last executing test programs: 29.644967642s ago: executing program 1 (id=1997): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) copy_file_range(r1, 0x0, r2, 0x0, 0xfffffbffa003e45f, 0x700000000000000) socket$nl_route(0x10, 0x3, 0x0) 26.442132475s ago: executing program 1 (id=2003): r0 = syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220600000006"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x0, 0xa, 0x5, "477467e0ca"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="400e7f0000007f0d5f60666b051fc02211d7cfa56850361e4eb43a279969b0c4112256297cf6a11cc66635c0b2a515ebea4e8a82a945f721884f6d23aa8d65d6dd8ffb456b404996cb74192f1fd31d8cc1432ba482a0e73df3101d7ad858ac27b87f0b379edf6c050f316ace2444847493c700"/134], &(0x7f00000003c0)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "24ce0290006b5812fdae14bc8b1a60e456884b930d719ba00a1693385e4a61a60bdb5a0c321ef0ae8ae15da424372c3b33b0f0710af66bbedf952774aaee1b0f8c6c60b5cffeb3cb1a7e2fe4e806d87b84e506ec2ff9dfa762d0510b0b9d4e6cb2e95434ab8a5fb73877939935d1fe4687384815637d1cca83de24d9cd8ed65620a51a8ab0728bfbf66da45e8b"}}}, &(0x7f0000000740)={0x34, &(0x7f00000004c0)={0x40, 0x16, 0x47, "07f97428033543531e2ac7032f2cbc2d8558e06f7c12752be77a32702b7022f998f0104f51d5ba41eb0dc6f3c1a62adc3e111c4347899b0e24c4429a1bd3ab7f5533cb2d028fcc"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0xdc, {0xda, "e9de1833600e8207aa030cdad86e5fc6ceb573eab4d378582558bd2814d3fce37e86ee56152a0390fe5a9f7d87354a54d049756d26edecdba90c8267de0193119f3c43fc5875bbafbd687cf8c2a15b0e0e2632db33f9c4257279e7a04bc8970e7283013868009a99dbffd6f1eb7732f5bc33b829125794d20fb27ed20d1b4b0c27a975af7ce20318c61323a5465c44d0d9ae6e7a820ab5f22ef2249e4b5254a7964a0cdb72fda96e4ce08699c054790831b9bddab966bf943b72af4444ee6bc240328707cc933a2601cd2812b96ce275438f6828ab9ca2781002"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0xe}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0xa}}) 19.102929979s ago: executing program 4 (id=2013): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da00090589"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="40032f"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x7, "f44bab77"}, @main=@item_012={0x1, 0x0, 0xa, '.'}, @global=@item_4={0x3, 0x1, 0x9, "dc7ef7f7"}, @local=@item_012={0x2, 0x2, 0x2, "1444"}, @local=@item_4={0x3, 0x2, 0x7, "074f651c"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000100)={0x3, 0x200, 0x0, 0x4, 0xffff, 0xf}) r3 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRES8=r4, @ANYRES32=r3, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00e7052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5, @string={0x5, 0x3, '>M#'}}}, 0x0) 17.721384174s ago: executing program 0 (id=2016): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45f, 0x700000000000000) socket$nl_route(0x10, 0x3, 0x0) 17.621116887s ago: executing program 3 (id=2018): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0xffd) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x0, 0x1}}, 0x26) 16.476432673s ago: executing program 3 (id=2019): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000000c0), 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 15.474488555s ago: executing program 3 (id=2021): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000940)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 15.438346946s ago: executing program 4 (id=2022): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100100000008ec130600400001020301090224000101fb402609040002040301030009219917780122b10f09058103"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x40, 0x11, 0x72, {0x72, 0x7, "6944215d213aa790a906e4e348efb9f7ab200aa37cd8b109a5eb906a97026582248dcd20e259398ee93083423961260f60a0ae2368e27186d4c2201cd568aad51f3a070b5ec588c94a5348b17fda57064fb67e17c3ea9883533ab76b79759b0ed15d13dcd984b7702b78504c4b385909"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b6120000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0) r1 = syz_usb_connect(0x3, 0x607, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0xc4, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000ff1e0400304000010203010902b2000301051008080b02020104200309040000000101200009240101000627000c08240af70305810711240d01000005010000000100010001000524040608090401000001020000090401010101022000062402010180102401f8030202100000270a000000800d240201f702080352862276080905010920000904e60825018030060600090000000001022000090401010101022000082402010704e319090582092000060e070825010200060100"], &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x9, 0xc, 0x6, 0x40, 0xd}, 0x21, &(0x7f0000000040)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7, 0x1100, 0x1, [0xff0000, 0x0, 0xc00f, 0xf0]}]}, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x423}}]}) 15.258919352s ago: executing program 2 (id=2023): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, 0x0, 0x20000034) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a1ab26bd7000020006003200000008000300", @ANYRES32=r9, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 15.200807804s ago: executing program 0 (id=2024): prlimit64(0x0, 0xb, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 15.02086355s ago: executing program 1 (id=2025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000340)="1b0000001d005f0214fffffffffffff807", 0x11) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000034) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1ab26bd7000020006003200000008000300", @ANYRES32=r8, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 11.459874643s ago: executing program 4 (id=2026): syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$eJzs3U2MG1cBAOA33vUmmwTilIQuSWgTftry091ms4SfCJqquRA1FbdKEZcoTUtEGhCpBK0qkeTEjVZVuPIjTuVQAUJqLyjqiUslGolLxaFw4EAUpEocoJC4iv2e136xNfb+2V5/n/T89s0bz3szOx6PZ+a9F4CJVWm8Li3NFSFcffPV4/984B+zd6Y82pqj1nidbktVQwhFTE9ny3tvqhnfev+lM93iIiw2XlM6PHmz9d7tIYRL4UC4Fmph79Xrr7y9+MTJyyeuHHzntaM31mftAQBgsnzr2tGlPX/7875dH7x+37GwpTU9nZ/XYnpHPO8/Fk/80/l/JXSmi7bQbiabbzqGSjbfVJf52supZvNN9yh/JltutZW/r2O+LSXlT7VN67beMM7SflwLRWW+I12pzM83f5OHxu/6mWL+wrnzz1wcUkWBNffv+0MIB4RBQ71e/3FjA45AXdY/3KgPvw7CeoT6zmEfgQCa8vuFd7mUX1lYndbSpvsr/+Zjle7vhzWw0fu/8ser/F9fjuWf+uu61oPJsFm/v9J6pc/RjpjO7yPkzy8N+vlPy5uKL9PZ8sv0uo8wLvcXetVzaoPrsVK96p/vF5vV12OctsM3svz2z0/+Px2X/zHQ3X8m7Pr/gRGow6YO1RGog9B3qA/7AASMrOXn5prqUcrPn+vL87eU5G8tyZ8tyd9Wkr+9JB8m2e+f/2l4uVj+nZ//ph/0eli6zvaRGH90wPrk1yMHLT9/7ndQqy0/f54YRtkbp586+5WnT11vPv9ftPb/23F/PxDTtfjZuhZnSNcL8+vqrWf/a53lVHrMd09Wn3TcqGxJ89ebJe7unK/Yvbyc0Hacuasec53v29lrvv2d89Wy+WZj2JrVNz8/2Za9L51/pONq2l7T2fpWs/WYyeqRjiu7YpzXA1Yi7Y+9nv9P++dcqBbPnDt/9pGYTvvpn6aqW+5MP9S+0N9sTN2B1em3/c9c6Gz/s6M1vVppPy7sXJ5etB8Xatn0xWaydZs8TT8c0+l77jtTs43p82e+d/7ptV55mHAXX3jxu6fPnz/7A3+kP2ZtFn/4Y9hHJmC9LTz/3PcXLr7w4sPnnjv97Nlnz144fOTI4cXFI189vLTQOK9faD+7BzaT5S/9YdcEAAAAAAAAAAAA6NcPTxy//pe3vvxus/3/cvu/1P4/Pfmb2v//JGv/n7eTT+3gUzvAXV3yG+PuvdFZj5lsvmoMH8vquzsrZ0/2vo/HuDWOX2z/n9rb5/26pvrcm03P++9N82XdCdzVX8pM1gdJPl7gp2J8Jca/CjBExWz3yTHu6N863N2/ddrXU/8U+qUYT+n/lvaG1I9Jav/dq1+ndPzftQF1ZO1tRHPCYa8j0N2/Rr7/77Yz8aHXZQKC7TxRoV43igcwGoY9/me67pniC3/85tY7Ic1287HO42XefymsxqiPP6n8URj/s1izSrTGv+vr+Neld/WOfp77H13hvz+/8W5bsWFvv8ffy9mqp36gd5eX2e6DWH5a/wdDf+XXf5mVn98Q6tP/svK39Vn+Xeu/f2Xl/z+WnzbbQ5/ut/xmjYtKZz3y68bp/l9+3Ti5la1/6ttz4PVf4UCNt2P5MMl6jzPb7wi2o2ko4/92uT+6UvlzGF+K6XQgTM855N/Ig9Y/PV+Rvgf2ZMsvSr7fxmWc4l4mffzfr8W47POQxv9N+2OtS7rSlq522bbjvq/AZvPeyN//G7NwaQTqIIxomB2BOnSGer2+vhe0Sgy1cIa+/Yd993nY5Q97+5fJx//Nz+Hz8X8r2Q+IfPzf/P35+L95fj6+Xp6fj/+bb898/N88/95sufkV7LmS/E+U5O8tyd+3nD/bLX9/yfs/WZJ/MMRzkh7595W8//6S/HtK8qdK8j9Tkv/ZkvwHSvIfKsn/XEn+Zpfao0zq+sMky9vn+fzD5Ej3f3p9/neX5APj62evH3r81O++XWu2/59p/V5L9/GOxXQ1/nb+UUzn971DW/pO3lsx/fcsf9Svd8AkyfvPyL/fHyzJB8ZXes7L5xsmUNG9x55++63qdZ7PePl8jL8Q4y/G+OEYz8d4IcaHYry4QfVjfTz+2z8cfblY/r2/M8vv93nyvD1Q3k/U4T7rk18fGPR59rwfv0GttvwVNgcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYmkrjdWlprgjh6puvHn/q5LmFO1Mebc1Ra7xOt6WqrfeF8EiMp2L8i/jHrfdfOtMe345xERZDEYrW9PDkzVZJ20MIl8KBcC3Uwt6r1195e/GJk5dPXDn4zmtHb6zfFgAAAIDN78MAAAD//+bcHCE=") bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={0xffffffffffffffff, 0x0, 0x25, 0x8, @val=@tcx}, 0x1c) fsmount(0xffffffffffffffff, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000170a0108000000000000000002"], 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000001c0)=0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) 11.406652666s ago: executing program 3 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45f, 0x700000000000000) socket$nl_route(0x10, 0x3, 0x0) 10.446989026s ago: executing program 2 (id=2028): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xf, 0x13, &(0x7f0000000280)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x3ffffffffffffffd, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000200)={0x0, 0x2000000}) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x4}, 0x6d) listen(0xffffffffffffffff, 0xfffffffc) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000008d40)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20008c80], 0x0, 0x0, &(0x7f0000008c80)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000000) close_range(r5, 0xffffffffffffffff, 0x0) 9.38587764s ago: executing program 1 (id=2029): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 9.278454793s ago: executing program 1 (id=2030): ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, 0x0) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, 0x0) syz_usb_connect$midi(0x0, 0x6b, &(0x7f00000001c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x41e, 0x4095, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x59, 0x1, 0x1, 0x8, 0x20, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x7, [], [{{0x9, 0x5, 0x0, 0x2, 0x248, 0x1, 0x48, 0x36, {0x4}}}, {{0x9, 0x5, 0x3, 0x10, 0x8, 0x7, 0x9d, 0x7, {0x4}}}, {{0x9, 0x5, 0x1, 0x10, 0x8, 0x6, 0x2, 0x4, {0x8, 0x25, 0x1, 0x4, "fcbcae18"}}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x6, 0x9, 0x9, {0x13, 0x25, 0x1, 0xf, "1f59073e0e0ff42ebe9a5c569472d5"}}}]}}}}}]}}, 0x0) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) ioctl$EVIOCGREP(0xffffffffffffffff, 0x80084503, &(0x7f0000001540)=""/165) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x6) write$char_usb(r0, &(0x7f0000001680), 0x0) 8.512963248s ago: executing program 0 (id=2031): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0xffd) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x0, 0x1}}, 0x26) 7.5001815s ago: executing program 0 (id=2032): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x14, {[@global=@item_4={0x3, 0x1, 0x7, "f44bab77"}, @main=@item_012={0x1, 0x0, 0xa, '.'}, @global=@item_4={0x3, 0x1, 0x9, "dc7ef7f7"}, @local=@item_012={0x2, 0x2, 0x2, "1444"}, @local=@item_4={0x3, 0x2, 0x7, "074f651c"}]}}, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCSUSAGE(r2, 0x4018480c, &(0x7f0000000100)={0x3, 0x200, 0x0, 0x4, 0xffff, 0xf}) r3 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0) syz_usb_disconnect(r3) r4 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000001240)={0x84, &(0x7f0000000100)=ANY=[@ANYRES8=r4, @ANYRES8=r4, @ANYRES32=r3, @ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r4, 0x0, 0x0) syz_usb_control_io$uac2(r3, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000280)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d00e7052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d000009040101"], 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$rtl8150(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000002a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000002700)={0x20, 0x0, 0x4, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r5, &(0x7f0000000000)={0x14, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x5, @string={0x5, 0x3, '>M#'}}}, 0x0) 7.480067981s ago: executing program 3 (id=2033): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f00000000c0), 0x18) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, 0x0, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0x2}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) 7.423049272s ago: executing program 2 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) getpid() syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r2, 0x2007ffc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) copy_file_range(r2, 0x0, r3, 0x0, 0xfffffbffa003e45f, 0x700000000000000) socket$nl_route(0x10, 0x3, 0x0) 6.56276106s ago: executing program 4 (id=2035): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) chdir(&(0x7f0000000240)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x2018008, &(0x7f0000000240)) chdir(&(0x7f0000000240)='./file0\x00') 5.673325848s ago: executing program 4 (id=2036): r0 = syz_usb_connect(0x0, 0x4bc, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f00000012c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109024a0001100000000904000003fe03010009cd8d1f00020000000905050200067e001009058b1e", @ANYRESHEX], 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220600000006"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000540)={0x0, 0xa, 0x5, "477467e0ca"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000000480)={0x14, &(0x7f0000000780)=ANY=[@ANYBLOB="400e7f0000007f0d5f60666b051fc02211d7cfa56850361e4eb43a279969b0c4112256297cf6a11cc66635c0b2a515ebea4e8a82a945f721884f6d23aa8d65d6dd8ffb456b404996cb74192f1fd31d8cc1432ba482a0e73df3101d7ad858ac27b87f0b379edf6c050f316ace2444847493c700"/134], &(0x7f00000003c0)={0x0, 0x3, 0x8f, @string={0x8f, 0x3, "24ce0290006b5812fdae14bc8b1a60e456884b930d719ba00a1693385e4a61a60bdb5a0c321ef0ae8ae15da424372c3b33b0f0710af66bbedf952774aaee1b0f8c6c60b5cffeb3cb1a7e2fe4e806d87b84e506ec2ff9dfa762d0510b0b9d4e6cb2e95434ab8a5fb73877939935d1fe4687384815637d1cca83de24d9cd8ed65620a51a8ab0728bfbf66da45e8b"}}}, &(0x7f0000000740)={0x34, &(0x7f00000004c0)={0x40, 0x16, 0x47, "07f97428033543531e2ac7032f2cbc2d8558e06f7c12752be77a32702b7022f998f0104f51d5ba41eb0dc6f3c1a62adc3e111c4347899b0e24c4429a1bd3ab7f5533cb2d028fcc"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x0, 0xdc, {0xda, "e9de1833600e8207aa030cdad86e5fc6ceb573eab4d378582558bd2814d3fce37e86ee56152a0390fe5a9f7d87354a54d049756d26edecdba90c8267de0193119f3c43fc5875bbafbd687cf8c2a15b0e0e2632db33f9c4257279e7a04bc8970e7283013868009a99dbffd6f1eb7732f5bc33b829125794d20fb27ed20d1b4b0c27a975af7ce20318c61323a5465c44d0d9ae6e7a820ab5f22ef2249e4b5254a7964a0cdb72fda96e4ce08699c054790831b9bddab966bf943b72af4444ee6bc240328707cc933a2601cd2812b96ce275438f6828ab9ca2781002"}}, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0xe}, &(0x7f0000000700)={0x20, 0x0, 0x1, 0xa}}) 5.672765259s ago: executing program 1 (id=2037): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f000000010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000640)={0x0, 0xe, 0x1, "06"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000f80)=ANY=[@ANYBLOB="00df19"], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c80)={0x44, &(0x7f0000000940)={0x0, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.581560891s ago: executing program 3 (id=2038): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="1201100100000008ec130600400001020301090224000101fb402609040002040301030009219917780122b10f09058103"], &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000080)={0x40, 0x11, 0x85, {0x85, 0x7, "6944215d213aa790a906e4e348efb9f7ab200aa37cd8b109a5eb906a97026582248dcd20e259398ee93083423961260f60a0ae2368e27186d4c2201cd568aad51f3a070b5ec588c94a5348b17fda57064fb67e17c3ea9883533ab76b79759b0ed15d13dcd984b7702b78504c4b3859095b063c707c723dea4e14554e930fd72bc3e1fb"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000403810b6120000000000010902240001000000000904000001030000000921000000012207000905810300"], 0x0) r1 = syz_usb_connect(0x3, 0x607, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_connect$uac2(0x6, 0xc4, &(0x7f0000000140)=ANY=[@ANYBLOB="12010002000000ff1e0400304000010203010902b2000301051008080b02020104200309040000000101200009240101000627000c08240af70305810711240d01000005010000000100010001000524040608090401000001020000090401010101022000062402010180102401f8030202100000270a000000800d240201f702080352862276080905010920000904e60825018030060600090000000001022000090401010101022000082402010704e319090582092000060e070825010200060100"], &(0x7f0000000400)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x201, 0x9, 0xc, 0x6, 0x40, 0xd}, 0x21, &(0x7f0000000040)={0x5, 0xf, 0x21, 0x1, [@ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x7, 0x1100, 0x1, [0xff0000, 0x0, 0xc00f, 0xf0]}]}, 0x1, [{0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x423}}]}) 5.294819271s ago: executing program 2 (id=2039): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x0, @broadcast}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, 0x0, 0x20000034) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="a1ab26bd7000020006003200000008000300", @ANYRES32=r9, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 3.962702473s ago: executing program 0 (id=2040): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000340)="1b0000001d005f0214fffffffffffff807", 0x11) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000034) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="a1ab26bd7000020006003200000008000300", @ANYRES32, @ANYRES64], 0x28}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 2.534383539s ago: executing program 2 (id=2041): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 2.362651154s ago: executing program 2 (id=2042): prlimit64(0x0, 0xb, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r0], 0x24}, 0x1, 0x0, 0x0, 0x24040804}, 0x4008040) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x5c}}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x5, 0x4e20}]}}}]}, 0x3c}}, 0x40800) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x440200) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 2.136768632s ago: executing program 4 (id=2043): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x41000, 0x2f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f00000001c0), 0x10}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000580)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x70, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x14, 0x0, 0x53) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6(0xa, 0x1, 0xffd) openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)='W', 0x1}], 0x1, 0xe5b, 0xac, 0x1b) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f00000001c0)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e21, @broadcast}, 0x2, 0x2, 0x0, 0x1}}, 0x26) 0s ago: executing program 0 (id=2044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) recvmsg(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45f, 0x700000000000000) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 6 [ 1036.964736][ T4232] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1037.257342][ T4232] usb 3-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1037.321118][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1037.540384][ T4230] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1037.556680][ T4232] usb 3-1: Product: syz [ 1037.561069][ T4232] usb 3-1: Manufacturer: syz [ 1037.565928][ T4232] usb 3-1: SerialNumber: syz [ 1037.615752][T10382] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1038.036910][T10399] loop0: detected capacity change from 0 to 40427 [ 1038.062478][ T1325] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1038.221725][ T4923] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1038.285782][T10399] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1038.293580][T10399] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1038.311231][T10399] F2FS-fs (loop0): invalid crc value [ 1038.347399][T10399] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1038.400207][T10399] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1038.407554][T10399] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1038.598748][ T1325] usb 2-1: device descriptor read/64, error -71 [ 1038.643318][ T4232] usb 3-1: MIDIStreaming interface descriptor not found [ 1039.700404][ T4923] usb 5-1: Using ep0 maxpacket: 8 [ 1039.761096][ T4232] usb 3-1: USB disconnect, device number 33 [ 1040.074202][ T1325] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1040.105637][ T4923] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1040.176807][ T4923] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1040.428547][T10414] loop1: detected capacity change from 0 to 2048 [ 1040.558074][T10412] loop3: detected capacity change from 0 to 40427 [ 1040.572556][ T4923] usb 5-1: config 0 has no interface number 0 [ 1040.578875][ T4923] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1040.595342][ T4923] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1040.607400][ T4923] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1040.620493][ T4923] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1040.632683][ T4923] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1040.697236][T10412] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1040.705288][T10412] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1040.718737][ T4923] usb 5-1: string descriptor 0 read error: -71 [ 1040.730306][T10412] F2FS-fs (loop3): invalid crc value [ 1040.735936][ T4232] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1040.763665][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1696'. [ 1040.772785][T10417] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1040.787124][ T4923] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1041.209248][ T4923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.531992][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 1041.558540][ T4923] usb 5-1: config 0 descriptor?? [ 1041.626465][ T4923] usb 5-1: can't set config #0, error -71 [ 1041.683376][T10412] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1041.723043][ T4232] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1041.732683][ T4923] usb 5-1: USB disconnect, device number 123 [ 1041.738775][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.751066][ T4232] usb 3-1: config 0 descriptor?? [ 1041.758242][T10412] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1041.765429][T10412] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1041.937194][ T4232] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1042.784387][ T26] audit: type=1800 audit(1779437762.287:51): pid=10431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1695" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1043.001669][ T4200] attempt to access beyond end of device [ 1043.001669][ T4200] loop3: rw=2049, want=40968, limit=40427 [ 1043.049618][T10436] loop1: detected capacity change from 0 to 2048 [ 1043.276850][T10434] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1701'. [ 1043.370375][T10441] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1702'. [ 1043.554669][T10442] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1043.644791][T10436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1710'. [ 1044.600737][ T1325] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1045.424574][ T4232] gspca_vc032x: reg_w err -110 [ 1045.479223][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.613696][ T1325] usb 5-1: Using ep0 maxpacket: 8 [ 1045.646473][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.682022][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.714417][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.743104][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.759756][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.768387][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.778338][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.786533][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.791980][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.801866][ T1325] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1045.814100][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.819400][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.829339][ T1325] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1045.840688][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.846023][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.855793][ T1325] usb 5-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1045.874623][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.880458][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.885778][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.897871][ T1325] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1045.904975][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1045.910554][ T4232] gspca_vc032x: Unknown sensor... [ 1045.921162][ T4232] vc032x: probe of 3-1:0.0 failed with error -22 [ 1045.930967][ T4232] usb 3-1: USB disconnect, device number 34 [ 1046.290498][ T4230] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1046.702326][ T1325] usb 5-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1047.101642][T10467] loop3: detected capacity change from 0 to 40427 [ 1047.108657][ T4230] usb 2-1: device descriptor read/64, error -71 [ 1047.341166][ T4923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1047.350075][ T5577] udevd[5577]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1047.366247][ T1325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.375278][ T1325] usb 5-1: Product: syz [ 1047.377935][T10467] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1047.379486][ T1325] usb 5-1: Manufacturer: syz [ 1047.387451][T10467] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1047.391869][ T1325] usb 5-1: SerialNumber: syz [ 1047.417519][ T4230] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1047.426660][T10467] F2FS-fs (loop3): invalid crc value [ 1047.462368][T10467] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1047.504608][T10467] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1047.511762][T10467] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1048.372063][ T26] audit: type=1800 audit(1779437768.011:52): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1708" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1048.478575][ T1325] usb 5-1: can't set config #1, error -71 [ 1048.781734][ T4230] usb 2-1: device descriptor read/64, error -71 [ 1048.922738][ T4230] usb usb2-port1: attempt power cycle [ 1049.097862][ T4923] usb 1-1: Using ep0 maxpacket: 16 [ 1049.125372][ T1325] usb 5-1: USB disconnect, device number 124 [ 1049.178344][ T4923] usb 1-1: device descriptor read/all, error -71 [ 1049.183121][ T9424] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1049.244701][ T4200] attempt to access beyond end of device [ 1049.244701][ T4200] loop3: rw=2049, want=40968, limit=40427 [ 1049.453396][ T9424] usb 3-1: Using ep0 maxpacket: 8 [ 1049.498734][T10484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1714'. [ 1049.583454][ T9424] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 1049.604317][ T9424] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1049.620796][T10487] loop0: detected capacity change from 0 to 2048 [ 1049.652122][ T9424] usb 3-1: config 0 has no interface number 0 [ 1049.683779][ T9424] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1049.705516][T10488] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1049.729291][ T9424] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1049.747511][T10487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1715'. [ 1049.767709][ T9424] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1049.789207][ T9424] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1049.799295][ T9424] usb 3-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1049.998704][ T9424] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1050.062866][ T9424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.142129][ T9424] usb 3-1: Product: syz [ 1050.185248][ T9424] usb 3-1: Manufacturer: syz [ 1050.291235][ T9424] usb 3-1: SerialNumber: syz [ 1050.457775][ T9424] usb 3-1: config 0 descriptor?? [ 1050.580278][T10475] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1050.959361][T10475] udc-core: couldn't find an available UDC or it's busy [ 1050.966387][T10475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1051.070102][T10496] loop3: detected capacity change from 0 to 40427 [ 1051.081386][T10498] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1717'. [ 1051.192867][T10496] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1051.200834][T10496] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1051.214404][T10496] F2FS-fs (loop3): invalid crc value [ 1051.439230][T10496] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1051.539150][T10503] loop0: detected capacity change from 0 to 65 [ 1051.570770][T10475] udc-core: couldn't find an available UDC or it's busy [ 1051.642640][T10475] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1051.734614][T10503] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1051.747361][T10496] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1051.747389][T10496] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1052.736074][ T9424] usb 3-1: NFC: intf ffff888023ce5000 id ffffffff8cb52f00 [ 1052.766390][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1052.771811][ T1325] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1052.774003][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1053.061326][ T26] audit: type=1800 audit(1779437772.415:53): pid=10510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1712" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1053.276986][ T1325] usb 5-1: Using ep0 maxpacket: 32 [ 1053.409317][ T9424] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 1053.474803][ T9424] usb 3-1: USB disconnect, device number 35 [ 1053.512769][ T9424] usb 3-1: NFC: intf ffff888023ce5000 [ 1053.916322][ T1325] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1053.980194][ T1325] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.577742][ T1325] usb 5-1: config 0 descriptor?? [ 1054.962854][T10523] loop1: detected capacity change from 0 to 40427 [ 1055.023166][T10523] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1055.030990][T10523] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1055.044063][T10523] F2FS-fs (loop1): invalid crc value [ 1055.088146][T10523] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1055.145568][T10523] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1055.152898][T10523] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1055.952522][ T1325] usb 5-1: can't set config #0, error -71 [ 1055.959326][ T1325] usb 5-1: USB disconnect, device number 125 [ 1056.600357][ T26] audit: type=1800 audit(1779437775.406:54): pid=10531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1722" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1056.700058][ T9424] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1056.944621][ T4195] attempt to access beyond end of device [ 1056.944621][ T4195] loop1: rw=2049, want=40968, limit=40427 [ 1057.100991][ T9424] usb 3-1: Using ep0 maxpacket: 16 [ 1057.230638][ T1325] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1057.231177][ T9424] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1057.384048][T10544] loop0: detected capacity change from 0 to 2048 [ 1057.425749][ T9424] usb 3-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1057.435748][ T9424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.459983][ T4230] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1057.469621][ T1325] usb 5-1: device descriptor read/64, error -71 [ 1057.477947][ T9424] usb 3-1: Product: syz [ 1057.482420][T10545] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1057.497504][ T9424] usb 3-1: Manufacturer: syz [ 1057.502593][ T9424] usb 3-1: SerialNumber: syz [ 1057.523409][T10521] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1057.524343][T10544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1727'. [ 1057.827449][T10550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1726'. [ 1057.934788][ T1325] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1058.206328][ T1325] usb 5-1: device descriptor read/64, error -71 [ 1058.350472][ T1325] usb usb5-port1: attempt power cycle [ 1059.589482][T10560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1729'. [ 1059.626026][ T4230] usb 4-1: Using ep0 maxpacket: 8 [ 1059.993871][T10562] loop1: detected capacity change from 0 to 40427 [ 1060.296254][ T9424] usb 3-1: MIDIStreaming interface descriptor not found [ 1060.525443][T10562] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1060.533254][T10562] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1060.542631][ T4230] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1060.560505][T10562] F2FS-fs (loop1): invalid crc value [ 1060.566557][ T9424] usb 3-1: USB disconnect, device number 36 [ 1061.945975][ T4230] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1061.963812][T10562] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1062.046532][T10562] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1062.053738][T10562] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1062.275874][ T4230] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1062.878163][ T26] audit: type=1800 audit(1779437781.499:55): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1731" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1063.112817][ T4230] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1063.126660][ T5575] udevd[5575]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1063.372618][ T4230] usb 4-1: string descriptor 0 read error: -71 [ 1063.379977][ T4230] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1063.400725][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1063.621492][ T4230] usb 4-1: can't set config #1, error -71 [ 1063.640372][ T4230] usb 4-1: USB disconnect, device number 15 [ 1063.762392][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1064.016606][T10588] loop4: detected capacity change from 0 to 2048 [ 1064.038320][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 1064.065836][ T4230] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1064.129703][T10589] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1064.156941][T10588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1738'. [ 1064.166465][ T23] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 1064.188310][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.742827][T10593] loop1: detected capacity change from 0 to 40427 [ 1064.801308][T10593] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1064.809113][T10593] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1064.825319][T10593] F2FS-fs (loop1): invalid crc value [ 1064.909003][T10593] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1064.963934][T10593] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1064.971170][T10593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1065.281000][ T26] audit: type=1800 audit(1779437783.705:56): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1736" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1065.738346][ T23] usb 1-1: config 0 has no interface number 0 [ 1065.746540][ T23] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1065.758082][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 1065.763926][ T23] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1065.774066][ T23] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1065.784236][ T23] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1065.818377][ T23] usb 1-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1066.217690][T10602] loop2: detected capacity change from 0 to 65 [ 1066.235163][ T23] usb 1-1: string descriptor 0 read error: -71 [ 1066.359381][ T23] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1066.368671][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.376843][ T4230] usb 4-1: device descriptor read/all, error -71 [ 1066.392577][ T23] usb 1-1: config 0 descriptor?? [ 1066.417338][ T23] usb 1-1: can't set config #0, error -71 [ 1066.427276][T10602] BFS-fs: bfs_fill_super(): NOTE: filesystem loop2 was created with 512 inodes, the real maximum is 511, mounting anyway [ 1066.459635][ T23] usb 1-1: USB disconnect, device number 5 [ 1066.478904][ T4195] attempt to access beyond end of device [ 1066.478904][ T4195] loop1: rw=2049, want=40968, limit=40427 [ 1066.538885][T10606] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1742'. [ 1066.881968][ T21] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 1066.892714][ T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1067.174480][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 1067.218005][ T9424] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1067.304601][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1067.314878][ T23] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1067.330909][ T21] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1067.340729][ T21] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1067.355414][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.381047][ T21] usb 5-1: config 0 descriptor?? [ 1067.477671][ T9424] usb 3-1: Using ep0 maxpacket: 8 [ 1067.510203][ T23] usb 1-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1067.520776][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.535769][ T23] usb 1-1: Product: syz [ 1067.539967][ T23] usb 1-1: Manufacturer: syz [ 1067.546135][ T23] usb 1-1: SerialNumber: syz [ 1067.575529][T10603] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1067.618566][ T9424] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1067.636061][ T9424] usb 3-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1067.648664][ T9424] usb 3-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1067.666997][ T9424] usb 3-1: config 1 interface 0 has no altsetting 0 [ 1067.846028][ T9424] usb 3-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1067.861966][ T9424] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.875021][ T9424] usb 3-1: Product: syz [ 1067.879976][ T9424] usb 3-1: Manufacturer: syz [ 1067.884614][ T9424] usb 3-1: SerialNumber: syz [ 1067.986828][ T23] usb 1-1: MIDIStreaming interface descriptor not found [ 1068.022616][ T23] usb 1-1: USB disconnect, device number 6 [ 1068.235016][ T5580] udevd[5580]: setting mode of /dev/midi3 to 020660 failed: No such file or directory [ 1070.125905][ T5580] udevd[5580]: setting owner of /dev/midi3 to uid=0, gid=29 failed: No such file or directory [ 1070.143620][ T4230] usb 5-1: USB disconnect, device number 3 [ 1070.262151][T10618] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1745'. [ 1071.527757][T10622] loop4: detected capacity change from 0 to 40427 [ 1071.800150][ T5574] udevd[5574]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.273412][T10622] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1072.281349][T10622] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1072.287262][ T9424] usbhid 3-1:1.0: can't add hid device: -71 [ 1072.296060][ T9424] usbhid: probe of 3-1:1.0 failed with error -71 [ 1072.317389][ T9424] usb 3-1: USB disconnect, device number 37 [ 1072.468662][T10622] F2FS-fs (loop4): invalid crc value [ 1072.797990][T10622] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1072.843075][ T4232] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1073.234521][T10637] loop0: detected capacity change from 0 to 2048 [ 1073.241391][T10622] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1073.248448][T10622] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1073.545694][ T26] audit: type=1800 audit(1779437791.350:57): pid=10643 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1747" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1073.693723][T10644] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1073.764998][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1751'. [ 1073.983545][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 1074.269324][ T4232] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1074.289390][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1074.310747][ T4232] usb 4-1: config 0 has no interface number 0 [ 1074.328074][ T4232] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1074.355292][ T4232] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1074.381473][ T4232] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1074.407824][ T4232] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1074.429127][ T4232] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1074.642577][ T4232] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1074.664203][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1074.680739][ T4232] usb 4-1: Product: syz [ 1074.685123][ T4232] usb 4-1: Manufacturer: syz [ 1074.689745][ T4232] usb 4-1: SerialNumber: syz [ 1074.753979][ T4232] usb 4-1: config 0 descriptor?? [ 1074.800411][T10634] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1074.891608][ T9424] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1075.045931][T10634] udc-core: couldn't find an available UDC or it's busy [ 1075.058175][T10649] loop1: detected capacity change from 0 to 40427 [ 1075.078549][T10634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1075.112044][T10634] udc-core: couldn't find an available UDC or it's busy [ 1075.128612][T10649] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1075.136505][T10649] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1075.146152][T10649] F2FS-fs (loop1): invalid crc value [ 1075.157470][ T9424] usb 3-1: Using ep0 maxpacket: 32 [ 1075.179058][T10634] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1075.192920][T10649] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1075.238989][T10649] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1075.246272][T10649] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1075.255242][ T4232] usb 4-1: NFC: intf ffff88807ea5f000 id ffffffff8cb52f00 [ 1075.287753][ T9424] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1075.314860][ T9424] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.341426][ T9424] usb 3-1: config 0 descriptor?? [ 1075.398443][ T9424] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1075.466310][ T4232] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 1075.496913][ T4232] usb 4-1: USB disconnect, device number 18 [ 1075.503795][ T26] audit: type=1800 audit(1779437793.159:58): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1754" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1075.508556][ T4232] usb 4-1: NFC: intf ffff88807ea5f000 [ 1075.876974][T10651] loop0: detected capacity change from 0 to 40427 [ 1075.944459][ T4845] attempt to access beyond end of device [ 1075.944459][ T4845] loop1: rw=1, want=81920, limit=40427 [ 1075.963782][T10651] F2FS-fs (loop0): Invalid SB checksum offset: 0 [ 1075.980746][T10651] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock [ 1075.992909][T10651] F2FS-fs (loop0): invalid crc value [ 1076.024887][ T4845] attempt to access beyond end of device [ 1076.024887][ T4845] loop1: rw=1, want=53248, limit=40427 [ 1076.047310][T10651] F2FS-fs (loop0): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1076.254753][ T4845] attempt to access beyond end of device [ 1076.254753][ T4845] loop1: rw=1, want=69440, limit=40427 [ 1076.322485][T10651] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0 [ 1076.381816][T10651] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1076.400115][T10671] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 1076.685646][ T4232] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1076.977355][ T4232] usb 4-1: Using ep0 maxpacket: 16 [ 1077.123430][ T4232] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1077.388897][ T4232] usb 4-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1077.404889][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1077.413631][ T4232] usb 4-1: Product: syz [ 1077.417832][ T4232] usb 4-1: Manufacturer: syz [ 1077.428682][ T4232] usb 4-1: SerialNumber: syz [ 1077.464961][T10672] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1077.529745][ T4448] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1077.537491][ T4233] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1077.681328][ T9424] gspca_vc032x: reg_w err -71 [ 1077.686068][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.701976][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.707614][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.712962][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.719056][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.724388][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.730941][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.736560][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.800650][ T4448] usb 2-1: Using ep0 maxpacket: 8 [ 1077.806701][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.812488][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.818125][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.824187][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.829545][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.835302][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.841316][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.847141][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.852447][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.858218][ T9424] gspca_vc032x: I2c Bus Busy Wait 00 [ 1077.863530][ T9424] gspca_vc032x: Unknown sensor... [ 1077.869027][ T9424] vc032x: probe of 3-1:0.0 failed with error -22 [ 1077.878835][ T9424] usb 3-1: USB disconnect, device number 38 [ 1078.028095][ T4232] usb 4-1: MIDIStreaming interface descriptor not found [ 1078.056221][ T4232] usb 4-1: USB disconnect, device number 19 [ 1078.062939][ T4233] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.073309][ T4448] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 1078.082005][ T4448] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1078.092153][ T4448] usb 2-1: config 0 has no interface number 0 [ 1078.098785][ T4233] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1078.108163][ T4448] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1078.119531][ T4233] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1078.156933][T10684] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1760'. [ 1078.262268][ T4448] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1078.398683][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.547289][ T4448] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1078.664143][ T4233] usb 1-1: config 0 descriptor?? [ 1078.785569][ T4448] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1079.014103][ T4448] usb 2-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1079.077349][ T5577] udevd[5577]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1079.479477][ T4448] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1079.493990][ T4448] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1079.503962][ T4448] usb 2-1: Product: syz [ 1079.508226][ T4448] usb 2-1: Manufacturer: syz [ 1079.518991][ T4448] usb 2-1: SerialNumber: syz [ 1079.533153][ T4448] usb 2-1: config 0 descriptor?? [ 1079.571704][T10676] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1079.813980][T10676] udc-core: couldn't find an available UDC or it's busy [ 1079.821197][T10676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1079.829495][T10676] udc-core: couldn't find an available UDC or it's busy [ 1079.837230][T10676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1079.859156][ T4448] usb 2-1: NFC: intf ffff88802bc76000 id ffffffff8cb52f00 [ 1079.871244][ T4448] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 1079.894577][T10690] udc-core: couldn't find an available UDC or it's busy [ 1079.901553][T10690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1079.922057][T10690] udc-core: couldn't find an available UDC or it's busy [ 1079.933381][T10690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1080.087972][ T4448] usb 2-1: USB disconnect, device number 27 [ 1080.095354][ T4448] usb 2-1: NFC: intf ffff88802bc76000 [ 1080.129820][ T9424] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1080.161980][T10690] udc-core: couldn't find an available UDC or it's busy [ 1080.179256][T10690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1080.204586][T10690] udc-core: couldn't find an available UDC or it's busy [ 1080.233609][T10690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1080.268156][T10690] udc-core: couldn't find an available UDC or it's busy [ 1080.279989][T10690] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1080.530333][ T4990] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1080.834786][ T4990] usb 4-1: Using ep0 maxpacket: 16 [ 1081.007482][ T4990] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1081.125832][ T9424] usb 3-1: Using ep0 maxpacket: 8 [ 1081.161283][T10700] loop2: detected capacity change from 0 to 2048 [ 1081.399989][ T9424] usb 3-1: device descriptor read/all, error -71 [ 1081.438454][ T9572] usb 1-1: USB disconnect, device number 7 [ 1081.687988][T10707] loop0: detected capacity change from 0 to 40427 [ 1081.721722][ T4990] usb 4-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1081.737508][T10711] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1081.767771][ T4990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1081.790723][T10707] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1081.798715][T10707] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1081.809238][T10707] F2FS-fs (loop0): invalid crc value [ 1081.821338][T10700] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1763'. [ 1081.841146][ T4990] usb 4-1: Product: syz [ 1081.854229][T10707] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1082.030558][ T4990] usb 4-1: Manufacturer: syz [ 1082.035455][ T4990] usb 4-1: SerialNumber: syz [ 1082.123987][T10694] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1082.186270][T10707] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1082.193447][T10707] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1083.086594][ T26] audit: type=1800 audit(1779437799.714:59): pid=10722 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1767" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1084.318438][ T4193] attempt to access beyond end of device [ 1084.318438][ T4193] loop0: rw=2049, want=40968, limit=40427 [ 1084.364666][ T4990] usb 4-1: MIDIStreaming interface descriptor not found [ 1084.428295][ T4990] usb 4-1: USB disconnect, device number 20 [ 1085.108644][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1771'. [ 1086.507474][T10738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1773'. [ 1087.310778][ T4230] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 1087.492635][T10744] loop1: detected capacity change from 0 to 40427 [ 1087.519816][T10744] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 1087.526218][T10744] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 1087.573811][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 1087.596335][T10744] F2FS-fs (loop1): invalid crc value [ 1087.619244][T10744] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 1087.638910][ T4229] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1087.703939][ T4230] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1087.716960][T10744] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 1087.726265][ T4230] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1087.740172][T10744] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1087.750101][ T4230] usb 5-1: config 0 has no interface number 0 [ 1087.792307][ T4230] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1087.836810][ T4230] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1087.882892][ T4230] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1087.915221][ T4230] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1087.928323][ T4229] usb 1-1: Using ep0 maxpacket: 32 [ 1087.937718][ T4230] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1088.058382][ T4229] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1088.073123][ T4229] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.123327][ T4230] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1088.153375][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.167607][ T4229] usb 1-1: config 0 descriptor?? [ 1088.184370][ T4230] usb 5-1: Product: syz [ 1088.195328][ T4230] usb 5-1: Manufacturer: syz [ 1088.213049][ T4229] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1088.220353][ T4230] usb 5-1: SerialNumber: syz [ 1088.254871][ T4230] usb 5-1: config 0 descriptor?? [ 1088.275246][T10742] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1088.517444][T10742] udc-core: couldn't find an available UDC or it's busy [ 1088.528320][T10742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1088.537609][T10742] udc-core: couldn't find an available UDC or it's busy [ 1088.545078][T10742] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1088.557307][ T4230] usb 5-1: NFC: intf ffff888075fa4000 id ffffffff8cb52f00 [ 1088.572120][ T4230] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 1088.589201][ T4990] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1088.697583][ T9424] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1088.855417][ T23] usb 5-1: USB disconnect, device number 4 [ 1088.904387][ T23] usb 5-1: NFC: intf ffff888075fa4000 [ 1089.120115][ T9424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1089.227507][ T9424] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1089.310893][ T9424] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1089.320726][ T9424] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.330725][ T9424] usb 2-1: config 0 descriptor?? [ 1089.476229][T10764] loop2: detected capacity change from 0 to 2048 [ 1089.510995][ T4990] usb 4-1: Using ep0 maxpacket: 8 [ 1089.562765][T10764] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1781'. [ 1089.572109][T10767] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1089.922144][ T4990] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.963733][ T4990] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1090.023887][ T4990] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1090.099378][ T4990] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1090.396217][T10772] udc-core: couldn't find an available UDC or it's busy [ 1090.510038][ T4990] usb 4-1: string descriptor 0 read error: -71 [ 1090.516331][ T4990] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1090.517465][T10772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1090.534645][ T4990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.571278][ T4990] usb 4-1: can't set config #1, error -71 [ 1090.582724][ T4990] usb 4-1: USB disconnect, device number 21 [ 1090.604667][T10772] udc-core: couldn't find an available UDC or it's busy [ 1090.611759][T10772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1090.882666][T10779] loop2: detected capacity change from 0 to 40427 [ 1091.068974][T10772] udc-core: couldn't find an available UDC or it's busy [ 1091.076259][T10772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1091.089508][T10772] udc-core: couldn't find an available UDC or it's busy [ 1091.096614][T10772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1091.110817][T10772] udc-core: couldn't find an available UDC or it's busy [ 1091.118075][T10772] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1091.134408][ T4448] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 1091.170852][T10779] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1091.178935][T10779] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1091.200005][T10779] F2FS-fs (loop2): invalid crc value [ 1091.284767][T10779] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1091.334661][T10779] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1091.342050][T10779] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1091.806056][ T4229] gspca_vc032x: reg_w err -110 [ 1092.775233][ T4448] usb 5-1: Using ep0 maxpacket: 16 [ 1092.785227][ T26] audit: type=1800 audit(1779437809.075:60): pid=10788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1784" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 1092.822716][ T4279] usb 2-1: USB disconnect, device number 28 [ 1093.587626][T10790] loop3: detected capacity change from 0 to 40427 [ 1093.803304][ T4189] attempt to access beyond end of device [ 1093.803304][ T4189] loop2: rw=2049, want=40968, limit=40427 [ 1093.826382][T10790] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1093.834385][T10790] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1093.949348][T10799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1789'. [ 1094.003554][T10790] F2FS-fs (loop3): invalid crc value [ 1094.053786][T10800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1787'. [ 1094.342795][T10790] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1094.410561][T10790] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1094.417863][T10790] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1094.791342][ T26] audit: type=1800 audit(1779437810.968:61): pid=10795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1786" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1095.020950][T10810] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1801'. [ 1095.034714][ T4448] usb 5-1: unable to read config index 0 descriptor/all [ 1095.041759][ T4448] usb 5-1: can't read configurations, error -71 [ 1095.127757][T10812] siw: device registration error -23 [ 1096.331892][T10423] attempt to access beyond end of device [ 1096.331892][T10423] loop3: rw=1, want=78592, limit=40427 [ 1096.693448][ T4448] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 1097.077186][T10827] loop3: detected capacity change from 0 to 2048 [ 1097.081432][ T4448] usb 5-1: Using ep0 maxpacket: 8 [ 1097.373772][ T4448] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1097.415625][ T4448] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1097.552672][ T4448] usb 5-1: config 0 has no interface number 0 [ 1097.580841][T10829] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1097.651760][ T4448] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1097.937397][T10827] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1794'. [ 1098.129502][ T4448] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1098.201700][ T4448] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1098.211986][ T4448] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1098.222898][ T4448] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1098.511412][ T4448] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1098.520692][ T4448] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.581575][ T4448] usb 5-1: Product: syz [ 1098.585803][ T4448] usb 5-1: Manufacturer: syz [ 1098.777906][ T4448] usb 5-1: SerialNumber: syz [ 1099.401975][ T4448] usb 5-1: config 0 descriptor?? [ 1099.453421][ T4448] usb 5-1: can't set config #0, error -71 [ 1099.490835][ T4448] usb 5-1: USB disconnect, device number 6 [ 1100.028736][ T4990] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1100.103630][ T4448] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1100.275426][T10846] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1803'. [ 1100.284927][ T21] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1100.439301][ T4448] usb 5-1: Using ep0 maxpacket: 32 [ 1100.493465][ T4990] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.509345][ T4990] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1100.523131][ T4990] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1100.536974][ T4990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.566808][ T4990] usb 4-1: config 0 descriptor?? [ 1100.591359][ T4448] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1100.600813][ T4448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.610993][ T4448] usb 5-1: config 0 descriptor?? [ 1100.618394][ T4990] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 1100.677659][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 1100.711230][T10850] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1804'. [ 1100.862659][ T21] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1101.689391][T10852] loop0: detected capacity change from 0 to 40427 [ 1101.761299][T10852] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1101.769096][T10852] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1101.779661][T10852] F2FS-fs (loop0): invalid crc value [ 1101.819229][ T21] usb 3-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1101.833633][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1101.862455][ T21] usb 3-1: Product: syz [ 1101.871942][T10852] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1101.925073][ T21] usb 3-1: Manufacturer: syz [ 1101.930912][T10852] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1101.938136][T10852] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1102.123996][ T21] usb 3-1: SerialNumber: syz [ 1102.166981][T10858] udc-core: couldn't find an available UDC or it's busy [ 1102.529610][ T4990] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1102.542758][T10843] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1102.550415][T10858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1102.575647][ T4448] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1102.597362][T10858] udc-core: couldn't find an available UDC or it's busy [ 1102.615522][T10858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1103.026135][ T26] audit: type=1800 audit(1779437818.279:62): pid=10860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1805" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1103.422594][ T4448] gspca_vc032x: reg_r err -71 [ 1103.427372][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.433163][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.438496][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.444178][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.449530][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.455135][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.461572][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.466947][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.472590][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.477903][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.483511][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.488816][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.494408][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.499762][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.505364][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.510681][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.516251][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.521579][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1103.552280][ T4448] gspca_vc032x: Unknown sensor... [ 1103.592224][ T4448] vc032x: probe of 5-1:0.0 failed with error -22 [ 1103.626301][T10863] loop1: detected capacity change from 0 to 40427 [ 1103.654354][ T4193] attempt to access beyond end of device [ 1103.654354][ T4193] loop0: rw=2049, want=40968, limit=40427 [ 1103.661153][T10867] loop2: detected capacity change from 0 to 2048 [ 1103.672394][T10863] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1103.680273][T10863] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1103.688257][ T4448] usb 5-1: USB disconnect, device number 7 [ 1103.701411][T10863] F2FS-fs (loop1): invalid crc value [ 1103.736562][T10871] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1103.772471][T10867] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1808'. [ 1103.782310][ T21] usb 3-1: MIDIStreaming interface descriptor not found [ 1103.797699][T10858] udc-core: couldn't find an available UDC or it's busy [ 1103.809416][T10863] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1103.860304][T10858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1103.971400][T10858] udc-core: couldn't find an available UDC or it's busy [ 1103.978404][T10858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1104.091296][T10863] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1104.098392][T10863] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1104.604100][ T21] usb 3-1: USB disconnect, device number 41 [ 1104.615341][T10858] udc-core: couldn't find an available UDC or it's busy [ 1104.641878][T10858] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1104.650579][ T26] audit: type=1800 audit(1779437820.070:63): pid=10880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1806" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1105.032288][ T9] attempt to access beyond end of device [ 1105.032288][ T9] loop1: rw=1, want=81920, limit=40427 [ 1105.153565][ T5558] udevd[5558]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1105.200360][ T4230] usb 4-1: USB disconnect, device number 22 [ 1106.742550][ T9] attempt to access beyond end of device [ 1106.742550][ T9] loop1: rw=1, want=53248, limit=40427 [ 1106.793364][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1815'. [ 1106.923287][ T9] attempt to access beyond end of device [ 1106.923287][ T9] loop1: rw=1, want=71680, limit=40427 [ 1107.761428][ T21] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1108.208095][ T21] usb 2-1: Using ep0 maxpacket: 8 [ 1108.332619][T10907] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1816'. [ 1108.357575][ T4448] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1108.433060][ T4990] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1108.628216][ T4448] usb 5-1: Using ep0 maxpacket: 32 [ 1108.703882][ T4990] usb 4-1: Using ep0 maxpacket: 16 [ 1108.759088][ T4448] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1108.782173][ T4448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.877758][ T4990] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1108.917235][ T4448] usb 5-1: config 0 descriptor?? [ 1108.999679][ T4448] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1109.115506][ T21] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1109.127200][ T21] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1109.137083][ T21] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1109.149936][ T21] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1109.191357][ T4990] usb 4-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1109.208848][ T4990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1109.221190][ T4990] usb 4-1: Product: syz [ 1109.231763][ T4990] usb 4-1: Manufacturer: syz [ 1109.237939][ T4990] usb 4-1: SerialNumber: syz [ 1109.267439][T10906] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1109.700571][ T4990] usb 4-1: MIDIStreaming interface descriptor not found [ 1109.742721][ T4990] usb 4-1: USB disconnect, device number 23 [ 1110.048774][ T5567] udevd[5567]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1110.381718][T10913] loop3: detected capacity change from 0 to 40427 [ 1110.461178][T10915] siw: device registration error -23 [ 1110.475344][ T21] usb 2-1: string descriptor 0 read error: -22 [ 1110.508942][T10913] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1110.516832][T10913] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1110.544308][T10913] F2FS-fs (loop3): invalid crc value [ 1110.596993][ T21] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1110.710026][T10913] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1110.820748][ T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.277628][T10922] loop0: detected capacity change from 0 to 2048 [ 1111.284392][ T21] usb 2-1: can't set config #1, error -71 [ 1111.291589][ T21] usb 2-1: USB disconnect, device number 29 [ 1111.317934][T10913] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1111.325480][T10913] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1111.567900][T10924] loop1: detected capacity change from 0 to 40427 [ 1112.087834][ T26] audit: type=1800 audit(1779437826.671:64): pid=10925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1821" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1112.284352][ T4200] attempt to access beyond end of device [ 1112.284352][ T4200] loop3: rw=2049, want=40968, limit=40427 [ 1112.336990][T10922] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1822'. [ 1112.346482][T10926] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1112.541599][T10924] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1112.549456][T10924] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1112.561186][T10924] F2FS-fs (loop1): invalid crc value [ 1112.709542][T10924] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1112.778343][T10924] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1112.785641][T10924] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1113.018382][ T26] audit: type=1800 audit(1779437827.797:65): pid=10935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1823" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1113.039215][ T4448] gspca_vc032x: reg_r err -32 [ 1113.044011][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.050234][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.123265][ T4230] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1113.310730][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.316122][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.321499][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.326817][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.333127][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.338453][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.343827][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.349135][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.354519][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.359839][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.374230][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.379566][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.524629][ T4230] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1113.549362][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.555925][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.561664][ T4448] gspca_vc032x: I2c Bus Busy Wait 00 [ 1113.567001][ T4448] gspca_vc032x: Unknown sensor... [ 1113.572462][ T4448] vc032x: probe of 5-1:0.0 failed with error -22 [ 1113.582383][ T1270] attempt to access beyond end of device [ 1113.582383][ T1270] loop1: rw=1, want=80368, limit=40427 [ 1113.596679][ T4230] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1115.657963][T10946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1829'. [ 1116.664066][ T4230] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1116.673610][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.686926][ T21] usb 5-1: USB disconnect, device number 8 [ 1116.701034][ T4230] usb 3-1: config 0 descriptor?? [ 1116.727660][ T1270] attempt to access beyond end of device [ 1116.727660][ T1270] loop1: rw=1, want=81920, limit=40427 [ 1117.603265][ T1270] attempt to access beyond end of device [ 1117.603265][ T1270] loop1: rw=1, want=51200, limit=40427 [ 1117.691959][ T1270] attempt to access beyond end of device [ 1117.691959][ T1270] loop1: rw=1, want=53248, limit=40427 [ 1117.723891][ T4230] usb 3-1: can't set config #0, error -71 [ 1117.731234][ T4230] usb 3-1: USB disconnect, device number 42 [ 1117.788555][ T1270] attempt to access beyond end of device [ 1117.788555][ T1270] loop1: rw=1, want=60192, limit=40427 [ 1117.854862][ T1270] attempt to access beyond end of device [ 1117.854862][ T1270] loop1: rw=1, want=65480, limit=40427 [ 1118.302209][ T1270] attempt to access beyond end of device [ 1118.302209][ T1270] loop1: rw=1, want=69056, limit=40427 [ 1118.562721][ T4230] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1118.670205][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1118.820754][ T4230] usb 3-1: Using ep0 maxpacket: 16 [ 1118.838621][T10964] loop3: detected capacity change from 0 to 40427 [ 1118.901403][T10964] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1118.909447][T10964] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1118.920384][T10964] F2FS-fs (loop3): invalid crc value [ 1118.950897][ T4230] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1118.961628][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 1118.979147][T10964] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1119.032969][T10964] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1119.040336][T10964] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1119.088592][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1828'. [ 1119.205777][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1119.218132][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1119.243466][ T21] usb 5-1: config 0 has an invalid interface number: 122 but max is 0 [ 1119.251650][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.266529][ T21] usb 5-1: config 0 has no interface number 0 [ 1119.273387][ T26] audit: type=1800 audit(1779437833.567:66): pid=10972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1835" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1119.273742][ T21] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1119.311105][ T21] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1119.322445][ T21] usb 5-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1119.563569][ T4230] usb 3-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1119.573772][ T21] usb 5-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1119.575735][ T4200] attempt to access beyond end of device [ 1119.575735][ T4200] loop3: rw=2049, want=40968, limit=40427 [ 1119.584235][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.603689][ T21] usb 5-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1119.616812][ T4230] usb 3-1: Product: syz [ 1119.620996][ T4230] usb 3-1: Manufacturer: syz [ 1119.625809][ T4230] usb 3-1: SerialNumber: syz [ 1119.655309][T10950] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1119.819551][ T21] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1119.828977][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.837001][ T21] usb 5-1: Product: syz [ 1119.841245][ T21] usb 5-1: Manufacturer: syz [ 1119.846147][ T21] usb 5-1: SerialNumber: syz [ 1119.869157][ T21] usb 5-1: config 0 descriptor?? [ 1119.909001][T10955] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1120.007396][T10979] loop3: detected capacity change from 0 to 2048 [ 1120.066623][ T4230] usb 3-1: MIDIStreaming interface descriptor not found [ 1120.094382][ T4230] usb 3-1: USB disconnect, device number 43 [ 1120.169527][T10955] udc-core: couldn't find an available UDC or it's busy [ 1120.180060][T10955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1120.182503][T10977] loop1: detected capacity change from 0 to 40427 [ 1120.194941][T10955] udc-core: couldn't find an available UDC or it's busy [ 1120.202516][T10955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1120.223129][T10977] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1120.231051][T10977] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1120.237901][ T21] usb 5-1: NFC: intf ffff888022756000 id ffffffff8cb52f00 [ 1120.244833][T10977] F2FS-fs (loop1): invalid crc value [ 1120.293612][T10982] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1120.296547][T10977] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1120.334668][T10979] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1836'. [ 1120.355195][T10977] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1120.361455][ T5549] udevd[5549]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1120.362601][T10977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1120.609841][ T26] audit: type=1800 audit(1779437834.805:67): pid=10990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1838" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1120.623177][ T21] nfcmrvl 5-1:0.122: NFC: registered with nci successfully [ 1120.630554][ C0] vkms_vblank_simulate: vblank timer overrun [ 1120.992974][ T21] usb 5-1: USB disconnect, device number 9 [ 1121.008949][ T21] usb 5-1: NFC: intf ffff888022756000 [ 1121.180838][ T4195] attempt to access beyond end of device [ 1121.180838][ T4195] loop1: rw=2049, want=40968, limit=40427 [ 1121.463852][ T23] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1121.595801][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1840'. [ 1124.236704][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 1124.338871][ T23] usb 3-1: device descriptor read/all, error -71 [ 1124.346474][ T9424] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1126.695605][ T9424] usb 2-1: Using ep0 maxpacket: 16 [ 1126.803971][ T9424] usb 2-1: device descriptor read/all, error -71 [ 1127.052997][T11029] loop4: detected capacity change from 0 to 40427 [ 1127.296284][T11037] loop2: detected capacity change from 0 to 2048 [ 1127.628905][T11039] loop0: detected capacity change from 0 to 40427 [ 1127.639090][T11041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1847'. [ 1127.679671][T11029] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1127.687579][T11029] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1127.724402][T11029] F2FS-fs (loop4): invalid crc value [ 1127.882821][T11029] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1127.918749][T11039] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1127.926627][T11039] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1128.002122][T11029] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1128.009323][T11029] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1128.203934][ T9424] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1128.224694][T11039] F2FS-fs (loop0): invalid crc value [ 1128.537513][ T26] audit: type=1800 audit(1779437841.849:68): pid=11048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1848" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1128.557984][ C1] vkms_vblank_simulate: vblank timer overrun [ 1128.598274][T11050] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1128.614757][T11039] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1128.783753][T11037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1852'. [ 1128.837619][T11039] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1128.844829][T11039] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1129.030036][ T9424] usb 2-1: Using ep0 maxpacket: 8 [ 1129.587819][ T26] audit: type=1800 audit(1779437842.846:69): pid=11057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1851" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1129.621427][ T4196] attempt to access beyond end of device [ 1129.621427][ T4196] loop4: rw=2049, want=40968, limit=40427 [ 1129.696247][ T9424] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 1129.739766][ T9424] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1129.771773][ T9424] usb 2-1: config 0 has no interface number 0 [ 1129.782590][ T9424] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1129.836788][ T9424] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1129.881392][ T9424] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1129.912650][ T9424] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1129.933683][ T9424] usb 2-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1129.951097][ T4193] attempt to access beyond end of device [ 1129.951097][ T4193] loop0: rw=2049, want=40968, limit=40427 [ 1130.113087][ T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1130.121144][ T9424] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1130.131595][ T9424] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.139769][ T9424] usb 2-1: Product: syz [ 1130.144460][ T9424] usb 2-1: Manufacturer: syz [ 1130.149279][ T9424] usb 2-1: SerialNumber: syz [ 1130.164057][ T9424] usb 2-1: config 0 descriptor?? [ 1130.185248][T11043] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1130.389271][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1130.426488][T11043] udc-core: couldn't find an available UDC or it's busy [ 1130.443399][T11043] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1130.479835][T11043] udc-core: couldn't find an available UDC or it's busy [ 1130.498234][T11043] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1130.528873][ T23] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.545730][ T23] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.556692][ T9424] usb 2-1: NFC: intf ffff8880779ab000 id ffffffff8cb52f00 [ 1130.568243][ T23] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1130.581665][ T23] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1130.770119][ T9424] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 1130.787458][ T9424] usb 2-1: USB disconnect, device number 31 [ 1130.795521][ T9424] usb 2-1: NFC: intf ffff8880779ab000 [ 1131.280597][T11080] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1856'. [ 1131.375014][ T4448] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1131.743632][ T4448] usb 5-1: Using ep0 maxpacket: 32 [ 1131.894959][ T4448] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1131.909133][ T4448] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.920524][ T4448] usb 5-1: config 0 descriptor?? [ 1131.932626][ T9572] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1132.005347][ T4448] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1132.232582][ T9572] usb 3-1: Using ep0 maxpacket: 16 [ 1132.404066][ T9572] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1132.599077][ T9572] usb 3-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1132.613589][ T9572] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.623054][ T9572] usb 3-1: Product: syz [ 1132.627243][ T9572] usb 3-1: Manufacturer: syz [ 1132.637560][ T9572] usb 3-1: SerialNumber: syz [ 1132.669052][T11082] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1132.772321][ T23] usb 4-1: string descriptor 0 read error: -22 [ 1132.778626][ T23] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1132.788308][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.120585][ T9572] usb 3-1: MIDIStreaming interface descriptor not found [ 1133.129945][ T23] usbhid 4-1:1.0: can't add hid device: -71 [ 1133.138996][ T23] usbhid: probe of 4-1:1.0 failed with error -71 [ 1133.150042][ T23] usb 4-1: USB disconnect, device number 24 [ 1133.349869][ T9572] usb 3-1: USB disconnect, device number 46 [ 1133.861301][ T5568] udevd[5568]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1133.900373][T11083] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1135.924407][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1865'. [ 1137.202449][ T4448] gspca_vc032x: reg_w err -110 [ 1138.128483][T11108] loop0: detected capacity change from 0 to 2048 [ 1138.286979][T11083] usb 2-1: device descriptor read/all, error -71 [ 1138.357020][T11112] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1138.378086][T11108] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1868'. [ 1138.503313][T11106] loop1: detected capacity change from 0 to 40427 [ 1138.757494][T11113] loop4: detected capacity change from 0 to 40427 [ 1138.884096][T11106] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1138.891892][T11106] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1138.901991][T11106] F2FS-fs (loop1): invalid crc value [ 1138.910134][T11113] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1138.918051][T11113] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1138.934693][T11113] F2FS-fs (loop4): invalid crc value [ 1139.037762][T11113] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1139.460068][T11113] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1139.467363][T11113] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1139.475801][T11106] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1139.545590][T11106] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1139.552685][T11106] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1139.996210][ T26] audit: type=1800 audit(1779437852.668:70): pid=11134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1866" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1140.180096][T11137] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1873'. [ 1145.100152][ T4195] attempt to access beyond end of device [ 1145.100152][ T4195] loop1: rw=2049, want=40968, limit=40427 [ 1145.478113][ T23] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1145.543099][ T4990] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1145.878981][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 1145.909558][T11149] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1880'. [ 1146.031046][ T23] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1146.115920][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1146.403670][ T23] usb 4-1: config 0 descriptor?? [ 1146.639647][ T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1147.092074][ T4279] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1147.351940][ T4279] usb 2-1: Using ep0 maxpacket: 16 [ 1147.482103][ T4279] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1147.611090][ T4990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.621888][ T4990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1147.631644][ T4990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1147.641330][ T4990] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1147.654182][ T4990] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1147.663277][ T4990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1147.666897][ T4279] usb 2-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1147.688980][ T4990] usb 3-1: config 0 descriptor?? [ 1147.698946][ T4279] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.707158][ T4279] usb 2-1: Product: syz [ 1147.711812][ T4279] usb 2-1: Manufacturer: syz [ 1147.716446][ T4279] usb 2-1: SerialNumber: syz [ 1147.753040][T11151] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 1147.846822][ T4990] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 1147.853275][ T4990] hdpvr: probe of 3-1:0.0 failed with error -12 [ 1148.794776][ T4279] usb 2-1: MIDIStreaming interface descriptor not found [ 1148.815665][T11162] udc-core: couldn't find an available UDC or it's busy [ 1148.822704][T11162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1148.836941][T11158] loop0: detected capacity change from 0 to 2048 [ 1148.908117][ T4279] usb 2-1: USB disconnect, device number 34 [ 1148.934291][T11162] udc-core: couldn't find an available UDC or it's busy [ 1149.019409][T11162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1149.044420][T11163] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1149.062310][T11158] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1882'. [ 1149.361925][T11162] udc-core: couldn't find an available UDC or it's busy [ 1149.380025][T11162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1149.437723][T11162] udc-core: couldn't find an available UDC or it's busy [ 1149.474957][T11162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1149.516619][T11162] udc-core: couldn't find an available UDC or it's busy [ 1149.570560][T11162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1149.808296][T11167] loop1: detected capacity change from 0 to 256 [ 1149.923772][T11167] FAT-fs (loop1): Directory bread(block 64) failed [ 1149.962026][T11167] FAT-fs (loop1): Directory bread(block 65) failed [ 1149.977270][T11167] FAT-fs (loop1): Directory bread(block 66) failed [ 1149.984322][T11167] FAT-fs (loop1): Directory bread(block 67) failed [ 1149.991024][T11167] FAT-fs (loop1): Directory bread(block 68) failed [ 1150.003617][T11167] FAT-fs (loop1): Directory bread(block 69) failed [ 1150.010841][T11167] FAT-fs (loop1): Directory bread(block 70) failed [ 1150.023223][T11167] FAT-fs (loop1): Directory bread(block 71) failed [ 1150.030102][T11167] FAT-fs (loop1): Directory bread(block 72) failed [ 1150.036902][T11167] FAT-fs (loop1): Directory bread(block 73) failed [ 1150.439916][ T23] gspca_vc032x: reg_r err -32 [ 1150.447491][ T5549] udevd[5549]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1150.463358][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.469236][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.474631][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.479941][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.486748][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.492581][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.498393][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.503729][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.509770][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.515140][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1150.520446][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1151.025250][ T9572] usb 3-1: USB disconnect, device number 47 [ 1151.290124][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1151.295711][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1151.301007][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1151.306342][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1151.311633][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1151.316960][ T23] gspca_vc032x: I2c Bus Busy Wait 00 [ 1151.322256][ T23] gspca_vc032x: Unknown sensor... [ 1151.327605][ T23] vc032x: probe of 4-1:0.0 failed with error -22 [ 1151.336891][ T23] usb 4-1: USB disconnect, device number 25 [ 1151.535774][T11180] loop3: detected capacity change from 0 to 40427 [ 1151.820721][T11180] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1151.829299][T11180] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1152.102908][T11186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1889'. [ 1152.163436][T11180] F2FS-fs (loop3): invalid crc value [ 1152.325952][T11180] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1152.873006][T11192] loop2: detected capacity change from 0 to 40427 [ 1152.925476][T11192] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1152.933954][T11192] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1152.947278][T11192] F2FS-fs (loop2): invalid crc value [ 1153.046777][T11192] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1153.090983][T11192] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1153.098333][T11192] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1153.562293][T11180] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1153.569709][T11180] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1154.056074][ T26] audit: type=1800 audit(1779437865.409:71): pid=11201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1890" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 1154.086750][ T26] audit: type=1800 audit(1779437865.658:72): pid=11202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1887" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1154.393694][ T4189] attempt to access beyond end of device [ 1154.393694][ T4189] loop2: rw=2049, want=40968, limit=40427 [ 1154.558162][T11209] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1891'. [ 1154.966201][ T154] attempt to access beyond end of device [ 1154.966201][ T154] loop3: rw=1, want=81920, limit=40427 [ 1155.181893][ T154] attempt to access beyond end of device [ 1155.181893][ T154] loop3: rw=1, want=53248, limit=40427 [ 1155.628332][ T154] attempt to access beyond end of device [ 1155.628332][ T154] loop3: rw=1, want=72296, limit=40427 [ 1157.883349][T11219] loop4: detected capacity change from 0 to 256 [ 1157.954959][T11221] loop3: detected capacity change from 0 to 2048 [ 1158.030138][T11219] FAT-fs (loop4): Directory bread(block 64) failed [ 1158.043040][T11219] FAT-fs (loop4): Directory bread(block 65) failed [ 1158.062484][T11219] FAT-fs (loop4): Directory bread(block 66) failed [ 1158.069441][T11219] FAT-fs (loop4): Directory bread(block 67) failed [ 1158.112198][T11219] FAT-fs (loop4): Directory bread(block 68) failed [ 1158.139253][T11221] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1895'. [ 1158.155567][T11224] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1158.177481][T11219] FAT-fs (loop4): Directory bread(block 69) failed [ 1158.194685][T11219] FAT-fs (loop4): Directory bread(block 70) failed [ 1158.216662][T11219] FAT-fs (loop4): Directory bread(block 71) failed [ 1158.223297][T11219] FAT-fs (loop4): Directory bread(block 72) failed [ 1158.229928][T11219] FAT-fs (loop4): Directory bread(block 73) failed [ 1158.660371][ T4990] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1159.104917][ T4990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1159.168034][ T4990] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1159.273971][ T4990] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1159.315357][ T4990] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1159.329057][ T4990] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1159.343848][ T4990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1159.367364][ T4990] usb 3-1: config 0 descriptor?? [ 1159.437123][ T4990] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 1159.445143][ T4990] hdpvr: probe of 3-1:0.0 failed with error -12 [ 1159.634770][T11235] loop3: detected capacity change from 0 to 40427 [ 1159.711087][ T23] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1159.740151][T11235] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1159.748096][T11235] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1159.761227][T11235] F2FS-fs (loop3): invalid crc value [ 1159.769281][T11235] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1159.808213][T11235] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1159.815373][T11235] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1159.978254][ T26] audit: type=1800 audit(1779437871.151:73): pid=11235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1904" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1160.296072][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1160.315316][ T4200] attempt to access beyond end of device [ 1160.315316][ T4200] loop3: rw=2049, want=40968, limit=40427 [ 1160.415175][T11242] udc-core: couldn't find an available UDC or it's busy [ 1160.422286][T11242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1160.436926][ T23] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1160.450024][T11242] udc-core: couldn't find an available UDC or it's busy [ 1160.461500][T11242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1160.610379][ T23] usb 2-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1160.619495][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1160.636581][ T23] usb 2-1: Product: syz [ 1160.640857][ T23] usb 2-1: Manufacturer: syz [ 1160.645813][ T23] usb 2-1: SerialNumber: syz [ 1160.675497][T11230] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1160.688515][T11242] udc-core: couldn't find an available UDC or it's busy [ 1160.696038][T11242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1160.712443][T11242] udc-core: couldn't find an available UDC or it's busy [ 1160.722599][T11242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1160.735138][T11242] udc-core: couldn't find an available UDC or it's busy [ 1160.743205][T11242] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1161.418380][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1906'. [ 1161.874879][ T1325] usb 3-1: USB disconnect, device number 48 [ 1162.173722][T11252] loop2: detected capacity change from 0 to 40427 [ 1162.321060][ T23] usb 2-1: MIDIStreaming interface descriptor not found [ 1162.330646][T11252] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1162.338516][T11252] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1162.374866][T11252] F2FS-fs (loop2): invalid crc value [ 1162.574288][T11257] udc-core: couldn't find an available UDC or it's busy [ 1162.597846][T11252] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1163.184747][T11260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1908'. [ 1163.232855][T11257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1163.285814][T11257] udc-core: couldn't find an available UDC or it's busy [ 1163.298073][ T23] usb 2-1: USB disconnect, device number 35 [ 1163.307280][T11257] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1163.340731][T11252] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1163.347900][T11252] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1163.562133][T11264] binder: BINDER_SET_CONTEXT_MGR already set [ 1163.892277][ T26] audit: type=1800 audit(1779437874.474:74): pid=11266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1907" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 1163.925881][T11264] binder: 11262:11264 ioctl 4018620d 200000004a80 returned -16 [ 1164.088210][ T4189] attempt to access beyond end of device [ 1164.088210][ T4189] loop2: rw=2049, want=40968, limit=40427 [ 1164.174710][ T5577] udevd[5577]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1165.749624][T11276] loop4: detected capacity change from 0 to 40427 [ 1165.819607][T11276] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1165.827567][T11276] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1165.848993][T11276] F2FS-fs (loop4): invalid crc value [ 1165.905806][T11276] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1165.974361][T11276] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1165.981481][T11276] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1166.492547][T11282] loop2: detected capacity change from 0 to 2048 [ 1166.504759][ T26] audit: type=1800 audit(1779437876.847:75): pid=11276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1915" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1166.536084][ T4196] attempt to access beyond end of device [ 1166.536084][ T4196] loop4: rw=2049, want=40968, limit=40427 [ 1166.634568][T11285] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1167.313124][T11282] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1911'. [ 1167.670315][ T23] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1168.113471][T11298] loop3: detected capacity change from 0 to 40427 [ 1168.184022][T11302] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'. [ 1168.236480][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1168.279965][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1168.377554][ T23] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1168.458382][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1168.515965][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.579179][ T23] usb 2-1: config 0 descriptor?? [ 1168.660928][ T23] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 1168.685636][ T23] hdpvr: probe of 2-1:0.0 failed with error -12 [ 1168.734588][T11298] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1168.742437][T11298] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1168.764911][T11298] F2FS-fs (loop3): invalid crc value [ 1169.076813][T11298] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1169.123089][T11298] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1169.131079][T11298] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1169.752702][ T26] audit: type=1800 audit(1779437880.115:76): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1922" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1169.796911][T11309] udc-core: couldn't find an available UDC or it's busy [ 1169.804024][T11309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1170.066430][T11309] udc-core: couldn't find an available UDC or it's busy [ 1170.087648][T11309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1170.214759][ T4200] attempt to access beyond end of device [ 1170.214759][ T4200] loop3: rw=2049, want=40968, limit=40427 [ 1170.348688][T11309] udc-core: couldn't find an available UDC or it's busy [ 1170.356168][T11309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1170.441810][T11315] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1923'. [ 1170.519128][T11309] udc-core: couldn't find an available UDC or it's busy [ 1170.551006][T11309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1170.653025][T11309] udc-core: couldn't find an available UDC or it's busy [ 1170.720199][T11309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1171.543479][T11319] loop0: detected capacity change from 0 to 40427 [ 1171.608908][T11319] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1171.616919][T11319] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1171.643010][T11319] F2FS-fs (loop0): invalid crc value [ 1171.679342][T11319] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1171.729367][T11319] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1171.736669][T11319] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1171.911799][ T26] audit: type=1800 audit(1779437882.165:77): pid=11319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1926" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1171.932385][ C1] vkms_vblank_simulate: vblank timer overrun [ 1171.974765][T10994] usb 2-1: USB disconnect, device number 36 [ 1172.332265][ T4193] attempt to access beyond end of device [ 1172.332265][ T4193] loop0: rw=2049, want=40968, limit=40427 [ 1173.884544][ T23] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1174.126057][T11339] loop2: detected capacity change from 0 to 2048 [ 1174.800049][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 1175.857869][ T23] usb 4-1: unable to read config index 0 descriptor/all [ 1175.921923][ T23] usb 4-1: can't read configurations, error -71 [ 1175.938489][T11349] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1176.132011][T11339] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1931'. [ 1176.243165][T11353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1933'. [ 1179.956023][T11363] siw: device registration error -23 [ 1180.887908][T11366] loop1: detected capacity change from 0 to 40427 [ 1181.162682][T11366] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1181.170660][T11366] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1181.183520][T11366] F2FS-fs (loop1): invalid crc value [ 1181.241067][T11366] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1181.274438][T10994] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1181.309825][T11366] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1181.316986][T11366] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1181.334911][T11370] loop4: detected capacity change from 0 to 40427 [ 1181.493170][T11370] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1181.501138][T11370] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1181.514336][T11370] F2FS-fs (loop4): invalid crc value [ 1181.532387][ T26] audit: type=1800 audit(1779437891.046:78): pid=11366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1936" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1181.865256][T11370] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1181.927336][ T4232] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1181.935985][T11370] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1181.943102][T11370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1182.046388][ T26] audit: type=1800 audit(1779437891.498:79): pid=11385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1938" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1182.090340][T10994] usb 4-1: Using ep0 maxpacket: 16 [ 1182.161896][ T4195] attempt to access beyond end of device [ 1182.161896][ T4195] loop1: rw=2049, want=40968, limit=40427 [ 1182.232920][T10994] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1182.303814][ T5085] attempt to access beyond end of device [ 1182.303814][ T5085] loop4: rw=1, want=81920, limit=40427 [ 1182.342959][ T5085] attempt to access beyond end of device [ 1182.342959][ T5085] loop4: rw=1, want=53248, limit=40427 [ 1182.354155][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 1182.425679][T10994] usb 4-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1182.429743][ T5085] attempt to access beyond end of device [ 1182.429743][ T5085] loop4: rw=1, want=66944, limit=40427 [ 1182.446297][T10994] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.446324][T10994] usb 4-1: Product: syz [ 1182.446340][T10994] usb 4-1: Manufacturer: syz [ 1182.446356][T10994] usb 4-1: SerialNumber: syz [ 1182.469785][T11365] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1182.501423][ T4232] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1182.510506][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.520600][ T4232] usb 3-1: config 0 descriptor?? [ 1182.568433][ T4232] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1182.970813][T11393] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1941'. [ 1183.509846][T10994] usb 4-1: MIDIStreaming interface descriptor not found [ 1183.856450][T10994] usb 4-1: USB disconnect, device number 28 [ 1184.288837][T11402] loop3: detected capacity change from 0 to 2048 [ 1184.938658][ T4232] gspca_vc032x: reg_w err -110 [ 1184.951285][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1184.974480][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1185.075388][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1185.084538][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1185.089935][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1186.078022][T11408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1186.163206][T11402] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1946'. [ 1186.426343][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 1186.432682][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 1186.450206][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1186.620890][T11416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1948'. [ 1186.693756][ T5568] udevd[5568]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1186.843825][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1186.849780][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.180992][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.186363][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.191748][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.197082][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.203080][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.209148][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.214574][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.219999][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.225356][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.230716][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1187.279246][ T4232] gspca_vc032x: Unknown sensor... [ 1187.284363][ T4232] vc032x: probe of 3-1:0.0 failed with error -22 [ 1187.420948][ T4232] usb 3-1: USB disconnect, device number 49 [ 1188.762213][ T23] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1189.090809][T11429] siw: device registration error -23 [ 1189.357989][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 1189.488471][ T23] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 1189.556747][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1189.859672][T11431] loop3: detected capacity change from 0 to 40427 [ 1189.894589][T11431] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1189.902449][T11431] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1189.915286][T11431] F2FS-fs (loop3): invalid crc value [ 1189.921644][ T23] usb 2-1: config 0 has no interface number 0 [ 1189.928344][ T23] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1189.939960][ T23] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1189.950080][ T23] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1189.960260][ T23] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1189.970259][ T23] usb 2-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1189.998604][T11431] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1190.114058][T11431] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1190.121223][T11431] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1190.262027][ T23] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1190.514705][T11437] loop0: detected capacity change from 0 to 40427 [ 1190.743040][ T26] audit: type=1800 audit(1779437899.355:80): pid=11439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1954" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1190.800006][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.808120][ T23] usb 2-1: Product: syz [ 1190.812704][ T23] usb 2-1: Manufacturer: syz [ 1190.817771][ T23] usb 2-1: SerialNumber: syz [ 1190.855264][T11437] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1190.863081][T11437] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1190.884641][T11437] F2FS-fs (loop0): invalid crc value [ 1190.892576][ T23] usb 2-1: config 0 descriptor?? [ 1190.928714][ T23] usb 2-1: can't set config #0, error -71 [ 1190.942984][ T4200] attempt to access beyond end of device [ 1190.942984][ T4200] loop3: rw=2049, want=40968, limit=40427 [ 1190.980954][ T23] usb 2-1: USB disconnect, device number 37 [ 1191.006516][T11437] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1191.053982][T11437] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1191.061483][T11437] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1191.134182][ T26] audit: type=1800 audit(1779437899.909:81): pid=11446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1955" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1191.426899][ T23] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1191.568463][ T9331] attempt to access beyond end of device [ 1191.568463][ T9331] loop0: rw=1, want=81920, limit=40427 [ 1191.606455][ T9331] attempt to access beyond end of device [ 1191.606455][ T9331] loop0: rw=1, want=53248, limit=40427 [ 1191.697843][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 1191.828244][ T23] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1192.077372][ T23] usb 2-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1192.144394][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.313330][ T23] usb 2-1: Product: syz [ 1192.325947][ T23] usb 2-1: Manufacturer: syz [ 1192.330602][ T23] usb 2-1: SerialNumber: syz [ 1192.404570][T11441] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1192.535425][ T9331] attempt to access beyond end of device [ 1192.535425][ T9331] loop0: rw=1, want=68744, limit=40427 [ 1192.809273][T11455] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1960'. [ 1194.416427][ T1325] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1194.644054][ T23] usb 2-1: MIDIStreaming interface descriptor not found [ 1194.675932][ T23] usb 2-1: USB disconnect, device number 38 [ 1194.924565][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1962'. [ 1194.990999][ T1325] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1195.067525][ T1325] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1195.166357][T11472] binder: BINDER_SET_CONTEXT_MGR already set [ 1195.208776][ T1325] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1195.255168][T11472] binder: 11467:11472 ioctl 4018620d 200000004a80 returned -16 [ 1195.355569][ T1325] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1195.603653][ T1325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.705179][ T1325] usb 4-1: config 0 descriptor?? [ 1195.713547][T11477] loop4: detected capacity change from 0 to 2048 [ 1195.761848][ T1325] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 1195.782538][ T1325] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1195.794234][T11478] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1196.043902][T11477] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1964'. [ 1196.843171][ T5567] udevd[5567]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1197.463555][ T1325] usb 4-1: USB disconnect, device number 29 [ 1197.725418][ T4232] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1197.980294][ T4233] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1198.045198][ T4232] usb 3-1: Using ep0 maxpacket: 8 [ 1198.055470][T11495] loop4: detected capacity change from 0 to 40427 [ 1198.123850][T11496] siw: device registration error -23 [ 1198.393833][T11495] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1198.401668][T11495] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1198.430395][T11495] F2FS-fs (loop4): invalid crc value [ 1198.866181][T11495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1198.911805][ T4232] usb 3-1: config 0 has an invalid interface number: 122 but max is 0 [ 1198.933973][ T4232] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1198.945077][T11495] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1198.952147][T11495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1198.960465][ T4233] usb 2-1: Using ep0 maxpacket: 8 [ 1198.967198][ T4232] usb 3-1: config 0 has no interface number 0 [ 1199.245727][T11505] loop0: detected capacity change from 0 to 40427 [ 1199.258382][ T26] audit: type=1800 audit(1779437907.294:82): pid=11495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1969" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1199.491050][T11505] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1199.498877][T11505] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1199.509812][T11505] F2FS-fs (loop0): invalid crc value [ 1199.531454][ T4232] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1199.542630][ T4232] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1199.561775][ T4232] usb 3-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1199.571838][ T4232] usb 3-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1199.586807][ T4196] attempt to access beyond end of device [ 1199.586807][ T4196] loop4: rw=2049, want=40968, limit=40427 [ 1199.611705][T11505] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1199.630724][ T4232] usb 3-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1199.644368][ T4233] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1199.662763][ T4233] usb 2-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1199.682419][T11505] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1199.689569][T11505] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1199.736008][ T4233] usb 2-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1199.762447][ T26] audit: type=1800 audit(1779437907.876:83): pid=11513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1970" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1199.960474][ T4233] usb 2-1: config 1 interface 0 has no altsetting 0 [ 1199.995140][ T4232] usb 3-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1200.004223][ T4232] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.049043][ T4232] usb 3-1: Product: syz [ 1200.053256][ T4232] usb 3-1: Manufacturer: syz [ 1200.057864][ T4232] usb 3-1: SerialNumber: syz [ 1200.057973][ T9] attempt to access beyond end of device [ 1200.057973][ T9] loop0: rw=1, want=81920, limit=40427 [ 1200.125492][ T4232] usb 3-1: config 0 descriptor?? [ 1200.131744][ T9] attempt to access beyond end of device [ 1200.131744][ T9] loop0: rw=1, want=53248, limit=40427 [ 1200.147006][T11488] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1200.276658][ T4233] usb 2-1: string descriptor 0 read error: -22 [ 1200.282936][ T4233] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1200.301370][ T9] attempt to access beyond end of device [ 1200.301370][ T9] loop0: rw=1, want=69160, limit=40427 [ 1200.319902][ T4233] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1200.353738][ T4232] usb 3-1: NFC: intf ffff8880759dc000 id ffffffff8cb52f00 [ 1200.489383][ T4232] nfcmrvl 3-1:0.122: NFC: registered with nci successfully [ 1200.526277][ T4232] usb 3-1: USB disconnect, device number 50 [ 1200.555614][ T4232] usb 3-1: NFC: intf ffff8880759dc000 [ 1201.078290][ T4233] zydacron 0003:13EC:0006.002C: unknown main item tag 0x2 [ 1201.155733][ T4233] zydacron 0003:13EC:0006.002C: unknown main item tag 0x2 [ 1201.276846][T11492] udc-core: couldn't find an available UDC or it's busy [ 1201.341191][T11492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1201.352109][ T4233] zydacron 0003:13EC:0006.002C: unknown main item tag 0xe [ 1201.359377][ T4233] zydacron 0003:13EC:0006.002C: unknown main item tag 0x2 [ 1201.398324][T11492] udc-core: couldn't find an available UDC or it's busy [ 1201.429903][ T4233] zydacron 0003:13EC:0006.002C: unknown main item tag 0xe [ 1201.437770][T11492] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1201.477556][ T4233] zydacron 0003:13EC:0006.002C: unknown main item tag 0xe [ 1201.511678][ T4233] zydacron 0003:13EC:0006.002C: unknown global tag 0xd [ 1201.543109][ T4233] zydacron 0003:13EC:0006.002C: item 0 0 1 13 parsing failed [ 1201.556369][ T4233] zydacron 0003:13EC:0006.002C: parse failed [ 1201.562449][ T4233] zydacron: probe of 0003:13EC:0006.002C failed with error -22 [ 1201.596679][ T4233] usb 2-1: USB disconnect, device number 39 [ 1201.625117][T11527] binder: BINDER_SET_CONTEXT_MGR already set [ 1201.650350][T11527] binder: 11526:11527 ioctl 4018620d 200000000100 returned -16 [ 1201.925397][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1973'. [ 1206.365792][T11546] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1979'. [ 1206.627456][T11549] loop0: detected capacity change from 0 to 2048 [ 1206.883903][ T4232] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1207.322337][T11551] loop1: detected capacity change from 0 to 40427 [ 1207.387246][ T4232] usb 3-1: Using ep0 maxpacket: 32 [ 1207.555656][ T4232] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1207.570540][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1207.581878][ T4232] usb 3-1: config 0 descriptor?? [ 1207.612503][T11549] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1981'. [ 1207.628657][T11552] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1207.641534][ T4232] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1207.653921][T11551] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1207.661730][T11551] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1207.672287][T11551] F2FS-fs (loop1): invalid crc value [ 1207.693928][T11551] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1207.974445][T11551] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1207.981685][T11551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1208.159805][ T26] audit: type=1800 audit(1779437915.631:84): pid=11551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1982" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1208.505564][ T4845] attempt to access beyond end of device [ 1208.505564][ T4845] loop1: rw=1, want=79872, limit=40427 [ 1208.537512][ T4845] attempt to access beyond end of device [ 1208.537512][ T4845] loop1: rw=1, want=81920, limit=40427 [ 1208.569842][ T4845] attempt to access beyond end of device [ 1208.569842][ T4845] loop1: rw=1, want=51200, limit=40427 [ 1208.603751][ T4845] attempt to access beyond end of device [ 1208.603751][ T4845] loop1: rw=1, want=53248, limit=40427 [ 1208.653347][ T4845] attempt to access beyond end of device [ 1208.653347][ T4845] loop1: rw=1, want=61440, limit=40427 [ 1208.721254][ T4845] attempt to access beyond end of device [ 1208.721254][ T4845] loop1: rw=1, want=67016, limit=40427 [ 1208.736332][ T4233] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1208.789593][ T4845] attempt to access beyond end of device [ 1208.789593][ T4845] loop1: rw=1, want=69248, limit=40427 [ 1209.018470][ T4233] usb 4-1: Using ep0 maxpacket: 8 [ 1209.191597][ T4233] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 1209.269201][ T4233] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.471317][ T4233] usb 4-1: config 0 has no interface number 0 [ 1209.570713][ T4233] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1209.702355][ T4233] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1209.737536][ T4233] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1209.769860][ T4233] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1209.796250][ T4233] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1209.987919][T11574] binder_alloc: 11573: binder_alloc_buf, no vma [ 1210.030878][ T4233] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1210.055191][ T4233] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1210.063992][ T4233] usb 4-1: Product: syz [ 1210.068208][ T4233] usb 4-1: Manufacturer: syz [ 1210.076494][ T4233] usb 4-1: SerialNumber: syz [ 1210.082766][ T4233] usb 4-1: config 0 descriptor?? [ 1210.181356][T11564] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1210.528010][T11564] udc-core: couldn't find an available UDC or it's busy [ 1210.566106][T11564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1210.630612][T11564] udc-core: couldn't find an available UDC or it's busy [ 1210.666600][T11564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1211.067958][ T4233] usb 4-1: NFC: intf ffff888061261000 id ffffffff8cb52f00 [ 1211.081330][ T4233] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 1211.362765][ T4233] usb 4-1: USB disconnect, device number 30 [ 1211.420881][ T4233] usb 4-1: NFC: intf ffff888061261000 [ 1211.650583][ T4232] gspca_vc032x: reg_r err -71 [ 1211.655427][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1211.663675][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1211.669050][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1211.715478][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1211.770273][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1211.775934][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1211.819638][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1211.868345][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1213.956188][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1991'. [ 1214.098516][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.103879][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.109255][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.114557][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.121298][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.126615][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.131961][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.137299][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.142651][ T4232] gspca_vc032x: I2c Bus Busy Wait 00 [ 1214.147968][ T4232] gspca_vc032x: Unknown sensor... [ 1214.153150][ T4232] vc032x: probe of 3-1:0.0 failed with error -22 [ 1214.187410][ T4232] usb 3-1: USB disconnect, device number 51 [ 1216.297467][T11614] loop2: detected capacity change from 0 to 2048 [ 1216.356404][T11616] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1216.373111][T11614] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1998'. [ 1216.618785][T11612] loop1: detected capacity change from 0 to 40427 [ 1217.546099][T11612] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1217.553993][T11612] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1217.571351][T11612] F2FS-fs (loop1): invalid crc value [ 1217.665878][T11612] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1217.717507][T11612] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1217.724738][T11612] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1217.973445][ T26] audit: type=1800 audit(1779437924.632:85): pid=11612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1997" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 1218.654061][ T4195] attempt to access beyond end of device [ 1218.654061][ T4195] loop1: rw=2049, want=40968, limit=40427 [ 1221.756242][ T4232] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1222.414670][T11659] loop0: detected capacity change from 0 to 2048 [ 1224.075590][T11663] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2009'. [ 1226.056651][T11659] NILFS (loop0): error -4 creating segctord thread [ 1226.368795][ T4232] usb 3-1: device not accepting address 52, error -71 [ 1226.385871][T11672] loop0: detected capacity change from 0 to 40427 [ 1226.478912][T11083] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1226.517525][T11672] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1226.525391][T11672] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1226.534982][T11672] F2FS-fs (loop0): invalid crc value [ 1226.546203][T11672] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1226.614251][T11672] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1226.621507][T11672] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1227.150405][ T26] audit: type=1800 audit(1779437932.821:86): pid=11681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2014" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 1227.205630][ T4232] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1227.403794][T11083] usb 2-1: Using ep0 maxpacket: 8 [ 1227.418018][ T4193] attempt to access beyond end of device [ 1227.418018][ T4193] loop0: rw=2049, want=40968, limit=40427 [ 1227.533799][T11083] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 1227.555342][T11083] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.572895][T11083] usb 2-1: config 0 has no interface number 0 [ 1227.590504][T11083] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 1227.603040][T11083] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 1227.613070][T11083] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 1227.623187][T11083] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 1227.633309][T11083] usb 2-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 1227.811281][T11083] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 1227.820384][T11083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.841634][T11083] usb 2-1: Product: syz [ 1227.851682][T11083] usb 2-1: Manufacturer: syz [ 1227.857413][T11083] usb 2-1: SerialNumber: syz [ 1227.932649][T11083] usb 2-1: config 0 descriptor?? [ 1228.040679][T11670] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1228.323176][T11670] udc-core: couldn't find an available UDC or it's busy [ 1228.405252][T11670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1228.522259][ T4232] usb 3-1: Using ep0 maxpacket: 16 [ 1228.754392][T11670] udc-core: couldn't find an available UDC or it's busy [ 1228.761475][T11670] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1228.843975][ T4232] usb 3-1: device descriptor read/all, error -71 [ 1228.851929][ T4232] usb usb3-port1: attempt power cycle [ 1229.512164][T11083] usb 2-1: NFC: intf ffff888022f2c000 id ffffffff8cb52f00 [ 1229.729261][T11083] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 1229.774051][T11083] usb 2-1: USB disconnect, device number 40 [ 1229.843098][T11083] usb 2-1: NFC: intf ffff888022f2c000 [ 1233.623180][ T3562] udevd[3562]: worker [5576] /devices/platform/dummy_hcd.0/usb1/1-1 is taking a long time [ 1233.641389][ T3562] udevd[3562]: worker [5580] /devices/platform/dummy_hcd.4/usb5/5-1 is taking a long time [ 1234.689452][ T9424] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1234.703620][T11722] loop4: detected capacity change from 0 to 2048 [ 1234.767785][T11722] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2026'. [ 1234.786956][T11728] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1235.566614][T11727] loop3: detected capacity change from 0 to 40427 [ 1235.769641][T11727] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1235.778030][T11727] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1235.794671][T11727] F2FS-fs (loop3): invalid crc value [ 1235.842909][T11727] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1236.672604][T11727] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1236.680496][T11727] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1236.758293][ T26] audit: type=1800 audit(1779437942.025:87): pid=11727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2027" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 1237.492811][T11083] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1237.673725][ T4200] attempt to access beyond end of device [ 1237.673725][ T4200] loop3: rw=2049, want=40968, limit=40427 [ 1237.809057][T11083] usb 2-1: Using ep0 maxpacket: 16 [ 1237.939160][T11083] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1237.988071][T11750] loop2: detected capacity change from 0 to 40427 [ 1238.001579][T11750] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1238.010148][T11750] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1238.019962][T11750] F2FS-fs (loop2): invalid crc value [ 1238.062407][T11750] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1238.104827][T11750] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1238.111931][T11750] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1238.144996][T11083] usb 2-1: New USB device found, idVendor=041e, idProduct=4095, bcdDevice= 0.40 [ 1238.154084][T11083] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.210155][T11083] usb 2-1: Product: syz [ 1238.214376][T11083] usb 2-1: Manufacturer: syz [ 1238.240981][T11083] usb 2-1: SerialNumber: syz [ 1238.285952][T11740] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1238.429026][ T26] audit: type=1800 audit(1779437943.576:88): pid=11756 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2034" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 1239.488084][T11083] usb 2-1: MIDIStreaming interface descriptor not found [ 1239.579650][T11083] usb 2-1: USB disconnect, device number 41 [ 1239.825855][ T144] attempt to access beyond end of device [ 1239.825855][ T144] loop2: rw=1, want=79104, limit=40427 [ 1239.899680][ T4232] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1240.029576][T11083] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1240.278839][ T4232] usb 4-1: Using ep0 maxpacket: 8 [ 1240.431404][ T4232] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1240.468017][ T4232] usb 4-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1240.521327][ T4232] usb 4-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1240.581736][ T4232] usb 4-1: config 1 interface 0 has no altsetting 0 [ 1240.875643][ T4232] usb 4-1: string descriptor 0 read error: -22 [ 1240.884528][ T4232] usb 4-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.40 [ 1241.072554][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.231969][T11083] usb 2-1: Using ep0 maxpacket: 32 [ 1242.304366][T11083] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1242.313460][T11083] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.324746][T11083] usb 2-1: config 0 descriptor?? [ 1242.371669][T11083] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1242.391337][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2040'. [ 1242.609319][ T4232] zydacron 0003:13EC:0006.002D: unknown main item tag 0x2 [ 1242.637320][ T4232] zydacron 0003:13EC:0006.002D: unknown main item tag 0x2 [ 1242.652907][T11779] binder: BINDER_SET_CONTEXT_MGR already set [ 1242.659138][ T4232] zydacron 0003:13EC:0006.002D: unknown main item tag 0xe [ 1242.673621][T11779] binder: 11778:11779 ioctl 4018620d 200000004a80 returned -16 [ 1242.681332][ T4232] zydacron 0003:13EC:0006.002D: unknown main item tag 0x2 [ 1242.700075][ T4232] zydacron 0003:13EC:0006.002D: unknown main item tag 0xe [ 1242.716943][ T4232] zydacron 0003:13EC:0006.002D: unknown main item tag 0xe [ 1242.757611][ T4232] zydacron 0003:13EC:0006.002D: unknown global tag 0xd [ 1242.775913][ T4232] zydacron 0003:13EC:0006.002D: item 0 0 1 13 parsing failed [ 1242.947793][T11769] udc-core: couldn't find an available UDC or it's busy [ 1242.969187][ T4232] zydacron 0003:13EC:0006.002D: parse failed [ 1242.976173][T11769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1243.005662][ T4232] zydacron: probe of 0003:13EC:0006.002D failed with error -22 [ 1243.433815][T11769] udc-core: couldn't find an available UDC or it's busy [ 1243.441231][T11769] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1245.092426][ T27] INFO: task udevd:5576 blocked for more than 144 seconds. [ 1245.135923][ T27] Not tainted syzkaller #0 [ 1245.140919][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1245.222233][ T4232] usb 4-1: USB disconnect, device number 32 [ 1245.240286][ T27] task:udevd state:D stack:23120 pid: 5576 ppid: 3562 flags:0x00004002 [ 1245.284308][ T27] Call Trace: [ 1245.287747][ T27] [ 1245.290756][ T27] __schedule+0x11ef/0x43c0 [ 1245.343023][ T27] ? rcu_lock_acquire+0x30/0x30 [ 1245.353386][ T27] ? __mutex_lock_common+0xcf7/0x2400 [ 1245.359228][ T27] ? release_firmware_map_entry+0x190/0x190 [ 1245.365344][ T27] ? __lock_acquire+0x7d10/0x7d10 [ 1245.375815][ T27] ? __mutex_trylock_common+0x86/0x260 [ 1245.381890][ T27] ? rcu_lock_release+0x20/0x20 [ 1245.386874][ T27] schedule+0x11b/0x1e0 [ 1245.391117][ T27] schedule_preempt_disabled+0xf/0x20 [ 1245.402253][ T27] __mutex_lock_common+0xcfc/0x2400 [ 1245.407505][ T27] ? uevent_show+0x17a/0x330 [ 1245.412420][ T27] ? mutex_lock_io_nested+0x60/0x60 [ 1245.422004][ T27] mutex_lock_nested+0x17/0x20 [ 1245.428337][ T27] uevent_show+0x17a/0x330 [ 1245.432802][ T27] dev_attr_show+0x50/0xb0 [ 1245.443417][ T27] ? device_get_ownership+0xa0/0xa0 [ 1245.451197][ T27] sysfs_kf_seq_show+0x316/0x4c0 [ 1245.460720][ T27] seq_read_iter+0x49b/0xd50 [ 1245.465423][ T27] vfs_read+0x759/0xd60 [ 1245.471344][ T27] ? kernel_read+0x1e0/0x1e0 [ 1245.475973][ T27] ? __context_tracking_exit+0x4c/0x80 [ 1245.485990][ T27] ? __fdget_pos+0x2c6/0x370 [ 1245.491988][ T27] ksys_read+0x152/0x260 [ 1245.496467][ T27] ? vfs_write+0xd60/0xd60 [ 1245.505197][ T27] ? lockdep_hardirqs_on+0x94/0x140 [ 1245.511838][ T27] do_syscall_64+0x4c/0xa0 [ 1245.516346][ T27] ? clear_bhb_loop+0x30/0x80 [ 1245.529330][ T27] ? clear_bhb_loop+0x30/0x80 [ 1245.534361][ T27] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1245.540780][ T27] RIP: 0033:0x7f33d2e01407 [ 1245.545404][ T27] RSP: 002b:00007ffec23b5c50 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 1245.554357][ T27] RAX: ffffffffffffffda RBX: 00007f33d2d13880 RCX: 00007f33d2e01407 [ 1245.562370][ T27] RDX: 0000000000001000 RSI: 000055a73b190a00 RDI: 0000000000000008 [ 1245.570432][ T27] RBP: 00007f33d2f49ff0 R08: 0000000000000000 R09: 0000000000000000 [ 1245.578453][ T27] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 1245.586559][ T27] R13: 00007f33d2f49ea0 R14: 0000000000000000 R15: 000055a73b1b4550 [ 1245.594597][ T27] [ 1245.597752][ T27] [ 1245.597752][ T27] Showing all locks held in the system: [ 1245.605488][ T27] 1 lock held by khungtaskd/27: [ 1245.610573][T11083] gspca_vc032x: reg_w err -71 [ 1245.615288][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1245.620874][ T27] #0: ffffffff8c31f320 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30 [ 1246.038424][T11790] loop0: detected capacity change from 0 to 40427 [ 1246.235612][T11789] loop1: detected capacity change from 0 to 2048 [ 1246.250244][ T27] 3 locks held by udevd/3562: [ 1246.255283][ T27] 2 locks held by getty/3948: [ 1246.262955][ T27] #0: ffff88802c11d098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70 [ 1246.591221][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.604806][ T27] #1: ffffc900026562e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x5df/0x1a70 [ 1246.608543][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.617918][ T27] 5 locks held by kworker/1:5/4229: [ 1246.620675][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.620706][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.631316][ T27] #0: ffff88801be42938 ((wq_completion)usb_hub_wq){+.+.}-{0:0} [ 1246.636668][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.636682][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.636693][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.645943][ T27] , at: process_one_work+0x761/0x1010 [ 1246.666960][ T27] #1: ffffc9000313fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 1246.674971][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.678696][ T27] #2: ffff888024610220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 1246.692816][ T27] #3: ffff88801c004220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 1246.696074][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.702120][ T27] #4: ffff8880208451a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 1246.714433][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1246.721493][ T27] 3 locks held by kworker/0:4/4232: [ 1246.727532][ T27] #0: ffff888016c70938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 1246.738166][ T27] #1: ffffc9000315fd00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 1246.750424][ T27] #2: ffffffff8c323da8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x2d1/0x750 [ 1246.761909][ T27] 5 locks held by kworker/0:7/4448: [ 1246.768811][ T27] #0: ffff88801be42938 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 1246.780319][ T27] #1: ffffc9000426fd00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 1246.791998][ T27] #2: ffff888148000220 (&dev->mutex){....}-{3:3}, at: hub_event+0x19f/0x55e0 [ 1246.801246][ T27] #3: ffff88801f5bf220 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 1246.811853][ T27] #4: ffff888075ea91a8 (&dev->mutex){....}-{3:3}, at: __device_attach+0x85/0x480 [ 1246.825601][ T27] 4 locks held by udevd/5567: [ 1246.830370][ T27] #0: ffff888055b16668 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 1246.841828][ T27] #1: ffff8880232b7488 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 1246.855713][ T27] #2: ffff888147f193a8 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 1246.867898][ T27] #3: ffff888147fc8220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 1246.881770][ T27] 4 locks held by udevd/5576: [ 1246.889195][ T27] #0: ffff88807e88f2f0 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 1246.901529][ T27] #1: ffff8880609d2888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 1246.913186][ T27] #2: ffff8880756de578 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 1246.926101][ T27] #3: ffff88801c004220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 1246.937771][ T27] 4 locks held by udevd/5580: [ 1246.945667][ T27] #0: ffff8880793bf1c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xad/0xd50 [ 1246.958302][ T27] #1: ffff888061ac5888 (&of->mutex){+.+.}-{3:3}, at: kernfs_seq_start+0x51/0x3c0 [ 1246.971156][ T27] #2: ffff88805b7670f0 (kn->active#32){++++}-{0:0}, at: kernfs_seq_start+0x71/0x3c0 [ 1246.983146][ T27] #3: ffff88801f5bf220 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17a/0x330 [ 1246.996919][ T27] 1 lock held by udevd/6220: [ 1247.001614][ T27] #0: ffff888020225118 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_get_by_dev+0x157/0xa60 [ 1247.015325][ T27] 2 locks held by kworker/0:0/9572: [ 1247.022810][ T27] #0: ffff888016c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x761/0x1010 [ 1247.036876][ T27] #1: ffffc90002f4fd00 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x79f/0x1010 [ 1247.051137][ T27] 5 locks held by kworker/1:7/11083: [ 1247.056536][ T27] 2 locks held by syz.4.2043/11795: [ 1247.065432][ T27] 2 locks held by syz.0.2044/11790: [ 1247.069025][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1247.076038][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1247.081412][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1247.086722][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1247.090124][ T27] #0: [ 1247.092062][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1247.092075][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1247.092084][T11083] gspca_vc032x: I2c Bus Busy Wait 00 [ 1247.092093][T11083] gspca_vc032x: Unknown sensor... [ 1247.092163][T11083] vc032x: probe of 2-1:0.0 failed with error -22 [ 1247.108286][ T27] ffff888020225118 [ 1247.122244][T11083] usb 2-1: USB disconnect, device number 42 [ 1247.138407][ T27] (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 1247.148656][ T27] #1: ffff8880205f0468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 1247.158007][ T27] 2 locks held by syz.1.2045/11789: [ 1247.163319][ T27] #0: ffff888020226d18 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 1247.172829][ T27] #1: ffff8880205f3468 (&lo->lo_mutex){+.+.}-{3:3}, at: lo_release+0x4d/0x1f0 [ 1247.181921][ T27] [ 1247.184345][ T27] ============================================= [ 1247.184345][ T27] [ 1247.192897][ T27] NMI backtrace for cpu 1 [ 1247.197247][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1247.204466][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1247.214540][ T27] Call Trace: [ 1247.217843][ T27] [ 1247.220776][ T27] dump_stack_lvl+0x188/0x250 [ 1247.225490][ T27] ? show_regs_print_info+0x20/0x20 [ 1247.230734][ T27] ? load_image+0x400/0x400 [ 1247.235278][ T27] ? nmi_cpu_backtrace+0x1b2/0x3d0 [ 1247.240474][ T27] nmi_cpu_backtrace+0x3a2/0x3d0 [ 1247.245449][ T27] ? nmi_trigger_cpumask_backtrace+0x280/0x280 [ 1247.251611][ T27] ? _printk+0xda/0x130 [ 1247.255779][ T27] ? load_image+0x400/0x400 [ 1247.260321][ T27] ? load_image+0x400/0x400 [ 1247.264854][ T27] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 1247.270952][ T27] nmi_trigger_cpumask_backtrace+0x163/0x280 [ 1247.276962][ T27] watchdog+0xe0f/0xe50 [ 1247.281124][ T27] kthread+0x436/0x520 [ 1247.285206][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1247.290256][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1247.294859][ T27] ret_from_fork+0x1f/0x30 [ 1247.299352][ T27] [ 1247.302964][ T27] Sending NMI from CPU 1 to CPUs 0: [ 1247.308372][ C0] NMI backtrace for cpu 0 [ 1247.308389][ C0] CPU: 0 PID: 1270 Comm: kworker/u4:4 Not tainted syzkaller #0 [ 1247.308408][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1247.308420][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1247.308539][ C0] RIP: 0010:preempt_count_add+0x5f/0x190 [ 1247.308600][ C0] Code: af 7e 65 01 3d 8a fd af 7e 48 c7 c0 80 cf 2d 96 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e6 00 00 00 83 3d 23 5d db 14 00 75 11 <65> 8b 05 62 fd af 7e 0f b6 c0 3d f5 00 00 00 73 58 65 8b 05 51 fd [ 1247.308639][ C0] RSP: 0018:ffffc90005076e88 EFLAGS: 00000246 [ 1247.308653][ C0] RAX: 0000000000000004 RBX: ffffc90005076f68 RCX: ffffffff962dcf03 [ 1247.308665][ C0] RDX: dffffc0000000000 RSI: ffffffff89463150 RDI: 0000000000000001 [ 1247.308676][ C0] RBP: ffffc90005076fb0 R08: ffffc90005077030 R09: 0000000000000007 [ 1247.308688][ C0] R10: dffffc0000000000 R11: fffff52000a0edf9 R12: ffffffff89463150 [ 1247.308699][ C0] R13: ffffc90005077960 R14: dffffc0000000000 R15: dffffc0000000000 [ 1247.308712][ C0] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 1247.308727][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1247.308738][ C0] CR2: 00007f889911d158 CR3: 0000000077136000 CR4: 00000000003506f0 [ 1247.308753][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1247.308762][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1247.308773][ C0] Call Trace: [ 1247.308778][ C0] [ 1247.308784][ C0] unwind_next_frame+0xac/0x1d90 [ 1247.308811][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1700/0x2ab0 [ 1247.308873][ C0] ? stack_trace_save+0xf0/0xf0 [ 1247.308889][ C0] arch_stack_walk+0x10c/0x140 [ 1247.308931][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1700/0x2ab0 [ 1247.308952][ C0] stack_trace_save+0xa6/0xf0 [ 1247.308966][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 1247.308980][ C0] ? mark_lock+0x94/0x320 [ 1247.308998][ C0] kasan_save_stack+0x35/0x60 [ 1247.309031][ C0] ? kasan_save_stack+0x35/0x60 [ 1247.309046][ C0] ? kasan_record_aux_stack+0xb8/0x100 [ 1247.309080][ C0] ? kvfree_call_rcu+0x105/0x7d0 [ 1247.309095][ C0] ? cfg80211_update_known_bss+0x178/0xa20 [ 1247.309130][ C0] ? cfg80211_bss_update+0x15f/0x2250 [ 1247.309145][ C0] ? cfg80211_inform_bss_frame_data+0x89f/0x1fc0 [ 1247.309161][ C0] ? ieee80211_bss_info_update+0x6be/0xa70 [ 1247.309203][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1700/0x2ab0 [ 1247.309238][ C0] kasan_record_aux_stack+0xb8/0x100 [ 1247.309256][ C0] kvfree_call_rcu+0x105/0x7d0 [ 1247.309273][ C0] ? call_rcu+0x950/0x950 [ 1247.309288][ C0] ? do_raw_spin_lock+0x128/0x2f0 [ 1247.309303][ C0] ? cmp_bss+0x27a/0xe00 [ 1247.309321][ C0] cfg80211_update_known_bss+0x178/0xa20 [ 1247.309339][ C0] cfg80211_bss_update+0x15f/0x2250 [ 1247.309363][ C0] ? cfg80211_inform_bss_frame_data+0x6c0/0x1fc0 [ 1247.309382][ C0] cfg80211_inform_bss_frame_data+0x89f/0x1fc0 [ 1247.309406][ C0] ? verify_lock_unused+0x140/0x140 [ 1247.309442][ C0] ? cfg80211_parse_mbssid_data+0x3160/0x3160 [ 1247.309467][ C0] ? __lock_acquire+0x7d10/0x7d10 [ 1247.309507][ C0] ieee80211_bss_info_update+0x6be/0xa70 [ 1247.309531][ C0] ? ieee80211_rx_bss_put+0x60/0x60 [ 1247.309554][ C0] ? ieee80211_mandatory_rates+0x1c8/0x230 [ 1247.309575][ C0] ieee80211_ibss_rx_queued_mgmt+0x1700/0x2ab0 [ 1247.309604][ C0] ? ieee80211_ibss_rx_no_sta+0x770/0x770 [ 1247.309621][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 1247.309639][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 1247.309659][ C0] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1247.309676][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1247.309692][ C0] ? kcov_remote_start+0x6f/0x4a0 [ 1247.309712][ C0] ? kcov_remote_start+0xea/0x4a0 [ 1247.309729][ C0] ieee80211_iface_work+0x70e/0xc60 [ 1247.309751][ C0] cfg80211_wiphy_work+0x221/0x260 [ 1247.309772][ C0] process_one_work+0x85f/0x1010 [ 1247.309797][ C0] ? worker_detach_from_pool+0x240/0x240 [ 1247.309814][ C0] ? lockdep_hardirqs_off+0x70/0x100 [ 1247.309834][ C0] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1247.309850][ C0] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1247.309867][ C0] ? wq_worker_running+0x97/0x170 [ 1247.309884][ C0] worker_thread+0xaa6/0x1290 [ 1247.309913][ C0] kthread+0x436/0x520 [ 1247.309928][ C0] ? rcu_lock_release+0x20/0x20 [ 1247.309944][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1247.309959][ C0] ret_from_fork+0x1f/0x30 [ 1247.309983][ C0] [ 1247.318116][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 1247.459524][T11797] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1247.459945][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted syzkaller #0 [ 1247.459966][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1247.459979][ T27] Call Trace: [ 1247.508181][T11789] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2045'. [ 1247.511304][ T27] [ 1247.511315][ T27] dump_stack_lvl+0x188/0x250 [ 1247.511343][ T27] ? show_regs_print_info+0x20/0x20 [ 1247.796447][ T27] ? load_image+0x400/0x400 [ 1247.800992][ T27] panic+0x2e5/0x810 [ 1247.804995][ T27] ? schedule_preempt_disabled+0x20/0x20 [ 1247.810658][ T27] ? bpf_jit_dump+0xd0/0xd0 [ 1247.815193][ T27] ? __irq_work_queue_local+0x12c/0x190 [ 1247.820858][ T27] ? nmi_trigger_cpumask_backtrace+0x260/0x280 [ 1247.827051][ T27] watchdog+0xe4e/0xe50 [ 1247.831240][ T27] kthread+0x436/0x520 [ 1247.835340][ T27] ? hungtask_pm_notify+0x40/0x40 [ 1247.840399][ T27] ? kthread_blkcg+0xd0/0xd0 [ 1247.845019][ T27] ret_from_fork+0x1f/0x30 [ 1247.849469][ T27] [ 1247.852813][ T27] Kernel Offset: disabled [ 1247.857242][ T27] Rebooting in 86400 seconds..