last executing test programs: 3m5.873709677s ago: executing program 2 (id=161): unshare(0x22020600) r0 = fanotify_init(0x200, 0x0) capset(0x0, &(0x7f0000000040)={0x0, 0x10ffff, 0xfffffffd}) fanotify_mark(r0, 0x39, 0x1a, 0xffffffffffffffff, 0x0) 3m5.798703774s ago: executing program 2 (id=163): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1070bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20048884) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2m54.416369529s ago: executing program 2 (id=173): unshare(0x22020600) r0 = fanotify_init(0x200, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) fanotify_mark(r0, 0x39, 0x1a, 0xffffffffffffffff, 0x0) 2m54.415475509s ago: executing program 2 (id=177): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000480)=ANY=[], 0x1, 0x2a4, &(0x7f00000001c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f00000001c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000200)='./file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f0000000040)='./file0\x00', &(0x7f0000000600)='./file0/../file0/../file0/../file0\x00') 2m54.303048789s ago: executing program 2 (id=180): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000001680)={0xf, 0x1, 0x40, "a90037e7f30f000080df4832c305f700000000000000000000008300", 0x50313459}) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2001, 0x0) ppoll(&(0x7f0000000080)=[{r0}], 0x1, 0x0, 0x0, 0x0) 2m53.810784502s ago: executing program 2 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10200}}, 0x20}}, 0x0) 2m53.801923243s ago: executing program 32 (id=189): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10200}}, 0x20}}, 0x0) 48.446762582s ago: executing program 3 (id=710): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0xc, &(0x7f0000001180)=ANY=[@ANYBLOB="180000000000000000000000000000008500000060000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) readv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000080)=""/150, 0x96}, {&(0x7f0000000140)=""/254, 0xfe}, {&(0x7f0000000240)=""/225, 0xe1}, {&(0x7f0000000340)=""/159, 0x9f}, {&(0x7f0000000000)=""/62, 0x3e}], 0x5) syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0xca) syz_open_dev$usbfs(&(0x7f0000000480), 0xf, 0xa2900) 48.446587332s ago: executing program 3 (id=711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x7, 0x8, 0xd401}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x7cff, 0xbd, 0x8, 0x6, 0x1ff}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 48.328935783s ago: executing program 3 (id=712): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$kcm(0xa, 0x3, 0x11) recvmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x10000) 48.093712544s ago: executing program 3 (id=714): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x1a04447, &(0x7f0000000240)=ANY=[], 0x4, 0x1e6, &(0x7f0000000400)="$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") mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=""/213, 0xd5) 48.068250575s ago: executing program 3 (id=716): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r0 = fsmount(0xffffffffffffffff, 0x0, 0xc) fchdir(r0) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000240)=ANY=[], 0x8, 0x1cf, &(0x7f00000006c0)="$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") munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000001f80)=""/4102, 0x1006) 47.090851142s ago: executing program 3 (id=732): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty, 0x8776}, 0x1c) io_setup(0x7, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, r0, 0x0}]) 47.063141205s ago: executing program 33 (id=732): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @empty, 0x8776}, 0x1c) io_setup(0x7, &(0x7f0000000680)=0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x30, 0x3, 0x1, 0xaa6c, r0, 0x0}]) 6.766483803s ago: executing program 0 (id=1001): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x180862) io_setup(0x1, &(0x7f00000016c0)=0x0) r2 = syz_open_dev$vivid(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_STD(r2, 0x40085618, &(0x7f0000000080)=0x22040) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}}) syz_usb_connect(0x2, 0x36, &(0x7f0000000fc0)={{0x12, 0x1, 0x200, 0xfa, 0xb9, 0x1d, 0x40, 0x45e, 0x283, 0x43bd, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x2, 0x3, 0xd4, 0x80, 0x9, [{{0x9, 0x4, 0x1, 0xff, 0x1, 0xaf, 0xc9, 0xfb, 0xb, [], [{{0x9, 0x5, 0x1, 0x4, 0x0, 0x3, 0x4, 0x53}}]}}, {{0x9, 0x4, 0x2f, 0xff, 0x0, 0xff, 0xff, 0xff, 0x8}}]}}]}}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @empty}}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000300)={0x2, 0x0, {0x1, 0x2, 0x6, 0xffffff01}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}) write$UHID_INPUT(r3, &(0x7f0000002080)={0xfc, {"a2e3ad09ed0d09f91b37071887f70e09d038e7ff7fc6e5539b0d450a8b089b3f363563030890e0879b0af8c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r6, 0x7, &(0x7f0000000000)={0x1}) fcntl$lock(r6, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) connect$unix(r6, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e24}, 0x6e) fcntl$lock(r6, 0x5, &(0x7f0000000140)={0x0, 0x2, 0x0, 0x300}) ioctl$SNDRV_PCM_IOCTL_INFO(r6, 0x81204101, &(0x7f00000000c0)) io_submit(r1, 0x0, 0x0) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r7, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) writev(r7, &(0x7f0000000580)=[{&(0x7f0000000080)="268292", 0xff95}], 0x1) 5.722355825s ago: executing program 0 (id=1013): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) r2 = syz_io_uring_setup(0x349a, &(0x7f0000000080)={0x0, 0x363e, 0x400, 0x3, 0x367}, &(0x7f0000000180), &(0x7f0000000200)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1401000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000000000000000000080088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'/141], 0x114}}, 0x0) io_uring_enter(r2, 0x2d16, 0x5ca3, 0x7, &(0x7f0000000240)={[0x5]}, 0x8) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x99}}) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x60b, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x20, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0xfffffffffffffc56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.901435636s ago: executing program 0 (id=1024): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0xf8}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 3.866036359s ago: executing program 0 (id=1025): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x20, r2, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4) 3.833174342s ago: executing program 0 (id=1026): sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000c08d) shutdown(r0, 0x1) 2.968299918s ago: executing program 0 (id=1034): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) r2 = syz_io_uring_setup(0x349a, &(0x7f0000000080)={0x0, 0x363e, 0x400, 0x3, 0x367}, &(0x7f0000000180), &(0x7f0000000200)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1401000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000000000000000000080088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'/141], 0x114}}, 0x0) io_uring_enter(r2, 0x2d16, 0x5ca3, 0x7, &(0x7f0000000240)={[0x5]}, 0x8) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x99}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x20, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x3e82, 0x60, 0x0, 0xfffffffffffffc56) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff3}}}, 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.022733242s ago: executing program 4 (id=1046): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0xffffffff, 0x6361, 0x5, 0xffffffff, 0x7}, [@TCA_NETEM_RATE={0x14, 0x6, {0x4e25, 0x4, 0x800, 0xff}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4000890) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000440)="18", 0x1, 0x200000c1, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xff}, 0x14) 1.856453406s ago: executing program 4 (id=1055): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8], 0x1, 0x37c, &(0x7f0000001680)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x2c, 0x2}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 1.798697162s ago: executing program 1 (id=1057): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x1, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x10424, 0x40}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_bond\x00'}, @IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0xffffffff, 0x6, 0xe}}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x60000090) 1.792112242s ago: executing program 1 (id=1058): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002980)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000180)="5e44ef", 0x3}], 0x1}}], 0x1, 0x480e0) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000340)=0xd, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.776959664s ago: executing program 5 (id=1059): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xff, 0x2, 0x7, 0x1, 0x1, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x0, 0x13}}}}}]}}]}}, 0x0) r2 = syz_io_uring_setup(0x349a, &(0x7f0000000080)={0x0, 0x363e, 0x400, 0x3, 0x367}, &(0x7f0000000180), &(0x7f0000000200)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="1401000010003b620000000000000000fe8000000000000000000000000000bbac1414bb00000000000000000000000000000000000000000000080088000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00+\x00'/141], 0x114}}, 0x0) io_uring_enter(r2, 0x2d16, 0x5ca3, 0x7, &(0x7f0000000240)={[0x5]}, 0x8) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000040)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1, 0x99}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x10b701) ioctl$USBDEVFS_CLAIM_PORT(r4, 0x80045518, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000580)={0x20, 0x3f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r5 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xfffffffd, 0x379}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000240)=@IORING_OP_LINKAT={0x27, 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x1, {0x0, r8}}) io_uring_enter(r5, 0x47ba, 0x3e82, 0x60, 0x0, 0xfffffffffffffc56) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'syz_tun\x00'}) 1.597019089s ago: executing program 6 (id=1060): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) close(0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x4) 1.550266313s ago: executing program 6 (id=1061): capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xfffffffd}) unshare(0x22020400) 1.486645809s ago: executing program 6 (id=1062): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_GET(r2, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)="9c30fb4d", 0x4}], 0x1) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x4700, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)=""/230, 0xe6}, {&(0x7f00000004c0)=""/168, 0xa8}, {&(0x7f0000000900)=""/106, 0x6a}, {&(0x7f00000000c0)=""/26, 0xfe4b}], 0x4}, 0x2000000}], 0x2, 0x101, 0x0) ioctl$BLKZEROOUT(r3, 0x127f, &(0x7f0000000100)={0x6, 0xe}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x3) 1.170797417s ago: executing program 5 (id=1063): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.13765873s ago: executing program 5 (id=1064): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'sit0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x5, 0x10, 0x9, 0x5, 0x0, 0x800, 0xd15, 0x2, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4024}, 0x0) 1.058615607s ago: executing program 5 (id=1065): socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x9, 0x0, 0xfffffffffffffffd, 0x400009, 0x8, 0xa, 0x2}, 0x0) syz_open_dev$media(0x0, 0x80000006, 0xd01840) socket$netlink(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f00000001c0), 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x8810) pread64(0xffffffffffffffff, &(0x7f0000000b00)=""/102393, 0x18ff9, 0x100008) recvmsg(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f0000000240)=@generic, 0x80, &(0x7f00000009c0)=[{&(0x7f00000000c0)=""/23, 0x17}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000340)=""/126, 0x7e}, {&(0x7f0000000600)=""/133, 0x85}, {&(0x7f0000000440)=""/83, 0x53}, {&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f00000007c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/35, 0x23}, {&(0x7f00000008c0)=""/248, 0xf8}], 0x9, &(0x7f00000003c0)=""/34, 0x22}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000a80)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESOCT=r8, @ANYBLOB="010000000000000000010100000024000180060005004e230800070001000200000008000300ac1414aa0800060001"], 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 955.744986ms ago: executing program 4 (id=1066): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x200000005c832, 0xffffffffffffffff, 0x0) unshare(0x22020600) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0xffffffff}, 0x10) 924.713199ms ago: executing program 1 (id=1067): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) listen(r1, 0x9) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r2, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r0, &(0x7f0000000b40)=[{0x0}, {0x0}, {&(0x7f0000000a40)=""/140, 0x8c}, {&(0x7f00000003c0)=""/222, 0xde}, {&(0x7f00000033c0)=""/4096, 0x1000}, {0x0}, {&(0x7f0000000340)=""/122, 0x7a}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f0000000540)=""/125, 0x7d}, {0x0}], 0xa) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 862.798734ms ago: executing program 4 (id=1068): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000001c0)=@newlink={0x48, 0x10, 0x40d, 0x70bd2a, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x600b2, 0x40c41}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc, 0xf8}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x8840}, 0x0) 861.801494ms ago: executing program 4 (id=1069): preadv(0xffffffffffffffff, 0x0, 0x0, 0xdffff62d, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfff2}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_ACT={0x30, 0x3, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x8848}, 0x4080) 825.045668ms ago: executing program 1 (id=1070): socket(0x10, 0x80002, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) userfaultfd(0x80801) socket(0x10, 0x803, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xe8, 0xbc, 0x1, 0x10, 0x1164, 0x622, 0xc6fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x18, 0x0, [{{0x9, 0x4, 0xf5, 0x7, 0x0, 0xb9, 0xc1, 0x78, 0x2}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 599.872427ms ago: executing program 6 (id=1071): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) close(0x4) 445.548701ms ago: executing program 6 (id=1072): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x9c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5d, 0xe, {{{}, {0x1}, @device_b, @broadcast, @from_mac}, 0x0, @default, 0x0, @void, @void, @val={0x3, 0x1, 0xb9}, @void, @void, @val={0x5, 0x3, {0x1, 0x1b, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x20, 0x2, 0x1, 0x0, {0x7fffffffffffffff, 0x4, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1}, 0x6, 0x2, 0xc0}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x200}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}]}, 0x9c}}, 0x0) 298.648624ms ago: executing program 6 (id=1073): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0xfffffffa, 0x3}, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r2, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000340)={0x0, &(0x7f0000000280), 0x0, 0x0, 0xeeeeeeee}) ioctl$DRM_IOCTL_MODE_ATOMIC(r2, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000200), 0x0, &(0x7f0000000580)}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r3, &(0x7f00000003c0)='./file1\x00', r3, &(0x7f0000000400)='./file1\x00', 0xe) socket$inet6_sctp(0xa, 0x1, 0x84) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00') mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) fchdir(r5) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r6, &(0x7f0000000040)=0x1c8, 0x12) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 254.522728ms ago: executing program 1 (id=1074): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 219.532741ms ago: executing program 1 (id=1075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x68402, 0x0) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xfffffffb, 0x3}, [@TCA_NETEM_RATE={0x14, 0x6, {0x728, 0xff8d1fff, 0x2, 0xbd}}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25ffdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2400c8a0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f00000005c0)="c5f215b461248cae040756000000", 0xe, 0x0, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) 142.736358ms ago: executing program 4 (id=1076): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8], 0x1, 0x37c, &(0x7f0000001680)="$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") r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0}) timer_create(0x7, &(0x7f0000000080)={0x0, 0x2c, 0x2}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000040)={@my=0x1}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]}) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 47.079676ms ago: executing program 5 (id=1077): unshare(0x26020480) r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) flock(r0, 0x2) 0s ago: executing program 5 (id=1078): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x80101, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000780)=0x9a0) kernel console output (not intermixed with test programs): t_register_driver returned -16 [ 98.642575][ T5198] netlink: 36 bytes leftover after parsing attributes in process `syz.4.253'. [ 98.665149][ T4368] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.688686][ T4921] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.706157][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.707717][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.709178][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.710715][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.712079][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.713799][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.848170][ T4368] usb 1-1: Using ep0 maxpacket: 16 [ 98.851844][ T4368] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.853397][ T4368] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.855565][ T4368] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.857783][ T4368] usb 1-1: config 1 interface 0 has no altsetting 0 [ 98.860972][ T4368] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.862502][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.863861][ T4368] usb 1-1: Product: syz [ 98.864502][ T4368] usb 1-1: Manufacturer: syz [ 98.868854][ T4368] usb 1-1: SerialNumber: syz [ 99.023838][ T4921] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.025617][ T4921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.028322][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.029711][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.031148][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.032511][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.033558][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.034871][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.036824][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.038387][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.040172][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.041649][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.043588][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.046244][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.048263][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.049816][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.051348][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.052849][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.054228][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.057631][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.253'. [ 99.077701][ T5194] netlink: 36 bytes leftover after parsing attributes in process `syz.0.252'. [ 99.082193][ T4368] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 99.174454][ T9] device hsr_slave_0 left promiscuous mode [ 99.197398][ T9] device hsr_slave_1 left promiscuous mode [ 99.275295][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.276620][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.278371][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.279556][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.280989][ T9] device bridge_slave_1 left promiscuous mode [ 99.282048][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.326015][ T9] device bridge_slave_0 left promiscuous mode [ 99.327121][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.445488][ T9] device veth1_macvtap left promiscuous mode [ 99.446692][ T9] device veth0_macvtap left promiscuous mode [ 99.447679][ T9] device veth1_vlan left promiscuous mode [ 99.448635][ T9] device veth0_vlan left promiscuous mode [ 101.527005][ T9] team0 (unregistering): Port device team_slave_1 removed [ 101.696348][ T9] team0 (unregistering): Port device team_slave_0 removed [ 101.856607][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.076719][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.646108][ T9] bond0 (unregistering): Released all slaves [ 104.027387][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.028690][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.031444][ T4921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.082155][ T5245] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.083678][ T5245] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.093322][ T22] usb 1-1: USB disconnect, device number 2 [ 104.097142][ T22] usblp0: removed [ 104.140206][ T5255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.141673][ T5255] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.148253][ T5255] netlink: 36 bytes leftover after parsing attributes in process `syz.3.265'. [ 104.199413][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 104.331811][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.333454][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.343180][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.344751][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.354259][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.356104][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.358398][ T4921] device veth0_vlan entered promiscuous mode [ 104.363542][ T4921] device veth1_vlan entered promiscuous mode [ 104.378516][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.379948][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.381674][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.383269][ T1577] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.387201][ T4921] device veth0_macvtap entered promiscuous mode [ 104.390321][ T4921] device veth1_macvtap entered promiscuous mode [ 104.409849][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.413621][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.419871][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.421655][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.423240][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.425380][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.426950][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.428634][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.430954][ T4921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.433479][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.434933][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.438389][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.439872][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.441392][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.442846][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.444353][ T4921] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.446099][ T4921] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.448558][ T4921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.450702][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.452396][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.453906][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.462015][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.463647][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.465632][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.468595][ T4921] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.470226][ T4921] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.472413][ T4921] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.473848][ T4921] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.499664][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.500911][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.502199][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.516037][ T5247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.517420][ T5247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.518848][ T5247] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.989408][ T5325] tipc: Started in network mode [ 104.990202][ T5325] tipc: Node identity d6d7701278d2, cluster identity 4711 [ 104.991394][ T5325] tipc: Enabled bearer , priority 0 [ 105.006241][ T5327] device syzkaller0 entered promiscuous mode [ 105.009496][ T5324] tipc: Disabling bearer [ 105.699750][ T5364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.701965][ T5364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.710461][ T5364] netlink: 36 bytes leftover after parsing attributes in process `syz.1.279'. [ 116.261574][ T5331] tipc: Enabling of bearer rejected, failed to enable media [ 116.298242][ T5355] netlink: 52 bytes leftover after parsing attributes in process `syz.5.275'. [ 116.311499][ T5365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'. [ 116.322998][ T5369] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.324479][ T5369] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.363467][ T5369] netlink: 36 bytes leftover after parsing attributes in process `syz.3.280'. [ 116.364470][ T5378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 116.366918][ T5378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 116.368737][ T5377] tipc: Enabled bearer , priority 0 [ 116.378722][ T5378] netlink: 36 bytes leftover after parsing attributes in process `syz.5.283'. [ 116.388950][ T5376] tipc: Disabling bearer [ 116.393310][ T5369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.280'. [ 116.403858][ T5378] netlink: 4 bytes leftover after parsing attributes in process `syz.5.283'. [ 116.597425][ T7] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 116.775061][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 116.777561][ T7] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 116.779017][ T7] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 116.780449][ T7] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.782385][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 116.784797][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 116.786159][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.787576][ T7] usb 1-1: Product: syz [ 116.788236][ T7] usb 1-1: Manufacturer: syz [ 116.788921][ T7] usb 1-1: SerialNumber: syz [ 116.869466][ T5405] tipc: Enabling of bearer rejected, failed to enable media [ 116.871444][ T5405] device syzkaller0 entered promiscuous mode [ 116.996542][ T5371] netlink: 36 bytes leftover after parsing attributes in process `syz.0.281'. [ 116.999781][ T7] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 117.050817][ T5410] tipc: Started in network mode [ 117.051871][ T5410] tipc: Node identity a29b67e66f1f, cluster identity 4711 [ 117.053224][ T5410] tipc: Enabled bearer , priority 0 [ 117.056829][ T5409] tipc: Disabling bearer [ 117.144937][ T5416] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.149022][ T5416] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.154129][ T5416] netlink: 36 bytes leftover after parsing attributes in process `syz.1.297'. [ 117.229626][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.1.297'. [ 117.409695][ T7] usb 1-1: USB disconnect, device number 3 [ 117.412068][ T7] usblp0: removed [ 117.714250][ T5434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.718603][ T5434] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.723079][ T5434] netlink: 36 bytes leftover after parsing attributes in process `syz.4.303'. [ 117.761553][ T5436] tipc: Enabling of bearer rejected, failed to enable media [ 117.763563][ T5436] device syzkaller0 entered promiscuous mode [ 117.951137][ T5438] tipc: Started in network mode [ 117.952011][ T5438] tipc: Node identity aafd391b420f, cluster identity 4711 [ 117.953061][ T5438] tipc: Enabled bearer , priority 0 [ 117.961320][ T5437] tipc: Disabling bearer [ 117.963653][ T5440] device syzkaller0 entered promiscuous mode [ 118.391619][ T5465] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.393377][ T5465] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.425602][ T5467] tipc: Started in network mode [ 118.426387][ T5467] tipc: Node identity ce573c9b722f, cluster identity 4711 [ 118.427619][ T5467] tipc: Enabled bearer , priority 0 [ 118.430299][ T5466] tipc: Disabling bearer [ 118.481208][ T5469] tipc: Enabling of bearer rejected, failed to enable media [ 118.484024][ T5469] device syzkaller0 entered promiscuous mode [ 118.555122][ T7] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 118.765058][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 118.767297][ T7] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 118.768882][ T7] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 118.770425][ T7] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 118.772423][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 118.782198][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 118.783638][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.784910][ T7] usb 1-1: Product: syz [ 118.785796][ T7] usb 1-1: Manufacturer: syz [ 118.786476][ T7] usb 1-1: SerialNumber: syz [ 118.903858][ T5479] device syzkaller0 entered promiscuous mode [ 119.002683][ T7] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 119.082700][ T5489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.084191][ T5489] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.101458][ T5491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.103098][ T5491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.126715][ T5493] tipc: Enabled bearer , priority 0 [ 119.129556][ T5492] tipc: Disabling bearer [ 119.206769][ T5498] tipc: Enabling of bearer rejected, failed to enable media [ 119.208707][ T5498] device syzkaller0 entered promiscuous mode [ 119.412665][ T14] usb 1-1: USB disconnect, device number 4 [ 119.415448][ T14] usblp0: removed [ 119.580098][ T5513] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.582191][ T5513] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.954663][ T5539] tipc: Enabled bearer , priority 0 [ 119.972560][ T5538] tipc: Disabling bearer [ 119.979408][ T5541] tipc: Enabling of bearer rejected, failed to enable media [ 119.981554][ T5541] device syzkaller0 entered promiscuous mode [ 120.202306][ T5552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.203994][ T5552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.244849][ T5554] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.249321][ T5554] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.657128][ T22] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 120.682790][ T5574] tipc: Enabled bearer , priority 0 [ 120.685796][ T5573] tipc: Disabling bearer [ 120.812957][ T5580] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.815649][ T5580] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.835154][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 120.837906][ T22] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 120.839547][ T22] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 120.841149][ T22] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 120.843423][ T22] usb 1-1: config 1 interface 0 has no altsetting 0 [ 120.850307][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 120.852963][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.854785][ T22] usb 1-1: Product: syz [ 120.856330][ T22] usb 1-1: Manufacturer: syz [ 120.856987][ T22] usb 1-1: SerialNumber: syz [ 120.949651][ T5585] device syzkaller0 entered promiscuous mode [ 121.065538][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 121.443360][ T5608] tipc: Enabled bearer , priority 0 [ 121.447683][ T5607] tipc: Disabling bearer [ 121.503951][ T5610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.506078][ T5610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.510392][ T5610] __nla_validate_parse: 11 callbacks suppressed [ 121.510406][ T5610] netlink: 36 bytes leftover after parsing attributes in process `syz.1.363'. [ 121.564231][ T22] usb 1-1: USB disconnect, device number 5 [ 121.566034][ T22] usblp0: removed [ 122.048286][ T5631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.049646][ T5631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.061221][ T5631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.365'. [ 122.118998][ T5640] device syzkaller0 entered promiscuous mode [ 122.322929][ T5652] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.324420][ T5652] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.555059][ T3898] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 122.735173][ T3898] usb 1-1: Using ep0 maxpacket: 16 [ 122.737900][ T3898] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 122.739422][ T3898] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 122.740989][ T3898] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 122.742948][ T3898] usb 1-1: config 1 interface 0 has no altsetting 0 [ 122.745616][ T3898] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 122.746955][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.748212][ T3898] usb 1-1: Product: syz [ 122.748826][ T3898] usb 1-1: Manufacturer: syz [ 122.749611][ T3898] usb 1-1: SerialNumber: syz [ 122.958485][ T5650] netlink: 36 bytes leftover after parsing attributes in process `syz.0.372'. [ 122.961537][ T3898] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 122.988828][ T5665] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.990444][ T5665] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.995812][ T5665] netlink: 36 bytes leftover after parsing attributes in process `syz.3.378'. [ 123.111164][ T5666] netlink: 4 bytes leftover after parsing attributes in process `syz.3.378'. [ 123.210133][ T5670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.211666][ T5670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.218479][ T5670] netlink: 36 bytes leftover after parsing attributes in process `syz.1.379'. [ 123.371919][ T5670] usblp0:failed reading printer status (-71) [ 123.372709][ T22] usb 1-1: USB disconnect, device number 6 [ 123.377376][ T5669] usblp0: removed [ 123.696269][ T5689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.703751][ T5689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.706195][ T5686] device syzkaller0 entered promiscuous mode [ 123.708649][ T5689] netlink: 36 bytes leftover after parsing attributes in process `syz.5.385'. [ 123.912114][ T5696] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.914914][ T5696] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.526156][ T5725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.527966][ T5725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.534150][ T5725] netlink: 36 bytes leftover after parsing attributes in process `syz.5.397'. [ 124.618281][ T5725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.397'. [ 124.780942][ T5731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.787061][ T5731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.802881][ T5731] netlink: 36 bytes leftover after parsing attributes in process `syz.1.399'. [ 124.832947][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.833526][ T5735] device syzkaller0 entered promiscuous mode [ 124.834420][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.079645][ T5743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.081957][ T5743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.149611][ T5745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.151611][ T5745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.743623][ T5766] device syzkaller0 entered promiscuous mode [ 125.925767][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 125.926873][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 125.933678][ T5773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.937648][ T5773] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.003355][ T5777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.006422][ T5777] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.349264][ T5783] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.352021][ T5783] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.402072][ T5787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.403570][ T5787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.889835][ T5840] device syzkaller0 entered promiscuous mode [ 127.094684][ T5864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.102103][ T5864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.111738][ T5864] __nla_validate_parse: 9 callbacks suppressed [ 127.111750][ T5864] netlink: 36 bytes leftover after parsing attributes in process `syz.5.431'. [ 127.405242][ T22] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 127.585079][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 127.587464][ T22] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 127.588866][ T22] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 127.590268][ T22] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 127.592162][ T22] usb 1-1: config 1 interface 0 has no altsetting 0 [ 127.594537][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.596617][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.597796][ T22] usb 1-1: Product: syz [ 127.598363][ T22] usb 1-1: Manufacturer: syz [ 127.599068][ T22] usb 1-1: SerialNumber: syz [ 127.728134][ T5905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.729742][ T5905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.734632][ T5905] netlink: 36 bytes leftover after parsing attributes in process `syz.5.438'. [ 127.758908][ T5907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.761107][ T5907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.769197][ T5907] netlink: 36 bytes leftover after parsing attributes in process `syz.3.439'. [ 127.809466][ T5869] netlink: 36 bytes leftover after parsing attributes in process `syz.0.432'. [ 127.812076][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 127.826452][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.439'. [ 127.843457][ T5911] device syzkaller0 entered promiscuous mode [ 128.318265][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.432'. [ 128.370251][ T14] usb 1-1: USB disconnect, device number 7 [ 128.374050][ T14] usblp0: removed [ 128.510711][ T5946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.512475][ T5946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 128.518242][ T5946] netlink: 36 bytes leftover after parsing attributes in process `syz.5.449'. [ 129.124021][ T5957] device syzkaller0 entered promiscuous mode [ 129.174364][ T5959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.177261][ T5959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.182222][ T5959] netlink: 36 bytes leftover after parsing attributes in process `syz.5.454'. [ 129.476972][ T5965] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.478455][ T5965] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.565117][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 129.747324][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 129.749331][ T22] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 129.750871][ T22] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 129.752352][ T22] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.765883][ T22] usb 1-1: config 1 interface 0 has no altsetting 0 [ 129.771587][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 129.772906][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.774056][ T22] usb 1-1: Product: syz [ 129.774686][ T22] usb 1-1: Manufacturer: syz [ 129.775720][ T22] usb 1-1: SerialNumber: syz [ 129.988190][ T5979] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.991046][ T5979] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.999137][ T5979] netlink: 36 bytes leftover after parsing attributes in process `syz.5.463'. [ 130.007952][ T5961] netlink: 36 bytes leftover after parsing attributes in process `syz.0.455'. [ 130.013704][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 130.096176][ T5985] device syzkaller0 entered promiscuous mode [ 130.289460][ T5989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.291826][ T5989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.510467][ T22] usb 1-1: USB disconnect, device number 8 [ 130.515284][ T22] usblp0: removed [ 130.607584][ T5993] device syzkaller0 entered promiscuous mode [ 130.754534][ T5999] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.756115][ T5999] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.880231][ T6004] device syzkaller0 entered promiscuous mode [ 130.952735][ T6008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 130.954548][ T6008] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.064345][ T6013] device syzkaller0 entered promiscuous mode [ 131.072841][ T6014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.074280][ T6014] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.532943][ T6030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.534662][ T6030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.666845][ T6038] device syzkaller0 entered promiscuous mode [ 131.731664][ T6040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.733300][ T6040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.951372][ T6044] device syzkaller0 entered promiscuous mode [ 132.161706][ T6050] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.164866][ T6050] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.300447][ T6057] device syzkaller0 entered promiscuous mode [ 132.375101][ T22] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 132.490857][ T6061] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.492353][ T6061] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.499737][ T6061] __nla_validate_parse: 7 callbacks suppressed [ 132.499748][ T6061] netlink: 36 bytes leftover after parsing attributes in process `syz.3.496'. [ 132.562636][ T6061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.496'. [ 132.565352][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 132.567633][ T22] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 132.570759][ T22] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 132.572163][ T22] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.574053][ T22] usb 1-1: config 1 interface 0 has no altsetting 0 [ 132.576784][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 132.578232][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.579408][ T22] usb 1-1: Product: syz [ 132.580089][ T22] usb 1-1: Manufacturer: syz [ 132.580768][ T22] usb 1-1: SerialNumber: syz [ 132.724862][ T6065] device syzkaller0 entered promiscuous mode [ 132.787463][ T6046] netlink: 36 bytes leftover after parsing attributes in process `syz.0.489'. [ 132.791006][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 132.988601][ T6071] device syzkaller0 entered promiscuous mode [ 133.058964][ T6074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.060608][ T6074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.064944][ T6074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.501'. [ 133.191999][ T6084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.193495][ T6084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.198151][ T6084] netlink: 36 bytes leftover after parsing attributes in process `syz.1.504'. [ 133.285328][ T4367] usb 1-1: USB disconnect, device number 9 [ 133.287042][ T4367] usblp0: removed [ 133.692257][ T6090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.694293][ T6090] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.746135][ T6092] device syzkaller0 entered promiscuous mode [ 134.234032][ T6106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.235804][ T6106] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.240267][ T6106] netlink: 36 bytes leftover after parsing attributes in process `syz.4.512'. [ 134.858409][ T6129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.860169][ T6129] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.864947][ T6129] netlink: 36 bytes leftover after parsing attributes in process `syz.3.515'. [ 144.711025][ T6107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.512'. [ 144.772329][ T6146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.773882][ T6146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.798961][ T6146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.518'. [ 144.848369][ T6155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.849951][ T6155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.085075][ T4368] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 145.265078][ T4368] usb 1-1: Using ep0 maxpacket: 16 [ 145.267403][ T4368] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 145.268936][ T4368] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 145.270350][ T4368] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.272174][ T4368] usb 1-1: config 1 interface 0 has no altsetting 0 [ 145.274679][ T4368] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 145.276065][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.277228][ T4368] usb 1-1: Product: syz [ 145.277835][ T4368] usb 1-1: Manufacturer: syz [ 145.278553][ T4368] usb 1-1: SerialNumber: syz [ 145.470019][ T6169] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.473386][ T6169] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.478682][ T6169] netlink: 36 bytes leftover after parsing attributes in process `syz.4.527'. [ 145.489097][ T6149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.519'. [ 145.492627][ T4368] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 10 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 145.678505][ T6173] device syzkaller0 entered promiscuous mode [ 146.258011][ T6183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.260096][ T6183] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 146.264518][ T6183] netlink: 36 bytes leftover after parsing attributes in process `syz.3.530'. [ 156.711004][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.530'. [ 156.729618][ T22] usb 1-1: USB disconnect, device number 10 [ 156.733012][ T22] usblp0: removed [ 156.779307][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.782882][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.802684][ T6211] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.804257][ T6211] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.818053][ T6211] netlink: 36 bytes leftover after parsing attributes in process `syz.5.535'. [ 157.285208][ T22] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 157.440461][ T6231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.441976][ T6231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.449179][ T6231] netlink: 36 bytes leftover after parsing attributes in process `syz.5.542'. [ 157.465060][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 157.467691][ T22] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 157.469233][ T22] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 157.470766][ T22] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 157.472709][ T22] usb 1-1: config 1 interface 0 has no altsetting 0 [ 157.476104][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 157.477508][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.478745][ T22] usb 1-1: Product: syz [ 157.479425][ T22] usb 1-1: Manufacturer: syz [ 157.480084][ T22] usb 1-1: SerialNumber: syz [ 157.514172][ T6231] netlink: 4 bytes leftover after parsing attributes in process `syz.5.542'. [ 157.688152][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.0.539'. [ 157.691073][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 157.714136][ T6235] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.715679][ T6235] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 157.721458][ T6235] netlink: 36 bytes leftover after parsing attributes in process `syz.1.543'. [ 157.865420][ T6240] device syzkaller0 entered promiscuous mode [ 158.735143][ T4337] Bluetooth: hci0: command 0x0406 tx timeout [ 158.736161][ T4337] Bluetooth: hci2: command 0x0406 tx timeout [ 158.737103][ T4337] Bluetooth: hci1: command 0x0406 tx timeout [ 158.738078][ T4337] Bluetooth: hci3: command 0x0406 tx timeout [ 160.441214][ T6272] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.442644][ T6272] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.970243][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.972083][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.976575][ T6274] netlink: 36 bytes leftover after parsing attributes in process `syz.3.552'. [ 166.005330][ T6274] usblp0:failed reading printer status (-110) [ 168.703407][ T4372] usb 1-1: USB disconnect, device number 11 [ 168.705289][ T4372] usblp0: removed [ 168.818398][ T6291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 168.820085][ T6291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.830319][ T6291] netlink: 36 bytes leftover after parsing attributes in process `syz.1.557'. [ 168.957625][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.1.557'. [ 169.038732][ T6304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.040430][ T6304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.044723][ T6304] netlink: 36 bytes leftover after parsing attributes in process `syz.5.560'. [ 169.537577][ T6308] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.540081][ T6308] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.577350][ T6310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.578909][ T6310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.583333][ T6310] netlink: 36 bytes leftover after parsing attributes in process `syz.3.563'. [ 169.761771][ T27] audit: type=1326 audit(169.750:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb2176c28 code=0x7ffc0000 [ 169.765157][ T27] audit: type=1326 audit(169.750:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.775404][ T27] audit: type=1326 audit(169.750:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.778782][ T27] audit: type=1326 audit(169.750:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.781725][ T27] audit: type=1326 audit(169.750:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.785996][ T27] audit: type=1326 audit(169.750:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.789382][ T27] audit: type=1326 audit(169.750:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.792603][ T27] audit: type=1326 audit(169.750:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.796307][ T27] audit: type=1326 audit(169.750:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.799549][ T27] audit: type=1326 audit(169.750:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6311 comm="syz.5.564" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffb2fd681c code=0x7ffc0000 [ 169.895078][ T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 169.955552][ T6318] tipc: Enabled bearer , priority 0 [ 169.959156][ T6318] tipc: Resetting bearer [ 170.025610][ T6317] tipc: Disabling bearer [ 170.075153][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 170.079830][ T7] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 170.081382][ T7] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 170.082780][ T7] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.084725][ T7] usb 1-1: config 1 interface 0 has no altsetting 0 [ 170.088674][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 170.090292][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.091809][ T7] usb 1-1: Product: syz [ 170.092465][ T7] usb 1-1: Manufacturer: syz [ 170.093222][ T7] usb 1-1: SerialNumber: syz [ 170.161715][ T6324] device syzkaller0 entered promiscuous mode [ 170.172828][ T6327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.174844][ T6327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.180008][ T6327] netlink: 36 bytes leftover after parsing attributes in process `syz.3.572'. [ 170.319880][ T6314] netlink: 36 bytes leftover after parsing attributes in process `syz.0.565'. [ 170.323535][ T7] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 171.132588][ T6341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 171.134764][ T6341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 171.142867][ T6341] netlink: 36 bytes leftover after parsing attributes in process `syz.5.574'. [ 181.092720][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.572'. [ 181.116871][ T4367] usb 1-1: USB disconnect, device number 12 [ 181.118634][ T4367] usblp0: removed [ 181.203512][ T6372] tipc: Enabled bearer , priority 0 [ 181.205181][ T6379] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 181.206833][ T6379] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 181.213982][ T6372] tipc: Resetting bearer [ 181.306471][ T6369] tipc: Disabling bearer [ 181.308514][ T6383] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 181.615053][ T4367] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 181.771199][ T6401] loop4: detected capacity change from 0 to 512 [ 181.795110][ T4367] usb 1-1: Using ep0 maxpacket: 16 [ 181.797685][ T4367] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 181.799404][ T4367] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 181.801079][ T4367] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.803734][ T4367] usb 1-1: config 1 interface 0 has no altsetting 0 [ 181.809204][ T4367] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 181.811887][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.815333][ T4367] usb 1-1: Product: syz [ 181.817283][ T4367] usb 1-1: Manufacturer: syz [ 181.818022][ T4367] usb 1-1: SerialNumber: syz [ 181.842646][ T6405] device syzkaller0 entered promiscuous mode [ 182.032081][ T6381] netlink: 36 bytes leftover after parsing attributes in process `syz.0.583'. [ 182.035457][ T4367] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 182.085279][ T6412] loop1: detected capacity change from 0 to 256 [ 182.535736][ T4368] usb 1-1: USB disconnect, device number 13 [ 182.537591][ T4368] usblp0: removed [ 182.961498][ T6425] loop1: detected capacity change from 0 to 2048 [ 183.000687][ T6425] loop1: p1 p2 p3 [ 183.017025][ T3936] loop1: p1 p2 p3 [ 183.090616][ T6431] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.093336][ T6431] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.154940][ T6436] loop0: detected capacity change from 0 to 764 [ 183.269287][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 183.283985][ T6387] udevd[6387]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 183.318591][ T6370] udevd[6370]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 183.338083][ T6436] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 183.534333][ T6368] udevd[6368]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 183.549544][ T6365] udevd[6365]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory [ 183.553081][ T6387] udevd[6387]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 183.826365][ T6452] block device autoloading is deprecated and will be removed. [ 183.929207][ T6454] loop4: detected capacity change from 0 to 1764 [ 184.098917][ T6466] loop4: detected capacity change from 0 to 1764 [ 184.275074][ T22] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 184.335622][ T6477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.337136][ T6477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.455099][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 184.457429][ T22] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 184.459162][ T22] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 184.460939][ T22] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 184.463590][ T22] usb 1-1: config 1 interface 0 has no altsetting 0 [ 184.468900][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 184.470375][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.471704][ T22] usb 1-1: Product: syz [ 184.472378][ T22] usb 1-1: Manufacturer: syz [ 184.473112][ T22] usb 1-1: SerialNumber: syz [ 184.666581][ T6496] netlink: 52 bytes leftover after parsing attributes in process `syz.4.624'. [ 184.669693][ T6499] netlink: 52 bytes leftover after parsing attributes in process `syz.4.624'. [ 184.681016][ T6461] netlink: 36 bytes leftover after parsing attributes in process `syz.0.610'. [ 184.684149][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 184.896351][ T6511] Soft offlining pfn 0x210ff2 at process virtual address 0x20004000 [ 184.899448][ T6511] Memory failure: 0x210ff2: unhandlable page. [ 185.220831][ T6528] mmap: syz.1.639 (6528) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 185.230614][ T4368] usb 1-1: USB disconnect, device number 14 [ 185.233088][ T4368] usblp0: removed [ 187.375466][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 187.376541][ T2062] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.162722][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.641'. [ 196.298694][ T6550] xt_hashlimit: size too large, truncated to 1048576 [ 196.683236][ T4367] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 196.865097][ T4367] usb 1-1: Using ep0 maxpacket: 16 [ 196.867623][ T4367] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 196.868940][ T4367] usb 1-1: config 0 has no interface number 0 [ 196.869996][ T4367] usb 1-1: config 0 interface 245 has no altsetting 0 [ 196.872657][ T4367] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 196.874209][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.875978][ T4367] usb 1-1: Product: syz [ 196.876713][ T4367] usb 1-1: Manufacturer: syz [ 196.877564][ T4367] usb 1-1: SerialNumber: syz [ 196.883285][ T4367] usb 1-1: config 0 descriptor?? [ 197.118028][ T4367] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 197.119329][ T4367] usb 1-1: selecting invalid altsetting 0 [ 197.120890][ T2835] pvrusb2: Invalid write control endpoint [ 197.130305][ T4367] usb 1-1: USB disconnect, device number 15 [ 197.149254][ T2835] pvrusb2: Invalid write control endpoint [ 197.150206][ T2835] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 197.152423][ T2835] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 197.153807][ T2835] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 197.155594][ T2835] pvrusb2: Device being rendered inoperable [ 197.157508][ T2835] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 197.159076][ T2835] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 197.161496][ T2835] pvrusb2: Attached sub-driver cx25840 [ 197.183324][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 197.184706][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 197.186245][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 197.188065][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 197.189270][ T2835] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 197.204869][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 197.206795][ T2835] tda9887 1-0043: creating new instance [ 197.208036][ T2835] tda9887 1-0043: tda988[5/6/7] found [ 197.208912][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 197.210398][ T2835] tda9887 1-0043: i2c i/o error: rc == -5 (should be 4) [ 197.211419][ T2835] tuner: 1-0043: Tuner 74 found with type(s) Radio TV. [ 197.212899][ T2835] pvrusb2: Attached sub-driver tuner [ 197.213694][ T2835] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 197.224018][ T2835] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 197.239855][ T4367] tda9887 1-0043: destroying instance [ 197.322297][ T6585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 197.323743][ T6585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 197.328531][ T6585] netlink: 36 bytes leftover after parsing attributes in process `syz.1.657'. [ 197.794708][ T6593] loop0: detected capacity change from 0 to 8192 [ 198.045302][ T6607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.047143][ T6607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.233305][ T6624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.238152][ T6624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.260889][ T6624] netlink: 36 bytes leftover after parsing attributes in process `syz.5.673'. [ 198.307373][ T6628] loop3: detected capacity change from 0 to 128 [ 198.411964][ T6633] loop0: detected capacity change from 0 to 8192 [ 198.455839][ T22] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.459402][ T6633] loop0: p1 < > p2 p4 < p5 > [ 198.460112][ T6633] loop0: partition table partially beyond EOD, truncated [ 198.461270][ T6633] loop0: p1 start 134217728 is beyond EOD, truncated [ 198.462183][ T6633] loop0: p2 size 591360 extends beyond EOD, truncated [ 198.466253][ T6633] loop0: p5 size 591360 extends beyond EOD, truncated [ 198.504816][ T3936] loop0: p1 < > p2 p4 < p5 > [ 198.506040][ T3936] loop0: partition table partially beyond EOD, truncated [ 198.507202][ T3936] loop0: p1 start 134217728 is beyond EOD, truncated [ 198.508296][ T3936] loop0: p2 size 591360 extends beyond EOD, truncated [ 198.509921][ T3936] loop0: p5 size 591360 extends beyond EOD, truncated [ 198.521677][ T6645] netlink: 20 bytes leftover after parsing attributes in process `syz.0.682'. [ 198.529343][ T6574] udevd[6574]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 198.532619][ T6537] udevd[6537]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 198.536544][ T6572] udevd[6572]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 198.548871][ T6574] udevd[6574]: inotify_add_watch(7, /dev/loop0p2, 10) failed: No such file or directory [ 198.551861][ T6648] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 198.551861][ T6648] The task syz.3.679 (6648) triggered the difference, watch for misbehavior. [ 198.553050][ T6537] udevd[6537]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 198.561555][ T6572] udevd[6572]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory [ 198.585250][ T22] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.675214][ T22] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 198.698828][ T6657] netlink: 'syz.0.687': attribute type 13 has an invalid length. [ 198.709996][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 198.723567][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 198.726056][ T6657] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 198.927516][ T6676] fuse: root generation should be zero [ 198.985410][ T6683] loop1: detected capacity change from 0 to 128 [ 199.053532][ T6690] loop1: detected capacity change from 0 to 128 [ 199.095717][ T6690] syz.1.699: attempt to access beyond end of device [ 199.095717][ T6690] loop1: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 199.175468][ T4367] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 199.227993][ T6700] capability: warning: `syz.4.702' uses deprecated v2 capabilities in a way that may be insecure [ 199.261913][ T6702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.264744][ T6702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.286027][ T6702] netlink: 36 bytes leftover after parsing attributes in process `syz.4.703'. [ 199.325928][ T6708] bridge: RTM_DELNEIGH with unconfigured vlan 2 on bridge_slave_1 [ 199.337580][ T6710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.339814][ T6710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.344659][ T6710] netlink: 36 bytes leftover after parsing attributes in process `syz.1.707'. [ 199.375313][ T4367] usb 1-1: Using ep0 maxpacket: 16 [ 199.380079][ T4367] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 199.381367][ T4367] usb 1-1: config 0 has no interface number 0 [ 199.382231][ T4367] usb 1-1: config 0 interface 245 has no altsetting 0 [ 199.384632][ T4367] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 199.387065][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.388306][ T4367] usb 1-1: Product: syz [ 199.389002][ T4367] usb 1-1: Manufacturer: syz [ 199.389802][ T4367] usb 1-1: SerialNumber: syz [ 199.391485][ T4367] usb 1-1: config 0 descriptor?? [ 199.637220][ T4367] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 199.638427][ T4367] usb 1-1: selecting invalid altsetting 0 [ 199.639369][ T2835] pvrusb2: Invalid write control endpoint [ 199.642579][ T4367] usb 1-1: USB disconnect, device number 16 [ 199.656306][ T2835] pvrusb2: Invalid write control endpoint [ 199.657215][ T2835] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 199.658636][ T2835] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 199.659734][ T2835] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 199.661265][ T2835] pvrusb2: Device being rendered inoperable [ 199.662196][ T2835] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 199.663248][ T2835] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 199.664814][ T2835] pvrusb2: Attached sub-driver cx25840 [ 199.678401][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 199.679732][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 199.680896][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 199.682112][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 199.683203][ T2835] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 199.686256][ T4337] Bluetooth: hci4: command 0x0406 tx timeout [ 199.696292][ T22] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.697903][ T22] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.700134][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 199.701416][ T2835] tda9887 1-0043: creating new instance [ 199.702220][ T2835] tda9887 1-0043: tda988[5/6/7] found [ 199.703077][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 199.713883][ T2835] tda9887 1-0043: i2c i/o error: rc == -5 (should be 4) [ 199.714950][ T2835] tuner: 1-0043: Tuner 74 found with type(s) Radio TV. [ 199.717133][ T2835] pvrusb2: Attached sub-driver tuner [ 199.717993][ T2835] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 199.719857][ T2835] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 199.723706][ T4367] tda9887 1-0043: destroying instance [ 199.867993][ T6731] loop3: detected capacity change from 0 to 16 [ 199.870674][ T6731] erofs: (device loop3): mounted with root inode @ nid 36. [ 199.884346][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.886777][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.888323][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.900311][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.901817][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.903340][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.904834][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.912378][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.921425][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.922958][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.924465][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.938014][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.941047][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.942620][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.944069][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.947020][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.948510][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.949967][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.955230][ T22] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 199.961995][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.963454][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.964918][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.970644][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.972236][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.973792][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.980355][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.981793][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.983430][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.984967][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.990508][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 199.992027][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.004357][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.006366][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.007992][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.009550][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.011063][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.012604][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.014697][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.019143][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.024364][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.026413][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.027869][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.029351][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.031405][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.033350][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.040291][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.043824][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.049202][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.050899][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.052407][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.054319][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.058238][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.060017][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.066201][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.067656][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.069350][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.070823][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.072280][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.073905][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.079028][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.080574][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.082081][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.083626][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.091963][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.093458][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.095903][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.097397][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.098882][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.105447][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.106907][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.108283][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.109703][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.112733][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.114675][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.119260][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.120669][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.125607][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.127333][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.128993][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.130562][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.135525][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.137099][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.138686][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.140312][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.161516][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.163024][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.169714][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.171330][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.173063][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.174489][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.177413][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.178863][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.180341][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.181941][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.183519][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.185961][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.187756][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.189436][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.190995][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.192647][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.194490][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.196848][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.205701][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.207161][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.208953][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.210457][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.211936][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.213531][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.220112][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.221773][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.223231][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.224816][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.227916][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.241338][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.253259][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.256260][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.257704][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.259383][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.260867][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.262433][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.263984][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.275797][ T6760] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.279479][ T6760] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.287692][ T6760] netlink: 36 bytes leftover after parsing attributes in process `syz.4.725'. [ 200.297604][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.299155][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.300858][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.302337][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.303892][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.315722][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.317240][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.318766][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.320493][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.322362][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.323833][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.335759][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.337253][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.338829][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.340228][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.341765][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.343307][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.344915][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.367703][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.369182][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.370653][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.372274][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.373888][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.386104][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.387567][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.389395][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.390828][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.392233][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.393767][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.405798][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.407231][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.412321][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.413756][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.419071][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.420526][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.422136][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.423698][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.430578][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.432023][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.433572][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.437744][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.439477][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.441251][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.443613][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.446319][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.448159][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.449721][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.451511][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.453065][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.454735][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.457217][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.465706][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.467205][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.472964][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.474482][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.482121][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.483675][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.489838][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.491359][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.492824][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.494441][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.502409][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.503952][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.512581][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.514190][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.520872][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.522401][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.523952][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.527823][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.543203][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.544688][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.550699][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.552349][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.553953][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.555935][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.557514][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.559014][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.560557][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.562191][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.563807][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.566157][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.567694][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.569239][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.570971][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.572561][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.574242][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.576396][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.578144][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.580061][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.581993][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.583641][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.585622][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.587171][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.588867][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.590394][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.592056][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.593605][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.595827][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.598490][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.600193][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.601842][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.603401][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.604984][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.607143][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.608769][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.610435][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.611869][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.615946][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.617458][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.619028][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.621683][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.623257][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.624800][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.627681][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.629288][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.631167][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.632654][ T4321] erofs: (device loop3): erofs_fill_dentries: bogus dirent @ nid 36 [ 200.758306][ T6772] loop1: detected capacity change from 0 to 8192 [ 200.825146][ T22] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 200.910192][ T6779] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 200.912068][ T6779] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 200.955248][ T4337] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.957244][ T4337] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.958764][ T4337] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.961141][ T4337] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.962429][ T4337] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.963776][ T4337] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.005180][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 201.009412][ T22] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 201.010865][ T22] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 201.012218][ T22] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.014080][ T22] usb 1-1: config 1 interface 0 has no altsetting 0 [ 201.017099][ T22] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 201.018498][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.019736][ T22] usb 1-1: Product: syz [ 201.020360][ T22] usb 1-1: Manufacturer: syz [ 201.021108][ T22] usb 1-1: SerialNumber: syz [ 201.158944][ T6556] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.163031][ T6785] device syzkaller0 entered promiscuous mode [ 201.228701][ T6765] netlink: 36 bytes leftover after parsing attributes in process `syz.0.727'. [ 201.232453][ T22] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 201.317858][ T6556] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.486141][ T6556] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.566054][ T6556] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.570353][ T6780] chnl_net:caif_netlink_parms(): no params data found [ 201.643401][ T6780] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.644680][ T6780] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.651750][ T6780] device bridge_slave_0 entered promiscuous mode [ 201.654057][ T6780] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.661837][ T6780] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.663535][ T6780] device bridge_slave_1 entered promiscuous mode [ 201.691303][ T6780] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.706910][ T6780] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.777493][ T6780] team0: Port device team_slave_0 added [ 201.779458][ T6780] team0: Port device team_slave_1 added [ 201.789807][ T4372] usb 1-1: USB disconnect, device number 17 [ 201.792255][ T4372] usblp0: removed [ 201.823992][ T6780] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.825335][ T6780] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.829250][ T6780] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.843444][ T6780] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.851691][ T6780] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.861803][ T6780] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.926827][ T6780] device hsr_slave_0 entered promiscuous mode [ 201.975418][ T6780] device hsr_slave_1 entered promiscuous mode [ 202.005690][ T6780] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.006879][ T6780] Cannot create hsr debugfs directory [ 202.414068][ T6780] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.489197][ T6780] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.567290][ T6780] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.630523][ T6861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.632950][ T6861] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.689196][ T6780] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.745074][ T24] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 202.804865][ T6780] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.850266][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 202.851912][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 202.854994][ T6780] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.862815][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 202.864651][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 202.867368][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.868512][ T4702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.869841][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 202.871489][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 202.872848][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.873875][ T4702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.877895][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 202.879554][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 202.882122][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 202.918421][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 202.920514][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 202.923017][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 202.925293][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 202.927849][ T24] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 202.929457][ T24] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 202.930892][ T24] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 202.932832][ T24] usb 1-1: config 1 interface 0 has no altsetting 0 [ 202.936133][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 202.937852][ T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 202.939137][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.940369][ T24] usb 1-1: Product: syz [ 202.941024][ T24] usb 1-1: Manufacturer: syz [ 202.942157][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 202.947640][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 202.949124][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 202.950601][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 202.951877][ T24] usb 1-1: SerialNumber: syz [ 202.952012][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 203.008348][ T6780] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 203.045368][ T4329] Bluetooth: hci0: command 0x0409 tx timeout [ 203.130563][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 203.131890][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 203.137205][ T6780] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.165897][ T6852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.744'. [ 203.168975][ T24] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 203.188149][ T6895] loop5: detected capacity change from 0 to 164 [ 203.199882][ T6895] Unable to read rock-ridge attributes [ 203.231845][ T6895] Unable to read rock-ridge attributes [ 203.239235][ T6895] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 203.479610][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz.5.750'. [ 203.574034][ T6918] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.580482][ T6918] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.592007][ T6918] netlink: 36 bytes leftover after parsing attributes in process `syz.5.752'. [ 203.769115][ T6931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.771628][ T6931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.909302][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 203.911049][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 203.914942][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 203.917309][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 203.922267][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 203.923794][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 203.927791][ T6780] device veth0_vlan entered promiscuous mode [ 203.931335][ T6780] device veth1_vlan entered promiscuous mode [ 204.017837][ T6556] device hsr_slave_0 left promiscuous mode [ 204.055428][ T6556] device hsr_slave_1 left promiscuous mode [ 204.115295][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.116622][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.118212][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.119456][ T6556] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.120790][ T6556] device bridge_slave_1 left promiscuous mode [ 204.122403][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.155719][ T6556] device bridge_slave_0 left promiscuous mode [ 204.156816][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.295160][ T6556] device veth1_macvtap left promiscuous mode [ 204.296307][ T6556] device veth0_macvtap left promiscuous mode [ 204.297350][ T6556] device veth1_vlan left promiscuous mode [ 204.299109][ T6556] device veth0_vlan left promiscuous mode [ 204.309637][ T6955] loop1: detected capacity change from 0 to 128 [ 205.125119][ T4329] Bluetooth: hci0: command 0x041b tx timeout [ 206.378333][ T6556] team0 (unregistering): Port device team_slave_1 removed [ 206.561021][ T6556] team0 (unregistering): Port device team_slave_0 removed [ 206.745513][ T6556] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.946162][ T6556] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.215101][ T4329] Bluetooth: hci0: command 0x040f tx timeout [ 208.405803][ T6852] usblp0:failed reading printer status (-110) [ 208.415629][ T3898] usb 1-1: USB disconnect, device number 18 [ 208.417304][ T3898] usblp0: removed [ 208.496054][ T6556] bond0 (unregistering): Released all slaves [ 208.839939][ T6780] device veth0_macvtap entered promiscuous mode [ 208.843220][ T6780] device veth1_macvtap entered promiscuous mode [ 208.855143][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 208.856912][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 208.858468][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 208.859961][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 208.861455][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 208.864089][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 208.884282][ T6973] tipc: Enabled bearer , priority 0 [ 208.888416][ T6975] device syzkaller0 entered promiscuous mode [ 208.893280][ T6967] tipc: Resetting bearer [ 208.914536][ T6992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.924270][ T6967] tipc: Disabling bearer [ 208.932415][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.934002][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.936230][ T6992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 208.937327][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.938800][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.940290][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.941813][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.946403][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.948043][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.950544][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.951978][ T6992] netlink: 36 bytes leftover after parsing attributes in process `syz.1.769'. [ 208.957496][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 208.959285][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 208.960928][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.962491][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.964034][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.965958][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.967477][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.969218][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.970762][ T6780] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.972281][ T6780] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.974347][ T6780] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.977470][ T6780] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.978737][ T6780] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.980101][ T6780] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.981320][ T6780] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.993644][ T6996] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 208.995694][ T6996] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 209.008677][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.010331][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.030834][ T6994] device syzkaller0 entered promiscuous mode [ 209.285096][ T4329] Bluetooth: hci0: command 0x0419 tx timeout [ 210.443880][ T7035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.450692][ T7035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.457184][ T7035] netlink: 36 bytes leftover after parsing attributes in process `syz.5.779'. [ 220.040865][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.042105][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.043615][ T1612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 220.056270][ T4977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.057497][ T4977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.059818][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 220.202407][ T7055] loop6: detected capacity change from 0 to 512 [ 220.222517][ T7055] FAT-fs (loop6): Directory bread(block 199916) failed [ 220.223693][ T7055] FAT-fs (loop6): Directory bread(block 199917) failed [ 220.224679][ T7055] FAT-fs (loop6): Directory bread(block 199918) failed [ 220.226105][ T7055] FAT-fs (loop6): Directory bread(block 199919) failed [ 220.235691][ T7055] FAT-fs (loop6): Directory bread(block 199920) failed [ 220.236816][ T7055] FAT-fs (loop6): Directory bread(block 199921) failed [ 220.250945][ T7055] FAT-fs (loop6): Directory bread(block 199922) failed [ 220.255404][ T7055] FAT-fs (loop6): Directory bread(block 199923) failed [ 220.258731][ T7064] loop5: detected capacity change from 0 to 128 [ 220.260402][ T7064] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 220.264962][ T7055] FAT-fs (loop6): Directory bread(block 199916) failed [ 220.267923][ T7055] FAT-fs (loop6): Directory bread(block 199917) failed [ 220.417469][ T3898] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 220.605091][ T3898] usb 1-1: Using ep0 maxpacket: 16 [ 220.608467][ T3898] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 220.609812][ T3898] usb 1-1: config 0 has no interface number 0 [ 220.610764][ T3898] usb 1-1: config 0 interface 245 has no altsetting 0 [ 220.613656][ T3898] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 220.617903][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.620338][ T3898] usb 1-1: Product: syz [ 220.620950][ T3898] usb 1-1: Manufacturer: syz [ 220.621678][ T3898] usb 1-1: SerialNumber: syz [ 220.627170][ T3898] usb 1-1: config 0 descriptor?? [ 220.763206][ T7100] loop1: detected capacity change from 0 to 8192 [ 220.867908][ T3898] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 220.869090][ T3898] usb 1-1: selecting invalid altsetting 0 [ 220.870158][ T2835] pvrusb2: Invalid write control endpoint [ 220.872728][ T3898] usb 1-1: USB disconnect, device number 19 [ 220.916292][ T2835] pvrusb2: Invalid write control endpoint [ 220.917277][ T2835] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 220.918707][ T2835] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 220.919885][ T2835] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 220.921646][ T2835] pvrusb2: Device being rendered inoperable [ 220.928329][ T2835] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 220.931752][ T2835] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 220.936933][ T2835] pvrusb2: Attached sub-driver cx25840 [ 220.973529][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 220.974889][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 220.976656][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 220.977939][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 220.979259][ T2835] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 221.015196][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 221.017235][ T2835] tda9887 1-0043: creating new instance [ 221.018347][ T2835] tda9887 1-0043: tda988[5/6/7] found [ 221.019195][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 221.020581][ T2835] tda9887 1-0043: i2c i/o error: rc == -5 (should be 4) [ 221.022705][ T2835] tuner: 1-0043: Tuner 74 found with type(s) Radio TV. [ 221.027988][ T2835] pvrusb2: Attached sub-driver tuner [ 221.030135][ T2835] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 221.030597][ T7115] loop1: detected capacity change from 0 to 8192 [ 221.034295][ T2835] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 221.041302][ T3898] tda9887 1-0043: destroying instance [ 221.078574][ T7115] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.168312][ T7129] loop2: detected capacity change from 0 to 7 [ 221.173956][ T7129] loop2: p4 [ 221.174469][ T7129] loop2: partition table partially beyond EOD, truncated [ 221.180023][ T7129] loop2: p4 size 4294967295 extends beyond EOD, truncated [ 221.182608][ T7130] loop4: detected capacity change from 0 to 764 [ 221.198691][ T7130] Symlink component flag not implemented [ 221.199797][ T7130] Symlink component flag not implemented (15) [ 221.254986][ T7121] udevd[7121]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory [ 221.267284][ T7136] loop6: detected capacity change from 0 to 512 [ 221.354142][ T7140] loop5: detected capacity change from 0 to 2048 [ 221.464686][ T7143] 0x0000000000000000 [ 221.468628][ T3936] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 221.470823][ T3936] Buffer I/O error on dev loop5, logical block 0, async page read [ 221.472078][ T3936] ldm_validate_partition_table(): Disk read failed. [ 221.473007][ T3936] Dev loop5: unable to read RDB block 0 [ 221.473896][ T3936] loop5: unable to read partition table [ 221.474730][ T3936] loop5: partition table beyond EOD, truncated [ 221.767111][ T7177] netlink: 180 bytes leftover after parsing attributes in process `syz.1.817'. [ 222.005726][ T4368] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 222.185110][ T4368] usb 1-1: Using ep0 maxpacket: 16 [ 222.189818][ T4368] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 222.191597][ T4368] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 222.193373][ T4368] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 222.195717][ T4368] usb 1-1: config 1 interface 0 has no altsetting 0 [ 222.199954][ T4368] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 222.201521][ T4368] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.203994][ T4368] usb 1-1: Product: syz [ 222.204637][ T4368] usb 1-1: Manufacturer: syz [ 222.205614][ T4368] usb 1-1: SerialNumber: syz [ 222.413980][ T7173] netlink: 36 bytes leftover after parsing attributes in process `syz.0.815'. [ 222.416836][ T4368] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 222.579750][ T7203] loop6: detected capacity change from 0 to 16 [ 222.583010][ T7203] erofs: (device loop6): mounted with root inode @ nid 36. [ 222.739543][ T7214] af_packet: tpacket_rcv: packet too big, clamped from 65267 to 3958. macoff=82 [ 222.789681][ T7225] loop1: detected capacity change from 0 to 128 [ 222.809386][ T7225] syz.1.836: attempt to access beyond end of device [ 222.809386][ T7225] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 223.007805][ T7233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.839'. [ 223.280513][ T7243] mmap: syz.6.844 (7243): VmData 37564416 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 223.390407][ T7261] Unsupported NM flag settings (240) [ 223.429332][ T7266] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 223.547029][ T7278] fuse: Unknown parameter '0x0000000000000004' [ 223.578200][ T7282] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.580345][ T7282] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.584686][ T7282] netlink: 36 bytes leftover after parsing attributes in process `syz.4.860'. [ 223.614729][ T7282] netlink: 4 bytes leftover after parsing attributes in process `syz.4.860'. [ 224.076703][ T7287] overlayfs: failed to get inode (-116) [ 224.078145][ T7287] overlayfs: failed to get inode (-116) [ 224.273934][ T7299] device macvlan1 entered promiscuous mode [ 224.391207][ T7311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.392674][ T7311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 225.428037][ T7338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.883'. [ 225.842584][ T7350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 225.844083][ T7350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.685331][ T7173] usblp0:failed reading printer status (-110) [ 227.698795][ T3898] usb 1-1: USB disconnect, device number 20 [ 227.701996][ T3898] usblp0: removed [ 235.251014][ T7338] netlink: 60 bytes leftover after parsing attributes in process `syz.1.883'. [ 235.401784][ T7379] Illegal XDP return value 4294967294 on prog (id 46) dev N/A, expect packet loss! [ 235.412557][ T7382] netlink: 'syz.4.894': attribute type 2 has an invalid length. [ 235.416136][ T7382] netlink: 'syz.4.894': attribute type 8 has an invalid length. [ 235.419702][ T7382] netlink: 132 bytes leftover after parsing attributes in process `syz.4.894'. [ 235.685120][ T22] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 235.865074][ T22] usb 1-1: Using ep0 maxpacket: 16 [ 235.867393][ T22] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 235.868666][ T22] usb 1-1: config 0 has no interface number 0 [ 235.869609][ T22] usb 1-1: config 0 interface 245 has no altsetting 0 [ 235.872183][ T22] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 235.873514][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.874858][ T22] usb 1-1: Product: syz [ 235.875637][ T22] usb 1-1: Manufacturer: syz [ 235.876485][ T22] usb 1-1: SerialNumber: syz [ 235.878219][ T22] usb 1-1: config 0 descriptor?? [ 236.117988][ T22] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 236.119328][ T22] usb 1-1: selecting invalid altsetting 0 [ 236.120276][ T2835] pvrusb2: Invalid write control endpoint [ 236.124138][ T22] usb 1-1: USB disconnect, device number 21 [ 236.137516][ T2835] pvrusb2: Invalid write control endpoint [ 236.138538][ T2835] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 236.140780][ T2835] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 236.141994][ T2835] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 236.143817][ T2835] pvrusb2: Device being rendered inoperable [ 236.144932][ T2835] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 236.155597][ T2835] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 236.158208][ T2835] pvrusb2: Attached sub-driver cx25840 [ 236.175617][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 236.176873][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 236.178139][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 236.179329][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 236.180534][ T2835] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 236.201655][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 236.202812][ T2835] tda9887 1-0043: creating new instance [ 236.203663][ T2835] tda9887 1-0043: tda988[5/6/7] found [ 236.204934][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 236.207979][ T2835] tda9887 1-0043: i2c i/o error: rc == -5 (should be 4) [ 236.212416][ T2835] tuner: 1-0043: Tuner 74 found with type(s) Radio TV. [ 236.213617][ T2835] pvrusb2: Attached sub-driver tuner [ 236.214391][ T2835] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 236.219204][ T2835] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 236.222745][ T22] tda9887 1-0043: destroying instance [ 236.664522][ T7455] syzkaller1: tun_chr_ioctl cmd 1074025694 [ 236.798994][ T7469] usb usb8: usbfs: process 7469 (syz.0.923) did not claim interface 0 before use [ 236.940254][ T7475] netlink: 'syz.6.924': attribute type 4 has an invalid length. [ 237.095123][ T3898] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 237.203776][ T7479] netlink: 68 bytes leftover after parsing attributes in process `syz.4.927'. [ 237.298036][ T3898] usb 1-1: Using ep0 maxpacket: 16 [ 237.300063][ T3898] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 237.301287][ T3898] usb 1-1: config 0 has no interface number 0 [ 237.302441][ T3898] usb 1-1: config 0 interface 245 has no altsetting 0 [ 237.306057][ T3898] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 237.307412][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.308624][ T3898] usb 1-1: Product: syz [ 237.309279][ T3898] usb 1-1: Manufacturer: syz [ 237.309960][ T3898] usb 1-1: SerialNumber: syz [ 237.318163][ T3898] usb 1-1: config 0 descriptor?? [ 237.568806][ T3898] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 237.570145][ T3898] usb 1-1: selecting invalid altsetting 0 [ 237.571186][ T2835] pvrusb2: Invalid write control endpoint [ 237.578638][ T3898] usb 1-1: USB disconnect, device number 22 [ 237.599987][ T2835] pvrusb2: Invalid write control endpoint [ 237.600948][ T2835] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 237.602325][ T2835] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 237.603704][ T2835] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 237.606350][ T2835] pvrusb2: Device being rendered inoperable [ 237.607515][ T2835] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 237.609011][ T2835] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 237.611645][ T2835] pvrusb2: Attached sub-driver cx25840 [ 237.629573][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 237.630869][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 237.632073][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 237.633310][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 237.634730][ T2835] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 237.670588][ T7500] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.672000][ T7500] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.680295][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 237.681578][ T2835] tda9887 1-0043: creating new instance [ 237.682400][ T2835] tda9887 1-0043: tda988[5/6/7] found [ 237.683173][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 237.684362][ T2835] tda9887 1-0043: i2c i/o error: rc == -5 (should be 4) [ 237.688806][ T2835] tuner: 1-0043: Tuner 74 found with type(s) Radio TV. [ 237.698408][ T2835] pvrusb2: Attached sub-driver tuner [ 237.699289][ T2835] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 237.703463][ T2835] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 237.709118][ T3898] tda9887 1-0043: destroying instance [ 237.731112][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.733854][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.734794][ T7505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.739147][ T7505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 238.595175][ T3898] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 238.602534][ T7532] fuse: Unknown parameter 'f' [ 238.785685][ T3898] usb 1-1: Using ep0 maxpacket: 16 [ 238.789905][ T3898] usb 1-1: config 0 has an invalid interface number: 245 but max is 0 [ 238.791191][ T3898] usb 1-1: config 0 has no interface number 0 [ 238.792040][ T3898] usb 1-1: config 0 interface 245 has no altsetting 0 [ 238.794929][ T3898] usb 1-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=c6.fc [ 238.796839][ T3898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.798068][ T3898] usb 1-1: Product: syz [ 238.798724][ T3898] usb 1-1: Manufacturer: syz [ 238.801704][ T3898] usb 1-1: SerialNumber: syz [ 238.809555][ T3898] usb 1-1: config 0 descriptor?? [ 239.018044][ T3898] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 239.019271][ T3898] usb 1-1: selecting invalid altsetting 0 [ 239.020188][ T2835] pvrusb2: Invalid write control endpoint [ 239.022102][ T3898] usb 1-1: USB disconnect, device number 23 [ 239.070825][ T2835] pvrusb2: Invalid write control endpoint [ 239.071754][ T2835] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 239.073110][ T2835] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 239.074293][ T2835] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 239.077547][ T2835] pvrusb2: Device being rendered inoperable [ 239.079455][ T2835] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 239.082757][ T2835] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 239.084250][ T2835] pvrusb2: Attached sub-driver cx25840 [ 239.135895][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 239.137251][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 239.138512][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 239.139632][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 239.140846][ T2835] pvrusb2: Module ID 4 (tuner) for device Gotview USB 2.0 DVD 2 failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 239.189684][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 239.191114][ T2835] tda9887 1-0043: creating new instance [ 239.193022][ T2835] tda9887 1-0043: tda988[5/6/7] found [ 239.193856][ T2835] pvrusb2: Attempted to execute control transfer when device not ok [ 239.195216][ T2835] tda9887 1-0043: i2c i/o error: rc == -5 (should be 4) [ 239.196564][ T2835] tuner: 1-0043: Tuner 74 found with type(s) Radio TV. [ 239.200085][ T2835] pvrusb2: Attached sub-driver tuner [ 239.200937][ T2835] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 239.202881][ T2835] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 239.223003][ T3898] tda9887 1-0043: destroying instance [ 239.340517][ T7571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.965'. [ 239.342674][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 239.343983][ T7571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.965'. [ 239.481640][ T7578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.484329][ T7578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.782353][ T7605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.783792][ T7605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.869730][ T7607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 239.927722][ T7610] binder: 7609:7610 tried to acquire reference to desc 0, got 1 instead [ 239.930963][ T7610] binder: 7609:7610 got transaction with invalid data ptr [ 239.932159][ T7610] binder: 7609:7610 transaction async to 7609:0 failed 6/29201/-14, size 0-24 line 3333 [ 239.934480][ T4368] binder: undelivered TRANSACTION_COMPLETE [ 239.936341][ T4368] binder: undelivered TRANSACTION_ERROR: 29201 [ 239.942821][ T4368] binder: undelivered transaction 5, process died. [ 239.975146][ T4372] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 239.998610][ T7616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.000093][ T7616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.155105][ T4372] usb 1-1: Using ep0 maxpacket: 32 [ 240.157369][ T4372] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 240.158579][ T4372] usb 1-1: config 0 has no interface number 0 [ 240.159557][ T4372] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 240.161067][ T4372] usb 1-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0xE3, skipping [ 240.162511][ T4372] usb 1-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 240.166508][ T4372] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 240.167806][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.168936][ T4372] usb 1-1: Product: syz [ 240.169549][ T4372] usb 1-1: Manufacturer: syz [ 240.170250][ T4372] usb 1-1: SerialNumber: syz [ 240.172285][ T4372] usb 1-1: config 0 descriptor?? [ 240.173472][ T7599] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 240.177256][ T4372] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input2 [ 240.380463][ T4370] usb 1-1: USB disconnect, device number 24 [ 240.506542][ T7628] device syzkaller0 entered promiscuous mode [ 240.522807][ T7630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.524715][ T7630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.922006][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 240.935973][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.105596][ T7673] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.106995][ T7673] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.138597][ T7654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.140681][ T7654] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 241.485073][ T4372] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 241.675765][ T4372] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 241.677060][ T4372] usb 1-1: can't read configurations, error -71 [ 241.953804][ T7761] ALSA: seq fatal error: cannot create timer (-16) [ 242.565078][ T4372] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 242.741434][ T7797] netlink: 'syz.5.1015': attribute type 1 has an invalid length. [ 242.744319][ T7796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.745255][ T4372] usb 1-1: Using ep0 maxpacket: 16 [ 242.745767][ T7796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.748759][ T4372] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 242.750403][ T4372] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 242.752253][ T4372] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.761355][ T4372] usb 1-1: config 1 interface 0 has no altsetting 0 [ 242.764677][ T7797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.767793][ T4372] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 242.769322][ T4372] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.771850][ T4372] usb 1-1: Product: syz [ 242.772525][ T4372] usb 1-1: Manufacturer: syz [ 242.774492][ T4372] usb 1-1: SerialNumber: syz [ 242.796480][ T7797] bond1: (slave vlan2): making interface the new active one [ 242.799287][ T7797] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 242.838383][ T4977] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 242.987209][ T7786] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1013'. [ 242.992064][ T4372] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 26 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 243.424606][ T7817] Invalid option length (1047485) for dns_resolver key [ 243.454866][ T7814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1020'. [ 243.509159][ T7813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1013'. [ 243.511637][ T4372] usb 1-1: USB disconnect, device number 26 [ 243.523935][ T4372] usblp0: removed [ 243.792017][ T7827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 243.793514][ T7827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.334224][ T7845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.335923][ T7845] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.285182][ T4367] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 245.301913][ T7874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.304830][ T7874] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.375111][ T7877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.376664][ T7877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.381215][ T7877] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1041'. [ 245.475051][ T4367] usb 1-1: Using ep0 maxpacket: 16 [ 245.478199][ T4367] usb 1-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 245.479833][ T4367] usb 1-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 245.481274][ T4367] usb 1-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 245.483387][ T4367] usb 1-1: config 1 interface 0 has no altsetting 0 [ 245.486199][ T4367] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.487675][ T4367] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.488884][ T4367] usb 1-1: Product: syz [ 245.489546][ T4367] usb 1-1: Manufacturer: syz [ 245.490339][ T4367] usb 1-1: SerialNumber: syz [ 245.697174][ T7852] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1034'. [ 245.700358][ T4367] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 245.808523][ T7881] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 245.810450][ T7881] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 245.882462][ T4367] hid-generic 0080:0005:FFFFFFFE.0001: unknown main item tag 0x0 [ 245.883711][ T4367] hid-generic 0080:0005:FFFFFFFE.0001: unknown main item tag 0x0 [ 245.889633][ T4367] hid-generic 0080:0005:FFFFFFFE.0001: hidraw0: HID v0.03 Device [syz0] on syz1 [ 245.973311][ T7888] fido_id[7888]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 246.109992][ T7916] set_capacity_and_notify: 4 callbacks suppressed [ 246.110002][ T7916] loop4: detected capacity change from 0 to 128 [ 246.112286][ T7916] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 246.147887][ T7365] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 246.192179][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.193818][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.198101][ T7927] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1059'. [ 246.283360][ T7931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1034'. [ 247.172255][ T7964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 247.179902][ T7964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 247.379599][ T7966] device syzkaller0 entered promiscuous mode [ 247.780620][ T7977] device syzkaller0 entered promiscuous mode [ 247.805528][ T7980] loop4: detected capacity change from 0 to 128 [ 247.809584][ T7980] FAT-fs (loop4): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 247.904230][ T7978] block device autoloading is deprecated and will be removed. [ 247.993554][ C0] ------------[ cut here ]------------ [ 247.994523][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 247.995405][ T4372] usb 1-1: USB disconnect, device number 27 [ 247.996235][ C0] WARNING: CPU: 0 PID: 7970 at net/mac80211/rate.c:385 __rate_control_send_low+0x574/0x774 [ 247.998223][ C0] Modules linked in: [ 247.998886][ C0] CPU: 0 PID: 7970 Comm: syz.6.1073 Not tainted syzkaller #0 [ 248.000084][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025 [ 248.001608][ C0] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 248.002808][ C0] pc : __rate_control_send_low+0x574/0x774 [ 248.003680][ C0] lr : __rate_control_send_low+0x574/0x774 [ 248.004482][ C0] sp : ffff8000080075b0 [ 248.005063][ C0] x29: ffff800008007600 x28: ffff0000e65f3390 x27: 000000000000000c [ 248.006149][ C0] x26: dfff800000000000 x25: ffff0000e65f33a0 x24: ffff0000f25367a8 [ 248.007218][ C0] x23: 0000000000000040 x22: 1fffe0001ccbe674 x21: ffff0000e65f3398 [ 248.007643][ T4372] usblp0: removed [ 248.008328][ C0] x20: ffff0000e65f0ea0 x19: dfff800000000000 x18: 0000000000000000 [ 248.010014][ C0] x17: 6d5f65746172206e x16: ffff8000082d9364 x15: 62202c6666666666 [ 248.011121][ C0] x14: 0000000000000001 x13: 1ffff00002a7b9d4 x12: 0000000000ff0100 [ 248.012222][ C0] x11: ff00800008194238 x10: 0000000000000000 x9 : 69da552a9c758e00 [ 248.013354][ C0] x8 : 69da552a9c758e00 x7 : ffff800008314548 x6 : 0000000000000000 [ 248.014460][ C0] x5 : 0000000000000080 x4 : 0000000000000001 x3 : 0000000000000000 [ 248.015544][ C0] x2 : ffff800008006ec0 x1 : 0000000000000101 x0 : 0000000000000000 [ 248.016679][ C0] Call trace: [ 248.017133][ C0] __rate_control_send_low+0x574/0x774 [ 248.017890][ C0] rate_control_send_low+0x164/0x684 [ 248.018615][ C0] rate_control_get_rate+0x1a0/0x4c0 [ 248.019335][ C0] ieee80211_beacon_get_finish+0x2f4/0x5d8 [ 248.020154][ C0] ieee80211_beacon_get_ap+0xd5c/0x1128 [ 248.020908][ C0] __ieee80211_beacon_get+0xe24/0x12bc [ 248.021669][ C0] ieee80211_beacon_get_tim+0x70/0x44c [ 248.022439][ C0] mac80211_hwsim_beacon_tx+0x1e8/0x914 [ 248.023251][ C0] __iterate_interfaces+0x204/0x484 [ 248.023983][ C0] ieee80211_iterate_active_interfaces_atomic+0xd4/0x180 [ 248.024938][ C0] mac80211_hwsim_beacon+0xc8/0x1b8 [ 248.025654][ C0] __hrtimer_run_queues+0x434/0xc34 [ 248.026411][ C0] hrtimer_run_softirq+0x160/0x400 [ 248.027113][ C0] handle_softirqs+0x318/0xc60 [ 248.027766][ C0] __do_softirq+0x14/0x20 [ 248.028345][ C0] ____do_softirq+0x14/0x20 [ 248.028963][ C0] call_on_irq_stack+0x30/0x48 [ 248.029585][ C0] do_softirq_own_stack+0x20/0x2c [ 248.030261][ C0] __irq_exit_rcu+0x23c/0x438 [ 248.030892][ C0] irq_exit_rcu+0x14/0x84 [ 248.031564][ C0] el1_interrupt+0x38/0x54 [ 248.032235][ C0] el1h_64_irq_handler+0x18/0x24 [ 248.032966][ C0] el1h_64_irq+0x64/0x68 [ 248.033584][ C0] _raw_spin_unlock_irqrestore+0x58/0xac [ 248.034395][ C0] hrtimer_start_range_ns+0xa5c/0xc98 [ 248.035165][ C0] do_nanosleep+0x14c/0x4e4 [ 248.035827][ C0] hrtimer_nanosleep+0x154/0x2ac [ 248.036547][ C0] common_nsleep+0xa0/0xb8 [ 248.037195][ C0] __arm64_sys_clock_nanosleep+0x33c/0x378 [ 248.038010][ C0] invoke_syscall+0x98/0x2b4 [ 248.038679][ C0] el0_svc_common+0x138/0x258 [ 248.039333][ C0] do_el0_svc+0x58/0x130 [ 248.039934][ C0] el0_svc+0x58/0x128 [ 248.040508][ C0] el0t_64_sync_handler+0x84/0xf0 [ 248.041234][ C0] el0t_64_sync+0x18c/0x190 [ 248.041875][ C0] irq event stamp: 9417 [ 248.042457][ C0] hardirqs last enabled at (9416): [] exit_to_kernel_mode+0xcc/0xfc [ 248.043795][ C0] hardirqs last disabled at (9417): [] el1_dbg+0x24/0x80 [ 248.044991][ C0] softirqs last enabled at (9368): [] local_bh_enable+0x10/0x34 [ 248.046278][ C0] softirqs last disabled at (9379): [] __do_softirq+0x14/0x20 [ 248.047540][ C0] ---[ end trace 0000000000000000 ]--- [ 248.805694][ T2062] ieee802154 phy0 wpan0: encryption failed: -22 [ 248.806805][ T2062] ieee802154 phy1 wpan1: encryption failed: -22