last executing test programs: 6.036173376s ago: executing program 2 (id=624): r0 = socket(0x10, 0x3, 0x0) (async) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) (async) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$P9_RSYMLINK(r2, &(0x7f0000000100)={0x14, 0x11, 0x2, {0x20, 0x2, 0x6}}, 0x14) (async) write$binfmt_misc(r2, &(0x7f0000000240), 0xfffffecc) (async) splice(r1, 0x0, r3, 0x0, 0x714f, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000000c0)={0xe, 0x0, 0x0, 0xedc}, 0x10) (async) sendmsg$FOU_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x24, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44084) (async) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001200010a"], 0x26}}, 0x0) 5.973131182s ago: executing program 2 (id=626): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0xffffffff, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000021000904000002923350000905060bff030000000905ba", @ANYBLOB="e2f657f76570bc3d2b90b22c6bef5551a3cb6f6ac0ceaedbfa70c499393fbca0f5f1c6ab56488882a50a939cc4c520caba3bbdf7856a2deec366c29b3bc5719f85c773c408feb91694a565ed214464d0ae6fdb", @ANYRES16=0x0], 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r0, 0x107, 0xe, &(0x7f00000000c0)=0xffffffff, 0x4) (async) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a2010203010902240001000021000904000002923350000905060bff030000000905ba", @ANYBLOB="e2f657f76570bc3d2b90b22c6bef5551a3cb6f6ac0ceaedbfa70c499393fbca0f5f1c6ab56488882a50a939cc4c520caba3bbdf7856a2deec366c29b3bc5719f85c773c408feb91694a565ed214464d0ae6fdb", @ANYRES16=0x0], 0x0) (async) 4.838620868s ago: executing program 0 (id=635): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x355640, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680200000005010400000000000000000300000354020100000000000632f6d129000000f2010002"], 0x268}, 0x1, 0x0, 0x0, 0x8000000}, 0x4000000) ioctl$VHOST_VDPA_GET_CONFIG(r1, 0x8008af73, &(0x7f0000000040)={0x0, 0x2a, ""/42}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newsa={0x13c, 0x10, 0x713, 0x70bd26, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@empty, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xee01}, {@in6=@remote, 0x0, 0x32}, @in=@empty, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x7, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.533314975s ago: executing program 2 (id=637): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902"], 0x0) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1e71, 0x2010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x10, 0x5, 0x3, 0x0, 0x6669cc1368519859, 0x0, {0x9, 0x21, 0x5, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) syz_usb_connect(0x4, 0x2d, &(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESDEC=r2, @ANYRES32=r2, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x0) 4.389886105s ago: executing program 0 (id=638): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x3e, [0x2, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x3, 0x0, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x5, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0xffffffff, 0x3, 0x1, 0x4f, 0x6, 0x9, 0x7, 0x9, 0x4, 0x2, 0x10000001, 0x5, 0x4, 0x9, 0x4, 0xa, 0x8, 0x1000000, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x40004, 0xfffffff7, 0x7fff, 0x4, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x21], [0x1, 0x9, 0x9, 0x1, 0x5, 0x6, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0x5, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0xb6fe, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x5, 0x8000, 0x800, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x80000007], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x10, 0x1, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x1a2e, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x8b2, 0x7, 0x0, 0xff, 0x0, 0x2, 0x4, 0xb, 0x9, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0xff, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0x200b, 0x3d3, 0xffff9a7f, 0x200, 0x3, 0x2, 0x2000003, 0x1, 0x5, 0x4, 0x3, 0x33b5, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0xffff, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x6, 0x1904, 0x4, 0x9, 0x8, 0x7fe, 0x80, 0x8005, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2042, 0x0) ioctl$PTP_EXTTS_REQUEST(r1, 0x40103d02, &(0x7f0000000100)={0x1}) syz_usb_connect(0x1, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 3.085620331s ago: executing program 2 (id=645): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000040)={0x0, 0x0, 0x1, 0x0, 0x1, [{0xf8, &(0x7f0000000200)=ANY=[@ANYBLOB="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"]}]}) ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000100)={r0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x3, 0x7fff}) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000140)={0x0, 0x80000001}) eventfd(0x9) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f00000000c0)={0x4b5a9da54893e123, 0x8, 0x2, 0xffff, 0x7}, 0x8, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0}) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r3, 0x29, 0x33, 0x0, &(0x7f0000000040)) ioctl$SCSI_IOCTL_GET_PCI(r2, 0x5393, &(0x7f0000000000)) 1.797837999s ago: executing program 2 (id=648): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000180)=0x2, 0x4) sendmmsg$inet(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000740)="b3", 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="801faabe7d9776dea71830ca360c9bb38d0ca36655eaa1fef8fa1cf7413cc52c25edb98327979842121972b1986ac7d6c9b3098f3e85b52d932a7ec59a65be3859f3d5a496f6187b648a85c59a05666a2a4e0162d043bc911562f4c94baf2acdada0d49287244523ab708bba9d69a138", @ANYRESOCT=0x0, @ANYRES16=r0], 0xf0}}], 0x1, 0x20004085) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$inet6(0xa, 0x80002, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000080)=')\x00', 0x2}], 0x1) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) 1.738832762s ago: executing program 2 (id=649): socket$xdp(0x2c, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000440)=ANY=[@ANYBLOB="00000100000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000280)={0x700c1d39c7413721, 0x7, 0xe9, {0xe9, 0x23, "0bd929317b46103fdaa66d46a8313a87f6b73ee04a8fb2e88f97d85418a192c28e087968b7d315697d01931a5ed2801eff1351ed5a2368fa2fea8f901ac7ab4183716576dbae76ce75ef48dc531f4cdf99822fdc820ba7a121559e7d061e12b6a620b889c55f0b90aba9f9cb296950178c8e6e0eda26d6b7adec043cdb9056471bcf2544e0dca6e1ed5473bb711055c375dcbf3696693fcfea79c22a7c571e67334de1341dd7c1f910f9195101604db84979f5b6081a7d35a2a2a6fe5ce09ff8f27e8ae0720dd4c73eb9c09b84a5967dc19a235095980d61946c5330bff838052614dd1b73515b"}}, &(0x7f0000000740)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f0000000700)={0x34, &(0x7f0000000480)={0x40, 0x0, 0xde, "dfd98ac8ec74323b60d61c2230068844cecafd28b4ac75ea3dc93704b3baa0ddc2eacdfbdeb0fd541896e683571a5d89ca3e97eea32dab8df819fae4803ed813b01d54e6a42347d4a5dddbfb62e3f27eb6457fc4b7954c5f9c82f5bc7977c33a18f75d695e7b31d239662e04b2bc972c16329d8b771155a4ddd09046be931ba18d04e972391b4cb193add5476c00dc75dad679775faef5f054dc51c216d6baccb91c03947753631ca60a06f63159ba7eabdcb0af21ed172e6ed244f1494796efdeeb38db7f9ddb1d5af22a54f2008ee0df355009e064ca1d0712feeddcd7"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000580)={0x20, 0x0, 0x2f, {0x2d, "ddbcff744cf404f10e4990b9a431e4c64e1d8d044cdedf053403e1e10cb7ca25139ec13447e39d56a053df93a8"}}, &(0x7f0000000680)={0x20, 0x1, 0x1, 0x7c}, &(0x7f00000006c0)={0x20, 0x0, 0x1, 0x9}}) r1 = socket$netlink(0x10, 0x3, 0x400000000000004) r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0585605, &(0x7f0000000500)={0x1, 0x1, @raw_data}) sync_file_range(r1, 0x9, 0x3, 0x3) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000000)) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0) read(r1, &(0x7f00000005c0)=""/134, 0x86) 1.308620868s ago: executing program 0 (id=653): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x189002, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r1], 0x1c}}, 0x20000080) sendmsg$OSF_MSG_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0x1060, 0x0, 0x5, 0xb02, 0x0, 0x0, {0x2, 0x0, 0x4}, [{{0x254, 0x1, {{0x2, 0x6}, 0x7f, 0x2, 0x5, 0xd26, 0x20, 'syz1\x00', "91753f12e3e4e8c8bca5c9ebaae33a70b18ca78ca45ddd75518a65b0848c2e77", "33a897cfe05e5b1f2c29365f05aeb4fa35edfb2a7a44155e61e8e1570ebcdeb2", [{0x400, 0x7ff, {0xf4fcc86cfb0aa12c, 0xfffffffe}}, {0x5, 0x8, {0x2, 0x80000001}}, {0x4, 0x81, {0x0, 0x1}}, {0xfff, 0x401, {0x1, 0x1}}, {0x0, 0x5, {0x3, 0x7}}, {0xc, 0x7, {0x2, 0x4}}, {0xda17, 0x6, {0x0, 0x9}}, {0x40a3, 0x1, {0x2, 0x8}}, {0x9f, 0xff, {0x2, 0x5c}}, {0x9, 0x8, {0x3, 0x9e3}}, {0x8, 0x30, {0x2, 0xb58}}, {0x3, 0xe, {0x0, 0x5}}, {0x40, 0x2ed, {0x1, 0x8000}}, {0x8, 0x80, {0x2, 0x106f}}, {0xa, 0x3, {0x1, 0xb}}, {0x5, 0x7e45, {0x3, 0xfffffffc}}, {0x200, 0x2, {0x0, 0x2}}, {0x9, 0x4, {0x0, 0xdc1}}, {0xe, 0x3d9, {0x2, 0x8001}}, {0xfffe, 0x4, {0x2, 0x2}}, {0x7, 0x1, {0x1, 0x4}}, {0x9, 0x6, {0x3, 0x43b}}, {0x3, 0x6, {0x3, 0x80000001}}, {0xfff, 0x5, {0x1, 0xa0}}, {0x8001, 0xe99c, {0x0, 0x2}}, {0x0, 0x3, {0x3, 0x2}}, {0x0, 0x3, {0x1, 0xaf9}}, {0x370, 0xc, {0x3, 0x5}}, {0xe, 0x400, {0x0, 0x8}}, {0x7, 0xa, {0x2, 0xffffffff}}, {0x4, 0xe, {0x2, 0xb}}, {0xa, 0x9, {0x2, 0x5}}, {0x1ff, 0x8, {0x3, 0x2}}, {0x80, 0x2b, {0x0, 0x5}}, {0x0, 0xb5b4, {0x0, 0x4b}}, {0x2, 0x1ff, {0x0, 0x1}}, {0x9, 0x9, {0x0, 0x80000001}}, {0x19c7, 0x1000, {0x3, 0x9}}, {0xffff, 0x8000, {0x1, 0x5}}, {0x10d, 0x10, {0x0, 0xde000000}}]}}}, {{0x254, 0x1, {{}, 0x5, 0x1, 0x480, 0xc, 0x19, 'syz0\x00', "6ce0d0d023ba288ed52b797dfc64ed8a6b964f5cd44e40985f27a082d0de5664", "2ff659b5e4c71f872c48bd61d7ab63bc92ffc6a7b0eba83e5cc118efc8a23aeb", [{0x0, 0x5, {0x2, 0x3}}, {0xf702, 0x5, {0x634188fd9ba249e8, 0x200}}, {0x9, 0x2, {0x2, 0x101}}, {0x200, 0x7, {0x2, 0x3}}, {0x4, 0x5, {0x3, 0x3f5}}, {0x9, 0x45dd, {0x2, 0xfffffffa}}, {0x1, 0x4, {0x1, 0x6}}, {0x9, 0x870, {0x2, 0x3}}, {0xff01, 0x5, {0x1, 0x4}}, {0x2, 0x3ff, {0x1, 0xbea}}, {0x401, 0x4da, {0x3, 0x7000000}}, {0x7, 0x1ff, {0x34e27471102c5aef, 0x3}}, {0x3, 0x3, {0x3, 0x6}}, {0x81, 0x4, {0x0, 0x7}}, {0xd, 0xf, {0x0, 0x4}}, {0x13, 0x3, {0x3, 0x6}}, {0x0, 0x7, {0x1, 0x80000001}}, {0x2, 0x6, {0x0, 0x1}}, {0x89bf, 0x3, {0x1, 0x4}}, {0x0, 0xd, {0x2, 0x6}}, {0x0, 0x5, {0x3, 0x1685}}, {0xe, 0x800, {0x0, 0x6}}, {0x8001, 0x6021, {0x3, 0x9}}, {0x11, 0x5, {0x1, 0x1}}, {0x6, 0x344, {0x1, 0x8}}, {0xdf, 0x7, {0x3, 0xe}}, {0x8000, 0xfff, {0x2}}, {0x2, 0x7f, {0x2, 0x6}}, {0x0, 0x1ff, {0x3, 0x2}}, {0x7, 0x3, {0x3, 0x9}}, {0x816b, 0x7, {0x0, 0x3}}, {0x3, 0xfffd, {0x3, 0x1}}, {0xb4, 0x8, {0x3, 0xe}}, {0x40, 0xd37f, {0x2, 0x7}}, {0x3ff, 0x100, {0x2, 0x87d0}}, {0x9, 0x4, {0x8e131e0b05f05100, 0x41}}, {0x4, 0x0, {0x2, 0x5}}, {0x4, 0x7ff, {0x1, 0x6}}, {0x5, 0x7, {0x3, 0x4}}, {0x4, 0x1000, {0x1, 0x3}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x5, 0x9, 0x1, 0xfffa, 0xc, 'syz1\x00', "639b32c5cce39668cb6a18b7b2c3bb1d86a3357adc692460ac742d3705f4f7f3", "fb58b267871dc39fee98f784646e1cb137e243939a5d2ed44336d0ac680a5947", [{0x8, 0x4, {0x3, 0x5}}, {0x4, 0xdf, {0x1, 0x7}}, {0xb, 0xc, {0x0, 0xfffffffd}}, {0x200, 0x6, {0x2, 0x73}}, {0x3, 0xfff8, {0x1, 0x6}}, {0x7, 0x7, {0x2, 0x7}}, {0x8, 0x7fff, {0x0, 0x7}}, {0xf, 0x3, {0x2, 0x3ff}}, {0xc, 0x2, {0x2, 0x1ff}}, {0x60fa, 0x7, {0x3, 0x4}}, {0x3cba, 0x6, {0x0, 0x9}}, {0xf24, 0x9, {0x3, 0x7f}}, {0x8000, 0x1, {0x3, 0x8000}}, {0x2, 0x5, {0x3, 0x4}}, {0x39d3, 0xc, {0x0, 0x8}}, {0x6, 0x1, {0x0, 0x2}}, {0x4, 0x4, {0x1, 0x7fff}}, {0x6, 0x6, {0x1, 0x9}}, {0x8001, 0x2, {0x2, 0xff}}, {0x3, 0xfff, {0x2, 0x3c2f}}, {0x2, 0x6, {0x1, 0x1}}, {0x1, 0x0, {0x0, 0x4}}, {0x6890, 0x5, {0x2, 0x4}}, {0x2, 0x6, {0x3, 0x1}}, {0x100, 0x7, {0x1, 0x7}}, {0x81, 0x18f7, {0x3, 0x2}}, {0x2, 0xf8, {0x2}}, {0x8, 0xffff, {0x2, 0x2}}, {0x0, 0x9, {0x1, 0xd6f}}, {0x1, 0xe, {0x0, 0xaf80}}, {0x7, 0x9, {0x2, 0x5}}, {0x9, 0x9, {0x0, 0x9}}, {0x8, 0x101, {0x1, 0x3}}, {0x9, 0x2, {0x1, 0x1000}}, {0x5, 0x2, {0x0, 0x1000}}, {0x81, 0xe1c, {0x0, 0xfff}}, {0x2, 0x5, {0x3, 0x9}}, {0x5, 0x0, {0x1, 0x6}}, {0xc253, 0x7, {0x0, 0x4}}, {0xfa, 0x1, {0x0, 0x5ab}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x8, 0x9, 0x0, 0xec7a, 0xe, 'syz1\x00', "aa077db5ea345d598b883fc0062cfe1c60fa142e78e74d16d7930d02c86d849c", "7558eb16201312abd36fcc3c776ad0519476a79c78e2352dfbbe0355d23255e7", [{0x0, 0x8000, {0x3, 0xbecf}}, {0x5e9, 0x10, {0x2, 0x80000000}}, {0x7, 0x4, {0x2, 0x5}}, {0x3, 0x0, {0x0, 0x1ff}}, {0x7fff, 0x6, {0x3, 0x6}}, {0x5, 0x5, {0x3, 0x8}}, {0xcd, 0x0, {0x2, 0x1}}, {0x6, 0x6, {0x1, 0x5}}, {0x0, 0x10, {0x3, 0xfffffff9}}, {0xb, 0x0, {0x1, 0x9}}, {0x3ff, 0x0, {0x2, 0x9a9}}, {0x2, 0x401, {0x1, 0xae}}, {0x9, 0x4, {0x0, 0x3}}, {0x8, 0x3, {0x2, 0xb}}, {0x5, 0x2, {0x2, 0x1d}}, {0x4, 0x3ff, {0x0, 0x9}}, {0x6, 0xe, {0x2, 0x80000001}}, {0x1000, 0x1, {0x3, 0xc}}, {0x9, 0x400, {0x0, 0x5}}, {0xb, 0x9, {0x3, 0xbe}}, {0x2, 0x2, {0x1, 0x2}}, {0xb7, 0x7, {0x0, 0x1}}, {0xb, 0x0, {0x2, 0x8}}, {0x73d7, 0xa, {0x2}}, {0x0, 0x62, {0x1, 0x10001}}, {0x172, 0x1, {0x1}}, {0x1000, 0x1}, {0x8, 0x5, {0x0, 0x80000001}}, {0x8, 0x1, {0x0, 0x4}}, {0x0, 0xc, {0x1, 0x8}}, {0x8c, 0x3, {0x0, 0x3ff}}, {0x6, 0xf92f}, {0x7, 0x3, {0x2, 0x3}}, {0xf, 0x5, {0x3, 0x10000}}, {0x9, 0x1, {0x1, 0x2}}, {0xf5c, 0x1, {0x1, 0x8}}, {0x8, 0x9, {0x0, 0x7}}, {0x88, 0x7d, {0x3, 0x3}}, {0x40, 0x100, {0x0, 0x3}}, {0x5, 0xb, {0x2, 0x889}}]}}}, {{0x254, 0x1, {{0x1, 0x83fc}, 0xb, 0x0, 0xf5d4, 0x5a7, 0x27, 'syz0\x00', "5ed6627fae9faecf64bd811e35375e43066fd064c62be73cfe80f369e9870e49", "8c596037b0db90665dd888e48911d6cd290d1125e9d14b7fe72c68edbc055c57", [{0x1, 0x101, {0x2, 0x457}}, {0xfffe, 0xfff, {0x3, 0x3}}, {0x0, 0x3bff, {0x2}}, {0xb, 0x3, {0x1, 0x8}}, {0x0, 0x0, {0x1, 0x84}}, {0x8, 0x1000, {0x2, 0x8}}, {0x75f0, 0x4, {0x563feab5f42ccda9, 0x3ff}}, {0x3, 0x7f}, {0x400, 0xb5c, {0x0, 0x8}}, {0x6, 0x1, {0x2, 0x8}}, {0x7, 0x7, {0x2, 0x2}}, {0x3, 0x3, {0x1, 0x7}}, {0x4, 0x1, {0x0, 0x8}}, {0x9, 0x7, {0x3, 0x5}}, {0xfff3, 0x8, {0x0, 0x8}}, {0x8a, 0x414, {0x2, 0x7}}, {0x4, 0x8001, {0x0, 0x223}}, {0x2, 0x7, {0x1, 0x3}}, {0x3637, 0x800, {0xf7688863de08e55, 0xffffff7f}}, {0x3, 0x80, {0x2, 0x6}}, {0x692, 0x9, {0x1, 0x4}}, {0x3, 0x9, {0x0, 0x3}}, {0x7, 0x3, {0x3, 0x631e32}}, {0x4, 0x9, {0x2, 0xc0}}, {0x5, 0x5, {0x0, 0x1}}, {0x7, 0x1, {0x1, 0x94bd}}, {0x8, 0x7ff, {0x0, 0x1}}, {0x7eb, 0xede8, {0x2, 0x2}}, {0x4, 0x1, {0x2}}, {0x6, 0x1, {0x2, 0x10001}}, {0x8000, 0x0, {0x2, 0xfffffffd}}, {0x4, 0xffff, {0x0, 0x6c000000}}, {0x10, 0x4, {0x1, 0x9}}, {0x401, 0x8, {0x3, 0xfffffffb}}, {0x8, 0x8, {0x2, 0xdcfc}}, {0xd, 0x1, {0x1}}, {0x6, 0xb, {0x2, 0x1}}, {0x6, 0x4, {0x2, 0x9}}, {0x5, 0xe, {0x0, 0xfffffff7}}, {0x7, 0x9, {0x1, 0x5}}]}}}, {{0x254, 0x1, {{0x1, 0x1}, 0x2, 0x7, 0x4000, 0x5, 0x1, 'syz1\x00', "ed6af514bde3e25ea2d78873205867f10e05b3fb6b3ae630acf7a3690dc11493", "9a6546b249b3a8afb09cc4c05ce2986d8e90ab008485a4128a86fd4e2d51c103", [{0x9, 0x0, {0x3, 0x1}}, {0x0, 0x6, {0x1, 0x6cbb}}, {0x3, 0x80, {0x2, 0xf}}, {0xffff, 0x2, {0x1, 0x4}}, {0x2, 0x3, {0x3, 0x4}}, {0xe420, 0x9, {0x2, 0x3425}}, {0xd4, 0x9, {0x1, 0xfffffffb}}, {0x4, 0x4, {0x3, 0x7}}, {0x0, 0x2, {0x0, 0x3}}, {0x8, 0x1, {0x2, 0x37ea8726}}, {0x54fa, 0x30e, {0x2, 0x80}}, {0x8, 0x3, {0x2, 0x81}}, {0xc, 0xe0d, {0x3, 0x62}}, {0x7d6, 0xd4, {0x1, 0x3ff}}, {0xee9, 0x6aa, {0x0, 0x6}}, {0x7, 0x100, {0x2, 0x29}}, {0x9, 0x5, {0x0, 0x7f}}, {0x400, 0x7, {0x1, 0x8}}, {0x4, 0x2, {0x1, 0x81}}, {0x9, 0x4, {0x3, 0xa}}, {0x299, 0x3, {0x1, 0x81}}, {0x2, 0x8000, {0x3, 0x8}}, {0xfffd, 0x3, {0x2, 0x7}}, {0x3, 0x8, {0x1, 0x5}}, {0x400, 0x2, {0x1, 0x8}}, {0x9, 0x8}, {0x3, 0x3, {0x0, 0x80000000}}, {0x6, 0x8, {0x0, 0x1}}, {0x2, 0x28, {0x1, 0x4}}, {0x9, 0x200, {0x3, 0xfffffffa}}, {0x7, 0x362b, {0x0, 0x2}}, {0x0, 0x5, {0x3, 0x37b}}, {0x8, 0x7, {0x1, 0x7}}, {0x3f36, 0x3fe4, {0x3, 0x1}}, {0x800, 0x9bb, {0x2}}, {0x8f9, 0x0, {0x1, 0x5}}, {0xfff, 0x0, {0x0, 0x2}}, {0x2, 0x84, {0x2, 0xfffff801}}, {0x9, 0x7fff, {0x2, 0x27}}, {0x81, 0x3, {0x2, 0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x0, 0x9, 0x6, 0x1, 0x21, 'syz0\x00', "7ef1ae3d3095657528c2b2660e491b70e909a632d3a454bcd0e4ef417ea6852c", "eb7128701f5390a231e696dc62d4cb59750152c4a87f53447c0f46b72b00e6df", [{0x3, 0x400, {0x0, 0x100}}, {0x2, 0x6, {0x2, 0x101}}, {0x401, 0x7, {0x2}}, {0x0, 0xa2, {0x0, 0x7fff}}, {0x3, 0x4, {0x3, 0x4}}, {0x1, 0x7, {0x1, 0x6}}, {0x7, 0x2, {0x2, 0x8}}, {0x9, 0x200, {0x1}}, {0xb8, 0x2, {0x1, 0xc}}, {0x1, 0x5e, {0x3, 0xa02b}}, {0xc8, 0x4, {0x1, 0xdc}}, {0x45, 0x6, {0x2, 0xffff}}, {0x6, 0x4, {0x0, 0x9}}, {0xd5, 0x8, {0x0, 0x6}}, {0xf1c6, 0x1, {0x1, 0x3}}, {0x139, 0x8453, {0x0, 0x7}}, {0x4, 0x1b73, {0x3, 0x3}}, {0x7, 0x2, {0x1, 0xfffffffb}}, {0x6, 0x9, {0x2, 0x1}}, {0x9, 0x1ff, {0x7, 0x8}}, {0x0, 0x800, {0x2, 0x9}}, {0xf4, 0x80, {0x2, 0x9}}, {0x255, 0x8, {0x2, 0x6}}, {0xdc9, 0x6, {0x1, 0x3}}, {0x5e0e, 0x200, {0x0, 0x40}}, {0x25, 0x5ac, {0x3, 0x6}}, {0x3, 0x6957, {0x2, 0xe}}, {0xfff7, 0x2, {0x2}}, {0x8001, 0x3d94, {0x2}}, {0x6, 0x4, {0x0, 0xffff}}, {0x7, 0x0, {0x0, 0x10001}}, {0x6, 0x1, {0x3, 0x1}}, {0x7, 0xf14b, {0x2, 0x5}}, {0x9, 0x7, {0x3, 0x4}}, {0x1ff, 0x9, {0x0, 0x5}}, {0x0, 0xfff9, {0x3, 0x9}}, {0x5, 0x1, {0x0, 0xf61}}, {0x6, 0x1, {0x1, 0x80}}, {0x5, 0x5, {0x1, 0x80}}, {0x6, 0x0, {0x3, 0xb826}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x81}, 0x4) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x80}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x105000}) (async) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x105000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000040)={0xdddd0000, 0x10000}) 1.243337089s ago: executing program 0 (id=654): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x400000000000f01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}]}, 0xf7) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"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", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000001000100", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 1.134935064s ago: executing program 0 (id=655): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = getpid() ptrace$setsig(0x4203, r1, 0x424, &(0x7f0000000080)={0x2, 0x4, 0x8c3}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1000000}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x840}, 0x0) 1.029311045s ago: executing program 0 (id=656): openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40045201, 0xffffffffffffffff) syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010208b20902120001000000000904"], 0x0) 740.832461ms ago: executing program 3 (id=658): r0 = socket$inet(0x2, 0x3, 0x6) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0x4018aee2, &(0x7f0000000240)) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e22, @multicast2}, {0x301, @multicast}, 0x6f631b4376e74f5e, {0x2, 0xe23, @rand_addr=0x46010100}}) 628.792492ms ago: executing program 1 (id=659): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfc, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2}}, 0x20) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x0, 0x0, 0x27, 0x10, 0x27, 0x4}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3ffffff8, @dev={0xac, 0x14, 0x14, 0x27}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x40, 0x7, 0x0, 0x7, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}]}}}}}}, 0x46) 529.301545ms ago: executing program 3 (id=660): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003680)=""/4098, 0x1002}, {&(0x7f0000001bc0)=""/4062, 0xfde}, {&(0x7f0000000b80)=""/4120, 0x1018}, {&(0x7f0000000140)=""/129, 0x81}], 0x4}, 0x0) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) listen(r0, 0x2) accept4(r0, 0x0, 0x0, 0x80800) syz_init_net_socket$llc(0x1a, 0x801, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000003680)=""/4098, 0x1002}, {&(0x7f0000001bc0)=""/4062, 0xfde}, {&(0x7f0000000b80)=""/4120, 0x1018}, {&(0x7f0000000140)=""/129, 0x81}], 0x4}, 0x0) (async) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x81, 0x42}, 0x10) (async) listen(r0, 0x2) (async) accept4(r0, 0x0, 0x0, 0x80800) (async) 471.248614ms ago: executing program 1 (id=661): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x8100, r5, 0x1, 0x1, 0x6, @multicast}, 0x14) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xb, r5}) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) mkdir(&(0x7f0000000280)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='hugetlbfs\x00', 0x10010, 0x0) chdir(&(0x7f0000000080)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000940)) 413.761519ms ago: executing program 3 (id=662): r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x2000008) 330.289086ms ago: executing program 1 (id=663): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x400000000000f01c, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000001800)={'#! ', './file1/../file0', [{0x20, '\x86\xd7\xb5r\x03z\xf5\xe42\xad\xed\x122\x9db}\xd1\xff\xff\xff\x812\xd4\xef\xcd.\x8b\xf4\xa71iQA\x8d5\x8d\xaf\xe1\xd8\xae-\n\x95\x98\x96\xe8\x0e^\x80S\x9a\xca\xbf\x0e4C\'~_\xd0X\xb9\x94[\xf5,\xe0\xcd\x89\x1c\t\xd0\xf2\xfb\xf8\xfbe\xb2\r\xeeI\x86\xca\xd0k\xb0\x1b\xe96\xedpm\xcc\xdc\x91\xb9\xbft\xfb\x98\xe2\x02!\xfeq\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x009\xf7\x81\xf4\xa9j\xc9\xbb\xf8\xf2K\"\x86\xf5h\xf5;\xd2\xaf\x9b\xea\xef-\xd7\xd6\xfa\x97-*\\\x98bE\r\xdc\x89\xd8&\x91\x1c+\x15\x89\xd7\xa7ceT\xea`5\xf9\x88\n \xdcA\xa6\x10\x93\"\xa4Y\x84\xee\xb2\xf9\xa9\x80uf\xab\xb3\xd1\x10i\x94x\x0f\xee\x94j2\xf9\x9ah\xf3b\x19P4\\\xad\xbaX]\xbc\xbbTA\x17d\a\x8fa\xe0\xc3K\x959'}]}, 0xf7) write$UHID_INPUT(r1, &(0x7f0000001980)={0x8, {"dc5d3b0169633d3eba3eabbc09167be55101d4af4b22a373236464d2dbfaa84399b77bd438a54364a7ebc5bdaab4f9decb7c044318cd59a0af8279bcab35dd7daf7a0ceb381df2c32eff45b13e2c8f40e1895355bf6f165200cb1ca41a155730ee2e9f83183f9fafe029d0401b0770618254a8b2dc87b630072b1e2de160d1afed51b74c14b71ec1b226a324482d14ad586b1a4ce80e458fe45244c01eddeddf3564af838d6d5324f8a77023d6eb7aa14397a0e1413ea1c3dfdf063a35b709e627f36fe403ee3117365be5017682f53595f28543062c740a94a794312f5cebc315044b8ea000a5d0f27812ab0ce149d11e6f6f7620c5f3e250bf67d13a1ca39dbb7b8b5a31e3d7ba7ebe5849a7a09b61fc9f2cfc54b89e9cd0105bca49483ce55e0187ce2ad692a18219d881057c838587b915337169ee054655f26a04df913a658fccbf4def6aad750ca4796b74d322c67e9d4ee6a530a22dcc35db850b424d6ec9f62495b9f9fd2b000feadd57d26dbd505798c208d91eb0aab0fd97537631b8bf81ce0e2241c4272be4ff69b390e4485d574146b76d1fdbf7fc5334906805534cdae1e47240af7761a18fc8bd0a694be47529da98bc0f98eb7db3fc4a74cbb6e486f4de90fbf2452e72c2e1dca44543ad9ad094b8bc861eef1e814662d0b350339e3a510d459c6f83aabd5fd3dcb38224056d761e7df9b482b9905f1e2135c1929be328ecdb69c007a3efd548502c83106f6df1ab1178fac499eda92ad4373155227ec2df150c919d322ecb3ea37e659285f18a3e2f79b59900ca438df3a1381380a12d3ad7678e0a8d3bdfb40651389b4ac8c66138d442d70eafdc2df8b080028006b124e4ebe0d9883ef100f1934e42794146382c1d628fd2ebe5859b6c243824903d056d800975675bb1913142adbc039a9c68c2f146a0e8903447313f5e5549905f397a9b1f21a93b80c4d04a8ea7a29a50fbc5407a9305bba420edf898ea678d6879489c39692c99bb6dacf61f5f97637b94c1031d635b5423b38b9196fafaaf87b2796eadc21466af5a10281e6a808748969d29efb444c99a4cb2111732a792dbca4376a125a68f7cdac065cc6173dc21caafba48c742d9a7df2f771ff2f5725b22c247d4e0c6106f9f5f6929b69929ab37e9a9b326ce618bb702b883b12026f1300f21f2c7440cac8c5f1210a78aa067211d2827f5dcc7578252c2ccc3f67bab9d1bb6939b21b550788ef550acfed4bf50c0b4fb3ca4d2872ee64f95d611a317d9daaf373a10d868680b2226396c95fa2b0ab4d6fce06c3b42cb97d17a7b5089061537fdeb1a53040869f7befca330358fdba86754fc2e46c2113e1484cb37534af8f0408a7ee313778dab49f08229964298f847ea66c4ec319f64b6a12da585bc59e82e0263c507b397d3efee3b4066f4d25566aa1549f6185f6375f84b65fa8945148b90430c86a5b6fdf58d5c812b98d9dc621fd9a3d9f1a577495356516d1cbcf5e8bb8923b54b247225b9c3892b18a9e137f3620c734052af9dc8f1ea36f0d4592d5ee32e35676a84dc891f97456f2ac3a4ab58a42bcdc221a4ac8bb28d428add2fcbe5b110a8afd5d23b31e827bd16167b2d88cae024afc04a722ac0b4d45c52512e6b6f102aac4be21bc89ce246539048370553665b0a4336a6db99d0d19399be6437a321419304331b4342b2c1db580f0c9bf681fdb8e9fa3e025454197bbc82ef93ee2f385660818ec5127080675a8013766469afe3b1e36e81bf2f04c3a26eaf4517551e734d21ba3bc90e48aea0891792970c39f3f528397e9b7ae190f1760fe5960dc763ee0a17939c60bfcac0a8914be82c749e4fe85d1ac5fa733413468fb8941085e8c4d6e0b6d1e62e20da58440facd640ddbb6c1f694b3ca48757a34c5a11668368711a1d4f3a81d31ac30d71277d7ae77882b6841cfa6289e6cce84a3ad57eeb328f831888ac7d3cfcd3a472a48d903f20cec8c8ae8d0bea04ebf7413ef7693f8ed876e49bd5f89d7e1078208ff62712e330fc0341b9ccf26845578d44b1e0c66d1bebc14742baedfabb8e9a2c8f42730360c72997efe0ce786ff330c2eb6e0ff20896f813c2a515ce76f826c11a1c1588eb369231ddeb4a2f9f9591ecdecc74d20aeb50047beb3ab89a9e4e1b805a20b645c79d0bc5d0247fab8ba46a97a07630b1f1cb69b42b568af746733d2c581f057873d64fe6e659b00b4a26745f5fba1fe7406a86b007936c7cfdac53a4c5b0ea9f6604863c8e3f174eddbb09175f6e13cda9a860cf400ef9ed02b895502ac6e6de6a658249c3c6e8a653517eae2231e56e0f120547923c6549ebc1ed14c623637ce3d96af5c93a32e58e2d9659d8b5b145888b52d9a5b5cb3cdf594eb137bcef2ba068cfd2c6ccf7ab6e5b4ec55e9197bfb91c9b8729f7b50cf0b0326f7ea3e712c77674d48545ca2a86744c3c38f149d69cf811beacf7e5f49c7bfba20f1dcf3d7bc0b9c796016820a46495d244c9606a06fe2e14233eda78d69ae4523ad7b708b0c7ead44d7fd376fed60e3cc2ee25e9600adfbe87ac7c8fb8269aec9459602af0f420becda6120ce7d9626c65ae7f860639e8bf664eb4301ec18add0e436c0356c12ab6b4ca35da2b43c4a8c239fd0b59a2ce94843cdfa1667053165053633b062844dbb0d00070fde74fa3178eb5f1f5fd02e2088d8690379f39ab22c080cdcb29d700bac74fabd8a356fe99afe83a5d99aa5024e9158a299eda6c99b6701e64f1d68e7e2c0c6e88396bb535a02d0948f0a250a6e090041c96d9c9acd6134d44d516fd1010c39e572b86b05bb132acb960b5d28bbd836f9c2a01dc7b58c0129f4b851ca9b1e3dc35db7364e29ef646211796b1651511e041345abce427fa5d6e48b8fb078c8432061a4cc518a8f2a2caf709a5c1473a62112a6650afc64eec12f8f9c08cff1b6fbf7a1209fc8661f62303b7c5d49c1d0b32a9f37e81ed9ab6193816d40995ed49c10b9f5752e04d57535a3d16f06c65d32846c31ec9787ec4a965679eb804e86b45d007f38d8104550770dc6f313bc846e43a14a8c21d0628c744e3e83cb998d1b7acfe996541a8c03852dadf9326444c582b481cae844e4f3fe3d638903b38f24633b63adbad841ac6c4c1169d781a0e271e8a967b1c7e986fcb3a66168e86e3559a44fcfa92452260491da9397659af60453f4cd4be2d15439445ec2b4366a79d3283da912d9d499df1242bd174edc235848caa21d2c997aff0e95c7e5cc0803c90fab84e7be7b37909d0e2f3bc9974e3388acb6800baba183ecc8eea8c71c0d65d669e41f99ceae523b7a6b772f3b8ebba1d2127ccc3ddb7ddcb4ec73cbdc26fc87c3848e258a0b5484d3a13e40ec4e4a65dd92f09e9fe1e3e2f8b96c4e363aa3683860dee62dfcf8823ee4a3593a092e0bd9c4cedacf44a272faa164447b01f46a7795642a40c61b0034a37f0e9b792428a0ddcd144fe8263088eaac8016f8f1cd30b55ac90a8f10d785b7570dd9e639a4a068d3fe98a420b9f72e79de817f676c2a224300d749571ad43f49d1fbe838f4566bc7b5f104c384ad87189213152b644d9fcbdf98bafeee569d640ce9045779f1d90024c023a7480a358dee276fba139c14b4fdb12885240903d0e61dc161659a68f62c92b899007e0f2b65bf0a069e9e57c9b6ae50a3b30dd1003fb0eead73ae2f6010b3b356b4060579a4f29935e1f00c01d12e5f44e8e3163d81dfef7ca8560604240c7e96e4454c6971614df306c768121abb3f628e3f1d2d026f58d1087334c5bdb74d7c949b0ee66a4531ba4e9b922aee3d0f802ed034734507a5913c52966f1f8bd4577840de0253aabc23299dced2a299859c07af9fb0f9c29b6533b9d84d471390d59ab315f5ddb226f6b8dd7889295f0fb1f7bd1adafe4cc520a1e84bf2a59d5b9795aeafc8d6fd66a8228aba8653b98622617ddfeb5d6795c9bd2f35d4a0c386e862675a50e3314c3fbb17aca151c13c7fc8b1d1b72ed0a958537b5ddc9e74bddc2b9571ec3f2b7775b125338d4852a75a63941564c65bb36dfb6bea4aab1ae7a4f285c2177aa98406eb2cc10934aa92d5a9612d4455c84ad200841d289b5c2d5deab0d8e2459598ef183d3dc47f6bad0b9513710600cfa4d69fcd5763cdcc4f2c2b7cd7d4491e452f4aec82ce846c0988f6f0123e21e900d39c61085e68c9badc350b44004f6c042d64b0d0cbf91ad0592b198f1eeea1e52200bc8e6d62848d6884b10bdde72466039da488be6b340c23148f666f2fe6e032c07dac43586df182aca9116f4600313fa8375c76337ba86bdc391dae6450218f58f047ced64befc6bb5c2a60024669630a6279fedf2fe45e7e19ce582ad96ae0d023eb9b39f5f1e666e73bb038ae38157275be5eb3e7cbc8b05adf53e817646bdc2cfce98e5d162bf7faaca787db8717ab8b27b9e35609c5fb9fe9def07f010df8b43cf5c96851eadfdeff0b7bc5826e7e15490ae9c3d14166ee81bef007070e7981235a673804ad89943ee6b51ac63364f7870e121e6ff23a0c7d179527cd58dd7a4ca37247c2bd9efc79b720bb1ee2d39862e98cb81e93cf5b48d5d02ee8ac737ab504c867a1c49e678300803c94fbe978dea918a1e71b9791ee1e4d30056e86c26a4675a8b090be2365c0b451a13ece52a89a7057fe2052e11c6666eb916d823ea66bf217c320acba3b714910734b2d27c2fa586bd7f7664b0d1422adabad2ce2afc10270057f11940fac1a51d023ce48bd04ea39b7f99381b239fd0ddeea0dce7863ec1f8f61775013b6414ecf86e686a340a3148f87a9d7d60a1f2da53436d16fc88d6a4e7c3d55e0dd004cbecc15a5558eb705d82aacb1862ddc251dd5d9cbf1d78f97900ce6e8dab0ea678cb823bd1e7bbd1e927841af08f5427878c19f4f322228f9b36287fc13e7c1293ea875ae73815e052d6c2ebc40df8f7b9d1f76e0b10e35aa160944983d8e6b790df0d9b13f3460657336d81f7d83c0350324b930ec9c7557ce12887f76372e126f504b0980fea27f31a780c05187b9b5353dafc6b101543b24332b96e15bc26b19062e52fa9f86d260ee3a3bc92a133e328407bb85357ee5c45cb87228f44888b14941b5911b050e9319fe88033f830a8490917a9c0572ebbc5492b4e1083a2e3d77215a34abef947b5b9a950e780662de18873e55899c92db3ad3d437e8407890afa6b0c04ef861b8bc85fbbe1bb67b3d9ef001409f84b8ec4f01d861cecc143a805b981ab5cf5b605057b63cb2c84ec358e510a69cd8c33a8a62fe4680d0c980145cc709157832bfaef261cb0466c237376ca2944ce9affffd4b1dc7cc9511da0b34bffb9ac216fb8cf7c6572d95627787720d1ba67c6512fcdb16f6329e9668681c404efebad559f81f05971b5efb6b4cca97ad0346753cc0a40a877242d8a808c602b03dc962cee38e646cb18abb079c70d357c30738a70f55cd3c5956a83a1bfcd6649dd765f16bfe968066345df7380bbc0c16b3b5af513d6458c791343952f33a051c5d711c1f35af1b47f3db9bbfb5c7c636b3a2b52805d606479879be0b404a28ade5649a3185e0f85a85fc15cd824671c2befdd0da509597c87d869f0bd7ad163ad93ca28fc0c4025eccaafe385ec3fc06c54ebcd7b07b6c7e0197c5b9ef886159a1585ae45248f865be760db6f5bc8f868fc6aefd04e34ecb51159e4cdcc2214b42b1ca9caec13ba3e1b2e7a3c736977b226213d265c2873195122a9b448088c8b50edd549be41c38ab176807b75e7267f86e4", 0x1000}}, 0x1006) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000fe0100", "9001001c551265406c7f306003d8a0f4bd0000000300"}}) 328.538979ms ago: executing program 3 (id=664): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000ec04000d8008001700", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="200000002d00010026bd7000fcdbdf25040000ec04000d8008001700", @ANYRES32=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x100, &(0x7f0000000180)) (async) statx(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x100, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$swradio(&(0x7f00000000c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f0000000100)={0x1, 0x0, 0x2006, 0xaf29, 0x23, {0x6, 0xffffff08}}) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r1, &(0x7f0000000080)) 193.564726ms ago: executing program 1 (id=665): socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2d00, 0x0) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xf) (async, rerun: 32) socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) socket$tipc(0x1e, 0x5, 0x0) (async) socket$tipc(0x1e, 0x2, 0x0) (async) inotify_init1(0x800) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) userfaultfd(0x80001) (async) pipe2$9p(&(0x7f0000000240), 0x0) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) (async, rerun: 32) r1 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000040)={0x34, 0x10, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x14, 0x2b, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r0}, @typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x34}], 0x1}, 0x20000000) (async) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)=""/20, 0x14) 126.839541ms ago: executing program 3 (id=666): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc000000aad8cdbee256bd71b5dfc5ff58f1c7bc375c730000807f00000100000000", @ANYBLOB], 0xfc}}, 0x0) 119.405328ms ago: executing program 1 (id=667): setpgid(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x33) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) listen(r1, 0x522e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) setpgid(0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) ioctl$UI_SET_MSCBIT(r0, 0x40045568, 0x33) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe) (async) listen(r1, 0x522e) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="400000000a0601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) (async) 1.37117ms ago: executing program 1 (id=668): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$unix(0x1, 0x2, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x78}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) (async) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) (async) 0s ago: executing program 3 (id=669): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) open(&(0x7f00000001c0)='./cgroup\x00', 0x200c01, 0x157) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, &(0x7f0000000280)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffe000/0x1000)=nil, 0x1000}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0xfc, &(0x7f0000000440)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x0, 0x0, 0x27, 0x10, 0x27, 0x4}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3ffffff8, @dev={0xac, 0x14, 0x14, 0x27}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x40, 0x7, 0x0, 0x7, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0x0, 0x700}]}}}}}}, 0x46) kernel console output (not intermixed with test programs): ltiq3 [ 141.512547][ T6732] comedi: valid board names for pcmuio driver are: [ 141.519132][ T6732] pcmuio48 [ 141.522265][ T6732] pcmuio96 [ 141.525610][ T6732] comedi: valid board names for pcmmio driver are: [ 141.532143][ T6732] pcmmio [ 141.535128][ T6732] comedi: valid board names for pcmda12 driver are: [ 141.542147][ T6732] pcmda12 [ 141.545513][ T6732] comedi: valid board names for pcmad driver are: [ 141.552482][ T6732] pcmad12 [ 141.555836][ T6732] pcmad16 [ 141.559035][ T6732] comedi: valid board names for ni_labpc driver are: [ 141.567138][ T6732] lab-pc-1200 [ 141.570934][ T6732] lab-pc-1200ai [ 141.574569][ T6732] lab-pc+ [ 141.578224][ T6732] comedi: valid board names for atmio16 driver are: [ 141.585189][ T6732] atmio16 [ 141.588459][ T6732] atmio16d [ 141.591662][ T6732] comedi: valid board names for ni_at_ao driver are: [ 141.600038][ T6732] at-ao-6 [ 141.603170][ T6732] at-ao-10 [ 141.606750][ T6732] comedi: valid board names for ni_at_a2150 driver are: [ 141.613964][ T6732] ni_at_a2150 [ 141.617833][ T6732] comedi: valid board names for adq12b driver are: [ 141.624606][ T6732] adq12b [ 141.628433][ T6732] comedi: valid board names for mpc624 driver are: [ 141.640450][ T6732] mpc624 [ 141.643500][ T6732] comedi: valid board names for c6xdigio driver are: [ 141.651484][ T6732] c6xdigio [ 141.654792][ T6732] comedi: valid board names for aio_iiro_16 driver are: [ 141.666513][ T6732] aio_iiro_16 [ 141.670007][ T6732] comedi: valid board names for aio_aio12_8 driver are: [ 141.678101][ T6732] aio_aio12_8 [ 141.683155][ T5957] usb 2-1: USB disconnect, device number 35 [ 141.686679][ T6732] aio_ai12_8 [ 141.697477][ T6732] aio_ao12_4 [ 141.703151][ T6732] comedi: valid board names for fl512 driver are: [ 141.712136][ T6732] fl512 [ 141.717492][ T6732] comedi: valid board names for dmm32at driver are: [ 141.724532][ T6732] dmm32at [ 141.728268][ T6732] comedi: valid board names for dt282x driver are: [ 141.730834][ T6521] udevd[6521]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.735392][ T6732] dt2821 [ 141.763201][ T6732] dt2821-f [ 141.766833][ T6732] dt2821-g [ 141.770036][ T6732] dt2823 [ 141.773077][ T6732] dt2824-pgh [ 141.777061][ T6732] dt2824-pgl [ 141.781310][ T6732] dt2825 [ 141.784361][ T6732] dt2827 [ 141.787956][ T6732] dt2828 [ 141.790992][ T6732] dt2829 [ 141.793996][ T6732] dt21-ez [ 141.797788][ T6732] dt23-ez [ 141.800918][ T6732] dt24-ez [ 141.807222][ T6732] dt24-ez-pgl [ 141.810745][ T6732] comedi: valid board names for dt2817 driver are: [ 141.817644][ T6732] dt2817 [ 141.820616][ T6732] comedi: valid board names for dt2815 driver are: [ 141.827731][ T6732] dt2815 [ 141.830825][ T6732] comedi: valid board names for dt2814 driver are: [ 141.837486][ T6732] dt2814 [ 141.840431][ T6732] comedi: valid board names for dt2811 driver are: [ 141.847147][ T6732] dt2811-pgh [ 141.850450][ T6732] dt2811-pgl [ 141.853738][ T6732] comedi: valid board names for dt2801 driver are: [ 141.860299][ T6732] dt2801 [ 141.863284][ T6732] comedi: valid board names for das6402 driver are: [ 141.870312][ T6732] das6402-12 [ 141.873951][ T6732] das6402-16 [ 141.878214][ T6732] comedi: valid board names for das1800 driver are: [ 141.885044][ T6732] das-1701st [ 141.888409][ T6732] das-1701st-da [ 141.891980][ T6732] das-1702st [ 141.896371][ T5919] usb 1-1: USB disconnect, device number 24 [ 141.896867][ T6732] das-1702st-da [ 141.907664][ T6732] das-1702hr [ 141.920100][ T6732] das-1702hr-da [ 141.923977][ T6732] das-1701ao [ 141.928386][ T6732] das-1702ao [ 141.931842][ T6732] das-1801st [ 141.940138][ T6732] das-1801st-da [ 141.943769][ T6732] das-1802st [ 141.947595][ T6732] das-1802st-da [ 141.951131][ T6732] das-1802hr [ 141.954396][ T6732] das-1802hr-da [ 141.958645][ T6732] das-1801hc [ 141.962027][ T6732] das-1802hc [ 141.965690][ T6732] das-1801ao [ 141.969075][ T6732] das-1802ao [ 141.972359][ T6732] comedi: valid board names for das800 driver are: [ 141.978957][ T6732] das-800 [ 141.981995][ T6732] cio-das800 [ 141.985339][ T6732] das-801 [ 141.988368][ T6732] cio-das801 [ 141.991646][ T6732] das-802 [ 141.994663][ T6732] cio-das802 [ 141.998015][ T6732] cio-das802/16 [ 142.001567][ T6732] comedi: valid board names for isa-das08 driver are: [ 142.010142][ T6732] isa-das08 [ 142.013377][ T6732] das08-pgm [ 142.016888][ T6732] das08-pgh [ 142.020090][ T6732] das08-pgl [ 142.023305][ T6732] das08-aoh [ 142.026557][ T6732] das08-aol [ 142.029851][ T6732] das08-aom [ 142.033041][ T6732] das08/jr-ao [ 142.036523][ T6732] das08jr-16-ao [ 142.040105][ T6732] pc104-das08 [ 142.043530][ T6732] das08jr/16 [ 142.046890][ T6732] comedi: valid board names for das16m1 driver are: [ 142.053583][ T6732] das16m1 [ 142.056676][ T6732] comedi: valid board names for dac02 driver are: [ 142.063095][ T6732] dac02 [ 142.066031][ T6732] comedi: valid board names for rti802 driver are: [ 142.073965][ T6732] rti802 [ 142.077050][ T6732] comedi: valid board names for rti800 driver are: [ 142.083557][ T6732] rti800 [ 142.086668][ T6732] rti815 [ 142.089638][ T6732] comedi: valid board names for pcm3724 driver are: [ 142.096622][ T6732] pcm3724 [ 142.099811][ T6732] comedi: valid board names for pcl818 driver are: [ 142.106579][ T6732] pcl818l [ 142.109624][ T6732] pcl818h [ 142.114731][ T6732] pcl818hd [ 142.117977][ T6732] pcl818hg [ 142.121128][ T6732] pcl818 [ 142.124082][ T6732] pcl718 [ 142.127098][ T6732] pcm3718 [ 142.130226][ T6732] comedi: valid board names for pcl816 driver are: [ 142.136793][ T6732] pcl816 [ 142.139735][ T6732] pcl814b [ 142.142778][ T6732] comedi: valid board names for pcl812 driver are: [ 142.149328][ T6732] pcl812 [ 142.152294][ T6732] pcl812pg [ 142.156395][ T6732] acl8112pg [ 142.159608][ T6732] acl8112dg [ 142.162792][ T6732] acl8112hg [ 142.166036][ T6732] a821pgl [ 142.169081][ T6732] a821pglnda [ 142.172362][ T6732] a821pgh [ 142.175460][ T6732] a822pgl [ 142.178494][ T6732] a822pgh [ 142.181517][ T6732] a823pgl [ 142.184540][ T6732] a823pgh [ 142.187627][ T6732] pcl813 [ 142.190560][ T6732] pcl813b [ 142.193599][ T6732] acl8113 [ 142.204931][ T6732] iso813 [ 142.207911][ T6732] acl8216 [ 142.210936][ T6732] a826pg [ 142.225456][ T6732] comedi: valid board names for pcl730 driver are: [ 142.232007][ T6732] pcl730 [ 142.235475][ T6732] iso730 [ 142.238423][ T6732] acl7130 [ 142.241451][ T6732] pcm3730 [ 142.244485][ T6732] pcl725 [ 142.247487][ T6732] p8r8dio [ 142.250554][ T6732] acl7225b [ 142.253848][ T6732] p16r16dio [ 142.257123][ T6732] pcl733 [ 142.260068][ T6732] pcl734 [ 142.263007][ T6732] opmm-1616-xt [ 142.266541][ T6732] pearl-mm-p [ 142.269831][ T6732] ir104-pbf [ 142.273013][ T6732] comedi: valid board names for pcl726 driver are: [ 142.280070][ T6732] pcl726 [ 142.283119][ T6732] pcl727 [ 142.286392][ T6732] pcl728 [ 142.289365][ T6732] acl6126 [ 142.292481][ T6732] acl6128 [ 142.296199][ T6732] comedi: valid board names for pcl724 driver are: [ 142.302710][ T6732] pcl724 [ 142.305783][ T6732] pcl722 [ 142.308771][ T6732] pcl731 [ 142.311807][ T6732] acl7122 [ 142.314890][ T6732] acl7124 [ 142.318732][ T6732] pet48dio [ 142.321859][ T6732] pcmio48 [ 142.325064][ T6732] onyx-mm-dio [ 142.328437][ T6732] comedi: valid board names for pcl711 driver are: [ 142.334993][ T6732] pcl711 [ 142.337940][ T6732] pcl711b [ 142.340962][ T6732] acl8112hg [ 142.344150][ T6732] acl8112dg [ 142.347591][ T6732] comedi: valid board names for amplc_pc263 driver are: [ 142.354640][ T6732] pc263 [ 142.357989][ T6732] comedi: valid board names for amplc_pc236 driver are: [ 142.365022][ T6732] pc36at [ 142.367967][ T6732] comedi: valid board names for amplc_dio200 driver are: [ 142.375025][ T6732] pc212e [ 142.377971][ T6732] pc214e [ 142.380915][ T6732] pc215e [ 142.383836][ T6732] pc218e [ 142.386807][ T6732] pc272e [ 142.389794][ T6732] comedi: valid board names for comedi_parport driver are: [ 142.397454][ T6732] comedi_parport [ 142.401191][ T6732] comedi: valid board names for comedi_test driver are: [ 142.408257][ T6732] comedi_test [ 142.411718][ T6732] comedi: valid board names for comedi_bond driver are: [ 142.419851][ T6732] comedi_bond [ 142.487602][ T5919] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 142.508931][ T6738] program syz.0.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 142.665492][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 142.667216][ T6745] sctp: [Deprecated]: syz.0.227 (pid 6745) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.667216][ T6745] Use struct sctp_sack_info instead [ 142.676344][ T5919] usb 2-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 142.703183][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.713745][ T5919] usb 2-1: Product: syz [ 142.733708][ T5919] usb 2-1: Manufacturer: syz [ 142.739116][ T5919] usb 2-1: SerialNumber: syz [ 142.747360][ T5919] usb 2-1: config 0 descriptor?? [ 142.757855][ T5919] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 142.767894][ T5919] dvb-usb: bulk message failed: -22 (2/0) [ 142.779242][ T5919] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 142.802021][ T5919] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 142.811722][ T5919] usb 2-1: media controller created [ 142.848840][ T5919] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 142.958289][ T6736] loop5: detected capacity change from 0 to 7 [ 142.964940][ T5912] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 142.967717][ T6521] Dev loop5: unable to read RDB block 7 [ 142.978210][ T6521] loop5: AHDI p1 p2 [ 142.982141][ T6521] loop5: partition table partially beyond EOD, truncated [ 142.989841][ T6521] loop5: p1 start 1668641394 is beyond EOD, truncated [ 143.000010][ T6736] Dev loop5: unable to read RDB block 7 [ 143.005688][ T6736] loop5: AHDI p1 p2 [ 143.009725][ T6736] loop5: partition table partially beyond EOD, truncated [ 143.010926][ T6753] fuse: Bad value for 'fd' [ 143.017581][ T6736] loop5: p1 start 1668641394 is beyond EOD, truncated [ 143.031255][ T5919] cxusb: set interface failed [ 143.046135][ T5919] dvb-usb: bulk message failed: -22 (1/0) [ 143.095344][ T5950] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 143.104390][ T5919] DVB: Unable to find symbol mt352_attach() [ 143.111098][ T5919] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 143.124985][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 143.131034][ T5912] usb 3-1: no configurations [ 143.137047][ T5912] usb 3-1: can't read configurations, error -22 [ 143.175096][ T5919] rc_core: IR keymap rc-dvico-portable not found [ 143.181502][ T5919] Registered IR keymap rc-empty [ 143.188898][ T5919] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 143.200863][ T5919] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input12 [ 143.213817][ T5919] dvb-usb: schedule remote query interval to 100 msecs. [ 143.221970][ T5919] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 143.239403][ T5919] usb 2-1: USB disconnect, device number 36 [ 143.265651][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 143.276652][ T5912] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 143.312403][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 143.327663][ T5950] usb 1-1: config 250 has an invalid interface number: 88 but max is 0 [ 143.343025][ T5950] usb 1-1: config 250 has no interface number 0 [ 143.361660][ T5950] usb 1-1: config 250 interface 88 has no altsetting 0 [ 143.371003][ T5919] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 143.383857][ T5950] usb 1-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=cf.c9 [ 143.397077][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.412737][ T5950] usb 1-1: Product: syz [ 143.418253][ T5950] usb 1-1: Manufacturer: syz [ 143.424060][ T5950] usb 1-1: SerialNumber: syz [ 143.457585][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 143.464565][ T5912] usb 3-1: no configurations [ 143.469863][ T5912] usb 3-1: can't read configurations, error -22 [ 143.477036][ T5912] usb usb3-port1: attempt power cycle [ 143.617946][ T6757] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 143.652060][ T6752] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.661947][ T6752] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.680038][ T5950] qmi_wwan 1-1:250.88: bogus CDC Union: master=0, slave=0 [ 143.694498][ T6757] openvswitch: netlink: Flow actions attr not present in new flow. [ 143.702937][ T5950] qmi_wwan 1-1:250.88: probe with driver qmi_wwan failed with error -22 [ 143.725265][ T5950] usb 1-1: USB disconnect, device number 25 [ 143.815332][ T5912] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 143.845712][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 143.853011][ T5912] usb 3-1: no configurations [ 143.857941][ T5912] usb 3-1: can't read configurations, error -22 [ 143.994996][ T5912] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 144.015699][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 144.029480][ T5912] usb 3-1: no configurations [ 144.039454][ T5912] usb 3-1: can't read configurations, error -22 [ 144.057260][ T5912] usb usb3-port1: unable to enumerate USB device [ 144.062767][ T6768] nbd: must specify a size in bytes for the device [ 144.073106][ T6769] netlink: 52 bytes leftover after parsing attributes in process `syz.3.232'. [ 144.544949][ T5957] usb 1-1: new low-speed USB device number 26 using dummy_hcd [ 144.754927][ T5957] usb 1-1: Invalid ep0 maxpacket: 64 [ 144.895004][ T5957] usb 1-1: new low-speed USB device number 27 using dummy_hcd [ 145.082828][ T5957] usb 1-1: Invalid ep0 maxpacket: 64 [ 145.091172][ T5957] usb usb1-port1: attempt power cycle [ 145.332603][ T6801] netlink: 4 bytes leftover after parsing attributes in process `syz.3.244'. [ 145.455053][ T5957] usb 1-1: new low-speed USB device number 28 using dummy_hcd [ 145.476844][ T5957] usb 1-1: Invalid ep0 maxpacket: 64 [ 145.615107][ T5957] usb 1-1: new low-speed USB device number 29 using dummy_hcd [ 145.649009][ T5957] usb 1-1: Invalid ep0 maxpacket: 64 [ 145.666195][ T5957] usb usb1-port1: unable to enumerate USB device [ 145.935292][ T5957] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 146.115647][ T5957] usb 2-1: Using ep0 maxpacket: 32 [ 146.122320][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 146.134249][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 146.146151][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 146.156074][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 146.168999][ T5957] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 146.183267][ T5957] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 146.192575][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.200655][ T5957] usb 2-1: Product: syz [ 146.205200][ T5957] usb 2-1: Manufacturer: syz [ 146.210613][ T5957] usb 2-1: SerialNumber: syz [ 146.217840][ T5957] usb 2-1: config 0 descriptor?? [ 146.334989][ T5950] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 146.485097][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 146.492188][ T5950] usb 3-1: config 0 has an invalid interface number: 36 but max is 0 [ 146.500627][ T5950] usb 3-1: config 0 has no interface number 0 [ 146.507006][ T5950] usb 3-1: config 0 interface 36 has no altsetting 0 [ 146.519845][ T5950] usb 3-1: New USB device found, idVendor=13d3, idProduct=3365, bcdDevice=74.65 [ 146.530338][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.538735][ T5950] usb 3-1: Product: syz [ 146.543094][ T5950] usb 3-1: Manufacturer: syz [ 146.548280][ T5950] usb 3-1: SerialNumber: syz [ 146.556387][ T5950] usb 3-1: config 0 descriptor?? [ 146.626204][ T5957] input input13: Device does not respond to id packet M [ 146.628365][ T6809] netlink: 'syz.1.246': attribute type 27 has an invalid length. [ 146.769905][ T5950] usb 3-1: USB disconnect, device number 25 [ 146.834615][ T5957] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 146.843971][ T5957] input input13: Device does not respond to id packet P [ 146.851920][ T5957] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 146.858183][ T5957] input input13: Device does not respond to id packet B [ 146.865721][ T5957] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 146.871740][ T5957] input input13: Device does not respond to id packet N [ 146.879709][ T5957] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 146.886523][ T5957] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 146.893050][ T5957] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 146.899528][ T5957] iforce 2-1:0.0: usb_submit_urb failed: -71 [ 146.908492][ T5957] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13 [ 146.933214][ T5957] usb 2-1: USB disconnect, device number 37 [ 147.319250][ T6832] loop2: detected capacity change from 0 to 8 [ 147.328691][ T6832] Dev loop2: unable to read RDB block 8 [ 147.336422][ T6832] loop2: unable to read partition table [ 147.342726][ T6832] loop2: partition table beyond EOD, truncated [ 147.349308][ T6832] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 147.433943][ T6834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 147.705053][ T5950] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 147.825017][ T5957] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 147.878856][ T5950] usb 3-1: config 8 has an invalid interface number: 250 but max is 0 [ 147.887179][ T5950] usb 3-1: config 8 has no interface number 0 [ 147.893280][ T5950] usb 3-1: config 8 interface 250 has no altsetting 0 [ 147.902232][ T5950] usb 3-1: New USB device found, idVendor=0545, idProduct=8333, bcdDevice=8f.86 [ 147.911336][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.919498][ T5950] usb 3-1: Product: syz [ 147.923669][ T5950] usb 3-1: Manufacturer: syz [ 147.928392][ T5950] usb 3-1: SerialNumber: syz [ 147.977548][ T5957] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 147.991740][ T5957] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 148.000932][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.008986][ T5957] usb 1-1: Product: syz [ 148.013161][ T5957] usb 1-1: Manufacturer: syz [ 148.017784][ T5957] usb 1-1: SerialNumber: syz [ 148.163074][ T5950] gspca_main: tv8532-2.14.0 probing 0545:8333 [ 148.208630][ T5950] usb 3-1: USB disconnect, device number 26 [ 148.233922][ T5957] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found [ 148.243604][ T5957] cdc_ncm 1-1:1.0: bind() failure [ 148.259342][ T5957] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 148.270217][ T5957] cdc_ncm 1-1:1.1: bind() failure [ 148.281760][ T5957] usb 1-1: USB disconnect, device number 30 [ 148.518743][ T6863] loop2: detected capacity change from 0 to 8 [ 148.519060][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 148.526713][ T6863] Dev loop2: unable to read RDB block 8 [ 148.540418][ T6863] loop2: unable to read partition table [ 148.546791][ T6863] loop2: partition table beyond EOD, truncated [ 148.553190][ T6863] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 148.652317][ T6870] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.264'. [ 148.663240][ T5184] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 149.026077][ T5912] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 149.085609][ T5950] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 149.165073][ T5912] usb 3-1: device descriptor read/64, error -71 [ 149.215294][ T5919] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 149.235006][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 149.242061][ T5950] usb 1-1: unable to get BOS descriptor or descriptor too short [ 149.250974][ T5950] usb 1-1: config 0 has an invalid interface number: 251 but max is 1 [ 149.259297][ T5950] usb 1-1: config 0 has an invalid interface number: 2 but max is 1 [ 149.267352][ T5950] usb 1-1: config 0 has no interface number 0 [ 149.273464][ T5950] usb 1-1: config 0 has no interface number 1 [ 149.281417][ T5950] usb 1-1: config 0 interface 251 has no altsetting 0 [ 149.288556][ T5950] usb 1-1: config 0 interface 2 has no altsetting 0 [ 149.297572][ T5950] usb 1-1: New USB device found, idVendor=413c, idProduct=81a4, bcdDevice=ae.9f [ 149.306683][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.314686][ T5950] usb 1-1: Product: syz [ 149.318990][ T5950] usb 1-1: Manufacturer: syz [ 149.323590][ T5950] usb 1-1: SerialNumber: syz [ 149.330299][ T5950] usb 1-1: config 0 descriptor?? [ 149.374966][ T5919] usb 2-1: Using ep0 maxpacket: 8 [ 149.383591][ T5919] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 149.392865][ T5919] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.405041][ T5912] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 149.418400][ T5919] pvrusb2: Hardware description: Terratec Grabster AV400 [ 149.426295][ T5919] pvrusb2: ********** [ 149.430331][ T5919] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 149.440545][ T5919] pvrusb2: Important functionality might not be entirely working. [ 149.448627][ T5919] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 149.460030][ T5919] pvrusb2: ********** [ 149.548920][ T5950] usb 1-1: selecting invalid altsetting 0 [ 149.554738][ T5950] usb 1-1: Could not set interface, error -22 [ 149.561205][ T5912] usb 3-1: device descriptor read/64, error -71 [ 149.571061][ T5950] usb 1-1: USB disconnect, device number 31 [ 149.616192][ T2347] pvrusb2: Invalid write control endpoint [ 149.663803][ T2347] pvrusb2: Invalid write control endpoint [ 149.671405][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 149.682595][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 149.691580][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 149.692115][ T5912] usb usb3-port1: attempt power cycle [ 149.702051][ T2347] pvrusb2: Device being rendered inoperable [ 149.714482][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 149.722510][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 149.732578][ T2347] pvrusb2: Attached sub-driver cx25840 [ 149.738469][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 149.749284][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 149.818710][ T6885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.829022][ T6885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.892542][ T5958] usb 2-1: USB disconnect, device number 38 [ 150.036450][ T6889] netlink: 'syz.1.269': attribute type 2 has an invalid length. [ 150.044683][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 150.056285][ T5912] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 150.111067][ T5912] usb 3-1: device descriptor read/8, error -71 [ 150.180980][ T6895] loop2: detected capacity change from 0 to 8 [ 150.188670][ T6895] Dev loop2: unable to read RDB block 8 [ 150.194254][ T6895] loop2: unable to read partition table [ 150.201375][ T5184] Bluetooth: hci3: command tx timeout [ 150.207853][ T6895] loop2: partition table beyond EOD, truncated [ 150.214260][ T6895] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 150.388963][ T5912] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 150.428887][ T5912] usb 3-1: device descriptor read/8, error -71 [ 150.514950][ T5919] usb 2-1: new full-speed USB device number 39 using dummy_hcd [ 150.557173][ T5912] usb usb3-port1: unable to enumerate USB device [ 150.665565][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.685235][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.699335][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.699402][ T5919] usb 2-1: config 5 has an invalid interface number: 123 but max is 0 [ 150.709924][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.726416][ T5919] usb 2-1: config 5 has no interface number 0 [ 150.733713][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.742359][ T5919] usb 2-1: config 5 interface 123 has no altsetting 0 [ 150.744382][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.759670][ T5919] usb 2-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7 [ 150.761286][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.774910][ T5919] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.788695][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.796267][ T5919] usb 2-1: Product: syz [ 150.802275][ T6914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.805772][ T5919] usb 2-1: Manufacturer: syz [ 150.813112][ T6914] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.827262][ T5919] usb 2-1: SerialNumber: syz [ 150.926070][ T5958] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 151.050556][ T6896] Invalid/unusable pipe [ 151.054961][ T5958] usb 1-1: device descriptor read/64, error -71 [ 151.294963][ T5958] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 151.435004][ T5958] usb 1-1: device descriptor read/64, error -71 [ 151.546127][ T5958] usb usb1-port1: attempt power cycle [ 151.885337][ T5958] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 151.912341][ T6949] loop2: detected capacity change from 0 to 8 [ 151.921013][ T6949] Dev loop2: unable to read RDB block 8 [ 151.926868][ T6949] loop2: unable to read partition table [ 151.932990][ T6949] loop2: partition table beyond EOD, truncated [ 151.933146][ T5958] usb 1-1: device descriptor read/8, error -71 [ 151.946357][ T6949] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 152.174985][ T5958] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 152.205761][ T5958] usb 1-1: device descriptor read/8, error -71 [ 152.264970][ T985] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 152.317875][ T5958] usb usb1-port1: unable to enumerate USB device [ 152.426649][ T985] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 152.435932][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.446758][ T985] usb 3-1: config 0 descriptor?? [ 153.201850][ T5919] comedi comedi5: Wrong number of endpoints [ 153.215301][ T5919] ni6501 2-1:5.123: driver 'ni6501' failed to auto-configure device. [ 153.251856][ T5919] usb 2-1: USB disconnect, device number 39 [ 153.263822][ T985] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 153.278615][ T985] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 153.306061][ T985] asix 3-1:0.0: probe with driver asix failed with error -71 [ 153.328820][ T985] usb 3-1: USB disconnect, device number 31 [ 153.734977][ T5912] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 153.819763][ T6970] tipc: Started in network mode [ 153.825297][ T6970] tipc: Node identity ff120000000000000000000000000001, cluster identity 4711 [ 153.834291][ T6970] tipc: Enabling of bearer rejected, failed to enable media [ 153.886247][ T5912] usb 2-1: Using ep0 maxpacket: 8 [ 153.900247][ T5912] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 153.910194][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.920790][ T5912] usb 2-1: Product: syz [ 153.925440][ T5912] usb 2-1: Manufacturer: syz [ 153.930084][ T5912] usb 2-1: SerialNumber: syz [ 153.952765][ T5912] usb 2-1: config 0 descriptor?? [ 153.958621][ T6975] loop2: detected capacity change from 0 to 8 [ 153.967363][ T6975] Dev loop2: unable to read RDB block 8 [ 153.970243][ T5912] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 153.973542][ T6975] loop2: unable to read partition table [ 153.985136][ T6975] loop2: partition table beyond EOD, truncated [ 153.992531][ T6975] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 154.304946][ T5919] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 154.464934][ T5919] usb 3-1: Using ep0 maxpacket: 16 [ 154.473466][ T5919] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 154.485287][ T5919] usb 3-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 154.494384][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.506506][ T5919] usb 3-1: config 0 descriptor?? [ 154.735073][ T5919] usbhid 3-1:0.0: can't add hid device: -71 [ 154.741282][ T5919] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 154.752126][ T5919] usb 3-1: USB disconnect, device number 32 [ 155.165080][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 155.285184][ T5912] gspca_sonixj: reg_w1 err -110 [ 155.325592][ T5912] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 155.856361][ T6996] binder: 6993:6996 ioctl 4018f514 0 returned -22 [ 156.030478][ T7000] 9pnet_fd: Insufficient options for proto=fd [ 156.042811][ T7000] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 156.044139][ T7014] overlayfs: failed to clone lowerpath [ 156.798476][ T7023] loop2: detected capacity change from 0 to 8 [ 156.806453][ T7023] Dev loop2: unable to read RDB block 8 [ 156.820654][ T7023] loop2: unable to read partition table [ 156.827030][ T7023] loop2: partition table beyond EOD, truncated [ 156.839300][ T7023] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 157.129642][ T7033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.139860][ T7033] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.265030][ T985] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 157.415647][ T985] usb 1-1: no configurations [ 157.420278][ T985] usb 1-1: can't read configurations, error -22 [ 157.555051][ T985] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 157.715065][ T985] usb 1-1: no configurations [ 157.719712][ T985] usb 1-1: can't read configurations, error -22 [ 157.759951][ T985] usb usb1-port1: attempt power cycle [ 157.892234][ T7043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.908265][ T7043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.125086][ T985] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 158.146403][ T985] usb 1-1: no configurations [ 158.151110][ T985] usb 1-1: can't read configurations, error -22 [ 158.295044][ T985] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 158.316268][ T985] usb 1-1: no configurations [ 158.321042][ T985] usb 1-1: can't read configurations, error -22 [ 158.327900][ T985] usb usb1-port1: unable to enumerate USB device [ 158.794642][ T7052] loop2: detected capacity change from 0 to 8 [ 158.813099][ T6521] Dev loop2: unable to read RDB block 8 [ 158.819875][ T6521] loop2: unable to read partition table [ 158.827207][ T6521] loop2: partition table beyond EOD, truncated [ 158.838313][ T7052] Dev loop2: unable to read RDB block 8 [ 158.847362][ T7052] loop2: unable to read partition table [ 158.853521][ T7052] loop2: partition table beyond EOD, truncated [ 158.860132][ T7052] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 158.921380][ T7056] netlink: 132 bytes leftover after parsing attributes in process `syz.1.315'. [ 158.948059][ T7057] netlink: 132 bytes leftover after parsing attributes in process `syz.1.315'. [ 158.998612][ T7062] afs: Unknown parameter 'dloc[ite' [ 159.057024][ T7066] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.072596][ T7066] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.152819][ T7078] netlink: 28 bytes leftover after parsing attributes in process `syz.1.321'. [ 159.186625][ T7078] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.321'. [ 159.274726][ T7084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.275116][ T7083] loop2: detected capacity change from 0 to 8 [ 159.288988][ T7084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.291542][ T7083] Dev loop2: unable to read RDB block 8 [ 159.302608][ T7083] loop2: unable to read partition table [ 159.309649][ T7083] loop2: partition table beyond EOD, truncated [ 159.311849][ T7084] binder: 7082:7084 ioctl 6406 0 returned -22 [ 159.319984][ T7083] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 159.332901][ T5912] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 159.496194][ T5912] usb 3-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 159.507646][ T5912] usb 3-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 159.526878][ T5912] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=26.29 [ 159.536180][ T5912] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 159.544459][ T5912] usb 3-1: Manufacturer: syz [ 159.550086][ T5912] usb 3-1: SerialNumber: syz [ 159.766757][ T5912] usbhid 3-1:36.0: couldn't find an input interrupt endpoint [ 159.791364][ T5912] usb 3-1: USB disconnect, device number 33 [ 159.911570][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 159.921032][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz.1.327'. [ 160.202012][ T7121] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.365234][ T7121] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.457227][ T7134] loop2: detected capacity change from 0 to 8 [ 160.499131][ T6521] Dev loop2: unable to read RDB block 8 [ 160.504755][ T6521] loop2: unable to read partition table [ 160.529169][ T6521] loop2: partition table beyond EOD, truncated [ 160.551106][ T7134] Dev loop2: unable to read RDB block 8 [ 160.569234][ T7134] loop2: unable to read partition table [ 160.578428][ T7134] loop2: partition table beyond EOD, truncated [ 160.588603][ T7134] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 161.051204][ T7153] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20007 [ 161.115242][ T7154] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.124153][ T7154] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.206652][ T985] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 161.344986][ T985] usb 1-1: device descriptor read/64, error -71 [ 161.605095][ T985] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 161.735069][ T985] usb 1-1: device descriptor read/64, error -71 [ 161.857556][ T985] usb usb1-port1: attempt power cycle [ 161.868191][ T7161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.877498][ T7161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.045047][ T5954] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 162.205069][ T985] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 162.216626][ T5954] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 162.226033][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.234081][ T5954] usb 3-1: Product: syz [ 162.238470][ T985] usb 1-1: device descriptor read/8, error -71 [ 162.244691][ T5954] usb 3-1: Manufacturer: syz [ 162.249372][ T5954] usb 3-1: SerialNumber: syz [ 162.256108][ T5954] usb 3-1: config 0 descriptor?? [ 162.475002][ T985] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 162.493912][ T5954] usb 3-1: f81604_read: reg: 105 failed: -EPROTO [ 162.516697][ T5954] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO [ 162.532168][ T985] usb 1-1: device descriptor read/8, error -71 [ 162.540572][ T5954] f81604 3-1:0.0: probe with driver f81604 failed with error -71 [ 162.559133][ T5954] usb 3-1: USB disconnect, device number 34 [ 162.568226][ T7166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.579230][ T7166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.655434][ T985] usb usb1-port1: unable to enumerate USB device [ 163.150640][ T7193] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.188820][ T7193] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.324976][ T5954] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 163.425226][ T7201] md: array md2 already initialised! [ 163.484968][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 163.509572][ T5954] usb 3-1: config 4 has an invalid interface number: 51 but max is 0 [ 163.524555][ T5954] usb 3-1: config 4 has no interface number 0 [ 163.538579][ T5954] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16 [ 163.560135][ T5954] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 163.572752][ T5954] usb 3-1: config 4 interface 51 has no altsetting 0 [ 163.583080][ T5954] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 163.603352][ T5954] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.623641][ T5954] usb 3-1: Product: syz [ 163.627971][ T5954] usb 3-1: Manufacturer: syz [ 163.632590][ T5954] usb 3-1: SerialNumber: syz [ 163.651803][ T7191] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 163.672292][ T7191] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 163.963891][ T7191] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 164.035451][ T7191] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 164.052732][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.072894][ T5954] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, ee:d2:43:7d:c0:06 [ 164.076054][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.115917][ T7212] infiniband syz1: set active [ 164.122707][ T7212] infiniband syz1: added syz_tun [ 164.141366][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.169948][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.186144][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.238690][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.268492][ T7212] RDS/IB: syz1: added [ 164.274995][ T5912] usb 3-1: USB disconnect, device number 35 [ 164.282354][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.295602][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.308524][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 164.310117][ T5912] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device [ 164.317637][ T7226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.349'. [ 165.295036][ T24] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 165.371967][ T7266] process 'syz.0.355' launched '/dev/fd/4' with NULL argv: empty string added [ 165.436790][ T24] usb 3-1: device descriptor read/64, error -71 [ 165.675870][ T24] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 165.755000][ T5954] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 165.855145][ T24] usb 3-1: device descriptor read/64, error -71 [ 165.914944][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 165.928869][ T5954] usb 1-1: config 9 has an invalid interface number: 103 but max is 0 [ 165.937849][ T5954] usb 1-1: config 9 has no interface number 0 [ 165.949440][ T5954] usb 1-1: config 9 interface 103 has no altsetting 0 [ 165.959481][ T5954] usb 1-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=97.b5 [ 165.969144][ T24] usb usb3-port1: attempt power cycle [ 165.977001][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.985830][ T5954] usb 1-1: Product: syz [ 165.990079][ T5954] usb 1-1: Manufacturer: syz [ 165.995251][ T5954] usb 1-1: SerialNumber: syz [ 166.216922][ T5954] ums-onetouch 1-1:9.103: USB Mass Storage device detected [ 166.292786][ T5954] usb 1-1: USB disconnect, device number 44 [ 166.335387][ T24] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 166.365902][ T24] usb 3-1: device descriptor read/8, error -71 [ 166.605053][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 166.625720][ T24] usb 3-1: device descriptor read/8, error -71 [ 166.745229][ T24] usb usb3-port1: unable to enumerate USB device [ 167.545396][ T7312] md: array md2 already initialised! [ 167.594212][ T7321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.605278][ T7321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.241665][ T7335] tmpfs: Bad value for 'mpol' [ 168.424314][ T7344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.439513][ T7344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.452918][ T7344] IPVS: Unknown mcast interface: pimreg0 [ 168.655142][ T985] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 168.826874][ T985] usb 3-1: config 0 has an invalid interface number: 113 but max is 0 [ 168.838714][ T985] usb 3-1: config 0 has no interface number 0 [ 168.845902][ T985] usb 3-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 168.857537][ T985] usb 3-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 168.867483][ T985] usb 3-1: config 0 interface 113 has no altsetting 0 [ 168.876616][ T985] usb 3-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 168.885765][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.893760][ T985] usb 3-1: Product: syz [ 168.898130][ T985] usb 3-1: Manufacturer: syz [ 168.902726][ T985] usb 3-1: SerialNumber: syz [ 168.909340][ T985] usb 3-1: config 0 descriptor?? [ 168.919380][ C1] usb 3-1: NFC: Urb failure (status -71) [ 168.926744][ T985] usb 3-1: NFC: Unable to get FW version [ 168.933834][ T985] pn533_usb 3-1:0.113: probe with driver pn533_usb failed with error -90 [ 169.008775][ T7347] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 169.019265][ T7347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.029611][ T7347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.130373][ T985] usb 3-1: USB disconnect, device number 40 [ 169.443739][ T7363] overlayfs: missing 'lowerdir' [ 169.454455][ T7363] overlayfs: missing 'lowerdir' [ 169.501577][ T7366] __nla_validate_parse: 123 callbacks suppressed [ 169.501591][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'. [ 169.533875][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 169.573634][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.0.388'. [ 169.577069][ T5995] block nbd64: NBD_DISCONNECT [ 169.871398][ T6521] udevd[6521]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 169.887351][ T6521] udevd[6521]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 170.045072][ T985] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 170.094969][ T5954] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 170.196816][ T985] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.208002][ T985] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f4, bcdDevice= 0.00 [ 170.217102][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.227698][ T985] usb 3-1: config 0 descriptor?? [ 170.255118][ T5954] usb 1-1: Using ep0 maxpacket: 32 [ 170.263768][ T5954] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.00 [ 170.274382][ T5954] usb 1-1: New USB device strings: Mfr=0, Product=3, SerialNumber=0 [ 170.282489][ T5954] usb 1-1: Product: syz [ 170.289383][ T5954] usb 1-1: config 0 descriptor?? [ 170.512007][ T5954] usbtouchscreen 1-1:0.0: probe with driver usbtouchscreen failed with error -71 [ 170.518360][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.542184][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.545619][ T5954] usb 1-1: USB disconnect, device number 45 [ 170.808763][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.826442][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.833669][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.844716][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.859049][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.866558][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.873845][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.882588][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.892933][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.900334][ T985] itetech 0003:06CB:73F4.0009: unknown main item tag 0x0 [ 170.911739][ T985] itetech 0003:06CB:73F4.0009: hidraw0: USB HID v0.04 Device [HID 06cb:73f4] on usb-dummy_hcd.2-1/input0 [ 171.069883][ T7389] netlink: 'syz.0.395': attribute type 4 has an invalid length. [ 171.094457][ T985] usb 3-1: USB disconnect, device number 41 [ 171.454999][ T5919] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 171.461960][ T7397] netlink: 52 bytes leftover after parsing attributes in process `syz.1.398'. [ 171.476567][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.486373][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.495872][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.506846][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.516056][ T7397] netlink: 'syz.1.398': attribute type 4 has an invalid length. [ 171.523958][ T7397] netlink: 17 bytes leftover after parsing attributes in process `syz.1.398'. [ 171.625294][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 171.643351][ T5919] usb 1-1: config index 0 descriptor too short (expected 38026, got 36) [ 171.655498][ T5919] usb 1-1: config 18 has an invalid descriptor of length 78, skipping remainder of the config [ 171.667248][ T5919] usb 1-1: config 18 has 0 interfaces, different from the descriptor's value: 8 [ 171.677450][ T5919] usb 1-1: New USB device found, idVendor=0145, idProduct=3000, bcdDevice= 0.00 [ 171.688172][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.907341][ T5919] usb 1-1: string descriptor 0 read error: -71 [ 171.915353][ T5912] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 171.925823][ T5919] usb 1-1: USB disconnect, device number 46 [ 172.069859][ T5912] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 172.081798][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.090241][ T5912] usb 3-1: Product: syz [ 172.094775][ T5912] usb 3-1: Manufacturer: syz [ 172.103557][ T5912] usb 3-1: SerialNumber: syz [ 172.564226][ T7419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.404'. [ 172.944977][ T5919] usb 1-1: new low-speed USB device number 47 using dummy_hcd [ 173.085017][ T5919] usb 1-1: device descriptor read/64, error -71 [ 173.101547][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -EPROTO [ 173.116010][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 173.132016][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 173.152463][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 173.179656][ T5912] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 173.202436][ T5912] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 173.210490][ T7427] loop2: detected capacity change from 0 to 8 [ 173.217808][ T7427] Dev loop2: unable to read RDB block 8 [ 173.231357][ T7427] loop2: unable to read partition table [ 173.233548][ T5912] usb 3-1: USB disconnect, device number 42 [ 173.245675][ T7427] loop2: partition table beyond EOD, truncated [ 173.262480][ T7427] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 173.327034][ T5919] usb 1-1: new low-speed USB device number 48 using dummy_hcd [ 173.474938][ T5919] usb 1-1: device descriptor read/64, error -71 [ 173.585818][ T5919] usb usb1-port1: attempt power cycle [ 173.815006][ T985] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 173.925030][ T5919] usb 1-1: new low-speed USB device number 49 using dummy_hcd [ 173.945884][ T5919] usb 1-1: device descriptor read/8, error -71 [ 173.956556][ T985] usb 3-1: device descriptor read/64, error -71 [ 174.184981][ T5919] usb 1-1: new low-speed USB device number 50 using dummy_hcd [ 174.195169][ T985] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 174.205658][ T5919] usb 1-1: device descriptor read/8, error -71 [ 174.325067][ T985] usb 3-1: device descriptor read/64, error -71 [ 174.326720][ T5919] usb usb1-port1: unable to enumerate USB device [ 174.445456][ T985] usb usb3-port1: attempt power cycle [ 174.785089][ T985] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 174.812866][ T985] usb 3-1: device descriptor read/8, error -71 [ 174.932846][ T7456] loop2: detected capacity change from 0 to 8 [ 174.940318][ T7456] Dev loop2: unable to read RDB block 8 [ 174.948183][ T7456] loop2: unable to read partition table [ 174.954115][ T7456] loop2: partition table beyond EOD, truncated [ 174.960580][ T7456] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 175.052421][ T7458] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.063966][ T985] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 175.085640][ T985] usb 3-1: device descriptor read/8, error -71 [ 175.136210][ T7458] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.195375][ T985] usb usb3-port1: unable to enumerate USB device [ 175.210714][ T7458] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.260504][ T7458] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.346384][ T63] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.362203][ T63] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.379690][ T63] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.400311][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.001546][ T7474] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 176.014379][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.026726][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.039724][ T7474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 176.049614][ T7474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 176.707302][ T7481] loop2: detected capacity change from 0 to 8 [ 176.715618][ T5870] Dev loop2: unable to read RDB block 8 [ 176.721245][ T5870] loop2: unable to read partition table [ 176.729844][ T5870] loop2: partition table beyond EOD, truncated [ 176.749973][ T7481] Dev loop2: unable to read RDB block 8 [ 176.756926][ T7481] loop2: unable to read partition table [ 176.763226][ T7481] loop2: partition table beyond EOD, truncated [ 176.770798][ T7481] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 176.914785][ T7492] netlink: 'syz.1.428': attribute type 1 has an invalid length. [ 176.923418][ T7492] netlink: 'syz.1.428': attribute type 11 has an invalid length. [ 176.931859][ T7493] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 176.947881][ T7493] netlink: 'syz.2.429': attribute type 4 has an invalid length. [ 176.959017][ T7492] netlink: 224 bytes leftover after parsing attributes in process `syz.1.428'. [ 177.017615][ T7497] tipc: Started in network mode [ 177.022530][ T7497] tipc: Node identity ac14142f, cluster identity 4711 [ 177.028120][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.042104][ T7497] tipc: New replicast peer: 0.0.0.0 [ 177.043327][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.074195][ T7497] tipc: Enabled bearer , priority 10 [ 177.077956][ T7495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 177.091880][ T7495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 177.107135][ T7498] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 177.372433][ T7517] kAFS: No cell specified [ 177.395078][ T985] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 177.444320][ T7519] tmpfs: Unknown parameter 'refer' [ 177.493494][ T7521] loop2: detected capacity change from 0 to 8 [ 177.502849][ T6521] Dev loop2: unable to read RDB block 8 [ 177.508753][ T6521] loop2: unable to read partition table [ 177.518163][ T6521] loop2: partition table beyond EOD, truncated [ 177.525891][ T985] usb 3-1: device descriptor read/64, error -71 [ 177.529580][ T7521] Dev loop2: unable to read RDB block 8 [ 177.538081][ T7521] loop2: unable to read partition table [ 177.544792][ T7521] loop2: partition table beyond EOD, truncated [ 177.551895][ T7521] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 177.775065][ T985] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 177.907722][ T985] usb 3-1: device descriptor read/64, error -71 [ 177.944952][ T5957] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 178.016074][ T985] usb usb3-port1: attempt power cycle [ 178.033098][ T7537] openvswitch: netlink: VXLAN extension 0 has unexpected len 2 expected 0 [ 178.115068][ T5957] usb 1-1: Using ep0 maxpacket: 16 [ 178.122063][ T5957] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 178.135905][ T5957] usb 1-1: config 1 has no interface number 0 [ 178.142126][ T5957] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 178.153209][ T5957] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 178.166132][ T5957] usb 1-1: config 1 interface 105 has no altsetting 0 [ 178.174735][ T5957] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 178.183983][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.188241][ T5950] tipc: Node number set to 2886997039 [ 178.192121][ T5957] usb 1-1: Product: syz [ 178.201994][ T5957] usb 1-1: Manufacturer: syz [ 178.206891][ T5957] usb 1-1: SerialNumber: syz [ 178.214524][ T7530] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 178.222017][ T7530] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 178.365030][ T985] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 178.385577][ T985] usb 3-1: device descriptor read/8, error -71 [ 178.640907][ T7530] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 178.649200][ T985] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 178.651305][ T7530] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 178.689214][ T985] usb 3-1: device descriptor read/8, error -71 [ 178.805314][ T985] usb usb3-port1: unable to enumerate USB device [ 179.090546][ T5932] usb 4-1: dvb_usb_v2: Did not find the firmware file 'dvb-usb-terratec-h7-az6007.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 179.108636][ T5932] dvb_usb_az6007 4-1:0.0: probe with driver dvb_usb_az6007 failed with error -110 [ 179.126306][ T5932] usb 4-1: USB disconnect, device number 15 [ 179.271256][ T5957] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 179.285666][ T5957] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 179.302640][ T5957] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, fe:57:1c:0e:d8:7f [ 179.318412][ T5957] usb 1-1: USB disconnect, device number 51 [ 179.327695][ T5957] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 179.387172][ T5957] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 179.405477][ T5957] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 179.415492][ T5957] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 179.465248][ T5932] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 179.594153][ T7556] loop2: detected capacity change from 0 to 8 [ 179.607679][ T7556] Dev loop2: unable to read RDB block 8 [ 179.613457][ T7556] loop2: unable to read partition table [ 179.619625][ T7556] loop2: partition table beyond EOD, truncated [ 179.625992][ T7556] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 179.648444][ T5932] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 179.667248][ T5932] usb 4-1: config 0 has no interface number 0 [ 179.689382][ T5932] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 179.725374][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 179.749675][ T5932] usb 4-1: Product: syz [ 179.754673][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.757520][ T5932] usb 4-1: SerialNumber: syz [ 179.767189][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.773340][ T5932] usb 4-1: config 0 descriptor?? [ 179.795534][ T5932] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input16 [ 179.810088][ T7560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 179.844434][ T7560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 179.998012][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 179.998286][ T5919] usb 4-1: USB disconnect, device number 16 [ 180.005306][ C1] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 180.031849][ T5919] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 180.116525][ T5950] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 180.174504][ T7564] IPVS: length: 194 != 199688 [ 180.275405][ T5950] usb 1-1: Using ep0 maxpacket: 8 [ 180.283445][ T5950] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 180.294670][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 180.304782][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 129 [ 180.319352][ T5950] usb 1-1: New USB device found, idVendor=0dfc, idProduct=0102, bcdDevice= 0.00 [ 180.328713][ T5950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.338977][ T5950] usb 1-1: config 0 descriptor?? [ 180.566589][ T5932] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 180.576922][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.589277][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.746576][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 180.753122][ T5932] usb 3-1: too many configurations: 17, using maximum allowed: 8 [ 180.757530][ T7562] netlink: 'syz.0.449': attribute type 3 has an invalid length. [ 180.762773][ T5932] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.777397][ T5932] usb 3-1: config 0 has no interface number 0 [ 180.782346][ T7562] netlink: 224 bytes leftover after parsing attributes in process `syz.0.449'. [ 180.785910][ T5932] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.811240][ T5932] usb 3-1: config 0 has no interface number 0 [ 180.827680][ T5950] hid_parser_main: 61 callbacks suppressed [ 180.827705][ T5950] hid-generic 0003:0DFC:0102.000A: unknown main item tag 0x0 [ 180.843734][ T5932] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.849362][ T5950] hid-generic 0003:0DFC:0102.000A: unknown main item tag 0x0 [ 180.853596][ T5932] usb 3-1: config 0 has no interface number 0 [ 180.859896][ T5950] hid-generic 0003:0DFC:0102.000A: unknown main item tag 0x0 [ 180.873383][ T5950] hid-generic 0003:0DFC:0102.000A: unknown main item tag 0x0 [ 180.876509][ T5932] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.881362][ T5950] hid-generic 0003:0DFC:0102.000A: unknown main item tag 0x0 [ 180.890802][ T5932] usb 3-1: config 0 has no interface number 0 [ 180.898745][ T5950] hid-generic 0003:0DFC:0102.000A: unknown main item tag 0x0 [ 180.904397][ T5932] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.922573][ T5932] usb 3-1: config 0 has no interface number 0 [ 180.930392][ T5932] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.939113][ T5950] hid-generic 0003:0DFC:0102.000A: hidraw0: USB HID v0.00 Device [HID 0dfc:0102] on usb-dummy_hcd.0-1/input0 [ 180.940942][ T5932] usb 3-1: config 0 has no interface number 0 [ 180.964278][ T5932] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.973033][ T5932] usb 3-1: config 0 has no interface number 0 [ 180.980507][ T5932] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 180.990328][ T5932] usb 3-1: config 0 has no interface number 0 [ 181.000336][ T5932] usb 3-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 181.014013][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.022225][ T5932] usb 3-1: Product: syz [ 181.030705][ T5932] usb 3-1: Manufacturer: syz [ 181.055230][ T5932] usb 3-1: SerialNumber: syz [ 181.058445][ T7562] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.068985][ T7562] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.083320][ T5932] usb 3-1: config 0 descriptor?? [ 181.093793][ T5950] usb 1-1: USB disconnect, device number 52 [ 181.096667][ T5932] etas_es58x 3-1:0.2: Starting syz syz (Serial Number syz) [ 181.244338][ T7601] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 181.308922][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.319494][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.360908][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.370783][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.382623][ T7567] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.391578][ T7567] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.415418][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 181.564982][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 181.572608][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.583623][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.594332][ T9] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 181.603830][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.615867][ T9] usb 4-1: config 0 descriptor?? [ 181.716648][ T7604] kvm: user requested TSC rate below hardware speed [ 181.728152][ T7604] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 181.747057][ T7604] netlink: 'syz.0.461': attribute type 32 has an invalid length. [ 181.907882][ T5932] etas_es58x 3-1:0.2: could not retrieve the product info string [ 181.997814][ T5932] usb 3-1: USB disconnect, device number 51 [ 182.008938][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 182.024314][ T5932] etas_es58x 3-1:0.2: Disconnecting syz syz [ 182.037552][ T9] isku 0003:1E7D:319C.000B: ignoring exceeding usage max [ 182.091413][ T9] isku 0003:1E7D:319C.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 182.353385][ T9] usb 4-1: USB disconnect, device number 17 [ 182.395069][ T985] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 182.420151][ T7620] mmap: syz.1.466 (7620): VmData 37605376 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data. [ 182.577432][ T985] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 182.597263][ T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.616755][ T985] usb 1-1: config 0 descriptor?? [ 182.641240][ T985] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 182.641868][ T7627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 182.650825][ T5932] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 182.673183][ T7627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 182.840182][ T5932] usb 3-1: unable to get BOS descriptor or descriptor too short [ 182.853460][ T5932] usb 3-1: config 63 has an invalid interface number: 66 but max is 0 [ 182.862081][ T5932] usb 3-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 182.896159][ T5932] usb 3-1: config 63 has no interface number 0 [ 182.902478][ T5932] usb 3-1: config 63 interface 66 has no altsetting 0 [ 182.912451][ T5932] usb 3-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4 [ 182.931876][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.942129][ T5932] usb 3-1: Product: syz [ 182.949767][ T5932] usb 3-1: Manufacturer: syz [ 182.954513][ T5932] usb 3-1: SerialNumber: syz [ 183.050116][ T7613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.062279][ T7613] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.082833][ T985] gp8psk: usb in 128 operation failed. [ 183.098818][ T985] gp8psk: usb in 137 operation failed. [ 183.108601][ T985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.120888][ T985] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 183.131564][ T985] usb 1-1: media controller created [ 183.164914][ T985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.266111][ T5957] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 183.277763][ T5932] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8a31) [ 183.288699][ T985] gp8psk_fe: Frontend attached [ 183.294031][ T985] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 183.313337][ T5932] uvcvideo 3-1:63.66: No valid video chain found. [ 183.334104][ T985] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 183.351912][ T5932] usb 3-1: USB disconnect, device number 52 [ 183.471340][ T5957] usb 4-1: New USB device found, idVendor=09e1, idProduct=5121, bcdDevice=40.c1 [ 183.481858][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.485362][ T7655] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.501780][ T5957] usb 4-1: Product: syz [ 183.510577][ T5957] usb 4-1: Manufacturer: syz [ 183.521007][ T985] gp8psk: usb in 138 operation failed. [ 183.526368][ T7655] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.529058][ T5957] usb 4-1: SerialNumber: syz [ 183.540424][ T985] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 183.553425][ T985] gp8psk: found Genpix USB device pID = 203 (hex) [ 183.577790][ T5957] usb 4-1: config 0 descriptor?? [ 183.593373][ T985] usb 1-1: USB disconnect, device number 53 [ 183.654124][ T7663] netlink: 'syz.1.471': attribute type 11 has an invalid length. [ 183.715255][ T5932] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 183.748860][ T7663] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.759593][ T7665] netlink: 4228 bytes leftover after parsing attributes in process `syz.0.472'. [ 183.775756][ T7663] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.802519][ T985] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 183.822414][ T5957] int51x1 4-1:0.0: probe with driver int51x1 failed with error -22 [ 183.886285][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 183.899491][ T5932] usb 3-1: config 0 has an invalid interface number: 226 but max is 0 [ 183.908754][ T5932] usb 3-1: config 0 has no interface number 0 [ 183.920408][ T5932] usb 3-1: config 0 interface 226 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 183.933472][ T5932] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=f0.56 [ 183.942979][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.954328][ T5932] usb 3-1: Product: syz [ 183.960253][ T5932] usb 3-1: Manufacturer: syz [ 183.964988][ T5932] usb 3-1: SerialNumber: syz [ 183.975320][ T5932] usb 3-1: config 0 descriptor?? [ 183.981239][ T7656] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 184.029051][ T7640] QAT: failed to copy from user. [ 184.039939][ T7640] netlink: 4 bytes leftover after parsing attributes in process `syz.3.468'. [ 184.058291][ T5954] usb 4-1: USB disconnect, device number 18 [ 184.193914][ T7656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.205320][ T7656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.305588][ T985] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 184.468640][ T985] usb 1-1: not running at top speed; connect to a high speed hub [ 184.491168][ T985] usb 1-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.511465][ T7675] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.475'. [ 184.531632][ T985] usb 1-1: config 1 interface 0 has no altsetting 0 [ 184.542160][ T985] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.551873][ T985] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.560017][ T985] usb 1-1: Product: ﳿ [ 184.564495][ T985] usb 1-1: Manufacturer: ࠓ [ 184.570163][ T985] usb 1-1: SerialNumber: syz [ 184.606888][ T7668] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 184.758831][ T7687] netlink: 48 bytes leftover after parsing attributes in process `syz.1.478'. [ 184.867766][ T7691] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 184.877983][ T7689] IPVS: stopping backup sync thread 7691 ... [ 184.886199][ T985] usb 1-1: USB disconnect, device number 54 [ 185.138656][ T7704] sg_write: data in/out 259/154 bytes for SCSI command 0x0-- guessing data in; [ 185.138656][ T7704] program syz.1.484 not setting count and/or reply_len properly [ 185.189751][ T7704] netlink: 728 bytes leftover after parsing attributes in process `syz.1.484'. [ 185.204253][ T7704] netlink: 12 bytes leftover after parsing attributes in process `syz.1.484'. [ 185.225672][ T5932] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 185.289414][ T7709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 185.302096][ T7709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 185.374944][ T5932] usb 4-1: device descriptor read/64, error -71 [ 185.467626][ T7713] program syz.0.488 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.571680][ T7722] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 185.617759][ T5932] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 185.740087][ T5919] usb 3-1: USB disconnect, device number 53 [ 185.776068][ T5932] usb 4-1: device descriptor read/64, error -71 [ 185.885866][ T5932] usb usb4-port1: attempt power cycle [ 186.234954][ T5932] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 186.266342][ T5932] usb 4-1: device descriptor read/8, error -71 [ 186.475014][ T5919] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 186.515294][ T5932] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 186.535747][ T5932] usb 4-1: device descriptor read/8, error -71 [ 186.637280][ T5919] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 186.645598][ T5932] usb usb4-port1: unable to enumerate USB device [ 186.646862][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.666264][ T5919] usb 3-1: config 0 descriptor?? [ 186.674587][ T5919] cp210x 3-1:0.0: cp210x converter detected [ 187.015291][ T9] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 187.081083][ T5919] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 187.089770][ T5919] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 187.100213][ T5919] usb 3-1: cp210x converter now attached to ttyUSB0 [ 187.111313][ T5919] usb 3-1: USB disconnect, device number 54 [ 187.122028][ T5919] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 187.131831][ T5919] cp210x 3-1:0.0: device disconnected [ 187.177135][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.190058][ T9] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 187.206297][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 187.215456][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.223781][ T9] usb 1-1: Product: syz [ 187.228940][ T9] usb 1-1: Manufacturer: syz [ 187.233803][ T9] usb 1-1: SerialNumber: syz [ 187.244711][ T9] cdc_ncm 1-1:1.0: skipping garbage [ 187.250572][ T9] cdc_ncm 1-1:1.0: NCM or ECM functional descriptors missing [ 187.258334][ T9] cdc_ncm 1-1:1.0: bind() failure [ 187.267374][ T9] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 187.275614][ T9] cdc_ncm 1-1:1.1: bind() failure [ 187.446222][ T5932] usb 1-1: USB disconnect, device number 55 [ 187.821922][ T7753] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 187.829129][ T7753] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.842301][ T7753] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 187.852089][ T7753] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 187.858405][ T7753] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.866971][ T7753] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 187.876240][ T7753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 187.882250][ T7753] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 187.890546][ T7753] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 188.145077][ T5932] usb 3-1: new full-speed USB device number 55 using dummy_hcd [ 188.169243][ T7766] netlink: 4 bytes leftover after parsing attributes in process `syz.0.502'. [ 188.296934][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 188.308826][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 188.320307][ T5932] usb 3-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 188.329837][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.341361][ T5932] usb 3-1: config 0 descriptor?? [ 188.936808][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.946964][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.955858][ T7756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.957228][ T7779] netlink: 10 bytes leftover after parsing attributes in process `syz.1.506'. [ 188.971546][ T7778] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.984114][ T7778] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.021514][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.075116][ T5184] Bluetooth: hci1: command 0x0c1a tx timeout [ 189.084484][ T7781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.111240][ T7770] block nbd0: shutting down sockets [ 189.193975][ T7783] syzkaller1: entered promiscuous mode [ 189.201358][ T7783] syzkaller1: entered allmulticast mode [ 189.465016][ T985] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 189.619552][ T985] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.629902][ T985] usb 1-1: config 0 has no interface number 0 [ 189.644108][ T985] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 189.673263][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.681448][ T985] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 189.684634][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.699673][ T985] usb 1-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.708325][ T7789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 189.717719][ T985] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 189.724303][ T7789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 189.735737][ T985] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.761986][ T985] usb 1-1: config 0 descriptor?? [ 189.875445][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 189.955198][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.178330][ T7783] netlink: 'syz.0.507': attribute type 10 has an invalid length. [ 190.188223][ T7783] netlink: 2 bytes leftover after parsing attributes in process `syz.0.507'. [ 190.198506][ T7783] team0: entered promiscuous mode [ 190.203762][ T7783] C: entered promiscuous mode [ 190.209458][ T7783] team_slave_1: entered promiscuous mode [ 190.218388][ T7783] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.225581][ T7783] batman_adv: batadv0: Interface activated: team0 [ 190.232537][ T7783] batman_adv: batadv0: Interface deactivated: team0 [ 190.240402][ T7783] batman_adv: batadv0: Removing interface: team0 [ 190.250140][ T7783] bridge0: port 3(team0) entered blocking state [ 190.256991][ T7783] bridge0: port 3(team0) entered disabled state [ 190.263718][ T7783] team0: entered allmulticast mode [ 190.272029][ T7783] C: entered allmulticast mode [ 190.278136][ T7783] team_slave_1: entered allmulticast mode [ 190.293155][ T7783] bridge0: port 3(team0) entered blocking state [ 190.300016][ T7783] bridge0: port 3(team0) entered forwarding state [ 190.331681][ T7791] binder: 7790:7791 ioctl c018620c 200000000380 returned -22 [ 190.368860][ T985] usbhid 1-1:0.1: can't add hid device: -71 [ 190.375241][ T985] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 190.389740][ T985] usb 1-1: USB disconnect, device number 56 [ 190.763091][ T5932] usbhid 3-1:0.0: can't add hid device: -71 [ 190.769741][ T5932] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 190.787460][ T5932] usb 3-1: USB disconnect, device number 55 [ 190.836049][ T7802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 190.870044][ T7802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.154997][ T5184] Bluetooth: hci1: command 0x0c1a tx timeout [ 191.184950][ T5932] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 191.192532][ T7807] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 191.206114][ T7807] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 191.339342][ T5932] usb 3-1: device descriptor read/64, error -71 [ 191.593760][ T5932] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 191.685012][ T985] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 191.736030][ T5932] usb 3-1: device descriptor read/64, error -71 [ 191.845261][ T5932] usb usb3-port1: attempt power cycle [ 191.852652][ T985] usb 4-1: config 12 has an invalid interface number: 70 but max is 0 [ 191.861007][ T985] usb 4-1: config 12 has no interface number 0 [ 191.867435][ T985] usb 4-1: config 12 interface 70 altsetting 14 bulk endpoint 0x8A has invalid maxpacket 1024 [ 191.878996][ T985] usb 4-1: config 12 interface 70 altsetting 14 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 191.890063][ T985] usb 4-1: config 12 interface 70 has no altsetting 0 [ 191.900072][ T985] usb 4-1: New USB device found, idVendor=0489, idProduct=b0bc, bcdDevice=2a.66 [ 191.909214][ T985] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.917535][ T985] usb 4-1: Product: syz [ 191.921734][ T985] usb 4-1: Manufacturer: syz [ 191.927085][ T985] usb 4-1: SerialNumber: syz [ 191.934169][ T7823] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 191.956010][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 192.025008][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 192.035027][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 192.154650][ T985] usb 4-1: USB disconnect, device number 23 [ 192.192083][ T9] usb 1-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 192.202012][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.204926][ T5932] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 192.211523][ T9] usb 1-1: Product: syz [ 192.222573][ T9] usb 1-1: Manufacturer: syz [ 192.227388][ T9] usb 1-1: SerialNumber: syz [ 192.233986][ T9] usb 1-1: config 0 descriptor?? [ 192.242841][ T9] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 192.249291][ T5932] usb 3-1: device descriptor read/8, error -71 [ 192.442526][ T7839] 9pnet_fd: p9_fd_create_tcp (7839): problem connecting socket to 127.0.0.1 [ 192.454265][ T9] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 192.464036][ T9] sq905c 1-1:0.0: Get version command failed [ 192.470222][ T9] sq905c 1-1:0.0: probe with driver sq905c failed with error -71 [ 192.481229][ T9] usb 1-1: USB disconnect, device number 57 [ 192.496854][ T5932] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 192.536974][ T5932] usb 3-1: device descriptor read/8, error -71 [ 192.544579][ T7841] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.558714][ T7841] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.645470][ T5932] usb usb3-port1: unable to enumerate USB device [ 192.687963][ T7843] program syz.3.530 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.007527][ T7852] loop2: detected capacity change from 0 to 8 [ 193.015159][ T7852] Dev loop2: unable to read RDB block 8 [ 193.021656][ T7852] loop2: unable to read partition table [ 193.028648][ T7852] loop2: partition table beyond EOD, truncated [ 193.035258][ T5932] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 193.035446][ T7852] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 193.216799][ T5932] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 193.232610][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 193.243622][ T5184] Bluetooth: hci1: command 0x0c1a tx timeout [ 193.259658][ T5932] usb 4-1: config 0 descriptor?? [ 193.277902][ T5932] cp210x 4-1:0.0: cp210x converter detected [ 193.495351][ T5919] usb 1-1: new full-speed USB device number 58 using dummy_hcd [ 193.599239][ T5932] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 193.627798][ T5932] cp210x 4-1:0.0: querying part number failed [ 193.650074][ T7879] loop2: detected capacity change from 0 to 8 [ 193.657431][ T5932] usb 4-1: cp210x converter now attached to ttyUSB0 [ 193.664494][ T7879] Dev loop2: unable to read RDB block 8 [ 193.674328][ T7879] loop2: unable to read partition table [ 193.682071][ T7879] loop2: partition table beyond EOD, truncated [ 193.689103][ T5919] usb 1-1: config 1 has an invalid interface number: 105 but max is 0 [ 193.699656][ T5919] usb 1-1: config 1 has no interface number 0 [ 193.706156][ T7879] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 193.706161][ T5919] usb 1-1: config 1 interface 105 has no altsetting 0 [ 193.708980][ T5919] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 193.735249][ T5919] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.743455][ T5919] usb 1-1: Product: syz [ 193.748118][ T5919] usb 1-1: Manufacturer: syz [ 193.752736][ T5919] usb 1-1: SerialNumber: syz [ 193.816358][ T7881] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 193.838573][ T7881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.849003][ T7881] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 193.922824][ T7882] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 193.931521][ T7882] netlink: 40 bytes leftover after parsing attributes in process `syz.1.543'. [ 193.940889][ T7882] batadv0: entered promiscuous mode [ 193.948126][ T7882] batadv0: entered allmulticast mode [ 193.951224][ T5950] usb 4-1: USB disconnect, device number 24 [ 193.961376][ T7882] bond0: (slave batadv0): Releasing backup interface [ 193.972250][ T5950] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.973850][ T7882] bridge0: port 3(batadv0) entered blocking state [ 193.989316][ T7882] bridge0: port 3(batadv0) entered disabled state [ 193.994135][ T5950] cp210x 4-1:0.0: device disconnected [ 194.035116][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 194.114954][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 194.305489][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 194.315264][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 194.440964][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.594071][ T5919] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 194.606401][ T5919] aqc111 1-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 194.624675][ T5919] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, a0:b4:1c:e0:4e:4f [ 194.735487][ T5932] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 194.745276][ T5950] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 194.786179][ T7891] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.797066][ T7891] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 194.828409][ T5919] usb 1-1: USB disconnect, device number 58 [ 194.837235][ T5919] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 194.887577][ T5919] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 194.898926][ T5919] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 194.909027][ T5919] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 194.918960][ T5932] usb 3-1: Using ep0 maxpacket: 16 [ 194.925686][ T5950] usb 4-1: too many configurations: 109, using maximum allowed: 8 [ 194.935413][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.951398][ T5932] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.961790][ T5932] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 194.973416][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.976234][ T5950] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 194.995216][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.998591][ T5932] usb 3-1: config 0 descriptor?? [ 195.009085][ T5950] usb 4-1: Product: syz [ 195.013268][ T5950] usb 4-1: Manufacturer: syz [ 195.019872][ T5950] usb 4-1: SerialNumber: syz [ 195.442997][ T5932] usbhid 3-1:0.0: can't add hid device: -32 [ 195.455219][ T7909] netlink: 140 bytes leftover after parsing attributes in process `syz.1.547'. [ 195.460515][ T5932] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 195.488644][ T7909] netlink: 'syz.1.547': attribute type 4 has an invalid length. [ 195.495936][ T5932] usb 3-1: USB disconnect, device number 60 [ 195.514984][ T7911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.539457][ T7909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.552654][ T7909] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.675057][ T5950] (unnamed net_device) (uninitialized): Assigned a random MAC address: 32:b1:9c:d6:69:e0 [ 195.697517][ T5950] rtl8150 4-1:1.0: eth1: rtl8150 is detected [ 196.033418][ T7931] input: syz1 as /devices/virtual/input/input18 [ 196.194662][ T7941] netlink: 128 bytes leftover after parsing attributes in process `syz.0.550'. [ 196.238316][ T7941] netlink: del zone limit has 4 unknown bytes [ 196.304973][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.323252][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.363754][ T7944] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 196.373221][ T7944] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 196.765074][ T5950] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 196.846046][ C0] usb 4-1: Rx status -71 [ 196.846832][ T5932] usb 4-1: USB disconnect, device number 25 [ 196.850420][ C0] usb 4-1: eth1: intr status -71 [ 196.871052][ T5528] usb 4-1: device reset failed [ 196.915803][ T5950] usb 1-1: Using ep0 maxpacket: 32 [ 196.927161][ T5950] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 196.954899][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 196.975781][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 196.990056][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11 [ 197.021341][ T5950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024 [ 197.067675][ T5950] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 197.092887][ T5950] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.113216][ T5950] usb 1-1: Product: syz [ 197.123363][ T5950] usb 1-1: Manufacturer: syz [ 197.133623][ T5950] usb 1-1: SerialNumber: syz [ 197.161722][ T5950] usb 1-1: config 0 descriptor?? [ 197.224967][ T5919] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 197.375002][ T5919] usb 3-1: Using ep0 maxpacket: 8 [ 197.387058][ T5919] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 197.404951][ T5919] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.435971][ T5919] pvrusb2: Hardware description: Terratec Grabster AV400 [ 197.443080][ T5919] pvrusb2: ********** [ 197.477866][ T5919] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 197.513074][ T5919] pvrusb2: Important functionality might not be entirely working. [ 197.530971][ T5919] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 197.555227][ T5919] pvrusb2: ********** [ 197.643891][ T2347] pvrusb2: Invalid write control endpoint [ 197.687880][ T7982] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.702524][ T7982] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.788913][ T2347] pvrusb2: Invalid write control endpoint [ 197.803021][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 197.813270][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 197.826328][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 197.837720][ T2347] pvrusb2: Device being rendered inoperable [ 197.848388][ T7959] pvrusb2: Attempted to execute control transfer when device not ok [ 197.860371][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 197.870379][ T5912] usb 3-1: USB disconnect, device number 61 [ 197.887879][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 197.903532][ T2347] pvrusb2: Attached sub-driver cx25840 [ 197.914192][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 197.931599][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 198.084924][ T5932] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 198.255968][ T5932] usb 4-1: Using ep0 maxpacket: 16 [ 198.264351][ T5932] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 198.277467][ T5932] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 198.289410][ T5932] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.300907][ T5932] usb 4-1: config 0 descriptor?? [ 198.436928][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -110 [ 198.449524][ T5950] input input19: Device does not respond to id packet M [ 198.459850][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 198.466041][ T5950] input input19: Device does not respond to id packet P [ 198.473693][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 198.494963][ T5950] input input19: Device does not respond to id packet B [ 198.502388][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 198.508569][ T5950] input input19: Device does not respond to id packet N [ 198.519519][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 198.526274][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 198.534300][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 198.542124][ T5950] iforce 1-1:0.0: usb_submit_urb failed: -32 [ 198.552333][ T5950] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input19 [ 198.717089][ T7979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.726321][ T7979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.939029][ T5932] usbhid 4-1:0.0: can't add hid device: -71 [ 198.948866][ T5932] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 198.961418][ T5932] usb 4-1: USB disconnect, device number 26 [ 199.358689][ T7990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 199.479882][ T5950] usb 1-1: USB disconnect, device number 59 [ 199.554381][ T7994] loop2: detected capacity change from 0 to 8 [ 199.568904][ T7994] Dev loop2: unable to read RDB block 8 [ 199.576756][ T7994] loop2: unable to read partition table [ 199.582778][ T7994] loop2: partition table beyond EOD, truncated [ 199.590106][ T7994] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 199.625319][ T5932] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 199.662929][ T7996] dlm: Unknown command passed to DLM device : 0 [ 199.662929][ T7996] [ 199.747328][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.566'. [ 199.817341][ T5932] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.827751][ T5932] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 199.839441][ T5932] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 199.848698][ T5932] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 199.858188][ T5932] usb 3-1: SerialNumber: syz [ 199.995011][ T5950] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 200.082209][ T5932] usb 3-1: 0:2 : does not exist [ 200.110997][ T5932] usb 3-1: USB disconnect, device number 62 [ 200.145113][ T5950] usb 1-1: Using ep0 maxpacket: 16 [ 200.148823][ T6521] udevd[6521]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.155696][ T5950] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.216669][ T5950] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 200.229719][ T5950] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 200.268708][ T5950] usb 1-1: Manufacturer: syz [ 200.329102][ T5950] usb 1-1: config 0 descriptor?? [ 200.413631][ T30] audit: type=1326 audit(1759465966.922:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.438232][ T30] audit: type=1326 audit(1759465966.922:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.462066][ T30] audit: type=1326 audit(1759465966.932:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.484892][ T30] audit: type=1326 audit(1759465966.932:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.507397][ T30] audit: type=1326 audit(1759465966.932:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.530255][ T30] audit: type=1326 audit(1759465966.932:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.545774][ T7996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.554680][ T30] audit: type=1326 audit(1759465966.932:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.571072][ T7996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.591892][ T30] audit: type=1326 audit(1759465966.932:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.615056][ T30] audit: type=1326 audit(1759465966.932:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8013 comm="syz.1.571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f611bd8eec9 code=0x7ffc0000 [ 200.617538][ T5912] usb 1-1: USB disconnect, device number 60 [ 200.645318][ T5950] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 200.804996][ T5950] usb 4-1: Using ep0 maxpacket: 8 [ 200.814166][ T5950] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 200.824419][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.834162][ T5950] usb 4-1: Product: syz [ 200.838618][ T5950] usb 4-1: Manufacturer: syz [ 200.843232][ T5950] usb 4-1: SerialNumber: syz [ 200.851193][ T5950] usb 4-1: config 0 descriptor?? [ 200.859853][ T5950] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 200.944994][ T5932] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 201.094914][ T5932] usb 3-1: Using ep0 maxpacket: 32 [ 201.102395][ T5932] usb 3-1: config index 0 descriptor too short (expected 8242, got 50) [ 201.110967][ T5932] usb 3-1: config 0 has an invalid interface number: 234 but max is 0 [ 201.119670][ T5932] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.130450][ T5932] usb 3-1: config 0 has no interface number 0 [ 201.136989][ T5932] usb 3-1: config 0 interface 234 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.148153][ T5932] usb 3-1: config 0 interface 234 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 201.158259][ T5932] usb 3-1: config 0 interface 234 has no altsetting 0 [ 201.167722][ T5932] usb 3-1: New USB device found, idVendor=0781, idProduct=0200, bcdDevice=3c.a2 [ 201.177875][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.186835][ T5932] usb 3-1: Product: syz [ 201.196802][ T5932] usb 3-1: Manufacturer: syz [ 201.201449][ T5932] usb 3-1: SerialNumber: syz [ 201.227402][ T5932] usb 3-1: config 0 descriptor?? [ 201.454479][ T5932] ums-sddr09 3-1:0.234: USB Mass Storage device detected [ 201.469299][ T5912] usb 1-1: new low-speed USB device number 61 using dummy_hcd [ 201.545642][ T5932] ums-sddr09 3-1:0.234: probe with driver ums-sddr09 failed with error -22 [ 201.596049][ T5932] usb 3-1: USB disconnect, device number 63 [ 201.647290][ T5912] usb 1-1: config 2 has an invalid interface number: 35 but max is 0 [ 201.658691][ T5912] usb 1-1: config 2 has no interface number 0 [ 201.664993][ T5912] usb 1-1: config 2 interface 35 has no altsetting 0 [ 201.676624][ T5912] usb 1-1: string descriptor 0 read error: -22 [ 201.677860][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.684197][ T5912] usb 1-1: New USB device found, idVendor=1d19, idProduct=0100, bcdDevice=7a.e9 [ 201.695510][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.702901][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.925364][ T8039] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.934318][ T8039] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.944376][ T5912] usb 1-1: USB disconnect, device number 61 [ 202.079849][ T5950] gspca_sonixj: reg_w1 err -71 [ 202.125331][ T5950] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 202.138123][ T5950] usb 4-1: USB disconnect, device number 27 [ 202.315038][ T5932] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 202.475389][ T5932] usb 3-1: Invalid ep0 maxpacket: 32 [ 202.615269][ T5932] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 202.682374][ T5184] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 202.755072][ T24] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 202.784922][ T5932] usb 3-1: Invalid ep0 maxpacket: 32 [ 202.790989][ T5932] usb usb3-port1: attempt power cycle [ 202.935907][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 202.944650][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.960096][ T24] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 202.971731][ T24] usb 1-1: New USB device found, idVendor=10d2, idProduct=7186, bcdDevice=23.a0 [ 202.981435][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.989741][ T24] usb 1-1: Product: syz [ 202.994048][ T24] usb 1-1: Manufacturer: syz [ 202.999142][ T24] usb 1-1: SerialNumber: syz [ 203.007629][ T24] usb 1-1: config 0 descriptor?? [ 203.118186][ T8071] netlink: 'syz.3.586': attribute type 22 has an invalid length. [ 203.126294][ T8071] netlink: 14380 bytes leftover after parsing attributes in process `syz.3.586'. [ 203.146642][ T5932] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 203.176338][ T5932] usb 3-1: Invalid ep0 maxpacket: 32 [ 203.218906][ T5919] usb 1-1: USB disconnect, device number 62 [ 203.321287][ T5932] usb 3-1: new low-speed USB device number 67 using dummy_hcd [ 203.345599][ T5932] usb 3-1: Invalid ep0 maxpacket: 32 [ 203.352639][ T5932] usb usb3-port1: unable to enumerate USB device [ 203.454948][ T5954] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 203.584943][ T5954] usb 4-1: device descriptor read/64, error -71 [ 203.825100][ T5954] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 203.955162][ T5954] usb 4-1: device descriptor read/64, error -71 [ 204.065042][ T5932] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 204.073151][ T5954] usb usb4-port1: attempt power cycle [ 204.226563][ T5932] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 204.240802][ T5932] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 204.250087][ T5932] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 204.258314][ T5932] usb 1-1: SerialNumber: syz [ 204.414981][ T5954] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 204.445676][ T5954] usb 4-1: device descriptor read/8, error -71 [ 204.671807][ T8080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 204.685225][ T5954] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 204.701688][ T8080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 204.705746][ T5954] usb 4-1: device descriptor read/8, error -71 [ 204.826296][ T5954] usb usb4-port1: unable to enumerate USB device [ 204.930239][ T5932] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 205.031503][ T8088] fuse: Bad value for 'fd' [ 205.132854][ T5950] usb 1-1: USB disconnect, device number 63 [ 205.226427][ T8098] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.236699][ T8098] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.517037][ T8114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.526226][ T8114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 205.925089][ T5958] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 206.091138][ T5958] usb 1-1: unable to get BOS descriptor or descriptor too short [ 206.109241][ T8120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.121503][ T8120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.121805][ T5958] usb 1-1: config 4 has an invalid interface number: 210 but max is 0 [ 206.139401][ T5958] usb 1-1: config 4 has no interface number 0 [ 206.145883][ T5958] usb 1-1: config 4 interface 210 has no altsetting 0 [ 206.156346][ T5958] usb 1-1: New USB device found, idVendor=17a1, idProduct=0128, bcdDevice= 2.7d [ 206.165533][ T5958] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.173813][ T5958] usb 1-1: Product: syz [ 206.178269][ T5958] usb 1-1: Manufacturer: syz [ 206.183089][ T5958] usb 1-1: SerialNumber: syz [ 206.261858][ T8123] 9pnet_fd: Insufficient options for proto=fd [ 206.305044][ T5950] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 206.399140][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.409334][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.421615][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.431975][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.447736][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.460478][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.471213][ T5950] usb 3-1: config 0 has an invalid interface number: 93 but max is 0 [ 206.481177][ T5950] usb 3-1: config 0 has no interface number 0 [ 206.492794][ T5950] usb 3-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 206.495582][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.504057][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.522957][ T5950] usb 3-1: Product: syz [ 206.531233][ T5950] usb 3-1: Manufacturer: syz [ 206.536754][ T5950] usb 3-1: SerialNumber: syz [ 206.547364][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.561923][ T5950] usb 3-1: config 0 descriptor?? [ 206.780061][ T5950] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 206.782430][ T8134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.816836][ T5950] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 206.836972][ T5950] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 206.840254][ T8116] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 206.852138][ T5950] usb 3-1: media controller created [ 206.859144][ T8134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.870912][ T8116] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 206.877210][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.012884][ T5950] DVB: Unable to find symbol dib7000p_attach() [ 207.020361][ T5950] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 207.051711][ T5950] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 207.065932][ T5950] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 207.071349][ T5958] gspca_main: t613-2.14.0 probing 17a1:0128 [ 207.076945][ T5950] usb 3-1: media controller created [ 207.092519][ T5958] gspca_t613: unknown sensor 0000 [ 207.100621][ T5958] t613 1-1:4.210: probe with driver t613 failed with error -22 [ 207.108260][ T5950] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.142732][ T5958] usb 1-1: USB disconnect, device number 64 [ 207.160451][ T5950] dib0700: the master dib7090 has to be initialized first [ 207.185672][ T8144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.195587][ T5950] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 207.201303][ T8144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.275401][ T5950] rc_core: IR keymap rc-dib0700-rc5 not found [ 207.286681][ T5950] Registered IR keymap rc-empty [ 207.292146][ T5950] dvb-usb: could not initialize remote control. [ 207.299120][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.299582][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.311543][ T5950] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 207.335632][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.346755][ T5950] usb 3-1: USB disconnect, device number 68 [ 207.353243][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.381624][ T5950] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 207.416024][ T5912] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 207.568562][ T8148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.579278][ T8148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.589930][ T5912] usb 4-1: not running at top speed; connect to a high speed hub [ 207.606715][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.623981][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.654403][ T5912] usb 4-1: language id specifier not provided by device, defaulting to English [ 207.671495][ T5912] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.687563][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.705523][ T5912] usb 4-1: Manufacturer: 飧务팹⟝㷅ꦧ엖ꀰ歿庉缜䢾߲眡↛겧効＄爯䎤臄꟒桥㫕矊讍᫛䗀鞃⹸㾋䎘呗섙㾫蚽慨鏁怣鱆㘖⥣ꮲ매⍹㱵ෘ骮󼆴햫嚆䬤ᾮ來㽱데⡪ભ휡Ƙ慙淫䐹滳ḍ歄Ԗ緀툨ɲ菲隚站폌⪭覷沓咠摬뿻誮䛛㴨㛆Ꮀꄌ㦐 [ 207.727709][ T8157] mmap: syz.1.613 (8157) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 207.818718][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.827881][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.843587][ T8162] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 207.853356][ T8162] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.866677][ T5950] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 207.944971][ T5954] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 207.969993][ T5912] usb 4-1: 0:2 : does not exist [ 207.987041][ T5912] usb 4-1: USB disconnect, device number 32 [ 208.027224][ T5950] usb 3-1: unable to get BOS descriptor or descriptor too short [ 208.037224][ T5950] usb 3-1: config 4 has an invalid interface number: 136 but max is 0 [ 208.048751][ T5950] usb 3-1: config 4 has no interface number 0 [ 208.055804][ T5950] usb 3-1: config 4 interface 136 altsetting 0 has an invalid endpoint descriptor of length 2, skipping [ 208.067879][ T5950] usb 3-1: config 4 interface 136 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 208.084661][ T5950] usb 3-1: New USB device found, idVendor=2040, idProduct=4903, bcdDevice=83.27 [ 208.094235][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.102488][ T5950] usb 3-1: Product: syz [ 208.107088][ T5950] usb 3-1: Manufacturer: syz [ 208.111726][ T5950] usb 3-1: SerialNumber: syz [ 208.117366][ T5954] usb 1-1: config 8 has an invalid interface number: 152 but max is 0 [ 208.132234][ T5954] usb 1-1: config 8 has no interface number 0 [ 208.139247][ T5954] usb 1-1: config 8 interface 152 has no altsetting 0 [ 208.148800][ T5954] usb 1-1: New USB device found, idVendor=102c, idProduct=6251, bcdDevice=57.b9 [ 208.158522][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.170584][ T5954] usb 1-1: Product: syz [ 208.174941][ T5954] usb 1-1: Manufacturer: syz [ 208.180032][ T5954] usb 1-1: SerialNumber: syz [ 208.372326][ T8150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.383182][ T8150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.469629][ T5954] gspca_main: etoms-2.14.0 probing 102c:6251 [ 208.567378][ T5954] usb 1-1: USB disconnect, device number 65 [ 208.579965][ T5950] hdpvr 3-1:4.136: Could not find bulk-in endpoint [ 208.605684][ T5950] hdpvr 3-1:4.136: probe with driver hdpvr failed with error -12 [ 208.640091][ T5950] usb 3-1: USB disconnect, device number 69 [ 208.762637][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.774199][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.137989][ T8191] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 209.198971][ T8191] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.354173][ T8208] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 209.364135][ T8208] VFS: Can't find a romfs filesystem on dev nullb0. [ 209.364135][ T8208] [ 209.565063][ T5950] usb 3-1: new full-speed USB device number 70 using dummy_hcd [ 209.716869][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10 [ 209.728315][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 209.739359][ T5912] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 209.747044][ T5950] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 209.759417][ T5950] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 22518, setting to 64 [ 209.772872][ T5950] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 209.783167][ T5950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.791217][ T5950] usb 3-1: Product: syz [ 209.806866][ T5950] usb 3-1: Manufacturer: syz [ 209.811850][ T5950] usb 3-1: SerialNumber: syz [ 209.819889][ T5950] usb 3-1: config 0 descriptor?? [ 209.827267][ T8206] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 209.835592][ T8206] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 209.846473][ T5950] usb 3-1: ucan: probing device on interface #0 [ 209.852905][ T5950] usb 3-1: ucan: invalid endpoint configuration [ 209.871571][ T5950] usb 3-1: ucan: probe failed; try to update the device firmware [ 209.923473][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 209.957392][ T5912] usb 4-1: New USB device found, idVendor=056e, idProduct=00e6, bcdDevice= 0.00 [ 209.982925][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.011346][ T5912] usb 4-1: config 0 descriptor?? [ 210.036884][ T8218] syzkaller1: entered promiscuous mode [ 210.046421][ T8206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.049845][ T8218] syzkaller1: entered allmulticast mode [ 210.057332][ T8206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.084470][ T5954] usb 3-1: USB disconnect, device number 70 [ 210.233165][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.267575][ T8227] netlink: 'syz.1.634': attribute type 10 has an invalid length. [ 210.271379][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.313704][ T8227] veth0_vlan: left promiscuous mode [ 210.328186][ T8227] veth0_vlan: entered promiscuous mode [ 210.342912][ T8227] team0: Device veth0_vlan failed to register rx_handler [ 210.510298][ T8213] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.561208][ T8213] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.593870][ T8236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.610393][ T8236] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.774737][ T5912] usbhid 4-1:0.0: can't add hid device: -71 [ 210.792523][ T5912] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 210.816205][ T5912] usb 4-1: USB disconnect, device number 33 [ 210.935056][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 211.085033][ T10] usb 3-1: Using ep0 maxpacket: 16 [ 211.094127][ T10] usb 3-1: config 0 has no interfaces? [ 211.099837][ T10] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 211.109093][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.119150][ T10] usb 3-1: config 0 descriptor?? [ 211.128643][ T1615] usb 1-1: new low-speed USB device number 66 using dummy_hcd [ 211.249356][ T8247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.260660][ T8247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.275994][ T1615] usb 1-1: device descriptor read/64, error -71 [ 211.332372][ T8240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.359216][ T8240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.372735][ T5912] usb 3-1: USB disconnect, device number 71 [ 211.385928][ T8249] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 211.396512][ T8249] netlink: 'syz.3.640': attribute type 1 has an invalid length. [ 211.527115][ T1615] usb 1-1: new low-speed USB device number 67 using dummy_hcd [ 211.665052][ T1615] usb 1-1: device descriptor read/64, error -71 [ 211.775565][ T1615] usb usb1-port1: attempt power cycle [ 211.945071][ T5957] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 212.115594][ T1615] usb 1-1: new low-speed USB device number 68 using dummy_hcd [ 212.116277][ T5957] usb 4-1: Using ep0 maxpacket: 8 [ 212.145556][ T1615] usb 1-1: device descriptor read/8, error -71 [ 212.167065][ T5957] usb 4-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 212.185968][ T5957] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.198600][ T5957] usb 4-1: Product: syz [ 212.208432][ T5957] usb 4-1: Manufacturer: syz [ 212.213090][ T5957] usb 4-1: SerialNumber: syz [ 212.220495][ T5957] usb 4-1: config 0 descriptor?? [ 212.229471][ T5957] gspca_main: sq930x-2.14.0 probing 2770:930c [ 212.295097][ T8261] md: array md2 already initialised! [ 212.405968][ T1615] usb 1-1: new low-speed USB device number 69 using dummy_hcd [ 212.409978][ T8267] mkiss: ax0: crc mode is auto. [ 212.449589][ T5912] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 212.459055][ T1615] usb 1-1: device descriptor read/8, error -71 [ 212.565462][ T1615] usb usb1-port1: unable to enumerate USB device [ 212.624763][ T5912] usb 3-1: unable to get BOS descriptor or descriptor too short [ 212.634371][ T5912] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 212.645901][ T5912] usb 3-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 212.663247][ T5912] usb 3-1: config 1 interface 0 has no altsetting 1 [ 212.682643][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 212.694495][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.703577][ T5912] usb 3-1: Product: syz [ 212.708272][ T5912] usb 3-1: Manufacturer: syz [ 212.713128][ T5912] usb 3-1: SerialNumber: syz [ 212.727586][ T5912] smsusb:smsusb_probe: board id=8, interface number 0 [ 212.747514][ T8270] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 212.929583][ T5912] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 212.937135][ T5912] smsusb 3-1:1.0: probe with driver smsusb failed with error -71 [ 212.949016][ T5912] usb 3-1: USB disconnect, device number 72 [ 213.040466][ T5957] gspca_sq930x: ucbus_write failed -71 [ 213.264932][ T5957] gspca_sq930x: Sensor ov9630 not yet treated [ 213.271533][ T5957] sq930x 4-1:0.0: probe with driver sq930x failed with error -22 [ 213.283815][ T5957] usb 4-1: USB disconnect, device number 34 [ 213.647023][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.662835][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 213.785096][ T5932] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 213.824909][ T8285] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 213.836977][ T8285] overlayfs: missing 'lowerdir' [ 213.946179][ T5932] usb 3-1: Using ep0 maxpacket: 8 [ 213.954650][ T5932] usb 3-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 213.965378][ T5932] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.973414][ T5932] usb 3-1: Product: syz [ 213.977955][ T5932] usb 3-1: Manufacturer: syz [ 213.982568][ T5932] usb 3-1: SerialNumber: syz [ 213.991113][ T5932] usb 3-1: config 0 descriptor?? [ 214.004263][ T5932] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 214.039826][ T8290] loop2: detected capacity change from 0 to 8 [ 214.047307][ T8290] Dev loop2: unable to read RDB block 8 [ 214.053083][ T8290] loop2: unable to read partition table [ 214.060166][ T8290] loop2: partition table beyond EOD, truncated [ 214.068247][ T8290] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 214.455087][ T5957] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 214.515668][ T8297] nbd0: detected capacity change from 0 to 127 [ 214.531207][ T5866] block nbd0: Receive control failed (result -104) [ 214.531547][ T5995] block nbd0: Send control failed (result -32) [ 214.539472][ T5184] block nbd0: Receive control failed (result -32) [ 214.549609][ T5995] block nbd0: Request send failed, requeueing [ 214.572698][ T57] block nbd0: Dead connection, failed to find a fallback [ 214.581710][ T57] block nbd0: shutting down sockets [ 214.588059][ T57] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 214.600302][ T57] Buffer I/O error on dev nbd0, logical block 3, async page read [ 214.624977][ T5957] usb 1-1: Using ep0 maxpacket: 8 [ 214.640431][ T5957] usb 1-1: too many configurations: 178, using maximum allowed: 8 [ 214.690977][ T5957] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 214.713707][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=8 [ 214.725316][ T5957] usb 1-1: Product: syz [ 214.729792][ T5957] usb 1-1: Manufacturer: syz [ 214.735537][ T5957] usb 1-1: SerialNumber: syz [ 214.744954][ T5957] usb 1-1: config 0 descriptor?? [ 214.754433][ T5957] gspca_main: 047d:5003 too many config [ 214.952132][ T8316] loop2: detected capacity change from 0 to 8 [ 214.953390][ T5957] usb 1-1: USB disconnect, device number 70 [ 214.966417][ T8316] Dev loop2: unable to read RDB block 8 [ 214.972233][ T8316] loop2: unable to read partition table [ 214.983436][ T8316] loop2: partition table beyond EOD, truncated [ 214.992093][ T8316] loop_reread_partitions: partition scan of loop2 (被x^> ) failed (rc=-5) [ 215.233929][ T8333] [ 215.236302][ T8333] ====================================================== [ 215.245159][ T8333] WARNING: possible circular locking dependency detected [ 215.252296][ T8333] syzkaller #0 Not tainted [ 215.256888][ T8333] ------------------------------------------------------ [ 215.264613][ T8333] syz.1.668/8333 is trying to acquire lock: [ 215.270695][ T8333] ffffffff8e645220 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_noprof+0x45/0x6e0 [ 215.280972][ T8333] [ 215.280972][ T8333] but task is already holding lock: [ 215.289529][ T8333] ffffffff8e62d270 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x45/0x320 [ 215.299081][ T8333] [ 215.299081][ T8333] which lock already depends on the new lock. [ 215.299081][ T8333] [ 215.309502][ T8333] [ 215.309502][ T8333] the existing dependency chain (in reverse order) is: [ 215.319151][ T8333] [ 215.319151][ T8333] -> #8 (slab_mutex){+.+.}-{4:4}: [ 215.326854][ T8333] lock_acquire+0x120/0x360 [ 215.332436][ T8333] __mutex_lock+0x187/0x1350 [ 215.338059][ T8333] flush_all_rcu_sheaves+0x21/0x1c0 [ 215.344176][ T8333] kvfree_rcu_barrier+0x13/0x160 [ 215.349697][ T8333] kmem_cache_destroy+0x2e/0x170 [ 215.355732][ T8333] p9_client_destroy+0x491/0x4e0 [ 215.361383][ T8333] v9fs_session_close+0x4f/0x200 [ 215.367226][ T8333] v9fs_kill_super+0x5c/0x90 [ 215.372471][ T8333] deactivate_locked_super+0xbc/0x130 [ 215.378676][ T8333] v9fs_mount+0x805/0xa50 [ 215.383625][ T8333] legacy_get_tree+0xfd/0x1a0 [ 215.389022][ T8333] vfs_get_tree+0x92/0x2b0 [ 215.394066][ T8333] do_new_mount+0x302/0x9e0 [ 215.399307][ T8333] __se_sys_mount+0x313/0x410 [ 215.404649][ T8333] do_syscall_64+0xfa/0xfa0 [ 215.409699][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.416224][ T8333] [ 215.416224][ T8333] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 215.425537][ T8333] lock_acquire+0x120/0x360 [ 215.430676][ T8333] cpus_read_lock+0x42/0x160 [ 215.435977][ T8333] static_key_slow_inc+0x12/0x30 [ 215.441995][ T8333] tcp_md5_do_add+0x21f/0x3a0 [ 215.447681][ T8333] tcp_v4_parse_md5_keys+0x412/0x600 [ 215.453581][ T8333] do_tcp_setsockopt+0x11dc/0x1f20 [ 215.459610][ T8333] do_sock_setsockopt+0x17c/0x1b0 [ 215.465733][ T8333] __x64_sys_setsockopt+0x13f/0x1b0 [ 215.472274][ T8333] do_syscall_64+0xfa/0xfa0 [ 215.477574][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.484975][ T8333] [ 215.484975][ T8333] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 215.497877][ T8333] lock_acquire+0x120/0x360 [ 215.503023][ T8333] lock_sock_nested+0x48/0x100 [ 215.508640][ T8333] inet_shutdown+0x6a/0x390 [ 215.513686][ T8333] nbd_mark_nsock_dead+0x2e9/0x560 [ 215.519384][ T8333] sock_shutdown+0x15e/0x260 [ 215.524686][ T8333] nbd_config_put+0x342/0x790 [ 215.525158][ T5932] gspca_sonixj: reg_w1 err -110 [ 215.530060][ T8333] nbd_release+0xfe/0x140 [ 215.530094][ T8333] bdev_release+0x536/0x650 [ 215.530114][ T8333] blkdev_release+0x15/0x20 [ 215.552041][ T8333] __fput+0x44c/0xa70 [ 215.556922][ T8333] task_work_run+0x1d4/0x260 [ 215.563743][ T8333] exit_to_user_mode_loop+0xe9/0x130 [ 215.570134][ T8333] do_syscall_64+0x2bd/0xfa0 [ 215.574960][ T5932] sonixj 3-1:0.0: probe with driver sonixj failed with error -110 [ 215.577489][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.577527][ T8333] [ 215.577527][ T8333] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 215.577557][ T8333] lock_acquire+0x120/0x360 [ 215.605256][ T8333] __mutex_lock+0x187/0x1350 [ 215.610382][ T8333] nbd_queue_rq+0x257/0xf10 [ 215.615537][ T8333] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 215.621884][ T8333] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 215.628833][ T8333] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 215.635529][ T8333] blk_mq_run_hw_queue+0x348/0x4f0 [ 215.643461][ T8333] blk_mq_dispatch_list+0xd0c/0xe00 [ 215.649643][ T8333] blk_mq_flush_plug_list+0x469/0x550 [ 215.655965][ T8333] __blk_flush_plug+0x3d3/0x4b0 [ 215.661503][ T8333] __submit_bio+0x2d3/0x5a0 [ 215.666724][ T8333] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 215.672884][ T8333] block_read_full_folio+0x599/0x830 [ 215.678713][ T8333] filemap_read_folio+0x117/0x380 [ 215.684347][ T8333] do_read_cache_folio+0x350/0x590 [ 215.690079][ T8333] read_part_sector+0xb6/0x2b0 [ 215.695390][ T8333] adfspart_check_ICS+0xa4/0xa50 [ 215.700909][ T8333] bdev_disk_changed+0x75f/0x14b0 [ 215.706508][ T8333] blkdev_get_whole+0x380/0x510 [ 215.711905][ T8333] bdev_open+0x31e/0xd30 [ 215.716758][ T8333] blkdev_open+0x457/0x600 [ 215.721804][ T8333] do_dentry_open+0x953/0x13f0 [ 215.727321][ T8333] vfs_open+0x3b/0x340 [ 215.732018][ T8333] path_openat+0x2ee5/0x3830 [ 215.737139][ T8333] do_filp_open+0x1fa/0x410 [ 215.742179][ T8333] do_sys_openat2+0x121/0x1c0 [ 215.747407][ T8333] __x64_sys_openat+0x138/0x170 [ 215.752956][ T8333] do_syscall_64+0xfa/0xfa0 [ 215.757989][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.764522][ T8333] [ 215.764522][ T8333] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 215.771831][ T8333] lock_acquire+0x120/0x360 [ 215.776867][ T8333] __mutex_lock+0x187/0x1350 [ 215.781983][ T8333] nbd_queue_rq+0xc8/0xf10 [ 215.787160][ T8333] blk_mq_dispatch_rq_list+0x4c0/0x1900 [ 215.793492][ T8333] __blk_mq_sched_dispatch_requests+0xda4/0x1570 [ 215.800432][ T8333] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 215.806999][ T8333] blk_mq_run_hw_queue+0x348/0x4f0 [ 215.813236][ T8333] blk_mq_dispatch_list+0xd0c/0xe00 [ 215.820512][ T8333] blk_mq_flush_plug_list+0x469/0x550 [ 215.827037][ T8333] __blk_flush_plug+0x3d3/0x4b0 [ 215.834336][ T8333] __submit_bio+0x2d3/0x5a0 [ 215.840558][ T8333] submit_bio_noacct_nocheck+0x2fb/0xa50 [ 215.849274][ T8333] block_read_full_folio+0x599/0x830 [ 215.856733][ T8333] filemap_read_folio+0x117/0x380 [ 215.864215][ T8333] do_read_cache_folio+0x350/0x590 [ 215.871691][ T8333] read_part_sector+0xb6/0x2b0 [ 215.878756][ T8333] adfspart_check_ICS+0xa4/0xa50 [ 215.885540][ T8333] bdev_disk_changed+0x75f/0x14b0 [ 215.891328][ T8333] blkdev_get_whole+0x380/0x510 [ 215.897608][ T8333] bdev_open+0x31e/0xd30 [ 215.903074][ T8333] blkdev_open+0x457/0x600 [ 215.908015][ T8333] do_dentry_open+0x953/0x13f0 [ 215.913458][ T8333] vfs_open+0x3b/0x340 [ 215.918435][ T8333] path_openat+0x2ee5/0x3830 [ 215.923563][ T8333] do_filp_open+0x1fa/0x410 [ 215.928703][ T8333] do_sys_openat2+0x121/0x1c0 [ 215.934080][ T8333] __x64_sys_openat+0x138/0x170 [ 215.939557][ T8333] do_syscall_64+0xfa/0xfa0 [ 215.944598][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.951012][ T8333] [ 215.951012][ T8333] -> #3 (set->srcu){.+.+}-{0:0}: [ 215.959108][ T8333] lock_sync+0xba/0x160 [ 215.963874][ T8333] __synchronize_srcu+0x96/0x3a0 [ 215.969460][ T8333] elevator_switch+0x12b/0x640 [ 215.974849][ T8333] elevator_change+0x315/0x4c0 [ 215.980242][ T8333] elevator_set_default+0x186/0x260 [ 215.986048][ T8333] blk_register_queue+0x34e/0x3f0 [ 215.991707][ T8333] __add_disk+0x677/0xd50 [ 215.996838][ T8333] add_disk_fwnode+0xfc/0x480 [ 216.002127][ T8333] nbd_dev_add+0x717/0xae0 [ 216.007070][ T8333] nbd_init+0x168/0x1f0 [ 216.011864][ T8333] do_one_initcall+0x236/0x820 [ 216.017536][ T8333] do_initcall_level+0x104/0x190 [ 216.023504][ T8333] do_initcalls+0x59/0xa0 [ 216.028412][ T8333] kernel_init_freeable+0x334/0x4b0 [ 216.034329][ T8333] kernel_init+0x1d/0x1d0 [ 216.039192][ T8333] ret_from_fork+0x4bc/0x870 [ 216.044319][ T8333] ret_from_fork_asm+0x1a/0x30 [ 216.049718][ T8333] [ 216.049718][ T8333] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 216.058302][ T8333] lock_acquire+0x120/0x360 [ 216.063584][ T8333] __mutex_lock+0x187/0x1350 [ 216.070329][ T8333] elevator_change+0x1e5/0x4c0 [ 216.076886][ T8333] elevator_set_none+0x42/0xb0 [ 216.082259][ T8333] blk_mq_update_nr_hw_queues+0x598/0x1ab0 [ 216.088589][ T8333] nbd_start_device+0x17f/0xb10 [ 216.094235][ T8333] nbd_genl_connect+0x135b/0x18f0 [ 216.099930][ T8333] genl_family_rcv_msg_doit+0x215/0x300 [ 216.105999][ T8333] genl_rcv_msg+0x60e/0x790 [ 216.111034][ T8333] netlink_rcv_skb+0x208/0x470 [ 216.116952][ T8333] genl_rcv+0x28/0x40 [ 216.122641][ T8333] netlink_unicast+0x82f/0x9e0 [ 216.131815][ T8333] netlink_sendmsg+0x805/0xb30 [ 216.137465][ T8333] __sock_sendmsg+0x21c/0x270 [ 216.142839][ T8333] ____sys_sendmsg+0x505/0x830 [ 216.148463][ T8333] ___sys_sendmsg+0x21f/0x2a0 [ 216.153698][ T8333] __x64_sys_sendmsg+0x19b/0x260 [ 216.159551][ T8333] do_syscall_64+0xfa/0xfa0 [ 216.164862][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.172258][ T8333] [ 216.172258][ T8333] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 216.182193][ T8333] lock_acquire+0x120/0x360 [ 216.188056][ T8333] blk_alloc_queue+0x538/0x620 [ 216.193659][ T8333] __blk_mq_alloc_disk+0x15c/0x340 [ 216.199655][ T8333] nbd_dev_add+0x46c/0xae0 [ 216.205212][ T8333] nbd_init+0x168/0x1f0 [ 216.209904][ T8333] do_one_initcall+0x236/0x820 [ 216.215825][ T8333] do_initcall_level+0x104/0x190 [ 216.221331][ T8333] do_initcalls+0x59/0xa0 [ 216.226283][ T8333] kernel_init_freeable+0x334/0x4b0 [ 216.232284][ T8333] kernel_init+0x1d/0x1d0 [ 216.238031][ T8333] ret_from_fork+0x4bc/0x870 [ 216.246065][ T8333] ret_from_fork_asm+0x1a/0x30 [ 216.252760][ T8333] [ 216.252760][ T8333] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 216.260584][ T8333] validate_chain+0xb9b/0x2140 [ 216.266250][ T8333] __lock_acquire+0xab9/0xd20 [ 216.271765][ T8333] lock_acquire+0x120/0x360 [ 216.277271][ T8333] fs_reclaim_acquire+0x72/0x100 [ 216.285961][ T8333] kmem_cache_alloc_noprof+0x45/0x6e0 [ 216.293539][ T8333] __kmem_cache_create_args+0x19b/0x320 [ 216.300606][ T8333] ieee80211_mesh_init_sdata+0x35f/0x610 [ 216.306776][ T8333] ieee80211_setup_sdata+0x80e/0xb50 [ 216.312773][ T8333] ieee80211_if_add+0xc17/0x1390 [ 216.318685][ T8333] ieee80211_add_iface+0xb5/0x5c0 [ 216.325652][ T8333] nl80211_new_interface+0x893/0x11a0 [ 216.334768][ T8333] genl_family_rcv_msg_doit+0x215/0x300 [ 216.342787][ T8333] genl_rcv_msg+0x60e/0x790 [ 216.348258][ T8333] netlink_rcv_skb+0x208/0x470 [ 216.354109][ T8333] genl_rcv+0x28/0x40 [ 216.359187][ T8333] netlink_unicast+0x82f/0x9e0 [ 216.365850][ T8333] netlink_sendmsg+0x805/0xb30 [ 216.372125][ T8333] __sock_sendmsg+0x21c/0x270 [ 216.378119][ T8333] ____sys_sendmsg+0x505/0x830 [ 216.385932][ T8333] ___sys_sendmsg+0x21f/0x2a0 [ 216.391662][ T8333] __x64_sys_sendmsg+0x19b/0x260 [ 216.398787][ T8333] do_syscall_64+0xfa/0xfa0 [ 216.404706][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.413983][ T8333] [ 216.413983][ T8333] other info that might help us debug this: [ 216.413983][ T8333] [ 216.427009][ T8333] Chain exists of: [ 216.427009][ T8333] fs_reclaim --> cpu_hotplug_lock --> slab_mutex [ 216.427009][ T8333] [ 216.443799][ T8333] Possible unsafe locking scenario: [ 216.443799][ T8333] [ 216.454779][ T8333] CPU0 CPU1 [ 216.462958][ T8333] ---- ---- [ 216.470617][ T8333] lock(slab_mutex); [ 216.475036][ T8333] lock(cpu_hotplug_lock); [ 216.483446][ T8333] lock(slab_mutex); [ 216.491623][ T8333] lock(fs_reclaim); [ 216.496271][ T8333] [ 216.496271][ T8333] *** DEADLOCK *** [ 216.496271][ T8333] [ 216.507315][ T8333] 4 locks held by syz.1.668/8333: [ 216.513434][ T8333] #0: ffffffff8f9c7350 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 216.527458][ T8333] #1: ffffffff8f961848 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5f/0x8e0 [ 216.540334][ T8333] #2: ffff88807bca8788 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: nl80211_new_interface+0xc3/0x11a0 [ 216.555315][ T8333] #3: ffffffff8e62d270 (slab_mutex){+.+.}-{4:4}, at: __kmem_cache_create_args+0x45/0x320 [ 216.568607][ T8333] [ 216.568607][ T8333] stack backtrace: [ 216.576080][ T8333] CPU: 0 UID: 0 PID: 8333 Comm: syz.1.668 Not tainted syzkaller #0 PREEMPT(full) [ 216.576108][ T8333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 216.576126][ T8333] Call Trace: [ 216.576134][ T8333] [ 216.576140][ T8333] dump_stack_lvl+0x189/0x250 [ 216.576166][ T8333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.576181][ T8333] ? __pfx__printk+0x10/0x10 [ 216.576196][ T8333] ? print_lock_name+0xde/0x100 [ 216.576209][ T8333] print_circular_bug+0x2ee/0x310 [ 216.576225][ T8333] check_noncircular+0x134/0x160 [ 216.576240][ T8333] validate_chain+0xb9b/0x2140 [ 216.576254][ T8333] ? __mutex_trylock_common+0x153/0x260 [ 216.576312][ T8333] ? __pfx___mutex_trylock_common+0x10/0x10 [ 216.576325][ T8333] ? genl_rcv_msg+0x60e/0x790 [ 216.576341][ T8333] ? genl_rcv+0x28/0x40 [ 216.576354][ T8333] ? rcu_is_watching+0x15/0xb0 [ 216.576368][ T8333] __lock_acquire+0xab9/0xd20 [ 216.576380][ T8333] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 216.576396][ T8333] lock_acquire+0x120/0x360 [ 216.576407][ T8333] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 216.576423][ T8333] fs_reclaim_acquire+0x72/0x100 [ 216.576433][ T8333] ? kmem_cache_alloc_noprof+0x45/0x6e0 [ 216.576446][ T8333] kmem_cache_alloc_noprof+0x45/0x6e0 [ 216.576460][ T8333] ? __kmem_cache_create_args+0x19b/0x320 [ 216.576477][ T8333] __kmem_cache_create_args+0x19b/0x320 [ 216.576492][ T8333] ieee80211_mesh_init_sdata+0x35f/0x610 [ 216.576505][ T8333] ? __pfx_ieee80211_mesh_init_sdata+0x10/0x10 [ 216.576517][ T8333] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 216.576530][ T8333] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 216.576541][ T8333] ? __raw_spin_lock_init+0x45/0x100 [ 216.576556][ T8333] ieee80211_setup_sdata+0x80e/0xb50 [ 216.576572][ T8333] ieee80211_if_add+0xc17/0x1390 [ 216.576586][ T8333] ieee80211_add_iface+0xb5/0x5c0 [ 216.576597][ T8333] ? __pfx_ieee80211_add_iface+0x10/0x10 [ 216.576609][ T8333] nl80211_new_interface+0x893/0x11a0 [ 216.576622][ T8333] ? __pfx_nl80211_new_interface+0x10/0x10 [ 216.576633][ T8333] ? nl80211_pre_doit+0x4df/0x8e0 [ 216.576643][ T8333] genl_family_rcv_msg_doit+0x215/0x300 [ 216.576659][ T8333] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 216.576676][ T8333] ? bpf_lsm_capable+0x9/0x20 [ 216.576689][ T8333] ? security_capable+0x7e/0x2e0 [ 216.576701][ T8333] genl_rcv_msg+0x60e/0x790 [ 216.576716][ T8333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.576728][ T8333] ? ref_tracker_free+0x63a/0x7d0 [ 216.576739][ T8333] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 216.576747][ T8333] ? __pfx_nl80211_new_interface+0x10/0x10 [ 216.576757][ T8333] ? __pfx_nl80211_post_doit+0x10/0x10 [ 216.576765][ T8333] ? ____sys_sendmsg+0x505/0x830 [ 216.576778][ T8333] ? ___sys_sendmsg+0x21f/0x2a0 [ 216.576789][ T8333] ? __x64_sys_sendmsg+0x19b/0x260 [ 216.576800][ T8333] ? do_syscall_64+0xfa/0xfa0 [ 216.576813][ T8333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.576824][ T8333] netlink_rcv_skb+0x208/0x470 [ 216.576834][ T8333] ? __lock_acquire+0xab9/0xd20 [ 216.576844][ T8333] ? __pfx_genl_rcv_msg+0x10/0x10 [ 216.576858][ T8333] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 216.576871][ T8333] ? down_read+0x1ad/0x2e0 [ 216.576886][ T8333] genl_rcv+0x28/0x40 [ 216.576898][ T8333] netlink_unicast+0x82f/0x9e0 [ 216.576909][ T8333] ? __pfx_netlink_unicast+0x10/0x10 [ 216.576918][ T8333] ? netlink_sendmsg+0x642/0xb30 [ 216.576929][ T8333] ? skb_put+0x11b/0x210 [ 216.576940][ T8333] netlink_sendmsg+0x805/0xb30 [ 216.576953][ T8333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.576965][ T8333] ? aa_sock_msg_perm+0xf1/0x1d0 [ 216.576977][ T8333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 216.576988][ T8333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.576999][ T8333] __sock_sendmsg+0x21c/0x270 [ 216.577016][ T8333] ____sys_sendmsg+0x505/0x830 [ 216.577029][ T8333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.577043][ T8333] ? import_iovec+0x74/0xa0 [ 216.577057][ T8333] ___sys_sendmsg+0x21f/0x2a0 [ 216.577069][ T8333] ? __pfx____sys_sendmsg+0x10/0x10 [ 216.577088][ T8333] ? __fget_files+0x2a/0x420 [ 216.577099][ T8333] ? __fget_files+0x3a0/0x420 [ 216.577113][ T8333] __x64_sys_sendmsg+0x19b/0x260 [ 216.577125][ T8333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 216.577149][ T8333] ? do_syscall_64+0xbe/0xfa0 [ 216.577168][ T8333] do_syscall_64+0xfa/0xfa0 [ 216.577188][ T8333] ? lockdep_hardirqs_on+0x9c/0x150 [ 216.577207][ T8333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.577222][ T8333] ? clear_bhb_loop+0x60/0xb0 [ 216.577242][ T8333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.577258][ T8333] RIP: 0033:0x7f611bd8eec9 [ 216.577277][ T8333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.577286][ T8333] RSP: 002b:00007f6119ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.577300][ T8333] RAX: ffffffffffffffda RBX: 00007f611bfe5fa0 RCX: 00007f611bd8eec9 [ 216.577307][ T8333] RDX: 0000000024044884 RSI: 0000200000000100 RDI: 0000000000000003 [ 216.577314][ T8333] RBP: 00007f611be11f91 R08: 0000000000000000 R09: 0000000000000000 [ 216.577321][ T8333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 216.577327][ T8333] R13: 00007f611bfe6038 R14: 00007f611bfe5fa0 R15: 00007fff34b85e98 [ 216.577337][ T8333] [ 217.144147][ T1615] usb 3-1: USB disconnect, device number 73