last executing test programs: 3m53.347684096s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="5c00000014006b05c84e21000ab16d6e23", 0x11}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00'}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000040)={0x20, 0x6, 0x9, {0x9, 0x8, "0d65d6e0141785"}}, &(0x7f0000000100)={0x0, 0x3, 0xa1, @string={0xa1, 0x3, "85cca9edc574a8aa402eceb2719d2adf424641755cdaacd39179db544e811c2e051df44e6226b1afad53cbda3b1ba352ff41e6388487c564a1b2f08d339a353f53277da3f7eaa95364340c16ca0ee96ca8c55713decafebd16ff4b34d48fcbbe0fb9fe5657b6aea0791c9d2a6d7cc9802b40cfeea20f282c507eff411b1a1702e3d54955aa974c0d4c2c2ce45611db493411326ddf1e290fe0c3d37ad02f9d"}}, &(0x7f0000000080)={0x0, 0x22, 0x6, {[@main=@item_012={0x0, 0x0, 0xc}, @local=@item_4={0x3, 0x2, 0x3, "2b46b7aa"}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0xfffe, 0x6, 0x1, {0x22, 0xea1}}}}, &(0x7f00000004c0)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000240)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x70}, &(0x7f0000000400)={0x20, 0x1, 0x6a, "5c1ee20ab34a55561dc4b6f61ed3523af366d30a6e7357e21d46173d797124e109bd4d51dd5c8a88f8018bec1c584c7cd4ea61e67b49afff5ca341ab0874cf706c394725aee3c8815a06861fab935549484610b00e2af154db8205ebf9e974c240003b9c296e9d5e577f"}, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x6}}) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, &(0x7f0000000580)={0x40, 0x3, 0x35, {0x35, 0xe, "af75082a807a7b8068a4b1d238b41ed20420a8562c91364a190deb81d6dbedf27e70b06890227f1afda5763127c15bfc31088a"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x200a}}, &(0x7f00000006c0)={0x0, 0x22, 0x17, {[@main=@item_012={0x0, 0x0, 0xb}, @global=@item_4={0x3, 0x1, 0x0, "12a46eef"}, @local=@item_4={0x3, 0x2, 0x2, "8e071910"}, @main=@item_4={0x3, 0x0, 0xa, "0235b52a"}, @main=@item_012={0x1, 0x0, 0x8, "ae"}, @global=@item_4={0x3, 0x1, 0x4, "b8105a01"}]}}, &(0x7f0000000700)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x2ad}}}}, &(0x7f0000000940)={0x2c, &(0x7f0000000780)={0x20, 0x17, 0x21, "9c5147c3ef7e5ceda20cc5665a79b887a10b456fa9576ef1fd728bb51d492d9d07"}, &(0x7f00000007c0)={0x0, 0xa, 0x1, 0x8}, &(0x7f0000000800)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000880)={0x20, 0x1, 0x75, "aad90dbea4b47b99e4e7b9ffb1e4b0d7c69932afda68da3e5de56651d147e3e19538fa4a598d54f18e861a6023a51a03ec5cddaae6439b0923fe74ff925bf41acd5d8f69a1c837cb2054b6aa8c0922fda719dd03edec2592f890d16cceb311882374a11b62f00b4204cae6ac1ce5156903b50afe4c"}, &(0x7f0000000900)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f00000000c0)=ANY=[@ANYBLOB="400f01"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000002a80)={0x44, &(0x7f0000000280)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_procfs(0x0, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000000)={0x18, 0x7a, 0x601, 0x4000000, 0x25dfdbfe, "", [@typed={0x7, 0x3ffc, 0x0, 0x0, @str='\x00\x00\x00'}]}, 0x18}], 0x1}, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2b, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="2007ff6e9032943ec4b25eb1ee0000"], 0x0, 0x0, 0x0, 0x0}) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) 3m50.144227765s ago: executing program 2 (id=19): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_clone(0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0) getpriority(0x1, r1) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x4000) r2 = socket$rxrpc(0x21, 0x2, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @broadcast}) recvmmsg(r2, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xc}, {{0x0, 0x0, 0x0}, 0x6f92}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000d40)=""/4106, 0x100a}, {&(0x7f0000000440)=""/242, 0xf2}, {&(0x7f0000001fc0)=""/224, 0xe0}, {&(0x7f0000000100)=""/195, 0xc3}], 0x4}, 0x4}], 0x4, 0x10120, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x28, r4, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) 3m49.870265888s ago: executing program 2 (id=20): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000000140)) r2 = semget$private(0x0, 0x2, 0x807) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r3) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)={0x44, r4, 0x1, 0x70bd67, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004084}, 0x20008800) semctl$SETVAL(r2, 0x4, 0x10, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r5], 0xc4}}, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000340)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r6, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x0, &(0x7f00000001c0)) getitimer(0x2, &(0x7f0000000000)) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f0000000040)={0xc, 0x0, 0x0}) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg(r10, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=ANY=[], 0x4e8}}], 0x1, 0x44095) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f00000002c0)={0x18, 0x7ffffffe, r8, r9, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000280)}) 3m49.65743749s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x200000000000000, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 3m49.551871565s ago: executing program 2 (id=24): clock_getres(0xfffffffffffffffb, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) 3m34.177998235s ago: executing program 32 (id=24): clock_getres(0xfffffffffffffffb, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="8d", 0x1, 0x40, 0x0, 0x0) 2.928808145s ago: executing program 0 (id=1473): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x28200, 0x0) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$FUSE(r1, &(0x7f0000003440)={0x2020}, 0x2020) mmap(&(0x7f000078a000/0x11000)=nil, 0x11000, 0x5a051feb1f984a1d, 0x202812, r0, 0x7dfff000) 2.837463162s ago: executing program 0 (id=1474): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r2 = socket(0x1e, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003440)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x6a}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x10f, 0x1, 0x0, &(0x7f0000000300)) ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, &(0x7f0000001180)=0x40) mmap(&(0x7f0000906000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0xe6ecd000) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) r4 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r4, 0x45809000) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000000c0)={0x7fff, 0x7, 0xbe, 0x3}) 2.782085373s ago: executing program 0 (id=1476): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xa10902, 0xf4c, '\x00', @p_u16=0x0}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102389, 0x32) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) ioctl$TCXONC(r2, 0x540a, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = openat$cgroup_devices(r3, 0x0, 0x2, 0x0) write$cgroup_devices(r4, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000100)={0x0, 'ipvlan1\x00'}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0) setreuid(0xee01, 0x0) syz_clone(0x1b4a100, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x2004c000) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x3, 0x801, 0x0, &(0x7f0000000040), 0xfffffffc) mknod$loop(0x0, 0xfff, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r6, @ANYRES32=r3], 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x40000) mount(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2001c08, 0x0) execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2.650527562s ago: executing program 0 (id=1477): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)={0x34, r1, 0x639, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xc805) (async, rerun: 64) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 64) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x7) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$PTP_EXTTS_REQUEST2(r4, 0x40103d0b, &(0x7f0000000280)={0xc, 0x1}) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000140)=@fragment={0xb6, 0x0, 0x92, 0x0, 0x0, 0x1b, 0x65}, 0x8) (async) sendto$inet6(r5, 0x0, 0x0, 0x400c0, &(0x7f00000001c0)={0xa, 0xcaa1, 0x0, @local, 0xd}, 0x1c) (async) ioctl$TCSETS(r3, 0x8925, &(0x7f00000001c0)={0xd729, 0x2, 0x8, 0x7, 0x5, "f5103746453df8814a84c60a2e83314ef0bfb6"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x2000) 2.458977372s ago: executing program 1 (id=1479): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0xe) write$binfmt_script(r1, &(0x7f0000000340)={'#! ', './cgroup'}, 0xc) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x200, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x2}, {0xc, 0x8f, 0x6}, {0xc, 0x90, 0x7}}]}, 0x50}}, 0xc000) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005a000d"], 0x1c}], 0x1}, 0x0) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x9, 0x23d9aa02992f3eff, 0x8, 0xc, 0x8, 0xfffffffc, 0x0, 0x0, 0x10, 0x9}}, 0x50) 2.124021473s ago: executing program 1 (id=1482): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000380)='/dev/comedi4\x00', 0x8000, 0x0) r1 = socket(0x11, 0xa, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bind$can_raw(r1, &(0x7f0000000000), 0x10) getsockname$packet(r1, 0x0, &(0x7f0000000180)) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x40, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @u32=0xfffffffe}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x14, 0x7, 0x0, 0x0, @ipv6=@loopback={0x8000000000000}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r3 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0xa02, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x12, r3, 0x45809000) ioctl$COMEDI_BUFCONFIG(r0, 0x8020640d, &(0x7f00000000c0)={0x7fff, 0x7, 0xbe, 0x3}) 1.953339936s ago: executing program 1 (id=1484): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='ip6_vti0\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28000000000000000000000007000000071714"], 0x28}}], 0x1, 0x40) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) creat(&(0x7f0000000300)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x0, "e0ffff13000000000000000000000000000000100000000000002000", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0383e04, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_N2(r7, 0x103, 0x3, &(0x7f0000000100)=0x96ee, 0x4) io_setup(0x800, &(0x7f0000000040)=0x0) io_submit(r8, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r6, 0x0}]) 1.836094592s ago: executing program 0 (id=1485): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000100001000000000000ffffffec00000a5c000000180a0500000000000000000002000000300003802cf5038014000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a300000000014000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, 0x0, 0x1, {0x1, 0xf, 0x6}}, 0x18) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r0, &(0x7f0000005b00)={0x6, 0x118, 0xfa00, {{0x0, 0x0, "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", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, r4}}, 0x120) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$FIOCLEX(r5, 0x5451) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x8, 0x0, 0x0, 0x80, 0x4e, 0x15c2, 0x5886, 0x801, 0x0, 0x3, 'syz0\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r8 = getpgrp(0x0) r9 = syz_pidfd_open(r8, 0x0) r10 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f00000000c0)={0x4}) r11 = syz_clone(0x20002000, 0x0, 0x0, 0x0, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r8, r11, 0x7, r9, &(0x7f0000000180)={r10, r9}) ioctl$sock_bt_hidp_HIDPCONNDEL(r7, 0x400448c9, &(0x7f0000000000)={@none, 0x80000000}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x81b21000) 1.812837081s ago: executing program 1 (id=1486): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x36, [0x8000, 0xc95a, 0xf, 0x8, 0x8000080, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x1, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x8, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x400, 0x5, 0x8, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x100000, 0x8, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x932d, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x4, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x4002, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffff7d, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x8, 0x5, 0x40008, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0x80000000, 0x2, 0x3, 0x0, 0x12b, 0x4, 0x0, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0xb, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0x800a620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x1a, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x10, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd3, 0x200, 0xb, 0xfff]}, 0x45c) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 1.634861753s ago: executing program 0 (id=1487): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x9, '.\x00'}}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f00000010c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="00000100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x15, 0x49, "466f9c59f19c4811c16e914d8e8f333ea9adcdabca2cd0ecc7b2f694c8ee72dd7e426d9180174fa281cfa3ad2fa688f949faf62cc528763931b34b36ed5a1bf7968eddfb655e9ca04d"}, 0x0, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x2}, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x83, 0x1, "80"}, &(0x7f0000000440)={0x20, 0x84, 0x1, 'U'}, &(0x7f0000000480)={0x20, 0x85, 0x3, "e6ceee"}}) 1.631573347s ago: executing program 4 (id=1488): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f000000c300)=ANY=[], 0x58}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffc452f9b9e496ec852e8a9f889f2407ffffffffff0802113ec103e22d75bd14c026ba01014fb30000f4"], 0x6f4}}, 0x0) 1.50006966s ago: executing program 4 (id=1489): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, &(0x7f0000001240)={0xfe, "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"}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='vxfs\x00', 0x200000, 0x0) 1.45972069s ago: executing program 4 (id=1490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r1, 0x3b8b, &(0x7f0000000300)={0x10}) fallocate(r0, 0x0, 0x84f, 0x10fff9) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) read$char_usb(r0, &(0x7f00000002c0)=""/173, 0xad) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) userfaultfd(0x801) syz_usb_connect(0x2, 0x2d, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0)={0x27, 0x0, 0x0, 0x2, 0x0, 0x49, "c46e9fd1a84b7fa0bf2cca6beb9363a680b652a86bcf56a1b9ca5386103a5ccbe47b7b9aa6d8d701a3ba00000000b97800001022f987617c318500", 0xfffffffffffffffb}, 0x60) getsockopt$inet_buf(r5, 0x118, 0x2f, 0x0, &(0x7f00000003c0)) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xf8000000}, 0x1c) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0xc1c0, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) r7 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = eventfd(0x3) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000000)={0x7c, 0x3000, 0x0, r9}) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000100)={0xb03, 0xeeee8000, 0x4, r9, 0x5}) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f00000005c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r6, 0x0, 0x0, 0x800) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000200)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="e4000000010301040000000000000000030000020c0013800600014000000000080003400000000004000a00e49ca1c11bc4bf5749a266e2f5165168bdb5cc64683551f595d5002d3d55e9e4562aaafc2aaadeecbc4bddcd3b7d4cc25496a74ab316f53770b223d2629537997c2991c13c0f22fd58d0d860095b888568000f8050000a8004000280400002800c000280050001003a00000006000340000000001400018008000100ac1414aa08000200ac1e000114000180080001007f00000108000200e000000108000140000000010b000600616d616e646100000800044000000009"], 0xe4}, 0x1, 0x0, 0x0, 0x8800}, 0x4040000) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead", 0x51}], 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="28000000000000001701000002000000110000008c340d0c4847302229268fe691f60be2223b0d91"], 0x28}], 0x1, 0x40800) 995.317909ms ago: executing program 3 (id=1493): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870f500090582020002"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="6b0ee0b3d41b1b"]) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x141c, &(0x7f00000000c0)={[{0xf3, 0x4e00, "3b01f9a9e2901a7d5f78b1b1e5b4ffaf71938ff91cabdd188027f3800571e88aad7294644f1d3210e82a338226707508087f5f3892dbe6654d73e71da619e6fa727e97f41228198c93d29099cb1039a6e556262b2010fb135c4a0cf52a539872b2d806c48f7ce82aee4b65e9fb8845e03bf9ba6014d8946606a2c2fd0ae014d35cc738be7a563e897cf74b6542505a33a7ce12c3001e27cb822ab6a4942d1b79ffc94945e929e5aca53af7f6b4024b3d10bdaa3aa91190dc1383cdb419ababbe020ca73716211c45412a310e7b159658a6a0540b2bf98d6a6ad789fdfa15b03f392bcb92af48afc7e662f1762b5366691a7217"}, {0x89, 0x4e00, "264ce7a2e43a1e8627116971f038fd550f1822332e375efbc4aff3e842807ee647e426ee1fdeedaf7576c16e0a665a2dcb1945e933de430d7c3bcdded8580b9366cd1f7c02ebf650cb326ecc812cc68835d6fdf969970c060a6d00d8133caa002538e2220cb0905e26b0b485beb3a7e5f708b29a1f4d65a9b7e9c2d7719c38f2301cbd78af8d9f0017"}, {0x84, 0x4e00, "8f090f8b207aaf74dbd7cb531dcd5a24e3e5876caf58e1932886ffc1fe2a9d6f2c95f07071748e99ee218a301c6dda0915a7d3e0d90af3f2a4504bc159a57c9da11554a009cb393ae747e77a863760ac44c3afa60581eb9e77833c7594fe313496da1d432ef65d79af69b0dca587e529d266524cd4998223edcfc73d216f42dd83669b47"}, {0x94, 0x4e00, "edfd1ea334a7345e80b80aacb56b1154464e3bcbd578a4d4b4ed35de862714308eecebb7d5290b3141aece8be547e0cdc4db2edc22af3f5f39e76bcc1f813231364e320ae469b6025a29a6e974701d87d351eeebb2b2e104fda901d1bc1e3a1ba3975ad3bd96445dd6224815b7d052c30f89da8da052d7914196346cd6ec55254104e8ab31b30f751f4603ee41a16706e0fce8c2"}, {0x1000, 0x4e00, "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"}, {0xdd, 0x4e00, "40f3647db821bc9e8baa7b55491b6981d41b96c9800909bbcb404a7be139edca07f5aa14bb3f969d5a65dfd30e7af39b104b736a624ccc5de005344cbdb0cbe2917d63df345c3621c8a7eb39cac94b343eac27f5c406aec4b1d7f931f3f96b4f2a840fbbd072cb04cb86983d1247199e1e4e85e41572b4a9b26e92ca7e16f108abba42be6bdcd2bbaf5008da51354e299afab703a4492ca7ee7cbe47498162162f4114e3ad07a3cffd25ca8561b28863d57869363441808981476c6d4e0e23aef674dd75e5b18affcd4ec0cbcd4e56c29adb964fc1a066e2fdbff091ac"}, {0x85, 0x4e00, "43e9b40f9296d9ed8095bc29233b52cee84d1c2e5984b7b17641bdf9f601318ed921bcc126b8900e830b5b322d7190d533af880cd200cf4eab55768ef50b8611581efd7365fc829314c60aa2cd9616ca4baec1c5dc4d0b15ad9949a788d7042a9c5fb1b4e0800d10dbcdd01f7c71ee1986481c76c6be5fe4da45c5f3160e4f175106199569"}]}) 868.261198ms ago: executing program 1 (id=1494): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x28) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$KVM_GET_SUPPORTED_CPUID(r2, 0xc008ae05, &(0x7f0000000400)={0x5, 0x0, [{0xc0000001, 0xffff7fff, 0x5, 0xf54, 0x5, 0x40, 0x1}, {0x80000008, 0x1, 0x5, 0xffff, 0x5, 0x0, 0x4303}, {0x80000001, 0x9, 0x2, 0xffff, 0x9, 0x400, 0xd9}, {0xc0000000, 0x7, 0x0, 0x8, 0x7, 0x0, 0xa}, {0x7, 0xa4e, 0x2, 0x4, 0x8, 0x8, 0x3d6}]}) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 785.08206ms ago: executing program 4 (id=1495): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8) execveat(r0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000380)={[&(0x7f0000000240)='&/\x00', &(0x7f0000000280)='#,4\x00', &(0x7f00000002c0)='(\x85\'}&\x00', &(0x7f0000000300)='-$\x00&}\x00']}, &(0x7f0000000b00)={[&(0x7f0000000880)='/dev/rnullb0\x00', &(0x7f00000008c0)='\'\':\x00', &(0x7f0000000900)='syz1\x00', &(0x7f0000000940)='hugetlbfs\x00', &(0x7f0000000980)='\x81%]**$*\x00', &(0x7f00000009c0)='mountinfo\x00', &(0x7f0000000a00)='+\xc3\x00', &(0x7f0000000a40)='@![:-[\x90\\-+\x00', &(0x7f0000000a80)='$-\x00', &(0x7f0000000ac0)='fou\x00']}, 0x1000) (async) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000001180)="6cd84ee85d5b38e5d35e2c1b4134f0119cb0d7e984db8598f0e8bae85264323187558085045092f64997828eac51a3c51e6a454083a2f47e4c45f53ed6849903ebdecadc7250180e43407e3c8d2a111876f1806479eaf69adcae70a70af0266eea1f751821c6714f9cfc5c1c65e454db6c732e51be80e840e73fe3dbbec656e69c13e8a6df33ed8224ef869d82f5c46b60f5ef4e7bf7030e1d57cbd76c68eed2fd5ae81a0371071f033830e4dac38809bff5a93e2f6ee1afdc987d5fbf3c49b58aca3bba4c811558563cd25e80af76e10925f0698e0f97dcb96dee7a4e93b2d50ece37ee9f2ea356cc60758d5ead2aef85c41cb7fac4f34fbaff4f8bac6b2f910159c5a0840fc2c2a0066de1e81c785e4d0fe09b6641faa7c47c93ccb8263a948a27076eacdcd1a8f4478f34285b7803529c4d388a36a45044fac3f18c7064065db10caf6f429b78de15e72a3251dde63339d4a519c97c3f90f76d8d51edd72e62bcb7e2e77c606f031104479e310c49d7c2223f728c60a942b5d7bc69baa03af908cb018965b866067b39af4eb7221aefad54c61c08c093489954d01922a4afb9724fdcbf178ffd260bae2ec9c7824179ee4633481e6e7c61514966160f6663d63dd0d8736ae9defd80ef4d4f68625fb27c263bcb96a15ece750c69e938a3bc7ec4d4bae98bb79819bff89cc208aae1ec62b4fa653252c67e581c18e491dd79f6d699fc0ce9137e77ab8987ab35c7abc3a913c5de2153884560deb12e5628d4274bb62270093d49005ab438f79671eae39d0e20126f8b0da217dba7cdf9dc348a3e52197186da1ebbb9a1a29976bb78ef00ea58c2ffd01b135d6172a8c87c49be8122320151af4f9dbc12afc142ff73de39a63cbd6d155157bef956abd062949e574727900483aa41c543840d0d7fbfa53f494ea37ee405abfcba0f33e7ba0ef9ba89c616341603d4c7d6e1fa2a3b1aa13ad7c9c7b6b16cab97b2b91eef366c61ee0767faba6d0b78bd6daf4b6aebd2d6048f8f595babd01de05cad14a64fff729a23066fb918c54d54128e5eada304b16e134fb2ed99d4efe4966404b0dba83bd57cb76c6d5156ffaf3df7db6d9a9c6ea014c96aed99f016f50b49c4f5ea5276ff635f46f37aaac517be5e61a43831f918b5443208e5f6b6eed403cba96b7fb91a8cad4fb6c5586e18a53954f7e962f8a7f64dde64d6951e0b454e0dc808bdd1b5a16f6785c27021803e4a8f2127ca589e1d8974fcf973cc3189cad5fcd78a9be6a752198e160998e6f221b123d4b530ec90d15e3554c7a404b6cff47213dc71b1eeb8903ff6c21b9326ec6111cdee47ce60a38f9374a7fa415428ced2599dd7581cbf452725b57eafde50ea2b380e2f842e79f45b63b0c0507ad76aeca5e4daa10518f511c2b14c5790aa6436c03eacc6613f0e2f4c615ea2242cb1025c5d77004bd26642eac0df9e135f2c86f254978209c5d6dae9b3a74916530741d071da3f79883454cb967105425ab127549dcf9d3a2ff6e752491fd181a7960561b6f6cdd39fd0e9a1feb6ae8a970b768b57e16d15f2dfa17d44b08b3089cb3271df3992a30236f2e34d41a892f083d574cc66e57a7f91bb0e07d0ff326ca1b7f54f150fc18e92b245f9cd816a806147e6ba27a907bac1a49cb921748dbf1b8e575ef3820602583954108146a74f46b0eb03dd5b0ab1b8605a091f7d05cfb5de5b8b70690162f43fe312640df0166bcd4538d67d94d92c5b787d74770689214dbfd76577abbf7e7705a57504d488e4eaac4a2324efa996d9176dad0666c4921f45baf8368c78742532202934831f57ec1dfd974fc9128918ae96579257324f63f353439eea037f44e6617114f862bef214a77569ced2e3df25e977cdb257000026c638f2a4a9e80fada09d3260df553a091225091d858c6abe90e34c138f47e71ec72d5e25815f31f77cf4ee820bf665cfe0804e5b0ef0d0e2f9434cf157e56e27eacbca45c1730c65d31f8f5d9311d9e9ef67cb54f49778a9fce7a284362accc7a0d5b456567086fc0ad1c6aee2b704f14f05e9d0e4672fcf721bc694b5174f6ebdb97ecb72367ad17b8a5ec795f0dca8b42a8ef3765eedb2af44edd8c6124257e11e7ecfad68436411636699b7acf603efc4f6490af4d23faaaa2bd4c9faf8c61dfc12dc80e88d9c3201d4f2c8d65f0e8c8859d91c0be9cc2d627d5d52f1b089f456b30e0f3aaece2c4536e3415d877122d77117de5ee3f5a6b1ebeb624e64d6ee487b82c4e4a59171400878178ec13fd38c9932b3d935700b42c25e11e2b198811370dc84c7772a9d2ff7ac40153a3bb5493623fb5c48e49ec50b42894dc7d6a91ff9d68f62bb6753ff86a6a37f390bf68805fa3ba9c65585a4a037f4997290dfbd3a6b24de38775faa723990acb524a90deaa636f7eecbad960150791428e42be2a8ec06d64a7c101aaeb7188a8c1cd5a233fe5d2d4582a27abdca694ce62cbec3ec1c8528a3e78031ae6e390df9fc7f8a2638905205fc8685f126b4460454f672caf9a24448e3c0f0517b1b79e5fba47906c395e14296bcb006a4a7a631eb7ef68abbcd5ceefc303a5293c82037e86071ea8d3b6bb22b42a44cbf048f1c5fd79a8330955564886bab8673d04cfaaffa133825199dfc133f77a7cc0a36d37b38091912a7d80c569940c6e2b5feffaf2fd0dd82659c760d822f8629fba3098d7e533339a34042a955b3be6d007c616e4c13eeccba6f87a5de21b2dda7a3a6ff43e82cafe34a5666f3b705808c2fa285b5e8dac0f78e9cc95bacbe018178ca7c5107326b0567ef6abf9b180d47dfe30864793db6dcd7b944c05d0c059c86b176e7a0e7f5726a9318a131d850dc4335d5938917e1b4fed1a0ce22b6e49905d599d133e17da9174f0fcd4d34d4ddb938545ae042af60d113bbfe878407936be8a2b4224478fa0fb2be211a789c95844ee5160de9001abb0e9e401e1218a60a781807de4198f67ecfc38fa93e046cfb920c23cde38d2568950e3396804f6ec81317ab0cefb90ea63a2f14146a6fa36a45600491e3361e90a539b8179e18d36688f405e3deedbc146ba353b812c88683152b64f06b11988635e95b419f21bc655250b7c896b2b06000f9e6e699c96b68e3798cdd1bdf8919bb62a9b61616633ec7249925c45e886fb93af85258fe16bbb380c6872b2ec84d4c8d30cadda25b0eb58d285e50cd19983e0d434604af85d692a8feed9a229e38c019bd4269cdea4fd31593cef43cbfec75304a405c46904e2a7ea7bbda177597e2fca6ce9dade9069d633603cc4986ab4e23d5ac3e9d911f87bd45e820a2a63f915539dee5e1e87bb00ca9032a6f28bea28ecfee8c4c26a007f7a32d17d2ebfb7a564981cff34a704f887feec685d16d4b56fe85129bc953c3b791b2d0849a513df6df1bb81215d456c4578e4db1920c8cd6740bab66380b4ee866f07119586f3fad489f781757a2e2ecc5e8210167fc0fa095e1b56f6eb7144d63f0eeaf50ac7340718db3a3003fe31b83a6efc2b8956f55a36f99cc1562edf6f477a82afbfe7c3b697e7b54a21f4832d3f9c1ce6e0af7a241ee38de1fbc7c02a1172a0b3da13d1c2ef623ab522bd6d5902b9d7d6df49eb3d1c2c2f5fc8dd589fd6d8eecca5cb5d0dc0942ddbf5bcb7b86da27df7e6402a298bfdce48dcc0f01dd74baa8203fef0e81e1b2db2343966f5d2cdd920c3a583386122fc1241e514496c1e4de6df95e71b186d22552fb3ad92b84aac1ea3a0b47a37e55adac82c5aa68c19d2756e5284add838ca507b1f678dad52bcb944d0f5f1057b74d9664ba6cd1408e676da1abcdf486235271b02355c7a78967972833cf5686a3e412e9af05baa9764669fc0a42371530233782cfc05953a9fc568adb8854dbfd560e469fe7ad67dc0e535dce286c41886c339d57f3dad264653e66a2cff47c4602d8b74bad233f0b5955a4f453e3e00ff444710d34ca37cadb6b3d9a2303c7bf8f1336a563b3ac0a26972857486ae7d92533c3b16eafc2cb175b8496ae223508589872db9203b209ef2dcaf2326d766137f2435a38602e41d3405e4c3254859037b1b5eb945cf84f7ccacc531675efdf1911f833e4138bfda4cae329a8b20dcd63747c7ae195059b1f59cd36b116402c3eb349e6fbae350b24d2a408fef61c201dc48e6f3c60fa78d20b26a3493df538a0c94770636ffbb0b6250f2f7bbb80d34af278a8c783df7a7463117e7d512579ee5562722ef4812e48b3b55209c749b1fa77fb3960722ad8444d9480bba30ced122b640af676fa186f1be033423318a7c1788185bde34cebbdd47e13eb6e6c949ea4bba411964440735664448934984f7dac58bf7024b8e71b88df7e0cb1b76bc0cef7522809a36ec2bc067dfab803b4ee8821baa5e557edc716d8bf002c9e8aab78e1a5af8bc58078fa256d3321a55481f36f45fb508a397e757d7b7b287830e362888b7cbff976bc70698024d838e5dba6e6813152a178c80180b306b2f4eb8cbe40f800bcbce51a845b6fcf70f225b90bc34bc36f68dd2b64c1b389e0a9f744615bfdcd683e8d850c635a295b6db75dbf1b8b072454d91eb08381e1018ea625462d52d44b2ea064ae6f5922fba6d326711a0ddbf091a885", 0xcd3}], 0x1) r2 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async, rerun: 64) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x22052, r2, 0x93774000) syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}, 0xd5c}], 0x1, 0x2302, 0x0) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x6, 0x4, 0x8b, 0xfffa}, 0x1d, [0x7ffe, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x40, 0x39cc191a, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0xa6, 0x3, 0x0, 0x5, 0x4, 0x8, 0x4, 0x3c5b, 0x1, 0x3, 0x9, 0x1, 0x1f461e2c, 0x7, 0xe660, 0x4, 0x7, 0x104, 0x7fff, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x71, 0xfffffff8, 0x7, 0x0, 0x0, 0xd, 0x3e, 0x8f, 0x6, 0x10000006, 0x0, 0x5, 0x4, 0x8, 0x0, 0x80, 0x4, 0x5, 0x200006, 0x8, 0x4, 0x1, 0x40], [0xfffffff7, 0xffff, 0x134, 0x7ffe, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x6c9, 0x9, 0x6, 0x3, 0x1, 0x7, 0x5, 0x0, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x4, 0x8000, 0x4009, 0x400, 0x5, 0x800, 0x5, 0xff, 0x5, 0x5, 0x5f31, 0x4, 0x0, 0x2, 0x2, 0x10c, 0x4, 0x9, 0x0, 0x800, 0x6, 0xb, 0x8000, 0x1, 0xfe000000, 0xff7f, 0x2, 0x7f, 0x9, 0x2, 0xffffffff, 0x9, 0x1, 0x7, 0x7, 0x9, 0x48c9368c, 0x42, 0x2], [0x400, 0x4, 0x0, 0x5, 0xfffffefe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x6, 0x8, 0x83, 0x80000003, 0x9, 0x3e7, 0x9, 0x5, 0x2, 0x2, 0x800f38, 0x5, 0x4, 0x6d01, 0x5, 0x38, 0x800003, 0x101, 0x8, 0xf, 0xd, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0x53cf697b, 0x5, 0x6, 0xac8, 0xbf, 0xfffffffe, 0x3, 0x7ff, 0x7feffff9, 0x1, 0x1, 0xffff, 0x0, 0x1a, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0x65], [0x9, 0xbb31, 0x1, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x20001f7, 0x2, 0xf58, 0x5, 0x80000001, 0x101, 0x10000, 0x6, 0x8, 0x8, 0x200a620, 0x4, 0x5, 0x1, 0x2, 0x800014c, 0x60a7, 0xe, 0x6, 0x2, 0x80000000, 0x5, 0x8, 0xc8, 0xee1, 0xfffff000, 0xffff, 0x2, 0x7f, 0x100, 0x9602, 0x7, 0x2, 0x4, 0x6, 0x1, 0x10080, 0x5, 0x8, 0x30b1d693, 0xa1f, 0x8, 0x7ff, 0x2, 0x6c1b, 0x0, 0x4, 0x100005, 0xa, 0x1, 0x40200, 0xffbf2441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090200000000000000000100000008000600ac1414aa08000b0077daa387"], 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x0, 'vxcan1\x00', {0x4}}) (async) setresgid(0x0, 0xee01, 0xffffffffffffffff) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r6, &(0x7f0000003480)={0x2020}, 0x2020) writev(r2, 0x0, 0x0) 708.201763ms ago: executing program 4 (id=1496): r0 = socket$inet6(0xa, 0x400000000001, 0x9) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x3c, r5, 0x1, 0x3, 0x0, {0x33}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x20000040) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r3, &(0x7f0000001400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xf8, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x4040) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000ac0)={'wpan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r1) sendmsg$IEEE802154_LLSEC_ADD_DEV(r6, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r8, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x809}, 0x44845) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000140)={0x28, r2, 0x1, 0x1070bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x60d538c9b6228b46}, 0x20008805) r9 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r9, &(0x7f00000002c0)=""/4096, 0x1000) ioctl$SNDCTL_DSP_GETISPACE(r9, 0x8010500d, &(0x7f00000014c0)) sendto$inet6(r0, 0x0, 0x0, 0x20048009, &(0x7f00000001c0)={0xa, 0x4e1f, 0xc0000, @private1, 0x58d9}, 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x200}) 443.333664ms ago: executing program 3 (id=1497): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000083c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x49e8648f) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x1e0) getdents64(r5, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)={0xb0, 0x0, 0x0, [{{0x200000000004, 0x0, 0x0, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0xc000, 0x0, 0x0, 0x0, 0x2000}}, {0x0, 0x0, 0x1, 0x0, '\x00'}}]}, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r7 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) ioctl$CEC_S_MODE(r7, 0x40046109, &(0x7f00000002c0)=0xf2) newfstatat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) capset(&(0x7f0000000080)={0x20080522}, &(0x7f00000000c0)={0x200000, 0x200000, 0x7}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x7800, 0x700, 0xffffff72, 0x5, {{0x5, 0x4, 0x1, 0x3, 0x14, 0x67, 0x0, 0x40, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x3a}}}}}) r10 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f00000008c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000780)=0xe8) getgroups(0x7, &(0x7f00000007c0)=[r3, r3, r3, r3, r3, r3, r3]) newfstatat(0xffffffffffffff9c, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000001240)={&(0x7f0000000080)={0x50, 0xfffffffffffffffe, 0x1, {0x7, 0x2b, 0x5, 0x10082, 0x3, 0xe11d, 0x101, 0x10001, 0x0, 0x0, 0x20, 0x8}}, &(0x7f0000000000)={0x18, 0x0, 0x2, {0x7}}, &(0x7f0000000140)={0x18, 0x0, 0x4, {0x1ff}}, &(0x7f0000000240)={0x18, 0x0, 0x8001, {0x4}}, &(0x7f0000000280)={0x18, 0x0, 0xd, {0x9}}, &(0x7f00000002c0)={0x28, 0x0, 0x7, {{0x80000000000, 0x3, 0x2, r4}}}, &(0x7f0000000300)={0x60, 0x0, 0xfffffffffffffffa, {{0x9, 0x9, 0x2, 0x5, 0xffffffffffffffff, 0x2, 0x1000, 0xe3d}}}, &(0x7f0000000380)={0x18, 0x0, 0x2, {0x54}}, &(0x7f00000003c0)={0x14, 0x0, 0x8, {',\xd5$\x00'}}, &(0x7f0000000400)={0x20, 0xffffffffffffffda, 0x1, {0x0, 0x1}}, &(0x7f00000004c0)={0x78, 0x0, 0xfffffffffffff27b, {0x4, 0x1, 0x0, {0x1, 0x8, 0x7, 0x8, 0x7f, 0x1, 0x1, 0x3f815ad5, 0x10001, 0x8000, 0x1, r2, r6, 0x5, 0x3}}}, &(0x7f0000000600)={0x90, 0xfffffffffffffffe, 0x1, {0x5, 0x3, 0x3c, 0x115, 0x1, 0x117, {0x4, 0x5, 0x7, 0x4, 0x4, 0x5, 0x5, 0xb23, 0x7, 0xa000, 0xf, r2, r8, 0x0, 0x80000001}}}, &(0x7f00000006c0)={0xb0, 0x0, 0x0, [{0x4, 0x5, 0x7, 0x0, 'user_id'}, {0x3, 0xffff, 0x3, 0x0, '%{/'}, {0x4, 0x2, 0x2, 0xffff19d5, '.{'}, {0x0, 0x40, 0x3, 0xc1, '%)^'}, {0x0, 0x6, 0x5, 0xfffffffe, 'fuse\x00'}]}, &(0x7f0000000a80)={0x470, 0x0, 0x9, [{{0x4, 0x0, 0x5, 0x0, 0xedf, 0x5, {0x1, 0x53, 0xfa2c, 0x0, 0x3, 0x4, 0x1, 0xab6, 0x67c, 0x4000, 0x692c, r10, r3, 0x96}}, {0x2, 0x2, 0x8, 0xfff, 'group_id'}}, {{0x3, 0x3, 0x28000000000000, 0x6, 0x5, 0x3, {0x5, 0x7b9, 0x6, 0x3, 0x9, 0x0, 0x5, 0xc8d4, 0x7, 0x4000, 0x3, r2, r3, 0x10, 0xfffffff8}}, {0x6, 0x6, 0xa, 0xfffffffb, '/dev/fuse\x00'}}, {{0x1, 0x0, 0x9, 0x7680, 0x8, 0x4, {0x1, 0xb9b, 0xd, 0x5, 0x200, 0xffffffffffffffff, 0x0, 0x1ff, 0x0, 0x4000, 0xffff, r2, r3, 0x1, 0x117}}, {0x0, 0x9, 0x8, 0x401, 'group_id'}}, {{0x1, 0x0, 0x6, 0x5d65, 0x5, 0x22e, {0x3, 0x0, 0x5, 0xfc6, 0xf, 0xb170, 0x5, 0x9, 0x7, 0x2000, 0x400, r11, r12, 0x7, 0x1}}, {0x5, 0x52f8529f, 0x5, 0x9, './&-['}}, {{0x1, 0x3, 0x7, 0x3, 0x4, 0xdc5a, {0x6, 0x8, 0x1, 0x382, 0x1, 0x11, 0x8001, 0x80000000, 0xfffffff8, 0x4000, 0x5, r2, r3, 0x2, 0x480c}}, {0x4, 0x2, 0x8, 0x6, 'group_id'}}, {{0x0, 0x2, 0x7, 0x1, 0x0, 0x5, {0x0, 0x8, 0x5, 0x3, 0xfff, 0x8, 0x8, 0x1, 0x80, 0xa000, 0x1, r13, r3, 0xffff8001, 0x8}}, {0x5, 0x8, 0x0, 0x3}}, {{0x2, 0x3, 0x3, 0x2, 0x6, 0x2, {0x2, 0x4, 0x100, 0xfff, 0x0, 0xf, 0x9, 0x8, 0x5, 0xc000, 0x8, r2, 0xffffffffffffffff, 0xffffffff, 0x5}}, {0x6, 0x464, 0x1, 0xfffffffe, '\x00'}}]}, &(0x7f0000000f00)={0xa0, 0x0, 0x8000000000000000, {{0x3, 0x3, 0xd, 0x1, 0x8, 0x1ff, {0x6, 0x3, 0x7ff, 0x400, 0xfffffffffffffffc, 0xa6c, 0x137b8a56, 0x3, 0x100, 0xc000, 0x1, 0x0, r3, 0x7, 0x7f}}}}, &(0x7f0000000fc0)={0x20, 0xfffffffffffffffe, 0xd, {0xad0a, 0x0, 0x9, 0x1}}, &(0x7f0000001100)={0x130, 0xfffffffffffffffe, 0x5, {0x7, 0x6, 0x0, '\x00', {0x10, 0x3ff, 0x8, 0x1, r2, r3, 0xa000, '\x00', 0x3720, 0x1, 0xf, 0x26, {0xf452, 0xff}, {0x3, 0xffff1b1e}, {0x10, 0x4}, {0x7, 0xe}, 0x101, 0x5, 0x1, 0x5}}}}) 317.454615ms ago: executing program 3 (id=1498): r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000001140), 0x66002, 0x0) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x3ff, 0x2, 0x7b, 0x4}, {0x1, 0x4, 0x8, 0x44f}, {0x4, 0x0, 0x4, 0x10001}, {0x7a, 0x0, 0x4, 0x8}]}) (async) r1 = fsopen(&(0x7f00000002c0)='iso9660\x00', 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r3, 0x10, &(0x7f0000000040)={0xad}) (async) r5 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc2}, &(0x7f00000002c0)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd780bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138", 0x18}, 0x48, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0x0, r5) (async) ioctl$COMEDI_CMDTEST(r2, 0x8050640a, &(0x7f00000001c0)={0x2, 0x8, 0x10, 0x9, 0xffffffda, 0xc, 0x1, 0x2, 0x113, 0x7, 0x20, 0x0, &(0x7f0000000080)=[0x1, 0x7, 0x4], 0x3, &(0x7f00000000c0)="fcb860e56436a1d81e35c35c37051312eed08e7c8287979b14528e7b5bd9ded7cbdaea357ffde06f59bff238715b355019f24aab9bd55e38b644ff15677d73cc86a82e9d7fd01cd1b085ab10234dff3ed8b758ececaa6a322a5b0604e980780368bee8f6521767f679420a2931aafac88beb8b58440d46b1feae859a0a24327c95d23ad0f075dfec17558bc548d75a879d1f1a3bad0bbf57f44408cf95028aa1fd391c9af56377ec0e86d279aa6a1e47fe2ad95e37e21ae0ee92e6ea7df6893c07660569a276405210427cf796be77fd2b62e018c6d3c3ec0ce5593f2b3d", 0xde}) (async) fadvise64(r0, 0x94, 0x6e, 0x5) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x22052, r0, 0x2000) 287.507331ms ago: executing program 4 (id=1499): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x20, 0x2b, 0xb, 0x0, 0x0, {0x7}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x20}}, 0x0) syz_usb_disconnect(r0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x84}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000800)={0x14, &(0x7f0000000a80)=ANY=[@ANYBLOB="000d8a0000008a090cb8e8691ac4cd79eccabca5d181e25102571cb81e94fcfcd8a019ac951b49dc312a94125934329ef19922caf18a3e08c3b38bf3a4e488d9fb565f5abd9cdb43183f5cfa8570c6e4ad8b21406fe49bffc9d62c3c1ea0c53ddfdbb67f67f388e2cae6f640119c7ed582a5929fac5def837acebe4160a11a09668805dc22b4c46ebd4f547c1d1b4f25e4bb76222e73b8b6161df3d03d3b8c9745538a530147e64a651dee9850dcc605b9a1e4ad686855cd57c3aaf92ac3be2f38da5a18061d563bce51d823c921dc1f4f057ce894fcb0fd65b5b3f4d7d1d9"], &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000840)=ANY=[@ANYBLOB="403103060000000a9f"], &(0x7f0000000880)={0x0, 0xa, 0x1, 0x58}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x8}}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000440)={0x40, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) 261.612596ms ago: executing program 3 (id=1500): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000080), 0x8) r2 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 109.526997ms ago: executing program 3 (id=1501): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') chroot(&(0x7f00000002c0)='./file0\x00') rmdir(&(0x7f0000000440)='./file0\x00') mount$9p_fd(0x8000000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) 106.915276ms ago: executing program 3 (id=1502): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x36, [0x8000, 0xc95a, 0xf, 0x8, 0x8000080, 0x2, 0x7, 0x7f, 0xa9, 0x4d, 0x1, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x8, 0x1, 0x20, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x6, 0x400, 0x5, 0x8, 0x2, 0x10000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x6, 0x6, 0x100000, 0x8, 0x4, 0x8, 0x3ff, 0x8, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x932d, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x4, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x1007, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x40, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x4002, 0x4, 0x200009, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x3ff, 0x5, 0xffffff7d, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x8, 0x5, 0x40008, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x5, 0x38, 0x200, 0x1fd, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0xa9, 0x5, 0x6, 0xac8, 0x80000000, 0x2, 0x3, 0x0, 0x12b, 0x4, 0x0, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x7ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x57, 0xb, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xfffc, 0x800a620, 0x1, 0x5, 0x801, 0x2000002, 0x150, 0x60a7, 0x6, 0x1a, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x10, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0x2, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x7ff, 0xd3, 0x200, 0xb, 0xfff]}, 0x45c) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000041c0)={0x4}, 0x2) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 1 (id=1503): r0 = syz_usb_connect$uac1(0x1, 0xe9, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd7, 0x3, 0x1, 0x3, 0x150, 0x6, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x9, 0x1b}, [@extension_unit={0xd, 0x24, 0x8, 0x3, 0x3, 0x9, "db149466f797"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x306, 0x6, 0x1, 0x1}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x200, 0x6, 0x8, 0x0, 0x9, 0x9}, @input_terminal={0xc, 0x24, 0x2, 0x4, 0x206, 0x4, 0x1, 0xd8, 0xff, 0x3}, @mixer_unit={0xa, 0x24, 0x4, 0x5, 0x2, "b13f56875e"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x3, 0x1, 0x5, 0x4}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x7, 0x1, 0xd1, 0x2, '\v'}, @as_header={0x7, 0x24, 0x1, 0x1, 0xa, 0x2}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x8, 0x3, 0x89, 0x20, ' ', "7f6c88"}, @format_type_i_discrete={0xe, 0x24, 0x2, 0x1, 0x8, 0x4, 0x1, 0x24, "9447945c87c7"}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x68, 0x2, 0xdf, {0x7, 0x25, 0x1, 0x0, 0x7, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x8, 0x1, 0x3, 0x40, "b58ac6", "5dfdec"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x5, 0x2, 0xff, {0x7, 0x25, 0x1, 0x3, 0x35, 0x6}}}}}}}]}}, &(0x7f0000000680)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x250, 0x1d, 0x3, 0x8, 0x20, 0x9}, 0xb8, &(0x7f0000000280)={0x5, 0xf, 0xb8, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x21, "79b6dac505bd6dad7d2ca193b929c50c"}, @ssp_cap={0x10, 0x10, 0xa, 0xbb, 0x1, 0x496, 0x9e80, 0x1, [0xc0]}, @generic={0x84, 0x10, 0xb, "cd2d9e30b2d4760129e66171b1724ff445fc2f91e6295b0b6f89d60c7df520ad5ed15aff7eaf255f09ae35778634e9db5e915094813575215d12f78e960e76e36608be18f38ded8cb0bc06954a409de0fe7eafa36a30835671d97366048d646475d080f28da466ae82f0c5bac1676bb416ccf28dd0a0fd1f8fa929d212496c05f1"}, @wireless={0xb, 0x10, 0x1, 0x8, 0xc5, 0x4, 0x5, 0x2, 0x5}]}, 0xa, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0xc0c}}, {0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41f}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x4443}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x444}}, {0x89, &(0x7f0000000400)=@string={0x89, 0x3, "1f83fca935fd06fa48a3bb3a98e24f7a3ae591c2a7aa3e5ee4a0fe4fc932f6a4c5d8911ace2a31e4da33a0886a354a6229de3e308c0e75356ae1aefb3fc6e795ad35d128324d46accf7b6f7b787fe4285c3dc3d19160aaa2d64441c52141e493163485a1b77238dd7f80e4d73f06d3b1a9c06476b12a750f9009aa32726f9bbcc058bdfdc4cbeb"}}, {0x18, &(0x7f00000004c0)=@string={0x18, 0x3, "55d3eb87e54c98c92e0e16c1d1ddc2f6ef7504cd8335"}}, {0xed, &(0x7f0000000500)=@string={0xed, 0x3, "eb2a55e126301291741df174605512fdce331c4663bbfcc2bf7238945f99a7ce2be1d501525bc0cb0f06ced6a5b20b13a0beacd09b67c63ed9fe447611a0ff47da9f8180cf8bdb5888ece030a3be0b17a24428a08df37926f2a364b03c46421b6d1adaa79981a05542a55ed12b69960d8cb7df109b52892c2b1d1954d008bd0b3ac57686c819b5298e37b4127255bdbb61e35aaae7b8940681d46e17c0a98f7cd662584f0e37fc34582346bb3b0b60e7441f121cf4fcbcae8c6f4f29ef1b3c0e0edd4b810485b194c1c71d514150ebc66c9e307e4602ed290c3471e15b94da78da10d681427cf926b86bcb"}}, {0x37, &(0x7f0000000600)=@string={0x37, 0x3, "093454c1d9de30300231bde2e5ca47ee8d17c4f64963f6dfcad3951e18b6121726aefe22e47734a6f5f77cdc0967ee429eae8a39b2"}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x40e}}]}) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000b80)='syz0\x00', 0x200002, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x118, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f0000000040)={0x68f, 0x48574653, 0x2, @discrete={0xfff, 0x5}}) openat$cgroup_ro(r1, &(0x7f0000000bc0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) syz_usb_control_io$uac1(r0, &(0x7f0000000800)={0x14, &(0x7f0000000740)={0x0, 0x22, 0x51, {0x51, 0x5, "c1634a18ba959184679203d27a55a6f0d247b29d1fd684c8539318f7e14a3ae22e6c9f36671aece521d0e59b3352cc105a6c311a4716ccf1f05b7989f19951494889e10c68c8ac0d189127c7bd5a0c"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40c}}}, &(0x7f0000000b00)={0x44, &(0x7f0000000840)={0x0, 0x15, 0xde, "e53446c4ac1f6bb292ece2a48e3aad5709b3364e7f52f22013c424749942cab7e5405dee3e68b5d82e959efe07aa35bbb2c2e64c6dc2eb80534ee38b668cf5e25b1e15f75179641fcf6d22746f5d4f1f8b20e9ed0f7ab82f3ebbc00e4d18011fcfb4674fe0243d4959a9afe75a191fa99cd84e38ba9a3a8a281821ae66ab529d57c9895f8c7da3c94f74adc9a8269c6ddd9f6c13be1b435cc316c8787dfe7a9afc55e8e90c65904c5ab2abac262c1e8b92582f7b666e465d8178d648d8dbcd754c0389492c65ee83a5a96cff3baf42837f9d049b373349ddcca85ba68b60"}, &(0x7f0000000940)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000000980)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000009c0)={0x20, 0x81, 0x2, "95f4"}, &(0x7f0000000a00)={0x20, 0x82, 0x3, "a87f58"}, &(0x7f0000000a40)={0x20, 0x83, 0x1, "83"}, &(0x7f0000000a80)={0x20, 0x84, 0x1, '!'}, &(0x7f0000000ac0)={0x20, 0x85, 0x3, "ea7571"}}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000240)='gfs2\x00', 0x200000, 0x0) kernel console output (not intermixed with test programs): 0, Product=0, SerialNumber=0 [ 191.406337][ T9] usb 2-1: config 0 descriptor?? [ 191.735780][ T5898] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 191.830288][ T9] hid-multitouch 0003:0EEF:72C4.0011: unknown main item tag 0x0 [ 191.859121][ T9] hid-multitouch 0003:0EEF:72C4.0011: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 191.895789][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 191.917812][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.935775][ T5898] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 191.963157][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.000512][ T5898] usb 1-1: config 0 descriptor?? [ 192.056860][ T9] usb 2-1: USB disconnect, device number 23 [ 192.431306][ T5898] hid-multitouch 0003:0EEF:72C4.0012: unknown main item tag 0x0 [ 192.441085][ T5898] hid-multitouch 0003:0EEF:72C4.0012: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 192.696200][ T5898] usb 5-1: USB disconnect, device number 21 [ 192.920084][ T7686] netlink: 'syz.3.506': attribute type 4 has an invalid length. [ 193.132920][ T9] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 193.182986][ T7690] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 193.343397][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.367390][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 193.385040][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 193.395533][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.423804][ T9] usb 2-1: config 0 descriptor?? [ 193.587684][ T7693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.613830][ T7693] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.886028][ T9] kone 0003:1E7D:2CED.0013: hidraw2: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.1-1/input0 [ 193.955992][ T849] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 194.090529][ T7681] qnx4: no qnx4 filesystem (no root dir). [ 194.111977][ T9] usb 2-1: USB disconnect, device number 24 [ 194.125943][ T849] usb 5-1: Using ep0 maxpacket: 8 [ 194.143069][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.173531][ T849] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 194.188491][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.227233][ T849] usb 5-1: config 0 descriptor?? [ 194.523560][ T9] usb 1-1: USB disconnect, device number 20 [ 194.662575][ T849] hid-multitouch 0003:0EEF:72C4.0014: unknown main item tag 0x0 [ 194.691436][ T849] hid-multitouch 0003:0EEF:72C4.0014: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 194.739490][ T7713] netlink: 'syz.0.517': attribute type 4 has an invalid length. [ 194.769901][ T7716] omfs: Invalid superblock (0) [ 194.889888][ T9] usb 5-1: USB disconnect, device number 22 [ 195.457028][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 195.478481][ T7740] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.489203][ T7740] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.530550][ T7740] Bluetooth: MGMT ver 1.23 [ 195.538852][ T849] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 195.582891][ T7742] netlink: 'syz.4.527': attribute type 4 has an invalid length. [ 195.638984][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 195.651855][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 195.667560][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 195.685010][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 195.695162][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 195.703709][ T9] usb 1-1: SerialNumber: syz [ 195.708449][ T849] usb 2-1: Using ep0 maxpacket: 8 [ 195.709534][ T7746] UDF-fs: warning (device rnullb0): udf_load_vrs: No VRS found [ 195.715974][ T849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.726629][ T7746] UDF-fs: Scanning with blocksize 4096 failed [ 195.733436][ T849] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 195.751616][ T9] cdc_ether 1-1:1.0: skipping garbage [ 195.757611][ T9] usb 1-1: bad CDC descriptors [ 195.762821][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.782606][ T849] usb 2-1: config 0 descriptor?? [ 195.965559][ T9] usb 1-1: USB disconnect, device number 21 [ 196.022973][ T7752] FAULT_INJECTION: forcing a failure. [ 196.022973][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.040981][ T7752] CPU: 1 UID: 0 PID: 7752 Comm: syz.4.531 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 196.041007][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 196.041019][ T7752] Call Trace: [ 196.041026][ T7752] [ 196.041033][ T7752] dump_stack_lvl+0x189/0x250 [ 196.041065][ T7752] ? __pfx____ratelimit+0x10/0x10 [ 196.041091][ T7752] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.041117][ T7752] ? __pfx__printk+0x10/0x10 [ 196.041157][ T7752] should_fail_ex+0x414/0x560 [ 196.041185][ T7752] strncpy_from_user+0x36/0x290 [ 196.041211][ T7752] getname_flags+0xf3/0x540 [ 196.041235][ T7752] do_sys_openat2+0xbc/0x1c0 [ 196.041258][ T7752] ? __pfx_do_sys_openat2+0x10/0x10 [ 196.041277][ T7752] ? ksys_write+0x22a/0x250 [ 196.041303][ T7752] ? __pfx_ksys_write+0x10/0x10 [ 196.041330][ T7752] __x64_sys_openat+0x138/0x170 [ 196.041356][ T7752] do_syscall_64+0xfa/0x3b0 [ 196.041382][ T7752] ? lockdep_hardirqs_on+0x9c/0x150 [ 196.041405][ T7752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.041424][ T7752] ? clear_bhb_loop+0x60/0xb0 [ 196.041446][ T7752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.041463][ T7752] RIP: 0033:0x7fc2a798d310 [ 196.041481][ T7752] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 196.041497][ T7752] RSP: 002b:00007fc2a8773b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 196.041517][ T7752] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fc2a798d310 [ 196.041531][ T7752] RDX: 0000000000000002 RSI: 00007fc2a8773c10 RDI: 00000000ffffff9c [ 196.041544][ T7752] RBP: 00007fc2a8773c10 R08: 0000000000000000 R09: 00007fc2a8773987 [ 196.041555][ T7752] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 196.041572][ T7752] R13: 0000000000000001 R14: 00007fc2a7bb5fa0 R15: 00007ffee3869de8 [ 196.041601][ T7752] [ 196.206769][ T849] hid-multitouch 0003:0EEF:72C4.0015: unknown main item tag 0x0 [ 196.246776][ T849] hid-multitouch 0003:0EEF:72C4.0015: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.1-1/input0 [ 196.676289][ T7765] netlink: 'syz.4.536': attribute type 4 has an invalid length. [ 197.154526][ T7783] trusted_key: syz.4.541 sent an empty control message without MSG_MORE. [ 197.554804][ T7792] tipc: Cannot configure node identity twice [ 197.715823][ T5898] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 197.875831][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 197.887799][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.918042][ T5898] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 197.936910][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.977510][ T5898] usb 1-1: config 0 descriptor?? [ 198.029084][ T7800] hpfs: Bad magic ... probably not HPFS [ 198.244965][ T7799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.274660][ T7799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.349578][ T984] usb 2-1: USB disconnect, device number 25 [ 198.416612][ T5898] hid-multitouch 0003:0EEF:72C4.0016: unknown main item tag 0x0 [ 198.441500][ T5898] hid-multitouch 0003:0EEF:72C4.0016: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 198.495443][ T7807] netlink: 'syz.1.547': attribute type 4 has an invalid length. [ 198.606876][ T849] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 198.643132][ T5898] usb 1-1: USB disconnect, device number 22 [ 198.803979][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 198.817613][ T849] usb 5-1: too many configurations: 184, using maximum allowed: 8 [ 198.850407][ T849] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 198.858635][ T849] usb 5-1: can't read configurations, error -61 [ 198.998839][ T849] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 199.189443][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 199.206927][ T849] usb 5-1: too many configurations: 184, using maximum allowed: 8 [ 199.233318][ T849] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 199.251166][ T849] usb 5-1: can't read configurations, error -61 [ 199.270309][ T849] usb usb5-port1: attempt power cycle [ 199.314134][ T7830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.329055][ T7830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.339464][ T7832] netlink: 'syz.0.556': attribute type 4 has an invalid length. [ 199.669993][ T849] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 199.696723][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 199.702756][ T849] usb 5-1: too many configurations: 184, using maximum allowed: 8 [ 199.713634][ T849] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 199.721708][ T849] usb 5-1: can't read configurations, error -61 [ 199.876459][ T849] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 199.916631][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 199.922624][ T849] usb 5-1: too many configurations: 184, using maximum allowed: 8 [ 199.933449][ T849] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 199.948859][ T849] usb 5-1: can't read configurations, error -61 [ 199.964602][ T849] usb usb5-port1: unable to enumerate USB device [ 200.125821][ T984] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 200.278955][ T984] usb 1-1: Using ep0 maxpacket: 16 [ 200.298050][ T984] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.338705][ T984] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 200.364749][ T984] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 200.377719][ T984] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 200.401604][ T984] usb 1-1: SerialNumber: syz [ 200.429189][ T984] cdc_ether 1-1:1.0: skipping garbage [ 200.435932][ T984] usb 1-1: bad CDC descriptors [ 200.633007][ T984] usb 1-1: USB disconnect, device number 23 [ 201.421016][ T7854] netlink: 'syz.4.565': attribute type 4 has an invalid length. [ 201.455951][ T849] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 201.615935][ T849] usb 1-1: Using ep0 maxpacket: 16 [ 201.628570][ T849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 201.655942][ T849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 201.679395][ T849] usb 1-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 201.693828][ T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.716303][ T849] usb 1-1: Product: syz [ 201.720507][ T849] usb 1-1: Manufacturer: syz [ 201.725128][ T849] usb 1-1: SerialNumber: syz [ 201.738073][ T849] usb 1-1: config 0 descriptor?? [ 201.752263][ T849] kobil_sct 1-1:0.0: KOBIL USB smart card terminal converter detected [ 201.769470][ T849] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 202.029803][ T24] usb 1-1: USB disconnect, device number 24 [ 202.064268][ T24] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 202.108595][ T24] kobil_sct 1-1:0.0: device disconnected [ 202.863901][ T7877] netlink: 'syz.0.574': attribute type 4 has an invalid length. [ 203.015959][ T849] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 203.175792][ T849] usb 5-1: Using ep0 maxpacket: 16 [ 203.207555][ T849] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.233263][ T849] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 203.250908][ T849] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 203.269490][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 203.280306][ T849] usb 5-1: SerialNumber: syz [ 203.439411][ T7886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.449113][ T7886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.511206][ T927] usb 5-1: USB disconnect, device number 27 [ 203.545903][ T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 203.675922][ T24] usb 2-1: device descriptor read/64, error -71 [ 203.854516][ T7896] syz_tun: entered allmulticast mode [ 203.916078][ T24] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 204.065935][ T24] usb 2-1: device descriptor read/64, error -71 [ 204.169634][ T7907] ./cgroup: Can't lookup blockdev [ 204.176892][ T24] usb usb2-port1: attempt power cycle [ 204.355837][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 204.515927][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 204.523247][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 204.533600][ T9] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 204.535842][ T24] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 204.544984][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.576711][ T24] usb 2-1: device descriptor read/8, error -71 [ 204.584343][ T9] usb 5-1: config 0 descriptor?? [ 204.722999][ T7924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.735498][ T7924] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.817198][ T24] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 204.836666][ T24] usb 2-1: device descriptor read/8, error -71 [ 204.946302][ T24] usb usb2-port1: unable to enumerate USB device [ 205.008528][ T9] hid-multitouch 0003:0EEF:72C4.0017: unknown main item tag 0x0 [ 205.018405][ T9] hid-multitouch 0003:0EEF:72C4.0017: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 205.222236][ T24] usb 5-1: USB disconnect, device number 28 [ 205.400596][ T7933] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.411535][ T7933] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.526113][ T9] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 205.675738][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 205.682380][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.695186][ T9] usb 1-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 205.704304][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.716899][ T9] usb 1-1: config 0 descriptor?? [ 206.134625][ T9] hid-multitouch 0003:0EEF:72C4.0018: unknown main item tag 0x0 [ 206.159951][ T9] hid-multitouch 0003:0EEF:72C4.0018: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.0-1/input0 [ 206.333146][ T7950] netlink: 48 bytes leftover after parsing attributes in process `syz.3.600'. [ 206.422533][ T9] usb 1-1: USB disconnect, device number 25 [ 206.497665][ T7950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.536255][ T7950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.805793][ T5856] Bluetooth: hci1: command 0x0406 tx timeout [ 206.916244][ T24] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 207.095862][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 207.111055][ T24] usb 2-1: no configurations [ 207.115818][ T24] usb 2-1: can't read configurations, error -22 [ 207.275775][ T24] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 207.436019][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 207.442230][ T24] usb 2-1: no configurations [ 207.453948][ T24] usb 2-1: can't read configurations, error -22 [ 207.463048][ T24] usb usb2-port1: attempt power cycle [ 207.676009][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 207.825927][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 207.835768][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.846474][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 207.846979][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 207.853244][ T24] usb 2-1: no configurations [ 207.861252][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.867971][ T24] usb 2-1: can't read configurations, error -22 [ 207.877904][ T9] usb 5-1: config 0 descriptor?? [ 208.005880][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 208.026659][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 208.032517][ T24] usb 2-1: no configurations [ 208.037342][ T24] usb 2-1: can't read configurations, error -22 [ 208.044088][ T24] usb usb2-port1: unable to enumerate USB device [ 208.102573][ T7984] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 208.110581][ T7984] overlayfs: failed to set xattr on upper [ 208.116646][ T7984] overlayfs: ...falling back to index=off. [ 208.122504][ T7984] overlayfs: ...falling back to uuid=null. [ 208.134425][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 208.141163][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 208.152226][ T9] usb 5-1: USB disconnect, device number 29 [ 208.595969][ T927] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 208.726089][ T927] usb 5-1: device descriptor read/64, error -71 [ 208.965836][ T927] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 209.105965][ T927] usb 5-1: device descriptor read/64, error -71 [ 209.216193][ T927] usb usb5-port1: attempt power cycle [ 209.565825][ T927] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 209.594120][ T849] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.610938][ T849] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.620782][ T927] usb 5-1: device descriptor read/8, error -71 [ 209.620836][ T849] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.639637][ T849] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.647555][ T849] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.655094][ T849] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.679726][ T849] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.689693][ T849] hid-generic 0000:0000:0000.0019: unknown main item tag 0x0 [ 209.720195][ T849] hid-generic 0000:0000:0000.0019: hidraw1: HID v0.00 Device [syz0] on syz0 [ 209.876697][ T927] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 209.905842][ T984] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 209.928419][ T8006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.943281][ T8006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.944082][ T927] usb 5-1: device descriptor read/8, error -71 [ 210.079143][ T984] usb 2-1: config 0 has an invalid interface number: 48 but max is 0 [ 210.087757][ T927] usb usb5-port1: unable to enumerate USB device [ 210.096621][ T984] usb 2-1: config 0 has no interface number 0 [ 210.102768][ T984] usb 2-1: config 0 interface 48 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 210.118706][ T984] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0006, bcdDevice= c.db [ 210.138415][ T984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.155780][ T984] usb 2-1: Product: syz [ 210.166282][ T984] usb 2-1: Manufacturer: syz [ 210.175726][ T984] usb 2-1: SerialNumber: syz [ 210.188137][ T984] usb 2-1: config 0 descriptor?? [ 210.208497][ T984] ati_remote 2-1:0.48: ati_remote_probe: Unexpected endpoint_in [ 210.894170][ T8014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.903076][ T8014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.663999][ T8026] netlink: 'syz.3.630': attribute type 4 has an invalid length. [ 211.722129][ T8028] /dev/rnullb0: Can't open blockdev [ 211.729544][ T8028] trusted_key: encrypted_key: insufficient parameters specified [ 211.743229][ T8030] /dev/rnullb0: Can't open blockdev [ 211.861793][ T8035] loop6: detected capacity change from 0 to 524287999 [ 211.928071][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 211.928185][ T5847] Bluetooth: hci3: command 0x0406 tx timeout [ 212.592986][ T24] usb 2-1: USB disconnect, device number 34 [ 212.596474][ T9] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 212.772576][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 212.784607][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.803335][ T9] usb 5-1: config 0 has no interfaces? [ 212.814139][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.831994][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.860803][ T9] usb 5-1: SerialNumber: syz [ 212.880091][ T9] usb 5-1: config 0 descriptor?? [ 213.126645][ T43] usb 5-1: USB disconnect, device number 34 [ 213.215228][ T8061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.227355][ T8061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.296884][ T8065] netlink: 'syz.0.646': attribute type 4 has an invalid length. [ 213.636985][ T9] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 213.672007][ T8072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.649'. [ 213.716175][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.649'. [ 213.786031][ T9] usb 2-1: device descriptor read/64, error -71 [ 213.937889][ T8079] openvswitch: netlink: Duplicate or invalid key (type 0). [ 213.945315][ T8079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.025906][ T9] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 214.036072][ T849] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 214.078979][ T8084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 214.090141][ T8084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.104263][ T8084] NILFS (rnullb0): couldn't find nilfs on the device [ 214.176165][ T9] usb 2-1: device descriptor read/64, error -71 [ 214.198159][ T849] usb 5-1: Using ep0 maxpacket: 8 [ 214.204553][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 214.214416][ T849] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 214.223616][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.233632][ T849] usb 5-1: config 0 descriptor?? [ 214.287109][ T9] usb usb2-port1: attempt power cycle [ 214.626042][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 214.659563][ T849] hid_parser_main: 35 callbacks suppressed [ 214.659588][ T849] hid-multitouch 0003:0EEF:72C4.001A: unknown main item tag 0x0 [ 214.673940][ T9] usb 2-1: device descriptor read/8, error -71 [ 214.707133][ T849] hid-multitouch 0003:0EEF:72C4.001A: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 214.887971][ T849] usb 5-1: USB disconnect, device number 35 [ 214.926213][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 214.977622][ T9] usb 2-1: device descriptor read/8, error -71 [ 215.086084][ T9] usb usb2-port1: unable to enumerate USB device [ 215.435803][ T849] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 215.585885][ T849] usb 1-1: Using ep0 maxpacket: 16 [ 215.593145][ T849] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 215.601140][ T849] usb 1-1: can't read configurations, error -61 [ 215.700214][ T8101] FAULT_INJECTION: forcing a failure. [ 215.700214][ T8101] name failslab, interval 1, probability 0, space 0, times 0 [ 215.713149][ T8101] CPU: 0 UID: 0 PID: 8101 Comm: syz.4.659 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 215.713167][ T8101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 215.713174][ T8101] Call Trace: [ 215.713178][ T8101] [ 215.713183][ T8101] dump_stack_lvl+0x189/0x250 [ 215.713205][ T8101] ? __pfx____ratelimit+0x10/0x10 [ 215.713221][ T8101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.713238][ T8101] ? __pfx__printk+0x10/0x10 [ 215.713257][ T8101] ? __pfx___might_resched+0x10/0x10 [ 215.713271][ T8101] ? fs_reclaim_acquire+0x7d/0x100 [ 215.713289][ T8101] should_fail_ex+0x414/0x560 [ 215.713307][ T8101] should_failslab+0xa8/0x100 [ 215.713321][ T8101] __kmalloc_noprof+0xcb/0x4f0 [ 215.713332][ T8101] ? kfree+0x4d/0x440 [ 215.713342][ T8101] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.713356][ T8101] tomoyo_realpath_from_path+0xe3/0x5d0 [ 215.713368][ T8101] ? tomoyo_domain+0xd9/0x130 [ 215.713383][ T8101] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 215.713397][ T8101] tomoyo_path_number_perm+0x1e8/0x5a0 [ 215.713414][ T8101] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 215.713439][ T8101] ? __lock_acquire+0xab9/0xd20 [ 215.713473][ T8101] ? __fget_files+0x2a/0x420 [ 215.713491][ T8101] ? __fget_files+0x2a/0x420 [ 215.713507][ T8101] ? __fget_files+0x3a0/0x420 [ 215.713522][ T8101] ? __fget_files+0x2a/0x420 [ 215.713541][ T8101] security_file_ioctl+0xcb/0x2d0 [ 215.713556][ T8101] __se_sys_ioctl+0x47/0x170 [ 215.713571][ T8101] do_syscall_64+0xfa/0x3b0 [ 215.713587][ T8101] ? lockdep_hardirqs_on+0x9c/0x150 [ 215.713602][ T8101] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.713613][ T8101] ? clear_bhb_loop+0x60/0xb0 [ 215.713627][ T8101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.713637][ T8101] RIP: 0033:0x7fc2a798e9a9 [ 215.713649][ T8101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.713659][ T8101] RSP: 002b:00007fc2a8774038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.713673][ T8101] RAX: ffffffffffffffda RBX: 00007fc2a7bb5fa0 RCX: 00007fc2a798e9a9 [ 215.713681][ T8101] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 215.713688][ T8101] RBP: 00007fc2a8774090 R08: 0000000000000000 R09: 0000000000000000 [ 215.713695][ T8101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.713702][ T8101] R13: 0000000000000000 R14: 00007fc2a7bb5fa0 R15: 00007ffee3869de8 [ 215.713720][ T8101] [ 215.713726][ T8101] ERROR: Out of memory at tomoyo_realpath_from_path. [ 215.965305][ T849] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 216.125887][ T849] usb 1-1: Using ep0 maxpacket: 16 [ 216.133374][ T849] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 216.141645][ T849] usb 1-1: can't read configurations, error -61 [ 216.149203][ T849] usb usb1-port1: attempt power cycle [ 216.335914][ T5898] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 216.494940][ T849] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 216.504036][ T5898] usb 5-1: Using ep0 maxpacket: 8 [ 216.516652][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.527972][ T849] usb 1-1: Using ep0 maxpacket: 16 [ 216.533254][ T5898] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 216.554818][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.563120][ T849] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 216.575826][ T849] usb 1-1: can't read configurations, error -61 [ 216.580881][ T8111] netlink: 'syz.1.663': attribute type 4 has an invalid length. [ 216.596890][ T5898] usb 5-1: config 0 descriptor?? [ 216.725959][ T849] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 216.756730][ T849] usb 1-1: Using ep0 maxpacket: 16 [ 216.764428][ T849] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 216.772115][ T849] usb 1-1: can't read configurations, error -61 [ 216.778961][ T849] usb usb1-port1: unable to enumerate USB device [ 217.016758][ T5898] hid-multitouch 0003:0EEF:72C4.001B: unknown main item tag 0x0 [ 217.031295][ T5898] hid-multitouch 0003:0EEF:72C4.001B: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 217.215039][ T43] usb 5-1: USB disconnect, device number 36 [ 217.461147][ T8123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.486284][ T8123] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.671570][ T8130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.670'. [ 218.071055][ T8144] netlink: 'syz.0.676': attribute type 4 has an invalid length. [ 218.202751][ T8149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.211853][ T8149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 218.427316][ T8156] binder: 8154:8156 unknown command 0 [ 218.432723][ T8156] binder: 8154:8156 ioctl c0306201 200000000080 returned -22 [ 218.816032][ T43] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 218.966169][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 218.978618][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.989007][ T8163] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 218.989710][ T43] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 219.000115][ T8163] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 219.007067][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.028437][ T43] usb 5-1: config 0 descriptor?? [ 219.446574][ T43] hid-multitouch 0003:0EEF:72C4.001C: unknown main item tag 0x0 [ 219.457066][ T43] hid-multitouch 0003:0EEF:72C4.001C: hidraw1: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.4-1/input0 [ 219.650232][ T984] usb 5-1: USB disconnect, device number 37 [ 220.522947][ T8194] netlink: 'syz.3.693': attribute type 4 has an invalid length. [ 221.959344][ T8171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 222.274757][ T8209] qnx4: no qnx4 filesystem (no root dir). [ 222.370612][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.380786][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 222.575822][ T5898] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 222.725902][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 222.733782][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 222.741772][ T5898] usb 2-1: can't read configurations, error -61 [ 222.875794][ T5898] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 222.895851][ T5946] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 223.026023][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 223.041279][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 223.043424][ T8226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.053446][ T5898] usb 2-1: can't read configurations, error -61 [ 223.064292][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 223.066971][ T8226] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.071572][ T5898] usb usb2-port1: attempt power cycle [ 223.089660][ T5946] usb 5-1: config 0 has an invalid interface number: 132 but max is 0 [ 223.100753][ T5946] usb 5-1: config 0 has no interface number 0 [ 223.108030][ T5946] usb 5-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 223.120975][ T5946] usb 5-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 223.130504][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.138613][ T5946] usb 5-1: Product: syz [ 223.142868][ T5946] usb 5-1: Manufacturer: syz [ 223.147568][ T5946] usb 5-1: SerialNumber: syz [ 223.154628][ T5946] usb 5-1: config 0 descriptor?? [ 223.165531][ T5946] em28xx 5-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 223.175391][ T5946] em28xx 5-1:0.132: Video interface 132 found: [ 223.425944][ T5898] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 223.446714][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 223.454080][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 223.462127][ T5898] usb 2-1: can't read configurations, error -61 [ 223.566114][ T5946] em28xx 5-1:0.132: chip ID is em2710 [ 223.595865][ T5898] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 223.617044][ T5898] usb 2-1: Using ep0 maxpacket: 16 [ 223.624294][ T5898] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 223.632016][ T5898] usb 2-1: can't read configurations, error -61 [ 223.638535][ T849] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 223.646588][ T5898] usb usb2-port1: unable to enumerate USB device [ 223.775250][ T8224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.794273][ T8224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.810057][ T849] usb 1-1: Using ep0 maxpacket: 16 [ 223.825077][ T849] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 223.837819][ T849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.850473][ T849] usb 1-1: Product: syz [ 223.854699][ T849] usb 1-1: Manufacturer: syz [ 223.870323][ T849] usb 1-1: SerialNumber: syz [ 223.890341][ T849] usb 1-1: config 0 descriptor?? [ 224.162129][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.173729][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.191057][ T8244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.199901][ T8244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.300348][ T849] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 224.314544][ T849] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 224.324803][ T849] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 224.335810][ T849] usb 1-1: media controller created [ 224.360703][ T849] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.505133][ T849] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 224.513459][ T849] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 224.711871][ T43] usb 1-1: USB disconnect, device number 30 [ 224.753271][ T5946] em28xx 5-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 224.772281][ T5946] em28xx 5-1:0.132: board has no eeprom [ 224.808691][ T43] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 224.835859][ T5946] em28xx 5-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 224.848765][ T8247] batadv_slave_0: entered promiscuous mode [ 224.854697][ T5946] em28xx 5-1:0.132: analog set to bulk mode. [ 224.859030][ T8246] batadv_slave_0: left promiscuous mode [ 224.861818][ T849] em28xx 5-1:0.132: Registering V4L2 extension [ 224.964861][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0x4a (error=-5) [ 224.990127][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0x48 (error=-5) [ 225.003308][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0x42 (error=-5) [ 225.012906][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0x40 (error=-5) [ 225.051193][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0x84 (error=-5) [ 225.060589][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0x86 (error=-5) [ 225.070665][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0x94 (error=-5) [ 225.082532][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0x96 (error=-5) [ 225.120572][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc0 (error=-5) [ 225.130067][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc2 (error=-5) [ 225.141846][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc4 (error=-5) [ 225.165499][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc6 (error=-5) [ 225.191003][ T849] em28xx 5-1:0.132: failed to trigger read from i2c address 0xc8 (error=-5) [ 225.217672][ T849] em28xx 5-1:0.132: Config register raw data: 0xfffffffb [ 225.231746][ T849] em28xx 5-1:0.132: AC97 chip type couldn't be determined [ 225.233215][ T8255] futex_wake_op: syz.1.714 tries to shift op by 32; fix this program [ 225.240275][ T849] em28xx 5-1:0.132: No AC97 audio processor [ 225.256501][ T51] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 225.295223][ T849] usb 5-1: Decoder not found [ 225.310804][ T849] em28xx 5-1:0.132: failed to create media graph [ 225.339648][ T849] em28xx 5-1:0.132: V4L2 device video103 deregistered [ 225.375125][ T849] em28xx 5-1:0.132: Remote control support is not available for this card. [ 225.620270][ T8267] binder: 8266:8267 ioctl c0306201 200000000b00 returned -14 [ 225.703507][ T984] usb 5-1: USB disconnect, device number 38 [ 225.740507][ T984] em28xx 5-1:0.132: Disconnecting em28xx [ 225.751159][ T984] em28xx 5-1:0.132: Closing input extension [ 225.785611][ T984] em28xx 5-1:0.132: Freeing device [ 225.926171][ T849] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 226.090144][ T849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.113476][ T849] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.125367][ T8284] netlink: 172 bytes leftover after parsing attributes in process `syz.3.726'. [ 226.134591][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.156144][ T849] usb 2-1: config 0 descriptor?? [ 226.171688][ T849] pwc: Askey VC010 type 2 USB webcam detected. [ 226.276010][ T5898] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 226.375518][ T849] pwc: send_video_command error -71 [ 226.378180][ T8290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 226.385556][ T849] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 226.395879][ T8290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 226.405517][ T849] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 226.428822][ T849] usb 2-1: USB disconnect, device number 43 [ 226.455861][ T5898] usb 1-1: Using ep0 maxpacket: 16 [ 226.467915][ T5898] usb 1-1: config 0 has no interfaces? [ 226.475558][ T5898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 226.486897][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 226.494916][ T5898] usb 1-1: SerialNumber: syz [ 226.521789][ T5898] usb 1-1: config 0 descriptor?? [ 226.760406][ T5898] usb 1-1: USB disconnect, device number 31 [ 226.897817][ T849] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 227.067949][ T849] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 227.082679][ T849] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 227.091907][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.112443][ T849] usb 2-1: config 0 descriptor?? [ 227.132381][ T849] pwc: Askey VC010 type 2 USB webcam detected. [ 227.539031][ T849] pwc: recv_control_msg error -32 req 02 val 2b00 [ 227.558284][ T849] pwc: recv_control_msg error -32 req 02 val 2700 [ 227.566980][ T849] pwc: recv_control_msg error -32 req 02 val 2c00 [ 227.581730][ T849] pwc: recv_control_msg error -32 req 04 val 1000 [ 227.593852][ T849] pwc: recv_control_msg error -32 req 04 val 1300 [ 227.602756][ T849] pwc: recv_control_msg error -32 req 04 val 1400 [ 227.610669][ T849] pwc: recv_control_msg error -32 req 02 val 2000 [ 227.618461][ T849] pwc: recv_control_msg error -32 req 02 val 2100 [ 227.629017][ T849] pwc: recv_control_msg error -32 req 04 val 1500 [ 227.636741][ T849] pwc: recv_control_msg error -32 req 02 val 2500 [ 227.644197][ T849] pwc: recv_control_msg error -32 req 02 val 2400 [ 227.653088][ T849] pwc: recv_control_msg error -32 req 02 val 2600 [ 227.661384][ T849] pwc: recv_control_msg error -32 req 02 val 2900 [ 227.842837][ T8319] netlink: 12 bytes leftover after parsing attributes in process `syz.4.737'. [ 227.875915][ T43] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 227.922934][ T849] pwc: recv_control_msg error -71 req 04 val 1100 [ 227.942313][ T849] pwc: recv_control_msg error -71 req 04 val 1200 [ 227.957250][ T849] pwc: Registered as video103. [ 227.979040][ T849] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input11 [ 228.026698][ T849] usb 2-1: USB disconnect, device number 44 [ 228.045875][ T43] usb 1-1: Using ep0 maxpacket: 32 [ 228.066544][ T43] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 228.100697][ T43] usb 1-1: config 0 has no interface number 0 [ 228.133870][ T43] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 228.152854][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.172006][ T43] usb 1-1: Product: syz [ 228.182326][ T43] usb 1-1: Manufacturer: syz [ 228.190171][ T8324] qnx6: unable to read the first superblock [ 228.196975][ T43] usb 1-1: SerialNumber: syz [ 228.204959][ T43] usb 1-1: config 0 descriptor?? [ 228.224787][ T43] smsc95xx v2.0.0 [ 228.459890][ T8330] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 228.498781][ T8330] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 228.776858][ T8338] netlink: 24 bytes leftover after parsing attributes in process `syz.1.744'. [ 229.110565][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 229.143203][ T8347] netlink: 188 bytes leftover after parsing attributes in process `syz.4.747'. [ 229.281638][ T8350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 229.302534][ T8350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 229.339643][ T43] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 229.359562][ T43] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 229.381711][ T43] usb 1-1: USB disconnect, device number 32 [ 229.755867][ T849] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 229.915867][ T849] usb 5-1: Using ep0 maxpacket: 32 [ 229.935155][ T849] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 229.957423][ T849] usb 5-1: config 0 has no interface number 0 [ 229.963575][ T849] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 229.979080][ T849] usb 5-1: config 0 interface 85 has no altsetting 0 [ 230.023134][ T849] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 230.051051][ T849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.076022][ T849] usb 5-1: Product: syz [ 230.085583][ T849] usb 5-1: Manufacturer: syz [ 230.092020][ T849] usb 5-1: SerialNumber: syz [ 230.120648][ T849] usb 5-1: config 0 descriptor?? [ 230.163989][ T8361] loop6: detected capacity change from 0 to 524287999 [ 230.164432][ T8360] netlink: 24 bytes leftover after parsing attributes in process `syz.1.753'. [ 230.667462][ T8370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.693841][ T8370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.991227][ T849] appletouch 5-1:0.85: Geyser mode initialized. [ 231.018462][ T849] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input12 [ 231.955774][ T43] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 232.054322][ T8389] netlink: 24 bytes leftover after parsing attributes in process `syz.0.764'. [ 232.115840][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 232.123353][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 232.140744][ T43] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 232.154405][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.186083][ T43] usb 2-1: config 0 descriptor?? [ 232.583541][ T24] usb 5-1: USB disconnect, device number 39 [ 232.646265][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 232.652355][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 232.671265][ T24] appletouch 5-1:0.85: input: appletouch disconnected [ 232.726840][ T43] usb 2-1: USB disconnect, device number 45 [ 232.828513][ T8404] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 232.867671][ T8404] Error validating options; rc = [-22] [ 233.054763][ T8410] netlink: 24 bytes leftover after parsing attributes in process `syz.0.773'. [ 233.178208][ T8412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.187196][ T8412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.225336][ T8419] hfs: can't find a HFS filesystem on dev rnullb0 [ 233.555952][ T5898] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 233.726018][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 233.759655][ T5898] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.780143][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.844889][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.876540][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.920189][ T8438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.936251][ T8438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 234.005115][ T5898] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 234.034186][ T5898] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 234.050623][ T5898] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.059946][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.299591][ T5898] usb 1-1: GET_CAPABILITIES returned 0 [ 234.305157][ T5898] usbtmc 1-1:16.0: can't read capabilities [ 234.504413][ T5898] usb 1-1: USB disconnect, device number 33 [ 234.790701][ T8461] XFS (rnullb0): Invalid superblock magic number [ 235.219496][ T8474] netlink: 'syz.0.786': attribute type 6 has an invalid length. [ 235.254039][ T8474] input: syz1 as /devices/virtual/input/input14 [ 236.414111][ T8514] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 236.668939][ T5898] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 236.831189][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.868849][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 236.904438][ T5898] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 236.924999][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.957532][ T5898] usb 5-1: config 0 descriptor?? [ 237.170962][ T8520] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.182536][ T8520] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.993356][ T8552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.804'. [ 238.120296][ T5898] uclogic 0003:256C:006D.001D: interface is invalid, ignoring [ 238.164813][ T5898] usb 5-1: USB disconnect, device number 40 [ 238.207530][ T8559] netlink: 'syz.1.806': attribute type 6 has an invalid length. [ 238.219153][ T8559] netlink: 'syz.1.806': attribute type 4 has an invalid length. [ 238.238858][ T8559] netlink: 'syz.1.806': attribute type 6 has an invalid length. [ 238.257874][ T8559] netlink: 'syz.1.806': attribute type 13 has an invalid length. [ 238.266514][ T8559] netlink: 'syz.1.806': attribute type 15 has an invalid length. [ 238.285236][ T8559] netlink: 'syz.1.806': attribute type 19 has an invalid length. [ 238.309750][ T8559] netlink: 3684 bytes leftover after parsing attributes in process `syz.1.806'. [ 239.176205][ T43] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 239.335774][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 239.350948][ T43] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 239.375783][ T43] usb 5-1: config 0 has no interface number 0 [ 239.394250][ T43] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 239.413814][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.435328][ T43] usb 5-1: Product: syz [ 239.444985][ T43] usb 5-1: Manufacturer: syz [ 239.455107][ T43] usb 5-1: SerialNumber: syz [ 239.476109][ T43] usb 5-1: config 0 descriptor?? [ 239.500340][ T43] smsc95xx v2.0.0 [ 240.374887][ T5898] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 240.393322][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 240.452016][ T8629] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 240.536549][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 240.552017][ T5898] usb 2-1: unable to get BOS descriptor or descriptor too short [ 240.574647][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.595291][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 240.632963][ T43] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 240.635078][ T5898] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 240.662492][ T43] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 240.695526][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.713877][ T5898] usb 2-1: Product: syz [ 240.727372][ T43] usb 5-1: USB disconnect, device number 41 [ 240.730568][ T5898] usb 2-1: Manufacturer: syz [ 240.762450][ T5898] usb 2-1: SerialNumber: syz [ 240.791487][ T5898] usb 2-1: config 0 descriptor?? [ 240.822604][ T5898] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 240.942196][ T5898] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 241.089242][ T6006] udevd[6006]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 241.102647][ T8641] netlink: 12 bytes leftover after parsing attributes in process `syz.0.821'. [ 242.043217][ T8675] netlink: 12 bytes leftover after parsing attributes in process `syz.3.830'. [ 242.243592][ T8682] netlink: 'syz.4.832': attribute type 5 has an invalid length. [ 242.245936][ T849] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 242.286340][ T8682] netlink: 'syz.4.832': attribute type 9 has an invalid length. [ 242.353750][ T8684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.369548][ T8684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.418304][ T849] usb 1-1: Using ep0 maxpacket: 32 [ 242.428768][ T849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.449504][ T849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.470231][ T849] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 242.484863][ T849] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.515950][ T849] usb 1-1: config 0 descriptor?? [ 243.154711][ T43] usb 2-1: USB disconnect, device number 46 [ 243.176674][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.305930][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.314317][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 243.317480][ T8707] ptrace attach of "./syz-executor exec"[6073] was attempted by "./syz-executor exec"[8707] [ 244.121720][ T8711] openvswitch: netlink: Message has 24 unknown bytes. [ 244.140815][ T8711] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.305228][ T8714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.839'. [ 244.353913][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.370861][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.423248][ T8716] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.436441][ T8716] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.647040][ T8722] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 244.796014][ T5898] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 244.955871][ T5898] usb 2-1: Using ep0 maxpacket: 8 [ 244.973500][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.983985][ T5898] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 244.998081][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.019404][ T5898] usb 2-1: config 0 descriptor?? [ 245.099404][ T8726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.110630][ T8726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.444291][ T5898] usbhid 2-1:0.0: can't add hid device: -71 [ 245.453502][ T5898] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 245.471216][ T5898] usb 2-1: USB disconnect, device number 47 [ 246.228799][ T8744] netlink: 12 bytes leftover after parsing attributes in process `syz.3.850'. [ 246.338681][ T30] audit: type=1326 audit(1753181449.945:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8746 comm="syz.0.851" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc1e738e9a9 code=0x0 [ 247.142444][ T9] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 247.260310][ T8767] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 247.265146][ T8769] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.278197][ T8767] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 247.280278][ T8769] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.297069][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 247.317977][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.325321][ T8767] mkiss: ax0: crc mode is auto. [ 247.342915][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 247.355533][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.371551][ T9] usb 2-1: config 0 descriptor?? [ 247.521408][ T8773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.860'. [ 247.616722][ T849] usbhid 1-1:0.0: can't add hid device: -32 [ 247.628954][ T849] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 247.685304][ T8777] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 247.797840][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 247.814089][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 247.836278][ T9] usb 2-1: USB disconnect, device number 48 [ 247.936168][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 247.944844][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 247.953530][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 247.974437][ T8786] ptrace attach of "./syz-executor exec"[6073] was attempted by "./syz-executor exec"[8786] [ 248.758455][ T8793] netlink: 60 bytes leftover after parsing attributes in process `syz.1.866'. [ 248.789958][ T8792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.866'. [ 248.849378][ T8792] netlink: 60 bytes leftover after parsing attributes in process `syz.1.866'. [ 249.062185][ T8795] openvswitch: netlink: Message has 24 unknown bytes. [ 249.071382][ T8795] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.201696][ T8801] netlink: 20 bytes leftover after parsing attributes in process `syz.3.869'. [ 249.475405][ T8809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.484613][ T8809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 249.935732][ T849] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 250.008330][ T8820] omfs: Invalid superblock (0) [ 250.065600][ T8825] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.077923][ T8825] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.087910][ T849] usb 2-1: Using ep0 maxpacket: 8 [ 250.097472][ T849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.109652][ T849] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 250.120940][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.135957][ T849] usb 2-1: config 0 descriptor?? [ 250.557257][ T849] usbhid 2-1:0.0: can't add hid device: -71 [ 250.563927][ T849] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 250.580578][ T849] usb 2-1: USB disconnect, device number 49 [ 250.830175][ T8829] EXT4-fs (nullb0): VFS: Can't find ext4 filesystem [ 250.873130][ T8831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.885086][ T8831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.567441][ T8838] netlink: 'syz.4.882': attribute type 16 has an invalid length. [ 251.592918][ T8844] netlink: 60 bytes leftover after parsing attributes in process `syz.0.883'. [ 251.611573][ T8843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.883'. [ 251.646887][ T8843] netlink: 60 bytes leftover after parsing attributes in process `syz.0.883'. [ 251.855909][ T927] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 251.885796][ T43] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 252.005880][ T927] usb 5-1: Using ep0 maxpacket: 16 [ 252.015318][ T927] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 252.024754][ T927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.037155][ T927] usb 5-1: Product: syz [ 252.041632][ T927] usb 5-1: Manufacturer: syz [ 252.046381][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 252.051894][ T927] usb 5-1: SerialNumber: syz [ 252.058441][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.069652][ T43] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 252.079838][ T927] usb 5-1: config 0 descriptor?? [ 252.085555][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.108198][ T43] usb 2-1: config 0 descriptor?? [ 252.500923][ T927] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 252.513847][ T927] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 252.524968][ T927] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 252.534897][ T927] usb 5-1: media controller created [ 252.540988][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 252.551488][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 252.589729][ T43] usb 2-1: USB disconnect, device number 50 [ 252.604197][ T927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 252.719279][ T927] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 252.735726][ T927] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 252.793732][ T8858] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 252.808493][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 252.925053][ T849] usb 5-1: USB disconnect, device number 42 [ 252.984298][ T849] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 253.015459][ T8860] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.024802][ T8860] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.094247][ T8862] loop6: detected capacity change from 0 to 63 [ 253.102033][ T8862] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.111091][ T8862] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.119250][ T8862] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.127336][ T8862] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.135233][ T8862] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.143278][ T8862] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.152696][ T8862] Buffer I/O error on dev loop6, logical block 0, async page read [ 253.161556][ T8862] loop6: unable to read partition table [ 253.162006][ T8863] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 253.170880][ T8862] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 253.189400][ T8863] Buffer I/O error on dev loop6, logical block 1, lost async page write [ 253.199337][ T8863] Buffer I/O error on dev loop6, logical block 2, lost async page write [ 253.604886][ T8881] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.756016][ T9] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 253.906384][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 253.913617][ T9] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 253.923924][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 253.933320][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.095722][ T849] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 254.161566][ T43] usb 5-1: USB disconnect, device number 43 [ 254.255828][ T849] usb 2-1: Using ep0 maxpacket: 8 [ 254.262594][ T849] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.272573][ T849] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 254.281704][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.292075][ T849] usb 2-1: config 0 descriptor?? [ 254.707561][ T849] usbhid 2-1:0.0: can't add hid device: -71 [ 254.730664][ T849] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 254.748503][ T849] usb 2-1: USB disconnect, device number 51 [ 254.808457][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 254.809787][ T5856] Bluetooth: hci4: command 0x1003 tx timeout [ 254.862989][ T8891] tipc: Enabled bearer , priority 10 [ 255.130875][ T8900] QAT: Invalid ioctl 1074041889 [ 255.375827][ T927] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 255.505606][ T8916] loop6: detected capacity change from 0 to 63 [ 255.515592][ T5848] ldm_validate_partition_table(): Disk read failed. [ 255.523227][ T5848] Dev loop6: unable to read RDB block 0 [ 255.533700][ T5848] loop6: unable to read partition table [ 255.546136][ T43] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 255.556600][ T8916] ldm_validate_partition_table(): Disk read failed. [ 255.558716][ T927] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 255.563649][ T8916] Dev loop6: unable to read RDB block 0 [ 255.591348][ T8916] loop6: unable to read partition table [ 255.592845][ T927] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.603038][ T8916] loop_reread_partitions: partition scan of loop6 (3 ) failed (rc=-5) [ 255.635771][ T927] usb 5-1: config 0 interface 0 has no altsetting 0 [ 255.645986][ T927] usb 5-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 255.677922][ T927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.708231][ T43] usb 2-1: Using ep0 maxpacket: 32 [ 255.729685][ T927] usb 5-1: config 0 descriptor?? [ 255.738815][ T43] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 255.756518][ T43] usb 2-1: config 0 has no interface number 0 [ 255.773847][ T43] usb 2-1: config 0 interface 184 has no altsetting 0 [ 255.791112][ T43] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 255.814509][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.849525][ T43] usb 2-1: Product: syz [ 255.853761][ T43] usb 2-1: Manufacturer: syz [ 255.873836][ T43] usb 2-1: SerialNumber: syz [ 255.887296][ T43] usb 2-1: config 0 descriptor?? [ 255.901192][ T43] smsc75xx v1.0.0 [ 255.975794][ T984] tipc: Node number set to 3381444701 [ 256.160288][ T927] hid-led 0003:04D8:F372.001E: unknown main item tag 0x0 [ 256.184493][ T927] hid-led 0003:04D8:F372.001E: hidraw1: USB HID v0.00 Device [HID 04d8:f372] on usb-dummy_hcd.4-1/input0 [ 256.380989][ T927] hid-led 0003:04D8:F372.001E: Greynut Luxafor initialized [ 256.405091][ T927] usb 5-1: USB disconnect, device number 44 [ 256.421028][ T13] leds luxafor1:blue:led5: Setting an LED's brightness failed (-38) [ 256.443219][ T13] leds luxafor1:green:led5: Setting an LED's brightness failed (-38) [ 256.465116][ T13] leds luxafor1:red:led5: Setting an LED's brightness failed (-38) [ 256.485587][ T13] leds luxafor1:blue:led4: Setting an LED's brightness failed (-38) [ 256.508380][ T13] leds luxafor1:green:led4: Setting an LED's brightness failed (-38) [ 256.523963][ T13] leds luxafor1:red:led4: Setting an LED's brightness failed (-38) [ 256.535350][ T13] leds luxafor1:blue:led3: Setting an LED's brightness failed (-38) [ 256.535615][ T30] audit: type=1326 audit(1753181460.135:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8908 comm="syz.1.906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6e5ed8e9a9 code=0x0 [ 256.553504][ T13] leds luxafor1:green:led3: Setting an LED's brightness failed (-38) [ 256.586681][ T36] leds luxafor1:red:led3: Setting an LED's brightness failed (-38) [ 256.600541][ T8927] PKCS7: Unknown OID: [4] 5.25.287.112.81.102.117.87.150326315.2007.15776.1 [ 256.611395][ T13] leds luxafor1:blue:led2: Setting an LED's brightness failed (-38) [ 256.622637][ T12] leds luxafor1:green:led2: Setting an LED's brightness failed (-38) [ 256.634756][ T8927] PKCS7: Only support pkcs7_signedData type [ 256.635342][ T12] leds luxafor1:red:led2: Setting an LED's brightness failed (-38) [ 256.649564][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 256.661534][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 256.661847][ T12] leds luxafor1:blue:led1: Setting an LED's brightness failed (-38) [ 256.681572][ T36] leds luxafor1:green:led1: Setting an LED's brightness failed (-38) [ 256.695785][ T36] leds luxafor1:red:led1: Setting an LED's brightness failed (-38) [ 256.705330][ T36] leds luxafor1:blue:led0: Setting an LED's brightness failed (-38) [ 256.720891][ T13] leds luxafor1:green:led0: Setting an LED's brightness failed (-38) [ 256.734573][ T12] leds luxafor1:red:led0: Setting an LED's brightness failed (-38) [ 256.775426][ T8929] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.796278][ T8929] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.215939][ T927] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 257.376308][ T927] usb 5-1: Using ep0 maxpacket: 8 [ 257.392798][ T927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 257.415716][ T927] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 257.424856][ T927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.466608][ T927] usb 5-1: config 0 descriptor?? [ 257.517575][ T8937] netlink: 12 bytes leftover after parsing attributes in process `syz.3.917'. [ 257.886495][ T927] usbhid 5-1:0.0: can't add hid device: -71 [ 257.892602][ T927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 257.919401][ T927] usb 5-1: USB disconnect, device number 45 [ 258.072117][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.3.926'. [ 258.346468][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 258.369705][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 258.437048][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 258.464671][ T43] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 258.486361][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 258.492343][ T43] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 258.495176][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 258.495220][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.933'. [ 258.516119][ T43] usb 2-1: USB disconnect, device number 52 [ 258.555621][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.934'. [ 258.609856][ T8983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.936'. [ 259.085850][ T43] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 259.238944][ T43] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.249302][ T43] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 259.266958][ T43] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 259.281733][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.290630][ T43] usb 5-1: Product: syz [ 259.294822][ T43] usb 5-1: Manufacturer: syz [ 259.303219][ T43] usb 5-1: SerialNumber: syz [ 259.359369][ T8997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.381274][ T8997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.398657][ T8997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.399365][ T51] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 259.413404][ T8997] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.544832][ T8993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.557770][ T8993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.685189][ T9008] netlink: 12 bytes leftover after parsing attributes in process `syz.3.947'. [ 259.705783][ T9] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 259.858185][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 259.867454][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.877672][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 259.889396][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.909190][ T9] usb 2-1: config 0 descriptor?? [ 260.146131][ T13] Bluetooth: hci4: Frame reassembly failed (-84) [ 260.153012][ T30] audit: type=1326 audit(1753181463.755:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9019 comm="syz.0.953" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1e738e9a9 code=0x0 [ 260.333833][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 260.344061][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 260.366544][ T9] usb 2-1: USB disconnect, device number 53 [ 260.386649][ T43] cdc_ncm 5-1:1.0: bind() failure [ 260.400452][ T43] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 260.410541][ T43] cdc_ncm 5-1:1.1: bind() failure [ 260.432448][ T43] usb 5-1: USB disconnect, device number 46 [ 260.654267][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.957'. [ 260.709828][ T9035] overlayfs: failed to resolve './file0/file0': -2 [ 261.158635][ T9054] netlink: 12 bytes leftover after parsing attributes in process `syz.4.966'. [ 261.657577][ T9] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 261.815787][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 261.822753][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 261.831953][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.841898][ T9] usb 5-1: config 0 descriptor?? [ 261.859592][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 262.166710][ T5847] Bluetooth: hci4: command 0x1003 tx timeout [ 262.174358][ T51] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 262.374615][ T9076] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 262.384013][ T9076] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.568701][ T9079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 263.046436][ T51] Bluetooth: hci0: command 0x0405 tx timeout [ 263.118007][ T43] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 263.249050][ T9096] netlink: 'syz.0.982': attribute type 10 has an invalid length. [ 263.270951][ T9096] syz_tun (unregistering): left allmulticast mode [ 263.277637][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 263.294441][ T9] gspca_vc032x: reg_w err -71 [ 263.295012][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.303166][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.314520][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.328183][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.332014][ T43] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 263.333512][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.357038][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.359095][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.372608][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.384208][ T43] usb 2-1: config 0 descriptor?? [ 263.387460][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.402605][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.415737][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.421223][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.429515][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.435046][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.441860][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.447912][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.453765][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.474995][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.491332][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.507616][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 263.521854][ T9] gspca_vc032x: Unknown sensor... [ 263.535493][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 263.541349][ T9105] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'. [ 263.585560][ T9] usb 5-1: USB disconnect, device number 47 [ 263.751550][ T9113] tipc: Failed to remove unknown binding: 66,1,1/0:3047257427/3047257429 [ 263.764064][ T9113] tipc: Failed to remove unknown binding: 66,1,1/0:3047257427/3047257429 [ 263.774677][ T9113] tipc: Failed to remove unknown binding: 66,1,1/0:3047257427/3047257429 [ 263.819189][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 263.835554][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 263.876173][ T43] usb 2-1: USB disconnect, device number 54 [ 264.326706][ T9] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 264.414476][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.1.994'. [ 264.503955][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 264.519879][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.528804][ T9] usb 5-1: Product: syz [ 264.533067][ T9] usb 5-1: Manufacturer: syz [ 264.538295][ T9] usb 5-1: SerialNumber: syz [ 264.556874][ T9] usb 5-1: config 0 descriptor?? [ 264.770804][ T9] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 264.873696][ T9147] vxfs: WRONG superblock magic 00000000 at 1 [ 264.880197][ T9147] vxfs: WRONG superblock magic 00000000 at 8 [ 264.890372][ T9147] vxfs: can't find superblock. [ 265.226376][ T984] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 265.385740][ T984] usb 2-1: Using ep0 maxpacket: 8 [ 265.392580][ T984] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.405267][ T984] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 265.415380][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.431245][ T984] usb 2-1: config 0 descriptor?? [ 265.517472][ T9153] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20000 [ 265.587689][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1004'. [ 265.857527][ T984] usbhid 2-1:0.0: can't add hid device: -71 [ 265.868359][ T984] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 265.880659][ T984] usb 2-1: USB disconnect, device number 55 [ 266.191513][ T9] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 266.203335][ T9] usb 5-1: USB disconnect, device number 48 [ 266.291589][ T9162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.300670][ T9162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.549887][ T9166] netlink: 'syz.1.1008': attribute type 2 has an invalid length. [ 266.587408][ T9166] netlink: 'syz.1.1008': attribute type 1 has an invalid length. [ 266.818363][ T9180] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1013'. [ 267.016100][ T9] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 267.212484][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 267.220999][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 267.244350][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 267.287181][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 267.305773][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.334280][ T9] usb 2-1: Product: syz [ 267.339537][ T9] usb 2-1: Manufacturer: syz [ 267.344158][ T9] usb 2-1: SerialNumber: syz [ 267.367238][ T9] usb 2-1: config 0 descriptor?? [ 267.379800][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 267.406560][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 267.599465][ T9198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.640079][ T9198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 267.712227][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 267.721703][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 267.730866][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1020'. [ 267.990807][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 268.002058][ T9] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 268.219719][ T9] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 268.232536][ T9] em28xx 2-1:0.0: No AC97 audio processor [ 268.264362][ T9213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1025'. [ 268.269446][ T9] usb 2-1: USB disconnect, device number 56 [ 268.299324][ T9] em28xx 2-1:0.0: Disconnecting em28xx [ 268.316282][ T9] em28xx 2-1:0.0: Freeing device [ 268.590732][ T9221] /dev/sg0: Can't lookup blockdev [ 269.080132][ T9234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1034'. [ 269.099714][ T9235] fuse: Unknown parameter ' l# ' [ 270.100014][ T9263] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1043'. [ 270.193929][ T849] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 270.387578][ T849] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.415970][ T849] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 270.436675][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.451100][ T849] usb 5-1: config 0 descriptor?? [ 270.483624][ T849] pwc: Askey VC010 type 2 USB webcam detected. [ 270.673299][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.701048][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.929917][ T849] pwc: recv_control_msg error -32 req 02 val 2b00 [ 270.939139][ T9258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 270.954383][ T9258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 270.980364][ T849] pwc: recv_control_msg error -32 req 02 val 2700 [ 270.991029][ T849] pwc: recv_control_msg error -32 req 02 val 2c00 [ 271.001118][ T849] pwc: recv_control_msg error -32 req 04 val 1000 [ 271.011468][ T849] pwc: recv_control_msg error -32 req 04 val 1300 [ 271.021052][ T849] pwc: recv_control_msg error -32 req 04 val 1400 [ 271.232745][ T849] pwc: recv_control_msg error -71 req 02 val 2100 [ 271.246598][ T849] pwc: recv_control_msg error -71 req 04 val 1500 [ 271.260782][ T849] pwc: recv_control_msg error -71 req 02 val 2500 [ 271.280476][ T849] pwc: recv_control_msg error -71 req 02 val 2400 [ 271.303804][ T849] pwc: recv_control_msg error -71 req 02 val 2600 [ 271.327850][ T849] pwc: recv_control_msg error -71 req 02 val 2900 [ 271.335047][ T849] pwc: recv_control_msg error -71 req 02 val 2800 [ 271.349672][ T849] pwc: recv_control_msg error -71 req 04 val 1100 [ 271.382771][ T849] pwc: recv_control_msg error -71 req 04 val 1200 [ 271.403375][ T849] pwc: Registered as video103. [ 271.419469][ T849] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input16 [ 271.466257][ T849] usb 5-1: USB disconnect, device number 49 [ 271.634433][ T9283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.653869][ T9283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.884454][ T9288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1052'. [ 272.677534][ T9310] comedi comedi3: ni_at_a2150: I/O port conflict (0x4f27,28) [ 272.866909][ T9312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 272.876183][ T9312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 272.887185][ T9312] sctp: [Deprecated]: syz.0.1060 (pid 9312) Use of struct sctp_assoc_value in delayed_ack socket option. [ 272.887185][ T9312] Use struct sctp_sack_info instead [ 273.005518][ T9314] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1061'. [ 273.087685][ T9317] binder: 9316:9317 unknown command 0 [ 273.093120][ T9317] binder: 9316:9317 ioctl c0306201 200000000080 returned -22 [ 273.185525][ T51] Bluetooth: hci0: Malformed HCI Event [ 273.519668][ T9331] bridge0: port 3(hsr_slave_0) entered blocking state [ 273.527290][ T9331] bridge0: port 3(hsr_slave_0) entered disabled state [ 273.534193][ T9331] hsr_slave_0: entered allmulticast mode [ 273.542408][ T9331] hsr_slave_0: left allmulticast mode [ 273.608648][ T9333] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1067'. [ 274.002813][ T9344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1070'. [ 274.330455][ T9347] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1071'. [ 274.915820][ T849] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 275.065830][ T43] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 275.075991][ T849] usb 2-1: Using ep0 maxpacket: 8 [ 275.083482][ T849] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 275.092884][ T849] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.115052][ T849] pvrusb2: Hardware description: Terratec Grabster AV400 [ 275.122205][ T849] pvrusb2: ********** [ 275.126504][ T849] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 275.137096][ T849] pvrusb2: Important functionality might not be entirely working. [ 275.144913][ T849] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 275.156304][ T849] pvrusb2: ********** [ 275.215817][ T43] usb 5-1: Using ep0 maxpacket: 8 [ 275.229784][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.240235][ T43] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 275.249356][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.264523][ T43] usb 5-1: config 0 descriptor?? [ 275.319987][ T2348] pvrusb2: Invalid write control endpoint [ 275.411346][ T2348] pvrusb2: Invalid write control endpoint [ 275.421674][ T2348] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 275.433184][ T2348] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 275.444920][ T2348] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 275.470267][ T2348] pvrusb2: Device being rendered inoperable [ 275.485954][ T2348] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 275.499634][ T2348] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 275.537625][ T2348] pvrusb2: Attached sub-driver cx25840 [ 275.550935][ T2348] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 275.562598][ T2348] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 275.594932][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1079'. [ 275.600377][ T927] usb 2-1: USB disconnect, device number 57 [ 275.685619][ T43] usbhid 5-1:0.0: can't add hid device: -71 [ 275.711219][ T43] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 275.741525][ T43] usb 5-1: USB disconnect, device number 50 [ 275.829693][ T9379] tmpfs: Bad value for 'mpol' [ 277.295872][ T849] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 277.461432][ T849] usb 2-1: unable to get BOS descriptor or descriptor too short [ 277.486182][ T5946] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 277.495531][ T849] usb 2-1: config 1 has an invalid interface number: 255 but max is 1 [ 277.516559][ T849] usb 2-1: config 1 has no interface number 1 [ 277.522729][ T849] usb 2-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 277.546580][ T849] usb 2-1: config 1 interface 0 has no altsetting 0 [ 277.559799][ T849] usb 2-1: config 1 interface 255 has no altsetting 0 [ 277.572846][ T849] usb 2-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 277.595905][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.603946][ T849] usb 2-1: Product: syz [ 277.625161][ T849] usb 2-1: Manufacturer: syz [ 277.630282][ T849] usb 2-1: SerialNumber: syz [ 277.655926][ T5946] usb 5-1: Using ep0 maxpacket: 32 [ 277.662846][ T9422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 277.677716][ T5946] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 277.688173][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.695401][ T9422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 277.703208][ T5946] usb 5-1: Product: syz [ 277.709811][ T5946] usb 5-1: Manufacturer: syz [ 277.714493][ T5946] usb 5-1: SerialNumber: syz [ 277.725716][ T5946] usb 5-1: config 0 descriptor?? [ 277.746093][ T5946] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 277.829294][ T9428] /dev/rnullb0: Can't lookup blockdev [ 278.330544][ T9435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 278.614882][ T9443] netlink: 'syz.0.1109': attribute type 1 has an invalid length. [ 278.624439][ T9443] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1109'. [ 278.807103][ T9447] netlink: 'syz.0.1110': attribute type 10 has an invalid length. [ 278.815108][ T9447] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1110'. [ 279.152850][ T5946] gspca_topro: Sensor soi763a [ 279.248006][ T9457] /dev/rnullb0: Can't lookup blockdev [ 279.354722][ T984] usb 5-1: USB disconnect, device number 51 [ 280.233390][ T849] smsusb:smsusb_probe: board id=8, interface number 0 [ 280.279632][ T849] smsusb:smsusb_probe: board id=8, interface number 255 [ 280.321553][ T849] usb 2-1: USB disconnect, device number 58 [ 280.856619][ T9494] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.865629][ T9494] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.001643][ T9501] 9pnet_fd: Insufficient options for proto=fd [ 281.110641][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1130'. [ 281.121838][ T9506] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1130'. [ 281.296785][ T43] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 281.471540][ T43] usb 2-1: unable to get BOS descriptor or descriptor too short [ 281.483255][ T43] usb 2-1: config 6 has an invalid interface number: 200 but max is 0 [ 281.493294][ T43] usb 2-1: config 6 has no interface number 0 [ 281.503115][ T43] usb 2-1: config 6 interface 200 has no altsetting 0 [ 281.518260][ T43] usb 2-1: New USB device found, idVendor=05d8, idProduct=810c, bcdDevice=18.5f [ 281.530412][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.541649][ T43] usb 2-1: Product: syz [ 281.546958][ T43] usb 2-1: Manufacturer: syz [ 281.551669][ T43] usb 2-1: SerialNumber: syz [ 281.555125][ T9516] syz.0.1134: attempt to access beyond end of device [ 281.555125][ T9516] nbd0: rw=0, sector=16, nr_sectors = 2 limit=0 [ 281.565946][ T984] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 281.745907][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 281.761051][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.786271][ T984] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 281.804725][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.819226][ T984] usb 5-1: config 0 descriptor?? [ 281.871522][ T9527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 281.882131][ T9527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 281.953767][ T9527] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1139'. [ 282.008480][ T43] dvb-usb: found a 'Artec T14 - USB2.0 DVB-T' in warm state. [ 282.209398][ T43] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.219521][ T43] dvbdev: DVB: registering new adapter (Artec T14 - USB2.0 DVB-T) [ 282.227625][ T43] usb 2-1: media controller created [ 282.246322][ T984] usbhid 5-1:0.0: can't add hid device: -71 [ 282.253201][ T984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 282.273649][ T43] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.292015][ T984] usb 5-1: USB disconnect, device number 52 [ 282.424724][ T43] dvb-usb: bulk message failed: -71 (6/0) [ 282.434581][ T43] dvb-usb: bulk message failed: -71 (6/0) [ 282.440596][ T43] dvb-usb: no frontend was attached by 'Artec T14 - USB2.0 DVB-T' [ 282.452763][ T43] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 282.466464][ T43] dvb-usb: schedule remote query interval to 150 msecs. [ 282.473442][ T43] dvb-usb: Artec T14 - USB2.0 DVB-T successfully initialized and connected. [ 282.485979][ T43] usb 2-1: USB disconnect, device number 59 [ 282.567823][ T43] dvb-usb: Artec T14 - USB2.0 DVB-T successfully deinitialized and disconnected. [ 282.704938][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.719108][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 282.734025][ T9549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 282.748152][ T9549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.404406][ T9578] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.440069][ T9578] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 283.462345][ T9578] rtc_cmos 00:00: Alarms can be up to one day in the future [ 283.885888][ T43] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 284.066197][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 284.073748][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.087592][ T43] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 284.098495][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.118330][ T43] usb 2-1: config 0 descriptor?? [ 284.503668][ T9598] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 284.567938][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 284.597883][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 284.629146][ T43] usb 2-1: USB disconnect, device number 60 [ 285.535810][ T43] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 285.685939][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 285.693510][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.705476][ T43] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 285.715532][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.735315][ T43] usb 2-1: config 0 descriptor?? [ 285.862546][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 286.179993][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 286.218295][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 286.269534][ T43] usb 2-1: USB disconnect, device number 61 [ 286.469918][ T9655] /dev/rnullb0: Can't lookup blockdev [ 286.488511][ T9657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.504401][ T9657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.529457][ T9659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 286.976385][ T9671] overlayfs: failed to resolve './file1': -2 [ 287.898556][ T9704] /dev/rnullb0: Can't open blockdev [ 288.064117][ T9708] netlink: 'syz.0.1205': attribute type 29 has an invalid length. [ 288.083576][ T9708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 288.104003][ T9708] netlink: 'syz.0.1205': attribute type 29 has an invalid length. [ 288.126453][ T9708] netlink: 'syz.0.1205': attribute type 29 has an invalid length. [ 288.223776][ T9711] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.254786][ T9713] overlayfs: failed to clone upperpath [ 288.261609][ T9711] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.043054][ T9741] /dev/rnullb0: Can't lookup blockdev [ 289.226134][ T927] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 289.415800][ T927] usb 5-1: Using ep0 maxpacket: 8 [ 289.434666][ T927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.449857][ T927] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 289.459708][ T927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.476398][ T927] usb 5-1: config 0 descriptor?? [ 291.177459][ T9763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 291.197373][ T9763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 291.945846][ T30] audit: type=1326 audit(1753181495.545:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9769 comm="syz.0.1225" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc1e738e9a9 code=0x0 [ 291.991912][ T927] usbhid 5-1:0.0: can't add hid device: -71 [ 291.998247][ T927] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 292.020496][ T927] usb 5-1: USB disconnect, device number 53 [ 292.805200][ T9795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.815525][ T9795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.916022][ T5946] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 293.078165][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.088542][ T5946] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 293.097691][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.107808][ T5946] usb 2-1: config 0 descriptor?? [ 293.117191][ T5946] pwc: Askey VC010 type 2 USB webcam detected. [ 293.319089][ T9793] netlink: 'syz.1.1233': attribute type 1 has an invalid length. [ 293.327895][ T5946] pwc: send_video_command error -71 [ 293.340837][ T5946] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 293.349785][ T5946] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 293.363235][ T5946] usb 2-1: USB disconnect, device number 62 [ 293.869318][ T5946] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 293.982391][ T9817] nfs: Bad value for 'source' [ 294.048432][ T5946] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 294.062148][ T5946] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 294.079131][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.106447][ T5946] usb 2-1: config 0 descriptor?? [ 294.123095][ T5946] pwc: Askey VC010 type 2 USB webcam detected. [ 294.169334][ T9820] netlink: 'syz.0.1243': attribute type 4 has an invalid length. [ 294.238805][ T9822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.248952][ T9822] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.521878][ T5946] pwc: recv_control_msg error -32 req 02 val 2b00 [ 294.529650][ T5946] pwc: recv_control_msg error -32 req 02 val 2700 [ 294.542239][ T5946] pwc: recv_control_msg error -32 req 02 val 2c00 [ 294.550190][ T5946] pwc: recv_control_msg error -32 req 04 val 1000 [ 294.561367][ T5946] pwc: recv_control_msg error -32 req 04 val 1300 [ 294.570635][ T5946] pwc: recv_control_msg error -32 req 04 val 1400 [ 294.578689][ T5946] pwc: recv_control_msg error -32 req 02 val 2000 [ 294.586536][ T5946] pwc: recv_control_msg error -32 req 02 val 2100 [ 294.594526][ T5946] pwc: recv_control_msg error -32 req 04 val 1500 [ 294.602935][ T5946] pwc: recv_control_msg error -32 req 02 val 2500 [ 294.900428][ T9838] tipc: Enabling of bearer rejected, media not registered [ 295.026262][ T984] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 295.216050][ T984] usb 5-1: Using ep0 maxpacket: 8 [ 295.216907][ T5946] pwc: recv_control_msg error -71 req 02 val 2800 [ 295.230584][ T984] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.237025][ T5946] pwc: recv_control_msg error -71 req 04 val 1100 [ 295.249378][ T5946] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.255949][ T984] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 295.265009][ T984] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.275959][ T5946] pwc: Registered as video103. [ 295.300407][ T5946] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input19 [ 295.335224][ T984] usb 5-1: config 0 descriptor?? [ 295.344937][ T5946] usb 2-1: USB disconnect, device number 63 [ 295.589658][ T9849] netlink: 'syz.3.1256': attribute type 1 has an invalid length. [ 295.598018][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 296.325937][ T43] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 296.496121][ T43] usb 2-1: Using ep0 maxpacket: 8 [ 296.511880][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.537594][ T43] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 296.569697][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.589641][ T43] usb 2-1: config 0 descriptor?? [ 297.017113][ T43] usbhid 2-1:0.0: can't add hid device: -71 [ 297.023833][ T43] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 297.056304][ T43] usb 2-1: USB disconnect, device number 64 [ 297.725809][ T9873] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1264'. [ 297.772455][ T984] usbhid 5-1:0.0: can't add hid device: -71 [ 297.795559][ T984] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 297.830239][ T984] usb 5-1: USB disconnect, device number 54 [ 297.942124][ T9880] FAULT_INJECTION: forcing a failure. [ 297.942124][ T9880] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 297.975724][ T9880] CPU: 0 UID: 0 PID: 9880 Comm: syz.4.1268 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 297.975753][ T9880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 297.975765][ T9880] Call Trace: [ 297.975773][ T9880] [ 297.975782][ T9880] dump_stack_lvl+0x189/0x250 [ 297.975815][ T9880] ? __pfx____ratelimit+0x10/0x10 [ 297.975841][ T9880] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.975868][ T9880] ? __pfx__printk+0x10/0x10 [ 297.975910][ T9880] should_fail_ex+0x414/0x560 [ 297.975941][ T9880] _copy_to_user+0x31/0xb0 [ 297.975966][ T9880] simple_read_from_buffer+0xe1/0x170 [ 297.975997][ T9880] proc_fail_nth_read+0x1b3/0x220 [ 297.976022][ T9880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.976046][ T9880] ? rw_verify_area+0x2a6/0x4d0 [ 297.976067][ T9880] ? __lock_acquire+0xab9/0xd20 [ 297.976086][ T9880] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 297.976109][ T9880] vfs_read+0x1fd/0x980 [ 297.976131][ T9880] ? fdget_pos+0x247/0x320 [ 297.976152][ T9880] ? __pfx___mutex_lock+0x10/0x10 [ 297.976179][ T9880] ? __pfx_vfs_read+0x10/0x10 [ 297.976205][ T9880] ? __fget_files+0x2a/0x420 [ 297.976237][ T9880] ? __fget_files+0x3a0/0x420 [ 297.976263][ T9880] ? __fget_files+0x2a/0x420 [ 297.976301][ T9880] ksys_read+0x145/0x250 [ 297.976328][ T9880] ? __pfx_ksys_read+0x10/0x10 [ 297.976349][ T9880] ? rcu_is_watching+0x15/0xb0 [ 297.976379][ T9880] ? do_syscall_64+0xbe/0x3b0 [ 297.976412][ T9880] do_syscall_64+0xfa/0x3b0 [ 297.976437][ T9880] ? lockdep_hardirqs_on+0x9c/0x150 [ 297.976463][ T9880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.976482][ T9880] ? clear_bhb_loop+0x60/0xb0 [ 297.976506][ T9880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.976523][ T9880] RIP: 0033:0x7fc2a798d3bc [ 297.976541][ T9880] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 297.976557][ T9880] RSP: 002b:00007fc2a8774030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 297.976587][ T9880] RAX: ffffffffffffffda RBX: 00007fc2a7bb5fa0 RCX: 00007fc2a798d3bc [ 297.976601][ T9880] RDX: 000000000000000f RSI: 00007fc2a87740a0 RDI: 0000000000000003 [ 297.976613][ T9880] RBP: 00007fc2a8774090 R08: 0000000000000000 R09: 0000000000000000 [ 297.976625][ T9880] R10: 0000000040000140 R11: 0000000000000246 R12: 0000000000000001 [ 297.976638][ T9880] R13: 0000000000000000 R14: 00007fc2a7bb5fa0 R15: 00007ffee3869de8 [ 297.976671][ T9880] [ 298.415858][ T9891] cgroup: Unknown subsys name 'mask' [ 298.917864][ T9903] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 298.934130][ T9903] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.490271][ T9929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1287'. [ 299.627144][ T9936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 299.636499][ T9936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 299.662247][ T9936] comedi: No check for data length of config insn id 7 is implemented [ 299.670668][ T9936] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 299.679972][ T9936] comedi: Assuming n=15 is correct [ 300.238653][ T9945] netlink: 892 bytes leftover after parsing attributes in process `syz.1.1293'. [ 300.613724][ T9963] netlink: 'syz.0.1299': attribute type 15 has an invalid length. [ 300.621784][ T9963] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1299'. [ 300.776240][ T5946] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 300.849519][ T9971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.913023][ T9971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 300.935775][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 300.942925][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.952841][ T5946] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 300.961995][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.973171][ T5946] usb 2-1: config 0 descriptor?? [ 300.979973][ T9971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.189737][ T9973] /dev/rnullb0: Can't lookup blockdev [ 301.361159][ T9980] /dev/rnullb0: Can't lookup blockdev [ 301.423456][ T5946] usbhid 2-1:0.0: can't add hid device: -71 [ 301.455879][ T5946] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 301.495072][ T5946] usb 2-1: USB disconnect, device number 65 [ 301.725778][ T849] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 301.875740][ T849] usb 5-1: Using ep0 maxpacket: 8 [ 301.882398][ T849] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.892303][ T849] usb 5-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 301.901381][ T849] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.912400][ T849] usb 5-1: config 0 descriptor?? [ 302.315884][ T5946] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 302.330397][ T849] usbhid 5-1:0.0: can't add hid device: -71 [ 302.336663][ T849] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 302.347856][ T849] usb 5-1: USB disconnect, device number 55 [ 302.475813][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 302.493029][ T5946] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 302.502224][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.510337][ T5946] usb 2-1: Product: syz [ 302.514537][ T5946] usb 2-1: Manufacturer: syz [ 302.519321][ T5946] usb 2-1: SerialNumber: syz [ 302.526325][ T5946] usb 2-1: config 0 descriptor?? [ 302.856169][ T5946] usb 2-1: USB disconnect, device number 66 [ 303.450197][T10013] /dev/rnullb0: Can't lookup blockdev [ 303.562249][T10017] overlayfs: failed to clone upperpath [ 303.579261][T10017] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 303.645816][T10017] CIFS mount error: No usable UNC path provided in device string! [ 303.645816][T10017] [ 303.674137][T10017] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 303.762607][T10022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 303.775391][T10022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 303.945986][ T5946] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 304.125739][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 304.140614][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.153502][ T5946] usb 2-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 304.164571][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.187277][ T5946] usb 2-1: config 0 descriptor?? [ 304.277337][T10029] random: crng reseeded on system resumption [ 304.622322][ T5946] usbhid 2-1:0.0: can't add hid device: -71 [ 304.652534][ T5946] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 304.689282][ T5946] usb 2-1: USB disconnect, device number 67 [ 304.913322][T10053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1335'. [ 305.507838][T10073] netlink: 'syz.1.1341': attribute type 6 has an invalid length. [ 305.517760][T10073] netlink: 'syz.1.1341': attribute type 7 has an invalid length. [ 305.525519][T10073] netlink: 'syz.1.1341': attribute type 7 has an invalid length. [ 305.537665][T10073] netlink: 12882 bytes leftover after parsing attributes in process `syz.1.1341'. [ 305.785735][ T984] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 305.882004][T10081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.893588][T10081] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 305.949530][ T984] usb 2-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 305.968385][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 [ 305.981856][ T984] usb 2-1: SerialNumber: syz [ 305.991703][ T984] usb 2-1: config 0 descriptor?? [ 306.011049][T10087] netlink: 'syz.4.1345': attribute type 29 has an invalid length. [ 306.023660][T10087] netlink: 'syz.4.1345': attribute type 29 has an invalid length. [ 306.231954][T10095] kAFS: unable to lookup cell '/yz1' [ 306.335878][ T5946] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 306.408544][ T984] hackrf 2-1:0.0: usb_control_msg() failed -71 request 0f [ 306.419052][ T984] hackrf 2-1:0.0: Could not detect board [ 306.424762][ T984] hackrf 2-1:0.0: probe with driver hackrf failed with error -71 [ 306.435510][ T984] usb 2-1: USB disconnect, device number 68 [ 306.487121][ T5946] usb 5-1: Using ep0 maxpacket: 8 [ 306.497451][ T5946] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 306.506663][ T5946] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.516536][ T5946] usb 5-1: Product: syz [ 306.520736][ T5946] usb 5-1: Manufacturer: syz [ 306.525343][ T5946] usb 5-1: SerialNumber: syz [ 306.533149][ T5946] usb 5-1: config 0 descriptor?? [ 307.004819][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1352'. [ 307.205327][T10115] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 307.218203][T10115] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.276147][ T984] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 307.349864][ T5946] usb write operation failed. (-71) [ 307.356926][ T5946] usb 5-1: dvb_usb_v2: found a 'Terratec H7' in cold state [ 307.365006][ T5946] usb 5-1: Direct firmware load for dvb-usb-terratec-h7-az6007.fw failed with error -2 [ 307.374759][ T5946] usb 5-1: Falling back to sysfs fallback for: dvb-usb-terratec-h7-az6007.fw [ 307.405943][ T984] usb 2-1: device descriptor read/64, error -71 [ 307.655784][ T984] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 307.787322][ T984] usb 2-1: device descriptor read/64, error -71 [ 307.921386][ T984] usb usb2-port1: attempt power cycle [ 308.275795][ T984] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 308.306506][ T984] usb 2-1: device descriptor read/8, error -71 [ 308.411692][T10144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 308.424734][T10144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 308.545864][ T984] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 308.580132][ T984] usb 2-1: device descriptor read/8, error -71 [ 308.696368][ T984] usb usb2-port1: unable to enumerate USB device [ 308.997949][T10152] /dev/rnullb0: Can't lookup blockdev [ 309.979686][T10170] tmpfs: Bad value for 'grpquota_block_hardlimit' [ 310.118920][T10174] 9pnet_fd: Insufficient options for proto=fd [ 312.107993][T10191] FAULT_INJECTION: forcing a failure. [ 312.107993][T10191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 312.147774][T10191] CPU: 0 UID: 0 PID: 10191 Comm: syz.4.1380 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 312.147805][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 312.147817][T10191] Call Trace: [ 312.147825][T10191] [ 312.147834][T10191] dump_stack_lvl+0x189/0x250 [ 312.147865][T10191] ? __pfx____ratelimit+0x10/0x10 [ 312.147892][T10191] ? __pfx_dump_stack_lvl+0x10/0x10 [ 312.147917][T10191] ? __pfx__printk+0x10/0x10 [ 312.147943][T10191] ? __might_fault+0xb0/0x130 [ 312.147975][T10191] should_fail_ex+0x414/0x560 [ 312.147994][T10191] _copy_from_iter+0x1db/0x16f0 [ 312.148008][T10191] ? rcu_is_watching+0x15/0xb0 [ 312.148024][T10191] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 312.148037][T10191] ? __pfx__copy_from_iter+0x10/0x10 [ 312.148056][T10191] ? __build_skb_around+0x257/0x3e0 [ 312.148071][T10191] ? netlink_sendmsg+0x642/0xb30 [ 312.148086][T10191] ? skb_put+0x11b/0x210 [ 312.148099][T10191] netlink_sendmsg+0x6b2/0xb30 [ 312.148122][T10191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.148141][T10191] ? aa_sock_msg_perm+0xf1/0x1d0 [ 312.148160][T10191] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.148176][T10191] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.148193][T10191] __sock_sendmsg+0x219/0x270 [ 312.148210][T10191] __sys_sendto+0x3bd/0x520 [ 312.148224][T10191] ? __pfx___sys_sendto+0x10/0x10 [ 312.148241][T10191] ? count_memcg_event_mm+0x21/0x260 [ 312.148260][T10191] ? exc_page_fault+0x76/0xf0 [ 312.148277][T10191] ? do_user_addr_fault+0xc8a/0x1390 [ 312.148293][T10191] __x64_sys_sendto+0xde/0x100 [ 312.148306][T10191] do_syscall_64+0xfa/0x3b0 [ 312.148322][T10191] ? lockdep_hardirqs_on+0x9c/0x150 [ 312.148338][T10191] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.148349][T10191] ? clear_bhb_loop+0x60/0xb0 [ 312.148363][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.148373][T10191] RIP: 0033:0x7fc2a799083c [ 312.148386][T10191] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 312.148395][T10191] RSP: 002b:00007fc2a8751ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 312.148409][T10191] RAX: ffffffffffffffda RBX: 00007fc2a8751fc0 RCX: 00007fc2a799083c [ 312.148417][T10191] RDX: 0000000000000020 RSI: 00007fc2a8752010 RDI: 0000000000000003 [ 312.148425][T10191] RBP: 0000000000000000 R08: 00007fc2a8751f14 R09: 000000000000000c [ 312.148431][T10191] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 312.148438][T10191] R13: 00007fc2a8751f68 R14: 00007fc2a8752010 R15: 0000000000000000 [ 312.148464][T10191] [ 312.411699][T10140] Set syz1 is full, maxelem 65536 reached [ 313.442101][T10202] syz.1.1384: attempt to access beyond end of device [ 313.442101][T10202] loop1: rw=0, sector=64, nr_sectors = 2 limit=0 [ 313.475885][T10202] isofs_fill_super: bread failed, dev=loop1, iso_blknum=16, block=32 [ 313.746166][T10221] overlayfs: failed to clone upperpath [ 313.758272][T10221] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 313.768337][T10221] overlayfs: missing 'lowerdir' [ 313.896366][ T984] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 314.036498][T10229] kvm: pic: single mode not supported [ 314.079729][ T984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.103869][ T984] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 314.127491][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.154002][ T984] usb 2-1: config 0 descriptor?? [ 314.157924][T10239] cgroup: Invalid name [ 314.175408][ T984] pwc: Askey VC010 type 2 USB webcam detected. [ 314.384237][T10215] netlink: 'syz.1.1389': attribute type 1 has an invalid length. [ 314.399906][ T984] pwc: send_video_command error -71 [ 314.417348][ T984] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 314.424987][ T984] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 314.447216][ T984] usb 2-1: USB disconnect, device number 73 [ 314.618704][T10246] FAT-fs (rnullb0): bogus number of reserved sectors [ 314.631213][T10246] FAT-fs (rnullb0): Can't find a valid FAT filesystem [ 314.736577][T10250] sctp: [Deprecated]: syz.0.1401 (pid 10250) Use of struct sctp_assoc_value in delayed_ack socket option. [ 314.736577][T10250] Use struct sctp_sack_info instead [ 314.915834][ T984] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 315.087507][ T984] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.097933][ T984] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.107578][ T984] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.119039][ T984] usb 2-1: config 0 descriptor?? [ 315.129550][ T984] pwc: Askey VC010 type 2 USB webcam detected. [ 315.529429][ T984] pwc: recv_control_msg error -32 req 02 val 2b00 [ 315.537197][ T984] pwc: recv_control_msg error -32 req 02 val 2700 [ 315.544947][ T984] pwc: recv_control_msg error -32 req 02 val 2c00 [ 315.552836][ T984] pwc: recv_control_msg error -32 req 04 val 1000 [ 315.560127][ T984] pwc: recv_control_msg error -32 req 04 val 1300 [ 315.567642][ T984] pwc: recv_control_msg error -32 req 04 val 1400 [ 315.574712][ T984] pwc: recv_control_msg error -32 req 02 val 2000 [ 315.582524][ T984] pwc: recv_control_msg error -32 req 02 val 2100 [ 315.597185][ T984] pwc: recv_control_msg error -32 req 04 val 1500 [ 315.604838][ T984] pwc: recv_control_msg error -32 req 02 val 2500 [ 315.642223][T10264] qnx4: no qnx4 filesystem (no root dir). [ 315.745483][T10268] x_tables: duplicate underflow at hook 1 [ 315.804275][T10270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1409'. [ 316.018080][ T984] pwc: recv_control_msg error -71 req 02 val 2900 [ 316.032458][ T984] pwc: recv_control_msg error -71 req 02 val 2800 [ 316.048491][ T984] pwc: recv_control_msg error -71 req 04 val 1100 [ 316.067072][ T984] pwc: recv_control_msg error -71 req 04 val 1200 [ 316.114955][ T984] pwc: Registered as video103. [ 316.129340][ T984] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input21 [ 316.191521][ T984] usb 2-1: USB disconnect, device number 74 [ 316.282129][T10287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 316.336367][T10287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 316.651914][ T51] Bluetooth: hci0: ACL packet for unknown connection handle 1279 [ 316.855189][T10308] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1425'. [ 317.074383][T10311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.099522][T10311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.184962][T10320] IPVS: Error connecting to the multicast addr [ 317.752853][T10322] netlink: 'syz.3.1431': attribute type 1 has an invalid length. [ 317.861735][ T30] audit: type=1326 audit(1753181521.465:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10323 comm="syz.1.1432" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6e5ed8e9a9 code=0x0 [ 318.719260][T10334] binder: 10333:10334 ioctl 5411 200000000240 returned -22 [ 318.730317][T10334] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 318.740917][T10334] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1436'. [ 319.686304][T10349] overlayfs: missing 'lowerdir' [ 319.843449][ T51] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 320.097671][T10371] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 320.115733][T10371] overlayfs: missing 'lowerdir' [ 320.126484][T10371] MTD: Attempt to mount non-MTD device "/dev/rnullb0" [ 320.133813][T10371] VFS: Can't find a romfs filesystem on dev rnullb0. [ 320.133813][T10371] [ 320.509563][ T30] audit: type=1800 audit(1753181524.115:18): pid=10373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1454" name="file1" dev="tmpfs" ino=1874 res=0 errno=0 [ 321.103042][T10405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 321.116811][T10405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 321.609867][T10409] omfs: Invalid superblock (0) [ 321.693816][T10413] XFS (rnullb0): Invalid superblock magic number [ 321.793916][T10423] FAULT_INJECTION: forcing a failure. [ 321.793916][T10423] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.807383][T10423] CPU: 1 UID: 0 PID: 10423 Comm: syz.0.1469 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 321.807410][T10423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.807421][T10423] Call Trace: [ 321.807429][T10423] [ 321.807438][T10423] dump_stack_lvl+0x189/0x250 [ 321.807468][T10423] ? __pfx____ratelimit+0x10/0x10 [ 321.807496][T10423] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.807522][T10423] ? __pfx__printk+0x10/0x10 [ 321.807548][T10423] ? __might_fault+0xb0/0x130 [ 321.807583][T10423] should_fail_ex+0x414/0x560 [ 321.807613][T10423] _copy_from_user+0x2d/0xb0 [ 321.807643][T10423] ___sys_sendmsg+0x158/0x2a0 [ 321.807668][T10423] ? __pfx____sys_sendmsg+0x10/0x10 [ 321.807731][T10423] ? __fget_files+0x2a/0x420 [ 321.807758][T10423] ? __fget_files+0x3a0/0x420 [ 321.807797][T10423] __x64_sys_sendmsg+0x19b/0x260 [ 321.807821][T10423] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 321.807854][T10423] ? __pfx_ksys_write+0x10/0x10 [ 321.807876][T10423] ? rcu_is_watching+0x15/0xb0 [ 321.807906][T10423] ? do_syscall_64+0xbe/0x3b0 [ 321.807939][T10423] do_syscall_64+0xfa/0x3b0 [ 321.807964][T10423] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.807991][T10423] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.808011][T10423] ? clear_bhb_loop+0x60/0xb0 [ 321.808035][T10423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.808053][T10423] RIP: 0033:0x7fc1e738e9a9 [ 321.808071][T10423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.808087][T10423] RSP: 002b:00007fc1e8247038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 321.808109][T10423] RAX: ffffffffffffffda RBX: 00007fc1e75b5fa0 RCX: 00007fc1e738e9a9 [ 321.808122][T10423] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 321.808134][T10423] RBP: 00007fc1e8247090 R08: 0000000000000000 R09: 0000000000000000 [ 321.808146][T10423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.808156][T10423] R13: 0000000000000000 R14: 00007fc1e75b5fa0 R15: 00007ffe550216e8 [ 321.808188][T10423] [ 322.084638][T10427] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.095110][T10427] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.225491][T10437] netlink: 'syz.0.1474': attribute type 8 has an invalid length. [ 322.479239][T10446] sp0: Synchronizing with TNC [ 322.522063][T10442] [U]  [ 323.026368][T10460] netlink: 'syz.1.1482': attribute type 7 has an invalid length. [ 323.057345][T10460] : entered promiscuous mode [ 323.180548][T10464] netlink: 'syz.3.1483': attribute type 1 has an invalid length. [ 323.301190][T10467] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1485'. [ 323.320880][T10467] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input22 [ 323.514771][T10476] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 323.524021][T10476] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 323.532904][T10476] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 323.579028][T10477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.609090][T10477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.960146][T10520] overlayfs: failed to clone upperpath [ 325.345846][ T849] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 325.499297][ T849] usb 2-1: No LPM exit latency info found, disabling LPM. [ 325.508199][ T849] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 325.518592][ T849] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 325.530093][ T849] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 325.539273][ T849] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.547356][ T849] usb 2-1: Product: П [ 325.551456][ T849] usb 2-1: Manufacturer: Ⰱ [ 325.556120][ T849] usb 2-1: SerialNumber: 䑃 [ 325.688581][ T31] INFO: task kworker/0:4:5911 blocked for more than 143 seconds. [ 325.696487][ T31] Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 [ 325.703620][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 325.712494][ T31] task:kworker/0:4 state:D stack:23496 pid:5911 tgid:5911 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 325.724644][ T31] Workqueue: usb_hub_wq hub_event [ 325.729925][ T31] Call Trace: [ 325.733223][ T31] [ 325.736540][ T31] __schedule+0x1737/0x4d30 [ 325.741259][ T31] ? check_path+0x21/0x40 [ 325.746116][ T31] ? schedule+0x165/0x360 [ 325.750473][ T31] ? __lock_acquire+0xab9/0xd20 [ 325.755355][ T31] ? __pfx___schedule+0x10/0x10 [ 325.760331][ T31] ? schedule+0x91/0x360 [ 325.765428][ T31] schedule+0x165/0x360 [ 325.770451][ T31] schedule_timeout+0x9a/0x270 [ 325.775266][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 325.780883][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.786334][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 325.791664][ T31] ? wait_for_completion+0x267/0x5d0 [ 325.797233][ T31] wait_for_completion+0x2bf/0x5d0 [ 325.802397][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 325.808301][ T31] i2c_del_adapter+0x581/0x6e0 [ 325.813094][ T31] ? up_write+0x1c4/0x420 [ 325.817751][ T31] ? __pfx_i2c_del_adapter+0x10/0x10 [ 325.823067][ T31] ? __pfx_cp2112_remove+0x10/0x10 [ 325.828229][ T31] ? sysfs_remove_group+0x23d/0x2c0 [ 325.833464][ T31] ? __pfx_cp2112_remove+0x10/0x10 [ 325.841076][ T31] cp2112_remove+0x5b/0x100 [ 325.848501][ T31] hid_device_remove+0x225/0x370 [ 325.853758][ T31] ? __pfx_hid_device_remove+0x10/0x10 [ 325.859760][ T31] device_release_driver_internal+0x46c/0x800 [ 325.866300][ T31] bus_remove_device+0x34d/0x410 [ 325.871522][ T31] device_del+0x511/0x8e0 [ 325.876221][ T31] ? __pfx_device_del+0x10/0x10 [ 325.881210][ T31] hid_destroy_device+0x6b/0x1b0 [ 325.886463][ T31] usbhid_disconnect+0x9f/0xc0 [ 325.891301][ T31] usb_unbind_interface+0x26b/0x910 [ 325.896671][ T31] ? __pfx_usb_unbind_interface+0x10/0x10 [ 325.902443][ T31] device_release_driver_internal+0x4d6/0x800 [ 325.908659][ T31] bus_remove_device+0x34d/0x410 [ 325.913640][ T31] device_del+0x511/0x8e0 [ 325.918081][ T31] ? kfree+0x18e/0x440 [ 325.922204][ T31] ? __pfx_device_del+0x10/0x10 [ 325.927211][ T31] ? kobject_put+0x446/0x480 [ 325.931845][ T31] usb_disable_device+0x3e9/0x8a0 [ 325.936937][ T31] usb_disconnect+0x330/0x950 [ 325.941655][ T31] hub_event+0x1cf5/0x4a20 [ 325.946172][ T31] ? do_raw_spin_lock+0x121/0x290 [ 325.951233][ T31] ? register_lock_class+0x51/0x320 [ 325.956579][ T31] ? __pfx_hub_event+0x10/0x10 [ 325.961373][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 325.967396][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 325.972729][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 325.978732][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 325.984682][ T31] process_scheduled_works+0xade/0x17b0 [ 325.989436][T10524] gfs2: not a GFS2 filesystem [ 325.990518][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.001143][ T31] worker_thread+0x8a0/0xda0 [ 326.008754][ T31] kthread+0x70e/0x8a0 [ 326.013073][ T31] ? __pfx_worker_thread+0x10/0x10 [ 326.018733][ T31] ? __pfx_kthread+0x10/0x10 [ 326.023453][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.023707][ T849] usb 2-1: 0:2 : does not exist [ 326.029024][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.029057][ T31] ? __pfx_kthread+0x10/0x10 [ 326.029089][ T31] ret_from_fork+0x3f9/0x770 [ 326.029119][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 326.053732][ T31] ? __switch_to_asm+0x39/0x70 [ 326.058578][ T31] ? __switch_to_asm+0x33/0x70 [ 326.063492][ T849] usb 2-1: USB disconnect, device number 75 [ 326.065679][ T31] ? __pfx_kthread+0x10/0x10 [ 326.074016][ T31] ret_from_fork_asm+0x1a/0x30 [ 326.082043][ T31] [ 326.085497][ T31] [ 326.085497][ T31] Showing all locks held in the system: [ 326.094435][ T31] 1 lock held by khungtaskd/31: [ 326.099797][ T31] #0: ffffffff8e53d8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 326.111032][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 326.114817][ T31] 3 locks held by kworker/0:2/849: [ 326.134793][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.149869][ T31] #1: ffffc900033f7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.161939][ T31] #2: ffff8881453cd198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 326.171262][ T31] 2 locks held by getty/5606: [ 326.176272][ T31] #0: ffff888033aba0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 326.186175][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 326.196452][ T31] 4 locks held by udevd/5848: [ 326.201138][ T31] #0: ffff88804fa450a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 326.210032][ T31] #1: ffff88805b658888 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 326.220244][ T31] #2: ffff88805d3500f8 (kn->active#19){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 326.229842][ T31] #3: ffff88805c4f1198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 326.239290][ T31] 6 locks held by kworker/0:4/5911: [ 326.244492][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.256807][ T31] #1: ffffc9000461fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.268737][ T31] #2: ffff8881453ea198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 326.277761][ T31] #3: ffff888027cc8198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x950 [ 326.287012][ T31] #4: ffff88805c1c7160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 326.297648][ T31] #5: ffff88805b71da20 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 326.308246][ T31] 6 locks held by kworker/0:5/5946: [ 326.313450][ T31] #0: ffff88823be1c148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 326.324928][ T31] #1: ffffc9000475fbc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 326.338242][ T31] #2: ffff88814576a198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 326.347286][ T31] #3: ffff88805c4f1198 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 326.356676][ T31] #4: ffff88805af06160 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x400 [ 326.366232][ T31] #5: ffffffff8e3e33b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 326.377110][ T31] 2 locks held by syz.0.1487/10476: [ 326.382442][ T31] #0: ffff88807ec5e250 (&devlink->lock_key){+.+.}-{4:4}, at: devlink_compat_flash_update+0x98/0x2d0 [ 326.393529][ T31] #1: ffffffff8e3e33b0 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xf0/0x2b0 [ 326.403999][ T31] [ 326.419050][ T31] ============================================= [ 326.419050][ T31] [ 326.427617][ T31] NMI backtrace for cpu 0 [ 326.427636][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 326.427657][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.427668][ T31] Call Trace: [ 326.427676][ T31] [ 326.427684][ T31] dump_stack_lvl+0x189/0x250 [ 326.427719][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.427746][ T31] ? __pfx__printk+0x10/0x10 [ 326.427787][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 326.427814][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 326.427839][ T31] ? __pfx__printk+0x10/0x10 [ 326.427870][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 326.427895][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 326.427922][ T31] watchdog+0xf93/0xfe0 [ 326.427948][ T31] ? watchdog+0x1de/0xfe0 [ 326.427975][ T31] kthread+0x70e/0x8a0 [ 326.428003][ T31] ? __pfx_watchdog+0x10/0x10 [ 326.428021][ T31] ? __pfx_kthread+0x10/0x10 [ 326.428047][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.428071][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.428093][ T31] ? __pfx_kthread+0x10/0x10 [ 326.428119][ T31] ret_from_fork+0x3f9/0x770 [ 326.428142][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 326.428172][ T31] ? __switch_to_asm+0x39/0x70 [ 326.428188][ T31] ? __switch_to_asm+0x33/0x70 [ 326.428203][ T31] ? __pfx_kthread+0x10/0x10 [ 326.428230][ T31] ret_from_fork_asm+0x1a/0x30 [ 326.428265][ T31] [ 326.428272][ T31] Sending NMI from CPU 0 to CPUs 1: [ 326.576767][ C1] NMI backtrace for cpu 1 [ 326.576785][ C1] CPU: 1 UID: 0 PID: 73 Comm: kworker/u8:4 Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 326.576804][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.576814][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 326.576840][ C1] RIP: 0010:get_stack_info+0x8/0xf0 [ 326.576861][ C1] Code: cc cc cc 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 41 57 41 56 <41> 55 41 54 53 48 89 cb 49 89 d6 49 89 f7 48 85 f6 74 07 48 85 ff [ 326.576874][ C1] RSP: 0018:ffffc9000210f250 EFLAGS: 00000246 [ 326.576887][ C1] RAX: 1ffff92000421e60 RBX: ffffc9000210f2c8 RCX: ffffc9000210f2e8 [ 326.576899][ C1] RDX: ffffc9000210f2c8 RSI: ffff88801cfb8000 RDI: ffffc9000210f268 [ 326.576909][ C1] RBP: ffffc9000210f301 R08: ffffc9000210f327 R09: 0000000000000000 [ 326.576920][ C1] R10: ffffc9000210f2c8 R11: fffff52000421e65 R12: ffffc9000210f268 [ 326.576931][ C1] R13: ffffc9000210f2e8 R14: ffffc9000210f2f0 R15: 1ffff92000421e5e [ 326.576943][ C1] FS: 0000000000000000(0000) GS:ffff8881258ab000(0000) knlGS:0000000000000000 [ 326.576955][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 326.576966][ C1] CR2: 00007fc1e7583178 CR3: 0000000022b60000 CR4: 00000000003526f0 [ 326.576982][ C1] Call Trace: [ 326.576988][ C1] [ 326.576995][ C1] __unwind_start+0x43f/0x760 [ 326.577017][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 326.577039][ C1] arch_stack_walk+0xe4/0x150 [ 326.577061][ C1] ? __unwind_start+0xf8/0x760 [ 326.577081][ C1] stack_trace_save+0x9c/0xe0 [ 326.577101][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 326.577122][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 326.577139][ C1] kasan_save_track+0x3e/0x80 [ 326.577178][ C1] __kasan_slab_alloc+0x6c/0x80 [ 326.577194][ C1] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 326.577209][ C1] ? __netdev_alloc_skb+0x226/0x970 [ 326.577225][ C1] ? __netdev_alloc_skb+0x36d/0x970 [ 326.577245][ C1] __netdev_alloc_skb+0x226/0x970 [ 326.577258][ C1] ? __netdev_alloc_skb+0x36d/0x970 [ 326.577273][ C1] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 326.577289][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 326.577312][ C1] batadv_iv_ogm_queue_add+0x825/0xd30 [ 326.577341][ C1] batadv_iv_ogm_schedule+0xb48/0xf00 [ 326.577361][ C1] ? batadv_iv_ogm_schedule+0x8c6/0xf00 [ 326.577383][ C1] ? batadv_iv_ogm_schedule+0x430/0xf00 [ 326.577401][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 326.577420][ C1] ? __lock_acquire+0xab9/0xd20 [ 326.577441][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6c6/0x7e0 [ 326.577464][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 326.577482][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 326.577499][ C1] process_scheduled_works+0xade/0x17b0 [ 326.577528][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 326.577565][ C1] worker_thread+0x8a0/0xda0 [ 326.577583][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 326.577607][ C1] ? __kthread_parkme+0x7b/0x200 [ 326.577628][ C1] kthread+0x70e/0x8a0 [ 326.577649][ C1] ? __pfx_worker_thread+0x10/0x10 [ 326.577666][ C1] ? __pfx_kthread+0x10/0x10 [ 326.577686][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.577703][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.577722][ C1] ? __pfx_kthread+0x10/0x10 [ 326.577742][ C1] ret_from_fork+0x3f9/0x770 [ 326.577761][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 326.577781][ C1] ? __switch_to_asm+0x39/0x70 [ 326.577793][ C1] ? __switch_to_asm+0x33/0x70 [ 326.577806][ C1] ? __pfx_kthread+0x10/0x10 [ 326.577826][ C1] ret_from_fork_asm+0x1a/0x30 [ 326.577846][ C1] [ 326.585874][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 326.585892][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc6-next-20250718-syzkaller #0 PREEMPT(full) [ 326.585913][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 326.585924][ T31] Call Trace: [ 326.585932][ T31] [ 326.585940][ T31] dump_stack_lvl+0x99/0x250 [ 326.585967][ T31] ? __asan_memcpy+0x40/0x70 [ 326.585992][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.586016][ T31] ? __pfx__printk+0x10/0x10 [ 326.586051][ T31] vpanic+0x281/0x750 [ 326.586073][ T31] ? __pfx_vpanic+0x10/0x10 [ 326.586090][ T31] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 326.586115][ T31] ? preempt_schedule+0xae/0xc0 [ 326.586140][ T31] ? preempt_schedule_common+0x83/0xd0 [ 326.586168][ T31] panic+0xb9/0xc0 [ 326.586187][ T31] ? __pfx_panic+0x10/0x10 [ 326.586208][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 326.586233][ T31] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 326.586256][ T31] watchdog+0xfd2/0xfe0 [ 326.586280][ T31] ? watchdog+0x1de/0xfe0 [ 326.586312][ T31] kthread+0x70e/0x8a0 [ 326.586340][ T31] ? __pfx_watchdog+0x10/0x10 [ 326.586358][ T31] ? __pfx_kthread+0x10/0x10 [ 326.586383][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 326.586404][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.586425][ T31] ? __pfx_kthread+0x10/0x10 [ 326.586450][ T31] ret_from_fork+0x3f9/0x770 [ 326.586474][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 326.586500][ T31] ? __switch_to_asm+0x39/0x70 [ 326.586515][ T31] ? __switch_to_asm+0x33/0x70 [ 326.586529][ T31] ? __pfx_kthread+0x10/0x10 [ 326.586553][ T31] ret_from_fork_asm+0x1a/0x30 [ 326.586584][ T31] [ 327.104177][ T31] Kernel Offset: disabled [ 327.108506][ T31] Rebooting in 86400 seconds..