last executing test programs: 2m46.467898595s ago: executing program 3 (id=984): r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)='127.0.0.1:/export>', &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,soft,timeo=1,retrans=1\x00', 0x5e}]}) r1 = accept$inet(r0, 0x0, 0x0) write(r1, &(0x7f0000000300), 0x100) 2m46.06884455s ago: executing program 3 (id=986): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0xf22fff7f, &(0x7f0000000180)=[{&(0x7f0000000080)="31de76fb398bc62d058b8a96924594f5476a0824be53f7a5949f80614c42391e4b80412938c955d34d37eb96ba7849c3eb823bb36724bd6f6d0219cfe5c884afcd2bdea5acf9c877c03dcdbbb3e47417b6707c27d4c5c1db1924071f6b6f23c7d199c799c9b0c41101e625fcdb7bbfd12a3eeeef4540a5698f058aaf6a141e5d333929b92a7f64e925bf0ef424c3ef29fcd5fd4721c547fde6abe4d47048b64511693624b0d786711abe4a66e250fcbfe95ac9037e58f331b26b6ed0d08e5c73ba4c49", 0xc00e}], 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d5f47f000000000000010000000000020000000000140000000000000000000000020000000000000000000000140000000000000000000000020000000000000000000000110000000000000000000000010000000000000000000000110000000000000002000000010000000000000000000000000000000000000000000000070000008300000000960000206a77bdd1a004129054e7704a000002"], 0xf}, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) write(r0, &(0x7f0000000000)="d9290ae2", 0x4) 2m45.894146356s ago: executing program 3 (id=987): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r2, 0x40086607, &(0x7f0000000100)=0x6) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m45.60564291s ago: executing program 3 (id=989): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/../file0/file0\x00', 0x0, 0x2a530d1, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f0000000500)='./file0/../file0/file0\x00', 0x0, 0x2127099, 0x0) umount2(&(0x7f0000000080)='./file0/../file0/file0\x00', 0x2) 2m45.398179065s ago: executing program 3 (id=991): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04", 0x13}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x5931a207a26eb393) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x8001, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x80, 0x0}, 0xd4) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) 2m44.982579993s ago: executing program 3 (id=994): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0x20}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r0, &(0x7f0000000740)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2m44.55909096s ago: executing program 32 (id=994): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000040)=0x1) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000640)=""/201, 0x20}], 0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000280)={{0x1, 0x1}}) read(r0, &(0x7f0000000740)=""/4096, 0x1000) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 2m36.560968133s ago: executing program 0 (id=1024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x2100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, &(0x7f00000000c0)="401d83966ba526450f23aec7442400f8550000c7442402e84782c5c7442406000000000f011c24b9800000c00f3235001000000f30c442ddac0bc48195dba800000100470f868b1bc9630fc77900646726440f231366b8f7000f00d0", 0x5c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m36.063085778s ago: executing program 0 (id=1027): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5d, 0xfffffffffffffff9, 0x10000000}) 2m35.817329575s ago: executing program 0 (id=1029): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x17) capset(0x0, 0x0) setuid(0xee01) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) sendmmsg$unix(r1, &(0x7f0000005400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18, 0x40000}}], 0x1, 0x4004080) 2m35.243220639s ago: executing program 0 (id=1032): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x48800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x100000000000000, 0x2, 0x180, 0x4, 0xcbc, 0xf1, 0x2, 0x0, 0x8002, 0x6, 0xa32, 0xfffffffffffffffd, 0x9, 0x9, 0x9], 0x58000, 0x3c4210}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0x8, 0xc5, 0x0, 0x3, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x6, 0x6, 0x9, 0x4, 0xfe, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) 2m35.020488307s ago: executing program 0 (id=1034): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000100)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x1e5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m34.8413953s ago: executing program 0 (id=1035): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}, {&(0x7f0000000600)="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", 0xab6}], 0x2, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1}, 0x0) 2m34.709968495s ago: executing program 2 (id=1036): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) r1 = syz_open_pts(r0, 0x8000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r2, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000c00)="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", 0xa39}, {&(0x7f0000000300)="a94082726c6fdc48399955386f1031d1c5a26d84bd1de22432dd50a25ba4b4d25b12b836e16a62b08a1481de6b60d68a10b1fa17a7f8a9ebbd53ec8331f621769e238e63e4483c6e4cea0c2eeb9506558eb902c3be7cd741bccdd2011e29a217e9e0aca42fa60f8e21648df28c0145fadb90da9b76f05004c08bcf0a", 0x7c}], 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000803)=0xc0) 2m33.502124978s ago: executing program 2 (id=1041): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000000)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='io.stat\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x5f, 0x3}) 2m33.199343129s ago: executing program 2 (id=1042): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) 2m31.496290372s ago: executing program 2 (id=1049): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x19, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x9) syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) 2m30.70850806s ago: executing program 2 (id=1050): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x17d) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 2m29.525084901s ago: executing program 2 (id=1053): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001ac0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000300)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 2m19.724364042s ago: executing program 33 (id=1035): r0 = socket$alg(0x26, 0x5, 0x0) close(0x3) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00"/32, 0x20) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$inet_sctp(r2, &(0x7f0000005f00)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000380)="10fb478f8e4990cd962993ad8dd206d2060d81e87f1b49d6be24051a259d124d3ba0b6f677b873c2082876bef74261d8b93054abb23fcc0341511f7cc53bb18d6d87be7bdb79930fdc799e152cd2d6cd25956eaec876858a5f5f9da686ab52bf54d62de5ea1ed7375970525d7b079986a72530b1244ac7bff4ea6e092cfac6d8f55339db56379dd861b80aa3b800"/154, 0x9a}, {&(0x7f0000000600)="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", 0xab6}], 0x2, 0x0, 0x0, 0x4040000}], 0x1, 0x800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f00000024c0)=""/4096, 0x1000}], 0x1}, 0x0) 2m13.843531202s ago: executing program 34 (id=1053): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000001500)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0, 0x2000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001ac0)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, 0x0, 0x9000}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000300)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) 1m57.523038775s ago: executing program 6 (id=1173): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000380)={0x1c, &(0x7f0000000180)={0x20, 0x17, 0x4, "d748f038"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000d80)={0x44, &(0x7f0000000600)={0x20, 0x14, 0x4, "f1981657"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, &(0x7f0000000040)={0x0, 0x3, 0x2, {0x2, 0x31}}, 0x0}, &(0x7f0000000640)={0x44, &(0x7f0000000140)={0x40, 0x17, 0x18, "83ce5ea994d82961ccd6f6553c75c80772177851d30df333"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m54.890381831s ago: executing program 6 (id=1179): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x7, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000, 0x2839d1}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m54.565363474s ago: executing program 6 (id=1181): socket$inet6(0xa, 0x3, 0x3c) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000000000407d1ef62c00000000000109022400010000000009040000010300020009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000400)={0x18, &(0x7f0000000940)=ANY=[@ANYBLOB='\x000\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="200182"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000007c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="20010d"], 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m51.800308137s ago: executing program 6 (id=1196): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000241)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000242)=0x3f) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000244)=0x1c) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000245)=0x1) 1m49.78460083s ago: executing program 6 (id=1201): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x10) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) chdir(&(0x7f0000000240)='./file0\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 1m49.506495761s ago: executing program 6 (id=1203): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610505090703"], 0x11) 1m34.343612186s ago: executing program 35 (id=1203): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x8, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="610505090703"], 0x11) 1m19.848781033s ago: executing program 1 (id=1315): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f00000006c0)={@fd={0x66642a85, 0x0, r1}, @fd={0x66642a85, 0x0, r2}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000bc0)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 1m19.544417383s ago: executing program 1 (id=1318): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000340)={'wlan1\x00'}) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0xae, 0x3, 0x7, 0x0, 0xa, 0x7, 0xfe, 0x8, 0x10, 0x7, 0x3, 0x1, 0x0, 0x3, 0x19, 0x4, 0x81, 0x7, 0x7f, '\x00', 0x2, 0x8}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x40000072, 0x0, 0x80000006}]}) 1m18.676170841s ago: executing program 1 (id=1324): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r1, &(0x7f00000002c0)=""/153, 0x99) r2 = memfd_create(&(0x7f0000000500)='\x14\xa3\xbb\a\x002RgZ*\xc5\x9e[,\xe5uR\x94\xaa\xdc0\xe6n\xb8\xea\xe8\x99Lh(\xc7\xbb_\x81\x15f\xe7\x100\r\x1fE\x82\xf5\xfd\x83\xff{\xa0\x15\xffK\xe4\x98\x93\xf9\xc4!_\x96\xe8&,\xdf\x12\xc0\xa7Y1\x8bUs\x91)\x89\xd0\xa1OF4\xa4fI\a\x84_r\xc6\xdaq%\xd3\x98\n\x7fmF\xa9\xbb\x16\x8bxb\xc8\xfc\xad?\x01\xf40\xf5\xc3\xf3+\xa7\x94=\x96\xe6*~\x18\x9c\xfe\xfe\xdcNWGn\xfa\xf8,\xa9\x84\xf7\xe1RA9\xfeD@\x18b\x1dgz\xdfc\x05>O\xa0\x8b\xce\xe0\x8cS\xfanA\xecx\xc4\xdd\x82aT\xb5b\xc5\xaa\x8fj\xb2\xc3\x96\x96\"&)!Z\x1e\tBq\x96L\x97\xc9G\xaa\x85\xc3C \xa1\x98o\f\xf2\x02\x05oV\a\x82\x9e\")\xfb\xa09b\xb6\v\xb3\xe1p\x97\xe9\x13\xb5-\xc1x<\xc9]\x85\xbb\xb6h\xee\x91Q\xd0V\x80\xbc\x88?\x9cr\x13<\xa5g=CA\xd8d\x86\fr\xee=0x0) sendmsg$NFC_CMD_SE_IO(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x5, 0x19, 'j'}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44040}, 0x2400cc84) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000240)=ANY=[@ANYBLOB="1201100154e108101e041840b4ed010203010902120001000000000904"], 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) timer_gettime(0x0, 0x0) syz_usb_control_io$hid(r6, 0x0, &(0x7f0000000500)={0x2c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r7, 0x89e9) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x80010, 0xffffffffffffffff, 0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00'}) r8 = syz_open_dev$hidraw(&(0x7f0000000200), 0xe, 0x400100) ioctl$HIDIOCGRDESC(r8, 0x90044802, &(0x7f0000000540)={0x3b8, "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"}) r9 = socket$inet_udp(0x2, 0x2, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r10, &(0x7f0000000380)=""/4092, 0xffc) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x4c}}, 0xffffff93) sendmmsg$inet(r9, &(0x7f0000000080)=[{{&(0x7f0000000280)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f00000050c0)=[{&(0x7f0000000340)="67d628c20f6a631cc7", 0x9}], 0x1}}], 0x1, 0x4000004) ioctl$OCFS2_IOC_REFLINK(r9, 0x40186f04, &(0x7f00000001c0)={&(0x7f0000000140)='\x00', &(0x7f0000000180)='veth1_to_batadv\x00', 0x4}) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0xbda, 0x4014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x1, 0x0, 0x7, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x5, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0x6, 0x7f, {0x7, 0x25, 0x1, 0x0, 0xfd, 0x382}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x8, 0x3, 0x4, {0x7, 0x25, 0x1, 0x8, 0xf, 0x9}}}}}}}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)="2e00000011008b88040f80ee59acbc04130800480f0000005e2900421803001825800000000000000280000c0012", 0x2e}], 0x1}, 0x0) 5.666444627s ago: executing program 4 (id=1605): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000a80)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000d40)={0x84, &(0x7f0000000740)={0x20, 0x15, 0x4, "8b27be98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.028252021s ago: executing program 7 (id=1617): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='file0\x00', 0x42, 0x1ff) ftruncate(r2, 0xf4240) close(r2) mkdir(&(0x7f00000000c0)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='file0', 0x5) close(r4) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) close(r5) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000540), 0x0, 0x0) close(r6) write(r1, &(0x7f0000000300), 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0xfffffffffffffffd, &(0x7f0000000280)) 2.706179049s ago: executing program 5 (id=1618): socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2.612204659s ago: executing program 5 (id=1619): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r1, 0x3b90, &(0x7f0000000040)="280000000010") r2 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x20, r5, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004110}, 0x8000) r6 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x1, 0x4, @tid=r6}, &(0x7f0000000340)) syz_open_procfs(r6, &(0x7f0000000080)='net/anycast6\x00') ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000000)=0x1) clock_gettime(0x0, 0x0) ppoll(&(0x7f00000002c0)=[{r2, 0x1000}, {r2, 0x40}, {r2, 0x1000}, {r2, 0x9614}, {r2, 0x180}, {r2, 0xa400}], 0x6, &(0x7f00000000c0)={0x0, 0x3938700}, &(0x7f00000003c0)={[0x26]}, 0x35) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000100)=0x100000) socket(0x22, 0x1, 0x1002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r7 = socket$netlink(0x10, 0x3, 0x2) bind$netlink(r7, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc) r8 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(r9, 0x0, 0x1a, &(0x7f0000000340)=0x1, 0x4) r10 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r10, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0x0, 0x10000009, 0xff7ffffb, 0x1}) ioctl$SNDCTL_DSP_GETOSPACE(r8, 0x8010500c, &(0x7f0000000100)) 2.572944244s ago: executing program 4 (id=1620): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./security\x00', &(0x7f0000000200)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./security/apparmor/.load\x00', 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='10000', 0x5) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x1308000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(0xffffffffffffffff, 0x11b, 0x6, &(0x7f0000000180)=0x4, 0x4) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x0, r2, 0x40}, 0x10) socket$kcm(0x10, 0x5, 0x10) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x33e000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x1, r4, 0x2d}, 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r5, &(0x7f0000000200)='1', 0x1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f00000014c0)=[&(0x7f00000013c0)={0x0, 0x0, 0x0, 0x5, 0x81, r7, 0x0, 0x0, 0x7fff, 0x0, 0x5}]) write(r0, &(0x7f0000000400)="04080076657273696f6e00020500000004080070726f66696c6500070502002f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x50) 2.409942595s ago: executing program 8 (id=1621): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0x4, 0x4001) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x97a6, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10040, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r3, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0), 0x0, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x1, @local, 'macvtap0\x00'}}, 0x1e) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, &(0x7f0000000080)={0x28, 0x0, r7, r6, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000001900)={0x28, 0x0, r7, 0x1000, &(0x7f0000000900)=""/4096}) ioctl$VHOST_SET_FEATURES(r5, 0x4008af00, &(0x7f0000000080)=0x200000000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2100000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x24, 0x4, 0x8, 0x301, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x884c}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c051}, 0x4000000) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, 0x0) sendmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) ptrace$setregs(0xd, 0x0, 0x2, 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000011008188e6b62aa73f72cc9f0ba1f8483d0000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc}) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) epoll_create1(0x0) 2.289588848s ago: executing program 4 (id=1622): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, 0x0, 0x0) 2.287445524s ago: executing program 7 (id=1623): socket$pppl2tp(0x18, 0x1, 0x1) r0 = syz_open_procfs(0x0, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x2000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f00000001c0)={r2, 0x0, 0xd}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r4, 0x0, 0x0) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) write(r4, &(0x7f0000001e00)="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", 0x244) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000200)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) close_range(r8, 0xffffffffffffffff, 0x0) 2.138139019s ago: executing program 4 (id=1624): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000400)=@filename='none\x00', 0x0, &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) write(r1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000700), 0x0) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0) write(r3, &(0x7f0000000d00)='0', 0x1) close(r3) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='usbip-vudc.0\n', 0xd) close(r4) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) connect$inet(r5, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@local, 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x28c, 0x1}, {0x7, 0x2, 0x3ff}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@rand_addr=0x64010102, 0x2000000, 0x33}, 0x0, @in6=@private1, 0x0, 0x3, 0x0, 0xb7, 0x0, 0x8000000}}, 0xe4) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x9, 0x4) 1.841503609s ago: executing program 8 (id=1625): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "6351f36b675d953ebe73ce168e84d5135a5ba63762fcb5da76813382a701d83ed8eddbadab1845a09539233c294dda5568f4f3675066bfaa2140cfb4c024fe77", 0x2c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x31, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x31, 0x30, 0x63, 0x66, 0x30, 0x30, 0x61, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 1.761649869s ago: executing program 8 (id=1626): r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/198, &(0x7f00000002c0)=0xc6) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a", @ANYRES32=r3], 0x14}, 0x1, 0x0, 0x0, 0x24008094}, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000540)=""/4114, 0x1012}], 0x1) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r1, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r2}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x6, r4}) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/direction\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000600)='2', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/num_groups\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='6', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.1/midi1_first_group\x00', 0x1, 0x0) symlinkat(&(0x7f0000000880)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000008c0)='./my_configfs/usb_gadget/g1/configs/c.1/midi2.usb0\x00') setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000000)=0x10000005, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e23, 0x5, @remote}, 0x1c) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000000c0)={[{@mpol={'mpol', 0x3d, {'bind', '=static', @val={0x3a, [0x2d]}}}}, {@usrquota}, {@usrquota_block_hardlimit={'usrquota_block_hardlimit', 0x3d, [0x31, 0x70]}}], [{@smackfshat={'smackfshat', 0x3d, 'tmpfs\x00'}}, {@fsname={'fsname', 0x3d, 'mp\x84\xa8\t\x009ol'}}]}) 1.627466652s ago: executing program 5 (id=1627): r0 = socket(0x15, 0x80805, 0x250) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000100)={0x0, 0x80000001}, 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r2, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) write$P9_RRENAME(r3, &(0x7f0000000100)={0x7, 0x15, 0x1}, 0x7) r4 = dup(r2) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) write$P9_RSETATTR(r3, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0x7) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x5, 0x1, 0x4, 0x0, 0x87}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000200)={0x9, 0xd75, 0x4, {0x1, @vbi={0x8, 0x1, 0x3, 0x41416770, [0x82, 0x7], [0xc153], 0x1}}, 0xd3}) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='memory.pressure\x00', 0x2, 0x0) r5 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x27d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7eff, 0xf, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe3, 0xa, 0x70}}}}}]}}]}}, 0x0) syz_usb_connect$uac1(0x0, 0xad, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405000596efc359090401000001020000090401010101020000090501090000000000072501000000000904020000010200000904020101010200000b240281000200018b7e8e07240100000000090582"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "45501821"}, @main=@item_4={0x3, 0x0, 0x8, "9e3ce079"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000001040)={{0x104, 0x0, 0x4, 0x4}, 'syz0\x00', 0x17}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/features\x00', 0x48000, 0x0) 1.434880965s ago: executing program 4 (id=1628): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000180)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x1, 0x0) write(r1, &(0x7f0000000200), 0x0) close(r1) write(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0', 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x29, 0x1, 0x0, 0x800, {{@in6=@private2, @in6=@private0, 0x0, 0x0, 0x4e23, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x3, 0x4}, {0x1, 0xa, 0x59e, 0xfffffdfffffffffe}, 0x2, 0x666bbc, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) r5 = dup(r3) syz_ublk_setup_queues(r5, r0, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe788, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x44b4, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12011001000000404c05740300000000000109022400010000f00909040008010300020009210000000122070009058103ff03000f0599510e5eb5d37a6338c777c3804926c31604cbb8c9ff623772a2957b5ff52f9cb25cf60e5e3a208e56f30cebd95b88c9f28af3b7fe9819cc8b71461f8d67bebc7f7d15a63e089bbbc28ce797fb595445e2766780827ccc9d89fe238fe080901c844f25d014dcb9bdab09f98baf9ac0704e8086d2afddb79d97c5195b7d877b87c28633c4ba98a6aee56b60b1abd97ca9dadd51f8ee87de0e2f56d352c01d889f"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(r6, &(0x7f00000002c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="f308e1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1.282029265s ago: executing program 7 (id=1629): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x4140045e}, 0xc) r7 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r7, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000000340)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000000240)={0x10, 0x0, 0x0, 0x51ee2927639cc674}, 0xc) r10 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r10, &(0x7f0000000300)={0x10, 0x0, 0xffffffff, 0x22ffffffff}, 0xc) r11 = socket$netlink(0x10, 0x3, 0x8) bind$netlink(r11, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r12 = socket$netlink(0x10, 0x3, 0x14) bind$netlink(r12, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc) r13 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r13, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc) bind$netlink(r1, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x1}, 0xc) r14 = socket$netlink(0x10, 0x3, 0x4) writev(r14, &(0x7f0000000100)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c707f8f00ff", 0x58}], 0x1) 1.247875564s ago: executing program 7 (id=1630): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000064000000030a01030000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140003006e657464657673696d300000000000000800000000000000140000001100", @ANYRES64=0xffffffffffffffff], 0xac}, 0x1, 0x0, 0x0, 0x4008855}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000030a03000000000000000200050000000900010073797a30000022000800030073797a300000000018000480140003007465616d5f736c6176655f310000000014000000110001"], 0x6c}, 0x1, 0x0, 0x0, 0x20008055}, 0x802) sendmsg$NFT_BATCH(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000400)=ANY=[@ANYRES8=0x0], 0x3c}, 0x1, 0x0, 0x0, 0x2004c040}, 0xc050) r2 = socket(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @local, 0x7ffd}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}, 0x1c) r3 = socket$kcm(0x29, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'wlan0\x00', 0x100}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES16=r5], 0x24}, 0x1, 0x0, 0x0, 0x4004090}, 0x4048000) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000001c0)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050074000000000000004400000008000300d9b8ca0def453cf6792e3e587f2d92e7ad255a0aecaa3a75ece321b4f49ed8207c4285830d4124d69733", @ANYRES32=r7, @ANYBLOB="0a0018000303030303030000050018010500000008000d0002000000"], 0x38}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300), &(0x7f0000000580)=ANY=[@ANYRES64=r1, @ANYBLOB="2d014d8b58b3dd94eba6185de7dc71a5ea908e66787bfc7f22e55e4eabca0ddde8e74a1951a679b01668df0f51148a8acdac66c03ba15d668c45db27ce4a1271079f1483a841ed0c679eb9cd5993c21dc3e39eba89320d68c56758747ccafc083cca6218ed007c398bec9bfd34fd8908113dbae9750bfd71e7aa4edae74f9269bedabbd075ca73"], 0x46) r8 = syz_open_dev$vim2m(&(0x7f0000000080), 0x20000000009, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) sendfile(r10, r3, 0x0, 0x5) r11 = openat$cgroup_procs(r9, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) sendfile(r11, r11, 0x0, 0xfff) sendfile(r10, r10, 0x0, 0x5) ioctl$vim2m_VIDIOC_QUERYBUF(r8, 0xc0585609, &(0x7f00000002c0)=@multiplanar_overlay={0x6, 0x3, 0x4, 0x800, 0x1c69, {0x77359400}, {0x2, 0x8, 0xd, 0x7, 0x7f, 0xe, "4a26bbc1"}, 0x800, 0x3, {&(0x7f0000000240)=[{0x1, 0x1, {0x9}, 0x10001}, {0x7, 0x3ff, {0x7}, 0x80000000}]}, 0x3}) socket(0x27, 0x6, 0xe73) ioctl$vim2m_VIDIOC_ENUM_FMT(r8, 0xc0405602, &(0x7f0000000000)={0x17, 0x1, 0x4, "d3056cc904042a8becc57bba735b25e4880000000500e4ffffffffffffff00", 0x50565559}) 828.710448ms ago: executing program 8 (id=1631): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000002140)=0x20) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000f, 0x11, r0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x4000) ioprio_set$uid(0x3, 0x0, 0x0) mkdir(0x0, 0x3) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) chdir(0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997faf6) read$FUSE(r2, 0x0, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = getpid() syz_pidfd_open(r3, 0x0) syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x101300) syz_80211_inject_frame(0x0, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x80204705, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r5], 0x7) r6 = socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, 0x0, 0x0) preadv(r4, &(0x7f0000000400)=[{&(0x7f0000000080)=""/53, 0x35}, {&(0x7f00000001c0)=""/255, 0xff}, {&(0x7f00000002c0)=""/14, 0xe}], 0x3, 0x81, 0x0) 481.78296ms ago: executing program 7 (id=1632): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, 0x0, 0x0) 405.295751ms ago: executing program 7 (id=1633): socket(0x1e, 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) userfaultfd(0x80002) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a440000104000109026000"], 0x0) r1 = getpid() syz_pidfd_open(r1, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) lseek(r2, 0x851, 0x2) landlock_create_ruleset(0x0, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x2) socket$nl_rdma(0x10, 0x3, 0x14) mount(&(0x7f0000000080)=@rnullb, &(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='ocfs2_dlmfs\x00', 0x81000, &(0x7f0000000280)='/dev/usbmon#\x00') r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) syz_open_dev$usbmon(&(0x7f0000000000), 0x4, 0x101300) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(0xffffffffffffffff, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0}, 0x8004}], 0x1, 0x20000, 0x0) syz_emit_vhci(&(0x7f0000000840)=ANY=[@ANYBLOB="04050400c900", @ANYRES16=r6], 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) mq_unlink(&(0x7f0000000280)='fd/3\x00') 54.55358ms ago: executing program 8 (id=1634): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x35, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x20}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "6351f36b675d953ebe73ce168e84d5135a5ba63762fcb5da76813382a701d83ed8eddbadab1845a09539233c294dda5568f4f3675066bfaa2140cfb4c024fe77", 0x2c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x6f, 0x31, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x31, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) 0s ago: executing program 8 (id=1635): mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000180)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) mkdir(0x0, 0x1ff) syz_create_resource$binfmt(&(0x7f0000000100)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r2, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r3, &(0x7f0000000700)='ffffffff ffffffff ffffffff f-ffff', 0x21) write(r1, &(0x7f00000003c0)='fi', 0x2) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000280), &(0x7f00000002c0)=0x4) getsockopt$IP6T_SO_GET_INFO(r4, 0x29, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0xffffffff, 0x2, 0xfff, 0x472, 0x9]}, &(0x7f0000000200)=0x54) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r8, 0x4008ae93, &(0x7f0000000040)=0x4) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x7, 0xc, 0xc5, 0x0, 0x6, 0x9, 0x4, 0x6, 0x1, 0xf8, 0x0, 0x1, 0x0, 0x3, 0x439, 0x6, 0x9, 0x4, 0x8, '\x00', 0x4, 0x4}) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)={0x0, 0xc2, 0x8}, 0x18) linkat(r9, &(0x7f0000000080)='./config\x00', r1, &(0x7f00000000c0)='./config\x00', 0x400) kernel console output (not intermixed with test programs): this program [ 254.879500][ T5700] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 255.049251][ T5700] usb 2-1: Using ep0 maxpacket: 8 [ 255.055542][ T5700] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 255.070966][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.070995][ T5700] usb 2-1: Product: syz [ 255.071016][ T5700] usb 2-1: Manufacturer: syz [ 255.071029][ T5700] usb 2-1: SerialNumber: syz [ 255.099090][ T5700] usb 2-1: config 0 descriptor?? [ 255.317258][ T5700] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 255.524040][ T7088] IPVS: starting estimator thread 0... [ 255.611354][ T8726] IPVS: using max 40 ests per chain, 96000 per kthread [ 255.730061][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.736641][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.260870][ T8743] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 256.357799][ T5700] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 256.383781][ T5700] usb 2-1: USB disconnect, device number 36 [ 256.453175][ T8746] kvm: user requested TSC rate below hardware speed [ 256.487762][ T8746] kvm [8745]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 256.497076][ T8746] kvm [8745]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 256.848996][ T5700] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 257.009839][ T5700] usb 5-1: Using ep0 maxpacket: 16 [ 257.019867][ T5700] usb 5-1: unable to get BOS descriptor or descriptor too short [ 257.019912][ T5700] usb 5-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 257.037736][ T5700] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 257.037791][ T5700] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 257.037820][ T5700] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 257.077345][ T5700] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.077376][ T5700] usb 5-1: Product: syz [ 257.077398][ T5700] usb 5-1: Manufacturer: syz [ 257.077412][ T5700] usb 5-1: SerialNumber: syz [ 257.157199][ T8753] kvm [8752]: vcpu0, guest rIP: 0x9134 Unhandled WRMSR(0x11e) = 0xbe702111 [ 257.320741][ T5700] usb 5-1: Audio class v2/v3 interfaces need an interface association [ 257.331290][ T5700] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 257.443154][ T8756] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 257.725508][ T5700] usb 5-1: 2:1 : invalid Cluster Descriptor size [ 257.962354][ T5700] usb 5-1: USB disconnect, device number 3 [ 258.345690][ T8759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 258.388031][ T8759] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (200000 ns). Using initial count to start timer. [ 258.654423][ T8763] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[8764] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[8763] [ 262.335075][ T8783] loop0: detected capacity change from 0 to 2049 [ 262.361957][ T8783] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 262.361986][ T8783] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 262.362034][ T8783] loop0: [ 262.763869][ T5752] hid_parser_main: 3994 callbacks suppressed [ 262.771443][ T5752] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 262.779109][ T5752] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 262.779133][ T5752] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 262.779151][ T5752] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 262.779169][ T5752] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 262.779187][ T5752] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 262.780486][ T5752] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 262.780507][ T5752] hid-generic 0000:0000:0001.0023: unknown main item tag 0x0 [ 262.836752][ T5752] hid-generic 0000:0000:0001.0023: hidraw0: HID v0.10 Device [syz0] on syz1 [ 262.961360][ T8794] fido_id[8794]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 263.309376][ T5752] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 263.340561][ T5617] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 263.352883][ T5617] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 263.362330][ T5617] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 263.373781][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 263.381283][ T5617] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 263.472101][ T5752] usb 5-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 263.489033][ T5752] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 263.489092][ T5752] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.489132][ T5752] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.174504][ T5752] dvb_ttusb_budget: cmd xter failed, receive error -75 [ 264.174534][ T5752] dvb_ttusb_budget: ttusb_init_controller: error [ 264.174555][ T5752] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 264.312800][ T7088] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.362937][ T5752] DVB: Unable to find symbol stv0299_attach() [ 264.481485][ T5752] DVB: Unable to find symbol tda8083_attach() [ 264.481510][ T5752] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 264.616153][ T7088] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.772568][ T9] hid-generic 0000:0000:0000.0024: unknown main item tag 0x0 [ 264.786251][ T7088] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.821334][ T9] hid-generic 0000:0000:0000.0024: hidraw0: HID v0.00 Device [syz1] on syz0 [ 265.011364][ T7088] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.193444][ T5700] usb 5-1: USB disconnect, device number 4 [ 265.479154][ T5617] Bluetooth: hci4: command tx timeout [ 265.664639][ T7088] bridge_slave_1: left allmulticast mode [ 265.664690][ T7088] bridge_slave_1: left promiscuous mode [ 265.665785][ T7088] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.713991][ T7088] bridge_slave_0: left allmulticast mode [ 265.714572][ T7088] bridge_slave_0: left promiscuous mode [ 265.739498][ T7088] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.116872][ T32] audit: type=1800 audit(2000000172.970:15): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1106" name="ipv4_address" dev="configfs" ino=26308 res=0 errno=0 [ 266.141634][ T32] audit: type=1800 audit(2000000173.000:16): pid=8833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1106" name="ipv4_port" dev="configfs" ino=26309 res=0 errno=0 [ 266.320954][ T8837] futex_wake_op: syz.1.1107 tries to shift op by 144; fix this program [ 266.573990][ T7088] tipc: Left network mode [ 267.357565][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 267.560038][ T5617] Bluetooth: hci4: command tx timeout [ 267.856485][ T7088] hsr_slave_0: left promiscuous mode [ 267.863253][ T7088] hsr_slave_1: left promiscuous mode [ 267.876901][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.876940][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.902002][ T7088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 267.909599][ T7088] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.949054][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 267.974354][ T7088] veth1_macvtap: left promiscuous mode [ 267.974413][ T7088] veth0_macvtap: left promiscuous mode [ 267.975245][ T7088] veth1_vlan: left promiscuous mode [ 267.975330][ T7088] veth0_vlan: left promiscuous mode [ 268.101532][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 268.113183][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.113216][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.135864][ T10] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 268.135893][ T10] usb 5-1: Manufacturer: syz [ 268.157283][ T10] usb 5-1: config 0 descriptor?? [ 268.623019][ T7088] team0 (unregistering): Port device team_slave_1 removed [ 268.663197][ T7088] team0 (unregistering): Port device team_slave_0 removed [ 269.062472][ T10] input: syz Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0025/input/input42 [ 269.170757][ T10] input: syz Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0025/input/input43 [ 269.214394][ T10] input: syz Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0025/input/input44 [ 269.254176][ T8803] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.255585][ T8803] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.255724][ T8803] bridge_slave_0: entered allmulticast mode [ 269.282695][ T8803] bridge_slave_0: entered promiscuous mode [ 269.298186][ T10] input: syz Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0025/input/input45 [ 269.321800][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 269.337302][ T8803] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.337381][ T8803] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.337475][ T8803] bridge_slave_1: entered allmulticast mode [ 269.412607][ T8803] bridge_slave_1: entered promiscuous mode [ 269.433359][ T10] uclogic 0003:256C:006D.0025: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.4-1/input0 [ 269.448634][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 269.462758][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 269.474915][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 269.490384][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 269.498707][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 269.538991][ T10] usb 5-1: USB disconnect, device number 5 [ 269.639344][ T5620] Bluetooth: hci4: command tx timeout [ 269.790505][ T8803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.835324][ T8803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.160793][ T8892] fido_id[8892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 270.287932][ T8803] team0: Port device team_slave_0 added [ 270.313696][ T8803] team0: Port device team_slave_1 added [ 270.692916][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.692941][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.692970][ T8803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.748683][ T8803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.762408][ T8803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 270.762451][ T8803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.190769][ T8803] hsr_slave_0: entered promiscuous mode [ 271.211507][ T8803] hsr_slave_1: entered promiscuous mode [ 271.235421][ T8803] debugfs: 'hsr0' already exists in 'hsr' [ 271.235450][ T8803] Cannot create hsr debugfs directory [ 271.559113][ T5620] Bluetooth: hci0: command tx timeout [ 271.722291][ T5620] Bluetooth: hci4: command tx timeout [ 272.886764][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 273.277159][ T8803] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 273.295482][ T8803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 273.407654][ T8803] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 273.432965][ T8803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 273.445473][ T8803] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 273.484586][ T8803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 273.485193][ T8803] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 273.518604][ T8803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 273.640253][ T5620] Bluetooth: hci0: command tx timeout [ 273.851743][ T8973] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 274.093145][ T8888] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.093249][ T8888] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.093364][ T8888] bridge_slave_0: entered allmulticast mode [ 274.121216][ T8888] bridge_slave_0: entered promiscuous mode [ 274.136601][ T8888] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.145131][ T8888] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.145261][ T8888] bridge_slave_1: entered allmulticast mode [ 274.164903][ T8888] bridge_slave_1: entered promiscuous mode [ 274.268798][ T8888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.293577][ T8803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.314690][ T8888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.424615][ T8888] team0: Port device team_slave_0 added [ 274.440829][ T8888] team0: Port device team_slave_1 added [ 274.510344][ T8803] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.555703][ T7090] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.555786][ T7090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.588073][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.596785][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.631865][ T8888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.633791][ T8888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.633802][ T8888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 274.633821][ T8888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.749539][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.749621][ T7088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.103766][ T8888] hsr_slave_0: entered promiscuous mode [ 275.104488][ T8888] hsr_slave_1: entered promiscuous mode [ 275.127146][ T8888] debugfs: 'hsr0' already exists in 'hsr' [ 275.127172][ T8888] Cannot create hsr debugfs directory [ 275.268031][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 275.719209][ T5620] Bluetooth: hci0: command tx timeout [ 276.008348][ T9] libceph: connect (1)[c::]:6789 error -101 [ 276.008700][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 276.098241][ T8992] ceph: No mds server is up or the cluster is laggy [ 276.113657][ T9] libceph: connect (1)[c::]:6789 error -101 [ 276.125887][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 276.414407][ T8888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 276.439777][ T8888] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 276.463942][ T8888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 276.487574][ T8888] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 276.507299][ T8888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 276.541100][ T8888] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 276.541725][ T8888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 276.596248][ T8888] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 276.819252][ T9020] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 276.965138][ T8888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.020924][ T8888] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.043784][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.043859][ T7102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.092385][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.092460][ T7102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.317896][ T8803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.800617][ T5620] Bluetooth: hci0: command tx timeout [ 278.266337][ T8803] veth0_vlan: entered promiscuous mode [ 278.293423][ T8803] veth1_vlan: entered promiscuous mode [ 278.375311][ T8803] veth0_macvtap: entered promiscuous mode [ 278.392484][ T8803] veth1_macvtap: entered promiscuous mode [ 278.429416][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 278.446553][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.474333][ T8803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.539510][ T7088] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.539556][ T7088] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.539593][ T7088] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.539620][ T7088] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.579765][ T10] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 278.591681][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.591725][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.620978][ T10] usb 5-1: config 0 descriptor?? [ 278.728803][ T8888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.879234][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 278.879320][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 278.900633][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.900658][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.926899][ T10] usb 5-1: USB disconnect, device number 6 [ 279.110529][ T7088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.110559][ T7088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.419881][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 279.522942][ T8888] veth0_vlan: entered promiscuous mode [ 279.537376][ T8888] veth1_vlan: entered promiscuous mode [ 279.576835][ T8888] veth0_macvtap: entered promiscuous mode [ 279.583146][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 279.583982][ T10] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 279.600313][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.600346][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.629442][ T10] usb 5-1: config 0 descriptor?? [ 279.646907][ T10] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 279.661347][ T10] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 279.669983][ T8888] veth1_macvtap: entered promiscuous mode [ 279.704016][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.728340][ T8888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.770266][ T50] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.770310][ T50] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.770343][ T50] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.770369][ T50] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.962822][ T140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.980864][ T140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.031207][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.031232][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.191790][ T8511] usb 5-1: USB disconnect, device number 7 [ 280.205526][ T8511] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 281.142729][ T9090] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 281.176759][ T9090] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 281.247815][ T9101] syzkaller1: entered promiscuous mode [ 281.247845][ T9101] syzkaller1: entered allmulticast mode [ 281.459248][ T9068] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 281.610437][ T9068] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 281.620285][ T9068] usb 1-1: Dual-Role OTG device on HNP port [ 281.626325][ T9068] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.654701][ T9068] gspca_main: spca501-2.14.0 probing 0000:0000 [ 281.669280][ T9068] gspca_spca501: reg write: error -32 [ 281.669300][ T9068] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 281.669359][ T9068] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 281.824419][ T9117] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3795657396 (242922073344 ns) > initial count (53003242880 ns). Using initial count to start timer. [ 281.850049][ T9068] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 282.009489][ T9068] usb 2-1: Using ep0 maxpacket: 32 [ 282.015227][ T9068] usb 2-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 282.029926][ T9068] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.029963][ T9068] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.030008][ T9068] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.075510][ T9068] usb 2-1: config 0 descriptor?? [ 282.119566][ T5754] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 282.285110][ T5754] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 282.303904][ T5754] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 282.303964][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 282.303993][ T5754] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 282.304011][ T5754] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 282.304043][ T5754] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.378256][ T5754] usb 5-1: config 0 descriptor?? [ 282.620676][ T9068] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 282.629248][ T9068] ft260 0003:0403:6030.0026: unknown main item tag 0x0 [ 282.802451][ T9068] ft260 0003:0403:6030.0026: chip code: 0000 0000 [ 282.835717][ T5754] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 282.846012][ T5754] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 282.853952][ T5754] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 282.853974][ T5754] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 282.853993][ T5754] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 282.854017][ T5754] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 282.854036][ T5754] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 282.854054][ T5754] plantronics 0003:047F:FFFF.0027: unknown main item tag 0x0 [ 282.958347][ T5754] plantronics 0003:047F:FFFF.0027: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 283.008181][ T9068] ft260 0003:0403:6030.0026: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 283.192066][ T9] usb 5-1: USB disconnect, device number 8 [ 283.228499][ T9068] ft260 0003:0403:6030.0026: failed to retrieve status: -32, no wakeup [ 283.282397][ T9138] fido_id[9138]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 283.478540][ T9113] i2c i2c-1: adapter quirk: 1st comb msg must be write (addr 0x0003, size 0, read) [ 283.514761][ T9068] usb 2-1: USB disconnect, device number 37 [ 283.899221][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 284.052821][ T9] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 284.069576][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.069608][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 284.069645][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.127520][ T9] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 284.848769][ T9160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1168'. [ 285.259249][ T9068] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 285.422703][ T9068] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 285.434981][ T9068] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 285.435010][ T9068] usb 5-1: config 0 has no interface number 0 [ 285.435048][ T9068] usb 5-1: config 0 interface 41 has no altsetting 0 [ 285.462682][ T9068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.462712][ T9068] usb 5-1: Product: syz [ 285.462734][ T9068] usb 5-1: Manufacturer: syz [ 285.462747][ T9068] usb 5-1: SerialNumber: syz [ 285.473261][ T5754] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 285.506643][ T9068] usb 5-1: config 0 descriptor?? [ 285.581154][ T9181] kvm: pic: non byte read [ 285.590421][ T9181] kvm: pic: non byte read [ 285.620865][ T5754] usb 7-1: Using ep0 maxpacket: 32 [ 285.626935][ T5754] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 285.637307][ T5754] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 285.637335][ T5754] usb 7-1: config 0 has no interface number 0 [ 285.637366][ T5754] usb 7-1: config 0 interface 184 has no altsetting 0 [ 285.666689][ T5754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.666730][ T5754] usb 7-1: Product: syz [ 285.666750][ T5754] usb 7-1: Manufacturer: syz [ 285.666764][ T5754] usb 7-1: SerialNumber: syz [ 285.696361][ T5754] usb 7-1: config 0 descriptor?? [ 286.330755][ T5754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 286.342998][ T5754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 286.343947][ T9068] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 286.619371][ T9] usb 6-1: USB disconnect, device number 2 [ 286.642276][ T9] idmouse 6-1:1.0: disconnected [ 287.183533][ T5754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 287.183567][ T5754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 287.183589][ T5754] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 287.183809][ T5754] smsc75xx 7-1:0.184: probe with driver smsc75xx failed with error -32 [ 287.241804][ T5754] usb 7-1: USB disconnect, device number 2 [ 287.326029][ T4985] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 287.326060][ T4985] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 287.326113][ T4985] loop0: [ 287.564270][ T9068] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 287.564306][ T9068] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 287.564467][ T9068] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71 [ 287.616728][ T9068] usb 5-1: USB disconnect, device number 9 [ 288.509154][ T5700] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 288.601317][ T32] audit: type=1800 audit(2000000195.450:17): pid=9260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1184" name="file1" dev="overlay" ino=1754 res=0 errno=0 [ 288.674657][ T5700] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 288.690160][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.690194][ T5700] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.690231][ T5700] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.724590][ T5700] usb 7-1: config 0 descriptor?? [ 289.062708][ T9273] evm: overlay not supported [ 289.196297][ T5700] hid_parser_main: 7 callbacks suppressed [ 289.196337][ T5700] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 289.196370][ T5700] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 289.196392][ T5700] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 289.196413][ T5700] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 289.196434][ T5700] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 289.196455][ T5700] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 289.196476][ T5700] pyra 0003:1E7D:2CF6.0028: unknown main item tag 0x0 [ 289.278501][ T5700] pyra 0003:1E7D:2CF6.0028: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.6-1/input0 [ 290.216480][ T5700] pyra 0003:1E7D:2CF6.0028: couldn't init struct pyra_device [ 290.216532][ T5700] pyra 0003:1E7D:2CF6.0028: couldn't install mouse [ 290.233703][ T5700] pyra 0003:1E7D:2CF6.0028: probe with driver pyra failed with error -71 [ 290.285969][ T5700] usb 7-1: USB disconnect, device number 3 [ 291.019271][ T5700] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 291.163163][ T32] audit: type=1800 audit(2000000198.020:18): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1195" name="file1" dev="overlay" ino=377 res=0 errno=0 [ 291.184249][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 291.195144][ T5700] usb 2-1: unable to get BOS descriptor or descriptor too short [ 291.195189][ T5700] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000c, bcdDevice= 0.40 [ 291.223229][ T5700] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 291.223259][ T5700] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 291.255811][ T5700] usb 2-1: New USB device strings: Mfr=2, Product=2, SerialNumber=3 [ 291.255843][ T5700] usb 2-1: Product: syz [ 291.255865][ T5700] usb 2-1: Manufacturer: syz [ 291.255878][ T5700] usb 2-1: SerialNumber: syz [ 291.744065][ T5700] usb 2-1: 3:0: cannot get min/max values for control 2 (id 3) [ 291.744103][ T5700] usb 2-1: applying playback min mute quirk [ 291.744126][ T5700] usb 2-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 291.744141][ T5700] usb 2-1: [3] FU [Q Playback Volume] ch = 1, val = 0/1/1 [ 291.777704][ T5700] usb 2-1: 3:0: cannot get min/max values for control 8 (id 3) [ 291.791098][ T5700] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 291.835836][ T5700] usb 2-1: 3:0: failed to get current value for ch 1 (-71) [ 292.032420][ T5700] usb 2-1: USB disconnect, device number 38 [ 292.129868][ T5754] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 292.151746][ T9325] udevd[9325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 292.281117][ T5754] usb 5-1: Using ep0 maxpacket: 32 [ 292.291578][ T5754] usb 5-1: unable to get BOS descriptor or descriptor too short [ 292.291622][ T5754] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 292.310422][ T5754] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 292.310452][ T5754] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 292.310477][ T5754] usb 5-1: config 14 has no interface number 0 [ 292.310494][ T5754] usb 5-1: config 14 has no interface number 1 [ 292.310539][ T5754] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 292.310560][ T5754] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 292.310581][ T5754] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 292.310603][ T5754] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 292.310626][ T5754] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 292.310648][ T5754] usb 5-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.310670][ T5754] usb 5-1: config 14 interface 57 has no altsetting 0 [ 292.310686][ T5754] usb 5-1: config 14 interface 228 has no altsetting 0 [ 292.454193][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.454224][ T5754] usb 5-1: Product: syz [ 292.454246][ T5754] usb 5-1: Manufacturer: syz [ 292.454259][ T5754] usb 5-1: SerialNumber: syz [ 292.940693][ T5754] legousbtower 5-1:14.57: interrupt endpoints not found [ 293.054713][ T9342] jffs2: notice: (9342) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 293.347763][ T5754] legousbtower 5-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 293.377323][ T5754] legousbtower 5-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 293.437258][ T9350] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 293.898931][ T5700] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 294.048945][ T5700] usb 6-1: Using ep0 maxpacket: 32 [ 294.055079][ T5700] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 294.068183][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.068216][ T5700] usb 6-1: Product: syz [ 294.068280][ T5700] usb 6-1: Manufacturer: syz [ 294.068294][ T5700] usb 6-1: SerialNumber: syz [ 294.100996][ T5700] usb 6-1: config 0 descriptor?? [ 294.122377][ T5700] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 294.165573][ T9] usb 5-1: USB disconnect, device number 10 [ 294.194512][ T9] legousbtower 5-1:14.228: LEGO USB Tower #-160 now disconnected [ 295.733684][ T5700] gspca_ov534_9: reg_r err -71 [ 296.061409][ T5700] gspca_ov534_9: Unknown sensor 0000 [ 296.063580][ T5700] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 296.085737][ T5700] usb 6-1: USB disconnect, device number 3 [ 296.233556][ T9369] block nbd4: NBD_DISCONNECT [ 296.254799][ T9369] block nbd4: Disconnected due to user request. [ 296.278208][ T9369] block nbd4: shutting down sockets [ 296.878968][ T5700] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 297.041868][ T5700] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 297.052796][ T5700] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 297.063603][ T5700] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.063630][ T5700] usb 6-1: Product: syz [ 297.063651][ T5700] usb 6-1: Manufacturer: syz [ 297.063664][ T5700] usb 6-1: SerialNumber: syz [ 297.101358][ T5700] usb 6-1: config 0 descriptor?? [ 297.259564][ T9068] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 297.411048][ T9068] usb 2-1: Using ep0 maxpacket: 8 [ 297.417060][ T9068] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 297.432353][ T5700] usb 6-1: USB disconnect, device number 4 [ 297.443133][ T9068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.443161][ T9068] usb 2-1: Product: syz [ 297.443181][ T9068] usb 2-1: Manufacturer: syz [ 297.443195][ T9068] usb 2-1: SerialNumber: syz [ 297.474018][ T9068] usb 2-1: config 0 descriptor?? [ 297.697171][ T9068] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 298.034929][ T9397] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 298.367182][ T9403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.525908][ T9068] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 298.546963][ T9068] usb 2-1: USB disconnect, device number 39 [ 299.080403][ T9068] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 299.239575][ T9068] usb 6-1: Using ep0 maxpacket: 16 [ 299.245754][ T9068] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 299.256659][ T9068] usb 6-1: config 0 has an invalid interface number: 132 but max is 0 [ 299.264969][ T9068] usb 6-1: config 0 has no interface number 0 [ 299.276592][ T9068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.285631][ T9068] usb 6-1: Product: syz [ 299.285660][ T9068] usb 6-1: Manufacturer: syz [ 299.285674][ T9068] usb 6-1: SerialNumber: syz [ 299.306760][ T9068] usb 6-1: config 0 descriptor?? [ 299.316608][ T9068] hub 6-1:0.132: bad descriptor, ignoring hub [ 299.328796][ T9068] hub 6-1:0.132: probe with driver hub failed with error -5 [ 299.344160][ T9068] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.132/input/input46 [ 299.431225][ T5700] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 299.588914][ T5700] usb 2-1: Using ep0 maxpacket: 32 [ 299.594644][ T5700] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 299.610847][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.610875][ T5700] usb 2-1: Product: syz [ 299.610894][ T5700] usb 2-1: Manufacturer: syz [ 299.610907][ T5700] usb 2-1: SerialNumber: syz [ 299.639911][ T5700] usb 2-1: config 0 descriptor?? [ 299.659971][ T5700] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 299.677268][ T5785] usb 6-1: USB disconnect, device number 5 [ 301.668626][ T5700] gspca_ov534_9: reg_r err -71 [ 301.918922][ T5700] gspca_ov534_9: Unknown sensor 0000 [ 301.919064][ T5700] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 301.936534][ T5700] usb 2-1: USB disconnect, device number 40 [ 302.470871][ T9068] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 302.547339][ T7088] Bluetooth: hci1: Frame reassembly failed (-90) [ 302.565732][ T9452] Bluetooth: hci1: Frame reassembly failed (-84) [ 302.578224][ T9452] Bluetooth: hci1: Frame reassembly failed (-84) [ 302.585622][ T9452] Bluetooth: hci1: Frame reassembly failed (-84) [ 302.595234][ T9452] Bluetooth: hci1: Frame reassembly failed (-84) [ 302.633873][ T9068] usb 2-1: unable to get BOS descriptor or descriptor too short [ 302.633918][ T9068] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 302.653702][ T9068] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.653730][ T9068] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.676539][ T9068] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.676567][ T9068] usb 2-1: Product: syz [ 302.686507][ T9068] usb 2-1: Manufacturer: syz [ 302.686521][ T9068] usb 2-1: SerialNumber: syz [ 302.711891][ T9068] usb 2-1: selecting invalid altsetting 1 [ 302.723039][ T9068] usb 2-1: unit 6 not found! [ 302.912239][ T9068] usb 2-1: 2:0: failed to get current value for ch 0 (-32) [ 302.956796][ T9068] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 302.995404][ T9325] udevd[9325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.150508][ T9068] usb 2-1: USB disconnect, device number 41 [ 303.733202][ T9461] jffs2: notice: (9461) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 303.824921][ T9068] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 303.973837][ T9467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.984824][ T9068] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 303.994931][ T9068] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 303.994978][ T9068] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 304.016894][ T9068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.016922][ T9068] usb 6-1: Product: syz [ 304.016942][ T9068] usb 6-1: Manufacturer: syz [ 304.016956][ T9068] usb 6-1: SerialNumber: syz [ 304.045631][ T9068] usb 6-1: config 0 descriptor?? [ 304.060531][ T9068] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 304.108590][ T9468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.172560][ T9468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.600667][ T5620] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 304.609338][ T5617] Bluetooth: hci1: command 0x1003 tx timeout [ 305.218866][ T5700] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 305.328916][ T8511] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 305.369425][ T5700] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 305.380221][ T5700] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 305.393231][ T5700] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 305.410322][ T5700] usb 5-1: config 0 descriptor?? [ 305.488907][ T8511] usb 2-1: Using ep0 maxpacket: 8 [ 305.495417][ T8511] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 305.508239][ T8511] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.516507][ T8511] usb 2-1: Product: syz [ 305.516521][ T8511] usb 2-1: Manufacturer: syz [ 305.516538][ T8511] usb 2-1: SerialNumber: syz [ 305.536807][ T8511] usb 2-1: config 0 descriptor?? [ 305.630689][ T5700] usbhid 5-1:0.0: can't add hid device: -71 [ 305.630801][ T5700] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 305.668231][ T5700] usb 5-1: USB disconnect, device number 11 [ 305.756235][ T8511] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 305.907738][ T9068] gspca_sunplus: reg_r err -71 [ 305.907816][ T9068] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 305.927933][ T9068] usb 6-1: USB disconnect, device number 6 [ 306.244354][ T9491] gadgetfs: bound to dummy_udc driver [ 306.387466][ T8511] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 306.404496][ T8511] usb 2-1: USB disconnect, device number 42 [ 306.489033][ T9068] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 306.496770][ C0] gadgetfs: connected [ 306.496958][ T9068] gadgetfs: disconnected [ 306.698300][ T9497] binder: 9496:9497 unknown command 0 [ 306.704233][ T9497] binder: 9496:9497 ioctl c0306201 200000000300 returned -22 [ 307.520149][ T5754] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 307.670652][ T5754] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 307.681501][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.681532][ T5754] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.681556][ T5754] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 307.681585][ T5754] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.735641][ T5754] usb 6-1: config 0 descriptor?? [ 308.160510][ T5754] plantronics 0003:047F:FFFF.0029: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 308.802339][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.820371][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.829969][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.844051][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.857697][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.319250][ T5754] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 309.471931][ C0] plantronics 0003:047F:FFFF.0029: usb_submit_urb(ctrl) failed: -1 [ 309.482884][ T5754] usb 5-1: Using ep0 maxpacket: 16 [ 309.492164][ T5754] usb 5-1: unable to get BOS descriptor or descriptor too short [ 309.492211][ T5754] usb 5-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 309.513675][ T5754] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.513700][ T5754] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.544338][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.544365][ T5754] usb 5-1: Product: syz [ 309.544384][ T5754] usb 5-1: Manufacturer: syz [ 309.544397][ T5754] usb 5-1: SerialNumber: syz [ 309.760790][ T9560] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 309.760811][ T9560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.760905][ T9560] vhci_hcd vhci_hcd.0: Device attached [ 309.825562][ T5754] usb 5-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 309.825629][ T5754] usb 5-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 310.014461][ T5754] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 310.044261][ T5754] usb 5-1: USB disconnect, device number 12 [ 310.079374][ T9] usb 35-1: new high-speed USB device number 2 using vhci_hcd [ 310.087952][ T8511] usb 2-1: new low-speed USB device number 43 using dummy_hcd [ 310.105814][ T9325] udevd[9325]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 310.181183][ T7109] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.245291][ T8511] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 310.256430][ T8511] usb 2-1: config 0 has no interfaces? [ 310.256456][ T8511] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.282510][ T5700] usb 6-1: USB disconnect, device number 7 [ 310.314698][ T8511] usb 2-1: config 0 descriptor?? [ 310.586596][ T5700] usb 2-1: USB disconnect, device number 43 [ 310.598544][ T9561] vhci_hcd: connection closed [ 310.602231][ T7088] vhci_hcd vhci_hcd.1: stop threads [ 310.602263][ T7088] vhci_hcd vhci_hcd.1: release socket [ 310.602311][ T7088] vhci_hcd vhci_hcd.1: disconnect device [ 310.699751][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 310.756923][ T32] audit: type=1800 audit(2000000217.610:19): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1267" name="size" dev="configfs" ino=32500 res=0 errno=0 [ 310.805436][ T32] audit: type=1800 audit(2000000217.660:20): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1267" name="power" dev="configfs" ino=32501 res=0 errno=0 [ 310.854502][ T7109] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.920301][ T5617] Bluetooth: hci1: command tx timeout [ 311.096220][ T7109] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.366800][ T7109] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.993311][ T9600] mount: server 127.0.0.1 not responding, timed out [ 312.008511][ T32] audit: type=1800 audit(2000000218.870:21): pid=9605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1274" name="addr_trtype" dev="configfs" ino=32731 res=0 errno=0 [ 312.062378][ T32] audit: type=1800 audit(2000000218.920:22): pid=9606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1274" name="addr_adrfam" dev="configfs" ino=32741 res=0 errno=0 [ 312.293644][ T7109] bridge_slave_1: left allmulticast mode [ 312.293675][ T7109] bridge_slave_1: left promiscuous mode [ 312.293840][ T7109] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.325484][ T7109] bridge_slave_0: left allmulticast mode [ 312.325534][ T7109] bridge_slave_0: left promiscuous mode [ 312.332794][ T7109] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.001159][ T5617] Bluetooth: hci1: command tx timeout [ 313.032820][ T7109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.048014][ T7109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.061310][ T7109] bond0 (unregistering): Released all slaves [ 313.684192][ T7109] hsr_slave_0: left promiscuous mode [ 313.694006][ T7109] hsr_slave_1: left promiscuous mode [ 313.694628][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.694655][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.738664][ T7109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.738692][ T7109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.782310][ T7109] veth1_macvtap: left promiscuous mode [ 313.790020][ T7109] veth0_macvtap: left promiscuous mode [ 313.795774][ T7109] veth1_vlan: left promiscuous mode [ 313.804079][ T7109] veth0_vlan: left promiscuous mode [ 314.381355][ T9068] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 314.541781][ T9068] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 314.557403][ T9068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.557448][ T9068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.586635][ T9068] usb 6-1: config 0 descriptor?? [ 314.746548][ T7109] team0 (unregistering): Port device team_slave_1 removed [ 314.832051][ T7109] team0 (unregistering): Port device team_slave_0 removed [ 314.863979][ T9068] usbhid 6-1:0.0: can't add hid device: -71 [ 314.864065][ T9068] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 314.890216][ T9068] usb 6-1: USB disconnect, device number 8 [ 315.080413][ T5617] Bluetooth: hci1: command tx timeout [ 315.263047][ T9676] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 315.349008][ T9068] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 315.501301][ T9068] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 315.513130][ T9068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.513174][ T9068] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.545764][ T9068] usb 6-1: config 0 descriptor?? [ 315.677142][ T9544] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.684518][ T9544] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.693474][ T9544] bridge_slave_0: entered allmulticast mode [ 315.706529][ T9544] bridge_slave_0: entered promiscuous mode [ 315.746109][ T9544] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.746195][ T9544] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.746325][ T9544] bridge_slave_1: entered allmulticast mode [ 315.773436][ T9544] bridge_slave_1: entered promiscuous mode [ 315.932481][ T9544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.980162][ T9544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.142747][ T9544] team0: Port device team_slave_0 added [ 316.163785][ T9544] team0: Port device team_slave_1 added [ 316.267334][ T9544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.275515][ T9544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.303127][ T9544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.328732][ T9544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.328755][ T9544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.328783][ T9544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.431755][ T9068] aiptek 6-1:0.0: Aiptek using 400 ms programming speed [ 316.449626][ T9068] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input48 [ 316.691631][ T9544] hsr_slave_0: entered promiscuous mode [ 316.702961][ T9544] hsr_slave_1: entered promiscuous mode [ 316.703567][ T9544] debugfs: 'hsr0' already exists in 'hsr' [ 316.703603][ T9544] Cannot create hsr debugfs directory [ 316.752862][ T5700] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 316.791087][ T9068] usb 6-1: USB disconnect, device number 9 [ 316.791206][ C0] aiptek 6-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 316.912249][ T5700] usb 2-1: Using ep0 maxpacket: 8 [ 316.928149][ T5700] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 316.953605][ T5700] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.953634][ T5700] usb 2-1: Product: syz [ 316.953654][ T5700] usb 2-1: Manufacturer: syz [ 316.953667][ T5700] usb 2-1: SerialNumber: syz [ 316.983552][ T5700] usb 2-1: config 0 descriptor?? [ 317.169975][ T5620] Bluetooth: hci1: command tx timeout [ 317.180627][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.180675][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.213547][ T5700] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 317.308982][ T9068] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 317.460340][ T9068] usb 5-1: Using ep0 maxpacket: 32 [ 317.469887][ T9068] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 317.484435][ T9068] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 317.484464][ T9068] usb 5-1: config 0 has no interface number 0 [ 317.512140][ T9068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.512170][ T9068] usb 5-1: Product: syz [ 317.512190][ T9068] usb 5-1: Manufacturer: syz [ 317.512203][ T9068] usb 5-1: SerialNumber: syz [ 317.540643][ T9068] usb 5-1: config 0 descriptor?? [ 317.562382][ T9068] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 317.790956][ T9068] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 317.820686][ T9068] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 317.844790][ T9544] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 317.863893][ T9544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.876085][ T9544] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 317.896576][ T9544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.921762][ T9544] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 317.963347][ T9544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.981772][ T9544] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 318.026117][ T9544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 318.249788][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 318.259634][ T9] usb 5-1: USB disconnect, device number 13 [ 318.291175][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 318.317820][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 318.341906][ T9] quatech2 5-1:0.51: device disconnected [ 318.397802][ T9726] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 318.423137][ T9544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.495817][ T9544] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.552284][ T7109] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.552379][ T7109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.578139][ T7109] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.578230][ T7109] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.035731][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1299'. [ 319.091407][ T5700] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 319.122232][ T5700] usb 2-1: USB disconnect, device number 44 [ 319.863425][ T9761] netlink: 'syz.1.1303': attribute type 11 has an invalid length. [ 320.275550][ T9544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.307464][ T9770] syzkaller1: entered promiscuous mode [ 320.313943][ T9770] syzkaller1: entered allmulticast mode [ 321.336636][ T9544] veth0_vlan: entered promiscuous mode [ 321.382149][ T9544] veth1_vlan: entered promiscuous mode [ 321.514980][ T9544] veth0_macvtap: entered promiscuous mode [ 321.538172][ T9544] veth1_macvtap: entered promiscuous mode [ 321.643871][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.723952][ T9544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.749237][ T50] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.749290][ T50] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.749319][ T50] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.749346][ T50] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.163816][ T7102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.163843][ T7102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.347369][ T7109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.347398][ T7109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.542787][ T9844] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1320'. [ 323.552651][ T9844] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1320'. [ 323.566154][ T9844] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1320'. [ 324.890300][ T8511] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 324.934548][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 325.109891][ T8511] usb 5-1: Using ep0 maxpacket: 16 [ 325.123546][ T8511] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 325.134209][ T8511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.134241][ T8511] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.173986][ T8511] usb 5-1: config 0 descriptor?? [ 325.348161][ T9885] syzkaller1: entered promiscuous mode [ 325.354268][ T9885] syzkaller1: entered allmulticast mode [ 325.633536][ T8511] mcp2221 0003:04D8:00DD.002A: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 326.083870][ T8511] usb 5-1: USB disconnect, device number 14 [ 326.540175][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 326.801134][ T5620] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 326.817507][ T5620] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.827434][ T5620] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 326.840945][ T5620] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 326.848609][ T5620] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 327.857948][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 327.999757][ T8511] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 328.160203][ T8511] usb 5-1: Using ep0 maxpacket: 16 [ 328.167765][ T8511] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 328.180061][ T8511] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 328.194120][ T8511] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.194146][ T8511] usb 5-1: Product: syz [ 328.194165][ T8511] usb 5-1: Manufacturer: syz [ 328.194177][ T8511] usb 5-1: SerialNumber: syz [ 328.225209][ T8511] usb 5-1: config 0 descriptor?? [ 328.246180][ T8511] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 328.258992][ T8511] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 328.576268][ T9907] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.586591][ T9907] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.586763][ T9907] bridge_slave_0: entered allmulticast mode [ 328.611591][ T9907] bridge_slave_0: entered promiscuous mode [ 328.624902][ T9907] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.625010][ T9907] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.641794][ T9907] bridge_slave_1: entered allmulticast mode [ 328.649860][ T9907] bridge_slave_1: entered promiscuous mode [ 328.758774][ T9907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.793855][ T9907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.871934][ T8511] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 328.892842][ T9907] team0: Port device team_slave_0 added [ 328.903521][ T9907] team0: Port device team_slave_1 added [ 328.919436][ T5620] Bluetooth: hci0: command tx timeout [ 329.030300][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.038521][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.065190][ T9907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.087546][ T9907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.087567][ T9907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 329.087595][ T9907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.258015][ T9907] hsr_slave_0: entered promiscuous mode [ 329.270894][ T9907] hsr_slave_1: entered promiscuous mode [ 329.278774][ T9907] debugfs: 'hsr0' already exists in 'hsr' [ 329.279167][ T9907] Cannot create hsr debugfs directory [ 329.333773][ T8511] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 329.333828][ T8511] em28xx 5-1:0.0: board has no eeprom [ 329.471353][ T8511] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 329.471400][ T8511] em28xx 5-1:0.0: dvb set to bulk mode. [ 329.480528][ T5700] em28xx 5-1:0.0: Binding DVB extension [ 329.521614][ T8511] usb 5-1: USB disconnect, device number 15 [ 329.536407][ T8511] em28xx 5-1:0.0: Disconnecting em28xx [ 329.642274][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 329.761868][ T5700] em28xx 5-1:0.0: Registering input extension [ 329.775303][ T8511] em28xx 5-1:0.0: Closing input extension [ 329.859615][ T9068] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 330.010586][ T9068] usb 8-1: Using ep0 maxpacket: 8 [ 330.020209][ T9068] usb 8-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 330.046346][ T9068] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.046377][ T9068] usb 8-1: Product: syz [ 330.046399][ T9068] usb 8-1: Manufacturer: syz [ 330.046412][ T9068] usb 8-1: SerialNumber: syz [ 330.101792][ T9068] usb 8-1: config 0 descriptor?? [ 330.127539][ T9068] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 330.213578][ T8511] em28xx: Freeing device [ 330.628052][ T9907] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 330.650989][ T9907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 330.665191][ T9907] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 330.684461][ T9907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.706311][ T9907] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 330.736508][ T9907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.755354][ T9907] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 330.775359][ T9907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.999056][ T5620] Bluetooth: hci0: command tx timeout [ 331.133454][ T9907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.205835][ T9907] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.286659][ T7088] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.286769][ T7088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.313049][ T7088] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.313135][ T7088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.459632][ T5700] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 331.632971][ T5700] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 331.644309][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.644363][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.669468][ T5700] usb 6-1: config 0 descriptor?? [ 331.907923][ T5700] usbhid 6-1:0.0: can't add hid device: -71 [ 331.908062][ T5700] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 331.927195][ T5700] usb 6-1: USB disconnect, device number 10 [ 332.411587][ T9068] gspca_sonixj: reg_w1 err -71 [ 332.411659][ T9068] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 332.426077][ T5700] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 332.439351][ T9068] usb 8-1: USB disconnect, device number 2 [ 332.635377][ T5700] usb 6-1: Using ep0 maxpacket: 16 [ 332.644260][ T5700] usb 6-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 332.655823][ T5700] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.655867][ T5700] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.677772][ T5700] usb 6-1: config 0 descriptor?? [ 333.086907][ T5620] Bluetooth: hci0: command tx timeout [ 333.112653][ T5700] kye 0003:0458:5016.002B: control desc unexpectedly large [ 333.120117][ T5700] kye 0003:0458:5016.002B: control desc unexpectedly large [ 333.135703][ T5700] input: HID 0458:5016 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0458:5016.002B/input/input50 [ 333.296803][ T5700] kye 0003:0458:5016.002B: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.5-1/input0 [ 333.755239][ T5785] usb 6-1: USB disconnect, device number 11 [ 334.837739][T10026] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1356'. [ 334.966124][T10028] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1356'. [ 335.162092][ T5620] Bluetooth: hci0: command tx timeout [ 335.226322][T10033] binder: 10032:10033 ioctl c0306201 200000000180 returned -14 [ 336.027339][T10046] binder: 10044:10046 unknown command 0 [ 336.034744][T10046] binder: 10044:10046 ioctl c0306201 2000000001c0 returned -22 [ 336.978797][T10068] binder: 10066:10068 ioctl c0306201 200000000b80 returned -22 [ 337.099258][ T9907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.459804][ T5754] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 337.621457][ T5754] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 337.631644][ T5754] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.651268][ T5754] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 337.665610][ T5754] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.665638][ T5754] usb 5-1: Product: syz [ 337.665652][ T5754] usb 5-1: Manufacturer: syz [ 337.665666][ T5754] usb 5-1: SerialNumber: syz [ 337.711012][ T5754] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 337.736699][ T5754] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 337.754717][ T5754] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 337.991817][ T9907] veth0_vlan: entered promiscuous mode [ 338.022486][ T9907] veth1_vlan: entered promiscuous mode [ 338.127652][ T9907] veth0_macvtap: entered promiscuous mode [ 338.144357][ T9907] veth1_macvtap: entered promiscuous mode [ 338.191387][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 338.235851][ T9907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.321094][ T7109] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.321384][ T7109] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.321424][ T7109] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.367976][ T7109] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.623811][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.633103][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.683789][T10094] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 338.805893][ T7109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.815874][ T7109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 339.452747][T10104] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1373'. [ 339.763314][T10115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.923896][T10115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.983487][T10110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.123862][T10073] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 340.134282][T10073] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 340.134313][T10073] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 340.162460][T10073] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 340.177659][ T9] usb 5-1: USB disconnect, device number 16 [ 340.221602][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 340.246858][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 340.247417][ T9] ti_usb_3410_5052 5-1:2.0: device disconnected [ 340.344806][T10121] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 340.746247][T10133] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 340.936982][ T32] audit: type=1400 audit(2000000247.790:23): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=10132 comm="syz.8.1379" [ 341.024028][T10136] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1380'. [ 341.056279][T10136] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.253237][T10129] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 341.347152][T10144] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1381'. [ 341.487441][ T32] audit: type=1326 audit(2000000248.340:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10149 comm="syz.4.1383" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f65dbb9e0d9 code=0x0 [ 341.594023][T10151] ******: renamed from vlan0 (while UP) [ 341.713052][T10156] kvm: pic: single mode not supported [ 341.713736][T10156] kvm: pic: level sensitive irq not supported [ 341.721889][T10156] kvm: pic: single mode not supported [ 341.721910][T10156] kvm: pic: level sensitive irq not supported [ 341.722488][T10156] kvm: pic: single mode not supported [ 341.722580][T10156] kvm: pic: level sensitive irq not supported [ 341.722677][T10156] kvm: pic: single mode not supported [ 341.722687][T10156] kvm: pic: level sensitive irq not supported [ 341.723188][T10156] kvm: pic: single mode not supported [ 341.771439][T10156] kvm: pic: level sensitive irq not supported [ 341.771576][T10156] kvm: pic: single mode not supported [ 341.771597][T10156] kvm: pic: level sensitive irq not supported [ 341.777864][T10156] kvm: pic: single mode not supported [ 341.777959][T10156] kvm: pic: level sensitive irq not supported [ 341.778052][T10156] kvm: pic: single mode not supported [ 341.778059][T10156] kvm: pic: level sensitive irq not supported [ 341.823425][T10156] kvm: pic: single mode not supported [ 341.830092][T10156] kvm: pic: level sensitive irq not supported [ 341.835932][T10156] kvm: pic: single mode not supported [ 341.835952][T10156] kvm: pic: level sensitive irq not supported [ 342.172988][T10167] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1387'. [ 343.816128][T10187] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 344.157312][T10187] md/raid10:md0: not clean -- starting background reconstruction [ 344.157337][T10187] md/raid10:md0: active with 1 out of 2 devices [ 344.191074][T10187] md0: detected capacity change from 0 to 2048 [ 344.363386][T10195] md_update_sb: can't update sb for read-only array md0 [ 345.325228][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.336731][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.347164][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.359195][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.385600][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.395741][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.396035][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.396298][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.396591][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 345.446087][T10210] kvm_intel: kvm [10208]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1c00000007 [ 346.527467][T10240] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1400'. [ 346.527498][T10240] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1400'. [ 346.527522][T10240] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1400'. [ 346.910837][ T32] audit: type=1326 audit(2000000253.770:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 346.910887][ T32] audit: type=1326 audit(2000000253.770:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 346.971420][ T32] audit: type=1326 audit(2000000253.830:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 346.971466][ T32] audit: type=1326 audit(2000000253.830:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 347.032280][ T32] audit: type=1326 audit(2000000253.890:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 347.032329][ T32] audit: type=1326 audit(2000000253.890:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 347.032370][ T32] audit: type=1326 audit(2000000253.890:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 347.123663][ T32] audit: type=1326 audit(2000000253.980:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 347.123738][ T32] audit: type=1326 audit(2000000253.980:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 347.178982][ T32] audit: type=1326 audit(2000000254.040:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10244 comm="syz.7.1401" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f178c19e0d9 code=0x7ffc0000 [ 347.238678][T10230] syz.5.1398 (10230): drop_caches: 2 [ 348.508726][ T8511] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 348.640278][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 348.661822][ T8511] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 348.672553][ T8511] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 348.672582][ T8511] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 348.672606][ T8511] usb 8-1: config 220 has no interface number 2 [ 348.672648][ T8511] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 348.672670][ T8511] usb 8-1: config 220 interface 0 has no altsetting 0 [ 348.672692][ T8511] usb 8-1: config 220 interface 76 has no altsetting 0 [ 348.672708][ T8511] usb 8-1: config 220 interface 1 has no altsetting 0 [ 348.688845][ T8511] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.688864][ T8511] usb 8-1: Product: syz [ 348.688875][ T8511] usb 8-1: Manufacturer: syz [ 348.688885][ T8511] usb 8-1: SerialNumber: syz [ 348.799452][ T9] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 348.811550][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.811581][ T9] usb 5-1: Product: syz [ 348.811602][ T9] usb 5-1: Manufacturer: syz [ 348.811616][ T9] usb 5-1: SerialNumber: syz [ 348.996327][ T8511] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 349.004741][ T8511] uvcvideo 8-1:220.0: No valid video chain found. [ 349.013763][ T8511] usb 8-1: selecting invalid altsetting 0 [ 349.088554][ T8511] usb 8-1: selecting invalid altsetting 0 [ 349.095095][ T8511] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 349.112409][ T8511] usb 8-1: USB disconnect, device number 3 [ 349.265608][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 349.265690][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 349.565123][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 350.558039][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 350.570769][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 350.864285][T10313] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 350.878400][T10313] kvm: requested 167619 ns i8254 timer period limited to 200000 ns [ 350.890948][T10313] kvm: requested 163428 ns i8254 timer period limited to 200000 ns [ 350.903558][T10313] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 350.914968][T10313] kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 350.925519][T10313] kvm: requested 175162 ns i8254 timer period limited to 200000 ns [ 350.954722][T10313] kvm: requested 80457 ns i8254 timer period limited to 200000 ns [ 350.965257][T10313] kvm: requested 158400 ns i8254 timer period limited to 200000 ns [ 350.965424][T10313] kvm: requested 141638 ns i8254 timer period limited to 200000 ns [ 350.965592][T10313] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 351.000828][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -EPROTO [ 351.000880][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 351.001527][ T9] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 351.024771][ T10] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 351.045331][ T9] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 351.064294][ T9] usb 5-1: USB disconnect, device number 17 [ 351.175758][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 351.177520][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 351.185415][ T10] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 351.185434][ T10] usb 6-1: config 0 has no interface number 0 [ 351.213760][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.213778][ T10] usb 6-1: Product: syz [ 351.213790][ T10] usb 6-1: Manufacturer: syz [ 351.213801][ T10] usb 6-1: SerialNumber: syz [ 351.225990][ T10] usb 6-1: config 0 descriptor?? [ 351.637192][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 351.658374][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 352.768178][T10178] Set syz1 is full, maxelem 65536 reached [ 352.939126][ T9] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 352.956599][T10335] Set syz1 is full, maxelem 65536 reached [ 353.137628][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 353.153782][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.164104][ T9] usb 5-1: Product: syz [ 353.168606][ T9] usb 5-1: Manufacturer: syz [ 353.177801][ T9] usb 5-1: SerialNumber: syz [ 353.190439][ T9] usb 5-1: config 0 descriptor?? [ 353.426798][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 353.534084][ T10] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000006c: -71 [ 353.534306][ T10] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 353.571071][ T10] usb 6-1: USB disconnect, device number 12 [ 353.933592][ T32] kauditd_printk_skb: 75 callbacks suppressed [ 353.933630][ T32] audit: type=1326 audit(2000000260.790:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10345 comm="syz.7.1427" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f178c19e0d9 code=0x0 [ 354.028062][T10343] fuse: root generation should be zero [ 354.380331][T10360] tipc: Started in network mode [ 354.387869][T10360] tipc: Node identity 2000004, cluster identity 4711 [ 354.387897][T10360] tipc: Node number set to 33554436 [ 354.768148][T10365] binder_alloc: 10364: pid 10364 spamming oneway? 1 buffers allocated for a total size of 4096 [ 354.839362][ T9068] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 354.887645][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 354.909913][ T9] usb 5-1: USB disconnect, device number 18 [ 355.001654][ T9068] usb 9-1: New USB device found, idVendor=0763, idProduct=2031, bcdDevice= 0.40 [ 355.017565][ T9068] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.017593][ T9068] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 355.017638][ T9068] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 355.051114][ T9068] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.051145][ T9068] usb 9-1: Product: syz [ 355.051165][ T9068] usb 9-1: Manufacturer: syz [ 355.051178][ T9068] usb 9-1: SerialNumber: syz [ 355.318394][ T9068] usb 9-1: Can't get UAC3 power state for id 10 [ 355.328606][ T9068] usb 9-1: 2:0: failed to get current value for ch 0 (-71) [ 355.342109][ T9068] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 355.342139][ T9068] usb 9-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 355.342155][ T9068] usb 9-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/1/1 [ 355.470317][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 355.542393][ T9068] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 355.612971][ T9068] usb 9-1: 2:0: cannot get min/max values for control 2 (id 2) [ 355.628889][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 355.637131][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 355.651576][ T9] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 355.651604][ T9] usb 6-1: config 0 has no interface number 0 [ 355.651640][ T9] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 355.651661][ T9] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 355.695492][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.695525][ T9] usb 6-1: Product: syz [ 355.695547][ T9] usb 6-1: Manufacturer: syz [ 355.695561][ T9] usb 6-1: SerialNumber: syz [ 355.726346][ T9068] usb 9-1: USB disconnect, device number 2 [ 355.764301][ T9] usb 6-1: config 0 descriptor?? [ 355.775164][T10373] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 355.775272][T10373] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 356.026455][T10373] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 356.026576][T10373] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 356.078772][ T8773] udevd[8773]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 356.253308][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 356.629154][ T9068] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 356.790100][ T9068] usb 5-1: Using ep0 maxpacket: 32 [ 356.796118][ T9068] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 356.806798][ T9068] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 356.815245][ T9068] usb 5-1: config 0 has no interface number 0 [ 356.824639][ T9068] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.832833][ T9068] usb 5-1: Product: syz [ 356.832846][ T9068] usb 5-1: Manufacturer: syz [ 356.832857][ T9068] usb 5-1: SerialNumber: syz [ 356.854033][ T9068] usb 5-1: config 0 descriptor?? [ 357.292037][ T9068] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 357.292073][ T9068] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 358.316886][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 358.316923][ T9] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 358.317157][ T9] asix 6-1:0.34: probe with driver asix failed with error -71 [ 358.351610][ T9] usb 6-1: USB disconnect, device number 13 [ 359.067249][T10402] CIFS: Attempting to mount //127.0.0.1/share [ 359.069167][T10402] CIFS: VFS: Error connecting to socket. Aborting operation. [ 359.069217][T10402] CIFS: VFS: cifs_mount failed w/return code = -101 [ 359.612063][ T9068] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 359.612264][ T9068] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 359.643742][ T9068] usb 5-1: USB disconnect, device number 19 [ 359.768010][ T5620] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 359.768046][ T5620] CPU: 0 UID: 0 PID: 5620 Comm: kworker/u9:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 359.768068][ T5620] Tainted: [L]=SOFTLOCKUP [ 359.768074][ T5620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 359.768083][ T5620] Workqueue: hci4 hci_rx_work [ 359.768117][ T5620] Call Trace: [ 359.768126][ T5620] [ 359.768132][ T5620] dump_stack_lvl+0xe8/0x150 [ 359.768154][ T5620] sysfs_create_dir_ns+0x271/0x2a0 [ 359.768176][ T5620] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 359.768198][ T5620] ? do_raw_spin_unlock+0xf5/0x200 [ 359.768220][ T5620] kobject_add_internal+0x622/0xcd0 [ 359.768244][ T5620] kobject_add+0x163/0x240 [ 359.768265][ T5620] ? __pfx_kobject_add+0x10/0x10 [ 359.768287][ T5620] ? get_device_parent+0x366/0x3a0 [ 359.768312][ T5620] device_add+0x3fa/0xb80 [ 359.768334][ T5620] hci_conn_add_sysfs+0xd5/0x210 [ 359.768358][ T5620] le_conn_complete_evt+0x10b2/0x17a0 [ 359.768381][ T5620] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 359.768400][ T5620] ? __mutex_unlock_slowpath+0x731/0x900 [ 359.768418][ T5620] ? skb_pull_data+0xf0/0x200 [ 359.768442][ T5620] hci_le_conn_complete_evt+0x187/0x470 [ 359.768464][ T5620] hci_event_packet+0x67a/0xf10 [ 359.768491][ T5620] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 359.768506][ T5620] ? __pfx_hci_event_packet+0x10/0x10 [ 359.768532][ T5620] ? audit_filter_rules+0x4180/0x5d10 [ 359.768550][ T5620] ? hci_send_to_monitor+0xe2/0x590 [ 359.768572][ T5620] hci_rx_work+0x3ee/0x1020 [ 359.768599][ T5620] ? process_scheduled_works+0x97a/0x1630 [ 359.768617][ T5620] process_scheduled_works+0xc3d/0x1630 [ 359.768654][ T5620] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.768675][ T5620] ? assign_work+0x3cf/0x5d0 [ 359.768695][ T5620] worker_thread+0xa47/0xfb0 [ 359.768730][ T5620] kthread+0x38b/0x480 [ 359.768751][ T5620] ? __pfx_worker_thread+0x10/0x10 [ 359.768767][ T5620] ? __pfx_kthread+0x10/0x10 [ 359.768793][ T5620] ret_from_fork+0x514/0xb70 [ 359.768815][ T5620] ? __pfx_ret_from_fork+0x10/0x10 [ 359.768836][ T5620] ? __switch_to+0xc89/0x1420 [ 359.768855][ T5620] ? __pfx_kthread+0x10/0x10 [ 359.768877][ T5620] ret_from_fork_asm+0x1a/0x30 [ 359.768908][ T5620] [ 359.779601][ T5620] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 359.779639][ T5620] Bluetooth: hci4: failed to register connection device [ 360.552736][ T5617] Bluetooth: hci2: Invalid connection link type handle 0x00c8 [ 360.978118][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 361.132731][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 361.145056][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 361.145086][ T10] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 361.145119][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.179551][ T10] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 361.186239][T10434] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1455'. [ 361.225759][ T10] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 361.369144][ T9068] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 361.528949][ T9068] usb 9-1: Using ep0 maxpacket: 16 [ 361.534627][ T9068] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 361.545826][ T9068] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 361.545858][ T9068] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.578057][ T9068] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.578085][ T9068] usb 9-1: Product: syz [ 361.578105][ T9068] usb 9-1: Manufacturer: syz [ 361.578117][ T9068] usb 9-1: SerialNumber: syz [ 361.606297][ T9068] usb 9-1: config 0 descriptor?? [ 361.620003][ T9068] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 361.631059][ T9068] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 361.679736][T10430] SPCP8x5 ttyUSB0: failed to set control lines: -110 [ 361.689254][T10430] SPCP8x5 ttyUSB0: Set UART format 0x30b failed (error = -32) [ 361.700691][ T5785] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 361.716239][T10430] SPCP8x5 ttyUSB0: failed to set control lines: -32 [ 361.779903][T10430] SPCP8x5 ttyUSB0: unsupported baudrate, using 9600 [ 361.780229][T10430] SPCP8x5 ttyUSB0: Set UART format 0x0 failed (error = -32) [ 361.876424][ T5617] Bluetooth: hci1: Unknown advertising packet type: 0x18 [ 361.876456][ T5617] Bluetooth: hci1: Unknown advertising packet type: 0x1e [ 361.876481][ T5617] Bluetooth: hci1: Unknown advertising packet type: 0x30 [ 361.876493][ T5617] Bluetooth: hci1: Malformed LE Event: 0x0d [ 361.913263][ T5785] usb 8-1: unable to get BOS descriptor or descriptor too short [ 361.913325][ T5785] usb 8-1: New USB device found, idVendor=093a, idProduct=2474, bcdDevice=ef.f5 [ 361.936196][ T5785] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 361.936235][ T5785] usb 8-1: can't read configurations, error -71 [ 362.226169][ T9068] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 362.234813][ T9068] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 362.659153][ T5617] Bluetooth: hci4: Malformed LE Event: 0x0d [ 362.850457][ T9068] em28xx 9-1:0.0: Unknown AC97 audio processor detected! [ 362.858212][ T9068] em28xx 9-1:0.0: couldn't setup AC97 register 2 [ 362.876648][ T9068] em28xx 9-1:0.0: couldn't setup AC97 register 4 [ 362.905346][T10452] usb 5-1: USB disconnect, device number 20 [ 363.494093][ T9068] em28xx 9-1:0.0: couldn't setup AC97 register 54 [ 363.501325][ T9068] em28xx 9-1:0.0: couldn't setup AC97 register 56 [ 363.516438][ T9068] usb 9-1: USB disconnect, device number 3 [ 363.812513][T10452] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 363.860194][T10452] spcp8x5 5-1:1.0: device disconnected [ 363.909216][ T10] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 364.061158][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 364.071004][ T10] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 364.085406][ T10] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.085435][ T10] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 364.108747][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.108779][ T10] usb 8-1: Product: syz [ 364.108872][ T10] usb 8-1: Manufacturer: syz [ 364.108887][ T10] usb 8-1: SerialNumber: syz [ 364.165655][ T10] usb 8-1: 0:2 : does not exist [ 364.271993][T10465] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1467'. [ 364.355694][ T10] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 364.604456][ T10] usb 8-1: USB disconnect, device number 6 [ 364.693282][ T9325] udevd[9325]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 364.758570][ T9068] snd_hda_intel 0000:00:01.0: Unknown PCI class/subclass/prog-if information (0x060100) found, selecting HDAudio legacy driver [ 364.758618][ T9068] snd_hda_intel 0000:00:01.0: Too small PCI BAR0 [ 364.804484][T10473] snd_hda_intel 0000:00:01.0: probe with driver snd_hda_intel failed with error -22 [ 365.329965][ T5617] Bluetooth: hci2: command 0x0406 tx timeout [ 365.618349][ T32] audit: type=1800 audit(2000000272.470:111): pid=10497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1479" name="file0" dev="overlay" ino=647 res=0 errno=0 [ 366.042588][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 366.403002][T10508] gadgetfs: bound to dummy_udc driver [ 366.620203][ T9068] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 366.659424][ T10] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 366.667144][ C0] gadgetfs: connected [ 366.667525][ T10] gadgetfs: disconnected [ 366.772598][ T9068] usb 8-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 366.785034][ T9068] usb 8-1: config 0 has no interfaces? [ 366.793098][ T9068] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.793122][ T9068] usb 8-1: Product: syz [ 366.793140][ T9068] usb 8-1: Manufacturer: syz [ 366.793158][ T9068] usb 8-1: SerialNumber: syz [ 366.829680][ T9068] usb 8-1: config 0 descriptor?? [ 366.836039][ C0] gadgetfs: connected [ 366.841619][ T10] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 366.851874][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.872088][ C0] gadgetfs: configuration #1 [ 367.056942][T10508] gadgetfs: suspended from state 3 [ 367.057072][T10508] gadgetfs: disconnected [ 367.068352][ T10] usb 2-1: can't set config #1, error -71 [ 367.083309][ T10] usb 2-1: USB disconnect, device number 45 [ 367.114717][ T9068] usb 8-1: USB disconnect, device number 7 [ 368.246892][T10530] syz.4.1491 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 368.278659][T10530] CPU: 0 UID: 0 PID: 10530 Comm: syz.4.1491 Tainted: G L syzkaller #0 PREEMPT(full) [ 368.278683][T10530] Tainted: [L]=SOFTLOCKUP [ 368.278688][T10530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 368.278697][T10530] Call Trace: [ 368.278703][T10530] [ 368.278710][T10530] dump_stack_lvl+0xe8/0x150 [ 368.278732][T10530] dump_header+0xd3/0x4b0 [ 368.278753][T10530] oom_kill_process+0x3ab/0x9e0 [ 368.278771][T10530] out_of_memory+0x1064/0x1480 [ 368.278787][T10530] ? try_charge_memcg+0xc32/0x15e0 [ 368.278809][T10530] ? __pfx_out_of_memory+0x10/0x10 [ 368.278821][T10530] ? do_raw_spin_unlock+0xf5/0x200 [ 368.278844][T10530] try_charge_memcg+0xcdf/0x15e0 [ 368.278870][T10530] ? __pfx_try_charge_memcg+0x10/0x10 [ 368.278888][T10530] ? percpu_ref_tryget+0x15/0x180 [ 368.278910][T10530] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 368.278937][T10530] ? __memcg_slab_post_alloc_hook+0x793/0xf80 [ 368.278959][T10530] __memcg_slab_post_alloc_hook+0x92b/0xf80 [ 368.278993][T10530] kmem_cache_alloc_lru_noprof+0x351/0x5f0 [ 368.279013][T10530] ? kmem_cache_alloc_lru_noprof+0x153/0x5f0 [ 368.279030][T10530] ? sock_alloc_inode+0x2c/0x1a0 [ 368.279051][T10530] ? sock_alloc_inode+0x2c/0x1a0 [ 368.279074][T10530] ? __pfx_sock_alloc_inode+0x10/0x10 [ 368.279095][T10530] sock_alloc_inode+0x2c/0x1a0 [ 368.279115][T10530] ? __pfx_sock_alloc_inode+0x10/0x10 [ 368.279135][T10530] alloc_inode+0x6a/0x1b0 [ 368.279151][T10530] __sock_create+0x12d/0x9d0 [ 368.279170][T10530] __sys_socket+0xd6/0x1b0 [ 368.279185][T10530] __x64_sys_socket+0x7a/0x90 [ 368.279199][T10530] do_syscall_64+0x166/0x520 [ 368.279213][T10530] ? trace_irq_disable+0x3b/0x140 [ 368.279233][T10530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.279248][T10530] ? clear_bhb_loop+0x70/0xc0 [ 368.279264][T10530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.279278][T10530] RIP: 0033:0x7f65dbb9e0d9 [ 368.279292][T10530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 368.279303][T10530] RSP: 002b:00007f65dca12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 368.279318][T10530] RAX: ffffffffffffffda RBX: 00007f65dbe25fa0 RCX: 00007f65dbb9e0d9 [ 368.279328][T10530] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 368.279336][T10530] RBP: 00007f65dbc35024 R08: 0000000000000000 R09: 0000000000000000 [ 368.279344][T10530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.279352][T10530] R13: 00007f65dbe26038 R14: 00007f65dbe25fa0 R15: 00007ffdf49a1838 [ 368.279373][T10530] [ 368.611229][T10530] memory: usage 96kB, limit 96kB, failcnt 52 [ 368.611258][T10530] memory+swap: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 368.611280][T10530] kmem: usage 96kB, limit 9007199254740988kB, failcnt 0 [ 368.611293][T10530] Memory cgroup stats for /syz4/test: [ 368.611560][T10530] cache 0 [ 368.611569][T10530] rss 0 [ 368.611576][T10530] rss_huge 0 [ 368.611583][T10530] shmem 0 [ 368.611590][T10530] mapped_file 0 [ 368.611597][T10530] dirty 0 [ 368.611604][T10530] writeback 0 [ 368.611611][T10530] workingset_refault_anon 0 [ 368.611631][T10530] workingset_refault_file 0 [ 368.611639][T10530] swap 0 [ 368.611646][T10530] swapcached 0 [ 368.611653][T10530] pgpgin 0 [ 368.611660][T10530] pgpgout 0 [ 368.611666][T10530] pgfault 29 [ 368.611674][T10530] pgmajfault 0 [ 368.611681][T10530] inactive_anon 0 [ 368.611688][T10530] active_anon 0 [ 368.611695][T10530] inactive_file 0 [ 368.611702][T10530] active_file 0 [ 368.611710][T10530] unevictable 0 [ 368.611717][T10530] hierarchical_memory_limit 98304 [ 368.611725][T10530] hierarchical_memsw_limit 9223372036854771712 [ 368.611734][T10530] total_cache 0 [ 368.611741][T10530] total_rss 0 [ 368.611748][T10530] total_rss_huge 0 [ 368.611756][T10530] total_shmem 0 [ 368.611763][T10530] total_mapped_file 0 [ 368.611770][T10530] total_dirty 0 [ 368.611777][T10530] total_writeback 0 [ 368.611785][T10530] total_workingset_refault_anon 0 [ 368.611793][T10530] total_workingset_refault_file 0 [ 368.611801][T10530] total_swap 0 [ 368.611808][T10530] total_swapcached 0 [ 368.611815][T10530] total_pgpgin 0 [ 368.611822][T10530] total_pgpgout 0 [ 368.611829][T10530] total_pgfault 29 [ 368.611837][T10530] total_pgmajfault 0 [ 368.611844][T10530] total_inactive_anon 0 [ 368.611852][T10530] total_active_anon 0 [ 368.611859][T10530] total_inactive_file 0 [ 368.611867][T10530] total_active_file 0 [ 368.611874][T10530] total_unevictable 0 [ 368.611881][T10530] anon_cost 0 [ 368.611889][T10530] file_cost 0 [ 368.611896][T10530] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4/test,task_memcg=/syz4/test,task=syz.4.1491,pid=10529,uid=0 [ 368.612192][T10530] Memory cgroup out of memory: Killed process 10529 (syz.4.1491) total-vm:104432kB, anon-rss:1432kB, file-rss:23960kB, shmem-rss:0kB, UID:0 pgtables:140kB oom_score_adj:1000 [ 368.908003][T10530] socket: no more sockets [ 369.224656][ T4985] ldm_parse_privhead(): Expected PRIVHEAD version 2.11 or 2.12, got 0.0. Aborting. [ 369.224686][ T4985] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 369.224735][ T4985] loop0: [ 369.987005][T10547] kvm: pic: non byte write [ 370.179840][ T9068] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 370.339973][ T9068] usb 6-1: Using ep0 maxpacket: 32 [ 370.345854][ T9068] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 370.356274][ T9068] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 370.356304][ T9068] usb 6-1: config 0 has no interface number 0 [ 370.381565][ T9068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.381594][ T9068] usb 6-1: Product: syz [ 370.381614][ T9068] usb 6-1: Manufacturer: syz [ 370.381627][ T9068] usb 6-1: SerialNumber: syz [ 370.410417][ T9068] usb 6-1: config 0 descriptor?? [ 370.836032][ T9068] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 370.836074][ T9068] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 372.728661][ T32] audit: type=1800 audit(2000000279.590:112): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1505" name="zoned" dev="configfs" ino=39717 res=0 errno=0 [ 372.755666][ T32] audit: type=1800 audit(2000000279.610:113): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1505" name="zone_nr_conv" dev="configfs" ino=39720 res=0 errno=0 [ 372.784708][ T32] audit: type=1800 audit(2000000279.640:114): pid=10567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1505" name="power" dev="configfs" ino=39721 res=0 errno=0 [ 372.853792][T10567] null_blk: nullb1: using native zone append [ 373.017278][T10567] null_blk: disk nullb1 created [ 373.173373][T10574] jffs2: notice: (10574) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 373.335903][ T9068] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 373.336099][ T9068] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 373.361218][ T9068] usb 6-1: USB disconnect, device number 14 [ 375.775140][T10592] syzkaller0: entered promiscuous mode [ 375.780762][T10592] syzkaller0: entered allmulticast mode [ 375.875362][T10596] binder: 10594:10596 ioctl 8 0 returned -22 [ 375.945214][T10597] binder_alloc: 10594: binder_alloc_buf size 12224 failed, no address space [ 375.978052][T10597] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 8192 (num: 1 largest: 8192) [ 377.295412][T10596] syz.8.1514 (10596): drop_caches: 2 [ 377.712369][T10618] kvm: pic: non byte read [ 377.717581][T10618] pic_ioport_write: 53 callbacks suppressed [ 377.717615][T10618] kvm: pic: level sensitive irq not supported [ 377.717660][T10618] kvm: pic: non byte read [ 377.717815][T10618] kvm: pic: level sensitive irq not supported [ 377.717859][T10618] kvm: pic: non byte read [ 377.749407][T10618] kvm: pic: level sensitive irq not supported [ 377.749465][T10618] kvm: pic: non byte read [ 377.749649][T10618] kvm: pic: level sensitive irq not supported [ 377.749693][T10618] kvm: pic: non byte read [ 377.749848][T10618] kvm: pic: level sensitive irq not supported [ 377.749891][T10618] kvm: pic: non byte read [ 377.750051][T10618] kvm: pic: level sensitive irq not supported [ 377.750094][T10618] kvm: pic: non byte read [ 377.750249][T10618] kvm: pic: level sensitive irq not supported [ 377.750292][T10618] kvm: pic: non byte read [ 377.750444][T10618] kvm: pic: level sensitive irq not supported [ 377.750487][T10618] kvm: pic: non byte read [ 377.856321][T10623] random: crng reseeded on system resumption [ 378.194548][T10631] bridge0: port 3(wlan1) entered blocking state [ 378.215929][T10631] bridge0: port 3(wlan1) entered disabled state [ 378.216239][T10631] mac80211_hwsim hwsim18 wlan1: entered allmulticast mode [ 378.278096][T10631] mac80211_hwsim hwsim18 wlan1: entered promiscuous mode [ 378.605127][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.611664][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.484476][ T5785] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 379.638910][ T5785] usb 8-1: Using ep0 maxpacket: 32 [ 379.644561][ T5785] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 379.655335][ T5785] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 379.655365][ T5785] usb 8-1: config 0 has no interface number 0 [ 379.655408][ T5785] usb 8-1: config 0 interface 184 has no altsetting 0 [ 379.671727][ T5785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.671743][ T5785] usb 8-1: Product: syz [ 379.671753][ T5785] usb 8-1: Manufacturer: syz [ 379.671763][ T5785] usb 8-1: SerialNumber: syz [ 379.708013][ T5785] usb 8-1: config 0 descriptor?? [ 380.338911][ T5785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 380.350816][ T5785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 380.879265][ T9068] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 381.031654][ T9068] usb 6-1: Using ep0 maxpacket: 16 [ 381.037984][ T9068] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 381.052488][ T9068] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 381.052535][ T9068] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 381.083276][ T9068] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.083323][ T9068] usb 6-1: Product: syz [ 381.083356][ T9068] usb 6-1: Manufacturer: syz [ 381.083370][ T9068] usb 6-1: SerialNumber: syz [ 381.110234][ T9068] usb 6-1: config 0 descriptor?? [ 381.123312][ T9068] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 381.132962][ T9068] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 381.529031][ T8511] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 381.691941][ T8511] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 381.705250][ T8511] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.713587][ T8511] usb 9-1: Product: syz [ 381.713607][ T8511] usb 9-1: Manufacturer: syz [ 381.713618][ T8511] usb 9-1: SerialNumber: syz [ 381.735213][ T8511] usb 9-1: config 0 descriptor?? [ 381.742891][ T9068] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 381.752064][ T9068] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 381.956520][ T8511] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 382.369239][ T9068] em28xx 6-1:0.0: Unknown AC97 audio processor detected! [ 382.376982][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 2 [ 382.384327][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 4 [ 382.394795][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 6 [ 382.401999][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 54 [ 382.410476][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 56 [ 383.004993][ T5785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 383.016176][ T5785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 383.016195][ T5785] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 383.016425][ T5785] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71 [ 383.062918][ T5785] usb 8-1: USB disconnect, device number 8 [ 383.275631][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 20 [ 383.283356][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 16 [ 383.292597][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 12 [ 383.300693][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 14 [ 383.307975][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 18 [ 383.314900][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 22 [ 383.322015][ T9068] em28xx 6-1:0.0: couldn't setup AC97 register 24 [ 383.338652][ T9068] usb 6-1: USB disconnect, device number 15 [ 383.347891][ T9068] em28xx 6-1:0.0: Disconnecting em28xx [ 383.356816][ T5754] em28xx 6-1:0.0: Binding audio extension [ 383.356845][ T5754] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2006 Markus Rechberger [ 383.356858][ T5754] em28xx 6-1:0.0: em28xx-audio.c: Copyright (C) 2007-2016 Mauro Carvalho Chehab [ 383.415370][ T5754] em28xx 6-1:0.0: alt 0 doesn't exist on interface 7 [ 383.428720][ T9068] em28xx 6-1:0.0: Closing audio extension [ 383.444345][ T9068] em28xx: Freeing device [ 383.610083][ T8511] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 383.631707][ T8511] usb 9-1: USB disconnect, device number 4 [ 385.802136][ T5620] Bluetooth: hci4: command 0x0406 tx timeout [ 386.741916][ T8511] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 386.899179][ T8511] usb 6-1: Using ep0 maxpacket: 32 [ 386.905178][ T8511] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 386.918235][ T8511] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 386.918265][ T8511] usb 6-1: config 0 has no interface number 0 [ 386.941971][ T8511] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.941999][ T8511] usb 6-1: Product: syz [ 386.942019][ T8511] usb 6-1: Manufacturer: syz [ 386.942032][ T8511] usb 6-1: SerialNumber: syz [ 386.972072][ T8511] usb 6-1: config 0 descriptor?? [ 387.338246][T10739] input: syz1 as /devices/virtual/input/input51 [ 387.417372][ T8511] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 387.429054][ T8511] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 387.699007][ T5785] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 387.850659][ T5785] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 387.860837][ T5785] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.860896][ T5785] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.888470][ T5785] usb 9-1: config 0 descriptor?? [ 387.909964][ T5785] pwc: Askey VC010 type 2 USB webcam detected. [ 388.125137][T10741] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 388.221614][T10749] kvm: pic: non byte read [ 388.226446][T10749] kvm: pic: level sensitive irq not supported [ 388.226555][T10749] kvm: pic: non byte read [ 388.238017][T10749] kvm: pic: level sensitive irq not supported [ 388.238937][T10749] kvm: pic: non byte read [ 388.239142][T10749] kvm: pic: level sensitive irq not supported [ 388.239187][T10749] kvm: pic: non byte read [ 388.239361][T10749] kvm: pic: level sensitive irq not supported [ 388.239423][T10749] kvm: pic: non byte read [ 388.239612][T10749] kvm: pic: level sensitive irq not supported [ 388.239681][T10749] kvm: pic: non byte read [ 388.285415][T10749] kvm: pic: level sensitive irq not supported [ 388.285513][T10749] kvm: pic: non byte read [ 388.362413][T10749] kvm: pic: level sensitive irq not supported [ 388.364796][T10749] kvm: pic: non byte read [ 388.365092][T10749] kvm: pic: level sensitive irq not supported [ 388.365156][T10749] kvm: pic: non byte read [ 390.336298][ T8511] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000008: -71 [ 390.336549][ T8511] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 390.373963][ T8511] usb 6-1: USB disconnect, device number 16 [ 390.470994][ T5785] pwc: send_video_command error -71 [ 390.471020][ T5785] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 390.471096][ T5785] Philips webcam 9-1:0.0: probe with driver Philips webcam failed with error -71 [ 390.505467][ T5785] usb 9-1: USB disconnect, device number 5 [ 391.399586][ T5785] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 391.559724][ T5785] usb 8-1: Using ep0 maxpacket: 32 [ 391.565381][ T5785] usb 8-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 391.580987][ T5785] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 391.581017][ T5785] usb 8-1: config 0 has no interfaces? [ 391.603029][ T5785] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.603060][ T5785] usb 8-1: Product: syz [ 391.603082][ T5785] usb 8-1: Manufacturer: syz [ 391.603096][ T5785] usb 8-1: SerialNumber: syz [ 391.632226][ T5785] usb 8-1: config 0 descriptor?? [ 391.874241][ T8511] usb 8-1: USB disconnect, device number 9 [ 391.950378][ T5785] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 392.111565][ T5785] usb 6-1: Using ep0 maxpacket: 16 [ 392.118628][ T5785] usb 6-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 392.132223][ T5785] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.132257][ T5785] usb 6-1: config 0 interface 0 has no altsetting 0 [ 392.162359][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.162390][ T5785] usb 6-1: Product: syz [ 392.162411][ T5785] usb 6-1: Manufacturer: syz [ 392.162424][ T5785] usb 6-1: SerialNumber: syz [ 392.195080][ T5785] usb 6-1: config 0 descriptor?? [ 392.437776][ T5785] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input52 [ 392.909668][T10800] netlink: 542 bytes leftover after parsing attributes in process `syz.5.1576'. [ 392.923173][ C0] imon 6-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 392.933142][ T5785] imon:send_packet: packet tx failed (-71) [ 392.951934][ T5785] imon 6-1:0.0: panel buttons/knobs setup failed [ 393.130424][ T5785] rc_core: IR keymap rc-imon-pad not found [ 393.130448][ T5785] Registered IR keymap rc-empty [ 393.130507][ T5785] imon 6-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 393.130520][ T5785] imon 6-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 393.136962][ T5785] imon:send_packet: packet tx failed (-71) [ 393.173074][ T5785] imon 6-1:0.0: remote input dev register failed [ 393.173229][ T5785] imon 6-1:0.0: imon_init_intf0: rc device setup failed [ 393.370202][ T5785] imon 6-1:0.0: unable to initialize intf0, err 0 [ 393.380418][ T5785] imon:imon_probe: failed to initialize context! [ 393.380451][ T5785] imon 6-1:0.0: unable to register, err -19 [ 393.407498][ T5785] usb 6-1: USB disconnect, device number 17 [ 393.948982][ T5785] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 394.099689][ T5785] usb 9-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 394.110054][ T5785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 394.110100][ T5785] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 394.136710][ T5785] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 394.144923][ T5785] usb 9-1: Manufacturer: syz [ 394.156016][ T5785] usb 9-1: config 0 descriptor?? [ 395.553711][ T5785] uclogic 0003:256C:006D.002C: failed retrieving Huion firmware version: -71 [ 395.553768][ T5785] uclogic 0003:256C:006D.002C: failed probing parameters: -71 [ 395.553856][ T5785] uclogic 0003:256C:006D.002C: probe with driver uclogic failed with error -71 [ 395.595724][ T5785] usb 9-1: USB disconnect, device number 6 [ 396.734816][ T32] audit: type=1800 audit(2000000303.520:115): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1600" name="bmaControls" dev="configfs" ino=44763 res=0 errno=0 [ 397.616491][ T5625] Bluetooth: hci1: unexpected event for opcode 0x2041 [ 398.075867][ T32] audit: type=1400 audit(2000000304.930:116): apparmor="STATUS" operation="profile_load" info="failed to create" error=-12 profile="unconfined" name="/" pid=10906 comm="syz.7.1610" [ 398.440898][ T5785] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 398.599021][ T5785] usb 6-1: Using ep0 maxpacket: 16 [ 398.604593][ T5785] usb 6-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 398.618670][ T5785] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.618699][ T5785] usb 6-1: Product: syz [ 398.618720][ T5785] usb 6-1: Manufacturer: syz [ 398.618734][ T5785] usb 6-1: SerialNumber: syz [ 398.653343][ T5785] usb 6-1: config 0 descriptor?? [ 398.666126][ T5785] gspca_main: spca508-2.14.0 probing 041e:4018 [ 398.858484][ T5785] gspca_spca508: reg_read err -32 [ 399.121970][T10911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.134032][T10911] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.146030][T10911] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1602'. [ 399.166614][T10911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 399.189629][T10911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 399.208225][T10911] bond0 (unregistering): Released all slaves [ 399.273230][ T5785] gspca_spca508: reg_read err -71 [ 399.278553][ T5785] gspca_spca508: reg_read err -71 [ 399.284317][ T5785] gspca_spca508: reg_read err -71 [ 399.289663][ T5785] gspca_spca508: reg write: error -71 [ 399.289729][ T5785] spca508 6-1:0.0: probe with driver spca508 failed with error -71 [ 399.308636][ T5785] usb 6-1: USB disconnect, device number 18 [ 399.709365][T10934] LUN: removable file: (no medium) [ 399.716907][ T32] audit: type=1800 audit(2000000306.570:117): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1617" name="cdrom" dev="configfs" ino=45409 res=0 errno=0 [ 399.752257][ T32] audit: type=1800 audit(2000000306.610:118): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1617" name="file" dev="configfs" ino=45410 res=0 errno=0 [ 399.795339][ T32] audit: type=1800 audit(2000000306.650:119): pid=10934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1617" name="UDC" dev="configfs" ino=45411 res=0 errno=0 [ 400.268619][ T32] audit: type=1400 audit(2000000307.120:120): apparmor="STATUS" operation="profile_load" profile="unconfined" name="/" pid=10940 comm="syz.4.1620" [ 400.447861][T10946] netlink: 'syz.8.1621': attribute type 10 has an invalid length. [ 400.993608][T10959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.111689][T10961] tmpfs: Bad value for 'mpol' [ 401.275140][T10964] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1628'. [ 401.388910][ T9] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 401.474312][T10968] mac80211_hwsim hwsim17 wlan0: entered promiscuous mode [ 401.486971][T10968] mac80211_hwsim hwsim17 wlan0: left promiscuous mode [ 401.494889][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1630'. [ 401.506409][T10968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 401.539417][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 401.547062][ T9] usb 6-1: New USB device found, idVendor=05ac, idProduct=027d, bcdDevice= 0.00 [ 401.558067][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 227, changing to 11 [ 401.569527][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.581988][ T9] usb 6-1: config 0 descriptor?? [ 401.790102][T10962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.806619][T10962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.930003][T10969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 402.022876][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.029950][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.038147][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.038186][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.038208][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.038228][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.038249][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.038269][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.038291][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.038311][ T9] apple 0003:05AC:027D.002D: unknown main item tag 0x0 [ 402.071370][ T9] apple 0003:05AC:027D.002D: collection stack underflow [ 402.071392][ T9] apple 0003:05AC:027D.002D: item 0 1 0 12 parsing failed [ 402.071947][ T9] apple 0003:05AC:027D.002D: parse failed [ 402.072020][ T9] apple 0003:05AC:027D.002D: probe with driver apple failed with error -22 [ 402.237381][ T32] audit: type=1800 audit(2000000309.090:121): pid=10962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1627" name="features" dev="configfs" ino=45652 res=0 errno=0 [ 402.269513][ T8511] usb 6-1: USB disconnect, device number 19 [ 402.549155][ T9] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 402.703636][ T9] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 402.714479][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.714507][ T9] usb 8-1: config 0 has no interfaces? [ 402.732106][ T9] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 402.740311][ T9] usb 8-1: Product: syz [ 402.740326][ T9] usb 8-1: Manufacturer: syz [ 402.752194][ T32] audit: type=1800 audit(2000000309.610:122): pid=10978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1635" name="file" dev="configfs" ino=45671 res=0 errno=0 [ 402.777315][ T9] usb 8-1: config 0 descriptor?? [ 402.798846][T10978] [ 402.801194][T10978] ====================================================== [ 402.808204][T10978] WARNING: possible circular locking dependency detected [ 402.815248][T10978] syzkaller #0 Tainted: G L [ 402.821234][T10978] ------------------------------------------------------ [ 402.828242][T10978] syz.8.1635/10978 is trying to acquire lock: [ 402.834298][T10978] ffff8880597d8460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 402.843019][T10978] [ 402.843019][T10978] but task is already holding lock: [ 402.850396][T10978] ffff888029b76920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x163/0x400 [ 402.859610][T10978] [ 402.859610][T10978] which lock already depends on the new lock. [ 402.859610][T10978] [ 402.869998][T10978] [ 402.869998][T10978] the existing dependency chain (in reverse order) is: [ 402.878999][T10978] [ 402.878999][T10978] -> #4 (&common->filesem){++++}-{4:4}: [ 402.886727][T10978] down_read+0x4a/0x330 [ 402.891406][T10978] fsg_show_file+0x2d/0x140 [ 402.896439][T10978] configfs_read_iter+0x2b7/0x620 [ 402.901983][T10978] __kernel_read+0x4ca/0x960 [ 402.907088][T10978] integrity_kernel_read+0x89/0xd0 [ 402.912718][T10978] ima_calc_file_hash+0x451/0x890 [ 402.918257][T10978] ima_collect_measurement+0x51b/0xa00 [ 402.924337][T10978] process_measurement+0x1272/0x1c10 [ 402.930146][T10978] ima_file_check+0xe1/0x130 [ 402.935277][T10978] security_file_post_open+0xb3/0x260 [ 402.941176][T10978] path_openat+0x1485/0x1d60 [ 402.946290][T10978] do_file_open+0x23e/0x4a0 [ 402.951328][T10978] do_sys_openat2+0x115/0x200 [ 402.956518][T10978] __x64_sys_openat+0x138/0x170 [ 402.961881][T10978] do_syscall_64+0x166/0x520 [ 402.966987][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.973395][T10978] [ 402.973395][T10978] -> #3 (&p->frag_sem){.+.+}-{4:4}: [ 402.980780][T10978] down_read+0x4a/0x330 [ 402.985478][T10978] configfs_read_iter+0x1cc/0x620 [ 402.991067][T10978] __kernel_read+0x4ca/0x960 [ 402.996176][T10978] integrity_kernel_read+0x89/0xd0 [ 403.001806][T10978] ima_calc_file_hash+0x451/0x890 [ 403.007349][T10978] ima_collect_measurement+0x51b/0xa00 [ 403.013328][T10978] process_measurement+0x1272/0x1c10 [ 403.019147][T10978] ima_file_check+0xe1/0x130 [ 403.024251][T10978] security_file_post_open+0xb3/0x260 [ 403.030147][T10978] path_openat+0x1485/0x1d60 [ 403.035255][T10978] do_file_open+0x23e/0x4a0 [ 403.040289][T10978] do_sys_openat2+0x115/0x200 [ 403.045483][T10978] __x64_sys_openat+0x138/0x170 [ 403.050848][T10978] do_syscall_64+0x166/0x520 [ 403.055962][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.062372][T10978] [ 403.062372][T10978] -> #2 (&buffer->mutex#2){+.+.}-{4:4}: [ 403.070096][T10978] __mutex_lock+0x19d/0x1550 [ 403.075201][T10978] configfs_read_iter+0x70/0x620 [ 403.080658][T10978] __kernel_read+0x4ca/0x960 [ 403.085765][T10978] integrity_kernel_read+0x89/0xd0 [ 403.091399][T10978] ima_calc_file_hash+0x451/0x890 [ 403.096935][T10978] ima_collect_measurement+0x51b/0xa00 [ 403.102924][T10978] process_measurement+0x1272/0x1c10 [ 403.108727][T10978] ima_file_check+0xe1/0x130 [ 403.113828][T10978] security_file_post_open+0xb3/0x260 [ 403.119742][T10978] path_openat+0x1485/0x1d60 [ 403.124850][T10978] do_file_open+0x23e/0x4a0 [ 403.129874][T10978] do_sys_openat2+0x115/0x200 [ 403.135074][T10978] __x64_sys_openat+0x138/0x170 [ 403.140437][T10978] do_syscall_64+0x166/0x520 [ 403.145544][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.151953][T10978] [ 403.151953][T10978] -> #1 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}: [ 403.160549][T10978] __mutex_lock+0x19d/0x1550 [ 403.165652][T10978] ima_file_truncate+0xb6/0x170 [ 403.171034][T10978] security_file_truncate+0x118/0x240 [ 403.176927][T10978] path_openat+0x1569/0x1d60 [ 403.182055][T10978] do_file_open+0x23e/0x4a0 [ 403.187079][T10978] do_sys_openat2+0x115/0x200 [ 403.192271][T10978] __x64_sys_openat+0x138/0x170 [ 403.197633][T10978] do_syscall_64+0x166/0x520 [ 403.202737][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.209152][T10978] [ 403.209152][T10978] -> #0 (sb_writers#5){.+.+}-{0:0}: [ 403.216548][T10978] __lock_acquire+0x15ff/0x2e50 [ 403.221935][T10978] lock_acquire+0x115/0x350 [ 403.226975][T10978] sb_start_write+0x4d/0x1d0 [ 403.232097][T10978] mnt_want_write+0x41/0x90 [ 403.237127][T10978] lookup_open+0x1e6/0x1a40 [ 403.242153][T10978] path_openat+0x677/0x1d60 [ 403.247200][T10978] do_file_open+0x23e/0x4a0 [ 403.252224][T10978] filp_open+0x16d/0x1d0 [ 403.256998][T10978] fsg_lun_open+0x6c/0xdf0 [ 403.261928][T10978] fsg_store_file+0x19e/0x400 [ 403.267137][T10978] configfs_write_iter+0x337/0x430 [ 403.272764][T10978] vfs_write+0x612/0xba0 [ 403.277542][T10978] ksys_write+0x150/0x270 [ 403.282413][T10978] do_syscall_64+0x166/0x520 [ 403.287519][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.293925][T10978] [ 403.293925][T10978] other info that might help us debug this: [ 403.293925][T10978] [ 403.304144][T10978] Chain exists of: [ 403.304144][T10978] sb_writers#5 --> &p->frag_sem --> &common->filesem [ 403.304144][T10978] [ 403.316909][T10978] Possible unsafe locking scenario: [ 403.316909][T10978] [ 403.324351][T10978] CPU0 CPU1 [ 403.329704][T10978] ---- ---- [ 403.335055][T10978] lock(&common->filesem); [ 403.339566][T10978] lock(&p->frag_sem); [ 403.346234][T10978] lock(&common->filesem); [ 403.353251][T10978] rlock(sb_writers#5); [ 403.357492][T10978] [ 403.357492][T10978] *** DEADLOCK *** [ 403.357492][T10978] [ 403.365623][T10978] locks held by syz.8.1635/10978: 5, last CPU#0: [ 403.371945][T10978] #0: ffff888025dd10b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 403.380985][T10978] #1: ffff88801e34a460 (sb_writers#25){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 403.389975][T10978] #2: ffff888077dcee80 (&buffer->mutex#2){+.+.}-{4:4}, at: configfs_write_iter+0x7e/0x430 [ 403.399987][T10978] #3: ffff888076bf8270 (&p->frag_sem){.+.+}-{4:4}, at: configfs_write_iter+0x238/0x430 [ 403.409731][T10978] #4: ffff888029b76920 (&common->filesem){++++}-{4:4}, at: fsg_store_file+0x163/0x400 [ 403.419383][T10978] [ 403.419383][T10978] stack backtrace: [ 403.425263][T10978] CPU: 0 UID: 0 PID: 10978 Comm: syz.8.1635 Tainted: G L syzkaller #0 PREEMPT(full) [ 403.436192][T10978] Tainted: [L]=SOFTLOCKUP [ 403.440505][T10978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 403.450579][T10978] Call Trace: [ 403.453853][T10978] [ 403.456782][T10978] dump_stack_lvl+0xe8/0x150 [ 403.461465][T10978] print_circular_bug+0x2e2/0x300 [ 403.466489][T10978] check_noncircular+0x12f/0x150 [ 403.471507][T10978] __lock_acquire+0x15ff/0x2e50 [ 403.476444][T10978] ? __lock_acquire+0x6df/0x2e50 [ 403.481384][T10978] ? ksys_write+0x150/0x270 [ 403.485887][T10978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.491957][T10978] ? __lock_acquire+0x6df/0x2e50 [ 403.496892][T10978] lock_acquire+0x115/0x350 [ 403.501400][T10978] ? mnt_want_write+0x41/0x90 [ 403.506083][T10978] sb_start_write+0x4d/0x1d0 [ 403.510677][T10978] ? mnt_want_write+0x41/0x90 [ 403.515353][T10978] mnt_want_write+0x41/0x90 [ 403.519859][T10978] lookup_open+0x1e6/0x1a40 [ 403.524372][T10978] path_openat+0x677/0x1d60 [ 403.528883][T10978] do_file_open+0x23e/0x4a0 [ 403.533390][T10978] ? __pfx_do_file_open+0x10/0x10 [ 403.538423][T10978] ? do_getname_kernel+0x54/0x230 [ 403.543446][T10978] ? do_getname_kernel+0x97/0x230 [ 403.548482][T10978] ? __asan_memcpy+0x40/0x70 [ 403.553075][T10978] filp_open+0x16d/0x1d0 [ 403.557313][T10978] ? __pfx_filp_open+0x10/0x10 [ 403.562071][T10978] fsg_lun_open+0x6c/0xdf0 [ 403.566572][T10978] fsg_store_file+0x19e/0x400 [ 403.571259][T10978] ? __pfx_fsg_lun_opts_file_store+0x10/0x10 [ 403.577244][T10978] configfs_write_iter+0x337/0x430 [ 403.582361][T10978] vfs_write+0x612/0xba0 [ 403.586604][T10978] ? __pfx_vfs_write+0x10/0x10 [ 403.591383][T10978] ? __fget_files+0x2a/0x420 [ 403.595969][T10978] ksys_write+0x150/0x270 [ 403.600305][T10978] ? __pfx_ksys_write+0x10/0x10 [ 403.605159][T10978] do_syscall_64+0x166/0x520 [ 403.609744][T10978] ? trace_irq_disable+0x3b/0x140 [ 403.614769][T10978] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.620827][T10978] ? clear_bhb_loop+0x70/0xc0 [ 403.625496][T10978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.631407][T10978] RIP: 0033:0x7f323739e0d9 [ 403.635816][T10978] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.655502][T10978] RSP: 002b:00007f32355f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 403.663927][T10978] RAX: ffffffffffffffda RBX: 00007f3237625fa0 RCX: 00007f323739e0d9 [ 403.671890][T10978] RDX: 0000000000000002 RSI: 00002000000003c0 RDI: 0000000000000004 [ 403.679859][T10978] RBP: 00007f3237435024 R08: 0000000000000000 R09: 0000000000000000 [ 403.687826][T10978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.695792][T10978] R13: 00007f3237626038 R14: 00007f3237625fa0 R15: 00007ffeeea5bae8 [ 403.703767][T10978] [ 403.791165][T10978] mass_storage.0/lun.0: unable to open backing file: fi [ 403.803579][T10973] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.821916][ T9] usb 8-1: USB disconnect, device number 10