last executing test programs: 10.454430918s ago: executing program 2 (id=1758): sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x3, 0x0, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000700)=[@text16={0x10, &(0x7f0000000680)="d9f63578ce66b80500000066b9004800000f01d9f0f69e7300f20f79d2360f01c3672e0f01cabaf80c66b82e62a98e66efbafc0ced0f01c966b99409000066b80b00010066ba000000000f30", 0x4c}], 0x1, 0x31, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x11}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x2, 0x0, 0x0, 0x4, 0x2}, {0x0, 0xfffffffffffffffa, 0xfffffffffffffff7, 0x4}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3, 0x7, 0x200}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x0, 0x240041c0) 9.245362417s ago: executing program 2 (id=1765): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) r0 = memfd_secret(0x0) write$binfmt_misc(r0, &(0x7f0000000640)="db2a41a7e84e77cadfae02c2cba7b724a6738a414237ef34256dc7c4664792838cbbad0ae706d70e82e64feb422f517d3a075fc13d387665bd4696674efbfd453ed87c7846278996ed17e31d68c8250f409d851fe982826df116f114637cf1028105def6565019c38af525b32ac7ed8b6f8bc30ef72ec4d601e491243db9cf94e79880f6a73af3ad524e96725d9ab6b899d34f72da3ee0739d8bf09935b2e723b21c93fb988b6e38bdc036ee30caf8565368a894e73b70657c80acc92b413b3f254bbe9303a25ef89c17b9555917415834f8e1b727", 0xd5) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r1, 0x89e0, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x8f, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7d, 0x2, 0x1, 0x8, 0x20, 0x7, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "0150"}, {0x5, 0x24, 0x0, 0xf}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x2, 0xeb}, {0x6, 0x24, 0x1a, 0x3, 0xa}, [@country_functional={0x12, 0x24, 0x7, 0x9, 0x403, [0x1000, 0x8000, 0x5, 0x100, 0x2, 0x8e6d]}, @mbim_extended={0x8, 0x24, 0x1c, 0x3, 0x0, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x0, 0x27}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x5, 0x10, 0xb6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x40, 0x7, 0x3, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x5, 0x5, 0xfa}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x80, 0x5a, 0x3d, 0x10, 0xa}, 0x5c, &(0x7f0000000140)={0x5, 0xf, 0x5c, 0x3, [@generic={0x42, 0x10, 0x3, "46e75599fc232a2dcc9b3715134f96d080b0a9455cee5c5a1b81d6a42e0d9f3278645535a9f9340d99993d6591ac51569b66f173d67bd261132e7e22563621"}, @wireless={0xb, 0x10, 0x1, 0x8, 0x8, 0xf6, 0x3, 0xacd, 0xef}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0xf8, 0x2, 0x5}]}, 0x9, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x406}}, {0xe3, &(0x7f0000000200)=ANY=[@ANYBLOB="e30357eccd0b611c0ad62801b1e444be1cf5de74e5f6f93c578592fad7bf44b897d0bfb2ea58272803b619182d8a6040b44e2e3b5939225b55cb6032b53f78361ee9a3f4d9e24d1243125d2a297acbf414a7bc36f7b97a38a450e72cdf8d7bcb5f7672d037fcac67e99bf68d47e4a5ccbf3f52bf6c4397b1391fa291bfcd7e6d44c6783709dad61548c2539717745f47a812a753eaad4822247320394f19ef54e4607b89c32a7241fe2dbb9134044234c14fdfc5847136e1c8560077121ab6b320177266c289f2aa75f34007c8f07be768d9af591d7df759c91933169bf8c4e694aa3a"]}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x405}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4}}, {0x74, &(0x7f0000000400)=@string={0x74, 0x3, "178583060751008cf77a2330d5e42e660e33660e486c36fd636e4c98fc78438b34608dcac822c47d53d96cadc7a395be134e4681fc2c0ef5ab78380ec093b1b9602eaa3ad288af5df0b94e2af27c3c6d6b0085fb632b921f203b47aa07dc96c46b59204ef8a8af51427977843b661ce741fc"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xfcf8}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x300a}}]}) r2 = eventfd2(0x0, 0x800) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000030101020000000000000000f100000a08001a4000000e5c"], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0x80) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000026c0), 0x1, 0x0) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000080)="022e2ea8e8d15d70f7b9a3", 0xb}], 0x1) setresuid(0x0, 0xee00, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000001"], 0x58}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETLINK(r7, 0x400454cd, 0x306) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8440, &(0x7f00000192c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) ioctl$VIDIOC_G_TUNER(r3, 0xc054561d, &(0x7f00000005c0)={0x800, "486128d841ac89f22e630b6a30cba0ef9a3951329f47e497445dcfb616822d59", 0x3, 0x80, 0x4, 0xb, 0x10, 0x0, 0x1ff, 0x1}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x20000000) 7.705971721s ago: executing program 2 (id=1771): r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect) ioctl$USBDEVFS_RELEASEINTERFACE(r0, 0x80045510, &(0x7f0000000100)=0x8) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_int(r1, 0x1, 0x10, 0x0, &(0x7f0000000000)) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x0, 0xfffffa56, {{0x26, 0x4, 0x1, 0x1, 0x98, 0x65, 0x0, 0x9, 0x29, 0x0, @private=0xa010101, @multicast2, {[@timestamp_prespec={0x44, 0x24, 0xf, 0x3, 0x7, [{@local, 0xa}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7fff}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@multicast2}]}, @timestamp_prespec={0x44, 0x2c, 0x5a, 0x3, 0x7, [{@empty, 0x1}, {@remote, 0x8}, {@broadcast, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x81}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xad1f}]}, @timestamp={0x44, 0x8, 0xd5, 0x0, 0x8, [0x5]}, @generic={0x44, 0xc, "abd26b7fbbe6a490e89f"}, @timestamp={0x44, 0x20, 0xfe, 0x0, 0x8, [0x3d19, 0x4, 0x8d8, 0x3, 0x5, 0x0, 0x6]}]}}}}}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), r3) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fedbdf251100000008000300", @ANYRES32=r4], 0x4c}}, 0x4000) sendto(r1, &(0x7f0000000100)="e845c45173f6ba527ac38766ef130675d4e47e974eceeb720fb7242c1869a085c99db4b630a246900592be8b1cdb3639c975328035694e6fba5b4cf732c87a740912eaaa7903b11476b380457d8d73c6c1f3d4998d72bb5cba53ab080e44956e706ae8543a44addf9ecab763a3e10b969b3a000cef1516cee6bdcb0d65b1e67c6e9d2e099ad004e0cbf8164339df344ccf1f1b7c245c28e7800a580327317504da94ddf1c114b06600d4957aed7e2f3a92d5548824c43a38e02a0525a8cd7d0e732633e3ffc1345113f6171e82244af5", 0xd0, 0x4000, &(0x7f0000000300)=@ll={0x11, 0x5, r2, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}, 0x80) syz_usb_connect(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009040000029233500009050602ff030000000905ba3e79"], 0x0) 5.185867005s ago: executing program 3 (id=1777): setresuid(0x0, 0xee00, 0x0) (async) setresuid(0x0, 0xee00, 0x0) setresuid(0x0, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x220000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000000c0)={0xc}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000680)={0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0], 0x2, 0x800}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000440)={&(0x7f0000000380)=[0x0, 0x0], 0x2, 0x800, 0x0, 0xffffffffffffffff}) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @multicast1}}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000600)=0xe8) (async) getsockopt$inet_IP_IPSEC_POLICY(r6, 0x0, 0x10, &(0x7f0000000480)={{{@in=@initdev, @in6=@ipv4={""/10, ""/2, @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@ipv4={""/10, ""/2, @multicast2}}}, &(0x7f0000000600)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r6, 0xc018937b, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r3, {r7, 0xee00}}, './file0\x00'}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r5}) (async) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0x2, r5, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r1, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r2, r5, 0x37f9ec, 0x2, 0x9, 0xc61d0}) ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r6, 0x3b8c, &(0x7f0000000640)={0x30, r8, 0x1, 0x2000000, 0x8000024e5, 0x5, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000bc0)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="20000400000091"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NLBL_MGMT_C_LISTALL(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="819b44000000fedbdf2503000000e7"], 0x14}, 0x1, 0xffa6, 0x0, 0x8000}, 0x40408c4) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0xcc240, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a6c000000060a0104000000000000000002000000400004803c0001800a0001006d617463680000002c000280140003000400110000000000020007116b61979e090001006c3274700000000008000240000000000900010073797a30000000000900020073797a32"], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r12, 0x29, 0x4e, 0x0, &(0x7f0000000140)) (async) getsockopt$inet6_int(r12, 0x29, 0x4e, 0x0, &(0x7f0000000140)) write$tun(r9, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000076c07"], 0x340a) 4.750296816s ago: executing program 2 (id=1780): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x1, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000100), 0x4) prlimit64(0x0, 0x4, &(0x7f0000000000)={0x8, 0x8}, &(0x7f0000001140)) (async) prlimit64(0x0, 0x4, &(0x7f0000000000)={0x8, 0x8}, &(0x7f0000001140)) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x1, 0x5, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40801}, 0x40) socket(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x10c000) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r5, 0x10c000) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000140)="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") 4.334557645s ago: executing program 2 (id=1782): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x480, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r0, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETGROUP(r0, 0x400454ce, 0x0) syz_usb_connect$uac3(0x0, 0x93, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x103d, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x81, 0x3, 0x1, 0xff, 0xb0, 0x10, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x1d, 0xd12}, [@output_terminal={0x13, 0x24, 0x3, 0xff, 0x302, 0x6, 0x4, 0x2, 0x3, 0x5, 0x7f, 0x84}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x40, 0xd4, 0x4, {0xa, 0x25, 0x25, 0x6, 0x1, 0x4}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0xfa, 0xa, 0x2, {0xa, 0x25, 0x25, 0x0, 0x5, 0x9}}}}}}}}]}}, 0x0) 3.80689975s ago: executing program 3 (id=1784): r0 = inotify_init() (async, rerun: 64) r1 = userfaultfd(0x1) (rerun: 64) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) (async, rerun: 32) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCGWINSZ(r3, 0x5413, &(0x7f0000000000)) (async) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) (async) close_range(r0, 0xffffffffffffffff, 0x0) 3.230041327s ago: executing program 3 (id=1787): r0 = syz_open_dev$loop(&(0x7f0000000280), 0xffff, 0x14f600) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9, 0x1c, "fee8a2ab7809009fd1e00d96072000001ea89de2b7fb0000e60080b8000000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00000000170000000400", "f4bd0000008019000000000000009800000000000001000000000000000000aa", [0x100000000, 0x8000000000000000]}}) 3.112147719s ago: executing program 3 (id=1788): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x974, 0x1) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x1, 0xfec00000, 0x4, r2, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000f, 0x204031, 0xffffffffffffffff, 0x7c778000) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000000)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) 2.398165059s ago: executing program 2 (id=1792): syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000077290466244f5d36ea851c020301090224000100001000092443000231015500090502020002020000090582"], 0x0) 2.02593347s ago: executing program 0 (id=1795): r0 = socket(0xa, 0x5, 0x101) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$SNDCTL_DSP_SETFMT(r1, 0x40045010, &(0x7f0000000040)) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000001040)=0x400c) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000010c0)=ANY=[@ANYBLOB="03000000000000000a004e230000000aff010000000000000000000000040001080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000010000000a004e210000007f00000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc62282800"/272], 0x110) syz_ublk_setup_io_uring(0x2728, &(0x7f0000000080)={0x0, 0xcd3f, 0x20000, 0x1, 0x1ac, 0x0, r0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000e013b0b2dbd7000fcdbdf250800010000000000"], 0x18}, 0x1, 0x0, 0x0, 0x8014}, 0x9ee9fd74460f2f8e) 1.815181387s ago: executing program 1 (id=1797): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0xc2081, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$TCFLSH(r2, 0x800455cc, 0x1) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1.702463933s ago: executing program 0 (id=1798): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r0, &(0x7f0000000700)=[{&(0x7f0000000000)=""/230, 0xe6}], 0x1) r1 = fcntl$dupfd(r0, 0x406, r0) (async) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000004840), 0x2, 0x0) ioctl$VIDIOC_G_FMT(r2, 0xc0d05604, &(0x7f0000004880)={0xa, @pix={0x7, 0x2, 0x3234564e, 0x3, 0x31, 0x4, 0x1, 0x9, 0x0, 0x5, 0x2, 0x7}}) (async) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x6, 0x8, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000400001900", 0x0, 0x0, 0x10011, 0xfffbffff, 0x0}) (async) write$tun(r1, &(0x7f0000000400)=ANY=[], 0xa2) 1.690192976s ago: executing program 1 (id=1799): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000080)="5c00000012006bcd9e3f03006e48aa310b", 0xfffffffffffffdd1}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000001600), 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000300)={0x6c, 0x0, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x49}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x35}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40014}, 0x4004010) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000f40)=[{{&(0x7f00000000c0)=@can, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/235, 0xeb}, {&(0x7f0000000a00)=""/32, 0x20}, {&(0x7f0000000a40)=""/221, 0xdd}, {&(0x7f0000000b40)=""/189, 0xbd}], 0x4}, 0x49}, {{&(0x7f0000000c40)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000cc0)=""/135, 0x87}, {&(0x7f0000000d80)=""/144, 0x90}, {&(0x7f0000000e40)=""/131, 0x83}], 0x3}, 0x8}], 0x2, 0x2000, &(0x7f0000001fc0)) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x1c}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xbe8}, {&(0x7f00000007c0)=""/154, 0x43}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.617412097s ago: executing program 1 (id=1800): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x802) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000000000)) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000140), 0x2, &(0x7f0000000180)) prctl$PR_SCHED_CORE(0x4d, 0x1, 0x0, 0x0, 0x0) timer_create(0xfffffffffffffffe, 0x0, 0x0) 1.51836363s ago: executing program 0 (id=1801): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0xa, 0x4000010, r0, 0x85ecf000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000200)=0x3, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) ioctl$int_in(r3, 0x5452, &(0x7f0000000200)=0x6) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01ff070000000000000039000000080003"], 0x28}, 0x1, 0x0, 0x0, 0x4004040}, 0x24000) 1.517954849s ago: executing program 3 (id=1802): io_setup(0x205, &(0x7f0000002500)) syz_usb_connect$uac1(0x5, 0x86, &(0x7f0000000180)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x30df, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x74, 0x3, 0x1, 0x9, 0x10, 0x8, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x6, 0x1e}, [@processing_unit={0xb, 0x24, 0x7, 0x3, 0x3, 0x4, "a2f74895"}, @output_terminal={0x9, 0x24, 0x3, 0x4, 0x50f, 0x2, 0x3, 0xac}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x5, 0xf7, 0xd, {0x7, 0x25, 0x1, 0xc, 0x9, 0x40}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x5, 0x9, 0x8, {0x7, 0x25, 0x1, 0x4, 0x6, 0x4}}}}}}}}]}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="140000003b0001032abd7000f8dbdf0d0d"], 0x14}, 0x1, 0x0, 0x0, 0x4004494}, 0xc084) 1.478992826s ago: executing program 0 (id=1803): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2f, &(0x7f0000000180)={0x8, {{0xa, 0x4e22, 0xfff, @mcast2, 0xb}}, {{0xa, 0x4e1d, 0x3fb, @private0={0xfc, 0x0, '\x00', 0x1}, 0xcd004ef}}}, 0x108) getsockopt$inet6_buf(r3, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000040)={0x4, 0x8, 0xfa00, {r4, 0x5}}, 0x10) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040), 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_DONE(r5, 0x0, 0xc9, 0x0, 0x0) r6 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r6, &(0x7f0000000200)={&(0x7f0000000080)=@ieee802154={0x24, @short={0x2, 0x2, 0xaaa1}}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000000)='G', 0x1}], 0xec1f34371a9b3538}, 0x200480c0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f0000000900)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x2}, @tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x3}, 0x1}}, @sco={0x1f, @none}, 0x1000, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffc, 0x5e, 0x6}) r8 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r8, 0x406, r2) close(r8) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000000), 0x4) 1.36308568s ago: executing program 0 (id=1804): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008200122010009058103"], 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) r3 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x151) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r3, 0xc000) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$rtl8150(r2, 0x0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r2, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)={0x1}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x8, 0x0, 0x0, 0x3, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x9, 0x0, 0x0, 0x2}, {0xeda7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x20000000, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x2004cb, 0x3, 0x100000000000000, 0xfffffffffffffff8, 0x0, 0xfffffffffffff2ab, 0x2000000000003ff, 0x2], 0x0, 0x200306}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 641.784781ms ago: executing program 1 (id=1805): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x0, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000, 0x0, &(0x7f0000ff9000/0x1000)=nil) remap_file_pages(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x7, 0x80000) r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_G_CTRL(r0, 0xc008561b, &(0x7f00000001c0)={0x5, 0x4}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r2 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$setsig(0x4203, r2, 0x0, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r3, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0xce20, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1ff}, 0x1c) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000680)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2cfed8da1a8fe89baa3d3c313071a45693d0284568cc07e6ee1b4d830c1870278837c4bdc2ffb17f9dfa5c715add4cd61a533e6a85274bd4ab82c242013ccc047212b28d89944f63031a7d8de1199c34e0bc3032baeb078319a95532952c03950a8ceea45a18eaa169a56bcc7ff175c0e67eccb69505ff987660163169fe501939cd8263162d06f601b9cc09749d1c002c8685d39b8d76c19455f23e033fa1926407d8b4f525c9f0f81cd5a543d569dede16743b0dded870b89f11f2", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f00000003c0)={0x50, 0x0, r5, {0x7, 0x29, 0x9, 0xffffffff90acedc4, 0xff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e6ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e500000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r4, &(0x7f00000083c0)="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", 0x2000, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0}) r7 = getegid() getgroups(0x1, &(0x7f0000000380)=[0xffffffffffffffff]) r9 = socket(0x18, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000900)=ANY=[@ANYBLOB="02000000010006000000000002000100", @ANYRES32=0x0, @ANYBLOB="02000700", @ANYRES32=0x0, @ANYBLOB="02000000610e2f17d6fae82aec16476912944f5e6711cb6880f796292ba5275cab615b11d67f8dc0afc2f77a201149a59e17f9029054b8428ca741d4fa9380e64e4529f859ee6451d6132f77ce7e75434a0cb5879533eb6c0fda2b0fab52a05e5a4a2706d27b487d6625dfd607cca2100a2be2f8f4981a68d5f9be510caa3c6b91b6b2bc108199210913f9bf50a7c4f8e32c714eeae6d65632b56226093fa8b0", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRESOCT=r7, @ANYBLOB="0200040077aef909ac5c3ddaf3defc2f99b20000000004000000000000000000", @ANYRES8=r2, @ANYBLOB="02000300", @ANYRES32=r6, @ANYBLOB="040001000000000008000400", @ANYRES32=r7, @ANYRESHEX=r1, @ANYRES32=r8, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r10, @ANYRESHEX], 0x6c, 0x1) listen(r1, 0xfffefffa) listen(r3, 0x4) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) 451.238112ms ago: executing program 1 (id=1806): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000400)) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 343.951616ms ago: executing program 1 (id=1807): unshare(0x2000000) r0 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, 0x0, 0x0) r1 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840) r2 = gettid() timer_create(0x750b1b42a6214125, &(0x7f0000000000)={0x0, 0x2f, 0x2, @tid=r2}, &(0x7f0000bbdffc)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) write$binfmt_misc(r5, &(0x7f0000000980), 0xfdef) timer_settime(r3, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0xa, 0x100, 0x3, {0xe7ff, 0x1, 0x406, 0x870}}) 14.125744ms ago: executing program 3 (id=1808): fanotify_init(0x0, 0x40000) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000300000000000000080009001d000000", 0x24) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d18000905", @ANYBLOB="87e295"], 0x0) fanotify_init(0x0, 0x40000) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0x3f, 0x3, 0x9}, 0x10) (async) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000000300000000000000080009001d000000", 0x24) (async) syz_usb_connect(0x3, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12014000f273a440cd060a01c3d90102030109021b040000dd00200904000c01950d18000905", @ANYBLOB="87e295"], 0x0) (async) 0s ago: executing program 0 (id=1809): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x69) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x1, 0x0, 0x3, @multicast}, 0x10) listen(r2, 0x979) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) syz_usb_connect$midi(0x3, 0x7c, &(0x7f0000001800)=ANY=[@ANYBLOB="120100030000001030144b4740000102030109026a00010100100509040000040103206d0724010800070007240102000700090506022000bb08b40925711409050510ff03080604"], &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) (async) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) (async) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x69) (async) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2440, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) connect$llc(r2, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x1, 0x0, 0x3, @multicast}, 0x10) (async) listen(r2, 0x979) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x80000000}}, './file0\x00'}) (async) syz_usb_connect$midi(0x3, 0x7c, &(0x7f0000001800)=ANY=[@ANYBLOB="120100030000001030144b4740000102030109026a00010100100509040000040103206d0724010800070007240102000700090506022000bb08b40925711409050510ff03080604"], &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0}) (async) kernel console output (not intermixed with test programs): name="/" dev="fuse" ino=1 res=0 errno=0 [ 365.683793][ T37] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 365.873542][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 365.888167][ T37] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 365.888208][ T37] usb 4-1: config 0 has no interface number 0 [ 365.888258][ T37] usb 4-1: config 0 interface 184 has no altsetting 0 [ 365.919572][ T37] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 365.919605][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.919625][ T37] usb 4-1: Product: syz [ 365.919640][ T37] usb 4-1: Manufacturer: syz [ 365.919654][ T37] usb 4-1: SerialNumber: syz [ 365.960997][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.961693][ T37] usb 4-1: config 0 descriptor?? [ 365.978054][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.220739][ T5622] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 366.793384][ T5339] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 366.973224][ T5339] usb 3-1: Using ep0 maxpacket: 16 [ 366.994618][ T5339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.994676][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 366.994704][ T5339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 366.994741][ T5339] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 366.994766][ T5339] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 367.096464][ T5339] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 367.096500][ T5339] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 367.096521][ T5339] usb 3-1: Manufacturer: syz [ 367.129837][ T5339] usb 3-1: config 0 descriptor?? [ 367.417220][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 367.417262][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 367.417790][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 367.417816][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 367.417837][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 367.417855][ T37] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 367.418154][ T37] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 367.517659][ T37] usb 4-1: USB disconnect, device number 112 [ 367.626814][T14282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 367.648024][T14282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 367.753205][ T5339] rc_core: IR keymap rc-hauppauge not found [ 367.753232][ T5339] Registered IR keymap rc-empty [ 367.753673][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.793429][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.820314][ T5339] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 367.844915][ T5339] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input23 [ 367.880664][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.894263][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.914945][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.943418][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.967355][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 367.983355][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.003746][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.033442][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.063392][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.084791][ T5339] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 368.155274][ T5339] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 368.155301][ T5339] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 368.182424][ T5339] usb 3-1: USB disconnect, device number 107 [ 368.602548][T14311] CIFS: bad ip= option (%RHe'ˠ/1C~1WexEAeSb{~R) [ 368.621425][T14311] overlayfs: failed to resolve '/DÔOֵz.z>bw0weA&0X': -2 [ 368.969363][T14328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.970343][T14328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 369.582059][ T69] Bluetooth: hci4: Frame reassembly failed (-84) [ 370.766209][T14404] netlink: 'syz.0.1226': attribute type 2 has an invalid length. [ 370.766231][T14404] netlink: 8824 bytes leftover after parsing attributes in process `syz.0.1226'. [ 370.766267][T14404] netlink: 'syz.0.1226': attribute type 2 has an invalid length. [ 371.205700][T14422] tmpfs: User quota block hardlimit too large. [ 371.431554][ T5622] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 372.259087][T14460] netlink: 'syz.3.1236': attribute type 22 has an invalid length. [ 372.259110][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1236'. [ 372.573341][ T37] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 372.736362][ T37] usb 4-1: Using ep0 maxpacket: 32 [ 372.749534][ T37] usb 4-1: config 0 has an invalid interface number: 48 but max is 0 [ 372.749614][ T37] usb 4-1: config 0 has no interface number 0 [ 372.749700][ T37] usb 4-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30 [ 372.749803][ T37] usb 4-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 372.749872][ T37] usb 4-1: config 0 interface 48 has no altsetting 0 [ 372.753216][ T5614] usb 3-1: new full-speed USB device number 108 using dummy_hcd [ 372.815215][ T37] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 372.815248][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.815262][ T37] usb 4-1: Product: syz [ 372.815273][ T37] usb 4-1: Manufacturer: syz [ 372.815284][ T37] usb 4-1: SerialNumber: syz [ 372.831852][ T37] usb 4-1: config 0 descriptor?? [ 372.935826][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.937508][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.961581][ T5614] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 372.961635][ T5614] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 372.970372][ T5614] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 372.970429][ T5614] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 372.970866][ T5614] usb 3-1: Manufacturer: syz [ 372.970902][ T5614] usb 3-1: SerialNumber: syz [ 373.016071][T14483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.046207][T14483] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.070352][T14460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.071007][T14460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.271628][T14473] netlink: 'syz.2.1237': attribute type 1 has an invalid length. [ 373.678477][T14493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 373.694555][T14493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.291220][T14515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.304530][T14515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 374.588776][T14523] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 374.971075][T14527] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 375.011067][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.012297][T14530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.022763][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.035819][T14530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.313735][ T37] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 375.314924][ T37] gspca_ov534_9: reg_w failed -71 [ 375.440686][ T5614] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 375.453243][ T5614] usb 3-1: USB disconnect, device number 108 [ 375.714217][ T37] gspca_ov534_9: Unknown sensor 0000 [ 375.714318][ T37] ov534_9 4-1:0.48: probe with driver ov534_9 failed with error -22 [ 375.784020][ T37] usb 4-1: USB disconnect, device number 113 [ 375.878748][T14576] binder: 14573:14576 ioctl c0306201 200000000640 returned -22 [ 376.142668][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.152154][ T37] usb 4-1: new full-speed USB device number 114 using dummy_hcd [ 376.164305][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.187250][T14586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.187939][T14586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.309360][ T37] usb 4-1: New USB device found, idVendor=0403, idProduct=bca4, bcdDevice= 2.23 [ 376.309393][ T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.309414][ T37] usb 4-1: Product: syz [ 376.309429][ T37] usb 4-1: Manufacturer: syz [ 376.309444][ T37] usb 4-1: SerialNumber: syz [ 376.346758][ T37] usb 4-1: config 0 descriptor?? [ 376.551311][ T37] usb 4-1: USB disconnect, device number 114 [ 376.672570][T14606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.675993][T14606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.939707][T14630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.940374][T14630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.173253][ T37] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 377.323686][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 377.329691][ T37] usb 3-1: config 1 has an invalid interface number: 28 but max is 2 [ 377.329720][ T37] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.329740][ T37] usb 3-1: config 1 has no interface number 2 [ 377.329810][ T37] usb 3-1: config 1 interface 28 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.329839][ T37] usb 3-1: config 1 interface 28 has no altsetting 0 [ 377.336696][ T37] usb 3-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 377.336725][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.336745][ T37] usb 3-1: Product: syz [ 377.336758][ T37] usb 3-1: Manufacturer: syz [ 377.336772][ T37] usb 3-1: SerialNumber: syz [ 377.460599][T14657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.473217][T14657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.646890][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.648681][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.852477][ T37] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 377.931012][ T37] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 377.933769][T14685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.939134][T14685] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 377.943236][ T5595] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 377.987011][ T37] usb 3-1: USB disconnect, device number 109 [ 378.056484][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.105958][ T5595] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.105989][ T5595] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 378.108477][ T5595] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.108506][ T5595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.108532][ T5595] usb 4-1: Product: syz [ 378.108550][ T5595] usb 4-1: Manufacturer: syz [ 378.108560][ T5595] usb 4-1: SerialNumber: syz [ 378.217317][T14685] usb usb7: usbfs: process 14685 (syz.0.1273) did not claim interface 0 before use [ 378.385140][ T5595] usb 4-1: 1:1 : no or invalid class specific endpoint descriptor [ 378.385168][ T5595] usb 4-1: 1:1 : sample bitwidth 5 in over sample bytes 0 [ 378.385189][ T5595] usb 4-1: 1:1 : unsupported sample bitwidth 5 in 0 bytes [ 378.403267][ T5595] usb 4-1: 0:2 : does not exist [ 378.403429][ T5595] usb 4-1: unit 5: unexpected type 0x03 [ 378.591604][ T5595] usb 4-1: USB disconnect, device number 115 [ 378.745579][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 378.833642][ T37] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 378.857490][T14733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.858346][T14733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.963295][ T37] usb 3-1: device descriptor read/64, error -71 [ 378.985230][T14738] tmpfs: Bad value for 'mpol' [ 379.111317][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.111424][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.203226][ T37] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 379.283884][ T5614] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 379.333220][ T37] usb 3-1: device descriptor read/64, error -71 [ 379.433190][ T5614] usb 4-1: Using ep0 maxpacket: 8 [ 379.435527][ T5614] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 46, changing to 7 [ 379.438403][ T5614] usb 4-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 379.438433][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.438452][ T5614] usb 4-1: Product: syz [ 379.438469][ T5614] usb 4-1: Manufacturer: syz [ 379.438486][ T5614] usb 4-1: SerialNumber: syz [ 379.446321][ T37] usb usb3-port1: attempt power cycle [ 379.737187][T14743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.737902][T14743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.803498][ T5614] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 379.804054][ T5614] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 379.844653][ T37] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 379.866156][ T37] usb 3-1: device descriptor read/8, error -71 [ 379.898502][ T5614] usb 4-1: USB disconnect, device number 116 [ 380.026195][T14777] overlayfs: failed to resolve './file0': -2 [ 380.103491][ T37] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 380.124125][ T37] usb 3-1: device descriptor read/8, error -71 [ 380.239949][ T37] usb usb3-port1: unable to enumerate USB device [ 380.796096][T14793] sg_write: data in/out 431068/146 bytes for SCSI command 0x0-- guessing data in; [ 380.796096][T14793] program syz.3.1287 not setting count and/or reply_len properly [ 381.275171][ T5339] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 381.377712][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.379764][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.400194][T14806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 381.401706][T14806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 381.454785][ T5339] usb 4-1: Using ep0 maxpacket: 32 [ 381.457424][ T5339] usb 4-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 381.457456][ T5339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.491278][ T5339] usb 4-1: config 0 descriptor?? [ 381.509450][ T5339] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 381.661197][T14824] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1294'. [ 381.677512][T14819] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1293'. [ 381.947203][T14834] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1296'. [ 382.132654][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.134894][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.190564][T14848] cgroup2: Unknown parameter 'favordynmots' [ 382.348036][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.348686][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.447831][T14796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.448990][T14796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.610605][T14866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 382.611732][T14866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 382.656775][ T5339] gspca_nw80x: reg_w err -71 [ 382.656970][ T5339] nw80x 4-1:0.0: probe with driver nw80x failed with error -71 [ 382.682379][ T5339] usb 4-1: USB disconnect, device number 117 [ 382.766470][ T5755] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 382.950488][ T5755] usb 3-1: New USB device found, idVendor=041e, idProduct=400c, bcdDevice=af.98 [ 382.950521][ T5755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.970868][ T5755] usb 3-1: config 0 descriptor?? [ 383.011237][ T5755] pwc: Creative Labs Webcam 5 detected. [ 383.428686][ T5755] pwc: send_video_command error -71 [ 383.428711][ T5755] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 383.428872][ T5755] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 383.448408][ T5755] usb 3-1: USB disconnect, device number 114 [ 383.813259][ T5339] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 383.953244][ T5339] usb 4-1: device descriptor read/64, error -71 [ 384.237491][ T5339] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 384.324429][T14906] bridge0: port 3(team0) entered blocking state [ 384.324789][T14906] bridge0: port 3(team0) entered disabled state [ 384.325058][T14906] team0: entered allmulticast mode [ 384.325073][T14906] team_slave_0: entered allmulticast mode [ 384.325098][T14906] team_slave_1: entered allmulticast mode [ 384.373324][ T5339] usb 4-1: device descriptor read/64, error -71 [ 384.375124][T14906] team0: entered promiscuous mode [ 384.375148][T14906] team_slave_0: entered promiscuous mode [ 384.375304][T14906] team_slave_1: entered promiscuous mode [ 384.429348][T14906] bridge0: port 3(team0) entered blocking state [ 384.429457][T14906] bridge0: port 3(team0) entered forwarding state [ 384.474632][ T5339] usb usb4-port1: attempt power cycle [ 384.845259][ T5339] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 384.874134][ T5339] usb 4-1: device descriptor read/8, error -71 [ 385.113317][ T5339] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 385.134076][ T5339] usb 4-1: device descriptor read/8, error -71 [ 385.245053][ T5339] usb usb4-port1: unable to enumerate USB device [ 385.341478][T14919] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 385.783985][T14939] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 385.784014][T14939] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 385.792808][T14939] vhci_hcd vhci_hcd.0: Device attached [ 385.803637][T14940] vhci_hcd: connection closed [ 385.819095][T12586] vhci_hcd vhci_hcd.1: stop threads [ 385.819126][T12586] vhci_hcd vhci_hcd.1: release socket [ 385.819229][T12586] vhci_hcd vhci_hcd.1: disconnect device [ 386.441896][T14952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.454889][T14952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.589042][T14950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 386.592867][T14950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 386.834058][T14950] ufs: You didn't specify the type of your ufs filesystem [ 386.834058][T14950] [ 386.834058][T14950] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 386.834058][T14950] [ 386.834058][T14950] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 387.334303][T14967] netlink: 'syz.3.1321': attribute type 12 has an invalid length. [ 387.957857][T14996] Sensor A: ================= START STATUS ================= [ 387.957963][T14996] Sensor A: Test Pattern: 75% Colorbar [ 387.957995][T14996] Sensor A: Show Information: All [ 387.958012][T14996] Sensor A: Vertical Flip: false [ 387.958028][T14996] Sensor A: Horizontal Flip: false [ 387.958044][T14996] Sensor A: Brightness: 128 [ 387.958060][T14996] Sensor A: Contrast: 128 [ 387.958075][T14996] Sensor A: Hue: 0 [ 387.958091][T14996] Sensor A: Saturation: 128 [ 387.958108][T14996] Sensor A: Pixel Rate: 160000000 [ 387.958125][T14996] Sensor A: Horizontal Blanking: 800 [ 387.958140][T14996] Sensor A: Vertical Blanking: 3223 [ 387.958158][T14996] Sensor A: ================== END STATUS ================== [ 388.074667][T15003] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1331'. [ 388.080728][T15003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.081291][T15003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.139787][T14996] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1328'. [ 388.564366][ T5339] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 388.703738][ T5595] usb 3-1: new full-speed USB device number 115 using dummy_hcd [ 388.726786][ T5339] usb 4-1: Using ep0 maxpacket: 32 [ 388.729919][ T5339] usb 4-1: config 7 has an invalid interface number: 68 but max is 0 [ 388.729947][ T5339] usb 4-1: config 7 has no interface number 0 [ 388.729985][ T5339] usb 4-1: config 7 interface 68 has no altsetting 0 [ 388.732283][ T5339] usb 4-1: New USB device found, idVendor=04cb, idProduct=010f, bcdDevice=1c.ad [ 388.732306][ T5339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.732321][ T5339] usb 4-1: Product: syz [ 388.732331][ T5339] usb 4-1: Manufacturer: syz [ 388.732342][ T5339] usb 4-1: SerialNumber: syz [ 388.894600][T15034] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.895614][T15034] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.922881][ T5595] usb 3-1: New USB device found, idVendor=0a2c, idProduct=0008, bcdDevice=c7.b3 [ 388.922910][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.925975][ T5595] usb 3-1: Product: syz [ 388.926407][ T5595] usb 3-1: Manufacturer: syz [ 388.926453][ T5595] usb 3-1: SerialNumber: syz [ 388.988240][ T5595] usb 3-1: config 0 descriptor?? [ 389.043610][ T5595] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now attached [ 389.355031][ T5614] usb 3-1: USB disconnect, device number 115 [ 389.356708][ T5614] cypress_cy7c63 3-1:0.0: Cypress CY7C63xxx device now disconnected [ 389.486427][ T5339] gspca_main: finepix-2.14.0 probing 04cb:010f [ 389.535347][ T5339] usb 4-1: USB disconnect, device number 122 [ 390.523330][ T5339] usb 4-1: new full-speed USB device number 123 using dummy_hcd [ 390.688742][ T5339] usb 4-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=52.5e [ 390.688775][ T5339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.688796][ T5339] usb 4-1: Product: syz [ 390.688810][ T5339] usb 4-1: Manufacturer: syz [ 390.688831][ T5339] usb 4-1: SerialNumber: syz [ 390.981516][ T5339] usb 4-1: USB disconnect, device number 123 [ 391.213310][T15116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.214001][T15116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.551260][T15121] loop3: detected capacity change from 0 to 9 [ 391.659903][T15129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.662070][T15129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.692400][T15129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.709680][T15129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.954467][ T5595] usb 3-1: new full-speed USB device number 117 using dummy_hcd [ 392.103282][ T5595] usb 3-1: device descriptor read/64, error -71 [ 392.186602][T15146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.187404][T15146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.363043][ T5595] usb 3-1: new full-speed USB device number 118 using dummy_hcd [ 392.506373][ T5595] usb 3-1: device descriptor read/64, error -71 [ 392.615785][ T5595] usb usb3-port1: attempt power cycle [ 392.954861][ T5595] usb 3-1: new full-speed USB device number 119 using dummy_hcd [ 392.975396][ T5595] usb 3-1: device descriptor read/8, error -71 [ 393.145359][ T38] audit: type=1800 audit(1782611281.775:250): pid=15178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1357" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 393.192922][T15179] tipc: Started in network mode [ 393.192939][T15179] tipc: Node identity , cluster identity 4711 [ 393.208704][T15179] tipc: Failed to obtain node identity [ 393.208740][T15179] tipc: Enabling of bearer rejected, failed to enable media [ 393.259378][T15178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.260056][T15178] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.263452][ T5595] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 393.289029][ T5595] usb 3-1: device descriptor read/8, error -71 [ 393.377305][T15186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.390712][T15186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.397528][ T5595] usb usb3-port1: unable to enumerate USB device [ 393.419727][T15186] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.422744][T15186] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.084954][T15202] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 394.264934][T15202] pic_ioport_write: 16 callbacks suppressed [ 394.264956][T15202] kvm: pic: level sensitive irq not supported [ 394.265143][T15202] picdev_read: 17 callbacks suppressed [ 394.265165][T15202] kvm: pic: non byte read [ 394.265458][T15202] kvm: pic: level sensitive irq not supported [ 394.265520][T15202] kvm: pic: non byte read [ 394.265733][T15202] kvm: pic: level sensitive irq not supported [ 394.265847][T15202] kvm: pic: non byte read [ 394.266072][T15202] kvm: pic: level sensitive irq not supported [ 394.266129][T15202] kvm: pic: non byte read [ 394.266332][T15202] kvm: pic: level sensitive irq not supported [ 394.266444][T15202] kvm: pic: non byte read [ 394.266666][T15202] kvm: pic: level sensitive irq not supported [ 394.266725][T15202] kvm: pic: non byte read [ 394.266941][T15202] kvm: pic: level sensitive irq not supported [ 394.267049][T15202] kvm: pic: non byte read [ 394.267261][T15202] kvm: pic: level sensitive irq not supported [ 394.267315][T15202] kvm: pic: non byte read [ 394.267760][T15202] kvm: pic: level sensitive irq not supported [ 394.267906][T15202] kvm: pic: non byte read [ 394.268241][T15202] kvm: pic: level sensitive irq not supported [ 394.268304][T15202] kvm: pic: non byte read [ 394.298367][T15215] ADFS-fs (nbd0): error: unable to read block 3, try 0 [ 394.931807][T15237] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.936517][T15237] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.084831][ T5614] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 395.233251][ T5614] usb 3-1: Using ep0 maxpacket: 32 [ 395.235380][ T5614] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 395.235409][ T5614] usb 3-1: config 0 has no interface number 0 [ 395.237851][ T5614] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 395.237887][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.237902][ T5614] usb 3-1: Product: syz [ 395.237912][ T5614] usb 3-1: Manufacturer: syz [ 395.237923][ T5614] usb 3-1: SerialNumber: syz [ 395.253851][ T5614] usb 3-1: config 0 descriptor?? [ 395.378626][T15244] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.380470][T15244] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.408054][T15244] cgroup: none used incorrectly [ 395.408667][T15247] cgroup: none used incorrectly [ 396.171246][T15262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1370'. [ 396.297391][T15277] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.307476][T15277] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 396.739275][ T56] Bluetooth: Error in BCSP hdr checksum [ 396.809162][ T5614] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 396.809194][ T5614] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 396.809896][ T5614] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 396.810229][ T5614] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71 [ 396.841201][ T5614] usb 3-1: USB disconnect, device number 121 [ 396.956683][T15296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 396.961844][T15296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.623382][ T38] audit: type=1326 audit(1782611286.245:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15309 comm="syz.2.1379" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8aac14ce59 code=0x0 [ 398.023227][ T5614] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 398.173217][ T5614] usb 3-1: Using ep0 maxpacket: 32 [ 398.175335][ T5614] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 398.175364][ T5614] usb 3-1: config 0 has no interface number 0 [ 398.175411][ T5614] usb 3-1: config 0 interface 89 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 398.175437][ T5614] usb 3-1: config 0 interface 89 has no altsetting 0 [ 398.177857][ T5614] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 398.177888][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.177909][ T5614] usb 3-1: Product: syz [ 398.177924][ T5614] usb 3-1: Manufacturer: syz [ 398.177939][ T5614] usb 3-1: SerialNumber: syz [ 398.185029][ T5614] usb 3-1: config 0 descriptor?? [ 398.271821][ T5614] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 398.271861][ T5614] em28xx 3-1:0.89: Video interface 89 found: [ 398.383643][ T5611] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 398.537598][T15327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.538368][T15327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.918287][T15314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.920519][T15314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.979787][ T5614] em28xx 3-1:0.89: unknown em28xx chip ID (0) [ 399.230668][T15343] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'. [ 399.261587][T15346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.280608][T15346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.405938][T15355] tmpfs: Unknown parameter '' [ 400.068176][ T5748] usb 4-1: new full-speed USB device number 124 using dummy_hcd [ 400.262914][ T5748] usb 4-1: config 8 has an invalid interface number: 223 but max is 0 [ 400.262943][ T5748] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 400.262963][ T5748] usb 4-1: config 8 has no interface number 0 [ 400.263000][ T5748] usb 4-1: config 8 interface 223 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.280571][ T5748] usb 4-1: New USB device found, idVendor=a6eb, idProduct=7458, bcdDevice=2d.4d [ 400.280602][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.280622][ T5748] usb 4-1: Product: syz [ 400.280636][ T5748] usb 4-1: Manufacturer: syz [ 400.280650][ T5748] usb 4-1: SerialNumber: syz [ 400.370083][ T5748] usb-storage 4-1:8.223: USB Mass Storage device detected [ 400.446513][T15314] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 400.446927][T15314] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 400.458301][ T5614] em28xx 3-1:0.89: writing to i2c device at 0xa0 failed (error=-5) [ 400.458427][ T5614] em28xx 3-1:0.89: failed to read eeprom (err=-5) [ 400.458470][ T5614] em28xx 3-1:0.89: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 400.525866][ T5614] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67) [ 400.525975][ T5614] em28xx 3-1:0.89: analog set to bulk mode. [ 400.622206][ T5616] em28xx 3-1:0.89: Registering V4L2 extension [ 400.689830][ T5614] usb 3-1: USB disconnect, device number 122 [ 400.707513][ T5614] em28xx 3-1:0.89: Disconnecting em28xx [ 400.749813][ T5748] usb 4-1: USB disconnect, device number 124 [ 400.953592][ T5616] em28xx 3-1:0.89: Config register raw data: 0xffffffed [ 400.953619][ T5616] em28xx 3-1:0.89: AC97 chip type couldn't be determined [ 400.953633][ T5616] em28xx 3-1:0.89: No AC97 audio processor [ 401.155647][T15406] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1393'. [ 401.252212][ T5616] usb 3-1: Decoder not found [ 401.252234][ T5616] em28xx 3-1:0.89: failed to create media graph [ 401.260912][ T5616] em28xx 3-1:0.89: V4L2 device video103 deregistered [ 401.536269][T15416] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 12 out of range (51000000..2150000000) [ 401.609688][ T5616] em28xx 3-1:0.89: Registering snapshot button... [ 401.738756][ T5616] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input29 [ 401.927349][ T5616] em28xx 3-1:0.89: Remote control support is not available for this card. [ 401.932984][ T5614] em28xx 3-1:0.89: Closing input extension [ 401.950987][ T5614] em28xx 3-1:0.89: Deregistering snapshot button [ 402.624503][T15456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.628770][T15456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.737210][T15462] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1404'. [ 402.889833][T15465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.891167][ T5614] em28xx 3-1:0.89: Freeing device [ 402.908708][T15465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.210589][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.212131][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.231687][T15485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 403.232846][T15485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 403.287906][ T5614] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 403.403479][ T5616] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 403.435750][ T5614] usb 3-1: unable to get BOS descriptor or descriptor too short [ 403.437007][ T5614] usb 3-1: config 0 has an invalid interface number: 86 but max is 0 [ 403.437033][ T5614] usb 3-1: config 0 has no interface number 0 [ 403.437078][ T5614] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xE has invalid maxpacket 8 [ 403.437096][ T5614] usb 3-1: config 0 interface 86 altsetting 4 bulk endpoint 0xC has invalid maxpacket 32 [ 403.437114][ T5614] usb 3-1: config 0 interface 86 has no altsetting 0 [ 403.439506][ T5614] usb 3-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice=aa.5e [ 403.439539][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.439554][ T5614] usb 3-1: Product: syz [ 403.439565][ T5614] usb 3-1: Manufacturer: syz [ 403.439575][ T5614] usb 3-1: SerialNumber: syz [ 403.462672][ T5614] usb 3-1: config 0 descriptor?? [ 403.501654][T15408] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 403.501794][T15408] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 403.603296][ T5616] usb 4-1: device descriptor read/64, error -71 [ 403.846796][ T5616] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 403.901002][T15503] can0: slcan on ttyS3. [ 403.983226][ T5616] usb 4-1: device descriptor read/64, error -71 [ 404.093878][ T5616] usb usb4-port1: attempt power cycle [ 404.095490][T15515] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.111588][T15515] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.288501][T15524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.289126][T15524] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.443636][ T5616] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 404.466054][ T5616] usb 4-1: device descriptor read/8, error -71 [ 404.733232][ T5616] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 404.759598][ T5616] usb 4-1: device descriptor read/8, error -71 [ 404.868309][ T5616] usb usb4-port1: unable to enumerate USB device [ 405.217293][T15408] can0 (unregistered): slcan off ttyS3. [ 405.321564][ T5614] omninet 3-1:0.86: ZyXEL - omni.net usb converter detected [ 405.392996][ T5614] usb 3-1: ZyXEL - omni.net usb converter now attached to ttyUSB2 [ 405.453919][ T5614] usb 3-1: USB disconnect, device number 123 [ 405.541520][T15568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 405.594187][T15568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.598680][ T5614] omninet ttyUSB2: ZyXEL - omni.net usb converter now disconnected from ttyUSB2 [ 405.658803][ T5614] omninet 3-1:0.86: device disconnected [ 406.003234][ T5614] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 406.135605][ T5614] usb 3-1: device descriptor read/64, error -71 [ 406.374428][ T5614] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 406.426405][T15605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.427122][T15605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.534726][ T5614] usb 3-1: device descriptor read/64, error -71 [ 406.648072][ T5614] usb usb3-port1: attempt power cycle [ 406.660572][T15605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.661229][T15605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.003282][ T5614] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 407.034065][ T5614] usb 3-1: device descriptor read/8, error -71 [ 407.188043][T15614] batadv_slave_0: entered promiscuous mode [ 407.205968][T15613] batadv_slave_0: left promiscuous mode [ 407.276863][ T5614] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 407.307312][ T5614] usb 3-1: device descriptor read/8, error -71 [ 407.421657][ T5614] usb usb3-port1: unable to enumerate USB device [ 407.495561][T15629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.499681][T15629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.814977][T15634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1426'. [ 408.306925][T15646] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 408.312363][T15646] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.353293][ T5614] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 408.517937][ T5614] usb 4-1: no configurations [ 408.517966][ T5614] usb 4-1: can't read configurations, error -22 [ 408.703879][ T5614] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 408.855869][ T5614] usb 4-1: no configurations [ 408.855891][ T5614] usb 4-1: can't read configurations, error -22 [ 408.856393][ T5614] usb usb4-port1: attempt power cycle [ 409.011949][T15662] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.023623][T15662] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 409.143318][ T37] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 409.233320][ T5614] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 409.254725][ T5614] usb 4-1: no configurations [ 409.254742][ T5614] usb 4-1: can't read configurations, error -22 [ 409.296783][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x64, changing to 0x4 [ 409.296820][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 409.296869][ T37] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 409.296888][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 409.310992][ T37] usb 3-1: config 0 descriptor?? [ 409.393502][ T5614] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 409.425798][ T5614] usb 4-1: no configurations [ 409.425819][ T5614] usb 4-1: can't read configurations, error -22 [ 409.426465][ T5614] usb usb4-port1: unable to enumerate USB device [ 409.772064][ T37] ath6kl: Failed to read usb control message: -71 [ 409.772118][ T37] ath6kl: Unable to read the bmi data from the device: -71 [ 409.772134][ T37] ath6kl: Unable to recv target info: -71 [ 409.881526][ T37] ath6kl: Failed to init ath6kl core: -71 [ 409.883907][ T37] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 409.925985][ T37] usb 3-1: USB disconnect, device number 2 [ 410.129488][T15679] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1434'. [ 410.400983][T15683] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1435'. [ 410.401007][T15683] nbd: illegal input index 65508 [ 410.677308][T15696] netlink: 'syz.2.1437': attribute type 2 has an invalid length. [ 410.677332][T15696] netlink: 'syz.2.1437': attribute type 1 has an invalid length. [ 410.760141][T15701] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1439'. [ 410.935997][T15710] 9p: Bad value for 'rfdno' [ 410.937338][T15711] netlink: 'syz.2.1441': attribute type 3 has an invalid length. [ 411.463264][ T5339] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 411.562359][T15726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.571962][T15726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.613464][ T5339] usb 4-1: Using ep0 maxpacket: 32 [ 411.615769][ T5339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 411.615808][ T5339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 411.615851][ T5339] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 411.615868][ T5339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.620823][ T5339] usb 4-1: config 0 descriptor?? [ 411.675032][ T5339] hub 4-1:0.0: USB hub found [ 412.040337][T15721] /dev/nullb0: Can't open blockdev [ 412.050051][ T5339] hub 4-1:0.0: 3 ports detected [ 412.154162][ T37] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 412.291878][ T5339] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 412.291908][ T5339] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 412.334215][ T37] usb 3-1: Using ep0 maxpacket: 32 [ 412.337271][ T5339] usbhid 4-1:0.0: can't add hid device: -71 [ 412.337396][ T5339] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 412.339006][ T37] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 412.339037][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 412.339063][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 412.339102][ T37] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 412.339126][ T37] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.409693][ T5339] usb 4-1: USB disconnect, device number 7 [ 412.430680][ T37] usb 3-1: config 0 descriptor?? [ 412.452833][ T37] hub 3-1:0.0: USB hub found [ 412.502032][T15745] syzkaller1: entered promiscuous mode [ 412.502063][T15745] syzkaller1: entered allmulticast mode [ 412.639699][T15735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.642214][T15735] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.664479][ T37] hub 3-1:0.0: 1 port detected [ 412.868256][ T37] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 412.868287][ T37] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 412.876439][ T37] usbhid 3-1:0.0: can't add hid device: -71 [ 412.876578][ T37] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 412.973260][ T37] usb 3-1: USB disconnect, device number 3 [ 413.176375][T15779] FAULT_INJECTION: forcing a failure. [ 413.176375][T15779] name failslab, interval 1, probability 0, space 0, times 0 [ 413.176424][T15779] CPU: 0 UID: 0 PID: 15779 Comm: syz.0.1450 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 413.176453][T15779] Tainted: [L]=SOFTLOCKUP [ 413.176461][T15779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.176483][T15779] Call Trace: [ 413.176495][T15779] [ 413.176504][T15779] dump_stack_lvl+0xe8/0x150 [ 413.176596][T15779] should_fail_ex+0x467/0x600 [ 413.176638][T15779] should_failslab+0xa8/0x100 [ 413.176666][T15779] __kmalloc_noprof+0xfe/0x780 [ 413.176688][T15779] ? __pfx_aa_file_perm+0x10/0x10 [ 413.176762][T15779] ? kernfs_fop_write_iter+0x158/0x540 [ 413.176789][T15779] ? kernfs_fop_write_iter+0x158/0x540 [ 413.176825][T15779] kernfs_fop_write_iter+0x158/0x540 [ 413.176865][T15779] do_iter_readv_writev+0x624/0x8d0 [ 413.176899][T15779] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 413.176948][T15779] vfs_writev+0x34c/0x990 [ 413.176972][T15779] ? do_raw_spin_lock+0x12b/0x2f0 [ 413.177002][T15779] ? __pfx_vfs_writev+0x10/0x10 [ 413.177038][T15779] ? __fget_files+0x2a/0x420 [ 413.177065][T15779] ? __fget_files+0x3a8/0x420 [ 413.177086][T15779] ? __fget_files+0x2a/0x420 [ 413.177117][T15779] __x64_sys_pwritev+0x19f/0x2c0 [ 413.177150][T15779] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 413.177189][T15779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.177213][T15779] do_syscall_64+0x174/0x580 [ 413.177241][T15779] ? trace_irq_disable+0x3b/0x140 [ 413.177268][T15779] ? clear_bhb_loop+0x40/0x90 [ 413.177296][T15779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.177322][T15779] RIP: 0033:0x7f37cdf9ce59 [ 413.177384][T15779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 413.177404][T15779] RSP: 002b:00007f37cc1f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 413.177459][T15779] RAX: ffffffffffffffda RBX: 00007f37ce215fa0 RCX: 00007f37cdf9ce59 [ 413.177474][T15779] RDX: 0000000000000003 RSI: 0000200000000640 RDI: 0000000000000003 [ 413.177488][T15779] RBP: 00007f37cc1f6090 R08: 00000000000000fd R09: 0000000000000000 [ 413.177502][T15779] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 413.177515][T15779] R13: 00007f37ce216038 R14: 00007f37ce215fa0 R15: 00007fff78305a48 [ 413.177547][T15779] [ 413.686901][T15794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.691181][T15794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.803536][T15799] netlink: 'syz.2.1453': attribute type 27 has an invalid length. [ 414.675099][T15831] FAULT_INJECTION: forcing a failure. [ 414.675099][T15831] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 414.675143][T15831] CPU: 1 UID: 0 PID: 15831 Comm: syz.2.1459 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 414.675174][T15831] Tainted: [L]=SOFTLOCKUP [ 414.675182][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 414.675194][T15831] Call Trace: [ 414.675202][T15831] [ 414.675211][T15831] dump_stack_lvl+0xe8/0x150 [ 414.675243][T15831] should_fail_ex+0x467/0x600 [ 414.675283][T15831] _copy_from_iter+0x3b0/0x1660 [ 414.675320][T15831] ? __pfx__copy_from_iter+0x10/0x10 [ 414.675341][T15831] ? trace_kmalloc+0x2a/0xf0 [ 414.675368][T15831] ? __kmalloc_noprof+0x43b/0x780 [ 414.675400][T15831] ? kernfs_fop_write_iter+0x158/0x540 [ 414.675437][T15831] kernfs_fop_write_iter+0x19b/0x540 [ 414.675478][T15831] do_iter_readv_writev+0x624/0x8d0 [ 414.675512][T15831] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 414.675560][T15831] vfs_writev+0x34c/0x990 [ 414.675584][T15831] ? do_raw_spin_lock+0x12b/0x2f0 [ 414.675613][T15831] ? __pfx_vfs_writev+0x10/0x10 [ 414.675649][T15831] ? __fget_files+0x2a/0x420 [ 414.675677][T15831] ? __fget_files+0x3a8/0x420 [ 414.675699][T15831] ? __fget_files+0x2a/0x420 [ 414.675731][T15831] __x64_sys_pwritev+0x19f/0x2c0 [ 414.675766][T15831] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 414.675807][T15831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.675831][T15831] do_syscall_64+0x174/0x580 [ 414.675859][T15831] ? trace_irq_disable+0x3b/0x140 [ 414.675888][T15831] ? clear_bhb_loop+0x40/0x90 [ 414.675915][T15831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.675944][T15831] RIP: 0033:0x7f8aac14ce59 [ 414.675964][T15831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.675982][T15831] RSP: 002b:00007f8aaa39e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 414.676007][T15831] RAX: ffffffffffffffda RBX: 00007f8aac3c5fa0 RCX: 00007f8aac14ce59 [ 414.676024][T15831] RDX: 0000000000000003 RSI: 0000200000000640 RDI: 0000000000000003 [ 414.676038][T15831] RBP: 00007f8aaa39e090 R08: 00000000000000fd R09: 0000000000000000 [ 414.676051][T15831] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 414.676067][T15831] R13: 00007f8aac3c6038 R14: 00007f8aac3c5fa0 R15: 00007ffc7ff2afb8 [ 414.676105][T15831] [ 415.036371][T15835] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 415.104920][T15846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.105455][T15846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.349916][T15853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.350619][T15853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.536739][T15867] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1466'. [ 415.697749][T15875] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 415.698452][T15875] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.883177][T15883] FAULT_INJECTION: forcing a failure. [ 415.883177][T15883] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.883211][T15883] CPU: 1 UID: 0 PID: 15883 Comm: syz.2.1469 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 415.883235][T15883] Tainted: [L]=SOFTLOCKUP [ 415.883241][T15883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.883252][T15883] Call Trace: [ 415.883258][T15883] [ 415.883266][T15883] dump_stack_lvl+0xe8/0x150 [ 415.883296][T15883] should_fail_ex+0x467/0x600 [ 415.883334][T15883] _copy_from_iter+0x4ff/0x1660 [ 415.883366][T15883] ? __pfx__copy_from_iter+0x10/0x10 [ 415.883383][T15883] ? trace_kmalloc+0x2a/0xf0 [ 415.883406][T15883] ? __kmalloc_noprof+0x43b/0x780 [ 415.883426][T15883] ? kernfs_fop_write_iter+0x158/0x540 [ 415.883457][T15883] kernfs_fop_write_iter+0x19b/0x540 [ 415.883486][T15883] do_iter_readv_writev+0x624/0x8d0 [ 415.883513][T15883] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 415.883553][T15883] vfs_writev+0x34c/0x990 [ 415.883573][T15883] ? do_raw_spin_lock+0x12b/0x2f0 [ 415.883598][T15883] ? __pfx_vfs_writev+0x10/0x10 [ 415.883631][T15883] ? __fget_files+0x2a/0x420 [ 415.883652][T15883] ? __fget_files+0x3a8/0x420 [ 415.883669][T15883] ? __fget_files+0x2a/0x420 [ 415.883693][T15883] __x64_sys_pwritev+0x19f/0x2c0 [ 415.883719][T15883] ? __pfx___x64_sys_pwritev+0x10/0x10 [ 415.883750][T15883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.883770][T15883] do_syscall_64+0x174/0x580 [ 415.883792][T15883] ? trace_irq_disable+0x3b/0x140 [ 415.883815][T15883] ? clear_bhb_loop+0x40/0x90 [ 415.883837][T15883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.883854][T15883] RIP: 0033:0x7f8aac14ce59 [ 415.883872][T15883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.883888][T15883] RSP: 002b:00007f8aaa39e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000128 [ 415.883919][T15883] RAX: ffffffffffffffda RBX: 00007f8aac3c5fa0 RCX: 00007f8aac14ce59 [ 415.883934][T15883] RDX: 0000000000000003 RSI: 0000200000000640 RDI: 0000000000000003 [ 415.883946][T15883] RBP: 00007f8aaa39e090 R08: 00000000000000fd R09: 0000000000000000 [ 415.883959][T15883] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 415.883971][T15883] R13: 00007f8aac3c6038 R14: 00007f8aac3c5fa0 R15: 00007ffc7ff2afb8 [ 415.884002][T15883] [ 416.437362][T15897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.439732][T15897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.499288][T15897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.499943][T15897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.733220][ T5595] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 416.863897][ T5595] usb 3-1: device descriptor read/64, error -71 [ 417.120414][ T5595] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 417.253261][ T5595] usb 3-1: device descriptor read/64, error -71 [ 417.267118][T15937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.269602][T15937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.306691][T15938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.308249][T15938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.364825][ T5595] usb usb3-port1: attempt power cycle [ 417.516111][T15950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.516683][T15950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.733228][ T5595] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 417.756457][ T5595] usb 3-1: device descriptor read/8, error -71 [ 417.993372][ T5595] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 418.014807][ T5595] usb 3-1: device descriptor read/8, error -71 [ 418.123581][ T5595] usb usb3-port1: unable to enumerate USB device [ 418.153785][ T5614] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 418.338722][ T5614] usb 4-1: config 9 has an invalid interface number: 204 but max is 0 [ 418.338753][ T5614] usb 4-1: config 9 has no interface number 0 [ 418.338786][ T5614] usb 4-1: config 9 interface 204 has no altsetting 0 [ 418.370898][ T5614] usb 4-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=26.25 [ 418.370933][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.370953][ T5614] usb 4-1: Product: syz [ 418.370968][ T5614] usb 4-1: Manufacturer: syz [ 418.370982][ T5614] usb 4-1: SerialNumber: syz [ 418.479463][T15972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.480085][T15972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.228603][T16000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.231613][T16000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.793736][ T37] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 420.861467][ T5614] usb 4-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 420.888407][ T5614] uvcvideo 4-1:9.204: probe with driver uvcvideo failed with error -22 [ 420.920301][ T5614] usb 4-1: USB disconnect, device number 8 [ 420.953803][ T37] usb 3-1: Using ep0 maxpacket: 8 [ 420.967442][ T37] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 420.967472][ T37] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config [ 420.967495][ T37] usb 3-1: config 0 has no interface number 0 [ 420.967542][ T37] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 102, changing to 10 [ 420.967579][ T37] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid maxpacket 24624, setting to 1024 [ 420.967607][ T37] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 420.967635][ T37] usb 3-1: config 0 interface 52 has no altsetting 0 [ 421.003238][ T37] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 421.003269][ T37] usb 3-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 421.003291][ T37] usb 3-1: Manufacturer: syz [ 421.076875][ T37] usb 3-1: config 0 descriptor?? [ 421.081906][ T37] hub 3-1:0.52: bad descriptor, ignoring hub [ 421.081947][ T37] hub 3-1:0.52: probe with driver hub failed with error -5 [ 421.323164][ T37] input: syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.52/input/input32 [ 421.482059][T16028] syz_tun: entered allmulticast mode [ 421.520430][T16028] dvmrp8: entered allmulticast mode [ 421.528759][T16027] syz_tun: left allmulticast mode [ 421.644907][ T5595] usb 3-1: USB disconnect, device number 8 [ 422.433336][ T37] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 422.503259][ T5595] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 422.563250][ T37] usb 4-1: device descriptor read/64, error -71 [ 422.666212][ T5595] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.666251][ T5595] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 63535, setting to 1024 [ 422.666279][ T5595] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 422.666317][ T5595] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.666340][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.705511][T16087] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 422.777528][ T5595] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.894626][ T37] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 422.972041][T16104] program syz.2.1508 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 423.062324][ T37] usb 4-1: device descriptor read/64, error -71 [ 423.173983][ T37] usb usb4-port1: attempt power cycle [ 423.404043][ T5595] usb 3-1: USB disconnect, device number 9 [ 423.524750][ T37] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 423.543954][ T37] usb 4-1: device descriptor read/8, error -71 [ 423.548779][T16119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1509'. [ 423.558756][T16122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.560339][T16122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.775314][T16131] 9pnet_fd: p9_fd_create_tcp (16131): problem connecting socket to 127.0.0.1 [ 423.785112][ T37] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 423.810132][ T37] usb 4-1: device descriptor read/8, error -71 [ 423.859710][T16136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.862509][T16136] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.889473][T16136] tls_set_device_offload: netdev not found [ 423.890328][T16136] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1512'. [ 423.913794][ T37] usb usb4-port1: unable to enumerate USB device [ 424.223348][ T37] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 424.374702][ T37] usb 3-1: Using ep0 maxpacket: 16 [ 424.376778][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 424.376819][ T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 424.376839][ T37] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 424.376855][ T37] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 424.379161][ T37] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 424.379191][ T37] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.379218][ T37] usb 3-1: Product: syz [ 424.379230][ T37] usb 3-1: Manufacturer: syz [ 424.379243][ T37] usb 3-1: SerialNumber: syz [ 424.386216][ T37] usb 3-1: config 0 descriptor?? [ 424.444657][T16141] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 424.559594][ C1] port100 3-1:0.0: NFC: Urb failure (status -71) [ 424.611380][ T37] port100 3-1:0.0: NFC: Could not get supported command types [ 424.658209][ T37] usb 3-1: USB disconnect, device number 10 [ 425.853907][ T5595] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 426.027175][ T5595] usb 3-1: unable to get BOS descriptor or descriptor too short [ 426.027913][ T5595] usb 3-1: not running at top speed; connect to a high speed hub [ 426.029388][ T5595] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 426.029413][ T5595] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 426.029436][ T5595] usb 3-1: config 17 has no interface number 0 [ 426.029482][ T5595] usb 3-1: config 17 interface 8 altsetting 6 endpoint 0x3 has invalid maxpacket 64768, setting to 64 [ 426.029509][ T5595] usb 3-1: config 17 interface 8 has no altsetting 0 [ 426.032658][ T5595] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 426.032688][ T5595] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.032708][ T5595] usb 3-1: Product: syz [ 426.032724][ T5595] usb 3-1: Manufacturer: syz [ 426.032739][ T5595] usb 3-1: SerialNumber: syz [ 426.441623][ T5595] usb 3-1: selecting invalid altsetting 0 [ 426.553930][ T5595] usb 3-1: USB disconnect, device number 11 [ 426.644728][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:17.8/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 427.253210][ T5614] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 427.393329][ T5614] usb 4-1: device descriptor read/64, error -71 [ 427.533375][T16248] tmpfs: Bad value for 'mpol' [ 427.541352][T16250] tmpfs: Bad value for 'mpol' [ 427.541693][T16247] syz.2.1533 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 427.560810][T16247] ieee802154 phy0 wpan0: encryption failed: -22 [ 427.633325][ T5614] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 427.723614][T16257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.726170][T16257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.769713][ T5614] usb 4-1: device descriptor read/64, error -71 [ 427.873888][ T5614] usb usb4-port1: attempt power cycle [ 428.043282][ T5755] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 428.195481][ T5755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 428.196032][ T5755] usb 3-1: not running at top speed; connect to a high speed hub [ 428.197438][ T5755] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 428.201360][ T5755] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 428.201391][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.201410][ T5755] usb 3-1: Product: syz [ 428.201426][ T5755] usb 3-1: Manufacturer: syz [ 428.201441][ T5755] usb 3-1: SerialNumber: syz [ 428.217795][ T5614] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 428.249919][ T5614] usb 4-1: device descriptor read/8, error -71 [ 428.483233][ T5614] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 428.512170][ T5614] usb 4-1: device descriptor read/8, error -71 [ 428.545556][ T5755] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 428.560441][ T5755] usb 3-1: unit 48 not found! [ 428.609382][T16295] netlink: 15 bytes leftover after parsing attributes in process `syz.1.1539'. [ 428.614961][ T5614] usb usb4-port1: unable to enumerate USB device [ 428.844791][ T5755] usb 3-1: USB disconnect, device number 12 [ 429.155094][T12263] udevd[12263]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.288738][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.302663][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.336455][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.337083][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.361705][T16329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.371844][T16329] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.698150][T16348] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.700409][T16348] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.773385][ T5595] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 429.935746][ T5595] usb 3-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 429.935773][ T5595] usb 3-1: config 0 interface 0 has no altsetting 0 [ 429.935798][ T5595] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00 [ 429.935815][ T5595] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.981343][ T5595] usb 3-1: config 0 descriptor?? [ 430.424481][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424537][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424566][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424789][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424818][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424846][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424875][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424902][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424931][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.424957][ T5595] apple 0003:05AC:0219.000B: unknown main item tag 0x0 [ 430.527051][ T5595] apple 0003:05AC:0219.000B: hidraw0: USB HID v0.00 Device [HID 05ac:0219] on usb-dummy_hcd.2-1/input0 [ 430.664073][ T5614] usb 3-1: USB disconnect, device number 13 [ 431.101947][T16403] syzkaller1: entered promiscuous mode [ 431.101973][T16403] syzkaller1: entered allmulticast mode [ 431.162457][T16411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.179274][T16411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.250341][T16414] netlink: 89 bytes leftover after parsing attributes in process `syz.0.1552'. [ 431.317101][T16418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.319369][T16418] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.842004][T16445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.854027][T16445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.943373][ T5595] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 432.096629][ T5595] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 432.096668][ T5595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 432.096707][ T5595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 432.096729][ T5595] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64 [ 432.099673][ T5595] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 432.099703][ T5595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.099722][ T5595] usb 4-1: Product: syz [ 432.099742][ T5595] usb 4-1: Manufacturer: syz [ 432.099753][ T5595] usb 4-1: SerialNumber: syz [ 432.178488][ T5595] usb 4-1: config 0 descriptor?? [ 432.398475][T16435] trusted_key: syz.3.1558 sent an empty control message without MSG_MORE. [ 432.414491][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.414967][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.416959][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.417420][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.417888][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.418325][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.418768][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.419203][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.420924][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.422824][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.491262][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.491769][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.492232][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.492705][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.521135][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.521611][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.522064][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.522513][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.522971][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.528227][ T5595] iforce 4-1:0.0: usb_submit_urb failed: -71 [ 432.528367][ T5595] input input33: Timeout waiting for response from device. [ 432.559691][ T5611] Bluetooth: hci3: unexpected cc 0x0402 length: 61 > 1 [ 432.559729][ T5611] Bluetooth: hci3: unexpected event for opcode 0x0402 [ 432.592706][ T5595] usb 4-1: USB disconnect, device number 17 [ 432.990456][T16478] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1566'. [ 433.179823][T16487] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1566'. [ 433.182825][T16473] ceph: No mds server is up or the cluster is laggy [ 433.225030][ T5614] libceph: connect (1)[c::]:6789 error -101 [ 433.225815][ T5614] libceph: mon0 (1)[c::]:6789 connect error [ 433.333305][ T5339] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 433.523346][ T5339] usb 4-1: device descriptor read/64, error -71 [ 433.762833][ T5339] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 433.893258][ T5339] usb 4-1: device descriptor read/64, error -71 [ 433.898726][T16506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 433.899445][T16506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 433.927247][T16506] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1571'. [ 434.006447][ T5339] usb usb4-port1: attempt power cycle [ 434.078012][T16517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1572'. [ 434.078039][T16517] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1572'. [ 434.080565][T16517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.081238][T16517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.170114][T16521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1573'. [ 434.178341][T16521] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1573'. [ 434.238024][T16523] overlay: Unknown parameter '\' [ 434.277966][T16523] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.281320][T16523] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 434.293256][ T5614] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 434.363358][ T5339] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 434.384344][ T5339] usb 4-1: device descriptor read/8, error -71 [ 434.443143][ T5614] usb 3-1: Using ep0 maxpacket: 32 [ 434.445454][ T5614] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 434.445485][ T5614] usb 3-1: config 0 has no interface number 0 [ 434.445532][ T5614] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 434.445553][ T5614] usb 3-1: config 0 interface 85 has no altsetting 0 [ 434.448569][ T5614] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 434.448605][ T5614] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.448621][ T5614] usb 3-1: Product: syz [ 434.448632][ T5614] usb 3-1: Manufacturer: syz [ 434.448643][ T5614] usb 3-1: SerialNumber: syz [ 434.523526][ T5614] usb 3-1: config 0 descriptor?? [ 434.623218][ T5339] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 434.643925][ T5339] usb 4-1: device descriptor read/8, error -71 [ 434.709401][T16529] netlink: 'syz.1.1575': attribute type 10 has an invalid length. [ 434.763329][ T5339] usb usb4-port1: unable to enumerate USB device [ 434.805998][T16529] macvlan1: entered promiscuous mode [ 434.806031][T16529] macvlan1: entered allmulticast mode [ 434.923860][T16529] veth1_vlan: entered allmulticast mode [ 434.942027][T16529] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 434.993427][T16535] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 434.994085][T16535] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.189724][ T5614] appletouch 3-1:0.85: Geyser mode initialized. [ 435.204630][ T5614] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input34 [ 435.392600][ T5748] usb 3-1: USB disconnect, device number 14 [ 435.392701][ C0] appletouch 3-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 435.488550][T16553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.489274][T16553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.529181][ T5748] appletouch 3-1:0.85: input: appletouch disconnected [ 435.696262][T16571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 435.697709][T16571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 435.752504][T16575] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1582'. [ 436.026177][T16579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.028413][T16579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.318621][T16598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.319305][T16598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.686336][T16618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.687049][T16618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.692674][T16618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.695509][T16618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.883320][ T5748] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 436.893640][ T5755] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 437.028101][ T5755] usb 4-1: device descriptor read/64, error -71 [ 437.043306][ T5748] usb 3-1: Using ep0 maxpacket: 8 [ 437.045435][ T5748] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 437.048274][ T5748] usb 3-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 437.048306][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.048329][ T5748] usb 3-1: Product: syz [ 437.048344][ T5748] usb 3-1: Manufacturer: syz [ 437.048360][ T5748] usb 3-1: SerialNumber: syz [ 437.090555][ T5748] ch9200 3-1:2.0: probe with driver ch9200 failed with error -22 [ 437.261591][T16633] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.265217][T16633] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.285889][ T5755] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 437.306076][ T5748] usb 3-1: USB disconnect, device number 15 [ 437.413542][ T5755] usb 4-1: device descriptor read/64, error -71 [ 437.523552][ T5755] usb usb4-port1: attempt power cycle [ 437.828382][T16643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.830946][T16643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.865733][T16643] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 437.874030][ T5755] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 437.884087][T16643] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 437.894111][ T5755] usb 4-1: device descriptor read/8, error -71 [ 438.159763][ T5755] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 438.175178][ T5755] usb 4-1: device descriptor read/8, error -71 [ 438.252823][T16657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.253521][T16657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.283510][ T5755] usb usb4-port1: unable to enumerate USB device [ 438.504500][T16663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.505566][T16663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.549968][T16663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 438.551878][T16663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.063277][ T5748] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 439.203204][ T5748] usb 3-1: device descriptor read/64, error -71 [ 439.464184][ T5748] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 439.489427][T16688] efs: cannot read volume header [ 439.603179][ T5748] usb 3-1: device descriptor read/64, error -71 [ 439.633289][ T38] audit: type=1326 audit(1782611328.255:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16691 comm="syz.1.1602" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe57134ce59 code=0x0 [ 439.703925][ T5748] usb usb3-port1: attempt power cycle [ 439.926226][T16707] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1604'. [ 439.926959][T16705] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1604'. [ 440.037050][T16714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.038575][T16714] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.042432][T16715] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.042933][T16715] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.053195][ T5748] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 440.104851][ T5748] usb 3-1: device descriptor read/8, error -71 [ 440.180949][T16722] netlink: 'syz.3.1607': attribute type 1 has an invalid length. [ 440.343243][ T5748] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 440.365533][ T5748] usb 3-1: device descriptor read/8, error -71 [ 440.433213][ T5755] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 440.475996][ T5748] usb usb3-port1: unable to enumerate USB device [ 440.546610][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.546698][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.583202][ T5755] usb 4-1: Using ep0 maxpacket: 16 [ 440.585959][ T5755] usb 4-1: unable to get BOS descriptor or descriptor too short [ 440.587151][ T5755] usb 4-1: config index 0 descriptor too short (expected 1060, got 36) [ 440.587179][ T5755] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.591120][ T5755] usb 4-1: New USB device found, idVendor=1410, idProduct=7004, bcdDevice= 6.a2 [ 440.591150][ T5755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.591171][ T5755] usb 4-1: Product: syz [ 440.591186][ T5755] usb 4-1: Manufacturer: syz [ 440.591201][ T5755] usb 4-1: SerialNumber: syz [ 440.833234][T16738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.833930][T16738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.853391][T16738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.860390][T16738] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.862352][T16741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.870220][T16741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.900614][ T5755] hub 4-1:1.0: bad descriptor, ignoring hub [ 440.900654][ T5755] hub 4-1:1.0: probe with driver hub failed with error -5 [ 440.924724][ T5755] option 4-1:1.0: GSM modem (1-port) converter detected [ 441.008972][ T5755] usb 4-1: USB disconnect, device number 26 [ 441.011323][ T5755] option 4-1:1.0: device disconnected [ 441.048403][T16752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.048931][T16752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.513621][T16767] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.514287][T16767] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.883240][ T5595] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 441.955546][T16793] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.960856][T16793] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.036187][ T5595] usb 4-1: Using ep0 maxpacket: 8 [ 442.051487][ T5595] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.051522][ T5595] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 442.051546][ T5595] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 442.051574][ T5595] usb 4-1: config 0 interface 0 has no altsetting 0 [ 442.051609][ T5595] usb 4-1: New USB device found, idVendor=1a34, idProduct=f705, bcdDevice= 0.00 [ 442.051644][ T5595] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.131023][ T5595] usb 4-1: config 0 descriptor?? [ 442.454923][ T5755] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 442.487804][T16815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.489440][T16815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.561340][ T5595] hid_parser_main: 30 callbacks suppressed [ 442.561362][ T5595] acrux 0003:1A34:F705.000C: unknown main item tag 0x1 [ 442.561385][ T5595] acrux 0003:1A34:F705.000C: unexpected long global item [ 442.561855][ T5595] acrux 0003:1A34:F705.000C: parse failed [ 442.561908][ T5595] acrux 0003:1A34:F705.000C: probe with driver acrux failed with error -22 [ 442.583486][ T5755] usb 3-1: device descriptor read/64, error -71 [ 442.745519][T16778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.746168][T16778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.823212][ T5755] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 442.953254][ T5755] usb 3-1: device descriptor read/64, error -71 [ 443.074395][ T5755] usb usb3-port1: attempt power cycle [ 443.187181][T16831] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.189953][T16830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.216483][T16831] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.229858][T16830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.283899][ T5614] usb 4-1: USB disconnect, device number 27 [ 443.438271][T16830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.443197][ T5755] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 443.445671][T16830] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.468812][ T5755] usb 3-1: device descriptor read/8, error -71 [ 443.703218][ T5755] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 443.724523][ T5755] usb 3-1: device descriptor read/8, error -71 [ 443.837245][ T5755] usb usb3-port1: unable to enumerate USB device [ 444.409564][T16862] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1629'. [ 444.643242][ T5748] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 444.810049][ T5748] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 444.810085][ T5748] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.855266][ T5748] usb 4-1: config 0 descriptor?? [ 445.191434][ T5748] usb 4-1: Cannot read MAC address [ 445.191796][ T5748] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 445.227580][ T5748] usb 4-1: USB disconnect, device number 28 [ 445.319577][T16883] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.333680][T16883] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 445.403067][T16898] overlayfs: overlapping lowerdir path [ 445.557080][T16902] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 445.558647][T16902] binder: 16901:16902 ioctl 40049366 200000000280 returned -22 [ 445.561836][T16902] binder: 16901:16902 ioctl c0306201 2000000004c0 returned -14 [ 445.590981][T16902] netlink: 'syz.2.1633': attribute type 29 has an invalid length. [ 445.591006][T16902] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 445.600852][T16903] netlink: 'syz.2.1633': attribute type 29 has an invalid length. [ 445.600899][T16903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1633'. [ 446.003765][ T5339] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 446.134541][T16912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.135296][T16912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.197576][ T5339] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 446.197608][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.197632][ T5339] usb 3-1: Product: syz [ 446.197649][ T5339] usb 3-1: Manufacturer: syz [ 446.197665][ T5339] usb 3-1: SerialNumber: syz [ 446.239559][ T5339] usb 3-1: config 0 descriptor?? [ 446.268555][ T5339] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 446.872101][T16931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.471608][T16950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.483828][T16950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.539332][T16954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 447.539989][T16954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.921801][ T5339] gspca_stk1135: reg_w 0x200 err -71 [ 447.924441][ T5339] gspca_stk1135: serial bus timeout: status=0x00 [ 447.924494][ T5339] gspca_stk1135: Sensor write failed [ 447.927348][ T5339] gspca_stk1135: serial bus timeout: status=0x00 [ 447.927391][ T5339] gspca_stk1135: Sensor write failed [ 447.927473][ T5339] gspca_stk1135: serial bus timeout: status=0x00 [ 447.927497][ T5339] gspca_stk1135: Sensor read failed [ 447.927592][ T5339] gspca_stk1135: serial bus timeout: status=0x00 [ 447.927617][ T5339] gspca_stk1135: Sensor read failed [ 447.927639][ T5339] gspca_stk1135: Detected sensor type unknown (0x0) [ 447.927738][ T5339] gspca_stk1135: serial bus timeout: status=0x00 [ 447.927769][ T5339] gspca_stk1135: Sensor read failed [ 447.927865][ T5339] gspca_stk1135: serial bus timeout: status=0x00 [ 447.927889][ T5339] gspca_stk1135: Sensor read failed [ 447.928010][ T5339] gspca_stk1135: serial bus timeout: status=0x00 [ 447.928041][ T5339] gspca_stk1135: Sensor write failed [ 447.928159][ T5339] gspca_stk1135: serial bus timeout: status=0x00 [ 447.928193][ T5339] gspca_stk1135: Sensor write failed [ 447.928430][ T5339] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 447.957322][ T5339] usb 3-1: USB disconnect, device number 24 [ 448.151008][T16971] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 448.151044][T16971] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 448.191187][T16971] vhci_hcd vhci_hcd.0: Device attached [ 448.211197][T16972] vhci_hcd: connection closed [ 448.225784][T12592] vhci_hcd vhci_hcd.0: stop threads [ 448.225810][T12592] vhci_hcd vhci_hcd.0: release socket [ 448.225840][T12592] vhci_hcd vhci_hcd.0: disconnect device [ 448.509686][T16987] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1648'. [ 448.796097][T17000] [U]  [ 448.796110][T17000] [U] K{ [ 448.796117][T17000] [U] t 1ŠFfˊ`GJgo/mC [ 448.796136][T17000] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!" (5Ob̓J [ 448.796171][T17000] [U] k\&}66XHX .`a$40|϶9ި U4Vbz}wMTQΦr 4 [ 448.796219][T17000] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_< ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq [ 448.796264][T17000] [U] +wG?]'a: )' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj ;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿B ٜNy"vI2 [ 448.796284][T17000] [U] T_K5tYJ9c$brLNul 9w|G"ʃ%C؝q 3qN^HP*$ .7yӱ2 [ 448.796298][T17000] [U] ? h*37鍾^#Q"0~ (oX Lb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ [ 448.796318][T17000] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq DW=|q ÆW;5Ž!dBx`/E`ƦMX"\ [ 448.796441][T17000] [U] {; ٘_o2)o.2W2yx_ HPϱSD:]{ [ 448.796455][T17000] [U] I,> 51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^` [ 448.796466][T17000] [U] 22Ʃx?0;3u [ 448.796483][T17000] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D, D~d+w; A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ aet1ݯ4K.e"RS|s:>p r"z#P!KY"}FN84hޱosߙ̫%Dlwm [ 448.796504][T17000] [U] [['xn' ,mr/1D=!Dx91BwRlfKZ#` l؛˜b~m [ 448.796515][T17000] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y [ 448.796525][T17000] [U] 'B6v20瞥׌"t8{9FW]쩍 [ 448.796537][T17000] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C [ 448.796548][T17000] [U] ec [ 448.796558][T17000] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp| IRipm Y 8tV,l, [ 448.909646][T17001] [U] K)0~ʪiP'fzr @B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L [ 448.952433][T17001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 448.979155][T17001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.573456][T17024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.574534][T17024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.206502][ T5595] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 450.241316][T17057] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.241982][T17057] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.340774][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.342448][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.354721][ T5595] usb 4-1: device descriptor read/64, error -71 [ 450.355845][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.364668][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.388286][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.388739][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.400661][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.409311][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.428660][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.430726][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.449437][T17063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.459317][T17063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 450.623377][ T5595] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 450.753728][ T5595] usb 4-1: device descriptor read/64, error -71 [ 450.874570][ T5595] usb usb4-port1: attempt power cycle [ 451.047543][T17077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.050489][T17077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.233237][ T5595] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 451.264985][ T5595] usb 4-1: device descriptor read/8, error -71 [ 451.503358][ T5595] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 451.525440][ T5595] usb 4-1: device descriptor read/8, error -71 [ 451.635854][ T5595] usb usb4-port1: unable to enumerate USB device [ 451.664945][T17082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 451.678112][T17082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.063188][ T5755] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 452.228108][ T5755] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 452.228140][ T5755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.228165][ T5755] usb 3-1: Product: syz [ 452.228176][ T5755] usb 3-1: Manufacturer: syz [ 452.228187][ T5755] usb 3-1: SerialNumber: syz [ 452.232910][ T5755] usb 3-1: config 0 descriptor?? [ 452.274659][ T5755] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 452.525683][T17101] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.526800][T17101] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.215175][T17115] batadv_slave_0: entered promiscuous mode [ 453.215203][T17115] batadv_slave_0: entered allmulticast mode [ 453.392191][T17125] xt_l2tp: missing protocol rule (udp|l2tpip) [ 453.562674][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1670'. [ 453.640288][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.641843][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 453.648303][T17132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 453.649170][T17132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.483192][T17154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.503311][T17154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.511839][T17154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.524614][T17154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.842504][T17162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.852561][T17164] sit0: entered allmulticast mode [ 454.861336][T17162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.888010][T17162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.891159][T17162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.944248][T17164] sit0: entered promiscuous mode [ 455.149689][ T5755] gspca_stk1135: reg_w 0x351 err -71 [ 455.150742][ T5755] gspca_stk1135: serial bus timeout: status=0x00 [ 455.150759][ T5755] gspca_stk1135: Sensor write failed [ 455.150792][ T5755] gspca_stk1135: serial bus timeout: status=0x00 [ 455.150803][ T5755] gspca_stk1135: Sensor write failed [ 455.150839][ T5755] gspca_stk1135: serial bus timeout: status=0x00 [ 455.150851][ T5755] gspca_stk1135: Sensor read failed [ 455.150883][ T5755] gspca_stk1135: serial bus timeout: status=0x00 [ 455.150899][ T5755] gspca_stk1135: Sensor read failed [ 455.150908][ T5755] gspca_stk1135: Detected sensor type unknown (0x0) [ 455.150951][ T5755] gspca_stk1135: serial bus timeout: status=0x00 [ 455.150963][ T5755] gspca_stk1135: Sensor read failed [ 455.151005][ T5755] gspca_stk1135: serial bus timeout: status=0x00 [ 455.151016][ T5755] gspca_stk1135: Sensor read failed [ 455.151054][ T5755] gspca_stk1135: serial bus timeout: status=0x00 [ 455.151065][ T5755] gspca_stk1135: Sensor write failed [ 455.151100][ T5755] gspca_stk1135: serial bus timeout: status=0x00 [ 455.151111][ T5755] gspca_stk1135: Sensor write failed [ 455.151199][ T5755] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 455.279208][ T5755] usb 3-1: USB disconnect, device number 25 [ 455.544862][T17193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.547317][T17194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.549613][T17192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.552149][T17193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.552456][T17194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.560321][T17192] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.615934][ T5611] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 455.622811][T17193] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1683'. [ 455.943321][ T5595] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 456.143199][ T5595] usb 4-1: Using ep0 maxpacket: 16 [ 456.148584][ T5595] usb 4-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 456.148617][ T5595] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 456.148639][ T5595] usb 4-1: Product: syz [ 456.184156][ T5595] usb 4-1: config 0 descriptor?? [ 456.363951][T17218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.375974][T17218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.399858][T17203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 456.414895][T17218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.441540][T17218] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.609367][ T5595] kye 0003:0458:0087.000D: unknown main item tag 0x0 [ 456.609410][ T5595] kye 0003:0458:0087.000D: unknown main item tag 0x2 [ 456.609437][ T5595] kye 0003:0458:0087.000D: item fetching failed at offset 18/40 [ 456.610197][ T5595] kye 0003:0458:0087.000D: parse failed [ 456.610279][ T5595] kye 0003:0458:0087.000D: probe with driver kye failed with error -22 [ 456.738475][T17241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.740413][T17241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.758499][T17241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.769991][ T5748] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 456.778093][T17241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.808656][ T5614] usb 4-1: USB disconnect, device number 33 [ 456.923159][ T5748] usb 3-1: Using ep0 maxpacket: 32 [ 456.925201][ T5748] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 456.925229][ T5748] usb 3-1: config 0 has no interface number 0 [ 456.927603][ T5748] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 456.927639][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.927655][ T5748] usb 3-1: Product: syz [ 456.927667][ T5748] usb 3-1: Manufacturer: syz [ 456.927678][ T5748] usb 3-1: SerialNumber: syz [ 456.954411][ T5748] usb 3-1: config 0 descriptor?? [ 457.001180][ T5748] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 457.137637][T17261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.139332][T17261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.193995][ T5748] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2 [ 457.241342][ T5748] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3 [ 457.388422][T17224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.407968][T17224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.452966][T17278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.512953][T17278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.584543][T17278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 457.589764][T17278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 457.691044][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 457.742476][ T5748] usb 3-1: USB disconnect, device number 26 [ 457.923981][ T5748] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2 [ 457.961770][ T5748] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3 [ 457.964553][ T5748] quatech2 3-1:0.51: device disconnected [ 458.970887][T17359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 458.971455][T17359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.636577][T17372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.637252][T17372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.690023][T17376] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.704871][T17376] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 460.234765][ T5755] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 460.322852][T17397] loop8: detected capacity change from 0 to 8 [ 460.334826][T17397] Dev loop8: unable to read RDB block 8 [ 460.334872][T17397] loop8: unable to read partition table [ 460.335087][T17397] loop8: partition table beyond EOD, truncated [ 460.335106][T17397] loop_reread_partitions: partition scan of loop8 (被x^>) failed (rc=-5) [ 460.391613][ T5755] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 460.391643][ T5755] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.391689][ T5755] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 460.391712][ T5755] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.446742][ T5755] usb 4-1: config 0 descriptor?? [ 460.583242][ T5616] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 460.665104][ T9] usb 4-1: USB disconnect, device number 34 [ 460.713700][ T5616] usb 3-1: device descriptor read/64, error -71 [ 460.954551][ T5616] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 461.153155][ T5616] usb 3-1: device descriptor read/64, error -71 [ 461.253552][T17420] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1721'. [ 461.266566][ T5616] usb usb3-port1: attempt power cycle [ 461.357036][T17422] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.359343][T17422] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.526113][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.526746][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.582838][T17436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 461.585663][T17436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 461.613307][ T5616] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 461.633912][ T5616] usb 3-1: device descriptor read/8, error -71 [ 461.873306][ T5616] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 461.894620][ T5616] usb 3-1: device descriptor read/8, error -71 [ 461.913376][ T9] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 462.004000][ T5616] usb usb3-port1: unable to enumerate USB device [ 462.064820][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 462.078063][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 462.078153][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 462.096580][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 462.096620][ T9] usb 4-1: can't read configurations, error -61 [ 462.234092][ T9] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 462.394031][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 462.398980][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 462.399071][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 462.432678][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 462.432727][ T9] usb 4-1: can't read configurations, error -61 [ 462.450653][ T9] usb usb4-port1: attempt power cycle [ 462.803162][ T9] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 462.824625][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 462.827173][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 462.827264][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 462.828964][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 462.829001][ T9] usb 4-1: can't read configurations, error -61 [ 462.963276][ T9] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 462.984021][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 462.986719][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 462.986921][ T9] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 462.988917][ T9] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 462.988955][ T9] usb 4-1: can't read configurations, error -61 [ 462.989669][ T9] usb usb4-port1: unable to enumerate USB device [ 463.488750][T17477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 463.490456][T17477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 463.515689][ T38] audit: type=1326 audit(1782611352.145:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17476 comm="syz.0.1732" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f37cdf9ce59 code=0x0 [ 463.733184][ T9] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 463.883283][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 464.013261][ T9] usb 3-1: new low-speed USB device number 32 using dummy_hcd [ 464.163250][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 464.163658][ T9] usb usb3-port1: attempt power cycle [ 464.503252][ T9] usb 3-1: new low-speed USB device number 33 using dummy_hcd [ 464.524090][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 464.625287][T17500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.628845][T17500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.653245][ T9] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 464.654843][T17500] netlink: 'syz.1.1735': attribute type 1 has an invalid length. [ 464.654870][T17500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1735'. [ 464.668141][T17500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.676069][ T9] usb 3-1: Invalid ep0 maxpacket: 32 [ 464.678655][ T9] usb usb3-port1: unable to enumerate USB device [ 464.685530][T17500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.707801][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1735'. [ 464.707943][T17500] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1735'. [ 464.721771][T17500] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.926087][T17513] netlink: 'syz.3.1737': attribute type 2 has an invalid length. [ 465.166076][T17519] netlink: 'syz.3.1738': attribute type 4 has an invalid length. [ 465.344923][T17523] syz_tun: entered allmulticast mode [ 465.393751][T17523] pim6reg: entered allmulticast mode [ 465.543200][T17531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1741'. [ 465.597536][T17533] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1741'. [ 466.274157][T17555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.277399][T17555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.588583][T17567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.601481][T17567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.641860][T17565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.851469][T17575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.859188][T17575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 466.881054][T17575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 466.881649][T17575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 467.377472][T17581] overlayfs: failed to clone lowerpath [ 467.592778][T17586] tmpfs: Unsupported parameter 'huge' [ 467.832443][T17600] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 467.841908][T17600] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 469.184126][T17639] openvswitch: netlink: Missing key (keys=40, expected=100) [ 469.186500][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.186514][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.188603][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.188618][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.188731][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.188741][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.188852][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.188863][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.188981][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.188992][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.189095][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.189106][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.189206][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.189216][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.189313][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.189323][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.189445][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.189455][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.243372][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.243409][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.243672][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.243683][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.243816][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.243847][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.244114][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.244145][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.244419][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.244448][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.257906][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.257942][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.258112][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.258124][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.258248][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.258288][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.258551][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.258574][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.258782][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.258814][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.259091][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.259114][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.278767][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.278819][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.298118][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.298170][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.301261][T17639] binder: BINDER_SET_CONTEXT_MGR already set [ 469.301310][T17639] binder: 17635:17639 ioctl 4018620d 200000000100 returned -16 [ 469.477776][ T5616] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 469.691961][T17645] 8021q: VLANs not supported on lo [ 469.713190][ T5616] usb 3-1: Using ep0 maxpacket: 8 [ 469.718089][ T5616] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 469.718122][ T5616] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.718145][ T5616] usb 3-1: Product: syz [ 469.718161][ T5616] usb 3-1: Manufacturer: syz [ 469.718176][ T5616] usb 3-1: SerialNumber: syz [ 469.765693][ T5616] usb 3-1: config 0 descriptor?? [ 469.783932][ T5616] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 469.979196][T17634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 469.979853][T17634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.035143][ T5616] gspca_sonixj: reg_w1 err -71 [ 470.035282][ T5616] sonixj 3-1:0.0: probe with driver sonixj failed with error -71 [ 470.067728][ T5616] usb 3-1: USB disconnect, device number 35 [ 470.172839][T17670] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 470.203345][ T5614] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 470.239352][T17670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 470.240461][T17670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 470.294172][T17673] bridge0: port 3(netdevsim0) entered blocking state [ 470.301514][T17673] bridge0: port 3(netdevsim0) entered disabled state [ 470.344542][T17673] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 470.370675][ T5614] usb 4-1: unable to get BOS descriptor or descriptor too short [ 470.372074][ T5614] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 470.399872][ T5614] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 470.399902][ T5614] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.399923][ T5614] usb 4-1: Product: syz [ 470.399937][ T5614] usb 4-1: Manufacturer: syz [ 470.399952][ T5614] usb 4-1: SerialNumber: syz [ 470.686423][ T5614] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 470.766784][T17681] usb 1-1: USB disconnect, device number 45 [ 470.938838][T17673] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 470.956796][T17687] sg_write: data in/out 216540/136 bytes for SCSI command 0x0-- guessing data in; [ 470.956796][T17687] program syz.1.1772 not setting count and/or reply_len properly [ 471.044633][T17687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 471.045339][T17687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 471.193221][T17692] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1771'. [ 471.220641][T17673] bridge0: port 3(netdevsim0) entered blocking state [ 471.221850][T17673] bridge0: port 3(netdevsim0) entered forwarding state [ 471.477413][T17681] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 471.497840][ T5614] usb 4-1: failed to enable PITCH for EP 0x82 [ 471.498331][ T5614] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 471.498352][ T5614] usb 4-1: clock source 0 is not valid, cannot use [ 471.498778][ T5614] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 471.499223][ T5614] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 471.638064][ T5614] usb 4-1: USB disconnect, device number 39 [ 471.654191][ T5339] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 471.815779][ T5339] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 471.815813][ T5339] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 471.815840][ T5339] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 471.856848][ T5339] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 471.856882][ T5339] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.856897][ T5339] usb 3-1: Product: syz [ 471.856908][ T5339] usb 3-1: Manufacturer: syz [ 471.856920][ T5339] usb 3-1: SerialNumber: syz [ 472.112243][ T5339] usb 3-1: config 0 descriptor?? [ 472.122085][T17694] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 472.122219][T17694] raw-gadget.4 gadget.2: fail, usb_ep_enable returned -22 [ 472.201123][ T5339] usb 3-1: ucan: probing device on interface #0 [ 472.419594][ T6061] udevd[6061]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 472.440125][T17681] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 472.464063][T17681] keyspan 1-1:0.0: device disconnected [ 472.923189][ T5339] usb 3-1: ucan: could not read protocol version, ret=-71 [ 472.923216][ T5339] usb 3-1: ucan: probe failed; try to update the device firmware [ 472.974083][ T5339] usb 3-1: USB disconnect, device number 36 [ 473.243417][T17765] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 473.244095][T17765] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.463228][ T5614] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 473.613139][ T5614] usb 4-1: Using ep0 maxpacket: 32 [ 473.615827][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.615862][ T5614] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.615904][ T5614] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 473.615930][ T5614] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.622195][ T5614] usb 4-1: config 0 descriptor?? [ 473.677755][ T5614] hub 4-1:0.0: USB hub found [ 473.873623][ T5748] IPVS: starting estimator thread 0... [ 473.881686][ T5614] hub 4-1:0.0: 1 port detected [ 474.023276][T17790] IPVS: using max 8 ests per chain, 19200 per kthread [ 474.232277][T17797] tap0: tun_chr_ioctl cmd 1074025678 [ 474.232299][T17797] tap0: group set to 0 [ 474.469445][ T5614] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 474.503866][ T5748] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 474.515198][ T5595] usb 4-1: USB disconnect, device number 40 [ 474.654635][ T14] usb 4-1: Failed to suspend device, error -19 [ 474.655509][ T5748] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 474.655543][ T5748] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 474.657813][ T5748] usb 3-1: New USB device found, idVendor=103d, idProduct=0101, bcdDevice= 0.40 [ 474.657844][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.657880][ T5748] usb 3-1: Product: syz [ 474.657892][ T5748] usb 3-1: Manufacturer: syz [ 474.657903][ T5748] usb 3-1: SerialNumber: syz [ 474.930819][T17823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 474.942224][T17823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.011021][ T5748] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 475.013876][ T5748] usb 3-1: unit 4 not found! [ 475.013899][ T5748] usb 3-1: unit 2 not found! [ 475.142784][T17832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.183866][T17832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.271731][ T5748] usb 3-1: Audio class v2/v3 interfaces need an interface association [ 475.340265][T17856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 475.340971][T17856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 475.377777][ T5748] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 475.418872][ T5748] usb 3-1: USB disconnect, device number 37 [ 475.434967][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 475.681984][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.080389][T17887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 476.085839][T17887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 476.253219][ T5755] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 476.393178][ T5755] usb 3-1: device descriptor read/64, error -71 [ 476.438242][T17899] program syz.1.1796 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 476.633112][ T5755] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 476.803170][ T5755] usb 3-1: device descriptor read/64, error -71 [ 476.914934][ T5755] usb usb3-port1: attempt power cycle [ 477.032853][T17928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.036365][T17928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.142924][T17928] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 477.143237][ T5595] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 477.197098][T17928] kvm: pic: level sensitive irq not supported [ 477.197255][T17928] kvm: pic: non byte read [ 477.197517][T17928] kvm: pic: level sensitive irq not supported [ 477.197680][T17928] kvm: pic: non byte read [ 477.197925][T17928] kvm: pic: level sensitive irq not supported [ 477.198060][T17928] kvm: pic: non byte read [ 477.198413][T17928] kvm: pic: level sensitive irq not supported [ 477.198481][T17928] kvm: pic: non byte read [ 477.198731][T17928] kvm: pic: level sensitive irq not supported [ 477.257804][ T5755] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 477.259663][T17928] kvm: pic: non byte read [ 477.259916][T17928] kvm: pic: level sensitive irq not supported [ 477.260044][T17928] kvm: pic: non byte read [ 477.260289][T17928] kvm: pic: level sensitive irq not supported [ 477.260338][T17928] kvm: pic: non byte read [ 477.285178][ T5755] usb 3-1: device descriptor read/8, error -71 [ 477.418737][ T5595] usb 4-1: New USB device found, idVendor=041e, idProduct=30df, bcdDevice= 0.40 [ 477.418772][ T5595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.418794][ T5595] usb 4-1: Product: syz [ 477.418810][ T5595] usb 4-1: Manufacturer: syz [ 477.418825][ T5595] usb 4-1: SerialNumber: syz [ 477.523322][ T5755] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 477.546036][ T5755] usb 3-1: device descriptor read/8, error -71 [ 477.665257][ T5755] usb usb3-port1: unable to enumerate USB device [ 477.705269][ T5595] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 477.705757][ T5595] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 477.785732][T17945] fuse: Unknown parameter '蛪' [ 477.804446][ T5595] usb 4-1: USB disconnect, device number 41 [ 478.112008][ T6584] raw-gadget.2 gadget.1: failed to queue disconnect event [ 478.458916][T17947] ================================================================== [ 478.458935][T17947] BUG: KASAN: slab-use-after-free in rt_spin_lock+0x83/0x400 [ 478.458958][T17947] Read of size 1 at addr ffff88802c5087e8 by task syz.1.1805/17947 [ 478.458972][T17947] [ 478.459054][T17947] CPU: 0 UID: 0 PID: 17947 Comm: syz.1.1805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.459077][T17947] Tainted: [L]=SOFTLOCKUP [ 478.459083][T17947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.459094][T17947] Call Trace: [ 478.459103][T17947] [ 478.459111][T17947] dump_stack_lvl+0xe8/0x150 [ 478.459133][T17947] print_address_description+0x55/0x1e0 [ 478.459155][T17947] ? rt_spin_lock+0x83/0x400 [ 478.459169][T17947] print_report+0x58/0x70 [ 478.459189][T17947] kasan_report+0x117/0x150 [ 478.459209][T17947] ? rt_spin_lock+0x83/0x400 [ 478.459226][T17947] ? bt_accept_unlink+0x7d/0x2f0 [ 478.459249][T17947] __kasan_check_byte+0x2a/0x40 [ 478.459267][T17947] lock_acquire+0x84/0x350 [ 478.459291][T17947] ? __local_bh_disable_ip+0x3c/0x420 [ 478.459318][T17947] rt_spin_lock+0x83/0x400 [ 478.459333][T17947] ? bt_accept_unlink+0x7d/0x2f0 [ 478.459357][T17947] ? __pfx_rt_spin_lock+0x10/0x10 [ 478.459371][T17947] ? rcu_is_watching+0x15/0xb0 [ 478.459395][T17947] ? __local_bh_disable_ip+0x3c/0x420 [ 478.459420][T17947] ? bt_accept_unlink+0x61/0x2f0 [ 478.459444][T17947] bt_accept_unlink+0x7d/0x2f0 [ 478.459467][T17947] ? bt_accept_unlink+0x61/0x2f0 [ 478.459490][T17947] l2cap_sock_teardown_cb+0x17e/0x490 [ 478.459512][T17947] l2cap_chan_del+0x98/0x600 [ 478.459534][T17947] l2cap_conn_del+0x2f2/0x520 [ 478.459552][T17947] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 478.459569][T17947] hci_conn_hash_flush+0x105/0x260 [ 478.459589][T17947] hci_dev_close_sync+0x7fc/0x10a0 [ 478.459624][T17947] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 478.459648][T17947] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.459669][T17947] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.459689][T17947] ? mutex_lock_nested+0x152/0x1d0 [ 478.459703][T17947] ? hci_unregister_dev+0x22a/0x5b0 [ 478.459726][T17947] hci_unregister_dev+0x232/0x5b0 [ 478.459748][T17947] vhci_release+0x170/0x1c0 [ 478.459768][T17947] ? __pfx_vhci_release+0x10/0x10 [ 478.459785][T17947] __fput+0x42a/0xa80 [ 478.459805][T17947] task_work_run+0x1d9/0x270 [ 478.459826][T17947] ? __pfx_task_work_run+0x10/0x10 [ 478.459846][T17947] ? do_exit+0x735/0x2360 [ 478.459863][T17947] ? kmem_cache_free+0x187/0x6c0 [ 478.459880][T17947] ? put_net+0x191/0x260 [ 478.459903][T17947] ? do_exit+0x735/0x2360 [ 478.459922][T17947] do_exit+0x73a/0x2360 [ 478.459940][T17947] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.459960][T17947] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.459982][T17947] ? __pfx_do_exit+0x10/0x10 [ 478.460001][T17947] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 478.460016][T17947] ? rt_spin_lock+0x1e0/0x400 [ 478.460033][T17947] ? rt_spin_unlock+0x157/0x200 [ 478.460049][T17947] do_group_exit+0x22d/0x2f0 [ 478.460068][T17947] ? rt_spin_unlock+0x163/0x200 [ 478.460084][T17947] get_signal+0x121b/0x12c0 [ 478.460158][T17947] arch_do_signal_or_restart+0xbb/0x860 [ 478.460182][T17947] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 478.460207][T17947] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 478.460233][T17947] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 478.460261][T17947] exit_to_user_mode_loop+0x104/0x730 [ 478.460289][T17947] ? rcu_is_watching+0x15/0xb0 [ 478.460324][T17947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.460341][T17947] do_syscall_64+0x353/0x580 [ 478.460362][T17947] ? trace_irq_disable+0x3b/0x140 [ 478.460388][T17947] ? clear_bhb_loop+0x40/0x90 [ 478.460407][T17947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.460423][T17947] RIP: 0033:0x7fe57130d68e [ 478.460437][T17947] Code: Unable to access opcode bytes at 0x7fe57130d664. [ 478.460446][T17947] RSP: 002b:00007fe56f59df58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 478.460463][T17947] RAX: fffffffffffffdfc RBX: 00007fe56f59e6c0 RCX: 00007fe57130d68e [ 478.460476][T17947] RDX: 00007fe56f59dfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.460486][T17947] RBP: 00007fe5713e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 478.460496][T17947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.460506][T17947] R13: 00007fe5715c6038 R14: 00007fe5715c5fa0 R15: 00007ffd7f125c88 [ 478.460525][T17947] [ 478.460531][T17947] [ 478.460534][T17947] Allocated by task 69: [ 478.460588][T17947] kasan_save_track+0x3e/0x80 [ 478.460603][T17947] __kasan_kmalloc+0x93/0xb0 [ 478.460623][T17947] __kmalloc_node_track_caller_noprof+0x57f/0x7c0 [ 478.460641][T17947] __alloc_skb+0x2bd/0x7a0 [ 478.460658][T17947] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 478.460681][T17947] process_one_work+0x93a/0x12b0 [ 478.460703][T17947] worker_thread+0xb05/0x10d0 [ 478.460725][T17947] kthread+0x388/0x470 [ 478.460741][T17947] ret_from_fork+0x514/0xb70 [ 478.460758][T17947] ret_from_fork_asm+0x1a/0x30 [ 478.460776][T17947] [ 478.460780][T17947] Freed by task 69: [ 478.460786][T17947] kasan_save_track+0x3e/0x80 [ 478.460800][T17947] kasan_save_free_info+0x40/0x50 [ 478.460821][T17947] __kasan_slab_free+0x5c/0x80 [ 478.460836][T17947] kfree+0x1c5/0x6c0 [ 478.460847][T17947] skb_release_data+0x85e/0xab0 [ 478.460866][T17947] __kfree_skb+0x5d/0x210 [ 478.460883][T17947] nsim_dev_trap_report_work+0x879/0xcb0 [ 478.460906][T17947] process_one_work+0x93a/0x12b0 [ 478.460927][T17947] worker_thread+0xb05/0x10d0 [ 478.460950][T17947] kthread+0x388/0x470 [ 478.460966][T17947] ret_from_fork+0x514/0xb70 [ 478.460982][T17947] ret_from_fork_asm+0x1a/0x30 [ 478.460999][T17947] [ 478.461003][T17947] The buggy address belongs to the object at ffff88802c508000 [ 478.461003][T17947] which belongs to the cache kmalloc-4k of size 4096 [ 478.461017][T17947] The buggy address is located 2024 bytes inside of [ 478.461017][T17947] freed 4096-byte region [ffff88802c508000, ffff88802c509000) [ 478.461033][T17947] [ 478.461037][T17947] The buggy address belongs to the physical page: [ 478.461073][T17947] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c508 [ 478.461091][T17947] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 478.461104][T17947] flags: 0x80000000000040(head|node=0|zone=1) [ 478.461118][T17947] page_type: f5(slab) [ 478.461134][T17947] raw: 0080000000000040 ffff88813feaa140 dead000000000100 dead000000000122 [ 478.461148][T17947] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 478.461164][T17947] head: 0080000000000040 ffff88813feaa140 dead000000000100 dead000000000122 [ 478.461177][T17947] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 478.461192][T17947] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 478.461206][T17947] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 478.461215][T17947] page dumped because: kasan: bad access detected [ 478.461227][T17947] page_owner tracks the page as allocated [ 478.461233][T17947] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1375, tgid 1375 (kworker/u8:9), ts 380605576765, free_ts 360315456694 [ 478.461260][T17947] post_alloc_hook+0x1f9/0x250 [ 478.461274][T17947] get_page_from_freelist+0x2639/0x26b0 [ 478.461292][T17947] __alloc_frozen_pages_noprof+0x18d/0x380 [ 478.461310][T17947] allocate_slab+0x79/0x5e0 [ 478.461330][T17947] refill_objects+0x2d8/0x350 [ 478.461351][T17947] __pcs_replace_empty_main+0x330/0x690 [ 478.461371][T17947] __kmalloc_node_track_caller_noprof+0x62d/0x7c0 [ 478.461388][T17947] __alloc_skb+0x2bd/0x7a0 [ 478.461404][T17947] nsim_dev_trap_report_work+0x2b1/0xcb0 [ 478.461427][T17947] process_one_work+0x93a/0x12b0 [ 478.461448][T17947] worker_thread+0xb05/0x10d0 [ 478.461470][T17947] kthread+0x388/0x470 [ 478.461486][T17947] ret_from_fork+0x514/0xb70 [ 478.461502][T17947] ret_from_fork_asm+0x1a/0x30 [ 478.461519][T17947] page last free pid 13964 tgid 13963 stack trace: [ 478.461528][T17947] __free_frozen_pages+0x10de/0x11c0 [ 478.461543][T17947] __slab_free+0x252/0x2a0 [ 478.461557][T17947] qlist_free_all+0x99/0x100 [ 478.461570][T17947] kasan_quarantine_reduce+0x148/0x160 [ 478.461583][T17947] __kasan_slab_alloc+0x22/0x80 [ 478.461598][T17947] __kmalloc_node_track_caller_noprof+0x519/0x7c0 [ 478.461625][T17947] __alloc_skb+0x2bd/0x7a0 [ 478.461641][T17947] _sctp_make_chunk+0x59/0x290 [ 478.461658][T17947] sctp_make_datafrag_empty+0x12a/0x240 [ 478.461673][T17947] sctp_datamsg_from_user+0x735/0xef0 [ 478.461687][T17947] sctp_sendmsg_to_asoc+0x13cf/0x1880 [ 478.461706][T17947] sctp_sendmsg+0x1759/0x2a50 [ 478.461723][T17947] sock_sendmsg_nosec+0x10e/0x180 [ 478.461737][T17947] __sys_sendto+0x41e/0x5d0 [ 478.461754][T17947] __x64_sys_sendto+0xde/0x100 [ 478.461771][T17947] do_syscall_64+0x174/0x580 [ 478.461790][T17947] [ 478.461794][T17947] Memory state around the buggy address: [ 478.461802][T17947] ffff88802c508680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 478.461813][T17947] ffff88802c508700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 478.461824][T17947] >ffff88802c508780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 478.461832][T17947] ^ [ 478.461841][T17947] ffff88802c508800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 478.461852][T17947] ffff88802c508880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 478.461860][T17947] ================================================================== [ 478.461965][T17947] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 478.461981][T17947] CPU: 0 UID: 0 PID: 17947 Comm: syz.1.1805 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 478.462003][T17947] Tainted: [L]=SOFTLOCKUP [ 478.462009][T17947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 478.462019][T17947] Call Trace: [ 478.462026][T17947] [ 478.462037][T17947] vpanic+0x56c/0xa60 [ 478.462064][T17947] ? __pfx_vpanic+0x10/0x10 [ 478.462087][T17947] ? __pfx___schedule+0x10/0x10 [ 478.462108][T17947] panic+0xc5/0xd0 [ 478.462132][T17947] ? __pfx_panic+0x10/0x10 [ 478.462156][T17947] ? preempt_schedule_common+0x82/0xd0 [ 478.462177][T17947] ? rt_spin_lock+0x83/0x400 [ 478.462191][T17947] check_panic_on_warn+0x89/0xb0 [ 478.462212][T17947] ? rt_spin_lock+0x83/0x400 [ 478.462226][T17947] end_report+0x73/0x170 [ 478.462244][T17947] ? rt_spin_lock+0x83/0x400 [ 478.462258][T17947] kasan_report+0x128/0x150 [ 478.462277][T17947] ? rt_spin_lock+0x83/0x400 [ 478.462299][T17947] ? bt_accept_unlink+0x7d/0x2f0 [ 478.462322][T17947] __kasan_check_byte+0x2a/0x40 [ 478.462340][T17947] lock_acquire+0x84/0x350 [ 478.462363][T17947] ? __local_bh_disable_ip+0x3c/0x420 [ 478.462390][T17947] rt_spin_lock+0x83/0x400 [ 478.462404][T17947] ? bt_accept_unlink+0x7d/0x2f0 [ 478.462428][T17947] ? __pfx_rt_spin_lock+0x10/0x10 [ 478.462443][T17947] ? rcu_is_watching+0x15/0xb0 [ 478.462466][T17947] ? __local_bh_disable_ip+0x3c/0x420 [ 478.462492][T17947] ? bt_accept_unlink+0x61/0x2f0 [ 478.462515][T17947] bt_accept_unlink+0x7d/0x2f0 [ 478.462538][T17947] ? bt_accept_unlink+0x61/0x2f0 [ 478.462561][T17947] l2cap_sock_teardown_cb+0x17e/0x490 [ 478.462583][T17947] l2cap_chan_del+0x98/0x600 [ 478.462604][T17947] l2cap_conn_del+0x2f2/0x520 [ 478.462630][T17947] ? __pfx_l2cap_disconn_cfm+0x10/0x10 [ 478.462647][T17947] hci_conn_hash_flush+0x105/0x260 [ 478.462667][T17947] hci_dev_close_sync+0x7fc/0x10a0 [ 478.462702][T17947] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 478.462727][T17947] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.462747][T17947] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.462767][T17947] ? mutex_lock_nested+0x152/0x1d0 [ 478.462781][T17947] ? hci_unregister_dev+0x22a/0x5b0 [ 478.462804][T17947] hci_unregister_dev+0x232/0x5b0 [ 478.462826][T17947] vhci_release+0x170/0x1c0 [ 478.462845][T17947] ? __pfx_vhci_release+0x10/0x10 [ 478.462862][T17947] __fput+0x42a/0xa80 [ 478.462882][T17947] task_work_run+0x1d9/0x270 [ 478.462903][T17947] ? __pfx_task_work_run+0x10/0x10 [ 478.462923][T17947] ? do_exit+0x735/0x2360 [ 478.462940][T17947] ? kmem_cache_free+0x187/0x6c0 [ 478.462962][T17947] ? put_net+0x191/0x260 [ 478.463015][T17947] ? do_exit+0x735/0x2360 [ 478.463041][T17947] do_exit+0x73a/0x2360 [ 478.463065][T17947] ? lockdep_hardirqs_on+0x7a/0x110 [ 478.463090][T17947] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 478.463120][T17947] ? __pfx_do_exit+0x10/0x10 [ 478.463145][T17947] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 478.463164][T17947] ? rt_spin_lock+0x1e0/0x400 [ 478.463187][T17947] ? rt_spin_unlock+0x157/0x200 [ 478.463215][T17947] do_group_exit+0x22d/0x2f0 [ 478.463241][T17947] ? rt_spin_unlock+0x163/0x200 [ 478.463264][T17947] get_signal+0x121b/0x12c0 [ 478.463304][T17947] arch_do_signal_or_restart+0xbb/0x860 [ 478.463328][T17947] ? __pfx_hrtimer_wakeup+0x10/0x10 [ 478.463357][T17947] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 478.463377][T17947] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 478.463399][T17947] exit_to_user_mode_loop+0x104/0x730 [ 478.463422][T17947] ? rcu_is_watching+0x15/0xb0 [ 478.463446][T17947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.463464][T17947] do_syscall_64+0x353/0x580 [ 478.463484][T17947] ? trace_irq_disable+0x3b/0x140 [ 478.463504][T17947] ? clear_bhb_loop+0x40/0x90 [ 478.463522][T17947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.463539][T17947] RIP: 0033:0x7fe57130d68e [ 478.463552][T17947] Code: Unable to access opcode bytes at 0x7fe57130d664. [ 478.463561][T17947] RSP: 002b:00007fe56f59df58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 478.463578][T17947] RAX: fffffffffffffdfc RBX: 00007fe56f59e6c0 RCX: 00007fe57130d68e [ 478.463590][T17947] RDX: 00007fe56f59dfb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 478.463601][T17947] RBP: 00007fe5713e2e6f R08: 0000000000000000 R09: 0000000000000000 [ 478.463612][T17947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 478.463630][T17947] R13: 00007fe5715c6038 R14: 00007fe5715c5fa0 R15: 00007ffd7f125c88 [ 478.463649][T17947] [ 478.464276][T17947] Kernel Offset: disabled