last executing test programs: 9m0.360741764s ago: executing program 3 (id=1982): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bb", 0x48}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b", 0x20}], 0x2}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f00000001c0)=""/153, 0x99}], 0x2}, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000055aaffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) 8m59.999743824s ago: executing program 3 (id=1988): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100", 0x7) r2 = socket$can_j1939(0x1d, 0x2, 0x7) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x4) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@private0, 0x73, r5}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r5}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x80) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x11}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) socket$kcm(0x21, 0x2, 0x2) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100", 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_int(r3, 0x0, 0x18, &(0x7f0000000000)=0xffffff7e, 0x4) (async) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000080)={@private0, 0x73, r5}) (async) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r5}) (async) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r5, 0x1, {0x0, 0x0, 0x4}, 0xfe}, 0x18) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x48}}, 0x80) (async) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{0x0, 0x11}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) (async) 8m59.581994116s ago: executing program 3 (id=1989): mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x2000014, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) rmdir(&(0x7f0000000040)='./file0/../file0/file0\x00') read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000c280)="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", 0x2000, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)={0x90, 0x0, 0x6, {0x4, 0x1, 0x0, 0x0, 0x1, 0x0, {0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x4000, 0xfffffffd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="e605ee59ff948f02a0b50adc3c8f1b0f3a30057addb4536e05a81b6fc628c8526442afca55c2d5e2ca04610b710a0bf051d8f7cb91b68f5367faa3c8d1eb3ed17650c99d406284b538ecba9a278e67a4433502b6c5904267918cabd3ed7d8dbb09fdcd383a19b5620f3b682e46a5ad13a5e35daea7586b8ac0661a79be5086cb2b3f7a2c9d60a3299dc29cf10bddf597954de489587755d4e6cd87d6db8f1ff297c6f066bf38fb564f8d63129aadc0773d0a81b91b0a232ecda4a98c0483b33c709c702a9ef7684120f3cb268a1ec1eeff7228da793227b8de086d04ba722b58c491c3390fee4ab338ee3772adddd22990020d288acff920084cc0fa90f9cce095ecb2ec43132a589d3b1b7bf0cf518f3059c44d5ee5d18dbb8c9357eeadf569819a16b3a738206a83d98e73e0f6cdd4d72741df4e63dd7829694a3b505b294accd83c61bb3d4acfbc10e5d4180b513dacfaa08dc98115437a87419f04e1c6d105b5db1450b57bd0bfdbcd0cb15ba73ce5a213c3e0725786ff2af32d6c209f3695bfd944e403b1e3964c3f2ed0fa3ff2165be735750200808835f381d5a23b439953bfd87f04422596d35c3c9aecb0b9ef6e29f7468b0ccb05cfec9eb7c2e04408c1ed9792b8e5a426ee69ed5861486cbbf77973adc10a4ee5e37449bafb9b5502475802246929825cb1c60322f453bbb7eaf58c890fdd1ae4020b1c7d62ac0118070269cf74ef0843e4f38a51e088e9343296a1d2b3301cdbce8e357a5fe38684a800c9f4ba41a21948f5ca333d17353ac9a13c941e177d7d74ebdfd40fec527259eaa39d3b537324f7074984803046e2864e42641e9f203561ff0eaeed5b37439b54a0225884b5f884637d2f1ff101020b30b8c9a4238178db4b94357aae0c7f956c6985b655228a603665387810f10e8d8b6bfa745618dd3914101a0eccb543e0f82898fab7396d43d01b0f3d477f799b0a8469c26cd4b142a649b927a7b9b7bca66310fced1c066dfe334464d68627666f94f0fe43a60b4168273ddf2c74ab352416d451eba71181d57f27af9231a3e7d0b17a7a3e104fe387a29341e6eb82a751b5c584662ca74814a6c93ed9ea0c9ac11d74f2a2bdaded71f80e041cf886a55d35993bf45010a7f418543c4ee2f9ac8279fc1b721faa864caf3d5e96dcc6fd03b12bded14f6cb4e799bda7397c5580817473975b5bbfe4f298425160c532947292568e773c5c51ddf0deff7c8b9107e9b285f3e53f428cdc522a2589729c19bed7f0e90ea75b064e2c8b024f8634c075bbcc632f7e8bd49b87c061c2ddc94bee46a845441329c30e2c1b6c4c78afe46dc1a9ad3d31c0aee2d4fcd60f4d3454b05a3ae4922caf7f4e58a461648d5ccb8086d66783ed47fa9b6b53e49b6b4601aa5397a1e1d9f34a7038227cd242cf936b9a18d5d273dd0503aa2262f32b8462bf50b6bd9fd4e3ac20218e43fbd659ab9f9840d14f6bfc94e7cc69aa83e2abf93254d65a97c9ab16daca595670d8f0ff180bf6a38ada3484f1ae13ef91512a51afa7e3259ecfd071896ea3911a4dc6bc8a8cc008f9b65178d065fb6aa9528457ea50e9629f9f40b26f4378cb3a95f8c936444586ab530aea865850c186013391d1dd6dc695ff8737570f8f425ac33c3d5553f608678b1c46e5233b7754c1df1e6413f61fd65376921e2008f0a7a563178e53654765797428d2bd1977a38f1404858f192d6336b6242c11f4eed71158650d79ff5e660a08fb1383d3536ee323c934053d2b890d4e7d5fd3e364d5aaf9d16ca5c8eebabf13075b8a46ee321622c8bb0394d00e3fb7ad2012e86ae16dc68fe72912229151178af5d94936fdb292ff0faf952eee56d9fac72b313f30aa491b8e22531901a20a133e17a985ca1c0d1516ed5ce14a9b5b0904185da5203438fb032a212136eeb258131cb08a7c9cf518714f112634a0fe661e99a3d554b5ed46745e438c1f4d8cb1ab7d4895c4c13a55fecf803ad6bcfbfe03db949ea47faeb60bcdf9e0e54085d4e6956e261e21c140ef8032c757d33f03dfa2ca75f4aa416093d7aa527b9538682a617169b6da3ad5a9e4e2dd84c1cb5219b0bc96023597fdb70a82ff6da5c3927656367d61732a173cfe630d05c11057279e8622d9a2a4998400696caa15e2e9052035a6429ff5e81714ea0c01e383213476f69367e2fb8f8965b1d201cfee99821de8f7b716c277ea220da44f41d065e29a3baec4597e1286e517181b355074651a10ccab76acf36e26c435f3f4ec7a4b61947cc89ab078af2ec22e5528a05eb4277a51d1a597f84bb9e7c1f61a9ad27aa260ac60d64894b0b12160923034e633874426b800af1f9b4bb9db55cb64677b04d4b96db4c05260f4720b140b41ecac16ca26efced15d5deef397afb6b20f438a268873e5de4cccb0892b7ea94b1068db0d73c779012bb17c3a4af2bb48a8aca32dacfeaea3701aef6a8d318eac51aa6971429836c768da24d118fef4dc1ba2069991419db1806a3206ca992108f67a6316dbe3b8c009ac7b203fbf21a7010a0d10dc4ca5b7833b7d5c5086760c55df4eed9a227be6801ea3921409b8f31aab770bbf08107bcff1e98074af573ce4e9b6eda991e822b218c311a12669b3b048497fe676a448189937157ff406fb4705924fc693eb626b7c43fed16e0cd5c1719c915cbf97357f215edb78120da490acc3d95d5ff3d6574445df0fb76b2bfb1264c775d1011b3d42ee64ba7d60dea27f258a9fd57bc9d640bdd6bda7701445040abceb5b28c9d4877e0f2a85620fc62cf414a32569fe4f9bded7bdcb7d0f6aa90cb16129b4bf768af5095a977f6df426f438f16d3804a13f9b2941492c8daf2c3f0715c246ecd236d404b75984c9c3b0102cb8b302dda1019cfa5d9dd925e89845d90b85251953e156ce9bd5f889d2637c76c6b7867b60681d5be01251c825059be4f0cfb9789d8ba1a300bacc4b6a71e1f56c333227b8ce54f78636bfae648270d8c64b3681a7b3812fbbb60853b8d07df0c1856c8c5f2d84431763782830befb26b7a88e7aecd02d1600a05da658de59944873810f1fa12f032abae373872ae8729db6dd055c3c5c5efb4508df9116223172ec7df58a64062357ae6adb2a0313a1523986f3790503eb2ce547cfc86c7f5c8d91f320158d6f4005441f3589688ca0747a6dfdae01bd3f69ee006342f1ee326a62d9d45ac144d05e25fbe6e8f8faada6a62d8b6596b2a63d4c8a193ac6f766f7e494a449c0296bb46e0b930c4dd798a09d914faa518ac77807e9e98ec4a5b9a0848651cbd01ca1c0571ea03575902874755af79650d2aa8c6fbea2738e77de7d26962253c25cbaa2f497e8ee710a73360ae5b392ead41f90a83eb528c8994bbb7f0b3f2d22d3c1efdc5e0a5dc5e15a3c673cf0c7dd8ad4c98d6fcd077eac9648328f0f999063421fb9947751cfea199c59ee51000822a3b282f7c85d3d17910485d88f1e1f4dfd8464f8b827db9508a81734958fc17986185eaab1e0bd53da353d9bf170bc04d45a38ba094065fddc1b25c672417469e85313e8afe14d41e9ff6750c442f4e1ccf6d419fc75a7b963036b7d16164926fe4ebe049e650d829983216f04cb226c6f4dae60d01e4582e3c11fae682bc8d053f0167dd1c001627bbd099be1eb88284793f51653939a7507e25544fcdcc1d976393fc412c72aae8295ad7afb37317914f4b9fc6ecfb3968da1c313695827c6141326be5a98fe9ec22639e886b42fe432bd69cd264e6ea1a4d1e1995f2184f16f96e766306eda3ca811c3e29d58e5386be61a5695d3a2639d6502ab2c9a3b3363fdec05ffe933c4574dcf80a61f54ffa9d972305b4bcd16dedc3a068043a04e09b48db8b189a5cb578e15a494c2130590e99086da70dce30a83c3b888c29dd30475b7df13e89af9464f9c34e614717894a2368670dac9bfdf9fdd6dac019e52dc12feb4ab1397d82c4f8061087b1d6c7eadb8992fa279afd5d30915e909ce0e9854957d293c9da10f75b53fc4f69b09d698104b063a4ca1d6f52b074ae3a8c792369458594581ccdf6abb299fbe2091379c3425ad0ac2d85528c338df92e9d8b7607fd33734c7198d7135675d2a82937b821ebacba870973e60b88892d73ef75c39a6525cebf42741285832652f3d25b1c7b5889ca6fe02b11d6bbb79ee2b90c5daa5bdca244a81e0c3fc25ffeef7f5d55894d4f371f3a6fb6232831391f374905118275924e419d15ee87a34a317613de6129716766aff08becb056c714ce7cf1e585e8d591c722c3d12d2521826e0f2be0a2f30e2d3b3969f3dee34ef36152a1699fee3aef25bc365786d8ccb4f9cd6410ab7dc86a9a081438316f0caf4a384dc586a7aedf553e4126ffb85a60da368d10f9fbd8e3a79bd343b27813860835ce980c02d537c35a13e45ef4a3fc475be675091cd01fee4d04be8d23fe8e41fe0f6a1d38bbb8d5b5c7698c70402fe582665c14ff17cb6aadbad209e9326fad68491fff07acc0aeb5548fc99731b00868b5250f9e5f660fc0a966d540e2608b45ef08bc74fc65481985e9867f2aa673f847fd7138d7ebad822a3d7657d27b50c08fc16ef6df10fb6cd354ab83743762631f91f3f75c7c588eab3f7489bb89486f8254c4206f0b31311cba1695e51aab8ceea75ee3130bcb9d82fe93f6d8e4c8adddec30a1863a72a006620e40d89efdfef9c47f54ab1c4d138fd6cf9b02c1a585064f9bb418252002e96e817d903cf858c146233da56d000d6a8cbf7be2379121920b02287588881c85a69223bf3b0f5259270f19af7135cd57eacf2f1e992a187bd1bfba465da2b3451adf04e5c5562cd9890d075046b622f668c81d1d21197adbbe3eb8c8f1ec61f90ede4952e2fd06e94dd062bc66de1e18050477c1ce393bc1faaa93f67c34066c6c00c132fb84050931639d2119ea9a95b9778f9dc831f9f04530e4855984849580b3490ffba308e27b7e298dd894e1786bddd90753ad35fd74c7b2a6aee07b142e55c77d9dd454dadaee8e805f264317c871a5789e1709274a740127cb29c7dd454e92d648322e372b3b67b0c0aa38c33e9337601fd7f3107c4a01a2eca962f2078a09cc78d583f62fb0f32ac815abffa9c548926eb9ea4e572ef8cf7c8fd3ee97a1e10e4036bd0244fe1045a0b1e2006489e117208db0cbf91539f8d52d6c14eeb38be408569e29175f8814d065b6fb7679dba4200d93e25020abd6b574f759e611227de767969bc5ba179c708dbfb5bb86f1df6b18bbaef550b5aa7fc0e2027709a864191a1fa0cb078ab3e4b938c4e99fff5f74f9837f166a2f4606dfb2041239b7af835a9856153448bfeff74f56af69e5a8ad53ec28e1831aea2c9de96131f31f891fcc525afd131718b66f89e1e97f483808d3c36d975feaf3d868ac3c9e479c5bfc866f06a8835bfcc54d440553ad110e3708c1efa6220a88ac3d8d8d7ec2076ec272f7951463a68dfb7b54927681458304e867e8ba502ffe6bf92266163faa534deba891ad3a42049b1a02c2828e8ac5c6fe14a942e6845ac850c8540eb56280052f77854b5db05645e8ad42e479b65d999d6cddc4db67ad34e34f157cf41a18ac88ceea059dd618e6c2ef841962035a0f18f9a1adee2f90248d135647ef462ceebd71e2ae0f0026d04d18dcc19618419e2185f160855dd85697fe4393ee75c4a591c30c8c2dca65fc39d61adc2f46e8b90e265684ce0d3a9c51f04e24f8ccd895b43d3a09544f81b84aa5fe75a9c4ddb24b9e5cf59109835ccccbe5e2baa243bc1decf4d13480f4ee62fe65a41dd5548de686a4379d08a57149e2d4b89cad1cb14ffb4d5dcfafe31d8da5e96b47d96b1bf8706c5cc71a456e669f82f84e0ed36769c342c748d07f24af00fad7bba8386a4702e305be520d2e52f758011564d307e5254fd4aa974504f123f6e746257268084ff3df4cf0acffa8eab4dcee363f332d838c9eb7f63fc2e0d2f8dab58678d296d716090e5d5298baa18735fa605390cc1b4e9fbe33c042168d87d038f676baaf797af7d807d5544c61f7805d8a20a82c5aad40e89a3e4e0d8374cd7f9295c23984233d38047feaf383bc3bfead3e405f99fc009c6a7dc84c07bbd516c827f15153328abefebf42aa4d2cf82e1dedf7d1fc59648044ee4c8581b575e20a273d3f8d036ef07a87d4907700af6bcd68af263c9be8804cf8acb090824eae455a709d68ecd078a9dc7106fed7ec7ac0e9377e436d8f73efc0b4f85888f2407607b73ac76a92a24cb8d7d0ebaf42741794cec95dbb7661ab175a72684af52213abebc9d4cb61ef234372828e92b8feb4e7f55f9d545775daec28543b514612713b179b064decbeb65238f556f9288508c4547b2884405b12e87c9b8d2415b0c02741b5656e2514090c211a6a9c4d32b90ba62234b4c8b83e4dce018f466146bb13be04fa1f78b895df118d22f068e7984f2e812389b11340fb32ca77ad2e3f58bc5749f147da202c8f0aeba25fab2b33b6d56333f1319ae5df0c6b871eb3106fac0f7dd35ceec2689b764ad92593fba6afb8f03c1921296676b1baab433ff6447666d57cb169e5cad94aad0ec57b0b86eb0ebdd772311ffa621726f56481b1588334c5cb490e89073c8d80ee3b33a4842225942fa89f13a72b1bc6469fbd17c8a58b556d95488f171c613d4720e7a23ed4ebd717328b01c240d1287be9da9269d0e065bbea1b61cb3952b7d7339f54f5e8a4dadddd86cd2deb0139f02ea4d0bd731b676e3e329258314b63e39e497a83c81c76f54a08cc690e0d451151e262b51113e6160401b9653df6a8c65c24a785ee31319198d77ee858cff4860da5ff506ad605a73c981e65d9b5e451ad978e82e978728891061df07ea5986382889191fe565ede3bd949604a2b6e63177c4d3107d85a2b144578f0a6a909bfa695368178e93d13794135a9416a4566d741ed3484d600c18d5dc46383255268d3dc4323783c51e062313fdf4d1c6443fd92af9f4065212f3fc9437743c21f36641d4dcbb151a2978ea909ab8bbb92d6e5fb7a7077cbb7e146158577b3dcf1cf85cf2cfcbf7254c3e7ab34de4347c0006864ab7b914f33c33b6e0b327031bb30d974156cad137c35707fc375f5cbfcd93292cc658c3c7912e49fedb9a2b3b3bee8b05d266f81e13257293c0feb908bd7da40a75aaa60a13a7d79dca58d8231fa1c7ea5e29d79377f7e479dd1114e16edae82beb3b4e60e89f787ab06e2753318675e67a5d4aeedd0ada51f2a21991034a0c531ad38109b13a6e407973e4baaa4c45e2750ef0cd27993dcdb580223dbfa288e2d75b00a0cc6d49c8220ec1be1e285069a998bded748abbd7a537e6ec7b2040f100a08eb604321fd171edba89373070df24baece388e0df221eeed8e9b34da5fc3ed84b19dcbc8b80f806d3656e606dc3ff0e75d48795b3be06ec260dbb74a914607fb6d49c6f4f7a596f56a3d348219cd3eb0571a8cd1c46547cff12ff6647df83782314314d49426fe91bc029c964a6b61e0d1aa0e6b63b70a1aeffad4969aff320246a913cd68eb7ce1041c65b26caa784b002c9b55ef4516083559659961648e87785715063b7578e25b3e35927f4021df2c443ccc89efec425668c151d1e22fc24b9427d97a0e2d2766aa6217037a52b12e369f256059358dd71206d97bd40592209e6b4112c5241806b9d9a017ee985bb5a1396ee2f26bd6c06d8f8a13998411fe57684ec9bdf8f906d25a3aa5910e6057b9ac1c6b6d513a3a0baaff444f0a2408e95cc386e2c897f74e41ca00e14cd6c1d5170cfe5140eaa2ad3e27f400c4d6e81ed5c71faf739424c9bf938db4ce445d4dabf834c6e2a359be2ac721b90d93e1864a46153ba909df278413b249b99934c8c1bdde3fb2aa2492f88800cae33da8c2f023f0db6ad71caf80a3c387aea4571a80cef2472eb4b10474da6dd84bc77ed367f96121b557b37622d9aece01a1f3bdc794d9a16b44df3460d85ee4cc6e484f28dcaa43829ff6055181bef851b1a37dfb510589e9bda34e74b2ce6e24b36258b4190205d6b7bfd12e857f5e718ec9901cb2dee3e6723ef4585c6edb937e5a3f98b119e9e4e109e8c4ede1c96e22ffcf051d5de3df82093b731f7c42d92efb7b608013f29bace4eed00916a53e06f6728d39aedef4fc63f166cff7869146e388a9a39f1f3d5ccc953244c28d9c93ae20ca8341731dd26bd6ddbea397bda9b4906f991f43a29b36dcb538c97d67dbdc6f843c78042937a503f1e3d7afce6b26f08189cd6e9ce9011a99d4c801a23086121e3c045fadcba2c3ea11f9db831bee2e1f8874893c98e1e5869e979c9892d1fbb52c5ea8e1b677a9daa0d1e64042e518825bbbc83327576bcabb33c0c59e0856aa8c83a45e729adaabec80e10aa85ac74b543c826afdca1900d16d36a934e00dbea35e281e1c11157a9fea0dd5f9e5eea6482857c631b06486d7ac80aabfc296fc2291063c3b49db3aa6d0018ba9c727a88f2b7b1b362c7b428699cf0407658aa0c0e9498062cefbb84bdd2c375ea551c3affec2f70ba64d918ebe8fd256e81cf79ca5fae60dba5c1f45de469f8afb067f84314a6c14b4b601735fb1f8156350acdaf6708ddc96e1cc0987c39160c539330b2f30ac1085f6de02d5147680304dfd8fdb0e494f963f329dd59cd88a4f5be93ddb77f3c295525777c6b81fd0698a16445f572c96471cbcb847a5307a191c41ca6807b2b0ee0bcd9cea8b7f851bb6d6609b6e6267ba4ff3db86170e7e51087a9b67fe7b6b121b7e6f743f8561b2eb963d9b6b371bf24ee36eb9a8fe181848071fc5138fd18243ff296dfbafd9a7ad737ff993aca576114ce5bc68fef2fefb63a66623963240ab6cf9af21c32f27b278be091538be84a12e10e4be8276501993a2d6b0013043fd7127aa5eab00fec214a283d54525f00e9a005a420e3c9680de01768adbffe67f3a010f3c799f5a0023dd7800cc754037d58dc638d0f390c3e0c0dd921d62cb76ead2aeb5da97e34262d1ea243d0001ecb6c599765b5a18e9e19c9f186b15d4c874051b623076bb19ef3aa0f95a5f9963110b0f8451d470d9233597f1f263630c558635af711ce9ad58b9de914f57c4efff953cb8f6a675ad3093cf285773725414cbdd285784907f347efb05ca2e3f0c3d684b074b738fc2640ac6c804290188dd8b0b424bd013cd7465b8a6d9f78b6ce4d10fbe4e84e23a092f483ccaf41130dc80a682070749a987f74ac4a6310cec97eddaa9ca1df66306b530640302d785729b478df372741ebcf1dae4cc1255be8d6b25704880ef951a4cfa5a16f59a76d646810501c0c382b37f17b2b625db11261a129ae630c7028f4f588346f8f092be6f5cda30367e3184ca1a5df4ec5e73c2b7fed6148ff9a6f251a4e12fe34da37b75557bcd43770076878785162561f41e425bbafd3b8d3a9e10751d0e0f15aad660bd07a9b5351da429a615de99452f05dd49d71036461cb887fa7aa1c54e92f2c4b9a34936e4732d1ba21867eda2b4e1fa58b5b296e079ad1ff6eed85f80968404206ad7a50da606c361f36e4b45be4125203bcc54fc5597ec6d7b67b80348f9df6c8f335a3bb89a949dba947544051c5297b4f0680fc434efe5c62fb85c7b5c0c1d600b7d098ca0a220777ff541caf42c3445a60bca8b2e82055ac65e5654d7eb66c549f03e531503d0a70f8d16d76c92af8007f0cc373919a2ade4f6d1380ac53bd5ba0df33fc088548141db9a2ea3a32def40905011e45b8a1b8e48d9cf9b6d16a9d703520e497636ea071fe1e7a3c5b753a853d45511fd126384fca4abf52d8ec55a573ba108162141825e36eb28ac998dfb3a8915ee71bbc3789a002001b493246ef388a8fe92ac278ab3b205688c3b150d5210c60fcc240d2e4cb626ba0d6c992c7db0dfa44e09414e61b291918398723f587e20dbaeb55456c1579b3476d49148a602550f767dbcc32ca802ee26985325a9077c4c69ccf52e06d958c0f98aff4980d744433ff5aff46ec489e3971368d38b4f6d87677a2490818e2f45ff7e7025b9d94ee0e728df5251bb4b25d7a9a55a3c2a37825d309b9b10cde3581314b687419a442e73ee48dee1e36925e56f05f3b070f9f500fc579419611cb9fb311151c4af0d03bf40563de3f7673ac0ed5f3ab6a86c4b43d04ddfa196c82e34cac9247be687c429afc899600dcab617b875061159bae050a9783a82f0f54a7576c9c4797c0deff8cfb0afd70dd2e8008aa7b458aa7b0a9373cc0ad8672d8acdf808687462875d97413a329030d47915c859c4b9a85ee0295b1750540c99025e9b32376476224a71b493edabf06d788e5de4d79ec2badcf9e12f7211bf9ac797d9d18a1a1c2487ee7234e2d0cbcb5329af4d862a0a74643a2ece0f74f5488e13f1fb1de1315630e95ad87fe63fcf44663b3ad5121f612b5e528097659aa52a8256dd0f95e4c4dc1007d510df25ea45ffc8151e8715df34044a1e013b6d3f7543456a82fd3d11ac25787c5cd5e45548ee40d71d1c4fcd8f191a16a49438cf529196374f6919bd602beaefcaf688f35addb4c2b9e0a31fa166d784cf6aa8188ff1ed7272f9511a4344d1eb53d4a1a4986864b75a148b50697a145df989a6a9300eba61ab0666e3f1318d8adbfcb01ae33221905c3cc984746ffad626d74c35f207db12a1005aa065116aed65973f35359bdc866cb08a549406353d3dfddbf2120bb2bce86047c14d89217bd32427281702bcd733aae02be0abfba07198f785c8bfc2dbcb46f9bec26d7b6d3fb21686dc269631438c020cf4f63db199d7717436190783e0d7672ed7a90b25bd3f6888dbb2e58c760702312ea91535ebfa37f6d3d0ef01a5e5db590f39b44e7cc5b550d688bc28f5c26ac479164a18fddaf52a54b75e6690e65b30a4b7f86c686fef6ea6fc36e06369a09c1aa0c775f098d9e1067f844c145434c1938fbfb666b2d3cdfdfef7d122f3f3461b3fac7604b4f15b9fc979b68bf9219f1fb9c05231e0f0d17a1d5de5185362b237d18f6d3c62b4ee5fbdfb460c42c49dbe1438943634a2024dba7cd1240abb4b010e99a560668c89babc65a10fe8ce7a5d63b6e5043bc0b402acb3671582eb5254c1453c444a51a1e61f0b155ba6223db331d63e40b26d709b810987856395e9d82d74dbc14c5b18e56758cda5b9be5c8eb98a2b5d9a34fa02940def22b3823428c8c88d476cca2020a5947f96922b8a1fa0edf806a7b58b10731e753bb06a3f832e07b3c3620e4364d873ca0a37189badc3fec9ff2d9a49909ff23378b057868f07488fc2031509e10dc93676483e8cbc2275e85516732fe0ce9492c32a3368d5ed9db0e1d3f2491143597ace60059f7b93abf94be90a3a39e0a096d2cbc6b0b829d074f67ab043630044ad5e3200d2de12b15a53b5661fcc1480b536bf52760495a9080ede4d31f42b2cffda75150e8fe2f9ed7a120b24e21f63bfb58b3937e471c1b06eaae4f0b2bd0e6e6d8c76ec83d25c2129045534e407bf6752152aa69dbe180d159ce86f7876a3ba87d013fb0b430aea62f07190b4b1fdc58", 0x2000, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) 8m59.384817411s ago: executing program 3 (id=1990): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0xfffffffe, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000340)={0x0, 0x1, 0xffffffff, {0x82, 0x9}, 0x2, 0xff}) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000400020100020800038005000000", 0x24) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x8402, 0x0, 0x0, 0x0, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r4, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x405, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4000000800000001c10000000000000a500ffffff1dd6e69500000000000000e33ffe49fb92182c3b5b8c9db21f920abbda78cc57dea9dc8050492b3af1d6a2d083a0e6400dc2a94e32c310e9c0b3956f3cd3cbd5593df617314dcebc690d833f3007e7bac43d7319bfa8f7bbe408d291c5779802b0ffd32b4a9cec00bb8b9cd88cc9977c73fac7a050502464af257d3739ed9b1743775ab4cc1b6a628d3da7a75b3a5123565b2c15643dc19992b4a186ecdafd025d1bc148a732968f1f47831e2525646aff0a07317a1385bcb7afb9000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x20}, 0x94) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r7}, 0x38) sendmsg$alg(r6, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmsg$unix(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1}, 0x0) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) sendto$inet6(r8, &(0x7f0000000200)="07ac78eaf409f719db1965d9eb0c30d23115dfedb1f426ccb7014bec23ad7a4925cf7a366b4d9ac8be1ea15dd39b70f315de9fcc4c1f80402646bcec124a4b1c9828e7ce14de30fc3e8149c6181b28fc21a883f1ff42b4713786c075cc9deecb292c2fb1a083e2e5068bde7c414a5d20a2", 0x71, 0x4004000, &(0x7f0000000280)={0xa, 0x4e20, 0x4, @mcast2, 0x8}, 0x1c) 8m59.274936792s ago: executing program 3 (id=1991): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x800020, 0x0, 0xffffffffffffffc0, 0x9, 0x8, 0x0, 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800, r2}, 0x38) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x27) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000340)=0xc) syz_pidfd_open(r3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c000014000280"], 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104", @ANYRES32=0x0], 0x50}}, 0x4000000) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x20000, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0xffffffffffffffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_G_CROP(r8, 0xc038563b, &(0x7f0000000140)={0x0, 0x0, {0xbfc, 0x8, 0xe91, 0x9}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r9, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r7], 0x38}}, 0x10) write$sndseq(r5, &(0x7f0000000380)=[{0x4, 0x5, 0x3, 0x20, @time={0x2, 0x5}, {0x2, 0x2}, {0x2, 0x8}, @queue={0xf, {0x8, 0x101}}}, {0x3, 0xf, 0x40, 0xd5, @time={0x5}, {0x72, 0x6}, {0x3, 0x1}, @note={0x3, 0x9, 0xd, 0x4}}, {0xe, 0x68, 0xfb, 0x2, @time={0x1, 0xff}, {0x3, 0x9}, {0x37}, @raw32={[0x2, 0x2]}}, {0x4, 0x2, 0x7f, 0xa, @tick=0x5, {0x7, 0xd}, {0x7, 0xd}, @note={0x6, 0x6, 0x5, 0x32, 0x9}}], 0x70) 8m58.658197205s ago: executing program 3 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r4, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r6}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000040)=0x6945, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003b00)=@newtaction={0x84, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_connmark={0x6c, 0x1f, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0x7fff, 0x5}, 0x9b8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x4, 0x7, 0x5, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x84}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f00000010c0)={0x1, @pix={0x3, 0x8000, 0x32315659, 0x8, 0x10, 0x6, 0x5, 0x6, 0x1, 0x7, 0x2, 0x6}}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r10, @ANYBLOB="010007bd7000fddbdf2555000000080001006800000008000300", @ANYRES32=r11, @ANYBLOB="0c2f7f866114cc81850c8c13ec4cc20099000b00000064000002f317cb4c3a13e52f9d10330127b8819a3f2b2dd5c1d1477ed0607d6c282412c4fcf73478c0ff1b53b2329bb05bc4d86979e6f8fe0c08ac990ee2665c59d0b748b80d38585d9c132d1ba1c8"], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) 8m57.835468973s ago: executing program 32 (id=1995): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000200)={'\x00', 0x401, 0x8, 0x1, 0x6, 0x5, 0x0}) fcntl$lock(r4, 0x24, &(0x7f0000000280)={0x2, 0x1, 0x0, 0x2, r6}) r7 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r7, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000040)=0x6945, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r8, 0x10e, 0xb, &(0x7f0000000100)=0x800000, 0x48) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000003b00)=@newtaction={0x84, 0x1c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x70, 0x1, [@m_connmark={0x6c, 0x1f, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x0, 0x7fff, 0x5}, 0x9b8}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1ff, 0x4, 0x7, 0x5, 0x6}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x84}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) r9 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000001080), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r9, 0xc0d05604, &(0x7f00000010c0)={0x1, @pix={0x3, 0x8000, 0x32315659, 0x8, 0x10, 0x6, 0x5, 0x6, 0x1, 0x7, 0x2, 0x6}}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00', @ANYRES16=r10, @ANYBLOB="010007bd7000fddbdf2555000000080001006800000008000300", @ANYRES32=r11, @ANYBLOB="0c2f7f866114cc81850c8c13ec4cc20099000b00000064000002f317cb4c3a13e52f9d10330127b8819a3f2b2dd5c1d1477ed0607d6c282412c4fcf73478c0ff1b53b2329bb05bc4d86979e6f8fe0c08ac990ee2665c59d0b748b80d38585d9c132d1ba1c8"], 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) 2.853758818s ago: executing program 2 (id=3917): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0)) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$TUNSETDEBUG(0xffffffffffffffff, 0x400454c9, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00', @random="9cc9de10e578"}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x0, 0x0}) 2.601841661s ago: executing program 2 (id=3921): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x18000000000002a0, 0x28, 0x0, &(0x7f0000000000)="d2ff03076003008ccd9e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.377318228s ago: executing program 2 (id=3925): r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x4c}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) dup(0xffffffffffffffff) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00033c0000003c037c40fbc18a1d65048ae1af4a817b2e3a682103ba781351b8ae75"], 0x0, 0x0, 0x0}, 0x0) 1.934262918s ago: executing program 1 (id=3931): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f00000004c0)={0x40, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x3, 0x7}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040080}, 0x28008004) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) prctl$PR_SET_NAME(0xf, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) ioctl$PPPIOCSACTIVE(0xffffffffffffffff, 0x40107446, 0x0) 1.71767825s ago: executing program 1 (id=3933): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x11) bind$packet(r3, &(0x7f0000000280)={0x11, 0x3, r4, 0x1, 0x4, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x20}}, 0x14) preadv(r2, &(0x7f0000000600)=[{&(0x7f0000000780)=""/219, 0xdb}], 0x1, 0x3b, 0x0) 1.69811373s ago: executing program 5 (id=3934): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) preadv2(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/86, 0x56}], 0x1, 0x4, 0x200, 0x12) 1.518160083s ago: executing program 1 (id=3936): capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x14, 0x4, 0x4, 0x20002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x80010000, 0x2}, 0x50) 1.44353558s ago: executing program 5 (id=3937): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5c000000010153b100000000000000000a0000000c00198008000100ad"], 0x5c}, 0x1, 0x0, 0x0, 0x8000850}, 0x0) 1.346256193s ago: executing program 1 (id=3939): r0 = socket$packet(0x11, 0x3, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121800, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) fchdir(0xffffffffffffffff) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/130, 0x82}, 0xdb30}], 0x1, 0x40002042, 0x0) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x4, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 1.285088643s ago: executing program 5 (id=3940): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private0, @in6=@mcast1, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x5e}, {0x0, 0xfffffffffffffffb, 0x6, 0xfffffffffffffffe, 0xffffffffffffffff, 0x80000000000}, {0xfffffffffffffffc, 0x0, 0x0, 0x8}, 0x40000, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@loopback, 0x2, 0x3c}, 0xa, @in=@multicast1, 0x0, 0x4, 0x0, 0xc4, 0x7, 0xfffffffc, 0x1002}}, 0xe8) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 1.138154643s ago: executing program 5 (id=3942): unshare(0x20060400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, 0x0, 0x0}, 0x20) r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) setsockopt$inet_udp_encap(r1, 0x11, 0x64, 0x0, 0x0) 778.187343ms ago: executing program 4 (id=3945): r0 = syz_open_dev$loop(&(0x7f0000002100), 0x8, 0x200) ioctl$BLKRRPART(r0, 0x125f, 0x0) 777.951504ms ago: executing program 0 (id=3946): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10) setpriority(0x0, 0x0, 0xacf0165) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) gettid() unshare(0x6020400) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x39ea) 717.899165ms ago: executing program 0 (id=3947): r0 = socket$nl_audit(0x10, 0x3, 0x9) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) close_range(r1, r1, 0x2) 688.290131ms ago: executing program 4 (id=3948): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f00000003c0)={@local, @multicast, @void, {@canfd={0xd, {{0x4, 0x1, 0x1, 0x1}, 0x20, 0x0, 0x0, 0x0, "da31883355eaa7d560452785003a131352a4cd50f47aaded7c4b897be531918bd0425659b273b0db28605e79b96506a581d0a5c8800069e70b0fb0db5f482556"}}}}, 0x0) 562.243467ms ago: executing program 4 (id=3949): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffdfffff}) creat(&(0x7f0000000100)='./file0\x00', 0x0) lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000b80)=ANY=[@ANYBLOB='os'], 0x0, 0x0) 558.020478ms ago: executing program 0 (id=3950): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000140)={0x7b1, 0x100000, 0x0, r3, 0x4}) 513.251875ms ago: executing program 2 (id=3951): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 458.20964ms ago: executing program 4 (id=3952): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r2, 0xc008aec1, &(0x7f00000002c0)={0x9, 0x0, [{0xc0000001, 0x2, 0x5, 0x8, 0xffffff01, 0x51d, 0x2}, {0xa, 0xfffffffb, 0x4, 0x21cb8000, 0x0, 0x2, 0x101}, {0x0, 0x4, 0x5, 0x9, 0x10001, 0x5, 0x3ff}, {0x0, 0x36, 0x4, 0x5, 0x0, 0x2, 0x7d}, {0x7, 0x0, 0x6, 0x1ff, 0x6f6, 0x9, 0x6210}, {0xb, 0x1, 0x0, 0x24, 0x7, 0x1, 0x174c}, {0x6, 0x8, 0x0, 0x0, 0xb69, 0x2, 0xe698}, {0xd, 0x1c0, 0x2, 0x8, 0xfffffff9, 0xf0a1, 0x7fff}, {0x80000007, 0x4, 0x0, 0x1ffc0, 0x1, 0x8}]}) 386.951521ms ago: executing program 1 (id=3953): socket$igmp6(0xa, 0x3, 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x100) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xc, 0x32, 0x0, 0xffffd000) getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000) 384.6997ms ago: executing program 0 (id=3954): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="02000000000000000800008000e9ffff044d39fd9f00000013000000faff0000070000000000020000000000000000000000008000000000030000004769ffff020000000000000000"]) 370.251047ms ago: executing program 2 (id=3955): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a00000050"], 0x50) unshare(0x2040400) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x8, r0}, 0x38) 194.262703ms ago: executing program 1 (id=3956): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000000)=[@request_death], 0xfce3, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000c80)='Y2'}) 194.026922ms ago: executing program 5 (id=3957): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001940)=ANY=[@ANYBLOB="38010000100033"], 0x138}}, 0x0) 189.255579ms ago: executing program 2 (id=3958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}}, 0x0) 147.456478ms ago: executing program 4 (id=3959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xe) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 38.157177ms ago: executing program 0 (id=3960): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @private2={0xfc, 0x2, '\x00', 0x1}, [0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x200}}}, {{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x3b, 0xc}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x13, 0x2000, 0xfffffffd, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x2331}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x310) socket$netlink(0x10, 0x3, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x193a, 0x4) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 37.928565ms ago: executing program 5 (id=3961): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/pm_wakeup_irq', 0x0, 0xb) r1 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) 32.816632ms ago: executing program 4 (id=3962): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x800002, 0x0, {{@in=@private=0xa010102, @in6=@local, 0xfffd, 0x0, 0x0, 0xc9c, 0x2, 0x10, 0x0, 0x0, 0x0, 0xee01}, {0x5463f409, 0x7f, 0x7, 0x400000000000003, 0x0, 0xfffffffffffffffd, 0x5, 0xffffffffffffffff}, {0xffffffff, 0xfffffffffffffffd, 0x7, 0x58c}, 0x0, 0x0, 0x1, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x84811}, 0x0) 0s ago: executing program 0 (id=3963): socket(0x10, 0x3, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 995.964655][ T8075] team0 (unregistering): Port device team_slave_0 removed [ 996.051922][ T6003] usb 5-1: device descriptor read/64, error -71 [ 996.303839][ T6003] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 996.444082][ T6003] usb 5-1: device descriptor read/64, error -71 [ 996.492892][ T5897] em28xx 2-1:0.0: Unknown AC97 audio processor detected! [ 996.513119][ T5897] em28xx 2-1:0.0: couldn't setup AC97 register 2 [ 996.530833][ T5897] em28xx 2-1:0.0: couldn't setup AC97 register 4 [ 996.578466][ T6003] usb usb5-port1: attempt power cycle [ 996.943497][ T6003] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 996.977180][ T6003] usb 5-1: device descriptor read/8, error -71 [ 997.159843][ T5904] pwc: send_video_command error -71 [ 997.175655][ T5904] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 997.197578][ T5904] Philips webcam 3-1:76.0: probe with driver Philips webcam failed with error -71 [ 997.241769][ T6003] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 997.362695][ T6003] usb 5-1: device descriptor read/8, error -71 [ 997.368635][T18895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.379574][ T5904] usb 3-1: USB disconnect, device number 64 [ 997.403639][T18895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.523991][ T6003] usb usb5-port1: unable to enumerate USB device [ 997.663620][ T5897] em28xx 2-1:0.0: couldn't setup AC97 register 54 [ 997.694594][ T5897] em28xx 2-1:0.0: couldn't setup AC97 register 56 [ 997.717912][ T5897] usb 2-1: USB disconnect, device number 65 [ 997.818305][T18926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.826821][ T5904] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 997.845798][T18926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.902550][T18926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 997.914552][T18926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 997.961725][ T5904] usb 3-1: device descriptor read/64, error -71 [ 998.101774][ T5897] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 998.231737][ T5904] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 998.272244][ T5897] usb 2-1: Using ep0 maxpacket: 16 [ 998.279221][ T5897] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.296826][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 998.325998][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.348694][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.355097][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 998.401793][ T5904] usb 3-1: device descriptor read/64, error -71 [ 998.410570][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.439847][ T5897] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 998.450409][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.469921][ T5897] usb 2-1: Product: syz [ 998.475056][ T5897] usb 2-1: Manufacturer: syz [ 998.480879][ T5897] usb 2-1: SerialNumber: syz [ 998.506578][ T5897] usb 2-1: config 0 descriptor?? [ 998.512119][ T5904] usb usb3-port1: attempt power cycle [ 998.542702][ T5897] appledisplay 2-1:0.0: Submitting URB failed [ 998.579661][ T5897] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -5 [ 998.756514][ T5897] usb 2-1: USB disconnect, device number 66 [ 998.800845][ T30] kauditd_printk_skb: 45 callbacks suppressed [ 998.800865][ T30] audit: type=1326 audit(1759793592.979:2538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 998.931676][ T5904] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 998.969438][ T30] audit: type=1326 audit(1759793593.029:2539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.031831][ T30] audit: type=1326 audit(1759793593.029:2540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.134595][ T30] audit: type=1326 audit(1759793593.029:2541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.187590][T18938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 999.207249][T18938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 999.238264][ T30] audit: type=1326 audit(1759793593.029:2542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.268488][ T30] audit: type=1326 audit(1759793593.029:2543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.294406][ T30] audit: type=1326 audit(1759793593.029:2544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.434602][ T30] audit: type=1326 audit(1759793593.029:2545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.580714][ T30] audit: type=1326 audit(1759793593.029:2546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.687541][ T30] audit: type=1326 audit(1759793593.029:2547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18932 comm="syz.5.3360" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f7839d8eec9 code=0x7ffc0000 [ 999.815643][ T5904] usb 3-1: device descriptor read/8, error -71 [ 1000.082409][ T5904] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1000.106623][ T5904] usb 3-1: device descriptor read/8, error -71 [ 1000.248204][ T5904] usb usb3-port1: unable to enumerate USB device [ 1001.091996][ T5966] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1001.252284][ T5966] usb 2-1: device descriptor read/64, error -71 [ 1001.524202][ T5966] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1001.605530][T18973] delete_channel: no stack [ 1001.711751][ T5966] usb 2-1: device descriptor read/64, error -71 [ 1001.832655][ T5966] usb usb2-port1: attempt power cycle [ 1002.050885][T18985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1002.069998][T18985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1002.393216][ T5966] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1002.426315][ T5966] usb 2-1: device descriptor read/8, error -71 [ 1002.701705][ T5966] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1002.722860][ T5966] usb 2-1: device descriptor read/8, error -71 [ 1002.842075][ T5966] usb usb2-port1: unable to enumerate USB device [ 1004.261851][ T5904] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1004.451733][ T5904] usb 3-1: Using ep0 maxpacket: 8 [ 1004.477564][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1004.550986][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1004.563599][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11 [ 1004.578796][ T5904] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024 [ 1004.590070][ T5904] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1004.605917][ T5904] usb 3-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1 [ 1004.615357][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.623580][ T5904] usb 3-1: Product: syz [ 1004.628080][ T5904] usb 3-1: Manufacturer: syz [ 1004.632962][ T5904] usb 3-1: SerialNumber: syz [ 1004.658804][ T5904] usb 3-1: config 0 descriptor?? [ 1005.279792][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1005.279814][ T30] audit: type=1800 audit(1759793599.459:2585): pid=19022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3384" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=78160 res=0 errno=0 [ 1005.690421][ T5904] rc_core: IR keymap rc-imon-rsc not found [ 1005.707889][ T5904] Registered IR keymap rc-empty [ 1005.724242][ T5904] rc rc0: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 1005.744342][ T5904] input: iMON Station as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input61 [ 1005.815572][ T5904] usb 3-1: USB disconnect, device number 69 [ 1006.128623][T19038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1006.146831][T19038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.174829][T19038] sctp: [Deprecated]: syz.5.3389 (pid 19038) Use of int in max_burst socket option. [ 1006.174829][T19038] Use struct sctp_assoc_value instead [ 1006.194261][T19038] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 1006.821804][ T5904] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1007.021747][ T5904] usb 2-1: Using ep0 maxpacket: 16 [ 1007.148290][ T5904] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1007.170311][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1007.182584][ T5904] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1007.193491][ T5904] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1007.203566][ T5904] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1007.218280][ T5904] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1007.289022][T19054] fuse: Unknown parameter 'grŠ‰;‡S·00000000000000000000' [ 1007.858571][ T5904] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1007.866874][ T5904] usb 2-1: Manufacturer: syz [ 1007.885388][ T5904] usb 2-1: config 0 descriptor?? [ 1008.318658][T19048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1008.333385][T19048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.471756][ T5904] rc_core: IR keymap rc-hauppauge not found [ 1008.477757][ T5904] Registered IR keymap rc-empty [ 1008.502135][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.552939][T19058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3393'. [ 1008.564366][T19058] tipc: Started in network mode [ 1008.568162][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.570104][T19058] tipc: Node identity 72dab00030d7, cluster identity 4711 [ 1008.570270][T19058] tipc: Enabled bearer , priority 0 [ 1008.571373][T19058] syzkaller0: entered promiscuous mode [ 1008.606903][T19058] syzkaller0: entered allmulticast mode [ 1008.610095][ T5904] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1008.646177][ T5904] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input62 [ 1008.650140][T19058] tipc: Resetting bearer [ 1008.669214][T19062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3394'. [ 1008.692334][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.702317][T19057] tipc: Resetting bearer [ 1008.718570][T19062] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3394'. [ 1008.728446][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.771886][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.783107][T19057] tipc: Disabling bearer [ 1008.845383][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.882346][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.920038][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1008.970811][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1009.023130][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1009.041818][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1009.120340][ T5904] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1009.137336][T19074] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1009.213379][ T5904] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1009.383060][ T5904] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1009.410873][T19074] netlink: 'syz.5.3397': attribute type 33 has an invalid length. [ 1009.419120][T19074] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3397'. [ 1009.510179][ T5904] usb 2-1: USB disconnect, device number 71 [ 1010.078949][T19079] vivid-007: ================= START STATUS ================= [ 1010.098635][T19079] vivid-007: Enable Output Cropping: true [ 1010.111579][T19079] vivid-007: Enable Output Composing: true [ 1010.180799][ T36] bridge0: port 3(dummy0) entered disabled state [ 1010.197587][T19079] vivid-007: Enable Output Scaler: true [ 1010.205242][T19079] vivid-007: Tx RGB Quantization Range: Automatic [ 1010.559178][T19079] vivid-007: Transmit Mode: HDMI [ 1010.575139][T19079] vivid-007: Hotplug Present: 0x00000000 [ 1010.590228][T19079] vivid-007: RxSense Present: 0x00000000 [ 1010.691739][T19079] vivid-007: EDID Present: 0x00000000 [ 1010.713328][T19079] vivid-007: ================== END STATUS ================== [ 1010.999104][T19091] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1011.032241][T19091] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3402'. [ 1012.129133][ T5930] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1012.360928][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1012.372432][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1012.556163][T19113] netlink: 'syz.2.3408': attribute type 10 has an invalid length. [ 1012.571749][T19113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3408'. [ 1012.645560][T19113] team0: Port device geneve0 added [ 1012.871514][ T5930] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1013.011729][ T5904] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1013.055327][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.074340][ T5930] usb 5-1: config 0 descriptor?? [ 1013.226301][ T5904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.241692][ T5904] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1013.262580][ T5904] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1013.276013][ T5904] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1013.295112][ T5904] usb 3-1: SerialNumber: syz [ 1013.529670][ T5904] usb 3-1: 0:2 : does not exist [ 1013.538838][ T5904] usb 3-1: unit 5: unexpected type 0x0b [ 1013.595628][ T5904] usb 3-1: USB disconnect, device number 70 [ 1013.660738][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1013.707069][ T5930] usbhid 5-1:0.0: can't add hid device: -71 [ 1013.745162][ T5930] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1013.772375][ T5930] usb 5-1: USB disconnect, device number 59 [ 1014.204349][T19128] IPVS: Error connecting to the multicast addr [ 1014.608149][T19140] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3415'. [ 1015.603013][T19148] tipc: Started in network mode [ 1015.608247][T19148] tipc: Node identity 96591afa65d4, cluster identity 4711 [ 1015.616037][T19148] tipc: Enabled bearer , priority 0 [ 1015.623295][T19149] syzkaller0: entered promiscuous mode [ 1015.633042][T19149] syzkaller0: entered allmulticast mode [ 1015.921719][ T10] usb 5-1: new full-speed USB device number 60 using dummy_hcd [ 1016.049263][T19154] loop2: detected capacity change from 0 to 7 [ 1016.056777][T19154] Dev loop2: unable to read RDB block 7 [ 1016.087628][ T10] usb 5-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1016.111800][T19154] loop2: unable to read partition table [ 1016.117843][T19154] loop2: partition table beyond EOD, truncated [ 1016.130100][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1016.162119][T19154] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1016.208830][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1016.262931][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1016.295081][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1016.304453][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1016.340670][ T10] usb 5-1: Product: syz [ 1016.356393][ T10] usb 5-1: Manufacturer: syz [ 1016.387555][ T10] usb 5-1: SerialNumber: syz [ 1016.402819][ T10] usb 5-1: config 0 descriptor?? [ 1016.421503][ T10] usb 5-1: selecting invalid altsetting 0 [ 1016.731893][ T10] tipc: Node number set to 4086110970 [ 1017.025183][T19173] syzkaller0: entered promiscuous mode [ 1017.030931][T19173] syzkaller0: entered allmulticast mode [ 1017.413071][ T30] audit: type=1326 audit(1759793611.599:2586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19182 comm="syz.5.3427" exe="/root/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f7839d85d67 code=0x0 [ 1017.736850][T19184] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3428'. [ 1018.201710][ T10] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1018.384088][ T10] usb 3-1: config 6 has an invalid interface number: 57 but max is 0 [ 1018.392809][ T10] usb 3-1: config 6 has no interface number 0 [ 1018.421313][ T10] usb 3-1: config 6 interface 57 has no altsetting 0 [ 1018.520620][ T5966] usb 5-1: USB disconnect, device number 60 [ 1018.535095][ T10] usb 3-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00 [ 1018.551657][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1018.731770][ T10] usb 3-1: Product: syz [ 1018.732699][T19147] tipc: Resetting bearer [ 1018.736022][ T10] usb 3-1: Manufacturer: syz [ 1018.810608][ T10] usb 3-1: SerialNumber: syz [ 1018.973607][T19147] tipc: Disabling bearer [ 1019.786305][ T10] usb-storage 3-1:6.57: USB Mass Storage device detected [ 1020.106181][ T10] usb 3-1: USB disconnect, device number 71 [ 1020.761430][T19219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1020.770686][T19219] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3433'. [ 1020.900062][T15482] Bluetooth: hci0: command 0x0406 tx timeout [ 1020.903062][T19223] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.012626][T19223] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.271769][ T10] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1021.426361][ T10] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 1021.437040][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1021.459605][ T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice= 0.9c [ 1021.475504][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1021.483942][ T10] usb 2-1: Product: syz [ 1021.492057][ T10] usb 2-1: Manufacturer: syz [ 1021.496779][ T10] usb 2-1: SerialNumber: syz [ 1021.511647][T19229] usb usb8: usbfs: process 19229 (syz.4.3437) did not claim interface 4 before use [ 1021.525214][ T10] usb 2-1: config 0 descriptor?? [ 1021.557480][ T10] ims_pcu 2-1:0.0: Missing CDC union descriptor [ 1021.581853][ T10] ims_pcu 2-1:0.0: probe with driver ims_pcu failed with error -22 [ 1021.758314][T19232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1021.771318][T19232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1021.906760][T19237] netlink: 'syz.5.3439': attribute type 3 has an invalid length. [ 1021.927312][ T10] usb 2-1: USB disconnect, device number 72 [ 1021.966572][T19241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1022.137915][T19241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1022.593854][ T5930] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1022.753367][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.765569][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1023.062229][ T5930] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1023.073268][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.087491][ T5930] usb 5-1: config 0 descriptor?? [ 1024.107608][ T5930] usbhid 5-1:0.0: can't add hid device: -71 [ 1024.152908][ T5930] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1024.207174][ T5930] usb 5-1: USB disconnect, device number 61 [ 1024.255355][T19266] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3446'. [ 1024.312267][T19266] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3446'. [ 1024.888613][T19281] syzkaller0: entered promiscuous mode [ 1024.894461][T19281] syzkaller0: entered allmulticast mode [ 1024.982791][T19283] netlink: 'syz.1.3454': attribute type 10 has an invalid length. [ 1024.998123][T19283] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 1025.013524][T19283] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1025.081757][ T5904] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1025.179103][T19289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3456'. [ 1025.238578][T19292] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3455'. [ 1025.248765][T19292] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3455'. [ 1025.293977][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1025.303556][ T5904] usb 5-1: Using ep0 maxpacket: 8 [ 1025.310718][ T5904] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.325236][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEF, changing to 0x8F [ 1025.340189][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1025.358186][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1025.381243][ T5904] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 1025.459176][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1025.467969][ T5904] usb 5-1: SerialNumber: syz [ 1025.485463][ T5904] usb 5-1: config 0 descriptor?? [ 1025.496387][ T5904] hso 5-1:0.0: Can't find BULK IN endpoint [ 1025.512254][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 1025.523227][ T10] usb 2-1: config 0 has no interfaces? [ 1025.534521][ T10] usb 2-1: New USB device found, idVendor=0c12, idProduct=0030, bcdDevice= 0.00 [ 1025.544035][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.558764][ T10] usb 2-1: config 0 descriptor?? [ 1025.708942][ T5930] usb 5-1: USB disconnect, device number 62 [ 1026.143772][T19296] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1026.152684][T19296] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1026.261801][ T5904] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1026.364300][T19302] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3458'. [ 1026.418164][ T5904] usb 3-1: Using ep0 maxpacket: 16 [ 1026.432336][ T5904] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 1026.466332][ T5904] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 1026.478063][ T5904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.492209][ T5904] usb 3-1: Product: syz [ 1026.496425][ T5904] usb 3-1: Manufacturer: syz [ 1026.549367][ T5904] usb 3-1: SerialNumber: syz [ 1026.948724][ T5904] usb 3-1: config 0 descriptor?? [ 1026.965609][ T5904] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 1026.986277][ T5904] usb 3-1: Detected FT232R [ 1027.167437][ T5904] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1027.416230][ T5904] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1027.486788][ T938] usb 3-1: USB disconnect, device number 72 [ 1027.523679][ T938] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1027.579093][ T938] ftdi_sio 3-1:0.0: device disconnected [ 1028.137415][ T5966] usb 2-1: USB disconnect, device number 73 [ 1028.424633][ T5904] usb 5-1: new full-speed USB device number 63 using dummy_hcd [ 1028.465233][T19326] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3465'. [ 1028.482313][T19329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3465'. [ 1028.656139][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDF, changing to 0x8F [ 1028.705759][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 1028.767698][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1028.788129][ T5904] usb 5-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=ec.c1 [ 1028.817535][ T5904] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.888365][ T5904] usb 5-1: Product: syz [ 1028.893661][ T5904] usb 5-1: Manufacturer: syz [ 1028.898360][ T5904] usb 5-1: SerialNumber: syz [ 1029.454738][ T5904] usb 5-1: config 0 descriptor?? [ 1029.695887][T19317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1029.713036][T19317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1029.734488][ T5904] powermate: Expected payload of 3--6 bytes, found 0 bytes! [ 1029.748318][ T5904] powermate 5-1:0.0: probe with driver powermate failed with error -5 [ 1029.772386][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1029.782261][ T5904] usb 5-1: USB disconnect, device number 63 [ 1029.947004][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1029.959883][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1030.024416][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1030.044956][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1030.252214][ T10] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1030.261736][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1030.272770][ T10] usb 2-1: config 0 descriptor?? [ 1030.690753][T19347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1030.719871][T19347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1030.742211][T19348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3468'. [ 1030.762906][T19348] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3468'. [ 1030.975778][ T10] plantronics 0003:047F:FFFF.001D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 1031.651716][ T5897] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 1031.806149][ T5897] usb 3-1: config 7 has an invalid interface number: 101 but max is 0 [ 1031.816160][ T5897] usb 3-1: config 7 has no interface number 0 [ 1031.835524][ T5897] usb 3-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice= 6.6b [ 1031.854949][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1031.872692][ T5897] usb 3-1: Product: syz [ 1031.877974][ T5897] usb 3-1: Manufacturer: syz [ 1031.883220][ T5897] usb 3-1: SerialNumber: syz [ 1032.271850][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1032.391880][ T5966] usb 2-1: reset high-speed USB device number 74 using dummy_hcd [ 1032.461731][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1032.484385][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1032.525219][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1032.611984][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1032.648843][T19354] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3471'. [ 1032.672174][T19354] 0ªX¹¦À: renamed from caif0 [ 1032.707271][T19354] 0ªX¹¦À: entered allmulticast mode [ 1032.733001][T19354] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 1032.771800][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.813058][ T10] usb 5-1: config 0 descriptor?? [ 1032.868136][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 1032.909694][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1032.947396][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1033.038808][T19378] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1033.056388][T19378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3477'. [ 1033.514644][ T9] usb 2-1: USB disconnect, device number 74 [ 1034.458554][ T5897] as10x_usb: device has been detected [ 1034.472337][ T5897] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT Deluxe) [ 1034.547157][T19391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.602420][T19391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.621343][T19391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1034.650410][T19391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1034.722891][ T5897] usb 3-1: DVB: registering adapter 1 frontend 0 (Elgato EyeTV DTT Deluxe)... [ 1035.091105][ T5897] as10x_usb: error during firmware upload part1 [ 1035.142474][ T5897] Registered device Elgato EyeTV DTT Deluxe [ 1035.182146][ T5897] usb 3-1: USB disconnect, device number 73 [ 1035.290733][ T5897] Unregistered device Elgato EyeTV DTT Deluxe [ 1035.315618][ T5897] as10x_usb: device has been disconnected [ 1035.322137][ T9] usb 5-1: USB disconnect, device number 64 [ 1035.589079][T19406] loop2: detected capacity change from 0 to 7 [ 1035.609072][T19406] Dev loop2: unable to read RDB block 7 [ 1035.617470][T19406] loop2: unable to read partition table [ 1035.635001][T19406] loop2: partition table beyond EOD, truncated [ 1035.648305][T19406] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1035.822711][T19408] loop2: detected capacity change from 0 to 7 [ 1035.835021][T19408] Dev loop2: unable to read RDB block 7 [ 1035.849926][T19408] loop2: unable to read partition table [ 1035.867111][T19408] loop2: partition table beyond EOD, truncated [ 1035.887068][T19408] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1036.374524][ T9] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1036.491106][T19416] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3489'. [ 1036.520716][T19416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3489'. [ 1036.553227][ T9] usb 5-1: config 1 has an invalid descriptor of length 119, skipping remainder of the config [ 1036.726574][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1036.816482][ T30] audit: type=1804 audit(1759793630.969:2587): pid=19412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3488" name="/newroot/82/file1" dev="fuse" ino=1 res=1 errno=0 [ 1036.901704][ T5897] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 1036.927539][ T9] usb 5-1: config 1 has no interface number 0 [ 1036.995182][ T9] usb 5-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1037.030797][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1037.031853][ T5897] usb 2-1: device descriptor read/64, error -71 [ 1037.053007][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.061058][ T9] usb 5-1: Product: syz [ 1037.098229][T19424] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3492'. [ 1037.154715][ T9] usb 5-1: Manufacturer: syz [ 1037.159379][ T9] usb 5-1: SerialNumber: syz [ 1037.181798][ T9] cdc_ncm 5-1:1.1: skipping garbage [ 1037.188652][ T9] usb 5-1: selecting invalid altsetting 1 [ 1037.304539][ T5897] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 1037.406155][T19430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3493'. [ 1037.418367][T19430] libceph: resolve '0..' (ret=-3): failed [ 1037.492064][ T5897] usb 2-1: device descriptor read/64, error -71 [ 1037.530215][T19433] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3494'. [ 1037.552751][T19433] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1037.564402][T19433] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1037.602417][ T5897] usb usb2-port1: attempt power cycle [ 1037.903933][T19435] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.108539][ T5897] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1038.248824][ T5897] usb 2-1: device descriptor read/8, error -71 [ 1038.509938][ T5897] usb 2-1: new low-speed USB device number 78 using dummy_hcd [ 1038.633265][ T5897] usb 2-1: device descriptor read/8, error -71 [ 1038.744812][ T5897] usb usb2-port1: unable to enumerate USB device [ 1038.989872][T19441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3495'. [ 1039.428452][T19448] loop2: detected capacity change from 0 to 7 [ 1039.437224][T19448] Dev loop2: unable to read RDB block 7 [ 1039.445057][T19448] loop2: unable to read partition table [ 1039.460320][T19448] loop2: partition table beyond EOD, truncated [ 1039.470598][T19448] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1039.494629][ T9] cdc_ncm 5-1:1.1: SET_CRC_MODE failed [ 1039.531792][ T9] usb 5-1: selecting invalid altsetting 1 [ 1039.537780][ T9] cdc_ncm 5-1:1.1: bind() failure [ 1039.593933][ T9] usb 5-1: USB disconnect, device number 65 [ 1039.864354][T19456] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3500'. [ 1039.880027][T19456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3500'. [ 1039.981911][ T9] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 1040.281752][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1040.440494][ T9] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.537093][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1040.555444][ T9] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 1040.572765][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.608219][ T9] usb 5-1: config 0 descriptor?? [ 1040.729009][T19460] netlink: 755 bytes leftover after parsing attributes in process `syz.1.3501'. [ 1040.800757][T19460] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1718783447 (220004281216 ns) > initial count (195978013568 ns). Using initial count to start timer. [ 1040.856369][T19453] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3498'. [ 1041.469189][ T9] hid-steam 0003:28DE:1102.001E: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0 [ 1041.538084][ T9] usb 5-1: USB disconnect, device number 66 [ 1041.693643][T19463] fido_id[19463]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 1041.721023][T19467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.742941][ T30] audit: type=1326 audit(1759793635.929:2588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19464 comm="syz.5.3504" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7839d8eec9 code=0x0 [ 1041.779161][T19467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.925530][T19467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.976117][T19467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.306794][T19483] tipc: Started in network mode [ 1042.312104][T19483] tipc: Node identity 665f1977761a, cluster identity 4711 [ 1042.322304][T19483] tipc: Enabled bearer , priority 0 [ 1042.335119][T19483] syzkaller0: entered promiscuous mode [ 1042.340839][T19483] syzkaller0: entered allmulticast mode [ 1042.569824][T19483] tipc: Resetting bearer [ 1043.411753][ T10] tipc: Node number set to 272963959 [ 1043.671797][ T5897] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1043.802229][ T5897] usb 3-1: device descriptor read/64, error -71 [ 1044.041754][ T5897] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1044.171774][ T5897] usb 3-1: device descriptor read/64, error -71 [ 1044.282074][ T5897] usb usb3-port1: attempt power cycle [ 1044.629349][ T5897] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1044.662824][ T5897] usb 3-1: device descriptor read/8, error -71 [ 1044.954996][ T5897] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1045.032648][ T5897] usb 3-1: device descriptor read/8, error -71 [ 1045.142288][ T5897] usb usb3-port1: unable to enumerate USB device [ 1045.573224][T19480] tipc: Resetting bearer [ 1045.619550][T19480] tipc: Disabling bearer [ 1046.021838][ T10] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1046.174756][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.191650][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1046.204754][ T10] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1046.214964][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1046.232273][ T10] usb 2-1: config 0 descriptor?? [ 1046.237617][T19521] loop2: detected capacity change from 0 to 7 [ 1046.246209][ T5864] Dev loop2: unable to read RDB block 7 [ 1046.254602][ T5864] loop2: unable to read partition table [ 1046.260832][ T5864] loop2: partition table beyond EOD, truncated [ 1046.271045][T19521] Dev loop2: unable to read RDB block 7 [ 1046.277950][T19521] loop2: unable to read partition table [ 1046.284341][T19521] loop2: partition table beyond EOD, truncated [ 1046.290745][T19521] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1046.402893][ T938] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1046.573616][ T938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1046.585562][ T938] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1046.599672][ T938] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1046.615647][ T938] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1046.625769][ T938] usb 5-1: Product: syz [ 1046.629977][ T938] usb 5-1: Manufacturer: syz [ 1046.635134][ T938] usb 5-1: SerialNumber: syz [ 1046.669194][ T938] cdc_mbim 5-1:1.0: skipping garbage [ 1046.951935][T19519] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1047.026598][T19508] fuse: Bad value for 'rootmode' [ 1047.169890][T19519] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22 [ 1047.178673][T19532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.227530][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 1047.233953][T19532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.234229][ T938] cdc_mbim 5-1:1.0: setting rx_max = 16384 [ 1047.241894][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1047.299680][ T10] usb 2-1: USB disconnect, device number 79 [ 1047.437155][ T938] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 1047.457369][ T938] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 1047.501817][ T938] wwan wwan0: port wwan0mbim0 attached [ 1047.534166][ T938] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 82:7a:c9:6a:85:b7 [ 1047.594060][ T938] usb 5-1: USB disconnect, device number 67 [ 1047.672720][ T938] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 1047.776437][ T938] wwan wwan0: port wwan0mbim0 disconnected [ 1048.214142][T19555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1048.224711][T19555] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1048.541782][ T10] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1048.601904][T17948] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1048.701796][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1048.710309][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.761818][T17948] usb 2-1: Using ep0 maxpacket: 32 [ 1048.778476][T17948] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1048.803825][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1048.867502][T17948] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1048.898794][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1048.912266][ T9] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1048.921317][T17948] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1048.936704][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.956699][T17948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1048.997100][ T10] usb 5-1: config 0 descriptor?? [ 1049.004247][T17948] usb 2-1: config 0 descriptor?? [ 1049.038455][T17948] hub 2-1:0.0: bad descriptor, ignoring hub [ 1049.047591][T17948] hub 2-1:0.0: probe with driver hub failed with error -5 [ 1049.065035][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 1049.171990][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1049.184855][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1049.193806][T17948] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1049.207234][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1049.219621][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1049.250250][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1049.270360][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1049.290006][ T9] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00 [ 1049.304161][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1049.376715][ T9] usb 3-1: config 0 descriptor?? [ 1049.419654][ T8075] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.430587][ T36] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.456237][ T36] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.478158][ T36] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1049.815522][ T9] apple 0003:05AC:027A.001F: hidraw0: USB HID v0.07 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0 [ 1050.020000][ T9] usb 3-1: USB disconnect, device number 78 [ 1050.230842][T19580] fido_id[19580]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1050.898332][T19592] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1050.908549][T19592] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3530'. [ 1051.202533][ T10] usb 5-1: USB disconnect, device number 68 [ 1051.282534][T19598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1051.823645][T19606] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1051.872156][T19606] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.022076][ T10] usb 2-1: USB disconnect, device number 80 [ 1052.625229][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3540'. [ 1052.661342][T19624] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3540'. [ 1052.813879][T19624] macvlan3: entered allmulticast mode [ 1052.819375][T19624] veth1_vlan: entered allmulticast mode [ 1052.926013][T19633] loop2: detected capacity change from 0 to 7 [ 1052.938200][T19633] Dev loop2: unable to read RDB block 7 [ 1052.959715][T19637] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1052.968529][T19633] loop2: unable to read partition table [ 1052.978027][T19633] loop2: partition table beyond EOD, truncated [ 1053.271433][T19633] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1054.021827][ T10] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1054.197758][ T10] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 1054.207154][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.225498][ T10] usb 2-1: Product: syz [ 1054.232069][ T10] usb 2-1: Manufacturer: syz [ 1054.236716][ T10] usb 2-1: SerialNumber: syz [ 1054.280852][ T10] usb 2-1: config 0 descriptor?? [ 1054.352901][ T10] hso 2-1:0.0: Not our interface [ 1054.358615][ T10] usb-storage 2-1:0.0: USB Mass Storage device detected [ 1054.604015][ T10] usb 2-1: USB disconnect, device number 81 [ 1055.279561][ T10] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1055.502076][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 1055.510620][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1055.523464][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1055.613693][T19672] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1055.623770][T19672] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3549'. [ 1055.654211][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1055.692287][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.820594][ T10] usb 3-1: config 0 descriptor?? [ 1055.902714][ T10] hub 3-1:0.0: bad descriptor, ignoring hub [ 1055.925436][ T10] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1055.944733][ T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1056.577451][T19683] loop2: detected capacity change from 0 to 7 [ 1056.786718][T19683] Dev loop2: unable to read RDB block 7 [ 1056.792738][T19683] loop2: unable to read partition table [ 1056.800044][T19683] loop2: partition table beyond EOD, truncated [ 1056.871736][T19683] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1057.218070][T19687] netlink: 'syz.0.3556': attribute type 10 has an invalid length. [ 1057.507799][T19687] team0: Port device syz_tun added [ 1058.628912][T19696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.647998][T19696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.888083][ T938] usb 3-1: USB disconnect, device number 79 [ 1059.186014][T19704] netlink: 124 bytes leftover after parsing attributes in process `syz.4.3561'. [ 1059.196188][ T938] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1059.377712][ T938] usb 3-1: device descriptor read/64, error -71 [ 1059.471217][T19711] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3563'. [ 1059.778708][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1059.785217][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1059.832022][ T938] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1059.852769][T19713] loop2: detected capacity change from 0 to 7 [ 1059.901204][ T6295] Dev loop2: unable to read RDB block 7 [ 1059.943304][ T6295] loop2: unable to read partition table [ 1059.962641][ T6295] loop2: partition table beyond EOD, truncated [ 1059.971736][ T938] usb 3-1: device descriptor read/64, error -71 [ 1060.040063][T19713] Dev loop2: unable to read RDB block 7 [ 1060.061279][T19713] loop2: unable to read partition table [ 1060.071989][T19713] loop2: partition table beyond EOD, truncated [ 1060.078736][T19713] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1060.088526][ T938] usb usb3-port1: attempt power cycle [ 1060.144962][ T5211] Dev loop2: unable to read RDB block 7 [ 1060.171127][ T5211] loop2: unable to read partition table [ 1060.201106][ T5211] loop2: partition table beyond EOD, truncated [ 1060.452060][ T938] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1060.502721][ T938] usb 3-1: device descriptor read/8, error -71 [ 1060.536900][T19719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3566'. [ 1060.751770][ T938] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1060.796334][ T938] usb 3-1: device descriptor read/8, error -71 [ 1060.942582][ T938] usb usb3-port1: unable to enumerate USB device [ 1061.411715][T17948] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1061.571682][T17948] usb 5-1: Using ep0 maxpacket: 16 [ 1061.625142][T17948] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1061.747855][T17948] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1061.853195][T19737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1061.865937][T17948] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1061.868907][T19737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1061.922302][T17948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1061.931982][T17948] usb 5-1: Product: syz [ 1061.959124][T17948] usb 5-1: Manufacturer: syz [ 1061.981800][T17948] usb 5-1: SerialNumber: syz [ 1062.012372][T19737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1062.023390][T17948] usb 5-1: config 0 descriptor?? [ 1062.039033][T19737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1062.062982][T17948] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1062.074059][T19737] netlink: 91 bytes leftover after parsing attributes in process `syz.5.3570'. [ 1062.112582][T19737] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 1062.132094][T17948] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1062.320877][T19742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1062.332260][T19742] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1062.838120][T17948] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1062.849610][T17948] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 1063.110420][T17948] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 1063.121821][T17948] em28xx 5-1:0.0: No AC97 audio processor [ 1063.294139][T19757] loop2: detected capacity change from 0 to 7 [ 1063.516898][T19757] Dev loop2: unable to read RDB block 7 [ 1063.654271][T19757] loop2: unable to read partition table [ 1063.668346][T19757] loop2: partition table beyond EOD, truncated [ 1063.685552][T19757] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1063.985336][ T5211] Dev loop2: unable to read RDB block 7 [ 1063.991200][ T5211] loop2: unable to read partition table [ 1064.012613][ T5211] loop2: partition table beyond EOD, truncated [ 1064.381686][T17948] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1064.460556][ T938] usb 5-1: USB disconnect, device number 69 [ 1064.471932][ T938] em28xx 5-1:0.0: Disconnecting em28xx [ 1064.536192][ T938] em28xx 5-1:0.0: Freeing device [ 1064.564260][T17948] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 1064.599346][T17948] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 1064.659769][T17948] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.727134][T17948] usb 2-1: config 0 descriptor?? [ 1064.792896][T17948] smsusb:smsusb_probe: board id=8, interface number 0 [ 1064.856854][T19779] netlink: 'syz.2.3578': attribute type 4 has an invalid length. [ 1065.187414][T17948] smsusb:smsusb_probe: Device initialized with return code -19 [ 1065.196002][T19781] FAULT_INJECTION: forcing a failure. [ 1065.196002][T19781] name failslab, interval 1, probability 0, space 0, times 0 [ 1065.251787][T19781] CPU: 0 UID: 0 PID: 19781 Comm: syz.4.3579 Not tainted syzkaller #0 PREEMPT(full) [ 1065.251818][T19781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1065.251834][T19781] Call Trace: [ 1065.251843][T19781] [ 1065.251853][T19781] dump_stack_lvl+0x189/0x250 [ 1065.251887][T19781] ? __pfx____ratelimit+0x10/0x10 [ 1065.251923][T19781] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1065.251951][T19781] ? __pfx__printk+0x10/0x10 [ 1065.251981][T19781] ? netlink_sendmsg+0x805/0xb30 [ 1065.252012][T19781] ? __x64_sys_sendmsg+0x19b/0x260 [ 1065.252039][T19781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.252073][T19781] should_fail_ex+0x414/0x560 [ 1065.252107][T19781] should_failslab+0xa8/0x100 [ 1065.252145][T19781] kmem_cache_alloc_noprof+0x74/0x6e0 [ 1065.252176][T19781] ? skb_clone+0x212/0x3a0 [ 1065.252219][T19781] skb_clone+0x212/0x3a0 [ 1065.252252][T19781] __netlink_deliver_tap+0x404/0x850 [ 1065.252291][T19781] ? netlink_deliver_tap+0x2e/0x1b0 [ 1065.252318][T19781] netlink_deliver_tap+0x19c/0x1b0 [ 1065.252345][T19781] netlink_sendskb+0x68/0x140 [ 1065.252383][T19781] netlink_unicast+0x397/0x9e0 [ 1065.252415][T19781] ? __asan_memcpy+0x40/0x70 [ 1065.252452][T19781] ? __pfx_netlink_unicast+0x10/0x10 [ 1065.252499][T19781] netlink_rcv_skb+0x28c/0x470 [ 1065.252521][T19781] ? __lock_acquire+0xab9/0xd20 [ 1065.252544][T19781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1065.252578][T19781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1065.252622][T19781] ? down_read+0x1ad/0x2e0 [ 1065.252652][T19781] genl_rcv+0x28/0x40 [ 1065.252681][T19781] netlink_unicast+0x82f/0x9e0 [ 1065.252726][T19781] ? __pfx_netlink_unicast+0x10/0x10 [ 1065.252764][T19781] ? netlink_sendmsg+0x642/0xb30 [ 1065.252787][T19781] ? skb_put+0x11b/0x210 [ 1065.252816][T19781] netlink_sendmsg+0x805/0xb30 [ 1065.252852][T19781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.252881][T19781] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1065.252913][T19781] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1065.252948][T19781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1065.252974][T19781] __sock_sendmsg+0x219/0x270 [ 1065.253012][T19781] ____sys_sendmsg+0x505/0x830 [ 1065.253046][T19781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1065.253086][T19781] ? import_iovec+0x74/0xa0 [ 1065.253114][T19781] ___sys_sendmsg+0x21f/0x2a0 [ 1065.253144][T19781] ? __pfx____sys_sendmsg+0x10/0x10 [ 1065.253224][T19781] ? __fget_files+0x2a/0x420 [ 1065.253258][T19781] ? __fget_files+0x3a0/0x420 [ 1065.253303][T19781] __x64_sys_sendmsg+0x19b/0x260 [ 1065.253335][T19781] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1065.253375][T19781] ? __pfx_ksys_write+0x10/0x10 [ 1065.253403][T19781] ? rcu_is_watching+0x15/0xb0 [ 1065.253435][T19781] ? do_syscall_64+0xbe/0x3b0 [ 1065.253463][T19781] do_syscall_64+0xfa/0x3b0 [ 1065.253485][T19781] ? lockdep_hardirqs_on+0x9c/0x150 [ 1065.253506][T19781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.253528][T19781] ? clear_bhb_loop+0x60/0xb0 [ 1065.253556][T19781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1065.253578][T19781] RIP: 0033:0x7ff21a18eec9 [ 1065.253599][T19781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1065.253619][T19781] RSP: 002b:00007ff21af5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1065.253643][T19781] RAX: ffffffffffffffda RBX: 00007ff21a3e5fa0 RCX: 00007ff21a18eec9 [ 1065.253660][T19781] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 1065.253674][T19781] RBP: 00007ff21af5c090 R08: 0000000000000000 R09: 0000000000000000 [ 1065.253689][T19781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1065.253701][T19781] R13: 00007ff21a3e6038 R14: 00007ff21a3e5fa0 R15: 00007ff21a50fa28 [ 1065.253735][T19781] [ 1067.115653][T19802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1067.136554][T19802] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1067.701857][T17948] usb 2-1: USB disconnect, device number 82 [ 1067.936283][T19812] loop2: detected capacity change from 0 to 7 [ 1067.966867][ T6295] Dev loop2: unable to read RDB block 7 [ 1067.973608][ T6295] loop2: unable to read partition table [ 1067.979630][ T6295] loop2: partition table beyond EOD, truncated [ 1068.008521][T19814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1068.022810][T19817] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3585'. [ 1068.053259][T19812] Dev loop2: unable to read RDB block 7 [ 1068.072265][T19812] loop2: unable to read partition table [ 1068.088050][T19812] loop2: partition table beyond EOD, truncated [ 1068.092191][T19814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1068.212490][T19812] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1068.471774][ T5897] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1068.587311][T19825] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3588'. [ 1068.631796][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 1068.648134][ T5897] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1068.657703][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.738068][ T5897] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1068.750711][ T5897] pvrusb2: ********** [ 1068.938966][ T5897] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1068.949442][ T6003] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1068.957182][ T938] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1068.998439][T19835] loop6: detected capacity change from 0 to 1 [ 1069.010102][T19835] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 1069.037760][T19835] loop6: p1 start 4294770687 is beyond EOD, truncated [ 1069.056319][ T5897] pvrusb2: Important functionality might not be entirely working. [ 1069.064778][ T5897] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1069.076531][ T5897] pvrusb2: ********** [ 1069.076903][T19835] loop6: p2 start 524299 is beyond EOD, [ 1069.201790][ T938] usb 3-1: Using ep0 maxpacket: 32 [ 1069.214848][T19835] truncated [ 1069.218057][T19835] loop6: p3 size 1680801792 extends beyond EOD, truncated [ 1069.234089][ T938] usb 3-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.247297][ T938] usb 3-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1069.258145][ T2344] pvrusb2: Invalid write control endpoint [ 1069.264057][ T6003] usb 5-1: Using ep0 maxpacket: 32 [ 1069.272396][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.289676][T19835] loop6: p4 size 655360 extends beyond EOD, truncated [ 1069.309073][ T938] usb 3-1: Product: syz [ 1069.317249][ T938] usb 3-1: Manufacturer: syz [ 1069.331858][T19820] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 1069.342791][T19835] loop6: p5 size 1140850688 extends beyond EOD, truncated [ 1069.351113][ T938] usb 3-1: SerialNumber: syz [ 1069.373268][ T938] pwc: Askey VC010 type 1 USB webcam detected. [ 1069.417538][ T2344] pvrusb2: Invalid write control endpoint [ 1069.426924][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1069.441426][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1069.450408][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1069.460863][ T2344] pvrusb2: Device being rendered inoperable [ 1069.467109][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1069.477071][ T6003] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1069.488320][ T6003] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1069.513209][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1069.540407][ T6003] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1069.556149][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1069.577331][ T938] pwc: send_video_command error -71 [ 1069.587642][ T938] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1069.605317][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1069.625933][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.638547][ T6295] udevd[6295]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1069.643539][ T6589] udevd[6589]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1069.650805][ T6148] udevd[6148]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1069.695157][ T938] Philips webcam 3-1:76.0: probe with driver Philips webcam failed with error -71 [ 1069.718681][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1069.730835][ T6003] usb 5-1: config 0 descriptor?? [ 1069.739566][ T938] usb 3-1: USB disconnect, device number 84 [ 1069.755842][ T6003] hub 5-1:0.0: bad descriptor, ignoring hub [ 1069.779064][ T6003] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1069.799905][ T6003] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1071.361715][ T10] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1071.401391][ T6003] usb 2-1: USB disconnect, device number 83 [ 1071.621722][ T10] usb 3-1: device descriptor read/64, error -71 [ 1071.861709][ T10] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1071.915764][T19858] loop2: detected capacity change from 0 to 7 [ 1071.930101][T19858] Dev loop2: unable to read RDB block 7 [ 1071.964350][T19858] loop2: unable to read partition table [ 1071.990594][T19858] loop2: partition table beyond EOD, truncated [ 1072.022133][ T10] usb 3-1: device descriptor read/64, error -71 [ 1072.027131][T19858] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1072.132213][ T10] usb usb3-port1: attempt power cycle [ 1072.192016][ T9] usb 5-1: USB disconnect, device number 70 [ 1072.511812][ T10] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1072.543153][ T10] usb 3-1: device descriptor read/8, error -71 [ 1072.626698][T19873] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3603'. [ 1072.637135][ T30] audit: type=1326 audit(1759793666.819:2589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19874 comm="syz.4.3604" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff21a18eec9 code=0x0 [ 1072.791981][ T10] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1072.812533][ T10] usb 3-1: device descriptor read/8, error -71 [ 1072.942896][ T10] usb usb3-port1: unable to enumerate USB device [ 1072.963246][T19885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1072.972751][T19885] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3605'. [ 1073.002790][ T6003] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1073.183790][ T6003] usb 5-1: Using ep0 maxpacket: 16 [ 1073.197018][ T6003] usb 5-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=ba.e9 [ 1073.308892][ T6003] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.319089][ T6003] usb 5-1: Product: syz [ 1073.324208][ T6003] usb 5-1: Manufacturer: syz [ 1073.328955][ T6003] usb 5-1: SerialNumber: syz [ 1073.361501][ T6003] usb 5-1: config 0 descriptor?? [ 1073.384823][ T6003] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected. [ 1073.781325][T19882] netlink: 'syz.4.3606': attribute type 10 has an invalid length. [ 1073.809647][T19882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1073.875921][T19882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1073.905700][ T6003] pwc: send_video_command error -71 [ 1073.910981][ T6003] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 1073.918832][ T6003] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 1073.956623][ T6003] usb 5-1: USB disconnect, device number 71 [ 1074.031385][T19897] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3609'. [ 1074.116936][T19898] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3609'. [ 1074.127985][T19898] libceph: resolve '0..' (ret=-3): failed [ 1074.234565][T19900] syzkaller0: entered promiscuous mode [ 1074.240541][T19900] syzkaller0: entered allmulticast mode [ 1074.978574][T19909] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3611'. [ 1074.999127][T19909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3611'. [ 1075.012947][T19909] libceph: resolve '0..' (ret=-3): failed [ 1075.471733][ T5897] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1075.697766][ T5897] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1075.707776][ T5897] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1075.749209][ T5897] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1075.831790][ T5897] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1075.856429][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1075.895396][ T5897] usb 2-1: Product: syz [ 1075.921686][ T5897] usb 2-1: Manufacturer: syz [ 1075.950514][ T5897] usb 2-1: SerialNumber: syz [ 1076.195471][ T5897] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 84 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1076.453194][ T5897] usb 2-1: USB disconnect, device number 84 [ 1076.463526][ T5897] usblp0: removed [ 1076.786319][T19931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1077.662418][ T10] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1077.818136][T19951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.827169][T19951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.921740][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 1077.950322][ T10] usb 3-1: config 0 has no interfaces? [ 1078.765933][T19956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3623'. [ 1078.776277][T19956] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3623'. [ 1080.474928][ T10] usb 3-1: string descriptor 0 read error: -71 [ 1080.509772][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1080.585166][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1080.651262][ T10] usb 3-1: config 0 descriptor?? [ 1080.677185][ T10] usb 3-1: can't set config #0, error -71 [ 1080.735883][ T10] usb 3-1: USB disconnect, device number 89 [ 1080.773489][T19970] fuse: Bad value for 'fd' [ 1081.683522][T19981] netlink: 'syz.4.3628': attribute type 10 has an invalid length. [ 1081.770493][T19981] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1081.791148][T19981] team0: Failed to send options change via netlink (err -105) [ 1081.801203][T19981] team0: Port device netdevsim0 added [ 1081.811340][ T8075] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 1082.017362][T19987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.032062][T19987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.607442][T19994] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1084.178511][ T10] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1084.362317][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1084.370620][ T10] usb 5-1: config 0 has an invalid interface number: 119 but max is 0 [ 1084.379616][ T10] usb 5-1: config 0 has no interface number 0 [ 1084.405172][ T10] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=d9.19 [ 1084.432432][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1084.491081][ T10] usb 5-1: Product: syz [ 1084.516024][ T10] usb 5-1: Manufacturer: syz [ 1084.527429][ T10] usb 5-1: SerialNumber: syz [ 1084.549333][ T10] usb 5-1: config 0 descriptor?? [ 1084.587984][ T10] gspca_main: sn9c2028-2.14.0 probing 0458:7003 [ 1084.760212][ T10] gspca_sn9c2028: read1 error 0 [ 1085.107209][ T5897] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1085.281827][ T10] gspca_sn9c2028: read1 error -110 [ 1085.287529][ T10] gspca_sn9c2028: read1 error -32 [ 1085.373512][ T5897] usb 3-1: Using ep0 maxpacket: 32 [ 1085.386674][ T10] sn9c2028 5-1:0.119: probe with driver sn9c2028 failed with error -32 [ 1085.388256][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1085.406057][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1085.422895][ T5897] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1085.432504][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1085.468554][ T5897] usb 3-1: config 0 descriptor?? [ 1085.498174][ T5897] hub 3-1:0.0: bad descriptor, ignoring hub [ 1085.514893][ T5897] hub 3-1:0.0: probe with driver hub failed with error -5 [ 1085.549953][ T5897] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1085.655370][T20018] syzkaller0: entered promiscuous mode [ 1085.668768][T20018] syzkaller0: entered allmulticast mode [ 1086.057458][T20027] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1086.067176][T20027] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3638'. [ 1086.202700][ T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1086.371677][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 1086.383552][ T9] usb 2-1: config 0 has an invalid interface number: 150 but max is 0 [ 1086.415495][ T9] usb 2-1: config 0 has no interface number 0 [ 1086.434187][ T9] usb 2-1: config 0 interface 150 has no altsetting 0 [ 1086.467253][ T9] usb 2-1: New USB device found, idVendor=093a, idProduct=2603, bcdDevice=53.01 [ 1086.488130][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1086.508778][ T9] usb 2-1: Product: syz [ 1086.554080][ T9] usb 2-1: Manufacturer: syz [ 1086.559037][ T9] usb 2-1: SerialNumber: syz [ 1086.647043][ T9] usb 2-1: config 0 descriptor?? [ 1086.664347][ T9] gspca_main: pac7311-2.14.0 probing 093a:2603 [ 1086.828576][T17948] usb 5-1: USB disconnect, device number 72 [ 1087.160314][T20036] loop6: detected capacity change from 0 to 1 [ 1087.169209][T20036] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 1087.187128][T20036] loop6: p1 start 4294770687 is beyond EOD, truncated [ 1087.195618][T20037] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1024 (8192 ns) > initial count (7168 ns). Using initial count to start timer. [ 1087.236996][T20036] loop6: p2 start 524299 is beyond EOD, truncated [ 1087.268962][T20036] loop6: p3 size 1680801792 extends beyond EOD, truncated [ 1087.291501][T20036] loop6: p4 size 655360 extends beyond EOD, truncated [ 1087.321735][T20036] loop6: p5 size 1140850688 extends beyond EOD, truncated [ 1087.338730][T20026] kvm: pic: non byte write [ 1087.370114][ T9] gspca_pac7311: reg_w() failed index 0x78, value 0x40, error -110 [ 1087.405541][ T9] pac7311 2-1:0.150: probe with driver pac7311 failed with error -110 [ 1087.528931][ T6202] udevd[6202]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1087.539887][ T6295] udevd[6295]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1087.540552][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1087.609268][ T6003] usb 2-1: USB disconnect, device number 85 [ 1087.716415][T20049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.728329][T20049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.842219][ T6003] usb 3-1: USB disconnect, device number 90 [ 1088.956774][T20062] syzkaller0: entered promiscuous mode [ 1088.981167][T20062] syzkaller0: entered allmulticast mode [ 1089.131701][ T6003] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1089.261789][ T6003] usb 3-1: device descriptor read/64, error -71 [ 1089.316128][T20075] loop6: detected capacity change from 0 to 1 [ 1089.323380][T20075] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 1089.328799][T20075] loop6: p1 start 4294770687 is beyond EOD, truncated [ 1089.336028][T20075] loop6: p2 start 524299 is beyond EOD, truncated [ 1089.342780][T20075] loop6: p3 size 1680801792 extends beyond EOD, truncated [ 1089.352123][T20075] loop6: p4 size 655360 extends beyond EOD, truncated [ 1089.360568][T20075] loop6: p5 size 1140850688 extends beyond EOD, truncated [ 1089.401871][ T9] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1089.423315][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1089.438992][ T6202] udevd[6202]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1089.439200][ T6295] udevd[6295]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1089.502366][ T6003] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1089.572129][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1089.579253][ T9] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 1089.587879][ T9] usb 5-1: config 1 has no interface number 0 [ 1089.594416][ T9] usb 5-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.605568][ T9] usb 5-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1089.640104][ T9] usb 5-1: config 1 interface 236 has no altsetting 0 [ 1089.647464][ T6003] usb 3-1: device descriptor read/64, error -71 [ 1089.648908][ T9] usb 5-1: config 1 has an invalid interface number: 236 but max is 0 [ 1089.679761][T20083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1089.689946][T20083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1089.707307][ T9] usb 5-1: config 1 has no interface number 0 [ 1089.724122][T20084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1089.733345][T20084] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3656'. [ 1089.771981][ T6003] usb usb3-port1: attempt power cycle [ 1089.836520][ T9] usb 5-1: config 1 interface 236 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1089.846889][ T9] usb 5-1: config 1 interface 236 altsetting 2 bulk endpoint 0x5 has invalid maxpacket 0 [ 1089.865796][ T9] usb 5-1: config 1 interface 236 has no altsetting 0 [ 1089.924828][ T9] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 1089.934688][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.943018][ T9] usb 5-1: Product: syz [ 1089.947394][ T9] usb 5-1: Manufacturer: syz [ 1089.957163][ T9] usb 5-1: SerialNumber: syz [ 1089.996196][ T9] ti_usb_3410_5052 5-1:1.236: TI USB 5052 2 port adapter converter detected [ 1090.182191][ T6003] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1090.202485][ T6003] usb 3-1: device descriptor read/8, error -71 [ 1090.262457][T20085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.286568][T20085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.442506][ T6003] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1090.462367][ T6003] usb 3-1: device descriptor read/8, error -71 [ 1090.572539][ T6003] usb usb3-port1: unable to enumerate USB device [ 1091.342061][ T9] usb 2-1: new full-speed USB device number 86 using dummy_hcd [ 1091.503806][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1091.515472][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 1091.526430][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1091.545651][ T9] usb 2-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 1091.554823][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.565731][ T9] usb 2-1: config 0 descriptor?? [ 1091.571814][T20091] raw-gadget.6 gadget.1: fail, usb_ep_enable returned -22 [ 1091.738850][T20093] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1091.775270][T20093] trusted_key: encrypted_key: master key parameter is missing [ 1091.861327][T20098] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1091.995055][ T9] aureal 0003:0755:2626.0020: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor. [ 1092.022455][ T9] aureal 0003:0755:2626.0020: unknown main item tag 0x6 [ 1092.033574][ T9] aureal 0003:0755:2626.0020: report_id 29495 is invalid [ 1092.040761][ T9] aureal 0003:0755:2626.0020: item 0 2 1 8 parsing failed [ 1092.050543][ T9] aureal 0003:0755:2626.0020: probe with driver aureal failed with error -22 [ 1092.175867][ T9] usb 5-1: USB disconnect, device number 73 [ 1092.196179][ T10] usb 2-1: USB disconnect, device number 86 [ 1092.327655][T20114] loop6: detected capacity change from 0 to 1 [ 1092.340008][T20114] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 1092.351564][T20114] loop6: p1 start 4294770687 is beyond EOD, truncated [ 1092.363930][T20114] loop6: p2 start 524299 is beyond EOD, truncated [ 1092.370655][T20114] loop6: p3 size 1680801792 extends beyond EOD, truncated [ 1092.519375][T20114] loop6: p4 size 655360 extends beyond EOD, truncated [ 1092.530932][T20114] loop6: p5 size 1140850688 extends beyond EOD, truncated [ 1092.581744][T15482] Bluetooth: hci1: command 0x0406 tx timeout [ 1092.764940][ T9] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 1092.825513][ T6202] udevd[6202]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1092.850360][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1092.864555][ T6295] udevd[6295]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1092.912065][ T9] usb 5-1: device descriptor read/64, error -71 [ 1093.061964][T20120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.087723][T20120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1093.163965][ T9] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 1093.307685][T20126] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3670'. [ 1093.338268][ T9] usb 5-1: device descriptor read/64, error -71 [ 1093.456711][ T9] usb usb5-port1: attempt power cycle [ 1093.843625][ T9] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 1093.892800][ T9] usb 5-1: device descriptor read/8, error -71 [ 1093.931746][ T10] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1094.123529][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1094.133325][ T9] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1094.150289][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1094.160803][ T9] usb 5-1: device descriptor read/8, error -71 [ 1094.174242][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1094.192860][ T10] usb 2-1: Product: syz [ 1094.199804][ T10] usb 2-1: Manufacturer: syz [ 1094.208555][ T10] usb 2-1: SerialNumber: syz [ 1094.222014][ T10] usb 2-1: config 0 descriptor?? [ 1094.282098][ T9] usb usb5-port1: unable to enumerate USB device [ 1095.518329][T20159] syzkaller0: entered promiscuous mode [ 1095.524163][T20159] syzkaller0: entered allmulticast mode [ 1095.746652][T20161] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3678'. [ 1095.758786][T20161] libceph: resolve '0..' (ret=-3): failed [ 1095.980345][T20164] loop6: detected capacity change from 0 to 1 [ 1095.996321][T20164] loop6: [POWERTEC] p1 p2 p3 p4 p5 [ 1096.009413][T20164] loop6: p1 start 4294770687 is beyond EOD, truncated [ 1096.037143][T20164] loop6: p2 start 524299 is beyond EOD, truncated [ 1096.051392][T20164] loop6: p3 size 1680801792 extends beyond EOD, truncated [ 1096.159361][T20164] loop6: p4 size 655360 extends beyond EOD, truncated [ 1096.175106][T20164] loop6: p5 size 1140850688 extends beyond EOD, truncated [ 1096.457635][T20171] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1096.470301][T20171] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3682'. [ 1096.515609][T20173] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3683'. [ 1096.554589][T20175] libceph: resolve '0..' (ret=-3): failed [ 1096.637922][ T10] usb 2-1: USB disconnect, device number 87 [ 1097.066831][ T6202] udevd[6202]: inotify_add_watch(7, /dev/loop6p5, 10) failed: No such file or directory [ 1097.074295][ T6295] udevd[6295]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 1097.106502][ T5864] udevd[5864]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 1097.163704][ T10] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1097.355274][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1097.373614][ T10] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1097.393696][ T10] usb 2-1: config 0 has no interface number 0 [ 1097.428724][ T10] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1097.466627][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.500016][ T10] usb 2-1: Product: syz [ 1097.519649][ T10] usb 2-1: Manufacturer: syz [ 1097.535693][ T10] usb 2-1: SerialNumber: syz [ 1097.562323][ T10] usb 2-1: config 0 descriptor?? [ 1097.619072][ T10] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1097.784634][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1097.821388][ T10] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1098.105734][T20189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3684'. [ 1098.581057][T20195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3689'. [ 1098.889732][T20206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1098.907321][T20206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3692'. [ 1098.954136][T20206] libceph: resolve '0..' (ret=-3): failed [ 1099.992732][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1099.993313][ T938] usb 2-1: USB disconnect, device number 88 [ 1100.037443][ T938] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1100.101383][ T938] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1100.140837][ T938] quatech2 2-1:0.51: device disconnected [ 1100.591249][T20222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3697'. [ 1100.612548][T20222] libceph: resolve '0..' (ret=-3): failed [ 1101.522623][T20233] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3700'. [ 1101.536064][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3700'. [ 1101.547144][T20233] libceph: resolve '0..' (ret=-3): failed [ 1101.904133][T20235] syzkaller0: entered promiscuous mode [ 1101.943295][T20235] syzkaller0: entered allmulticast mode [ 1102.169023][T20245] trusted_key: encrypted_key: master key parameter 'œ×p<™|ض””«ùìî<é¾ëù,.ÌŒ>u‚chæG™' is invalid [ 1102.586369][T20257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3705'. [ 1102.935393][ T9] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1103.151644][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1103.179397][ T9] usb 5-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 1103.240857][ T9] usb 5-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1103.270500][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.289496][ T9] usb 5-1: Product: syz [ 1103.330420][ T9] usb 5-1: Manufacturer: syz [ 1103.382527][ T9] usb 5-1: SerialNumber: syz [ 1103.514318][ T9] pwc: Askey VC010 type 1 USB webcam detected. [ 1104.124515][T20281] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3714'. [ 1104.137378][T20281] libceph: resolve '0..' (ret=-3): failed [ 1106.253773][ T9] pwc: send_video_command error -71 [ 1106.260080][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1106.278488][ T9] Philips webcam 5-1:76.0: probe with driver Philips webcam failed with error -71 [ 1106.387337][ T9] usb 5-1: USB disconnect, device number 78 [ 1106.650402][T20300] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1106.665414][T20300] team0: Port device batadv1 added [ 1106.757147][T20300] hub 9-0:1.0: USB hub found [ 1106.765048][T20300] hub 9-0:1.0: 1 port detected [ 1107.097759][T20311] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3719'. [ 1107.113809][T20311] libceph: resolve '0..' (ret=-3): failed [ 1107.771796][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.812384][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.821414][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.830248][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1107.897810][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1107.936890][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.012216][ T6003] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1108.118920][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.148450][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.193891][T20317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.266289][T20317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1108.338657][ T6003] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.367626][ T6003] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1108.412216][ T6003] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1108.421716][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.433308][ T6003] usb 5-1: config 0 descriptor?? [ 1108.581357][ T6003] usbhid 5-1:0.0: can't add hid device: -71 [ 1108.599629][ T6003] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1108.648056][ T6003] usb 5-1: USB disconnect, device number 79 [ 1108.668496][T20329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3724'. [ 1108.936716][T20340] loop2: detected capacity change from 0 to 7 [ 1108.948038][T20342] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1108.968310][T20340] Dev loop2: unable to read RDB block 7 [ 1108.983686][T20340] loop2: unable to read partition table [ 1108.993035][T20342] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1109.022089][T20340] loop2: partition table beyond EOD, truncated [ 1109.052467][T20340] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1109.173463][T20348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3730'. [ 1109.255541][T20355] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3731'. [ 1109.465234][T20358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3732'. [ 1109.531787][T17948] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 1109.623133][ T10] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 1109.692457][T17948] usb 5-1: device descriptor read/64, error -71 [ 1109.831627][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 1109.852079][ T10] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 1109.865068][ T10] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1109.909424][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.935153][ T10] usb 2-1: Product: syz [ 1109.943496][ T10] usb 2-1: Manufacturer: syz [ 1109.951727][T17948] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 1109.963316][ T10] usb 2-1: SerialNumber: syz [ 1109.988769][ T10] pwc: Askey VC010 type 1 USB webcam detected. [ 1110.148938][T17948] usb 5-1: device descriptor read/64, error -71 [ 1110.262069][T17948] usb usb5-port1: attempt power cycle [ 1110.601773][T17948] usb 5-1: new low-speed USB device number 82 using dummy_hcd [ 1110.642502][T17948] usb 5-1: device descriptor read/8, error -71 [ 1110.891841][T17948] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 1110.912678][T17948] usb 5-1: device descriptor read/8, error -71 [ 1111.022650][T17948] usb usb5-port1: unable to enumerate USB device [ 1111.566979][T20372] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3734'. [ 1111.579672][T20372] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3734'. [ 1111.592082][T20372] libceph: resolve '0..' (ret=-3): failed [ 1112.225467][ T10] pwc: send_video_command error -71 [ 1112.261400][ T10] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1112.281253][ T10] Philips webcam 2-1:76.0: probe with driver Philips webcam failed with error -71 [ 1112.866153][T20386] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1112.875785][T20386] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1112.887031][T20386] tipc: Failed to remove unknown binding: 66,1,1/0:2996796415/2996796417 [ 1112.934616][T20386] tipc: Failed to remove unknown binding: 66,1,1/0:2996796415/2996796417 [ 1113.165543][ T10] usb 2-1: USB disconnect, device number 89 [ 1113.931946][T20397] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3741'. [ 1113.941798][T20397] unsupported nlmsg_type 40 [ 1113.949948][T20399] netlink: 'syz.4.3740': attribute type 10 has an invalid length. [ 1114.026922][T20399] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3740'. [ 1114.077985][T20399] team0: entered promiscuous mode [ 1114.087238][T20399] team_slave_0: entered promiscuous mode [ 1114.101534][T20399] team_slave_1: entered promiscuous mode [ 1114.132190][T20399] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1114.159442][T20399] team0: entered allmulticast mode [ 1114.166133][T20399] team_slave_0: entered allmulticast mode [ 1114.175007][T20399] team_slave_1: entered allmulticast mode [ 1114.182519][T20399] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1114.192644][T20399] bridge0: port 3(team0) entered blocking state [ 1114.199561][T20399] bridge0: port 3(team0) entered disabled state [ 1114.610661][T20399] bridge0: port 3(team0) entered blocking state [ 1114.617127][T20399] bridge0: port 3(team0) entered forwarding state [ 1115.068324][ T30] audit: type=1326 audit(1759793709.249:2590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.173699][ T30] audit: type=1326 audit(1759793709.289:2591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=210 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.381479][ T30] audit: type=1326 audit(1759793709.289:2592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.471743][ T30] audit: type=1326 audit(1759793709.289:2593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.508118][ T30] audit: type=1326 audit(1759793709.289:2594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.533625][ T30] audit: type=1326 audit(1759793709.289:2595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.725408][ T30] audit: type=1326 audit(1759793709.289:2596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.788091][ T30] audit: type=1326 audit(1759793709.289:2597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.846385][ T30] audit: type=1326 audit(1759793709.289:2598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1115.881986][ T6003] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 1115.959647][ T30] audit: type=1326 audit(1759793709.289:2599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20406 comm="syz.4.3743" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff21a18eec9 code=0x7ffc0000 [ 1116.057073][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3748'. [ 1116.071950][ T6003] usb 5-1: Using ep0 maxpacket: 32 [ 1116.102001][ T6003] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.120200][ T6003] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1116.187539][ T6003] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1116.266807][ T6003] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.315641][ T938] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 1116.342396][ T6003] usb 5-1: config 0 descriptor?? [ 1116.406714][ T6003] hub 5-1:0.0: bad descriptor, ignoring hub [ 1116.421455][ T6003] hub 5-1:0.0: probe with driver hub failed with error -5 [ 1116.449360][ T6003] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1116.481848][ T938] usb 2-1: Using ep0 maxpacket: 32 [ 1116.488577][ T938] usb 2-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config [ 1116.505311][ T938] usb 2-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5 [ 1116.525047][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.544032][ T938] usb 2-1: Product: syz [ 1116.568908][ T938] usb 2-1: Manufacturer: syz [ 1116.601878][ T938] usb 2-1: SerialNumber: syz [ 1116.676862][ T938] pwc: Askey VC010 type 1 USB webcam detected. [ 1118.872180][ T938] pwc: send_video_command error -71 [ 1118.904139][ T938] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1118.953912][ T938] Philips webcam 2-1:76.0: probe with driver Philips webcam failed with error -71 [ 1119.052132][ T938] usb 2-1: USB disconnect, device number 90 [ 1119.453813][T20449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3755'. [ 1119.463056][T20449] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3755'. [ 1119.732651][ T938] usb 5-1: USB disconnect, device number 84 [ 1119.788858][T20453] tipc: Enabling of bearer rejected, failed to enable media [ 1120.016799][T20457] syzkaller0: entered promiscuous mode [ 1120.074557][T20457] syzkaller0: entered allmulticast mode [ 1120.540169][T20467] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1120.556175][T20467] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1121.232234][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 1121.238765][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 1121.756429][T20480] vivid-007: ================= START STATUS ================= [ 1121.779818][T20480] vivid-007: Enable Output Cropping: true [ 1121.827416][T20480] vivid-007: Enable Output Composing: true [ 1121.873584][T20480] vivid-007: Enable Output Scaler: true [ 1121.879311][T20480] vivid-007: Tx RGB Quantization Range: Automatic [ 1121.931735][T20480] vivid-007: Transmit Mode: HDMI [ 1121.936772][T20480] vivid-007: Hotplug Present: 0x00000000 [ 1121.943700][T20480] vivid-007: RxSense Present: 0x00000000 [ 1121.949394][T20480] vivid-007: EDID Present: 0x00000000 [ 1121.954978][T20480] vivid-007: ================== END STATUS ================== [ 1124.213606][T20490] tipc: Enabling of bearer rejected, failed to enable media [ 1124.292790][T20490] syzkaller0: entered promiscuous mode [ 1124.312118][T20490] syzkaller0: entered allmulticast mode [ 1124.481960][T20506] loop2: detected capacity change from 0 to 7 [ 1124.499803][T20506] Dev loop2: unable to read RDB block 7 [ 1124.536176][T20506] loop2: unable to read partition table [ 1124.569559][T20506] loop2: partition table beyond EOD, truncated [ 1124.581910][T20506] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1124.598981][T20508] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1124.608236][T20508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3772'. [ 1125.213159][ T938] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 1125.404107][ T938] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1125.416566][ T938] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.461672][ T938] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1125.483136][ T938] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.513850][ T938] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1125.524194][ T938] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1125.533097][ T938] usb 5-1: Product: syz [ 1125.537584][ T938] usb 5-1: Manufacturer: syz [ 1125.554328][ T938] cdc_wdm 5-1:1.0: skipping garbage [ 1125.567899][ T938] cdc_wdm 5-1:1.0: skipping garbage [ 1125.638758][ T938] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1125.651649][ T938] cdc_wdm 5-1:1.0: Unknown control protocol [ 1125.783362][ C0] cdc_wdm 5-1:1.0: unknown notification 255 received: index 255 len 0 [ 1125.997938][T17948] usb 5-1: USB disconnect, device number 85 [ 1126.461796][ T5897] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1126.681759][ T938] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 1126.933975][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1126.949229][ T5897] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1127.066644][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1127.086025][ T938] usb 2-1: Using ep0 maxpacket: 8 [ 1127.105883][ T938] usb 2-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 1127.129564][T20538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1127.181776][T20538] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3782'. [ 1127.182324][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.199674][ T938] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.209273][ T938] usb 2-1: Product: syz [ 1127.228646][ T938] usb 2-1: Manufacturer: syz [ 1127.235627][ T938] usb 2-1: SerialNumber: syz [ 1127.247799][T20517] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1127.306352][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 1127.327431][ T938] usb 2-1: config 0 descriptor?? [ 1127.355128][ T938] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 1127.373800][T20538] bond2: Removing last arp target with arp_interval on [ 1127.436240][T20538] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1127.470448][T20538] bond2 (unregistering): Released all slaves [ 1127.656155][T17948] usb 3-1: USB disconnect, device number 95 [ 1127.766918][ T938] gspca_vc032x: reg_w err -71 [ 1127.788862][ T938] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1127.850990][ T938] usb 2-1: USB disconnect, device number 91 [ 1128.263741][T20554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1128.286466][T20554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1128.338267][T20554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3785'. [ 1128.372611][T20554] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1128.490800][T20562] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3789'. [ 1128.541769][ T938] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1128.664766][T20565] syz.4.3790 (20565): attempted to duplicate a private mapping with mremap. This is not supported. [ 1128.755679][ T938] usb 3-1: Using ep0 maxpacket: 16 [ 1128.780262][ T938] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 1128.791662][ T938] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1128.799728][ T938] usb 3-1: Product: syz [ 1128.804678][ T938] usb 3-1: Manufacturer: syz [ 1128.809316][ T938] usb 3-1: SerialNumber: syz [ 1128.822397][ T938] usb 3-1: config 0 descriptor?? [ 1128.844931][ T938] ums-onetouch 3-1:0.0: USB Mass Storage device detected [ 1128.935683][T20571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3792'. [ 1129.042961][ T938] usb 3-1: USB disconnect, device number 96 [ 1129.133430][T20576] program syz.5.3793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1129.594963][T20586] loop2: detected capacity change from 0 to 7 [ 1129.602056][T20586] Dev loop2: unable to read RDB block 7 [ 1129.608305][T20586] loop2: unable to read partition table [ 1129.614872][T20586] loop2: partition table beyond EOD, truncated [ 1129.622953][T20586] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1130.903475][T20615] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3806'. [ 1130.982644][T20617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3805'. [ 1131.452899][ T5966] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 1131.701870][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 1131.752513][ T5966] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1131.923291][T20615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1131.932818][T20615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1131.995711][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.101442][T20627] netlink: 'syz.4.3808': attribute type 21 has an invalid length. [ 1132.131989][T20627] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3808'. [ 1132.141230][T20627] netlink: 'syz.4.3808': attribute type 4 has an invalid length. [ 1132.149772][T20627] netlink: 'syz.4.3808': attribute type 5 has an invalid length. [ 1132.158558][T20627] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3808'. [ 1132.343620][ T5966] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1132.350735][ T5966] pvrusb2: ********** [ 1132.378613][ T5966] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1132.391673][ T5966] pvrusb2: Important functionality might not be entirely working. [ 1132.400006][ T5966] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1132.417144][ T5966] pvrusb2: ********** [ 1132.589483][ T2344] pvrusb2: Invalid write control endpoint [ 1132.792407][T20617] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 1132.870474][ T2344] pvrusb2: Invalid write control endpoint [ 1132.881314][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1132.906135][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1132.934410][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1132.991692][ T2344] pvrusb2: Device being rendered inoperable [ 1133.000353][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1133.020238][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1133.111302][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1133.136089][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1133.176674][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1133.571868][ T5966] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1133.741862][ T5966] usb 3-1: Using ep0 maxpacket: 32 [ 1133.750490][ T5966] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1133.759216][ T5966] usb 3-1: config 0 has no interface number 0 [ 1133.767949][ T5966] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1133.792611][ T5966] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1133.802102][ T5966] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.812420][ T5966] usb 3-1: Product: syz [ 1133.816620][ T5966] usb 3-1: Manufacturer: syz [ 1133.821272][ T5966] usb 3-1: SerialNumber: syz [ 1134.010421][ T5897] usb 2-1: USB disconnect, device number 92 [ 1134.113798][ T5966] usb 3-1: config 0 descriptor?? [ 1134.232184][ T5966] smsc75xx v1.0.0 [ 1135.107301][T20665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.123657][T20666] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1135.134589][T20665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.146032][T20666] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1135.743281][ T5966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1135.754712][ T5966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1136.568491][T20692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.603574][T20647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1136.605852][T20692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.620075][ T5897] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 1136.621492][T20647] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1136.671910][T17948] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 1136.781727][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 1136.789440][ T5897] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1136.811687][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1136.831711][T17948] usb 5-1: Using ep0 maxpacket: 32 [ 1136.841489][ T5897] usb 2-1: config 0 descriptor?? [ 1136.869231][T17948] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1136.897486][T17948] usb 5-1: config 0 has no interface number 0 [ 1136.924265][T17948] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1136.952160][T17948] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.986908][T17948] usb 5-1: Product: syz [ 1137.009727][T17948] usb 5-1: Manufacturer: syz [ 1137.040239][T17948] usb 5-1: SerialNumber: syz [ 1137.062757][T17948] usb 5-1: config 0 descriptor?? [ 1137.080136][ T5897] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1137.085991][T17948] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1137.166881][ T5897] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1137.241674][ T5897] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 1137.279598][T17948] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1137.295314][ T5897] asix 2-1:0.0: probe with driver asix failed with error -71 [ 1137.322068][T17948] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1137.390200][ T5897] usb 2-1: USB disconnect, device number 93 [ 1137.401738][T20698] loop2: detected capacity change from 0 to 7 [ 1137.433791][T20698] Dev loop2: unable to read RDB block 7 [ 1137.473736][T20698] loop2: unable to read partition table [ 1137.479664][T20698] loop2: partition table beyond EOD, truncated [ 1137.508005][T20698] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1137.632407][T20703] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3828'. [ 1137.652620][T20703] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3828'. [ 1137.664294][T20703] libceph: resolve '0..' (ret=-3): failed [ 1138.071884][ T5966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1138.085259][T20704] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3824'. [ 1138.132856][ T5966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1138.156661][ T5966] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1138.185257][ T5966] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71 [ 1138.321879][ T5966] usb 3-1: USB disconnect, device number 97 [ 1139.390622][T17948] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 1139.701730][T17948] usb 2-1: device descriptor read/64, error -71 [ 1139.880956][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1139.881438][ T5897] usb 5-1: USB disconnect, device number 86 [ 1139.898270][ T5897] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1139.972170][ T5897] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1139.973413][T17948] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 1140.031798][ T5897] quatech2 5-1:0.51: device disconnected [ 1140.171688][T17948] usb 2-1: device descriptor read/64, error -71 [ 1140.501502][T17948] usb usb2-port1: attempt power cycle [ 1140.777581][T20724] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3833'. [ 1140.788655][T20724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3833'. [ 1140.808964][T20724] libceph: resolve '0..' (ret=-3): failed [ 1140.891700][T17948] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 1140.932390][T17948] usb 2-1: device descriptor read/8, error -71 [ 1141.193823][T17948] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 1141.251949][T17948] usb 2-1: device descriptor read/8, error -71 [ 1141.385898][T17948] usb usb2-port1: unable to enumerate USB device [ 1143.092824][T20752] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3839'. [ 1143.405022][T20756] ALSA: mixer_oss: invalid index -2083389440 [ 1144.194855][T20765] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3841'. [ 1144.205298][T20765] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3841'. [ 1144.623219][T20769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1144.663519][T20768] loop2: detected capacity change from 0 to 7 [ 1144.670804][T20768] Dev loop2: unable to read RDB block 7 [ 1144.681659][T20768] loop2: unable to read partition table [ 1144.768757][T20768] loop2: partition table beyond EOD, truncated [ 1144.874204][T20768] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1145.620921][T20776] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3844'. [ 1145.638846][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3844'. [ 1145.650878][T20776] libceph: resolve '0..' (ret=-3): failed [ 1146.761440][T20799] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3851'. [ 1147.531687][ T5966] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 1147.834229][T20809] loop2: detected capacity change from 0 to 7 [ 1147.921639][ T5966] usb 2-1: Using ep0 maxpacket: 8 [ 1147.990794][ T6295] Dev loop2: unable to read RDB block 7 [ 1147.996749][ T6295] loop2: unable to read partition table [ 1148.010563][ T5966] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1148.020307][ T6295] loop2: partition table beyond EOD, truncated [ 1148.040270][ T5966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1148.050678][T20809] Dev loop2: unable to read RDB block 7 [ 1148.098392][T20809] loop2: unable to read partition table [ 1148.131174][ T5966] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1148.138832][ T5966] pvrusb2: ********** [ 1148.144761][T20809] loop2: partition table beyond EOD, truncated [ 1148.157811][ T5966] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1148.182826][T20809] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1148.202412][ T5966] pvrusb2: Important functionality might not be entirely working. [ 1148.224958][ T5966] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1148.433196][ T5966] pvrusb2: ********** [ 1148.548086][ T2344] pvrusb2: Invalid write control endpoint [ 1148.751650][T20799] pvrusb2: Killing an I2C write to 0 that is too large (desired=62 limit=61) [ 1148.792777][ T2344] pvrusb2: Invalid write control endpoint [ 1148.807183][ T2344] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1148.822821][ T2344] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1148.830623][ T2344] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1148.841283][ T2344] pvrusb2: Device being rendered inoperable [ 1148.847524][ T2344] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1148.865743][ T2344] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_e) [ 1148.903032][ T2344] pvrusb2: Attached sub-driver cx25840 [ 1148.915266][ T2344] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1148.931690][ T2344] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1150.631184][ T5930] usb 2-1: USB disconnect, device number 98 [ 1151.003801][T20860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3861'. [ 1151.013346][T20860] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3861'. [ 1151.027416][T20860] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3861'. [ 1152.561984][ T5930] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1152.825096][T20882] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1152.839097][T20882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3869'. [ 1152.854608][T20882] libceph: resolve '0..' (ret=-3): failed [ 1152.874302][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1152.886460][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1152.899445][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1152.985934][ T5930] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1153.007205][ T5930] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1153.017821][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.038995][ T5930] usb 3-1: config 0 descriptor?? [ 1153.630789][T20872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.691909][T20872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.775163][T20872] syzkaller0: mtu less than device minimum [ 1153.786748][ T5930] plantronics 0003:047F:FFFF.0021: ignoring exceeding usage max [ 1153.810224][ T5930] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1154.073106][ T5966] usb 3-1: USB disconnect, device number 98 [ 1154.310522][T20900] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1154.322200][T20900] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1154.951682][ T5930] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 1155.121956][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 1155.173856][T20914] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1155.185679][T20914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1155.225298][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1155.232215][ T5930] usb 5-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 1155.244459][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.273763][ T5930] usb 5-1: config 0 descriptor?? [ 1155.835527][ T5930] nzxt-smart2 0003:1E71:2011.0022: collection stack underflow [ 1155.843197][ T5930] nzxt-smart2 0003:1E71:2011.0022: item 0 0 0 12 parsing failed [ 1155.852421][ T5930] nzxt-smart2 0003:1E71:2011.0022: probe with driver nzxt-smart2 failed with error -22 [ 1156.670831][T20929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3879'. [ 1156.680164][T20929] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3879'. [ 1156.760409][T20928] kvm: pic: non byte write [ 1157.759921][ T5930] usb 5-1: USB disconnect, device number 87 [ 1157.939261][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3885'. [ 1158.141753][ T5930] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1158.308989][ T5930] usb 5-1: Using ep0 maxpacket: 8 [ 1158.316384][ T5930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1158.328487][ T5930] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 1158.338066][ T5930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.351681][ T10] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 1158.354199][ T5930] usb 5-1: Product: syz [ 1158.364182][ T5930] usb 5-1: Manufacturer: syz [ 1158.368822][ T5930] usb 5-1: SerialNumber: syz [ 1158.415355][ T5930] usb 5-1: config 0 descriptor?? [ 1158.446353][ T5930] streamzap 5-1:0.0: streamzap_probe: endpoint doesn't match input device 0204 [ 1158.524122][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.534724][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1158.556776][ T10] usb 2-1: config 1 interface 1 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1158.584685][ T10] usb 2-1: config 1 interface 1 has no altsetting 1 [ 1158.604172][ T10] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1158.613854][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.622846][ T10] usb 2-1: Product: syz [ 1158.632829][ T10] usb 2-1: Manufacturer: syz [ 1158.650240][ T10] usb 2-1: SerialNumber: syz [ 1158.687129][ T10] usb 2-1: selecting invalid altsetting 1 [ 1158.906530][ T5966] usb 5-1: USB disconnect, device number 88 [ 1158.942109][ T10] cdc_ncm 2-1:1.0: bind() failure [ 1158.972106][ T10] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1158.981805][ T10] cdc_ncm 2-1:1.1: bind() failure [ 1159.029976][ T10] usb 2-1: USB disconnect, device number 99 [ 1159.103666][T20959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3890'. [ 1159.114455][T20959] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3890'. [ 1159.509177][T20962] netlink: 'syz.5.3887': attribute type 1 has an invalid length. [ 1159.733456][T20965] netlink: 76 bytes leftover after parsing attributes in process `syz.5.3887'. [ 1159.785744][T20962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1159.932996][T20969] kvm: pic: non byte write [ 1160.091760][ T5897] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 1160.382061][ T5897] usb 2-1: Using ep0 maxpacket: 8 [ 1160.419041][ T5897] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=1b.21 [ 1160.432852][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.441242][ T5897] usb 2-1: Product: syz [ 1160.461356][ T5897] usb 2-1: Manufacturer: syz [ 1160.466941][ T5897] usb 2-1: SerialNumber: syz [ 1160.488945][ T5897] usb 2-1: config 0 descriptor?? [ 1160.641968][ T5897] usb_ehset_test 2-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 1160.691734][ T10] usb 5-1: new full-speed USB device number 89 using dummy_hcd [ 1160.844571][ T10] usb 5-1: config 248 has an invalid interface number: 92 but max is 0 [ 1160.892626][ T10] usb 5-1: config 248 has no interface number 0 [ 1160.894122][T20968] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1160.911665][ T10] usb 5-1: config 248 interface 92 has no altsetting 0 [ 1160.926285][T20988] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3898'. [ 1160.927901][T20968] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1160.981495][ T5930] usb 2-1: USB disconnect, device number 100 [ 1161.012606][ T10] usb 5-1: New USB device found, idVendor=249c, idProduct=9001, bcdDevice=70.8d [ 1161.022282][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.035444][ T10] usb 5-1: Product: syz [ 1161.039957][ T10] usb 5-1: Manufacturer: syz [ 1161.054957][ T10] usb 5-1: SerialNumber: syz [ 1161.105996][T20998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1161.115473][T20998] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3899'. [ 1161.557116][ T10] usb 5-1: can't set first interface for hiFace device. [ 1161.575379][ T10] snd-usb-hiface 5-1:248.92: probe with driver snd-usb-hiface failed with error -5 [ 1161.638516][ T10] usb 5-1: USB disconnect, device number 89 [ 1161.983612][T21012] syzkaller0: left promiscuous mode [ 1161.988858][T21012] syzkaller0: left allmulticast mode [ 1163.099659][T21045] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3923'. [ 1163.531896][ T5930] usb 3-1: new full-speed USB device number 99 using dummy_hcd [ 1163.694906][ T5930] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1163.706083][ T5930] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1163.727393][ T5930] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1163.760078][ T5930] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1163.788099][ T5930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1163.801840][ T5930] usb 3-1: Product: syz [ 1163.806066][ T5930] usb 3-1: Manufacturer: syz [ 1163.821436][ T5930] usb 3-1: SerialNumber: syz [ 1164.202003][T21076] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3937'. [ 1164.274700][ T5930] usb 3-1: 0:2 : does not exist [ 1164.296788][T21081] netlink: 'syz.1.3939': attribute type 13 has an invalid length. [ 1164.321962][T21081] netlink: 'syz.1.3939': attribute type 17 has an invalid length. [ 1164.479286][ T5930] usb 3-1: USB disconnect, device number 99 [ 1164.539284][T21081] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1165.400927][T21119] netlink: 72 bytes leftover after parsing attributes in process `syz.5.3957'. [ 1165.588898][T21128] [ 1165.591421][T21128] ====================================================== [ 1165.598559][T21128] WARNING: possible circular locking dependency detected [ 1165.605617][T21128] syzkaller #0 Not tainted [ 1165.610040][T21128] ------------------------------------------------------ [ 1165.617069][T21128] syz.5.3961/21128 is trying to acquire lock: [ 1165.623143][T21128] ffff88801c2f0220 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9e/0x450 [ 1165.633433][T21128] [ 1165.633433][T21128] but task is already holding lock: [ 1165.640803][T21128] ffff8881423262c8 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x16cc/0x1c10 [ 1165.650584][T21128] [ 1165.650584][T21128] which lock already depends on the new lock. [ 1165.650584][T21128] [ 1165.661002][T21128] [ 1165.661002][T21128] the existing dependency chain (in reverse order) is: [ 1165.670110][T21128] [ 1165.670110][T21128] -> #2 (&q->q_usage_counter(io)#26){++++}-{0:0}: [ 1165.678742][T21128] lock_acquire+0x120/0x360 [ 1165.683893][T21128] blk_alloc_queue+0x538/0x620 [ 1165.689559][T21128] __blk_mq_alloc_disk+0x15c/0x340 [ 1165.695219][T21128] loop_add+0x411/0xad0 [ 1165.699937][T21128] loop_init+0xd9/0x170 [ 1165.704624][T21128] do_one_initcall+0x233/0x820 [ 1165.709924][T21128] do_initcall_level+0x104/0x190 [ 1165.715396][T21128] do_initcalls+0x59/0xa0 [ 1165.720345][T21128] kernel_init_freeable+0x334/0x4b0 [ 1165.726094][T21128] kernel_init+0x1d/0x1d0 [ 1165.730969][T21128] ret_from_fork+0x439/0x7d0 [ 1165.736097][T21128] ret_from_fork_asm+0x1a/0x30 [ 1165.741416][T21128] [ 1165.741416][T21128] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1165.748656][T21128] lock_acquire+0x120/0x360 [ 1165.753719][T21128] fs_reclaim_acquire+0x72/0x100 [ 1165.759292][T21128] kmem_cache_alloc_noprof+0x45/0x6e0 [ 1165.765273][T21128] __kernfs_iattrs+0xd9/0x320 [ 1165.771102][T21128] kernfs_iop_setattr+0xea/0x3f0 [ 1165.776578][T21128] notify_change+0xb36/0xe40 [ 1165.781710][T21128] do_truncate+0x1a4/0x220 [ 1165.786666][T21128] path_openat+0x306c/0x3830 [ 1165.791791][T21128] do_filp_open+0x1fa/0x410 [ 1165.796829][T21128] do_sys_openat2+0x121/0x1c0 [ 1165.802037][T21128] __x64_sys_openat+0x138/0x170 [ 1165.807418][T21128] do_syscall_64+0xfa/0x3b0 [ 1165.812450][T21128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.818879][T21128] [ 1165.818879][T21128] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1165.827409][T21128] validate_chain+0xb9b/0x2140 [ 1165.832712][T21128] __lock_acquire+0xab9/0xd20 [ 1165.837913][T21128] lock_acquire+0x120/0x360 [ 1165.842944][T21128] down_read+0x46/0x2e0 [ 1165.847630][T21128] kernfs_iop_getattr+0x9e/0x450 [ 1165.853098][T21128] vfs_getattr_nosec+0x2e1/0x430 [ 1165.858562][T21128] loop_assign_backing_file+0x222/0x400 [ 1165.864651][T21128] lo_ioctl+0x1738/0x1c10 [ 1165.869515][T21128] blkdev_ioctl+0x5ac/0x6d0 [ 1165.874553][T21128] __se_sys_ioctl+0xf9/0x170 [ 1165.879673][T21128] do_syscall_64+0xfa/0x3b0 [ 1165.884701][T21128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1165.891122][T21128] [ 1165.891122][T21128] other info that might help us debug this: [ 1165.891122][T21128] [ 1165.901352][T21128] Chain exists of: [ 1165.901352][T21128] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#26 [ 1165.901352][T21128] [ 1165.915830][T21128] Possible unsafe locking scenario: [ 1165.915830][T21128] [ 1165.923293][T21128] CPU0 CPU1 [ 1165.928661][T21128] ---- ---- [ 1165.934025][T21128] lock(&q->q_usage_counter(io)#26); [ 1165.939417][T21128] lock(fs_reclaim); [ 1165.945922][T21128] lock(&q->q_usage_counter(io)#26); [ 1165.953827][T21128] rlock(&root->kernfs_iattr_rwsem); [ 1165.959207][T21128] [ 1165.959207][T21128] *** DEADLOCK *** [ 1165.959207][T21128] [ 1165.967353][T21128] 3 locks held by syz.5.3961/21128: [ 1165.972551][T21128] #0: ffff88814234f440 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x11c1/0x1c10 [ 1165.981629][T21128] #1: ffff8881423262c8 (&q->q_usage_counter(io)#26){++++}-{0:0}, at: lo_ioctl+0x16cc/0x1c10 [ 1165.991844][T21128] #2: ffff888142326300 (&q->q_usage_counter(queue)#10){+.+.}-{0:0}, at: lo_ioctl+0x16cc/0x1c10 [ 1166.002321][T21128] [ 1166.002321][T21128] stack backtrace: [ 1166.008212][T21128] CPU: 1 UID: 0 PID: 21128 Comm: syz.5.3961 Not tainted syzkaller #0 PREEMPT(full) [ 1166.008233][T21128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1166.008246][T21128] Call Trace: [ 1166.008257][T21128] [ 1166.008265][T21128] dump_stack_lvl+0x189/0x250 [ 1166.008292][T21128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1166.008313][T21128] ? __pfx__printk+0x10/0x10 [ 1166.008344][T21128] print_circular_bug+0x2ee/0x310 [ 1166.008369][T21128] check_noncircular+0x134/0x160 [ 1166.008394][T21128] validate_chain+0xb9b/0x2140 [ 1166.008415][T21128] ? tomoyo_path_perm+0x1e3/0x4b0 [ 1166.008442][T21128] __lock_acquire+0xab9/0xd20 [ 1166.008461][T21128] ? kernfs_iop_getattr+0x9e/0x450 [ 1166.008480][T21128] lock_acquire+0x120/0x360 [ 1166.008502][T21128] ? kernfs_iop_getattr+0x9e/0x450 [ 1166.008527][T21128] down_read+0x46/0x2e0 [ 1166.008547][T21128] ? kernfs_iop_getattr+0x9e/0x450 [ 1166.008568][T21128] kernfs_iop_getattr+0x9e/0x450 [ 1166.008589][T21128] vfs_getattr_nosec+0x2e1/0x430 [ 1166.008609][T21128] loop_assign_backing_file+0x222/0x400 [ 1166.008639][T21128] ? __pfx_loop_assign_backing_file+0x10/0x10 [ 1166.008666][T21128] ? schedule+0x91/0x360 [ 1166.008698][T21128] ? percpu_ref_kill_and_confirm+0xa3/0x130 [ 1166.008729][T21128] lo_ioctl+0x1738/0x1c10 [ 1166.008758][T21128] ? __pfx_lo_ioctl+0x10/0x10 [ 1166.008785][T21128] ? kasan_save_track+0x4f/0x80 [ 1166.008826][T21128] ? kasan_save_track+0x3e/0x80 [ 1166.008849][T21128] ? __kasan_save_free_info+0x46/0x50 [ 1166.008869][T21128] ? __kasan_slab_free+0x5c/0x80 [ 1166.008893][T21128] ? kfree+0x19a/0x6d0 [ 1166.008913][T21128] ? tomoyo_check_open_permission+0x2c2/0x3b0 [ 1166.008932][T21128] ? do_dentry_open+0x384/0x13f0 [ 1166.008949][T21128] ? vfs_open+0x3b/0x340 [ 1166.008964][T21128] ? path_openat+0x2ee5/0x3830 [ 1166.008989][T21128] ? __lock_acquire+0xab9/0xd20 [ 1166.009009][T21128] ? __lock_acquire+0xab9/0xd20 [ 1166.009026][T21128] ? __lock_acquire+0xab9/0xd20 [ 1166.009047][T21128] ? __lock_acquire+0xab9/0xd20 [ 1166.009069][T21128] ? __lock_acquire+0xab9/0xd20 [ 1166.009092][T21128] ? is_bpf_text_address+0x26/0x2b0 [ 1166.009113][T21128] ? is_bpf_text_address+0x292/0x2b0 [ 1166.009131][T21128] ? is_bpf_text_address+0x26/0x2b0 [ 1166.009150][T21128] ? kernel_text_address+0xa5/0xe0 [ 1166.009178][T21128] ? __kernel_text_address+0xd/0x40 [ 1166.009204][T21128] ? unwind_get_return_address+0x4d/0x90 [ 1166.009226][T21128] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1166.009253][T21128] ? arch_stack_walk+0xfc/0x150 [ 1166.009279][T21128] ? stack_trace_save+0x9c/0xe0 [ 1166.009303][T21128] ? __pfx_stack_trace_save+0x10/0x10 [ 1166.009327][T21128] ? stack_depot_save_flags+0x40/0x860 [ 1166.009353][T21128] ? kasan_save_track+0x4f/0x80 [ 1166.009378][T21128] ? kasan_save_track+0x3e/0x80 [ 1166.009403][T21128] ? __kasan_save_free_info+0x46/0x50 [ 1166.009423][T21128] ? __kasan_slab_free+0x5c/0x80 [ 1166.009448][T21128] ? kfree+0x19a/0x6d0 [ 1166.009467][T21128] ? tomoyo_path_number_perm+0x47a/0x5a0 [ 1166.009492][T21128] ? security_file_ioctl+0xcb/0x2d0 [ 1166.009508][T21128] ? __se_sys_ioctl+0x47/0x170 [ 1166.009528][T21128] ? do_syscall_64+0xfa/0x3b0 [ 1166.009546][T21128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.009575][T21128] ? __asan_memset+0x22/0x50 [ 1166.009596][T21128] ? blk_get_meta_cap+0x18c/0x750 [ 1166.009622][T21128] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1166.009645][T21128] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.009664][T21128] ? blkdev_common_ioctl+0xff7/0x2550 [ 1166.009691][T21128] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 1166.009710][T21128] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1166.009737][T21128] ? do_vfs_ioctl+0xbe8/0x1430 [ 1166.009759][T21128] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1166.009785][T21128] ? __lock_acquire+0xab9/0xd20 [ 1166.009809][T21128] ? __pfx_lo_ioctl+0x10/0x10 [ 1166.009836][T21128] blkdev_ioctl+0x5ac/0x6d0 [ 1166.009862][T21128] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1166.009886][T21128] ? __fget_files+0x2a/0x420 [ 1166.009915][T21128] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1166.009934][T21128] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1166.009958][T21128] __se_sys_ioctl+0xf9/0x170 [ 1166.009980][T21128] do_syscall_64+0xfa/0x3b0 [ 1166.009998][T21128] ? lockdep_hardirqs_on+0x9c/0x150 [ 1166.010014][T21128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.010032][T21128] ? clear_bhb_loop+0x60/0xb0 [ 1166.010053][T21128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1166.010083][T21128] RIP: 0033:0x7f7839d8eec9 [ 1166.010100][T21128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1166.010116][T21128] RSP: 002b:00007f783ac1c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1166.010136][T21128] RAX: ffffffffffffffda RBX: 00007f7839fe5fa0 RCX: 00007f7839d8eec9 [ 1166.010150][T21128] RDX: 0000000000000003 RSI: 0000000000004c06 RDI: 0000000000000004 [ 1166.010161][T21128] RBP: 00007f7839e11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1166.010173][T21128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1166.010185][T21128] R13: 00007f7839fe6038 R14: 00007f7839fe5fa0 R15: 00007f783a10fa28 [ 1166.010204][T21128] [ 1166.555298][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1166.566358][ C1] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.576794][ C1] buffer_io_error: 9 callbacks suppressed [ 1166.576812][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.591278][ C1] critical medium error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.601564][ C1] Buffer I/O error on dev loop9, logical block 1, async page read [ 1166.609546][ C1] critical medium error, dev loop9, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.619795][ C1] Buffer I/O error on dev loop9, logical block 2, async page read [ 1166.627695][ C1] critical medium error, dev loop9, sector 3 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.637970][ C1] Buffer I/O error on dev loop9, logical block 3, async page read [ 1166.645937][ C1] critical medium error, dev loop9, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.656165][ C1] Buffer I/O error on dev loop9, logical block 4, async page read [ 1166.664102][ C1] critical medium error, dev loop9, sector 5 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.674316][ C1] Buffer I/O error on dev loop9, logical block 5, async page read [ 1166.682238][ C1] critical medium error, dev loop9, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.692552][ C1] Buffer I/O error on dev loop9, logical block 6, async page read [ 1166.707267][ C0] critical medium error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.717534][ C0] Buffer I/O error on dev loop9, logical block 0, async page read [ 1166.725487][ C0] critical medium error, dev loop9, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1166.735703][ C0] Buffer I/O error on dev loop9, logical block 1, async page read [ 1166.743624][ C0] Buffer I/O error on dev loop9, logical block 2, async page read