.051085][T10718] ? clear_bhb_loop+0x60/0xb0 [ 374.051112][T10718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.051130][T10718] RIP: 0033:0x7f732878eec9 [ 374.051147][T10718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.051163][T10718] RSP: 002b:00007f732961b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 374.051183][T10718] RAX: ffffffffffffffda RBX: 00007f73289e5fa0 RCX: 00007f732878eec9 [ 374.051196][T10718] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 374.051208][T10718] RBP: 00007f732961b090 R08: 0000000000000000 R09: 0000000000000000 [ 374.051220][T10718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 374.051231][T10718] R13: 00007f73289e6038 R14: 00007f73289e5fa0 R15: 00007ffceeb3cb58 [ 374.051262][T10718] [ 374.207972][ T5901] usb 1-1: reset high-speed USB device number 108 using dummy_hcd [ 374.289249][ T5901] usb 1-1: device reset changed ep0 maxpacket size! [ 374.307291][ T5901] usb 1-1: USB disconnect, device number 108 [ 374.420150][T10727] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.429809][T10728] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.431765][T10727] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.446368][T10728] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.455016][ T5901] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 374.617318][ T5901] usb 1-1: Using ep0 maxpacket: 32 [ 374.624133][ T5901] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 374.640569][ T5901] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 374.650774][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.659665][ T5901] usb 1-1: Product: syz [ 374.664682][ T5901] usb 1-1: Manufacturer: syz [ 374.669661][ T5901] usb 1-1: SerialNumber: syz [ 374.679578][ T5901] usb 1-1: config 0 descriptor?? [ 374.876284][T10738] syzkaller1: entered promiscuous mode [ 374.881934][T10738] syzkaller1: entered allmulticast mode [ 375.051844][T10746] FAULT_INJECTION: forcing a failure. [ 375.051844][T10746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 375.065216][T10746] CPU: 1 UID: 0 PID: 10746 Comm: syz.3.1554 Not tainted syzkaller #0 PREEMPT(full) [ 375.065237][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 375.065246][T10746] Call Trace: [ 375.065252][T10746] [ 375.065259][T10746] dump_stack_lvl+0x189/0x250 [ 375.065278][T10746] ? __pfx____ratelimit+0x10/0x10 [ 375.065295][T10746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.065310][T10746] ? __pfx__printk+0x10/0x10 [ 375.065324][T10746] ? __might_fault+0xb0/0x130 [ 375.065346][T10746] should_fail_ex+0x414/0x560 [ 375.065373][T10746] _copy_from_iter+0x1de/0x1790 [ 375.065402][T10746] ? __pfx__copy_from_iter+0x10/0x10 [ 375.065418][T10746] ? __pfx_woken_wake_function+0x10/0x10 [ 375.065435][T10746] ? file_tty_write+0x328/0xa20 [ 375.065452][T10746] ? file_tty_write+0x328/0xa20 [ 375.065474][T10746] file_tty_write+0x4c1/0xa20 [ 375.065496][T10746] vfs_write+0x5c9/0xb30 [ 375.065517][T10746] ? __pfx_tty_write+0x10/0x10 [ 375.065550][T10746] ? __pfx_vfs_write+0x10/0x10 [ 375.065575][T10746] ? __fget_files+0x2a/0x420 [ 375.065601][T10746] ksys_write+0x145/0x250 [ 375.065620][T10746] ? __pfx_ksys_write+0x10/0x10 [ 375.065640][T10746] ? do_syscall_64+0xbe/0xfa0 [ 375.065660][T10746] do_syscall_64+0xfa/0xfa0 [ 375.065677][T10746] ? lockdep_hardirqs_on+0x9c/0x150 [ 375.065694][T10746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.065708][T10746] ? clear_bhb_loop+0x60/0xb0 [ 375.065726][T10746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.065740][T10746] RIP: 0033:0x7f2cf078eec9 [ 375.065754][T10746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.065767][T10746] RSP: 002b:00007f2cf159c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.065783][T10746] RAX: ffffffffffffffda RBX: 00007f2cf09e5fa0 RCX: 00007f2cf078eec9 [ 375.065794][T10746] RDX: 00000000fffffecc RSI: 0000200000000240 RDI: 0000000000000003 [ 375.065804][T10746] RBP: 00007f2cf159c090 R08: 0000000000000000 R09: 0000000000000000 [ 375.065813][T10746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.065822][T10746] R13: 00007f2cf09e6038 R14: 00007f2cf09e5fa0 R15: 00007ffc9fa98238 [ 375.065846][T10746] [ 375.248940][ T5901] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 375.284864][ T896] usb 1-1: USB disconnect, device number 109 [ 375.361968][T10752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.376214][T10752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.407555][ T5901] usb 5-1: Using ep0 maxpacket: 8 [ 375.416194][ T5901] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.428261][ T5901] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.441010][ T5901] usb 5-1: config 0 interface 0 has no altsetting 0 [ 375.452728][ T5901] usb 5-1: New USB device found, idVendor=5543, idProduct=0045, bcdDevice= 0.00 [ 375.488112][ T5901] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.509588][ T5901] usb 5-1: config 0 descriptor?? [ 375.564827][T10767] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 375.573730][T10767] netlink: 'syz.3.1559': attribute type 1 has an invalid length. [ 375.587536][T10767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.597109][T10767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.977327][ T896] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 376.123185][ T5901] usb 5-1: string descriptor 0 read error: -71 [ 376.130998][ T896] usb 1-1: Using ep0 maxpacket: 16 [ 376.143015][ T5901] uclogic 0003:5543:0045.0028: failed retrieving string descriptor #200: -71 [ 376.152703][ T5901] uclogic 0003:5543:0045.0028: failed retrieving pen parameters: -71 [ 376.162312][ T5901] uclogic 0003:5543:0045.0028: failed probing pen v2 parameters: -71 [ 376.172286][ T896] usb 1-1: config 7 has an invalid interface number: 222 but max is 0 [ 376.180823][ T896] usb 1-1: config 7 has no interface number 0 [ 376.187073][ T5901] uclogic 0003:5543:0045.0028: failed probing parameters: -71 [ 376.195876][ T896] usb 1-1: config 7 interface 222 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 376.195916][T10775] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.208400][ T5901] uclogic 0003:5543:0045.0028: probe with driver uclogic failed with error -71 [ 376.216036][T10775] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.224182][ T896] usb 1-1: config 7 interface 222 has no altsetting 0 [ 376.241970][ T5901] usb 5-1: USB disconnect, device number 14 [ 376.250913][ T896] usb 1-1: New USB device found, idVendor=0ccd, idProduct=008e, bcdDevice=37.e6 [ 376.260526][ T896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.276041][ T896] usb 1-1: Product: syz [ 376.280578][ T896] usb 1-1: Manufacturer: syz [ 376.285212][ T896] usb 1-1: SerialNumber: syz [ 376.294097][T10773] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 376.304566][ T896] em28xx 1-1:7.222: New device syz syz @ 480 Mbps (0ccd:008e, interface 222, class 222) [ 376.314534][ T896] em28xx 1-1:7.222: Video interface 222 found: bulk [ 376.726042][T10783] FAULT_INJECTION: forcing a failure. [ 376.726042][T10783] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 376.741096][T10783] CPU: 0 UID: 0 PID: 10783 Comm: syz.4.1564 Not tainted syzkaller #0 PREEMPT(full) [ 376.741123][T10783] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.741135][T10783] Call Trace: [ 376.741142][T10783] [ 376.741153][T10783] dump_stack_lvl+0x189/0x250 [ 376.741179][T10783] ? __pfx____ratelimit+0x10/0x10 [ 376.741201][T10783] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.741219][T10783] ? __pfx__printk+0x10/0x10 [ 376.741247][T10783] should_fail_ex+0x414/0x560 [ 376.741280][T10783] _copy_to_user+0x31/0xb0 [ 376.741306][T10783] simple_read_from_buffer+0xe1/0x170 [ 376.741334][T10783] proc_fail_nth_read+0x1b3/0x220 [ 376.741356][T10783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.741377][T10783] ? rw_verify_area+0x2a6/0x4d0 [ 376.741397][T10783] ? __lock_acquire+0xab9/0xd20 [ 376.741418][T10783] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 376.741438][T10783] vfs_read+0x200/0xa30 [ 376.741458][T10783] ? fdget_pos+0x247/0x320 [ 376.741486][T10783] ? __pfx___mutex_lock+0x10/0x10 [ 376.741516][T10783] ? __pfx_vfs_read+0x10/0x10 [ 376.741539][T10783] ? __fget_files+0x2a/0x420 [ 376.741567][T10783] ? __fget_files+0x3a0/0x420 [ 376.741589][T10783] ? __fget_files+0x2a/0x420 [ 376.741622][T10783] ksys_read+0x145/0x250 [ 376.741645][T10783] ? __pfx_ksys_read+0x10/0x10 [ 376.741670][T10783] ? do_syscall_64+0xbe/0xfa0 [ 376.741694][T10783] do_syscall_64+0xfa/0xfa0 [ 376.741714][T10783] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.741735][T10783] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.741753][T10783] ? clear_bhb_loop+0x60/0xb0 [ 376.741776][T10783] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.741794][T10783] RIP: 0033:0x7f732878d8dc [ 376.741811][T10783] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 376.741827][T10783] RSP: 002b:00007f732961b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 376.741846][T10783] RAX: ffffffffffffffda RBX: 00007f73289e5fa0 RCX: 00007f732878d8dc [ 376.741860][T10783] RDX: 000000000000000f RSI: 00007f732961b0a0 RDI: 0000000000000005 [ 376.741872][T10783] RBP: 00007f732961b090 R08: 0000000000000000 R09: 0000000000000000 [ 376.741883][T10783] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 376.741894][T10783] R13: 00007f73289e6038 R14: 00007f73289e5fa0 R15: 00007ffceeb3cb58 [ 376.741925][T10783] [ 377.339190][T10803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.360667][T10803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.438469][ T896] em28xx 1-1:7.222: unknown em28xx chip ID (0) [ 377.525935][ T896] em28xx 1-1:7.222: reading from i2c device at 0xa0 failed (error=-5) [ 377.534647][ T896] em28xx 1-1:7.222: board has no eeprom [ 377.597314][ T896] em28xx 1-1:7.222: Identified as Terratec Cinergy HTC USB XS (card=87) [ 377.605835][ T896] em28xx 1-1:7.222: Currently, V4L2 is not supported on this model [ 377.619817][ T5901] em28xx 1-1:7.222: Binding DVB extension [ 377.626187][ T5901] em28xx 1-1:7.222: no endpoint for DVB mode and transfer type 0 [ 377.636229][ T5901] em28xx 1-1:7.222: failed to pre-allocate USB transfer buffers for DVB. [ 377.646959][ T5901] em28xx 1-1:7.222: Registering input extension [ 377.827320][ T44] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 377.956677][T10818] netlink: 'syz.3.1574': attribute type 27 has an invalid length. [ 377.979132][ T44] usb 5-1: Using ep0 maxpacket: 8 [ 377.987689][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 377.998469][ T44] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 378.012306][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 378.024448][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 378.034498][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1 [ 378.040978][T10818] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.045527][ T44] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 378.051941][T10818] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.067625][ T44] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 166 [ 378.081061][ T44] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 378.090580][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.090605][ T44] usb 5-1: Product: syz [ 378.090630][ T44] usb 5-1: Manufacturer: שּׂ풵枵赫躵㒳ϳ [ 378.090646][ T44] usb 5-1: SerialNumber: syz [ 378.093616][ T44] usb 5-1: config 0 descriptor?? [ 378.121975][T10811] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 378.129495][T10811] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 378.144235][ T44] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 378.347065][ T44] usb 5-1: USB disconnect, device number 15 [ 378.359858][T10818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.394799][T10818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.435443][T10818] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 378.443377][T10818] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 378.457085][T10818] vlan0: left allmulticast mode [ 378.462073][T10818] veth0_vlan: left allmulticast mode [ 378.696591][ T44] usb 1-1: USB disconnect, device number 110 [ 378.703883][ T44] em28xx 1-1:7.222: Disconnecting em28xx [ 378.716118][ T44] em28xx 1-1:7.222: Closing input extension [ 378.720941][T10819] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.744829][ T44] em28xx 1-1:7.222: Freeing device [ 378.770514][ T6010] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.781603][ T6010] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.137606][ T44] usb 1-1: new high-speed USB device number 111 using dummy_hcd [ 379.187146][T10834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1580'. [ 379.297273][ T44] usb 1-1: Using ep0 maxpacket: 16 [ 379.304135][ T44] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 379.314369][ T44] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 379.325334][ T44] usb 1-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=f0.56 [ 379.334575][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.342660][ T44] usb 1-1: Product: syz [ 379.346847][ T44] usb 1-1: Manufacturer: syz [ 379.351511][ T44] usb 1-1: SerialNumber: syz [ 379.358547][ T44] usb 1-1: config 0 descriptor?? [ 379.572933][T10837] random: crng reseeded on system resumption [ 379.583300][ T44] usb 1-1: USB disconnect, device number 111 [ 379.650420][T10838] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 379.771665][T10840] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 379.874671][T10842] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1583'. [ 381.147422][ T30] audit: type=1326 audit(1759793865.347:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.170910][ T30] audit: type=1326 audit(1759793865.347:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.193782][ T30] audit: type=1326 audit(1759793865.347:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.217618][ T30] audit: type=1326 audit(1759793865.347:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.257858][ T30] audit: type=1326 audit(1759793865.347:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.285822][ T30] audit: type=1326 audit(1759793865.347:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.309235][ T30] audit: type=1326 audit(1759793865.347:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.334261][T10870] binder: 10869:10870 ioctl c0306201 2000000003c0 returned -14 [ 381.351648][ T30] audit: type=1326 audit(1759793865.347:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.374321][ T30] audit: type=1326 audit(1759793865.347:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10862 comm="syz.0.1590" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f754d38eec9 code=0x7fc00000 [ 381.402453][T10875] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1593'. [ 382.136165][T10896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.197798][T10896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.217686][T10900] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 382.224263][T10900] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 382.233965][T10900] vhci_hcd vhci_hcd.0: Device attached [ 382.250671][T10901] vhci_hcd: cannot find a urb of seqnum 2828 max seqnum 0 [ 382.258665][ T6005] vhci_hcd: stop threads [ 382.262939][ T6005] vhci_hcd: release socket [ 382.268428][ T6005] vhci_hcd: disconnect device [ 382.555709][T10907] overlayfs: empty lowerdir [ 382.864496][T10920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.873457][T10920] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.037378][ T5901] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 383.057346][ T5951] usb 1-1: new high-speed USB device number 112 using dummy_hcd [ 383.207351][ T5951] usb 1-1: Using ep0 maxpacket: 16 [ 383.214007][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 383.221109][ T5901] usb 5-1: not running at top speed; connect to a high speed hub [ 383.225320][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.235348][ T5901] usb 5-1: config 1 interface 0 altsetting 14 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 383.242629][ T5951] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 383.254380][ T5901] usb 5-1: config 1 interface 0 has no altsetting 0 [ 383.263155][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.280398][ T5951] usb 1-1: config 0 descriptor?? [ 383.281195][ T5901] usb 5-1: New USB device found, idVendor=172f, idProduct=0037, bcdDevice= 0.40 [ 383.296012][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.304400][ T5901] usb 5-1: Product: 㑲 [ 383.308864][ T5901] usb 5-1: Manufacturer: 戼㽊雹꽵봟ᆘ쌂夒鮠챵Ԡɯ虂鞷쓇㍳춑榔켟᭏츆㡧ү꣒ኪ䜺蘇ᘤ갮兀猯셚铌選蠺뺝…ᤰ▐픖흗䷅⧭㚈猾牗ક꽑둿缟怟ẹ뷇传僒ᜋ以刁㸅疟莯쉆彷㜂휛笹ﶌ꾈慤繓繪뎫穕뗳赇毧韽Δ讪ꬵ꿁攔鮹ᇵ꾏ϝ䂌⃑罣ṿ痔칺꫉筜ꨱ謏裳䏺嫀鞧꼲펿뇩奌䦇薡㌴ [ 383.343946][ C0] vkms_vblank_simulate: vblank timer overrun [ 383.350211][ T5901] usb 5-1: SerialNumber: 䰊 [ 383.358268][T10916] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 383.438923][T10922] 9pnet_fd: Insufficient options for proto=fd [ 383.449035][T10922] 9pnet_fd: Insufficient options for proto=fd [ 383.703780][ T5951] konepure 0003:1E7D:2DB4.0029: unknown main item tag 0x0 [ 383.711087][ T5951] konepure 0003:1E7D:2DB4.0029: unknown main item tag 0x0 [ 383.719087][ T5951] konepure 0003:1E7D:2DB4.0029: item fetching failed at offset 2/4 [ 383.727726][ T5951] konepure 0003:1E7D:2DB4.0029: parse failed [ 383.733809][ T5951] konepure 0003:1E7D:2DB4.0029: probe with driver konepure failed with error -22 [ 383.774512][ T5901] usbhid 5-1:1.0: can't add hid device: -71 [ 383.780785][ T5901] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 383.793088][ T5901] usb 5-1: USB disconnect, device number 16 [ 383.902926][ T5951] usb 1-1: USB disconnect, device number 112 [ 384.080293][T10930] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1613'. [ 384.139790][T10936] Can't find a SQUASHFS superblock on nullb0 [ 384.295865][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 384.305230][T10942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 384.363102][T10946] gfs2: not a GFS2 filesystem [ 384.400608][T10952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.410845][T10952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.469393][T10956] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.538425][T10952] block nbd3: Device being setup by another task [ 384.580098][T10952] block nbd3: shutting down sockets [ 384.589767][ T44] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 384.722494][T10970] syzkaller1: entered promiscuous mode [ 384.732056][T10970] syzkaller1: entered allmulticast mode [ 384.757436][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 384.764447][ T44] usb 5-1: config 1 has an invalid interface number: 226 but max is 0 [ 384.772972][ T44] usb 5-1: config 1 has no interface number 0 [ 384.779244][ T44] usb 5-1: config 1 interface 226 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 384.790242][ T44] usb 5-1: config 1 interface 226 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 384.803757][ T44] usb 5-1: New USB device found, idVendor=19d2, idProduct=1276, bcdDevice=85.1d [ 384.813753][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.822184][ T44] usb 5-1: Product: syz [ 384.826669][ T44] usb 5-1: Manufacturer: syz [ 384.841005][ T44] usb 5-1: SerialNumber: syz [ 384.859251][ T30] audit: type=1326 audit(1759793869.067:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10974 comm="syz.3.1626" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2cf078eec9 code=0x0 [ 385.081050][ T5901] libceph: connect (1)[c::]:6789 error -101 [ 385.091105][ T5901] libceph: mon0 (1)[c::]:6789 connect error [ 385.091982][ T44] option 5-1:1.226: GSM modem (1-port) converter detected [ 385.124796][ T44] usb 5-1: USB disconnect, device number 17 [ 385.128801][T10987] ceph: No mds server is up or the cluster is laggy [ 385.159020][ T44] option 5-1:1.226: device disconnected [ 385.168014][ T6379] udevd[6379]: setting mode of /dev/bus/usb/005/017 to 020664 failed: No such file or directory [ 385.179888][ T6379] udevd[6379]: setting owner of /dev/bus/usb/005/017 to uid=0, gid=0 failed: No such file or directory [ 385.451920][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.458349][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.557401][ T5951] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 385.577297][ T44] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 385.719090][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 385.730063][ T5951] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 385.739310][ T44] usb 5-1: Using ep0 maxpacket: 32 [ 385.744529][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 385.755574][ T5951] usb 1-1: config 0 descriptor?? [ 385.760709][ T44] usb 5-1: unable to get BOS descriptor or descriptor too short [ 385.774824][ T44] usb 5-1: config 129 has an invalid interface number: 7 but max is 0 [ 385.783219][ T44] usb 5-1: config 129 has no interface number 0 [ 385.789621][ T44] usb 5-1: config 129 interface 7 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 385.800742][ T44] usb 5-1: config 129 interface 7 altsetting 128 bulk endpoint 0xA has invalid maxpacket 8 [ 385.810822][ T44] usb 5-1: config 129 interface 7 altsetting 128 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 385.822734][ T44] usb 5-1: config 129 interface 7 altsetting 128 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 385.833947][ T44] usb 5-1: config 129 interface 7 altsetting 128 bulk endpoint 0x1 has invalid maxpacket 1023 [ 385.845108][ T44] usb 5-1: config 129 interface 7 has no altsetting 0 [ 385.855722][ T44] usb 5-1: New USB device found, idVendor=0711, idProduct=0230, bcdDevice=81.60 [ 385.865039][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.873132][ T44] usb 5-1: Product: syz [ 385.873152][ T44] usb 5-1: Manufacturer: syz [ 385.873167][ T44] usb 5-1: SerialNumber: syz [ 385.884614][T10999] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 385.895623][T10999] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 385.973582][T11005] program syz.3.1634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 386.124952][T10999] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 386.201617][ T44] mct_u232 5-1:129.7: MCT U232 converter detected [ 386.203393][ T44] mct_u232 ttyUSB0: expected endpoint missing [ 386.218604][ T44] usb 5-1: USB disconnect, device number 18 [ 386.232468][ T44] mct_u232 5-1:129.7: device disconnected [ 386.843736][T11010] [ 386.843750][T11010] ====================================================== [ 386.843760][T11010] WARNING: possible circular locking dependency detected [ 386.843770][T11010] syzkaller #0 Not tainted [ 386.843782][T11010] ------------------------------------------------------ [ 386.843790][T11010] syz.4.1635/11010 is trying to acquire lock: [ 386.843802][T11010] ffff88801cab0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x2fb/0x3e0 [ 386.843868][T11010] [ 386.843868][T11010] but task is already holding lock: [ 386.843876][T11010] ffff88801cab0188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 386.843922][T11010] [ 386.843922][T11010] which lock already depends on the new lock. [ 386.843922][T11010] [ 386.843930][T11010] [ 386.843930][T11010] the existing dependency chain (in reverse order) is: [ 386.843938][T11010] [ 386.843938][T11010] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 386.843968][T11010] lock_acquire+0x120/0x360 [ 386.843992][T11010] down_write+0x96/0x1f0 [ 386.844017][T11010] kernfs_add_one+0x41/0x520 [ 386.844036][T11010] kernfs_create_dir_ns+0xde/0x130 [ 386.844057][T11010] internal_create_group+0x419/0x1110 [ 386.844076][T11010] cpuhp_invoke_callback+0x445/0x860 [ 386.844105][T11010] cpuhp_issue_call+0x430/0x7a0 [ 386.844132][T11010] __cpuhp_setup_state_cpuslocked+0x3df/0x6c0 [ 386.844159][T11010] __cpuhp_setup_state+0x3f/0x60 [ 386.844185][T11010] do_one_initcall+0x236/0x820 [ 386.844204][T11010] do_initcall_level+0x104/0x190 [ 386.844225][T11010] do_initcalls+0x59/0xa0 [ 386.844241][T11010] kernel_init_freeable+0x334/0x4b0 [ 386.844259][T11010] kernel_init+0x1d/0x1d0 [ 386.844287][T11010] ret_from_fork+0x4bc/0x870 [ 386.844310][T11010] ret_from_fork_asm+0x1a/0x30 [ 386.844332][T11010] [ 386.844332][T11010] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 386.844362][T11010] [ 386.844362][T11010] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 386.844391][T11010] lock_acquire+0x120/0x360 [ 386.844428][T11010] cpus_read_lock+0x42/0x160 [ 386.844450][T11010] static_key_slow_inc+0x12/0x30 [ 386.844468][T11010] setup_udp_tunnel_sock+0x34f/0x550 [ 386.844487][T11010] l2tp_tunnel_register+0xcb6/0x1320 [ 386.844514][T11010] pppol2tp_connect+0x87c/0x1750 [ 386.844541][T11010] __sys_connect+0x316/0x440 [ 386.844561][T11010] __x64_sys_connect+0x7a/0x90 [ 386.844581][T11010] do_syscall_64+0xfa/0xfa0 [ 386.844602][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.844625][T11010] [ 386.844625][T11010] -> #7 (sk_lock-AF_INET){+.+.}-{0:0}: [ 386.844655][T11010] lock_acquire+0x120/0x360 [ 386.844677][T11010] lock_sock_nested+0x48/0x100 [ 386.844706][T11010] inet_shutdown+0x6a/0x390 [ 386.844723][T11010] nbd_mark_nsock_dead+0x2e9/0x560 [ 386.844753][T11010] sock_shutdown+0x15e/0x260 [ 386.844779][T11010] nbd_config_put+0x342/0x790 [ 386.844805][T11010] nbd_release+0xfe/0x140 [ 386.844820][T11010] bdev_release+0x536/0x650 [ 386.844851][T11010] blkdev_release+0x15/0x20 [ 386.844875][T11010] __fput+0x44c/0xa70 [ 386.844903][T11010] task_work_run+0x1d4/0x260 [ 386.844923][T11010] do_exit+0x6b5/0x2300 [ 386.844940][T11010] do_group_exit+0x21c/0x2d0 [ 386.844976][T11010] get_signal+0x1285/0x1340 [ 386.845005][T11010] arch_do_signal_or_restart+0xa0/0x790 [ 386.845030][T11010] exit_to_user_mode_loop+0x72/0x130 [ 386.845056][T11010] do_syscall_64+0x2bd/0xfa0 [ 386.845080][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.845101][T11010] [ 386.845101][T11010] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 386.845136][T11010] lock_acquire+0x120/0x360 [ 386.845161][T11010] __mutex_lock+0x187/0x1350 [ 386.845185][T11010] nbd_queue_rq+0x257/0xf10 [ 386.845217][T11010] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 386.845242][T11010] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 386.845269][T11010] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 386.845296][T11010] blk_mq_run_hw_queue+0x348/0x4f0 [ 386.845317][T11010] blk_mq_dispatch_list+0xd0c/0xe00 [ 386.845342][T11010] blk_mq_flush_plug_list+0x469/0x550 [ 386.845367][T11010] __blk_flush_plug+0x3d3/0x4b0 [ 386.845391][T11010] __submit_bio+0x2d3/0x5a0 [ 386.845417][T11010] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 386.845441][T11010] block_read_full_folio+0x599/0x830 [ 386.845463][T11010] filemap_read_folio+0x117/0x380 [ 386.845489][T11010] do_read_cache_folio+0x350/0x590 [ 386.845515][T11010] read_part_sector+0xb6/0x2b0 [ 386.845537][T11010] adfspart_check_ICS+0xa4/0xa50 [ 386.845561][T11010] bdev_disk_changed+0x75f/0x14b0 [ 386.845584][T11010] blkdev_get_whole+0x380/0x510 [ 386.845608][T11010] bdev_open+0x31e/0xd30 [ 386.845631][T11010] blkdev_open+0x457/0x600 [ 386.845657][T11010] do_dentry_open+0x953/0x13f0 [ 386.845688][T11010] vfs_open+0x3b/0x340 [ 386.845717][T11010] path_openat+0x2ee5/0x3830 [ 386.845737][T11010] do_filp_open+0x1fa/0x410 [ 386.845757][T11010] do_sys_openat2+0x121/0x1c0 [ 386.845788][T11010] __x64_sys_openat+0x138/0x170 [ 386.845820][T11010] do_syscall_64+0xfa/0xfa0 [ 386.845854][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.845876][T11010] [ 386.845876][T11010] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 386.845910][T11010] lock_acquire+0x120/0x360 [ 386.845936][T11010] __mutex_lock+0x187/0x1350 [ 386.845961][T11010] nbd_queue_rq+0xc8/0xf10 [ 386.845992][T11010] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 386.846016][T11010] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 386.846043][T11010] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 386.846069][T11010] blk_mq_run_hw_queue+0x348/0x4f0 [ 386.846090][T11010] blk_mq_dispatch_list+0xd0c/0xe00 [ 386.846115][T11010] blk_mq_flush_plug_list+0x469/0x550 [ 386.846153][T11010] __blk_flush_plug+0x3d3/0x4b0 [ 386.846176][T11010] __submit_bio+0x2d3/0x5a0 [ 386.846200][T11010] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 386.846222][T11010] block_read_full_folio+0x599/0x830 [ 386.846242][T11010] filemap_read_folio+0x117/0x380 [ 386.846265][T11010] do_read_cache_folio+0x350/0x590 [ 386.846290][T11010] read_part_sector+0xb6/0x2b0 [ 386.846311][T11010] adfspart_check_ICS+0xa4/0xa50 [ 386.846333][T11010] bdev_disk_changed+0x75f/0x14b0 [ 386.846354][T11010] blkdev_get_whole+0x380/0x510 [ 386.846377][T11010] bdev_open+0x31e/0xd30 [ 386.846398][T11010] blkdev_open+0x457/0x600 [ 386.846423][T11010] do_dentry_open+0x953/0x13f0 [ 386.846451][T11010] vfs_open+0x3b/0x340 [ 386.846478][T11010] path_openat+0x2ee5/0x3830 [ 386.846497][T11010] do_filp_open+0x1fa/0x410 [ 386.846516][T11010] do_sys_openat2+0x121/0x1c0 [ 386.846545][T11010] __x64_sys_openat+0x138/0x170 [ 386.846576][T11010] do_syscall_64+0xfa/0xfa0 [ 386.846598][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.846617][T11010] [ 386.846617][T11010] -> #4 (set->srcu){.+.+}-{0:0}: [ 386.846649][T11010] lock_sync+0xba/0x160 [ 386.846672][T11010] __synchronize_srcu+0x96/0x3a0 [ 386.846708][T11010] elevator_switch+0x12b/0x640 [ 386.846729][T11010] elevator_change+0x315/0x4c0 [ 386.846749][T11010] elevator_set_default+0x186/0x260 [ 386.846769][T11010] blk_register_queue+0x34e/0x3f0 [ 386.846793][T11010] __add_disk+0x677/0xd50 [ 386.846817][T11010] add_disk_fwnode+0xfc/0x480 [ 386.846847][T11010] nbd_dev_add+0x717/0xae0 [ 386.846884][T11010] nbd_init+0x168/0x1f0 [ 386.846909][T11010] do_one_initcall+0x236/0x820 [ 386.846930][T11010] do_initcall_level+0x104/0x190 [ 386.846948][T11010] do_initcalls+0x59/0xa0 [ 386.846964][T11010] kernel_init_freeable+0x334/0x4b0 [ 386.846982][T11010] kernel_init+0x1d/0x1d0 [ 386.847008][T11010] ret_from_fork+0x4bc/0x870 [ 386.847031][T11010] ret_from_fork_asm+0x1a/0x30 [ 386.847053][T11010] [ 386.847053][T11010] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 386.847083][T11010] lock_acquire+0x120/0x360 [ 386.847105][T11010] __mutex_lock+0x187/0x1350 [ 386.847126][T11010] elevator_change+0x1e5/0x4c0 [ 386.847153][T11010] elevator_set_none+0x42/0xb0 [ 386.847173][T11010] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 386.847199][T11010] nbd_start_device+0x17f/0xb10 [ 386.847225][T11010] nbd_genl_connect+0x135b/0x18f0 [ 386.847249][T11010] genl_family_rcv_msg_doit+0x215/0x300 [ 386.847276][T11010] genl_rcv_msg+0x60e/0x790 [ 386.847301][T11010] netlink_rcv_skb+0x208/0x470 [ 386.847316][T11010] genl_rcv+0x28/0x40 [ 386.847337][T11010] netlink_unicast+0x82f/0x9e0 [ 386.847352][T11010] netlink_sendmsg+0x805/0xb30 [ 386.847371][T11010] __sock_sendmsg+0x21c/0x270 [ 386.847399][T11010] ____sys_sendmsg+0x505/0x830 [ 386.847421][T11010] ___sys_sendmsg+0x21f/0x2a0 [ 386.847443][T11010] __x64_sys_sendmsg+0x19b/0x260 [ 386.847465][T11010] do_syscall_64+0xfa/0xfa0 [ 386.847485][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.847503][T11010] [ 386.847503][T11010] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 386.847540][T11010] lock_acquire+0x120/0x360 [ 386.847563][T11010] blk_alloc_queue+0x538/0x620 [ 386.847582][T11010] __blk_mq_alloc_disk+0x15c/0x340 [ 386.847607][T11010] nbd_dev_add+0x46c/0xae0 [ 386.847632][T11010] nbd_init+0x168/0x1f0 [ 386.847656][T11010] do_one_initcall+0x236/0x820 [ 386.847675][T11010] do_initcall_level+0x104/0x190 [ 386.847693][T11010] do_initcalls+0x59/0xa0 [ 386.847709][T11010] kernel_init_freeable+0x334/0x4b0 [ 386.847727][T11010] kernel_init+0x1d/0x1d0 [ 386.847753][T11010] ret_from_fork+0x4bc/0x870 [ 386.847775][T11010] ret_from_fork_asm+0x1a/0x30 [ 386.847794][T11010] [ 386.847794][T11010] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 386.847823][T11010] lock_acquire+0x120/0x360 [ 386.847853][T11010] fs_reclaim_acquire+0x72/0x100 [ 386.847873][T11010] kmem_cache_alloc_noprof+0x45/0x6e0 [ 386.847901][T11010] __kernfs_iattrs+0xd9/0x320 [ 386.847918][T11010] kernfs_iop_setattr+0xea/0x3f0 [ 386.847933][T11010] notify_change+0xc1a/0xf40 [ 386.847951][T11010] do_truncate+0x1a4/0x220 [ 386.847971][T11010] path_openat+0x306c/0x3830 [ 386.847988][T11010] do_filp_open+0x1fa/0x410 [ 386.848006][T11010] do_sys_openat2+0x121/0x1c0 [ 386.848033][T11010] __x64_sys_openat+0x138/0x170 [ 386.848061][T11010] do_syscall_64+0xfa/0xfa0 [ 386.848082][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.848101][T11010] [ 386.848101][T11010] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 386.848131][T11010] validate_chain+0xb9b/0x2140 [ 386.848158][T11010] __lock_acquire+0xab9/0xd20 [ 386.848180][T11010] lock_acquire+0x120/0x360 [ 386.848202][T11010] down_write+0x96/0x1f0 [ 386.848225][T11010] kernfs_link_sibling+0x2fb/0x3e0 [ 386.848245][T11010] kernfs_add_one+0x1e0/0x520 [ 386.848263][T11010] kernfs_create_dir_ns+0xde/0x130 [ 386.848283][T11010] sysfs_create_dir_ns+0x123/0x280 [ 386.848311][T11010] kobject_add_internal+0x59f/0xb40 [ 386.848336][T11010] kobject_add+0x155/0x220 [ 386.848357][T11010] device_add+0x408/0xb50 [ 386.848373][T11010] __add_disk+0x4be/0xd50 [ 386.848399][T11010] add_disk_fwnode+0x149/0x480 [ 386.848423][T11010] md_alloc+0x7fc/0xee0 [ 386.848438][T11010] md_alloc_and_put+0x1a/0x1f0 [ 386.848461][T11010] blk_request_module+0x27d/0x2a0 [ 386.848486][T11010] blkdev_get_no_open+0x3f/0xe0 [ 386.848525][T11010] blkdev_open+0x1de/0x600 [ 386.848549][T11010] do_dentry_open+0x953/0x13f0 [ 386.848589][T11010] vfs_open+0x3b/0x340 [ 386.848616][T11010] path_openat+0x2ee5/0x3830 [ 386.848635][T11010] do_filp_open+0x1fa/0x410 [ 386.848653][T11010] do_sys_openat2+0x121/0x1c0 [ 386.848681][T11010] __x64_sys_openat+0x138/0x170 [ 386.848711][T11010] do_syscall_64+0xfa/0xfa0 [ 386.848733][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.848753][T11010] [ 386.848753][T11010] other info that might help us debug this: [ 386.848753][T11010] [ 386.848761][T11010] Chain exists of: [ 386.848761][T11010] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 386.848761][T11010] [ 386.848802][T11010] Possible unsafe locking scenario: [ 386.848802][T11010] [ 386.848810][T11010] CPU0 CPU1 [ 386.848816][T11010] ---- ---- [ 386.848839][T11010] lock(&root->kernfs_rwsem); [ 386.848856][T11010] lock(cpuhp_state_mutex); [ 386.848874][T11010] lock(&root->kernfs_rwsem); [ 386.848891][T11010] lock(&root->kernfs_iattr_rwsem); [ 386.848908][T11010] [ 386.848908][T11010] *** DEADLOCK *** [ 386.848908][T11010] [ 386.848921][T11010] 3 locks held by syz.4.1635/11010: [ 386.848934][T11010] #0: ffffffff8e842ac8 (major_names_lock){+.+.}-{4:4}, at: blk_request_module+0x35/0x2a0 [ 386.848996][T11010] #1: ffffffff8f19cd08 (disks_mutex){+.+.}-{4:4}, at: md_alloc+0x40/0xee0 [ 386.849045][T11010] #2: ffff88801cab0188 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x520 [ 386.849098][T11010] [ 386.849098][T11010] stack backtrace: [ 386.849110][T11010] CPU: 0 UID: 0 PID: 11010 Comm: syz.4.1635 Not tainted syzkaller #0 PREEMPT(full) [ 386.849133][T11010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 386.849146][T11010] Call Trace: [ 386.849155][T11010] [ 386.849163][T11010] dump_stack_lvl+0x189/0x250 [ 386.849186][T11010] ? __pfx_dump_stack_lvl+0x10/0x10 [ 386.849206][T11010] ? __pfx__printk+0x10/0x10 [ 386.849225][T11010] ? print_lock_name+0xde/0x100 [ 386.849258][T11010] print_circular_bug+0x2ee/0x310 [ 386.849300][T11010] check_noncircular+0x134/0x160 [ 386.849331][T11010] validate_chain+0xb9b/0x2140 [ 386.849360][T11010] ? __pfx___schedule+0x10/0x10 [ 386.849381][T11010] ? validate_chain+0x897/0x2140 [ 386.849415][T11010] __lock_acquire+0xab9/0xd20 [ 386.849440][T11010] ? kernfs_link_sibling+0x2fb/0x3e0 [ 386.849460][T11010] lock_acquire+0x120/0x360 [ 386.849482][T11010] ? kernfs_link_sibling+0x2fb/0x3e0 [ 386.849508][T11010] down_write+0x96/0x1f0 [ 386.849533][T11010] ? kernfs_link_sibling+0x2fb/0x3e0 [ 386.849553][T11010] ? __pfx_down_write+0x10/0x10 [ 386.849577][T11010] ? kernfs_root+0x1c/0x230 [ 386.849594][T11010] ? kernfs_root+0x1c/0x230 [ 386.849611][T11010] ? kernfs_root+0x1c/0x230 [ 386.849628][T11010] ? kernfs_root+0x1ea/0x230 [ 386.849647][T11010] kernfs_link_sibling+0x2fb/0x3e0 [ 386.849671][T11010] kernfs_add_one+0x1e0/0x520 [ 386.849692][T11010] kernfs_create_dir_ns+0xde/0x130 [ 386.849715][T11010] sysfs_create_dir_ns+0x123/0x280 [ 386.849746][T11010] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 386.849776][T11010] ? do_raw_spin_unlock+0x122/0x240 [ 386.849797][T11010] kobject_add_internal+0x59f/0xb40 [ 386.849826][T11010] kobject_add+0x155/0x220 [ 386.849858][T11010] ? __pfx_kobject_add+0x10/0x10 [ 386.849884][T11010] ? get_device_parent+0x366/0x3a0 [ 386.849905][T11010] device_add+0x408/0xb50 [ 386.849926][T11010] __add_disk+0x4be/0xd50 [ 386.849957][T11010] add_disk_fwnode+0x149/0x480 [ 386.849982][T11010] ? do_raw_spin_unlock+0x122/0x240 [ 386.850002][T11010] md_alloc+0x7fc/0xee0 [ 386.850020][T11010] ? __pfx_md_probe+0x10/0x10 [ 386.850043][T11010] md_alloc_and_put+0x1a/0x1f0 [ 386.850067][T11010] blk_request_module+0x27d/0x2a0 [ 386.850095][T11010] blkdev_get_no_open+0x3f/0xe0 [ 386.850118][T11010] blkdev_open+0x1de/0x600 [ 386.850144][T11010] ? __pfx_blkdev_open+0x10/0x10 [ 386.850168][T11010] do_dentry_open+0x953/0x13f0 [ 386.850202][T11010] vfs_open+0x3b/0x340 [ 386.850227][T11010] ? path_openat+0x2ecd/0x3830 [ 386.850246][T11010] path_openat+0x2ee5/0x3830 [ 386.850278][T11010] ? __pfx_path_openat+0x10/0x10 [ 386.850305][T11010] do_filp_open+0x1fa/0x410 [ 386.850323][T11010] ? __lock_acquire+0xab9/0xd20 [ 386.850347][T11010] ? __pfx_do_filp_open+0x10/0x10 [ 386.850375][T11010] ? _raw_spin_unlock+0x28/0x50 [ 386.850393][T11010] ? alloc_fd+0x64c/0x6c0 [ 386.850420][T11010] do_sys_openat2+0x121/0x1c0 [ 386.850449][T11010] ? __pfx_do_sys_openat2+0x10/0x10 [ 386.850482][T11010] ? rcu_is_watching+0x15/0xb0 [ 386.850510][T11010] __x64_sys_openat+0x138/0x170 [ 386.850540][T11010] do_syscall_64+0xfa/0xfa0 [ 386.850561][T11010] ? lockdep_hardirqs_on+0x9c/0x150 [ 386.850582][T11010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.850600][T11010] ? clear_bhb_loop+0x60/0xb0 [ 386.850621][T11010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.850639][T11010] RIP: 0033:0x7f732878eec9 [ 386.850656][T11010] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.850674][T11010] RSP: 002b:00007f73295fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 386.850693][T11010] RAX: ffffffffffffffda RBX: 00007f73289e6090 RCX: 00007f732878eec9 [ 386.850708][T11010] RDX: 0000000000000000 RSI: 0000200000000a80 RDI: ffffffffffffff9c [ 386.850722][T11010] RBP: 00007f7328811f91 R08: 0000000000000000 R09: 0000000000000000 [ 386.850737][T11010] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 386.850749][T11010] R13: 00007f73289e6128 R14: 00007f73289e6090 R15: 00007ffceeb3cb58 [ 386.850771][T11010] [ 386.872613][T11010] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 388.369177][ T5951] usbhid 1-1:0.0: can't add hid device: -71 [ 388.385977][T11010] block device autoloading is deprecated and will be removed. [ 388.393895][ T5951] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 388.593682][ T5951] usb 1-1: USB disconnect, device number 113