last executing test programs: 8.227266371s ago: executing program 3 (id=280): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = semget$private(0x0, 0x5, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000400488014000180100010800400108006000a00240000000c0002"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) semctl$SEM_STAT(r1, 0x0, 0x12, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendto$unix(r3, &(0x7f0000000140)="293c38a42dacb233e8e969e1970c9c41344f07e41bc4d6f18365ed0f3b21667222ba246873a88fd62ef4c2c4b450f022f5e96986d49ecd42a3b8871651f6cbba79249acd64cd566e7d8da47d7bea8c9b95c21209bdd9e89e2854badb22fd456d171068031fc3b9785b38e05a09fcd899763cf5b5e378654338ab3bbe5140f8facf69a07fa274712f0b93a8afa4e64a9d7a954506eb4cc8ca2e4847de9245d2aee7e0d78db6bdd150e6cc1bff9ce3e875f91d9209ec3bfb0a40b16b27302b35463615ef4c24949b1f", 0xc8, 0xc044, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl$KDGKBTYPE(r4, 0x4b33, &(0x7f0000000000)) write(r3, &(0x7f0000000100)="140000001a004f7fb3e45f2024d2f1c9fb470000", 0x14) recvmmsg(r3, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000000)=""/53, 0x35}], 0x1, 0x0, 0x0, 0x1f}, 0x8}], 0x1, 0x10122, 0x0) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000000)="c8050000200019", 0x7}], 0x45) r5 = socket$inet6(0x10, 0x3, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000080)='!!\'%\x00', 0x0, r3) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') open_by_handle_at(r7, &(0x7f0000000040)=ANY=[@ANYBLOB="10000000f1000000", @ANYRES8=r7], 0x0) syz_usb_connect$midi(0x2, 0x50, &(0x7f00000009c0)=ANY=[@ANYBLOB="120110010000001082053b0040000102030109023e000101a1400309040000030103000109050910ff0308060a04250100090509024000031903062501023dc22b278a76c53e2349eb68db0a47846b09"], 0x0) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000000680)={0x9, {"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", 0x1000}}, 0x1006) mkdirat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x121) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='sysfs\x00', 0x800000, 0x0) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r10) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) 7.820633131s ago: executing program 0 (id=282): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000e4c5ad101d0620c0159c010203010902120001000000000904"], 0x0) syz_usb_control_io$sierra_net(r2, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000180)={0x20, 0x17, 0x3, "818f61"}, 0x0, 0x0}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8559}, {{&(0x7f0000000080)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000000100)}, 0x9f4}], 0x400000000000168, 0x20, 0x0) shutdown(r3, 0x1) syz_usb_control_io$lan78xx(r2, &(0x7f00000003c0)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) dup3(r1, r0, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0), 0x500, 0x0) ioctl$FIOCLEX(r0, 0x5451) mq_timedsend(r4, 0x0, 0x0, 0x60aa, &(0x7f0000000200)={0x0, 0x989680}) 6.931715314s ago: executing program 1 (id=284): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x2e}, {0x3, [{@any, 0x4, 0x6, 0x32, "8e0ddf", 0xfa, 0x4}, {@any, 0xb, 0x8, 0x1, "b798b7", 0x100}, {@none, 0xff, 0xd, 0x3, "00112f", 0xffff, 0x4}]}}}, 0x31) syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x5ac, 0x30a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xf9, 0x20, 0x6, "", [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x3, 0x10, {0x9, 0x21, 0x3802, 0xa0, 0x1, {0x22, 0x7f6}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x7}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x40, 0x37, 0x81}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x250, 0x6, 0x6, 0x10, 0x40}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x449}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x42f}}]}) 6.902944335s ago: executing program 2 (id=285): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) (fail_nth: 2) 6.51193994s ago: executing program 2 (id=286): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c00038008000a"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)) (async) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0xaf}]}) (async) close(r0) 6.511565167s ago: executing program 3 (id=287): r0 = syz_open_dev$media(&(0x7f0000000280), 0x3, 0x0) syz_open_dev$media(&(0x7f0000000000), 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f00000000c0)={0x80000000, 0x0, 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_ifreq(0xffffffffffffffff, 0x89f0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 6.474123061s ago: executing program 3 (id=288): syz_open_dev$media(&(0x7f0000000280), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r1, 0x89f0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 6.41235518s ago: executing program 3 (id=289): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x188) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000640)={0x14, 0x0, 0x0}, &(0x7f0000000980)={0x34, &(0x7f0000000700)={0x40, 0xe, 0x4, "148674cf"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@dyn}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r2 = fanotify_init(0xf00, 0x1000) fanotify_mark(r2, 0x105, 0x5000003a, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) r3 = syz_open_dev$vcsu(&(0x7f0000000040), 0x400, 0x800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) fchownat(r3, &(0x7f0000000140)='./file0\x00', r4, r5, 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r6, &(0x7f0000000f80)=""/4096, 0x1000) 6.324301956s ago: executing program 2 (id=290): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) accept$ax25(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="700000001900010000000000000000001d0109004d00128008002100", @ANYRES32=0x0, @ANYBLOB="428184a477201acb0f24d8c531680464ff1e08554baff2279134e2a452c739471e1c7bd4aef903f973120a8762bddc1900f269ce3068ee8401e0199c9cf16ed3da0000000c000d"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x804) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x80800) move_mount(0xffffffffffffff9c, 0x0, r3, 0x0, 0x146) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, &(0x7f0000000380)={0x14, &(0x7f00000001c0)={0x40, 0x1b, 0xea, {0xea, 0x4, "a944dd0a1b85d8d5b4a95809c0fefc29227d4857ded5d9bdb196d198a05dadb0e95944430781cc98b2d1f69bab43a935537106cb121a8076512030e1192c5f4c747499f6371a81ac04f05facd094c0f79d39694d1efe28fbff6ad1d7b46e6375f9b009702590604daecbd3312b541ee82beda00d5963261a17bd67ecd94cd03e2800e5fa74be435015ecd7a070665d5591353123d6b8a0c442cbfc34224636074b500a44dfc0602df02934832e3de765919d566c57ec9b8a35b4d2af818b654f750d5c2ebf10d20760b1c09415af0293e66f41c36d37199de94310b851f36d7e49b356f9ff51ff9f"}}, &(0x7f0000000fc0)={0x0, 0x3, 0x102, @string={0x102, 0x3, "7332baf08a36110e8e45df1244e6ccf47100646be6ecb2dbf7fe40ec13bde0fd99d4ebd99418122b82f610cdc1694586c42e096738a83d250788f29883a22f335f401691f1ca28c9c7a8f1ad925e93778c797d0d6533bd1d5bfacb97d56893865f0b2d171c42d00fbda112b8b2ae579781613cffa958a9b9f6f2a43cf81e8774a808754c666fdd323a7efde4ca2737a84b2125c1299823341d802bb198e33a5cbfe397b51b2b5cddf23a333410947b3e361bae294819205c81b3bcf3b9223cbd929f1ce3b77668bdc7a3970d6931d7f5ea56456937257893f1dc207106067ba8d5513786e46babe7d2e020909e2d56317a13d88f96122f7e291be97f5bdcdfa3"}}}, &(0x7f0000000800)={0x44, &(0x7f0000000500)={0x0, 0x16, 0xfd, "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"}, &(0x7f0000000640)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000000680)={0x0, 0x8, 0x1, 0x1c}, &(0x7f00000006c0)={0x20, 0x81, 0x1, "a9"}, &(0x7f0000000700)={0x20, 0x82, 0x2, "fcc3"}, &(0x7f0000000f80)={0x20, 0x83, 0x3, "93fc98"}, &(0x7f0000000780)={0x20, 0x84, 0x3, "94b586"}, &(0x7f00000007c0)={0x20, 0x85, 0x3, "31a8c9"}}) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x2, 0x36, {0x36, 0x6, "1207bcc31e4128ad0c5a9469ebcba617e27d521578ad48f7b5df645a8498155c83086e7995858bd7706765e75e16b74686e7560c"}}, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000880)={0x1c, &(0x7f00000003c0)={0x0, 0x2a, 0xc, "13ddb6c42e87647f6c28d6e5"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x30}}) syz_usb_control_io$uac1(r2, 0x0, 0x0) 5.485055092s ago: executing program 1 (id=291): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0x1, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x81, 0x5}, {0x5000, 0x3000, 0x3, 0x0, 0x42, 0x5, 0x75, 0x6, 0x36, 0x4, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x8, 0x4, 0xa4, 0x5, 0x5}, {0xeeee8000, 0x26000, 0x9, 0x7, 0x5, 0x42, 0x2, 0xff, 0x8, 0x7, 0xe}, {0xffffffff, 0x3000, 0x10, 0x3, 0x16, 0x7, 0xab, 0x8, 0x9, 0x9, 0x5, 0x3}, {0xeeefa000, 0xdddd0000, 0xe, 0xa0, 0xb1, 0x6, 0x1, 0xa0, 0x82, 0x5, 0x1, 0x7}, {0x3000, 0x3000, 0xf, 0x5, 0x7, 0x5, 0x7, 0x4, 0x9d, 0x81, 0x40, 0x70}, {0x8000000, 0x4000, 0x8, 0x5, 0xcd, 0x7, 0xfd, 0x7, 0x2, 0xc, 0xb0, 0x81}, {0xeeee0000, 0x30}, {0x8000000, 0x9}, 0x80000031, 0x0, 0x3000, 0x2024, 0x2, 0x0, 0xd000, [0x6800000000000000, 0x4, 0x3, 0x8]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x101400, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40085503, 0x0) ioctl$PTP_PEROUT_REQUEST(r2, 0x40383d03, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000004c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x1, 0x7, 0x2, '\x00', 0x5}) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000006c0)) r6 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3, @ANYRES32=r4, @ANYRES16=r4, @ANYRESHEX=r4], 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000040)={0x26, 0x0, 0x1}) syz_usb_disconnect(r6) keyctl$negate(0xd, 0x0, 0x7, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0xdddd1000, 0xe41, 0x0, 0x10020f5b, 0x0, [{0x0, 0xd, 0x0, '\x00', 0x3c}, {0x0, 0x0, 0xfc, '\x00', 0x5}, {0x0, 0x0, 0x0, '\x00', 0x2}, {0x0, 0x35}, {0x1d, 0x3, 0x7, '\x00', 0x10}, {0x0, 0x0, 0x6}, {0x0, 0x5}, {0x2, 0x6, 0x4f}, {0xc1}, {0x73, 0x10, 0x2, '\x00', 0x6}, {0x0, 0xfe, 0xfe}, {0x4}, {}, {0x0, 0x2, 0x0, '\x00', 0x50}, {0x7, 0x2, 0x0, '\x00', 0x39}, {0x0, 0x0, 0x0, '\x00', 0x8}, {0x0, 0x0, 0x0, '\x00', 0xff}, {0x0, 0x0, 0xfa, '\x00', 0x7}, {0x3, 0xfc, 0x0, '\x00', 0xfe}, {0x40, 0x0, 0x3, '\x00', 0x2}, {0x6, 0x0, 0x0, '\x00', 0x1}, {0x0, 0x0, 0x0, '\x00', 0xfc}, {0x0, 0x5, 0x2}, {0x7, 0x0, 0x10}]}}) 4.480164058s ago: executing program 3 (id=292): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x7, "0000060000000000000000006f0de3856c0600a30002000000006e002000", 0xffffffffffffffff}) r3 = socket(0x28, 0x5, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r3, 0x5411, 0x0) sendmsg$unix(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000280)="79d5d5c04aeb2f60e3fb8c6289b6e6ce67449a2fbb2bc4f2a87be5beb01c995bcf4be2bc9b5a9f49e7266f2e90e0a30c2a44f0ca0a3dd310349a20c470d7d12d81034618ceedc86dcc5109e417d66e0d17fc61b51b3075b3f7d4780d36ea09986e30b1351b61d2a213bad2dd249e8b5999d4048f793ce92b5b8662eeef2f61751c334241234017371b56a012c63d36415efff5147c3d184440f3ab9dc1c0bfe05d1f8d39d6a2064290596e854a198bf194c6ab01833e305838e826ea8fc044a9bf4a91de1693574558271f37ccc51f", 0xcf}, {&(0x7f0000000380)="a5ac891c3edfc13ce3a7f7c42854df65ac806ac672cfc1d05c4370a8b959e0ec2537bb84911b2479a3643b823dd16a9076a353a0d42d2eb3bf08611723c705c72dd549f9c0d89aef68001650acbd7afd6e65b8e798d3c8b1d5aafcd073d889eaae78f494b948a35cc630540962611d0aaa", 0x71}], 0x2, 0x0, 0x0, 0x80}, 0x200008c0) ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f0000000040)={"130f2672af9ee0452321864922cd3bebd7f9cec5064e58445f1268334b4900", 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x300}) close_range(r0, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400be"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x141000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) 4.455432785s ago: executing program 0 (id=293): r0 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1000080008, 0x200080000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) syz_pidfd_open(0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102367, 0x4ca9) openat$snapshot(0xffffffffffffff9c, &(0x7f00000014c0), 0x101001, 0x0) 3.982687018s ago: executing program 0 (id=294): r0 = mq_open(&(0x7f0000001480)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00\xe8m(FNc\x9a[Y\x195\x1c\xcf4\xfd$\rW\x1b\x80D\xd4\x9b\x10q\x84\xb9\xec\xa4\x97\xe7;\xcd\xf1-\xda\xb3M:C\x19\xd0\xf0\xbd\xe20>!P\x8c\xe3\xedG\xeb\xbdL\n0\xe8\x8e\xd23\xdf\xb9\xd6\x8d\x85', 0x42, 0x1f0, 0x0) mq_notify(r0, &(0x7f0000000280)={0x0, 0x18, 0x0, @thr={0x0, 0x0}}) preadv(r0, &(0x7f00000005c0)=[{&(0x7f0000000280)=""/238, 0xee}], 0x1, 0x0, 0x8) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x3, 0x200, 0xb, 0xf6d5, 0x9d1, 0x6, 0x7, 0x10, 0x80000001, 0x80000000, 0xffffff5f, 0x6, 0x8, 0xfffffffc}) r1 = socket$netlink(0x10, 0x3, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x79082, 0x0) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000005f000100000000000000000800"], 0x1c}], 0x1, 0x0, 0x0, 0x44000}, 0x4) 3.929288307s ago: executing program 3 (id=295): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="aa48173d42b3db40dd676e3864f890e1e91b0045fec7f87430a0550876c3fe1596ba48dd8bc77274319004470800efda3851c384f35233f3"]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.464890831s ago: executing program 32 (id=295): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYBLOB="aa48173d42b3db40dd676e3864f890e1e91b0045fec7f87430a0550876c3fe1596ba48dd8bc77274319004470800efda3851c384f35233f3"]) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 3.44266235s ago: executing program 0 (id=297): r0 = syz_open_dev$media(&(0x7f0000000000), 0x1, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000200)={0x80000000, 0x0, &(0x7f0000000180)}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r2, 0x89f0, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bpq0, 0x8, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 3.42601796s ago: executing program 2 (id=298): setrlimit(0x2, &(0x7f00000000c0)={0x0, 0x2400000}) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000940)=[0x0], &(0x7f0000000980), 0x0, 0x1, 0x0, 0x0, r1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x1, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[0x5], &(0x7f0000000a80)=[r2], 0x0, 0x0, 0x2}) mremap(&(0x7f00003c8000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f000024a000/0x1000)=nil) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_GET_XSAVE2(r3, 0x9000aecf, &(0x7f0000249000/0x4000)=nil) 3.16811701s ago: executing program 2 (id=299): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x132) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) recvmmsg(r1, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6582}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0x2}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}, 0x4100}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)) syz_usb_connect$midi(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200fdffffffff25000000010203010906200001010560b088ebc08810655c309579ef08050d0300023caa1fca0800052544cc297cc3988be26015"], 0x0) 3.079112503s ago: executing program 0 (id=300): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) r1 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r1, 0x1, &(0x7f0000000000)={0x208}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000076001f"], 0x14}], 0x1, 0x0, 0x0, 0x4004000}, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x7c, &(0x7f00000002c0)=ANY=[@ANYBLOB="12011001020000102505a1a440000000010109026a00010100000909040000ff02020000053f060000052400fdff0d240f010000000000000300001d2413056648e5be27e87ebf64c49413c7b2dc109e4f21af41b220aed10524", @ANYRES16=r0], 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000140)={0x18, 0x0, 0x0, 0x0, 0x2}) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)="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", 0x241}], 0x1}}], 0x1, 0x4000001) openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2.254589886s ago: executing program 1 (id=301): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3}) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x2, @name="5902f02a8858f267c3452f3f0f88eedb7a31b9c96673afdd47c4279b5aad2338"}, 0x8, 0xfffffffffffff0a5, 0x6}) 2.051490153s ago: executing program 1 (id=302): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x900}}], 0x1, 0x0) pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)="c897", 0x2}], 0x1, 0x2e, 0x4, 0x0) ioctl$FS_IOC_RESVSP(r0, 0xc0189436, &(0x7f0000000680)={0x0, 0x0, 0x2, 0x62, 0x3, 0xfdfdffff}) 1.841100325s ago: executing program 1 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x24, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x10}]}, @typed={0x4, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r3, 0x6, 0x1) r4 = syz_open_dev$usbfs(&(0x7f0000000280), 0x8001, 0x2000) ioctl$USBDEVFS_ALLOC_STREAMS(r4, 0x8008551c, &(0x7f00000002c0)={0x19ad, 0x15, [{0x2}, {0x1, 0x1}, {0x3, 0x1}, {0xb, 0x1}, {0x7}, {0x2}, {0x6}, {0x2, 0x1}, {0xa, 0x1}, {0xb}, {0x2}, {0x8}, {0xd, 0x1}, {0x4, 0x1}, {0x7}, {0x9, 0x1}, {0xb}, {0x4, 0x1}, {0x4, 0x1}, {0x8}, {0xf, 0x1}]}) 1.496164579s ago: executing program 1 (id=304): unshare(0x6a040000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x1, 0x4000000000000291}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000280)=[r6, r7], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r8, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)=[0x0], 0x0, 0x0, 0x1, 0x0, 0x0, r7}) (async) fsmount(r8, 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)={0x1, 0x0, [{0x3, 0x5, 0x0, 0x0, @adapter={0x5, 0x7fffffffffffffff, 0x8000000000000001, 0x80, 0x5}}]}) (async) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r9, 0x0, 0x48b, &(0x7f0000000040)={0x2, 'geneve1\x00'}, 0x18) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @multicast1}, {0x2, 0x4, @dev={0xac, 0x14, 0x14, 0xd}}, 0x88, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x5}) 1.452423454s ago: executing program 0 (id=305): capset(0x0, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd, 0x8, 0x0, 0x3}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000063e000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f3266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a63, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) r4 = syz_usb_connect$uac2(0x0, 0x8f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0xdba, 0x1000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x3, 0x1, 0x8, 0x20, 0x1, {0x8, 0xb, 0x1, 0x2, 0x1, 0x5, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x6, 0x8, 0x1d, 0x68}, [@source_unit={0x8, 0x24, 0xa, 0x1, 0x2, 0x7, 0x9, 0x2}, @output_terminal={0xc, 0x24, 0x3, 0x4, 0x400, 0x4, 0x1, 0x82, 0x0, 0x7}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x420, 0x7, 0x8c, 0x3, {0x8, 0x25, 0x1, 0x103, 0xc, 0x7, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfc, 0x3, 0x5, {0x8, 0x25, 0x1, 0x0, 0x33, 0x96, 0x4}}}}}}}}]}}, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) open(0x0, 0x81, 0x0) syz_usb_control_io$uac2(r4, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0x40, 0xd, 0x2, {0x2, 0x24}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc0c}}}, 0x0) syz_usb_control_io(r4, &(0x7f0000000bc0)={0x2c, 0x0, &(0x7f0000000a00)={0x0, 0x3, 0x37, @string={0x37, 0x3, "67884dc4a3944a67e99b64aa07934471b053a5a3506c0a00b52d60eb9ef897862a8c25d5b46c8f16e750510aad123fe2ee299aed23"}}, 0x0, &(0x7f0000000b40)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x18, 0x10, 0xd7, "3b28c1e2", '?XK9'}}, 0x0}, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000000c0)=0x2) r5 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f00000000c0)=0x3) 0s ago: executing program 2 (id=306): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x9b, &(0x7f00000006c0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x582, 0x29, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x89, 0x3, 0x1, 0x6, 0xb0, 0x1, {0x8, 0xb, 0x2, 0x1, 0x1, 0x9, 0x20, 0x3}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xffff, 0xfe40d974437f39e7, 0x9, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x5, 0x2, 0xbe, 0x5, "8849ded8c5e6d004"}, @format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0x1, 0x2, 0xd7, "75ac468f472467"}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x7, 0x6, 0xa0, {0x8, 0x25, 0x1, 0x80, 0xc}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x8, 0x3, 0x1, {0x8, 0x25, 0x1, 0x1, 0xc, 0x40, 0xa}}}}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x200, 0x9, 0x3, 0x22, 0x40, 0x2}, 0x30, &(0x7f0000000800)={0x5, 0xf, 0x30, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "c1ff247fcd8ebc05094c464ad1e81688"}, @ss_container_id={0x14, 0x10, 0x4, 0x2, "53cca5c5b49da517cb758e8406dc43fb"}, @ptm_cap={0x3}]}, 0x6, [{0x92, &(0x7f0000000840)=@string={0x92, 0x3, "a9d52ac7be6f38042ad5944afb5e14b2a5dc40543f6765656e53b8deaaa113102972daefef2e96c0fc61cff34e028d3f34a2589f0c50a9d9e91e04d15972fec5f96193e853f74cd64e7d7d0ad70339bde6a7a11aa3c51a5ef2e0fd7955ce0f359d6748fe5f6c9adb99f3f183c9e651eb283b712fc1a04179243209f60bbe8fd89c57cba653486eddd6a53daf5d262bc2"}}, {0xc1, &(0x7f0000000900)=@string={0xc1, 0x3, "859d47992f5c20cfba7c73bd8c6b2300719843170b25b5c44df2a6a2f9667ebe421ac2c33982d507e190796ce7d4ef5b3c24c4ac6f58a5c8117ecfdea368f458c5066d3e0bdc0886c868eb88b2c52d923e66ae67d5b83963b2bacfc5244a9e9caafe3e528435905c0903c1d2874247dfbf34c9fdaf8ae4cf5269d5f4547f45b704755ac7a09e067def988af57636de72b8db2b531f6f144ca40432b5900302ec565b3245d95f32c211ed163dead5ca2ce9873c3dd9b2316801f6fcab473db3"}}, {0x4, &(0x7f0000000a00)=@lang_id={0x4, 0x3, 0x3401}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x427}}, {0x11, &(0x7f0000000a80)=@string={0x11, 0x3, "1f0afabb17f9f1d3403e5caa49aed7"}}, {0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0c03b0b0b922264edc66a055"]}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote, 0x1000}}}, 0x108) close_range(r4, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f0000000380)="a6", 0x1, 0x841, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4064, 0xfe0, 0x0, 0x0}, &(0x7f0000000000)=0x40) r8 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="2618dbda", 0x4, 0xfffffffffffffffb) r9 = socket(0x1, 0x2, 0x0) bind$unix(r9, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) ioctl$SIOCGETMIFCNT_IN6(r9, 0x89e0, 0x0) add_key(&(0x7f0000003b40)='encrypted\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r8, 0x0, 0x0) r10 = syz_open_dev$video(&(0x7f0000000040), 0x8000000a7, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000180)={0x1, @pix_mp={0x0, 0x0, 0x34324142}}) ioctl$HIDIOCGUSAGE(r1, 0xc0105b08, &(0x7f0000000340)={0x1, 0x200, 0x3cf3, 0x200000, 0x110001}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.154' (ED25519) to the list of known hosts. [ 73.847153][ T5832] cgroup: Unknown subsys name 'net' [ 73.963773][ T5832] cgroup: Unknown subsys name 'cpuset' [ 73.973287][ T5832] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.658828][ T5832] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.952006][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 77.961499][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 77.970347][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 77.981002][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.990207][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.997904][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.018092][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.026742][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.035410][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.043405][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.062360][ T5164] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.077670][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.085548][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.086781][ T5164] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.102841][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.105624][ T5164] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.118997][ T5164] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.126806][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.137128][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.146878][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.634630][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 78.715057][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 78.807152][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 78.866457][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 78.929061][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.936409][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.944027][ T5843] bridge_slave_0: entered allmulticast mode [ 78.952039][ T5843] bridge_slave_0: entered promiscuous mode [ 78.988885][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.996174][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.003621][ T5843] bridge_slave_1: entered allmulticast mode [ 79.011216][ T5843] bridge_slave_1: entered promiscuous mode [ 79.066889][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.074148][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.081696][ T5847] bridge_slave_0: entered allmulticast mode [ 79.088932][ T5847] bridge_slave_0: entered promiscuous mode [ 79.123713][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.131194][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.138489][ T5847] bridge_slave_1: entered allmulticast mode [ 79.145937][ T5847] bridge_slave_1: entered promiscuous mode [ 79.166473][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.179204][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.205042][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.212895][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.220173][ T5849] bridge_slave_0: entered allmulticast mode [ 79.227226][ T5849] bridge_slave_0: entered promiscuous mode [ 79.265996][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.273449][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.280973][ T5849] bridge_slave_1: entered allmulticast mode [ 79.288343][ T5849] bridge_slave_1: entered promiscuous mode [ 79.320027][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.341709][ T5843] team0: Port device team_slave_0 added [ 79.347486][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.354972][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.362281][ T5850] bridge_slave_0: entered allmulticast mode [ 79.369483][ T5850] bridge_slave_0: entered promiscuous mode [ 79.379232][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.401429][ T5843] team0: Port device team_slave_1 added [ 79.407292][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.414645][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.421960][ T5850] bridge_slave_1: entered allmulticast mode [ 79.429117][ T5850] bridge_slave_1: entered promiscuous mode [ 79.447776][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.488865][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.519581][ T5847] team0: Port device team_slave_0 added [ 79.536300][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.543454][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.569453][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.589940][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.601176][ T5847] team0: Port device team_slave_1 added [ 79.617867][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.625023][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.651142][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.664079][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.695531][ T5849] team0: Port device team_slave_0 added [ 79.729500][ T5849] team0: Port device team_slave_1 added [ 79.750183][ T5850] team0: Port device team_slave_0 added [ 79.756511][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.763778][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.789843][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.812863][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.820148][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.848381][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.863873][ T5850] team0: Port device team_slave_1 added [ 79.870313][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.877311][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.903501][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.925454][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.932765][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.958992][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.011592][ T5843] hsr_slave_0: entered promiscuous mode [ 80.017940][ T5843] hsr_slave_1: entered promiscuous mode [ 80.036153][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.043391][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.070107][ T5844] Bluetooth: hci0: command tx timeout [ 80.075602][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.088186][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.095463][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.121462][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.139983][ T5844] Bluetooth: hci3: command tx timeout [ 80.150005][ T5844] Bluetooth: hci1: command tx timeout [ 80.219351][ T5849] hsr_slave_0: entered promiscuous mode [ 80.220404][ T5844] Bluetooth: hci2: command tx timeout [ 80.227052][ T5849] hsr_slave_1: entered promiscuous mode [ 80.237197][ T5849] debugfs: 'hsr0' already exists in 'hsr' [ 80.243396][ T5849] Cannot create hsr debugfs directory [ 80.253698][ T5847] hsr_slave_0: entered promiscuous mode [ 80.260193][ T5847] hsr_slave_1: entered promiscuous mode [ 80.266256][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 80.272385][ T5847] Cannot create hsr debugfs directory [ 80.327448][ T5850] hsr_slave_0: entered promiscuous mode [ 80.334264][ T5850] hsr_slave_1: entered promiscuous mode [ 80.340760][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 80.346526][ T5850] Cannot create hsr debugfs directory [ 80.753136][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.765783][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.778244][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.796697][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.852904][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.867047][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.877332][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.903372][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.996022][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.010185][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.024198][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.036697][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.149165][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.165107][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.184137][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.191550][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.211551][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.257366][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.283644][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.291393][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.318390][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.325521][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.342301][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.383985][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.406787][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.415847][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.423069][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.449001][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.456163][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.492291][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.526192][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.533368][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.573100][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.580319][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.639120][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.717241][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.754907][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.762109][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.791986][ T79] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.799144][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.952046][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.051060][ T5843] veth0_vlan: entered promiscuous mode [ 82.077372][ T5843] veth1_vlan: entered promiscuous mode [ 82.094854][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.141307][ T5844] Bluetooth: hci0: command tx timeout [ 82.166802][ T5843] veth0_macvtap: entered promiscuous mode [ 82.199303][ T5843] veth1_macvtap: entered promiscuous mode [ 82.221257][ T5844] Bluetooth: hci3: command tx timeout [ 82.226480][ T5848] Bluetooth: hci1: command tx timeout [ 82.266224][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.282824][ T5849] veth0_vlan: entered promiscuous mode [ 82.295533][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.302912][ T5848] Bluetooth: hci2: command tx timeout [ 82.318396][ T5849] veth1_vlan: entered promiscuous mode [ 82.330284][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.348323][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.374056][ T79] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.383981][ T79] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.400956][ T79] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.410417][ T79] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.506382][ T5847] veth0_vlan: entered promiscuous mode [ 82.514504][ T5849] veth0_macvtap: entered promiscuous mode [ 82.561403][ T5847] veth1_vlan: entered promiscuous mode [ 82.569149][ T5849] veth1_macvtap: entered promiscuous mode [ 82.578881][ T3509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.598058][ T3509] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.605745][ T5850] veth0_vlan: entered promiscuous mode [ 82.660870][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.671684][ T5850] veth1_vlan: entered promiscuous mode [ 82.686575][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.695193][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.708483][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.724051][ T79] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.733074][ T79] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.746947][ T79] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.757291][ T79] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.822616][ T5847] veth0_macvtap: entered promiscuous mode [ 82.833728][ T5850] veth0_macvtap: entered promiscuous mode [ 82.844177][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.853143][ T5850] veth1_macvtap: entered promiscuous mode [ 82.890712][ T5847] veth1_macvtap: entered promiscuous mode [ 82.984654][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.003773][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.029957][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.044520][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.073348][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.100336][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.127772][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.137391][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.147478][ T79] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.158889][ T79] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.176083][ T79] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.215934][ T79] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.233338][ T79] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.265781][ T79] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.278042][ T79] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.298688][ T79] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.466090][ T5937] lo speed is unknown, defaulting to 1000 [ 83.491341][ T5910] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 83.508649][ T5937] lo speed is unknown, defaulting to 1000 [ 83.531821][ T1132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.547992][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.556490][ T1132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.570151][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.601022][ T5937] lo speed is unknown, defaulting to 1000 [ 83.642227][ T5937] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 83.657716][ T5937] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 83.684219][ T5937] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 83.704896][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.723744][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.733581][ T5937] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 83.771472][ T5937] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 83.794793][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.829609][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.893486][ T5937] lo speed is unknown, defaulting to 1000 [ 83.934718][ T5937] lo speed is unknown, defaulting to 1000 [ 83.969581][ T5937] lo speed is unknown, defaulting to 1000 [ 84.021478][ T5937] lo speed is unknown, defaulting to 1000 [ 84.135026][ T5942] netlink: 'syz.3.4': attribute type 13 has an invalid length. [ 84.219994][ T5910] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 84.227970][ T5848] Bluetooth: hci0: command tx timeout [ 84.243554][ T5910] usb 2-1: can't read configurations, error -71 [ 84.300221][ T5848] Bluetooth: hci3: command tx timeout [ 84.310336][ T5848] Bluetooth: hci1: command tx timeout [ 84.390319][ T5848] Bluetooth: hci2: command tx timeout [ 84.399904][ T5897] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 84.540837][ T5945] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 84.560201][ T5897] usb 4-1: Using ep0 maxpacket: 32 [ 84.568143][ T5897] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 84.577714][ T5897] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.595649][ T5897] usb 4-1: config 0 descriptor?? [ 84.625537][ T5897] gspca_main: sunplus-2.14.0 probing 041e:400b [ 84.699890][ T24] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 84.719883][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 84.731768][ T5945] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 84.741341][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.749407][ T5945] usb 1-1: Product: syz [ 84.754086][ T5945] usb 1-1: Manufacturer: syz [ 84.758780][ T5945] usb 1-1: SerialNumber: syz [ 84.774104][ T5945] usb 1-1: config 0 descriptor?? [ 84.786567][ T5945] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 84.852301][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 84.882539][ T24] usb 3-1: config 11 has an invalid interface number: 239 but max is 0 [ 84.891389][ T24] usb 3-1: config 11 has an invalid descriptor of length 246, skipping remainder of the config [ 84.903197][ T24] usb 3-1: config 11 has no interface number 0 [ 84.912292][ T24] usb 3-1: too many endpoints for config 11 interface 239 altsetting 192: 161, using maximum allowed: 30 [ 84.926045][ T24] usb 3-1: config 11 interface 239 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 161 [ 84.955097][ T24] usb 3-1: config 11 interface 239 has no altsetting 0 [ 84.963964][ T24] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 84.975372][ T24] usb 3-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 84.984001][ T24] usb 3-1: Manufacturer: syz [ 85.264841][ T24] usb 3-1: USB disconnect, device number 2 [ 85.329082][ T5956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 85.829973][ T5942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 85.863244][ T5942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 85.897167][ T5966] syz.2.9 uses obsolete (PF_INET,SOCK_PACKET) [ 86.025568][ T5969] netlink: 'syz.2.10': attribute type 10 has an invalid length. [ 86.072891][ T5969] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 86.085679][ T5947] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 86.195089][ T5970] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.201590][ T5945] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 86.265285][ T5951] usb 1-1: USB disconnect, device number 2 [ 86.300764][ T5848] Bluetooth: hci0: command tx timeout [ 86.380665][ T5848] Bluetooth: hci1: command tx timeout [ 86.380678][ T5844] Bluetooth: hci3: command tx timeout [ 86.459974][ T5844] Bluetooth: hci2: command tx timeout [ 86.717908][ T5897] gspca_sunplus: reg_w_riv err -71 [ 86.735154][ T5897] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 86.756616][ T5897] usb 4-1: USB disconnect, device number 2 [ 86.892636][ T5982] netlink: 28 bytes leftover after parsing attributes in process `syz.1.15'. [ 86.910702][ T5951] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 87.085030][ T5951] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 87.115716][ T5951] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 87.132819][ T5951] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.148130][ T5951] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 87.161866][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 87.170540][ T5951] usb 3-1: Product: syz [ 87.176391][ T5951] usb 3-1: Manufacturer: syz [ 87.198245][ T5951] usb 3-1: SerialNumber: syz [ 87.353202][ T5997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.21'. [ 87.429433][ T5980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.431015][ T5854] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 87.443206][ T5980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.472559][ T5951] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 87.600742][ T5854] usb 1-1: device descriptor read/64, error -71 [ 87.628311][ T6005] netlink: 'syz.3.23': attribute type 10 has an invalid length. [ 87.639749][ T5945] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 87.657237][ T6005] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 87.672581][ T5897] usb 3-1: USB disconnect, device number 3 [ 87.779913][ T5945] usb 2-1: device descriptor read/64, error -71 [ 87.782642][ T6006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.840440][ T5854] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.883892][ T5979] usblp0: removed [ 87.969760][ T5854] usb 1-1: device descriptor read/64, error -71 [ 88.020157][ T5945] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 88.080882][ T5854] usb usb1-port1: attempt power cycle [ 88.149742][ T5945] usb 2-1: device descriptor read/64, error -71 [ 88.260266][ T5945] usb usb2-port1: attempt power cycle [ 88.419731][ T5854] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.451610][ T5854] usb 1-1: device descriptor read/8, error -71 [ 88.599743][ T5945] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 88.621746][ T5945] usb 2-1: device descriptor read/8, error -71 [ 88.675470][ T6018] tmpfs: Unknown parameter 'usrquota_block_TnHגChardlimit' [ 88.710440][ T5854] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 88.720500][ T6018] overlay: filesystem on ./file0 not supported as upperdir [ 88.740697][ T5854] usb 1-1: device descriptor read/8, error -71 [ 88.854362][ T5854] usb usb1-port1: unable to enumerate USB device [ 88.864606][ T5945] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 88.900365][ T5945] usb 2-1: device descriptor read/8, error -71 [ 89.020757][ T5945] usb usb2-port1: unable to enumerate USB device [ 90.212573][ T6032] netlink: 'syz.2.34': attribute type 13 has an invalid length. [ 90.460105][ T809] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.539785][ T5945] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 90.620461][ T809] usb 3-1: Using ep0 maxpacket: 32 [ 90.631801][ T809] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 90.651458][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.667603][ T809] usb 3-1: config 0 descriptor?? [ 90.681276][ T809] gspca_main: sunplus-2.14.0 probing 041e:400b [ 90.691731][ T6040] Invalid logical block size (2816) [ 90.702184][ T5945] usb 1-1: not running at top speed; connect to a high speed hub [ 90.721966][ T5945] usb 1-1: config 11 has an invalid interface number: 239 but max is 0 [ 90.732448][ T5945] usb 1-1: config 11 has an invalid descriptor of length 246, skipping remainder of the config [ 90.743243][ T5945] usb 1-1: config 11 has no interface number 0 [ 90.749469][ T5945] usb 1-1: too many endpoints for config 11 interface 239 altsetting 192: 161, using maximum allowed: 30 [ 90.761642][ T5945] usb 1-1: config 11 interface 239 altsetting 192 has 0 endpoint descriptors, different from the interface descriptor's value: 161 [ 90.776763][ T5945] usb 1-1: config 11 interface 239 has no altsetting 0 [ 90.785683][ T5945] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=b1.4d [ 90.801283][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 90.818644][ T5945] usb 1-1: Manufacturer: syz [ 91.085371][ T5945] usb 1-1: USB disconnect, device number 7 [ 91.411897][ T6055] netlink: 252 bytes leftover after parsing attributes in process `syz.3.42'. [ 91.431620][ T6055] syzkaller1: entered promiscuous mode [ 91.437231][ T6055] syzkaller1: entered allmulticast mode [ 91.789725][ T5945] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.826632][ T994] cfg80211: failed to load regulatory.db [ 91.885898][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 91.895210][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 91.942607][ T5945] usb 4-1: unable to get BOS descriptor or descriptor too short [ 91.952079][ T5945] usb 4-1: config 129 interface 0 has no altsetting 0 [ 91.961234][ T5945] usb 4-1: New USB device found, idVendor=5fc9, idProduct=0061, bcdDevice=ba.7b [ 91.970401][ T5945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.978456][ T5945] usb 4-1: Product: syz [ 91.982803][ T5945] usb 4-1: Manufacturer: syz [ 91.988181][ T5945] usb 4-1: SerialNumber: syz [ 92.707245][ T809] gspca_sunplus: reg_w_riv err -71 [ 92.712623][ T809] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 92.723475][ T809] usb 3-1: USB disconnect, device number 4 [ 93.669749][ T809] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 93.820549][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 93.828284][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.840484][ T809] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.850444][ T809] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 93.863329][ T809] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 93.872440][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.883484][ T809] usb 3-1: config 0 descriptor?? [ 94.023607][ T6048] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 94.095104][ T5945] usb 4-1: USB disconnect, device number 3 [ 94.335825][ T809] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.352359][ T6079] netlink: 12 bytes leftover after parsing attributes in process `syz.1.50'. [ 94.371685][ T809] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.390427][ T809] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.410284][ T809] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.422124][ T809] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0 [ 94.441563][ T809] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input6 [ 94.542881][ T809] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 94.566475][ T809] usb 3-1: USB disconnect, device number 5 [ 94.816008][ T6085] fido_id[6085]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 94.891072][ T6090] netlink: 'syz.1.53': attribute type 13 has an invalid length. [ 94.980039][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 95.129764][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 95.137331][ T5911] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 95.146072][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 95.155911][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 95.166428][ T5951] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 95.174856][ T5911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 95.187006][ T5911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 95.197356][ T5911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.210507][ T5911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 95.220042][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.339806][ T5951] usb 2-1: Using ep0 maxpacket: 32 [ 95.348136][ T5951] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 95.360098][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.374701][ T5951] usb 2-1: config 0 descriptor?? [ 95.384243][ T5951] gspca_main: sunplus-2.14.0 probing 041e:400b [ 95.436845][ T5911] usb 4-1: usb_control_msg returned -32 [ 95.450778][ T5911] usbtmc 4-1:16.0: can't read capabilities [ 95.485852][ T5911] usb 4-1: USB disconnect, device number 4 [ 95.609007][ T6108] [U]  [ 95.611886][ T6108] [U] K{ [ 95.615811][ T6108] [U] t 1ŠFfˊ`GJgo/mC [ 95.624010][ T6108] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 95.639748][ T6108] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 95.650463][ T6108] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 95.689432][ T6108] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 95.718728][ T6108] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 95.730941][ T6108] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 95.742845][ T6108] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 95.834182][ T6108] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 95.842889][ T6108] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 95.856810][ T6108] [U] 22Ʃx?0;3u [ 95.861105][ T6108] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 95.887013][ T6108] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 95.896418][ T6108] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 95.905265][ T6108] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 95.911542][ T6108] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 95.924088][ T6108] [U] ec [ 95.927234][ T6108] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 95.945112][ T6107] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 96.125945][ T6117] binder: 6116:6117 ioctl c0306201 200000000640 returned -14 [ 96.426128][ T6122] kvm: pic: non byte read [ 96.431665][ T6122] kvm: pic: non byte read [ 96.436411][ T6122] kvm: pic: non byte read [ 96.441576][ T6122] kvm: pic: level sensitive irq not supported [ 96.441679][ T6122] kvm: pic: non byte read [ 96.453204][ T6122] kvm: pic: level sensitive irq not supported [ 96.453301][ T6122] kvm: pic: non byte read [ 96.464751][ T6122] kvm: pic: single mode not supported [ 96.464769][ T6122] kvm: pic: level sensitive irq not supported [ 96.470863][ T6122] kvm: pic: non byte read [ 96.481838][ T6122] kvm: pic: non byte read [ 96.486572][ T6122] kvm: pic: single mode not supported [ 96.486593][ T6122] kvm: pic: level sensitive irq not supported [ 96.492536][ T6122] kvm: pic: non byte read [ 96.504598][ T6122] kvm: pic: non byte read [ 96.599799][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 96.626523][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.929776][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.102086][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 97.110403][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 97.119505][ T10] usb 4-1: config 1 has an invalid interface number: 215 but max is 0 [ 97.127878][ T10] usb 4-1: config 1 has no interface number 0 [ 97.134253][ T10] usb 4-1: config 1 interface 215 has no altsetting 0 [ 97.146230][ T10] usb 4-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=48.2e [ 97.160304][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.168349][ T10] usb 4-1: Product: syz [ 97.172674][ T10] usb 4-1: Manufacturer: syz [ 97.177327][ T10] usb 4-1: SerialNumber: syz [ 97.259374][ T5951] gspca_sunplus: reg_w_riv err -71 [ 97.278903][ T5951] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 97.303602][ T5951] usb 2-1: USB disconnect, device number 8 [ 97.407275][ T10] gspca_main: etoms-2.14.0 probing 102c:6251 [ 97.481909][ T10] usb 4-1: USB disconnect, device number 5 [ 98.037423][ T6153] kvm: pic: non byte read [ 98.043998][ T6153] kvm: pic: level sensitive irq not supported [ 98.044348][ T6153] kvm: pic: level sensitive irq not supported [ 98.051024][ T6153] kvm: pic: single mode not supported [ 98.057523][ T6153] kvm: pic: level sensitive irq not supported [ 98.065986][ T6153] kvm: pic: level sensitive irq not supported [ 98.073183][ T6153] kvm: pic: level sensitive irq not supported [ 98.268924][ T6165] Zero length message leads to an empty skb [ 98.389765][ T809] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 98.412929][ T6169] netlink: 'syz.1.83': attribute type 13 has an invalid length. [ 98.550532][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 98.557942][ T809] usb 4-1: unable to get BOS descriptor or descriptor too short [ 98.567943][ T809] usb 4-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 98.589855][ T809] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 98.609227][ T809] usb 4-1: New USB device found, idVendor=0582, idProduct=0114, bcdDevice= 0.40 [ 98.631469][ T809] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.647437][ T809] usb 4-1: Product: syz [ 98.653844][ T809] usb 4-1: Manufacturer: syz [ 98.658511][ T809] usb 4-1: SerialNumber: syz [ 98.661312][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 98.829837][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 98.836700][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 98.847525][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.859437][ T10] usb 2-1: config 0 descriptor?? [ 98.877756][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 99.482004][ T5945] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 99.548382][ T809] usb 4-1: USB disconnect, device number 6 [ 99.650593][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 99.673527][ T5945] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 99.687673][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.695960][ T5945] usb 1-1: Product: syz [ 99.700319][ T5945] usb 1-1: Manufacturer: syz [ 99.705057][ T5945] usb 1-1: SerialNumber: syz [ 99.720643][ T5945] usb 1-1: config 0 descriptor?? [ 99.721631][ T6192] netlink: 6032 bytes leftover after parsing attributes in process `syz.2.91'. [ 99.738857][ T5945] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 99.989781][ T809] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 100.086933][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.100174][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.140655][ T809] usb 3-1: Using ep0 maxpacket: 16 [ 100.147543][ T809] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 100.158231][ T809] usb 3-1: config 1 has no interface number 0 [ 100.164687][ T809] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 100.176031][ T809] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 100.187788][ T809] usb 3-1: config 1 interface 105 has no altsetting 0 [ 100.204342][ T809] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 100.219769][ T809] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 100.231293][ T809] usb 3-1: Product: syz [ 100.235516][ T809] usb 3-1: Manufacturer: syz [ 100.240735][ T809] usb 3-1: SerialNumber: syz [ 100.249175][ T6192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.264106][ T6192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.486021][ T6200] loop2: detected capacity change from 0 to 7 [ 100.497122][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.505222][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.513268][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.522249][ T10] gspca_sunplus: reg_w_riv err -71 [ 100.527058][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.536396][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.539115][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 100.553514][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.563650][ T10] usb 2-1: USB disconnect, device number 9 [ 100.570331][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.584947][ T6200] ldm_validate_partition_table(): Disk read failed. [ 100.594556][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.605369][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.615557][ T6200] Buffer I/O error on dev loop2, logical block 0, async page read [ 100.624147][ T6200] Dev loop2: unable to read RDB block 0 [ 100.632704][ T6200] loop2: unable to read partition table [ 100.638657][ T6200] loop2: partition table beyond EOD, truncated [ 100.645182][ T6200] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 100.678725][ T6192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 100.696268][ T6192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 101.084987][ T5945] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 101.108495][ T5945] usb 1-1: USB disconnect, device number 8 [ 101.226280][ T6213] ======================================================= [ 101.226280][ T6213] WARNING: The mand mount option has been deprecated and [ 101.226280][ T6213] and is ignored by this kernel. Remove the mand [ 101.226280][ T6213] option from the mount to silence this warning. [ 101.226280][ T6213] ======================================================= [ 101.325242][ T809] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 101.339170][ T809] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 101.369191][ T809] aqc111 3-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, e4:5d:bf:c3:ab:ee [ 101.383754][ T5911] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 101.406108][ T809] usb 3-1: USB disconnect, device number 6 [ 101.440342][ T809] aqc111 3-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.2-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 101.512905][ T809] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 101.525088][ T809] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 101.534592][ T809] aqc111 3-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 101.548448][ T6219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.101'. [ 101.599887][ T6219] capability: warning: `syz.1.101' uses 32-bit capabilities (legacy support in use) [ 101.894312][ T6230] netlink: 'syz.1.105': attribute type 13 has an invalid length. [ 101.927383][ T6232] Unsupported ieee802154 address type: 0 [ 101.937711][ T6233] comedi comedi3: dt2801: I/O port conflict (0x6,2) [ 101.954196][ T6232] comedi comedi3: dt2801: I/O port conflict (0x6,2) [ 102.151601][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 102.245662][ T6239] picdev_read: 8 callbacks suppressed [ 102.245682][ T6239] kvm: pic: non byte read [ 102.257377][ T6239] kvm: pic: level sensitive irq not supported [ 102.257440][ T6239] kvm: pic: non byte read [ 102.268678][ T6239] kvm: pic: non byte read [ 102.273571][ T6239] kvm: pic: level sensitive irq not supported [ 102.273642][ T6239] kvm: pic: non byte read [ 102.286657][ T6239] kvm: pic: non byte read [ 102.291734][ T6239] kvm: pic: level sensitive irq not supported [ 102.291806][ T6239] kvm: pic: non byte read [ 102.305225][ T6239] kvm: pic: non byte read [ 102.310313][ T6239] kvm: pic: non byte read [ 102.315086][ T6239] kvm: pic: non byte read [ 102.321420][ T6239] kvm: pic: non byte read [ 102.329741][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 102.342635][ T10] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 102.351884][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.362718][ T10] usb 2-1: config 0 descriptor?? [ 102.386904][ T10] gspca_main: sunplus-2.14.0 probing 041e:400b [ 102.449731][ T5945] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 102.599970][ T5945] usb 1-1: Using ep0 maxpacket: 16 [ 102.614128][ T5945] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 102.624610][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.632822][ T5945] usb 1-1: Product: syz [ 102.638693][ T5945] usb 1-1: Manufacturer: syz [ 102.643433][ T5945] usb 1-1: SerialNumber: syz [ 102.653623][ T5945] usb 1-1: config 0 descriptor?? [ 102.668427][ T5945] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 102.724446][ T6247] netlink: 104 bytes leftover after parsing attributes in process `syz.2.112'. [ 103.039757][ T994] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 103.192329][ T994] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.202637][ T994] usb 3-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 103.213577][ T994] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 103.228157][ T994] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.237424][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 103.245490][ T994] usb 3-1: SerialNumber: syz [ 103.259608][ T994] cdc_acm 3-1:1.0: skipping garbage [ 103.478576][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.487738][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.498400][ T6249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.508493][ T6249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.525476][ T994] usb 3-1: USB disconnect, device number 7 [ 103.582579][ T6230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.592016][ T6230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.907411][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 103.919182][ T5911] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 103.927145][ T5911] usb 4-1: can't read configurations, error -71 [ 103.998827][ T5945] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 104.011953][ T10] gspca_sunplus: reg_w_riv err -71 [ 104.021602][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 104.035119][ T5945] usb 1-1: USB disconnect, device number 9 [ 104.044407][ T10] usb 2-1: USB disconnect, device number 10 [ 104.164983][ T6256] warning: `syz.2.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.549783][ T5897] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.664119][ T6260] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 104.701061][ T5897] usb 3-1: Using ep0 maxpacket: 16 [ 104.722089][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 104.759731][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 104.809333][ T5897] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.839927][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.858214][ T5897] usb 3-1: Product: syz [ 104.870970][ T5897] usb 3-1: Manufacturer: syz [ 104.889879][ T5897] usb 3-1: SerialNumber: syz [ 104.908304][ T5897] usb 3-1: config 0 descriptor?? [ 104.928884][ T5897] em28xx 3-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 105.400475][ T5911] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 105.433333][ T6278] kvm: pic: level sensitive irq not supported [ 105.433879][ T6278] kvm: pic: level sensitive irq not supported [ 105.442964][ T6278] kvm: pic: level sensitive irq not supported [ 105.449868][ T6278] kvm: pic: level sensitive irq not supported [ 105.562025][ T5911] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 105.587005][ T5911] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 105.607449][ T5911] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 105.619513][ T5911] usb 4-1: config 220 has no interface number 2 [ 105.626647][ T5911] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 105.640835][ T5911] usb 4-1: config 220 interface 0 has no altsetting 0 [ 105.652802][ T5911] usb 4-1: config 220 interface 76 has no altsetting 0 [ 105.662013][ T5911] usb 4-1: config 220 interface 1 has no altsetting 0 [ 105.671481][ T5911] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 105.680730][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.688745][ T5911] usb 4-1: Product: syz [ 105.689918][ T5897] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 105.693507][ T5911] usb 4-1: Manufacturer: syz [ 105.705419][ T5911] usb 4-1: SerialNumber: syz [ 105.879848][ T994] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 105.930239][ T5911] usb 4-1: selecting invalid altsetting 0 [ 105.942258][ T5911] usb 4-1: selecting invalid altsetting 0 [ 105.952248][ T5911] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 105.960234][ T5911] uvcvideo 4-1:220.0: No valid video chain found. [ 105.975253][ T5911] usb 4-1: selecting invalid altsetting 0 [ 105.981868][ T5911] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 106.000468][ T5911] usb 4-1: USB disconnect, device number 9 [ 106.039839][ T994] usb 1-1: Using ep0 maxpacket: 16 [ 106.050819][ T994] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 106.060821][ T994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.068864][ T994] usb 1-1: Product: syz [ 106.073400][ T994] usb 1-1: Manufacturer: syz [ 106.078117][ T994] usb 1-1: SerialNumber: syz [ 106.086012][ T994] usb 1-1: config 0 descriptor?? [ 106.096734][ T994] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 106.522919][ T6284] netlink: 48 bytes leftover after parsing attributes in process `syz.3.125'. [ 106.598932][ T6287] netlink: 'syz.3.126': attribute type 13 has an invalid length. [ 106.849823][ T809] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 106.999706][ T809] usb 4-1: Using ep0 maxpacket: 32 [ 107.006735][ T809] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 107.015902][ T809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.027088][ T809] usb 4-1: config 0 descriptor?? [ 107.038185][ T809] gspca_main: sunplus-2.14.0 probing 041e:400b [ 107.233594][ T5911] usb 3-1: USB disconnect, device number 8 [ 107.418244][ T994] ssu100 1-1:0.0: probe with driver ssu100 failed with error -71 [ 107.444015][ T994] usb 1-1: USB disconnect, device number 10 [ 108.239894][ T5911] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 108.248633][ T6287] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.262013][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 108.275382][ T6287] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.286192][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 108.301885][ T6302] netlink: 'syz.2.132': attribute type 2 has an invalid length. [ 108.309931][ T5897] usb 2-1: can't read configurations, error -71 [ 108.420723][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.134'. [ 108.433681][ T5911] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 108.445783][ T5911] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.456083][ T5911] usb 1-1: config 0 has no interface number 0 [ 108.464234][ T5911] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.476919][ T5911] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.487612][ T5911] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.501388][ T5911] usb 1-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 108.512761][ T5911] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.530514][ T5911] usb 1-1: config 0 descriptor?? [ 108.711537][ T809] gspca_sunplus: reg_w_riv err -71 [ 108.728700][ T809] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 108.749174][ T6295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.771762][ T809] usb 4-1: USB disconnect, device number 10 [ 108.777127][ T6295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 109.003509][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.012431][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.021797][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.029405][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.037340][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.045031][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.052708][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.060276][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.067860][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.070440][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 109.075599][ T5911] holtek_mouse 0003:04D9:A04A.0002: unknown main item tag 0x0 [ 109.092812][ T5911] holtek_mouse 0003:04D9:A04A.0002: invalid report_size 443614224 [ 109.101822][ T5911] holtek_mouse 0003:04D9:A04A.0002: item 0 4 1 7 parsing failed [ 109.110253][ T5911] holtek_mouse 0003:04D9:A04A.0002: hid parse failed: -22 [ 109.117493][ T5911] holtek_mouse 0003:04D9:A04A.0002: probe with driver holtek_mouse failed with error -22 [ 109.204322][ T5911] usb 1-1: USB disconnect, device number 11 [ 109.233338][ T10] usb 3-1: config 0 has an invalid interface number: 231 but max is 0 [ 109.243051][ T10] usb 3-1: config 0 has no interface number 0 [ 109.249214][ T10] usb 3-1: config 0 interface 231 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 109.262705][ T10] usb 3-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 109.276029][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.304380][ T10] usb 3-1: Product: syz [ 109.309075][ T10] usb 3-1: Manufacturer: syz [ 109.314042][ T10] usb 3-1: SerialNumber: syz [ 109.326963][ T10] usb 3-1: config 0 descriptor?? [ 109.336844][ T6319] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 109.363832][ T10] plusb 3-1:0.231 usb0: register 'plusb' at usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1, 82:66:75:40:7d:89 [ 109.469746][ T5897] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 109.911667][ T6348] loop3: detected capacity change from 0 to 7 [ 109.922729][ T6348] Dev loop3: unable to read RDB block 7 [ 109.922782][ T6348] loop3: unable to read partition table [ 109.922988][ T6348] loop3: partition table beyond EOD, truncated [ 109.923041][ T6348] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 110.121507][ T994] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 110.304366][ T994] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.319871][ T994] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 110.331681][ T994] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 110.342485][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.368999][ T994] usb 4-1: config 0 descriptor?? [ 110.388418][ T994] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 110.396176][ T994] dvb-usb: bulk message failed: -22 (3/0) [ 110.407797][ T5955] usb 3-1: USB disconnect, device number 9 [ 110.458423][ T5955] plusb 3-1:0.231 usb0: unregister 'plusb' usb-dummy_hcd.2-1, Prolific PL-2301/PL-2302/PL-25A1/PL-27A1 [ 110.474394][ T994] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 110.491292][ T994] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 110.499081][ T994] usb 4-1: media controller created [ 110.511892][ T994] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.557595][ T994] dvb-usb: bulk message failed: -22 (6/0) [ 110.571741][ T994] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 110.580345][ T6333] dibusb: i2c wr: len=61 is too big! [ 110.580345][ T6333] [ 110.592664][ T6333] syz.3.144: vmalloc error: size 70368744185856, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 110.617703][ T994] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 110.630347][ T6333] CPU: 1 UID: 0 PID: 6333 Comm: syz.3.144 Tainted: G L syzkaller #0 PREEMPT(full) [ 110.630372][ T6333] Tainted: [L]=SOFTLOCKUP [ 110.630378][ T6333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 110.630396][ T6333] Call Trace: [ 110.630403][ T6333] [ 110.630410][ T6333] dump_stack_lvl+0xe8/0x150 [ 110.630449][ T6333] warn_alloc+0x249/0x340 [ 110.630472][ T6333] ? __pfx_warn_alloc+0x10/0x10 [ 110.630496][ T6333] ? lockdep_hardirqs_on+0x7a/0x110 [ 110.630520][ T6333] ? irqentry_exit+0x61a/0x700 [ 110.630562][ T6333] __vmalloc_node_range_noprof+0x132/0x1750 [ 110.630591][ T6333] ? __mutex_trylock_common+0x158/0x260 [ 110.630612][ T6333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 110.630657][ T6333] ? trace_contention_end+0x3d/0x140 [ 110.630681][ T6333] ? __mutex_lock+0x320/0x1420 [ 110.630719][ T6333] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 110.630761][ T6333] ? dvb_demux_do_ioctl+0x320/0x540 [ 110.630792][ T6333] ? __pfx___mutex_lock+0x10/0x10 [ 110.630823][ T6333] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 110.630853][ T6333] vmalloc_noprof+0xb2/0xe0 [ 110.630883][ T6333] ? dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 110.630910][ T6333] dvb_dmxdev_set_buffer_size+0xbe/0x1f0 [ 110.630942][ T6333] dvb_demux_do_ioctl+0x45d/0x540 [ 110.630971][ T6333] dvb_usercopy+0x199/0x2e0 [ 110.630993][ T6333] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 110.631018][ T6333] ? __pfx_dvb_usercopy+0x10/0x10 [ 110.631052][ T6333] ? __fget_files+0x3a0/0x420 [ 110.631080][ T6333] ? __fget_files+0x2a/0x420 [ 110.631109][ T6333] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 110.631133][ T6333] dvb_demux_ioctl+0x29/0x40 [ 110.631158][ T6333] __se_sys_ioctl+0xfc/0x170 [ 110.631191][ T6333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.631213][ T6333] do_syscall_64+0x15f/0xf80 [ 110.631239][ T6333] ? trace_irq_disable+0x3b/0x140 [ 110.631263][ T6333] ? clear_bhb_loop+0x40/0x90 [ 110.631287][ T6333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.631307][ T6333] RIP: 0033:0x7fcd4799c819 [ 110.631331][ T6333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.631347][ T6333] RSP: 002b:00007fcd487fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.631368][ T6333] RAX: ffffffffffffffda RBX: 00007fcd47c15fa0 RCX: 00007fcd4799c819 [ 110.631382][ T6333] RDX: 0000400000002000 RSI: 0000000000006f2d RDI: 0000000000000005 [ 110.631393][ T6333] RBP: 00007fcd47a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 110.631405][ T6333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.631415][ T6333] R13: 00007fcd47c16038 R14: 00007fcd47c15fa0 R15: 00007ffebf652298 [ 110.631448][ T6333] [ 110.631536][ T6333] Mem-Info: [ 110.768877][ T994] dvb-usb: schedule remote query interval to 150 msecs. [ 110.817830][ T5848] Bluetooth: hci0: command 0x206a tx timeout [ 110.825180][ T6347] dlm: plock device version mismatch: kernel (1.2.0), user (1851878519.48.0) [ 110.854940][ T5844] Bluetooth: hci0: Opcode 0x206a failed: -110 [ 110.946944][ T6333] active_anon:8752 inactive_anon:0 isolated_anon:0 [ 110.946944][ T6333] active_file:2889 inactive_file:39964 isolated_file:0 [ 110.946944][ T6333] unevictable:768 dirty:20 writeback:0 [ 110.946944][ T6333] slab_reclaimable:10280 slab_unreclaimable:91581 [ 110.946944][ T6333] mapped:27840 shmem:4237 pagetables:1172 [ 110.946944][ T6333] sec_pagetables:3 bounce:0 [ 110.946944][ T6333] kernel_misc_reclaimable:0 [ 110.946944][ T6333] free:1345742 free_pcp:8285 free_cma:0 [ 111.014211][ T994] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 111.022721][ T6333] Node 0 active_anon:35008kB inactive_anon:0kB active_file:11556kB inactive_file:159660kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:111360kB dirty:76kB writeback:0kB shmem:15412kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:11844kB pagetables:4532kB sec_pagetables:12kB all_unreclaimable? no Balloon:0kB [ 111.022785][ T6333] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 111.022836][ T6333] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.022890][ T6333] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 111.022933][ T6333] Node 0 DMA32 free:1421624kB boost:0kB min:34180kB low:42724kB high:51268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35008kB inactive_anon:0kB active_file:11556kB inactive_file:159660kB unevictable:1536kB writepending:76kB zspages:0kB present:3129332kB managed:2549200kB mlocked:0kB bounce:0kB free_pcp:32968kB local_pcp:18320kB free_cma:0kB [ 111.022990][ T6333] lowmem_reserve[]: 0 0 0 0 0 [ 111.023030][ T6333] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:580kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.023099][ T6333] lowmem_reserve[]: 0 0 0 0 0 [ 111.023142][ T6333] Node 1 Normal free:3945984kB boost:0kB min:55712kB low:69640kB high:83568kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.023199][ T6333] lowmem_reserve[]: 0 0 0 0 0 [ 111.023242][ T6333] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 111.023394][ T6333] Node 0 DMA32: 2*4kB (ME) 342*8kB (UE) 388*16kB (U) 6*32kB (UE) 14*64kB (UME) 2*128kB (UE) 11*256kB (ME) 9*512kB (ME) 13*1024kB (UME) 9*2048kB (UM) 335*4096kB (UM) = 1421624kB [ 111.023583][ T6333] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 111.023711][ T6333] Node 1 Normal: 8*4kB (UM) 10*8kB (UM) 9*16kB (UM) 16*32kB (UM) 6*64kB (UM) 3*128kB (UM) 2*256kB (M) 1*512kB (M) 1*1024kB (M) 1*2048kB (U) 962*4096kB (UM) = 3945984kB [ 111.023983][ T6333] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.024002][ T6333] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.024019][ T6333] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 111.024036][ T6333] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 111.024053][ T6333] 47086 total pagecache pages [ 111.024066][ T6333] 0 pages in swap cache [ 111.024075][ T6333] Free swap = 124996kB [ 111.024084][ T6333] Total swap = 124996kB [ 111.024094][ T6333] 2097051 pages RAM [ 111.024102][ T6333] 0 pages HighMem/MovableOnly [ 111.024111][ T6333] 427991 pages reserved [ 111.024119][ T6333] 0 pages cma reserved [ 111.372005][ T5945] dvb-usb: bulk message failed: -22 (1/0) [ 111.377927][ T5945] dvb-usb: error while querying for an remote control event. [ 111.489024][ T994] usb 4-1: USB disconnect, device number 11 [ 111.641917][ T994] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 111.839751][ T809] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 111.877847][ T6382] netlink: 'syz.3.151': attribute type 13 has an invalid length. [ 111.907616][ T5897] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.931228][ T5897] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 111.958501][ T5897] usb 2-1: can't read configurations, error -71 [ 112.010608][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 112.019528][ T809] usb 1-1: unable to get BOS descriptor or descriptor too short [ 112.029165][ T809] usb 1-1: config 3 has an invalid interface number: 193 but max is 0 [ 112.038799][ T809] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 112.052336][ T809] usb 1-1: config 3 has no interface number 0 [ 112.060793][ T809] usb 1-1: config 3 interface 193 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 112.073238][ T809] usb 1-1: config 3 interface 193 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.088864][ T809] usb 1-1: config 3 interface 193 has no altsetting 0 [ 112.098402][ T809] usb 1-1: New USB device found, idVendor=fff0, idProduct=fff0, bcdDevice=14.30 [ 112.108024][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.116346][ T809] usb 1-1: Product: syz [ 112.121802][ T809] usb 1-1: Manufacturer: syz [ 112.126553][ T809] usb 1-1: SerialNumber: syz [ 112.131379][ T5911] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 112.289773][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 112.305497][ T5911] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 112.319812][ T5897] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 112.335516][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.378319][ T5911] usb 4-1: config 0 descriptor?? [ 112.408496][ T5911] gspca_main: sunplus-2.14.0 probing 041e:400b [ 112.431085][ T6393] netlink: 32 bytes leftover after parsing attributes in process `syz.0.149'. [ 112.484795][ T5897] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 112.519961][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.539559][ T5897] usb 2-1: Product: syz [ 112.551390][ T5897] usb 2-1: Manufacturer: syz [ 112.559346][ T5897] usb 2-1: SerialNumber: syz [ 112.592371][ T6398] netlink: 15678 bytes leftover after parsing attributes in process `syz.2.153'. [ 112.697941][ T809] usbtest 1-1:3.193: couldn't get endpoints, -22 [ 112.705839][ T809] usbtest 1-1:3.193: probe with driver usbtest failed with error -22 [ 112.726354][ T809] usb 1-1: USB disconnect, device number 12 [ 112.788309][ T6385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.803180][ T6385] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.818036][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 112.836384][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 112.846980][ T5897] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 112.860783][ T5897] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 112.883986][ T5897] usb 2-1: USB disconnect, device number 14 [ 113.634735][ T6382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.671263][ T6382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.704717][ T6432] binder: 6431:6432 ioctl c0306201 0 returned -14 [ 113.784777][ T6436] binder: 6435:6436 ioctl c0306201 200000000080 returned -14 [ 113.803542][ T6436] binder: 6435:6436 ioctl c0306201 2000000003c0 returned -14 [ 114.104110][ T5911] gspca_sunplus: reg_w_riv err -71 [ 114.117463][ T5911] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 114.145506][ T5911] usb 4-1: USB disconnect, device number 12 [ 114.390363][ T5945] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 114.630546][ T6460] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 114.775282][ T6468] kvm: kvm [6465]: vcpu0, guest rIP: 0xfff0 Unhandled RDMSR(0x40000005) [ 114.832200][ T6470] fuse: Bad value for 'rootmode' [ 115.102189][ T6480] process 'syz.0.168' launched './file0' with NULL argv: empty string added [ 115.267440][ T29] audit: type=1326 audit(1775677698.374:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6478 comm="syz.2.170" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb71d99c819 code=0x0 [ 116.096056][ T6495] netlink: 'syz.0.174': attribute type 13 has an invalid length. [ 116.199850][ T5897] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 116.339758][ T994] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 116.352046][ T5897] usb 4-1: config 150 has an invalid interface number: 204 but max is 1 [ 116.362624][ T5897] usb 4-1: config 150 has no interface number 0 [ 116.369036][ T5897] usb 4-1: config 150 interface 204 has no altsetting 0 [ 116.379313][ T5897] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 116.390733][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.398826][ T5897] usb 4-1: Product: syz [ 116.404194][ T5897] usb 4-1: Manufacturer: syz [ 116.408867][ T5897] usb 4-1: SerialNumber: syz [ 116.491353][ T994] usb 1-1: Using ep0 maxpacket: 32 [ 116.499550][ T994] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 116.508992][ T994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.521375][ T994] usb 1-1: config 0 descriptor?? [ 116.557913][ T994] gspca_main: sunplus-2.14.0 probing 041e:400b [ 116.651375][ T5897] xr_serial 4-1:150.204: xr_serial converter detected [ 116.848102][ T6490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.172'. [ 116.858888][ T6490] netlink: 40 bytes leftover after parsing attributes in process `syz.3.172'. [ 116.869194][ T6511] nvme_fabrics: missing parameter 'transport=%s' [ 116.876910][ T6490] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.886848][ T6511] nvme_fabrics: missing parameter 'nqn=%s' [ 116.896625][ T6490] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.937768][ T5945] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.951611][ T5945] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 116.976024][ T5945] usb 2-1: can't read configurations, error -71 [ 117.572424][ T5897] usb 4-1: xr_serial converter now attached to ttyUSB0 [ 117.768473][ T6495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.777840][ T6495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.788933][ T5897] usb 4-1: USB disconnect, device number 13 [ 117.808642][ T5897] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0 [ 117.818627][ T5897] xr_serial 4-1:150.204: device disconnected [ 117.840546][ T5945] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 118.002858][ T5945] usb 2-1: Using ep0 maxpacket: 16 [ 118.015497][ T5945] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 118.025567][ T5945] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.034884][ T5945] usb 2-1: Product: syz [ 118.039172][ T5945] usb 2-1: Manufacturer: syz [ 118.044015][ T5945] usb 2-1: SerialNumber: syz [ 118.055294][ T5945] usb 2-1: config 0 descriptor?? [ 118.094967][ T5945] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 118.201739][ T994] gspca_sunplus: reg_w_riv err -71 [ 118.222720][ T994] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 118.253699][ T994] usb 1-1: USB disconnect, device number 13 [ 118.543919][ T6541] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.551250][ T6541] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.564859][ T6541] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.576139][ T6541] smbdirect: ib_dev[]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 118.592720][ T6541] smbdirect: ib_dev[]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 118.630378][ T6541] smbdirect: ib_dev[]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 118.724628][ T6541] infiniband : RDMA CMA: cma_listen_on_dev, error -98 [ 118.912087][ T6541] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.936518][ T6541] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.960705][ T6541] virt_wifi0 speed is unknown, defaulting to 1000 [ 118.982129][ T6541] virt_wifi0 speed is unknown, defaulting to 1000 [ 119.376337][ T5945] ssu100 2-1:0.0: probe with driver ssu100 failed with error -71 [ 119.407428][ T5945] usb 2-1: USB disconnect, device number 16 [ 119.679753][ T5955] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 119.829807][ T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 119.984846][ T10] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 120.005346][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 120.026415][ T10] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 120.040874][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.061118][ T10] usb 4-1: config 0 descriptor?? [ 120.070268][ T6564] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.158928][ T6571] picdev_read: 10 callbacks suppressed [ 120.158945][ T6571] kvm: pic: non byte read [ 120.169758][ T6571] kvm: pic: non byte read [ 120.174802][ T6571] kvm: pic: non byte read [ 120.179738][ T6571] kvm: pic: level sensitive irq not supported [ 120.179801][ T6571] kvm: pic: non byte read [ 120.191051][ T6571] kvm: pic: level sensitive irq not supported [ 120.191140][ T6571] kvm: pic: non byte read [ 120.202617][ T6571] kvm: pic: single mode not supported [ 120.202633][ T6571] kvm: pic: level sensitive irq not supported [ 120.208881][ T6571] kvm: pic: non byte read [ 120.221628][ T6571] kvm: pic: non byte read [ 120.226645][ T6571] kvm: pic: single mode not supported [ 120.226660][ T6571] kvm: pic: level sensitive irq not supported [ 120.233944][ T6571] kvm: pic: non byte read [ 120.248662][ T6571] kvm: pic: non byte read [ 120.696170][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 120.707843][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 120.743179][ T10] usb 4-1: USB disconnect, device number 14 [ 121.099826][ T5897] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 121.269741][ T5897] usb 2-1: Using ep0 maxpacket: 32 [ 121.280131][ T5897] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 121.288342][ T5897] usb 2-1: config 0 has no interface number 0 [ 121.294565][ T5897] usb 2-1: config 0 interface 184 has no altsetting 0 [ 121.303869][ T5897] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.314469][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.322630][ T5897] usb 2-1: Product: syz [ 121.326860][ T5897] usb 2-1: Manufacturer: syz [ 121.331553][ T5897] usb 2-1: SerialNumber: syz [ 121.340117][ T5897] usb 2-1: config 0 descriptor?? [ 121.519739][ T5911] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 121.669721][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 121.680802][ T5911] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 121.690981][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.699159][ T5911] usb 4-1: Product: syz [ 121.703716][ T5911] usb 4-1: Manufacturer: syz [ 121.708411][ T5911] usb 4-1: SerialNumber: syz [ 121.717277][ T5911] usb 4-1: config 0 descriptor?? [ 121.726063][ T5911] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 121.955727][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.966578][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.977859][ T6587] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.986525][ T5897] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 122.000358][ T6587] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.003862][ T5897] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 122.018334][ T6606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.028723][ T6606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.175014][ T5955] usb 1-1: unable to get BOS descriptor or descriptor too short [ 122.200759][ T5955] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 122.219936][ T5955] usb 1-1: can't read configurations, error -71 [ 122.240788][ T5897] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 122.257670][ T5897] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 122.269230][ T5897] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 122.280403][ T5897] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 122.297062][ T5897] usb 2-1: USB disconnect, device number 17 [ 122.850847][ T5955] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 122.890825][ T6616] kvm: pic: non byte read [ 122.899425][ T6616] kvm: pic: level sensitive irq not supported [ 122.899725][ T6616] kvm: pic: level sensitive irq not supported [ 122.907698][ T6616] kvm: pic: single mode not supported [ 122.914376][ T6616] kvm: pic: level sensitive irq not supported [ 122.920768][ T6616] kvm: pic: level sensitive irq not supported [ 123.011432][ T5955] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 123.030603][ T5911] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 123.041281][ T5955] usb 1-1: config 0 has no interface number 0 [ 123.066562][ T5911] usb 4-1: USB disconnect, device number 15 [ 123.076387][ T5955] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 123.102327][ T5955] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.119766][ T5955] usb 1-1: Product: syz [ 123.128531][ T5955] usb 1-1: Manufacturer: syz [ 123.143498][ T5955] usb 1-1: SerialNumber: syz [ 123.157567][ T6628] fuse: Unknown parameter 'smackfsroot' [ 123.175061][ T5955] usb 1-1: config 0 descriptor?? [ 123.386879][ T5955] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 123.400321][ T5955] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 123.411090][ T5955] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 123.419131][ T5955] usb 1-1: media controller created [ 123.431116][ T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 123.438939][ T5897] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 123.448969][ T5955] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 123.594611][ T10] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 123.608800][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 123.620630][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 123.631889][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.643122][ T5897] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 123.654105][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.667818][ T5897] usb 2-1: Product: syz [ 123.672711][ T10] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.683215][ T5897] usb 2-1: Manufacturer: syz [ 123.687883][ T10] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.696007][ T5897] usb 2-1: SerialNumber: syz [ 123.702663][ T10] usb 3-1: Product: syz [ 123.708121][ T5897] usb 2-1: config 0 descriptor?? [ 123.716019][ T10] usb 3-1: Manufacturer: syz [ 123.730349][ T5897] ch341 2-1:0.0: ch341-uart converter detected [ 123.752491][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 123.765792][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 123.774827][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 123.780853][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 123.793922][ T5955] usb 1-1: USB disconnect, device number 15 [ 123.957408][ T5911] usb 3-1: USB disconnect, device number 10 [ 124.109745][ T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 124.269314][ T6632] devtmpfs: Too few inodes for current use [ 124.941771][ T5897] usb 2-1: failed to send control message: -110 [ 124.953692][ T5897] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 125.605090][ T6653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.222'. [ 125.617724][ T6653] netlink: 188 bytes leftover after parsing attributes in process `syz.0.222'. [ 125.714172][ T6655] picdev_read: 8 callbacks suppressed [ 125.714208][ T6655] kvm: pic: non byte read [ 125.725178][ T6655] kvm: pic: non byte read [ 125.730192][ T6655] kvm: pic: non byte read [ 125.734975][ T6655] kvm: pic: level sensitive irq not supported [ 125.735052][ T6655] kvm: pic: non byte read [ 125.747660][ T6655] kvm: pic: level sensitive irq not supported [ 125.747737][ T6655] kvm: pic: non byte read [ 125.761208][ T6655] kvm: pic: single mode not supported [ 125.761223][ T6655] kvm: pic: level sensitive irq not supported [ 125.766839][ T6655] kvm: pic: non byte read [ 125.778035][ T6655] kvm: pic: non byte read [ 125.783578][ T6655] kvm: pic: single mode not supported [ 125.783589][ T6655] kvm: pic: level sensitive irq not supported [ 125.789140][ T6655] kvm: pic: non byte read [ 125.800258][ T6655] kvm: pic: non byte read [ 126.156763][ T994] usb 2-1: USB disconnect, device number 18 [ 126.198660][ T994] ch341 2-1:0.0: device disconnected [ 126.443577][ T6670] netlink: 'syz.1.227': attribute type 21 has an invalid length. [ 126.465508][ T6670] netlink: 132 bytes leftover after parsing attributes in process `syz.1.227'. [ 126.628248][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 126.651774][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 126.659404][ T10] usb 4-1: can't read configurations, error -71 [ 126.964354][ T6689] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:16x16 (0x38414261, 8, 0, 0, 0) [ 127.136447][ T6694] capability: warning: `syz.3.236' uses deprecated v2 capabilities in a way that may be insecure [ 127.261653][ T6687] netlink: 'syz.1.233': attribute type 2 has an invalid length. [ 127.300114][ T6697] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'. [ 127.499961][ T10] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 127.511825][ T6702] netlink: 'syz.1.239': attribute type 13 has an invalid length. [ 127.691613][ T10] usb 4-1: config 150 has an invalid interface number: 204 but max is 2 [ 127.701367][ T10] usb 4-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 127.711534][ T10] usb 4-1: config 150 has no interface number 0 [ 127.717857][ T10] usb 4-1: config 150 interface 204 has no altsetting 0 [ 127.728084][ T10] usb 4-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 127.737450][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.745585][ T10] usb 4-1: Product: syz [ 127.749952][ T10] usb 4-1: Manufacturer: syz [ 127.754628][ T10] usb 4-1: SerialNumber: syz [ 127.771065][ T5955] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 127.930465][ T5955] usb 2-1: Using ep0 maxpacket: 32 [ 127.941502][ T5955] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 127.959674][ T5955] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.980922][ T5955] usb 2-1: config 0 descriptor?? [ 128.001744][ T5955] gspca_main: sunplus-2.14.0 probing 041e:400b [ 128.141813][ T10] xr_serial 4-1:150.204: skipping garbage [ 128.147648][ T10] xr_serial 4-1:150.204: xr_serial converter detected [ 128.173509][ T10] xr_serial ttyUSB0: Failed to set reg 0x60: -71 [ 128.180127][ T10] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71 [ 128.194075][ T10] usb 4-1: USB disconnect, device number 17 [ 128.202669][ T10] xr_serial 4-1:150.204: device disconnected [ 129.210285][ T24] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 129.290043][ T5911] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 129.298942][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.308915][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.370208][ T24] usb 3-1: Using ep0 maxpacket: 16 [ 129.378661][ T24] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 129.387893][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.396014][ T24] usb 3-1: Product: syz [ 129.400369][ T24] usb 3-1: Manufacturer: syz [ 129.405001][ T24] usb 3-1: SerialNumber: syz [ 129.412489][ T24] usb 3-1: config 0 descriptor?? [ 129.421795][ T24] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 129.430597][ T5911] usb 1-1: device descriptor read/64, error -71 [ 129.669818][ T5911] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 129.719869][ T5955] gspca_sunplus: reg_w_riv err -71 [ 129.725207][ T5955] sunplus 2-1:0.0: probe with driver sunplus failed with error -71 [ 129.738218][ T5955] usb 2-1: USB disconnect, device number 19 [ 129.799896][ T5911] usb 1-1: device descriptor read/64, error -71 [ 129.919014][ T5911] usb usb1-port1: attempt power cycle [ 130.269806][ T5911] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 130.300443][ T5911] usb 1-1: device descriptor read/8, error -71 [ 130.379751][ T5955] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 130.485432][ T24] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71 [ 130.500647][ T24] usb 3-1: USB disconnect, device number 11 [ 130.541671][ T5911] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 130.551380][ T5955] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 130.560672][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.569026][ T5911] usb 1-1: device descriptor read/8, error -71 [ 130.578401][ T5955] usb 4-1: config 0 descriptor?? [ 130.588048][ T5955] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 130.680321][ T5911] usb usb1-port1: unable to enumerate USB device [ 131.287033][ T6755] evm: overlay not supported [ 131.397178][ T5955] usb 4-1: USB disconnect, device number 18 [ 131.599734][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 131.753942][ T24] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 131.763187][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.771372][ T24] usb 2-1: Product: syz [ 131.775673][ T24] usb 2-1: Manufacturer: syz [ 131.780390][ T24] usb 2-1: SerialNumber: syz [ 131.798649][ T24] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 131.837990][ T5911] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 132.068346][ T6763] netlink: 9 bytes leftover after parsing attributes in process `syz.3.258'. [ 132.087582][ T6763] gretap0: entered promiscuous mode [ 132.096807][ T6766] netlink: 'syz.0.259': attribute type 13 has an invalid length. [ 132.106903][ T6763] netlink: 5 bytes leftover after parsing attributes in process `syz.3.258'. [ 132.116270][ T6763] 0{X: renamed from gretap0 [ 132.127774][ T6763] 0{X: left promiscuous mode [ 132.135713][ T6763] 0{X: entered allmulticast mode [ 132.152386][ T6763] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 132.267471][ T5897] usb 2-1: USB disconnect, device number 20 [ 132.359742][ T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 132.510515][ T24] usb 1-1: Using ep0 maxpacket: 32 [ 132.526758][ T24] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 132.546719][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.579438][ T24] usb 1-1: config 0 descriptor?? [ 132.598658][ T24] gspca_main: sunplus-2.14.0 probing 041e:400b [ 132.615894][ T6780] netlink: 14532 bytes leftover after parsing attributes in process `syz.2.265'. [ 132.786495][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794414][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.865064][ T5911] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 132.889019][ T5911] ath9k_htc: Failed to initialize the device [ 132.903537][ T5897] usb 2-1: ath9k_htc: USB layer deinitialized [ 132.989812][ T5955] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 133.159686][ T5955] usb 4-1: Using ep0 maxpacket: 16 [ 133.175598][ T5955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.194461][ T5955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 133.218806][ T5955] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 133.235738][ T5955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.248272][ T29] audit: type=1326 audit(1775677716.364:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967999c819 code=0x7ffc0000 [ 133.276032][ T5955] usb 4-1: config 0 descriptor?? [ 133.300413][ T29] audit: type=1326 audit(1775677716.364:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f967999c819 code=0x7ffc0000 [ 133.339973][ T29] audit: type=1326 audit(1775677716.364:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967999c819 code=0x7ffc0000 [ 133.370420][ T29] audit: type=1326 audit(1775677716.364:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f967999c819 code=0x7ffc0000 [ 133.404409][ T29] audit: type=1326 audit(1775677716.364:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967999c819 code=0x7ffc0000 [ 133.448697][ T29] audit: type=1326 audit(1775677716.364:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f967999c819 code=0x7ffc0000 [ 133.480541][ T29] audit: type=1326 audit(1775677716.364:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f967999c819 code=0x7ffc0000 [ 133.505048][ T29] audit: type=1326 audit(1775677716.364:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f967999c819 code=0x7ffc0000 [ 133.527763][ T29] audit: type=1326 audit(1775677716.364:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9679996597 code=0x7ffc0000 [ 133.550217][ T29] audit: type=1326 audit(1775677716.364:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6794 comm="syz.1.271" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f967993db99 code=0x7ffc0000 [ 133.756774][ T5955] hid_parser_main: 48 callbacks suppressed [ 133.756796][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.784905][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.799851][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.814986][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.831492][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.851104][ T6766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.859573][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.867424][ T6766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.879711][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.892108][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.909934][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.929728][ T5955] redragon 0003:0C45:760B.0003: unknown main item tag 0x0 [ 133.937132][ T5955] redragon 0003:0C45:760B.0003: unexpected long global item [ 133.950866][ T5955] redragon 0003:0C45:760B.0003: probe with driver redragon failed with error -22 [ 133.976275][ T5955] usb 4-1: USB disconnect, device number 19 [ 134.296874][ T24] gspca_sunplus: reg_w_riv err -71 [ 134.310188][ T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 134.324825][ T6807] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 134.344712][ T24] usb 1-1: USB disconnect, device number 20 [ 134.352016][ T6807] overlayfs: workdir and upperdir must be separate subtrees [ 134.629727][ T5911] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 134.646896][ T6820] openvswitch: netlink: IPv4 tun info is not correct [ 134.660526][ T5951] usb 2-1: new low-speed USB device number 21 using dummy_hcd [ 134.670317][ T6820] netlink: 1335 bytes leftover after parsing attributes in process `syz.3.280'. [ 134.779793][ T5911] usb 3-1: Using ep0 maxpacket: 32 [ 134.787396][ T5911] usb 3-1: config 0 has an invalid interface number: 114 but max is 0 [ 134.796250][ T5911] usb 3-1: config 0 has no interface number 0 [ 134.802446][ T5911] usb 3-1: too many endpoints for config 0 interface 114 altsetting 100: 105, using maximum allowed: 30 [ 134.819717][ T5911] usb 3-1: config 0 interface 114 altsetting 100 has 0 endpoint descriptors, different from the interface descriptor's value: 105 [ 134.833335][ T5911] usb 3-1: config 0 interface 114 has no altsetting 0 [ 134.840478][ T5911] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 134.850162][ T5911] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.861060][ T5951] usb 2-1: unable to get BOS descriptor or descriptor too short [ 134.871556][ T5951] usb 2-1: config 194 has an invalid interface number: 4 but max is 0 [ 134.880826][ T5951] usb 2-1: config 194 has no interface number 0 [ 134.888024][ T5911] usb 3-1: config 0 descriptor?? [ 134.894594][ T5951] usb 2-1: config 194 interface 4 has no altsetting 0 [ 134.914960][ T5951] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=b0.85 [ 134.929920][ T10] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 134.947050][ T5951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.970081][ T5951] usb 2-1: Product: ⑹?➲ᩘⵒ莖푘坉㷑❖ࢥ昀쪃躈羨᫗ᬗ럦߸ᎍ鑎郗쐊 [ 134.983225][ T5951] usb 2-1: Manufacturer: 揁 [ 135.092842][ T10] usb 4-1: config 1 has an invalid descriptor of length 43, skipping remainder of the config [ 135.104010][ T10] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 135.115300][ T10] usb 4-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 135.126078][ T10] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 135.142494][ T10] usb 4-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 135.151625][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.159727][ T10] usb 4-1: Product: syz [ 135.163904][ T10] usb 4-1: Manufacturer: syz [ 135.168531][ T10] usb 4-1: SerialNumber: syz [ 135.260069][ T5897] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 135.336274][ T5911] gspca_main: sunplus-2.14.0 probing 041e:400b [ 135.351117][ T5911] gspca_sunplus: reg_w_riv err -71 [ 135.356385][ T5911] sunplus 3-1:0.114: probe with driver sunplus failed with error -71 [ 135.371568][ T5911] usb 3-1: USB disconnect, device number 12 [ 135.396584][ T5951] usbhid 2-1:194.4: couldn't find an input interrupt endpoint [ 135.420894][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 135.444250][ T5951] usb 2-1: USB disconnect, device number 21 [ 135.456159][ T5897] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 135.467881][ T10] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 135.476366][ T10] usb 4-1: MIDIStreaming interface descriptor not found [ 135.483772][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.492870][ T5897] usb 1-1: Product: syz [ 135.498878][ T5897] usb 1-1: Manufacturer: syz [ 135.519124][ T5897] usb 1-1: SerialNumber: syz [ 135.536823][ T5897] usb 1-1: config 0 descriptor?? [ 135.549862][ T5897] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 135.596706][ T10] usb 4-1: USB disconnect, device number 20 [ 135.647699][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 135.979394][ T6836] FAULT_INJECTION: forcing a failure. [ 135.979394][ T6836] name failslab, interval 1, probability 0, space 0, times 1 [ 135.993000][ T6836] CPU: 1 UID: 0 PID: 6836 Comm: syz.2.285 Tainted: G L syzkaller #0 PREEMPT(full) [ 135.993029][ T6836] Tainted: [L]=SOFTLOCKUP [ 135.993037][ T6836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 135.993048][ T6836] Call Trace: [ 135.993056][ T6836] [ 135.993064][ T6836] dump_stack_lvl+0xe8/0x150 [ 135.993114][ T6836] should_fail_ex+0x412/0x560 [ 135.993146][ T6836] should_failslab+0xa8/0x100 [ 135.993170][ T6836] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 135.993200][ T6836] ? __alloc_skb+0x186/0x7d0 [ 135.993220][ T6836] ? __alloc_skb+0x1d0/0x7d0 [ 135.993239][ T6836] ? __local_bh_enable_ip+0xd0/0x130 [ 135.993272][ T6836] __alloc_skb+0x1d0/0x7d0 [ 135.993297][ T6836] netlink_sendmsg+0x5d4/0xb40 [ 135.993327][ T6836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 135.993351][ T6836] ? trace_irq_disable+0x3b/0x140 [ 135.993373][ T6836] ? aa_sock_msg_perm+0xf1/0x1b0 [ 135.993395][ T6836] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 135.993437][ T6836] ____sys_sendmsg+0x972/0x9f0 [ 135.993480][ T6836] ? __might_fault+0xaf/0x130 [ 135.993515][ T6836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 135.993549][ T6836] ? import_iovec+0x73/0xa0 [ 135.993584][ T6836] ___sys_sendmsg+0x2a5/0x360 [ 135.993606][ T6836] ? __lock_acquire+0x6b5/0x2cf0 [ 135.993643][ T6836] ? __pfx____sys_sendmsg+0x10/0x10 [ 135.993708][ T6836] ? __fget_files+0x2a/0x420 [ 135.993738][ T6836] ? __fget_files+0x3a0/0x420 [ 135.993764][ T6836] __x64_sys_sendmsg+0x1bd/0x2a0 [ 135.993802][ T6836] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 135.993839][ T6836] ? __pfx_ksys_write+0x10/0x10 [ 135.993866][ T6836] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.993892][ T6836] do_syscall_64+0x15f/0xf80 [ 135.993913][ T6836] ? trace_irq_disable+0x3b/0x140 [ 135.993930][ T6836] ? clear_bhb_loop+0x40/0x90 [ 135.993964][ T6836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.993986][ T6836] RIP: 0033:0x7fb71d99c819 [ 135.994010][ T6836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 135.994025][ T6836] RSP: 002b:00007fb71e8d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 135.994050][ T6836] RAX: ffffffffffffffda RBX: 00007fb71dc15fa0 RCX: 00007fb71d99c819 [ 135.994061][ T6836] RDX: 0000000020004000 RSI: 0000200000000040 RDI: 0000000000000003 [ 135.994070][ T6836] RBP: 00007fb71e8d5090 R08: 0000000000000000 R09: 0000000000000000 [ 135.994079][ T6836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 135.994087][ T6836] R13: 00007fb71dc16038 R14: 00007fb71dc15fa0 R15: 00007fff556fde38 [ 135.994129][ T6836] [ 136.261562][ T5897] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 136.355191][ T6841] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.399767][ T10] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 136.506533][ T6849] netlink: 'syz.2.290': attribute type 13 has an invalid length. [ 136.551452][ T10] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.562764][ T10] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 136.576313][ T10] usb 2-1: config 1 interface 0 has no altsetting 0 [ 136.585303][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 136.594580][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.602701][ T10] usb 2-1: Product: syz [ 136.606884][ T10] usb 2-1: Manufacturer: Я [ 136.611471][ T10] usb 2-1: SerialNumber: syz [ 136.699717][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 136.749733][ T994] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 136.832644][ T10] usbhid 2-1:1.0: can't add hid device: -71 [ 136.838646][ T10] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 136.849745][ T5897] usb 4-1: Using ep0 maxpacket: 16 [ 136.855737][ T10] usb 2-1: USB disconnect, device number 22 [ 136.865282][ T5897] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 136.877237][ T5897] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 136.898401][ T5897] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 136.907765][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.916205][ T994] usb 3-1: Using ep0 maxpacket: 32 [ 136.922636][ T5897] usb 4-1: Product: syz [ 136.928480][ T5897] usb 4-1: Manufacturer: syz [ 136.934400][ T5897] usb 4-1: SerialNumber: syz [ 136.943267][ T994] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 136.954540][ T5897] usb 4-1: config 0 descriptor?? [ 136.959688][ T994] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.972038][ T5897] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 136.982329][ T5897] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 136.992257][ T994] usb 3-1: config 0 descriptor?? [ 137.003468][ T994] gspca_main: sunplus-2.14.0 probing 041e:400b [ 137.578144][ T5897] em28xx 4-1:0.0: chip ID is em2840 [ 137.779087][ T5897] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 137.808668][ T5897] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 137.822034][ T5897] em28xx 4-1:0.0: No AC97 audio processor [ 137.833958][ T5897] usb 4-1: USB disconnect, device number 21 [ 137.846153][ T5897] em28xx 4-1:0.0: Disconnecting em28xx [ 137.865133][ T5897] em28xx 4-1:0.0: Freeing device [ 137.880509][ T5951] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 138.019734][ T5951] usb 2-1: device descriptor read/64, error -71 [ 138.259796][ T5951] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 138.368758][ T5955] usb 1-1: USB disconnect, device number 21 [ 138.391747][ T5951] usb 2-1: device descriptor read/64, error -71 [ 138.579889][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 138.636960][ T5951] usb usb2-port1: attempt power cycle [ 138.738444][ T6855] random: crng reseeded on system resumption [ 138.854356][ T994] gspca_sunplus: reg_w_riv err -71 [ 138.874088][ T994] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 138.916766][ T994] usb 3-1: USB disconnect, device number 13 [ 138.990738][ T5951] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 139.036808][ T5951] usb 2-1: device descriptor read/8, error -71 [ 139.074442][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.264654][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.291162][ T5951] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 139.340418][ T5951] usb 2-1: device descriptor read/8, error -71 [ 139.385499][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.460664][ T5951] usb usb2-port1: unable to enumerate USB device [ 139.556762][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.650560][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 139.664264][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 139.673191][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 139.682744][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 139.692816][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 139.785116][ T6868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 139.817070][ T6868] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 139.857026][ T6868] trusted_key: syz.2.299 sent an empty control message without MSG_MORE. [ 139.910582][ T6868] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 139.963243][ T6865] lo speed is unknown, defaulting to 1000 [ 139.971398][ T58] bridge_slave_1: left allmulticast mode [ 139.980130][ T58] bridge_slave_1: left promiscuous mode [ 139.988017][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.007930][ T58] bridge_slave_0: left allmulticast mode [ 140.014380][ T58] bridge_slave_0: left promiscuous mode [ 140.020703][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.120080][ T5951] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 140.170513][ T5911] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 140.281790][ T5951] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 140.304698][ T5951] usb 1-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 140.317906][ T5911] usb 3-1: device descriptor read/64, error -71 [ 140.335926][ T5951] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 140.368202][ T5951] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 140.397893][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 140.427907][ T5951] usb 1-1: SerialNumber: syz [ 140.462843][ T5951] cdc_acm 1-1:1.0: skipping garbage [ 140.482128][ T58] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.523172][ T58] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.547450][ T58] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 140.570449][ T5911] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 140.617222][ T58] bond0 (unregistering): Released all slaves [ 140.652760][ T6865] virt_wifi0 speed is unknown, defaulting to 1000 [ 140.696490][ T5955] usb 1-1: USB disconnect, device number 22 [ 140.719734][ T5911] usb 3-1: device descriptor read/64, error -71 [ 140.840768][ T5911] usb usb3-port1: attempt power cycle [ 141.209830][ T5911] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 141.246988][ T5911] usb 3-1: device descriptor read/8, error -71 [ 141.500578][ T5911] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 141.552351][ T5911] usb 3-1: device descriptor read/8, error -71 [ 141.605813][ T6895] kvm: emulating exchange as write [ 141.673852][ T58] hsr_slave_0: left promiscuous mode [ 141.683175][ T5911] usb usb3-port1: unable to enumerate USB device [ 141.696608][ T58] hsr_slave_1: left promiscuous mode [ 141.719334][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.744554][ T5844] Bluetooth: hci1: command tx timeout [ 141.750956][ T58] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.776351][ T58] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.784705][ T58] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.837586][ T58] veth1_macvtap: left promiscuous mode [ 141.855735][ T58] veth0_macvtap: left promiscuous mode [ 141.873530][ T58] veth1_vlan: left promiscuous mode [ 141.886882][ T58] veth0_vlan: left promiscuous mode [ 141.909895][ T5945] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 142.091385][ T5945] usb 1-1: Using ep0 maxpacket: 32 [ 142.117548][ T5945] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1056, setting to 1024 [ 142.152832][ T5945] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 252, changing to 7 [ 142.195974][ T5945] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 142.215705][ T5945] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.236616][ T5945] usb 1-1: Product: syz [ 142.246147][ T5945] usb 1-1: Manufacturer: syz [ 142.259818][ T5945] usb 1-1: SerialNumber: syz [ 142.615886][ T58] team0 (unregistering): Port device team_slave_1 removed [ 142.676112][ T58] team0 (unregistering): Port device team_slave_0 removed [ 142.696328][ T5945] usb 1-1: unit 130 not found! [ 142.936921][ T5945] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 143.012489][ T5945] usb 1-1: unit 130 not found! [ 143.046336][ T5945] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 143.093058][ T5945] usb 1-1: unit 130 not found! [ 143.140981][ T6891] lo speed is unknown, defaulting to 1000 [ 143.185925][ T6865] chnl_net:caif_netlink_parms(): no params data found [ 143.201300][ T809] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 143.233308][ T6891] virt_wifi0 speed is unknown, defaulting to 1000 [ 143.332679][ T1132] smbdirect: ib_dev[] removed [ 143.371348][ T809] usb 3-1: Using ep0 maxpacket: 8 [ 143.395207][ T809] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 143.410230][ T809] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 143.424033][ T809] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.438442][ T809] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.458990][ T809] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.472745][ T809] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 143.503070][ T1132] ================================================================== [ 143.511166][ T1132] BUG: KASAN: invalid-free in gid_table_release_one+0x384/0x470 [ 143.518861][ T1132] Free of addr ffff888029e782d8 by task kworker/u8:9/1132 [ 143.525986][ T1132] [ 143.528336][ T1132] CPU: 1 UID: 0 PID: 1132 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 143.528365][ T1132] Tainted: [L]=SOFTLOCKUP [ 143.528373][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 143.528387][ T1132] Workqueue: ib-unreg-wq ib_unregister_work [ 143.528415][ T1132] Call Trace: [ 143.528423][ T1132] [ 143.528443][ T1132] dump_stack_lvl+0xe8/0x150 [ 143.528473][ T1132] print_address_description+0x55/0x1e0 [ 143.528509][ T1132] print_report+0x58/0x70 [ 143.528533][ T1132] ? gid_table_release_one+0x384/0x470 [ 143.528554][ T1132] kasan_report_invalid_free+0xea/0x110 [ 143.528574][ T1132] ? gid_table_release_one+0x384/0x470 [ 143.528597][ T1132] ? gid_table_release_one+0x384/0x470 [ 143.528618][ T1132] __kasan_slab_pre_free+0x104/0x120 [ 143.528637][ T1132] kfree+0x173/0x640 [ 143.528661][ T1132] ? gid_table_release_one+0x384/0x470 [ 143.528684][ T1132] gid_table_release_one+0x384/0x470 [ 143.528712][ T1132] ib_device_release+0xd2/0x1c0 [ 143.528752][ T1132] ? __pfx_ib_device_release+0x10/0x10 [ 143.528778][ T1132] device_release+0xc4/0x1f0 [ 143.528798][ T1132] kobject_put+0x228/0x560 [ 143.528826][ T1132] ? process_scheduled_works+0xa70/0x1860 [ 143.528853][ T1132] process_scheduled_works+0xb5d/0x1860 [ 143.528892][ T1132] ? __pfx_process_scheduled_works+0x10/0x10 [ 143.528921][ T1132] ? assign_work+0x3d5/0x5e0 [ 143.528947][ T1132] worker_thread+0xa53/0xfc0 [ 143.528985][ T1132] kthread+0x388/0x470 [ 143.529004][ T1132] ? __pfx_worker_thread+0x10/0x10 [ 143.529029][ T1132] ? __pfx_kthread+0x10/0x10 [ 143.529048][ T1132] ret_from_fork+0x514/0xb70 [ 143.529074][ T1132] ? __pfx_ret_from_fork+0x10/0x10 [ 143.529097][ T1132] ? __switch_to+0xc79/0x1410 [ 143.529115][ T1132] ? __pfx_kthread+0x10/0x10 [ 143.529131][ T1132] ret_from_fork_asm+0x1a/0x30 [ 143.529150][ T1132] [ 143.529155][ T1132] [ 143.711798][ T1132] Allocated by task 6541: [ 143.716150][ T1132] kasan_save_track+0x3e/0x80 [ 143.720867][ T1132] __kasan_kmalloc+0x93/0xb0 [ 143.725488][ T1132] __kmalloc_noprof+0x35c/0x760 [ 143.730382][ T1132] ib_cache_setup_one+0x198/0x570 [ 143.735535][ T1132] ib_register_device+0xfbd/0x13e0 [ 143.740686][ T1132] siw_newlink+0x8fe/0xde0 [ 143.745143][ T1132] nldev_newlink+0x5bc/0x650 [ 143.749764][ T1132] rdma_nl_rcv+0x6d1/0xa10 [ 143.754210][ T1132] netlink_unicast+0x80f/0x9b0 [ 143.759011][ T1132] netlink_sendmsg+0x813/0xb40 [ 143.763806][ T1132] ____sys_sendmsg+0x972/0x9f0 [ 143.765816][ T5945] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 143.768601][ T1132] ___sys_sendmsg+0x2a5/0x360 [ 143.768629][ T1132] __x64_sys_sendmsg+0x1bd/0x2a0 [ 143.787194][ T1132] do_syscall_64+0x15f/0xf80 [ 143.791832][ T1132] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.797752][ T1132] [ 143.800116][ T1132] The buggy address belongs to the object at ffff888029e78200 [ 143.800116][ T1132] which belongs to the cache kmalloc-256 of size 256 [ 143.814194][ T1132] The buggy address is located 216 bytes inside of [ 143.814194][ T1132] 224-byte region [ffff888029e78200, ffff888029e782e0) [ 143.821192][ T5945] usb 1-1: USB disconnect, device number 23 [ 143.827494][ T1132] [ 143.827503][ T1132] The buggy address belongs to the physical page: [ 143.827515][ T1132] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29e78 [ 143.850967][ T1132] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 143.859497][ T1132] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 143.867067][ T1132] page_type: f5(slab) [ 143.871082][ T1132] raw: 00fff00000000040 ffff88813fe34b40 dead000000000100 dead000000000122 [ 143.879699][ T1132] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 143.888315][ T1132] head: 00fff00000000040 ffff88813fe34b40 dead000000000100 dead000000000122 [ 143.897016][ T1132] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 143.905718][ T1132] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 143.914422][ T1132] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 143.923126][ T1132] page dumped because: kasan: bad access detected [ 143.929575][ T1132] page_owner tracks the page as allocated [ 143.935315][ T1132] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 135, tgid 135 (kworker/u8:6), ts 9538179994, free_ts 0 [ 143.955573][ T1132] post_alloc_hook+0x231/0x280 [ 143.960375][ T1132] get_page_from_freelist+0x24ba/0x2540 [ 143.965968][ T1132] __alloc_frozen_pages_noprof+0x18d/0x380 [ 143.971803][ T1132] allocate_slab+0x77/0x660 [ 143.976362][ T1132] refill_objects+0x339/0x3d0 [ 143.981106][ T1132] __pcs_replace_empty_main+0x321/0x720 [ 143.986698][ T1132] __kmalloc_cache_noprof+0x392/0x660 [ 143.992118][ T1132] scsi_probe_and_add_lun+0x2f8/0x48e0 [ 143.997715][ T1132] __scsi_scan_target+0x1f0/0xe10 [ 144.002771][ T1132] scsi_scan_host_selected+0x3d0/0x780 [ 144.008271][ T1132] do_scan_async+0x124/0x6f0 [ 144.012890][ T1132] async_run_entry_fn+0xa8/0x440 [ 144.017867][ T1132] process_scheduled_works+0xb5d/0x1860 [ 144.023455][ T1132] worker_thread+0xa53/0xfc0 [ 144.028082][ T1132] kthread+0x388/0x470 [ 144.032176][ T1132] ret_from_fork+0x514/0xb70 [ 144.036802][ T1132] page_owner free stack trace missing [ 144.042185][ T1132] [ 144.042959][ T6830] udevd[6830]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.044622][ T1132] Memory state around the buggy address: [ 144.044636][ T1132] ffff888029e78180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.044652][ T1132] ffff888029e78200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 144.082147][ T1132] >ffff888029e78280: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 144.090236][ T1132] ^ [ 144.097191][ T1132] ffff888029e78300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.105256][ T1132] ffff888029e78380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 144.113327][ T1132] ================================================================== [ 144.129145][ T809] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.139826][ T1132] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 144.147068][ T1132] CPU: 1 UID: 0 PID: 1132 Comm: kworker/u8:9 Tainted: G L syzkaller #0 PREEMPT(full) [ 144.158120][ T1132] Tainted: [L]=SOFTLOCKUP [ 144.162466][ T1132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 144.172570][ T1132] Workqueue: ib-unreg-wq ib_unregister_work [ 144.178513][ T1132] Call Trace: [ 144.181816][ T1132] [ 144.184777][ T1132] vpanic+0x56c/0xa60 [ 144.188786][ T1132] ? __pfx_vpanic+0x10/0x10 [ 144.193299][ T1132] panic+0xc5/0xd0 [ 144.197022][ T1132] ? __pfx_panic+0x10/0x10 [ 144.201441][ T1132] ? preempt_schedule_thunk+0x16/0x30 [ 144.206818][ T1132] ? preempt_schedule_thunk+0x16/0x30 [ 144.212290][ T1132] check_panic_on_warn+0x89/0xb0 [ 144.217277][ T1132] end_report+0x73/0x170 [ 144.221527][ T1132] ? gid_table_release_one+0x384/0x470 [ 144.226993][ T1132] kasan_report_invalid_free+0xfa/0x110 [ 144.232546][ T1132] ? gid_table_release_one+0x384/0x470 [ 144.238010][ T1132] ? gid_table_release_one+0x384/0x470 [ 144.243480][ T1132] __kasan_slab_pre_free+0x104/0x120 [ 144.248770][ T1132] kfree+0x173/0x640 [ 144.252674][ T1132] ? gid_table_release_one+0x384/0x470 [ 144.258160][ T1132] gid_table_release_one+0x384/0x470 [ 144.263458][ T1132] ib_device_release+0xd2/0x1c0 [ 144.268321][ T1132] ? __pfx_ib_device_release+0x10/0x10 [ 144.273789][ T1132] device_release+0xc4/0x1f0 [ 144.278412][ T1132] kobject_put+0x228/0x560 [ 144.282843][ T1132] ? process_scheduled_works+0xa70/0x1860 [ 144.288581][ T1132] process_scheduled_works+0xb5d/0x1860 [ 144.294150][ T1132] ? __pfx_process_scheduled_works+0x10/0x10 [ 144.300156][ T1132] ? assign_work+0x3d5/0x5e0 [ 144.304807][ T1132] worker_thread+0xa53/0xfc0 [ 144.309428][ T1132] kthread+0x388/0x470 [ 144.313504][ T1132] ? __pfx_worker_thread+0x10/0x10 [ 144.318638][ T1132] ? __pfx_kthread+0x10/0x10 [ 144.323259][ T1132] ret_from_fork+0x514/0xb70 [ 144.327866][ T1132] ? __pfx_ret_from_fork+0x10/0x10 [ 144.332995][ T1132] ? __switch_to+0xc79/0x1410 [ 144.337681][ T1132] ? __pfx_kthread+0x10/0x10 [ 144.342294][ T1132] ret_from_fork_asm+0x1a/0x30 [ 144.347069][ T1132] [ 144.350837][ T1132] Kernel Offset: disabled [ 144.355169][ T1132] Rebooting in 86400 seconds..