last executing test programs: 17.642660348s ago: executing program 0 (id=4438): socket$kcm(0x10, 0x7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7fff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pivot_root(&(0x7f0000000000)='./cgroup\x00', &(0x7f0000000040)='./cgroup\x00') r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8}, @void}}}, 0x28}}, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x47ffffa, 0x60500) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@broadcast}}, {{@in=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000001c0)=0xe8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x494, 0x30, 0xffff, 0x70bd29, 0x0, {}, [{0x480, 0x1, [@m_police={0x47c, 0x1, 0x0, 0x0, {{0xb}, {0x450, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0xb, 0xffffffffffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, 0x400002, 0x4000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x6, 0x0, 0x0, 0x5, 0x0, 0x4e16, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ebe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x356, 0x0, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10000, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb7fe6bd0, 0x6, 0x1ffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x4, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x494}}, 0x0) 16.54433275s ago: executing program 0 (id=4441): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_connect$cdc_ncm(0x1, 0x12c, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x11a, 0x2, 0x1, 0x3, 0xc0, 0x64, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x40, 0x8, 0x7}, {0x6, 0x24, 0x1a, 0x4, 0x4}, [@country_functional={0xe, 0x24, 0x7, 0x0, 0xa58, [0x55, 0x6, 0x8000, 0x3]}, @mdlm_detail={0xb0, 0x24, 0x13, 0x4, "20204f6dc91ca5835eb31244c27cce7419b944adc96cc9ed1a1168eddf07cdaa0b8eee6563745b176efb0127146136185a73d072e746ffc68527dc75f4f47c8cd8755ea161cfc51e19b424b50ac7b3f4698d83fac9dca81b596ebad85e0bb98e7fbe3fa5c5d1a8f5dd0c25cc2ac0d04797ce69c1b9d63f1ba758209f14be5c50d8e36b82ec5289dce5e851fd2530c54fbf05b31262610cb8964d37ae653286be1c2cc5a92e1e55091c3ea445"}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0xe, 0x7, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x3, 0x5}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x0, 0x1, 0x6}}}}}}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.831254692s ago: executing program 0 (id=4444): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x2}}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x13, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @random="ed730af9083b"}, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.703031154s ago: executing program 3 (id=4449): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r6, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) write$FUSE_INIT(r6, &(0x7f0000006500)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x841}, 0x40890) 12.616984945s ago: executing program 1 (id=4450): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4) 12.344798111s ago: executing program 1 (id=4451): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x18) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) 11.485892357s ago: executing program 1 (id=4452): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) r4 = dup(r3) getpeername$packet(r4, 0x0, 0x0) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2000007d, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r7 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r7, 0x11, 0x0, 0x2) r8 = socket(0x10, 0x803, 0x0) write(r8, &(0x7f0000000240)="aefc00001a0025f00385bc04fef7681d0a0b49ff708800008002280008020200ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 11.436494798s ago: executing program 3 (id=4453): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) clock_settime(0xfffffffc, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) connect$netlink(r4, &(0x7f0000000280)=@proc={0x10, 0x0, 0x25dfdbfc, 0x4000}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c00000020000f0000f9010000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00', @ANYBLOB], 0x24}}, 0x20000010) 10.235820352s ago: executing program 1 (id=4455): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x28, 0x12, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xa000, 0x1a058}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40054) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 9.935837047s ago: executing program 0 (id=4456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) time(0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000004c0)={0x2, 0x7fd, 0x6, 0x66, 0x8, "1d4ab836dcabbf07484c9700000100", 0x7fffffff, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=@ipv4_newrule={0x24, 0x20, 0x400, 0x70bd2a, 0x25dfdbfb, {0x2, 0x0, 0x20, 0x5, 0x9, 0x0, 0x0, 0x8, 0x1d}, [@FRA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000021"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000040000850000001b000000b700000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000100), 0x1, 0x4c4, &(0x7f0000000f40)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc9ffb}]}) 9.164832552s ago: executing program 3 (id=4457): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(&(0x7f0000000540)='ocfs2\x00', 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)) r2 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000300)=r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 8.510763275s ago: executing program 0 (id=4458): bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x101c02, 0x26) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x4048001) read$eventfd(r0, &(0x7f0000000280), 0x8) 7.796785298s ago: executing program 3 (id=4460): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) poll(0x0, 0x0, 0x5) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r6, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) socket$xdp(0x2c, 0x3, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000640)=0xffffffff, &(0x7f0000000680)=0x4) time(0x0) 6.6815819s ago: executing program 1 (id=4461): syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030097850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x1, 0x2}]}, 0x24}}, 0x20000000) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f00000003c0)={0x7, {{0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0x6}}, {{0xa, 0x4e21, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1c000000}}}, 0x108) unshare(0x64000600) 4.279440607s ago: executing program 2 (id=4462): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000002380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f00000004c0)={0x50, 0x0, r7, {0x7, 0x9, 0x0, 0x18292, 0x0, 0x0, 0x0, 0xffffffff}}, 0x50) read$FUSE(r6, &(0x7f0000006580)={0x2020, 0x0, 0x0}, 0x2020) truncate(&(0x7f0000000080)='./file0\x00', 0x8001) write$FUSE_INIT(r6, &(0x7f0000006500)={0x50, 0x0, r8, {0x7, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}}, 0x50) faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) write$uinput_user_dev(r1, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x841}, 0x40890) 3.812438096s ago: executing program 0 (id=4463): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000000c0)={0x2, 'veth1_virt_wifi\x00'}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0xfffffffffffffffe, 0x0) read$msr(r1, &(0x7f0000004c00)=""/102392, 0x18ff8) socket$tipc(0x1e, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) eventfd(0x3c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000640)=0x400000bce) syz_open_dev$video(0x0, 0xa7, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$ENABLE_STATS(0x20, &(0x7f0000000600), 0x4) close(0x3) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) migrate_pages(0x0, 0x3, &(0x7f00000002c0)=0x7f, &(0x7f0000000300)=0xa) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x13, &(0x7f0000000700)=ANY=[@ANYBLOB="182000003e27e3080e525d797d4f960f3c5a31b41db82d3f23657db4092985fc2a2424e276bb5823733b", @ANYRES32=r3, @ANYBLOB="000000007d4b0000950000000000000085000000b500000018630000070000000000000000000000b7080000000000007b8af8ff00000000b7080000c50c00007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000140)='GPL\x00', 0x3, 0x3b, &(0x7f00000005c0)=""/59, 0x41100, 0x62, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000007c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x7, 0x9, 0x9}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB]) openat(0xffffffffffffff9c, 0x0, 0x351142, 0x1cd) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) quotactl_fd$Q_GETQUOTA(r2, 0xffffffff80000700, r4, &(0x7f00000001c0)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000e006119c000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) 2.887710854s ago: executing program 2 (id=4464): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000180)={'ip6gretap0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef) 2.682452158s ago: executing program 2 (id=4465): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4000, &(0x7f0000000c00)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@user_xattr}, {@mblk_io_submit}, {@resuid}, {@norecovery}]}, 0x8, 0x44d, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001f40)=ANY=[@ANYBLOB="000000004c900200290000000300010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000020000000000000ffffffffffd9ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ff"]) 2.433199982s ago: executing program 3 (id=4466): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) socketpair(0x21, 0x1, 0xb, &(0x7f0000000000)) setresuid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb0e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r5, 0x10c, 0x9, &(0x7f0000000200), &(0x7f0000000280)=0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000040)='timerslack_ns\x00') socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="0300"}) writev(r6, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x300}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='mm_vmscan_write_folio\x00', r4, 0x0, 0x200}, 0x18) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='msdos\x00', 0x208000, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) 2.202122077s ago: executing program 1 (id=4467): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2000000002ffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x138, 0x10, 0x713, 0x70bd28, 0x0, {{@in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00', 0x0, 0x3}, {@in=@multicast2, 0x0, 0x32}, @in6=@mcast2, {0x0, 0x0, 0xfffffffffffeffff, 0x0, 0x4, 0x0, 0x0, 0x2}, {0x0, 0x5d1}, {0x9, 0x2, 0x3}, 0x70bd2d, 0x3506, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x24000010}, 0x800) 2.000698121s ago: executing program 2 (id=4468): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040), 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) fsopen(&(0x7f0000000540)='ocfs2\x00', 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, &(0x7f0000000080)) r2 = getpid() ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000300)=r2) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x48, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'macsec0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 1.171138037s ago: executing program 3 (id=4469): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@getlink={0x28, 0x12, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xa000, 0x1a058}, [@IFLA_LINK={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40054) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 412.379812ms ago: executing program 2 (id=4470): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB='dots,dots,dots,allow_utime=00000000000000000002001,uid=', @ANYRESHEX=0x0, @ANYBLOB="00009eab64db9cb15f36611f70311189aa2fe9e35c97f73840d81028fcef1866bbb9d16f56bdb26f58d0bc62d5b331a1e09c9857cff1bf0b9f5f8e931fcb4526272ffcee8ae33aad7fa5ad871280da310f1160b28c446d9119f37a3738ca805cbaf6f79e9ff705579a3711283f053bd002000f67945de3662fbb4599468a3af5479006bee07470daa0c30bf80be400aff9fdd1078828429282d787782960a00a825cd64262eaa26c24a5ec478e17dc76c42b4594362564803731"], 0x1, 0x256, &(0x7f0000002200)="$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") 0s ago: executing program 2 (id=4471): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in=@multicast1}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x1}, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075b, 0xfffffffa}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x29}}, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) kernel console output (not intermixed with test programs): [ 1854.549707][ T9619] usb 4-1: config 0 descriptor?? [ 1854.747698][ T9619] usb 4-1: can't set config #0, error -71 [ 1854.789901][ T9619] usb 4-1: USB disconnect, device number 79 [ 1855.763760][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1855.770350][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1856.215627][ T9619] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 1856.376838][T20458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3673'. [ 1857.471902][ T9619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1857.487973][ T9619] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1857.511428][ T9619] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1857.560761][ T9619] usb 3-1: Manufacturer: syz [ 1857.620092][ T9619] usb 3-1: config 0 descriptor?? [ 1857.638300][ T9619] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1857.844828][T20465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3675'. [ 1857.874422][T15682] usb 3-1: USB disconnect, device number 80 [ 1858.788528][ T9619] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1859.100235][ T9619] usb 4-1: Using ep0 maxpacket: 32 [ 1859.924574][ T9619] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1859.935525][ T9619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1859.957599][ T9619] usb 4-1: config 0 descriptor?? [ 1859.996616][ T9619] as10x_usb: device has been detected [ 1860.016774][ T9619] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1860.066561][ T9619] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1860.095773][ T9619] as10x_usb: error during firmware upload part1 [ 1860.114172][ T9619] Registered device nBox DVB-T Dongle [ 1860.228184][ T9619] usb 4-1: USB disconnect, device number 80 [ 1860.289287][ T9619] Unregistered device nBox DVB-T Dongle [ 1860.319541][ T9619] as10x_usb: device has been disconnected [ 1860.429952][T20488] syz.0.3680: attempt to access beyond end of device [ 1860.429952][T20488] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1860.632029][T20488] syz.0.3680: attempt to access beyond end of device [ 1860.632029][T20488] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1860.646333][T20488] Mount JFS Failure: -5 [ 1860.824233][T20493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3682'. [ 1861.552886][T20488] jfs_mount failed w/return code = -5 [ 1862.788813][T20507] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3685'. [ 1866.044757][T20538] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3691'. [ 1867.045403][T20547] QAT: Device 197 not found [ 1868.384592][ T787] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1868.709686][T20559] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3697'. [ 1868.711068][ T787] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1868.742616][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.774197][ T787] usb 1-1: config 0 descriptor?? [ 1868.808259][ T787] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1869.725314][ T787] gp8psk: usb in 128 operation failed. [ 1869.751615][ T787] gp8psk: usb in 137 operation failed. [ 1869.774160][ T787] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1869.791043][ T787] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1869.808031][ T787] usb 1-1: media controller created [ 1869.839809][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1869.875027][ T787] gp8psk_fe: Frontend attached [ 1869.880141][ T787] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1869.897834][ T787] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1870.024742][ T787] gp8psk: usb in 138 operation failed. [ 1870.032057][ T787] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1870.053008][ T787] gp8psk: found Genpix USB device pID = 203 (hex) [ 1870.063510][ T787] usb 1-1: USB disconnect, device number 72 [ 1870.212538][ T787] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1871.076506][T20588] QAT: Device 197 not found [ 1871.798589][T20593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3706'. [ 1871.976249][T20603] syz.3.3707: attempt to access beyond end of device [ 1871.976249][T20603] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1872.069725][T20603] syz.3.3707: attempt to access beyond end of device [ 1872.069725][T20603] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1872.084015][T20603] Mount JFS Failure: -5 [ 1872.088823][T20603] jfs_mount failed w/return code = -5 [ 1873.697371][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3710'. [ 1874.759960][T15682] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1874.986170][T15682] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1875.065687][T20634] QAT: Device 197 not found [ 1875.765836][T15682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1875.959264][T15682] usb 4-1: config 0 descriptor?? [ 1876.032386][T15682] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1876.272245][T15682] gp8psk: usb in 128 operation failed. [ 1876.282987][T15682] gp8psk: usb in 137 operation failed. [ 1876.289068][T15682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1876.309001][T15682] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1876.319397][T15682] usb 4-1: media controller created [ 1876.484703][T15682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1876.601377][T20642] syz.2.3717: attempt to access beyond end of device [ 1876.601377][T20642] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1876.625247][T20642] syz.2.3717: attempt to access beyond end of device [ 1876.625247][T20642] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1876.639162][T20642] Mount JFS Failure: -5 [ 1876.644099][T20642] jfs_mount failed w/return code = -5 [ 1877.348260][T15682] gp8psk_fe: Frontend attached [ 1877.440279][T15682] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1877.483548][T15682] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1877.730288][T20659] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3721'. [ 1877.973859][T15682] gp8psk: usb in 138 operation failed. [ 1877.985021][T15682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1877.995876][T15682] gp8psk: found Genpix USB device pID = 203 (hex) [ 1878.086758][T15682] usb 4-1: USB disconnect, device number 81 [ 1878.109750][ T9619] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1878.312300][T15682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1878.448225][ T9619] usb 1-1: Using ep0 maxpacket: 32 [ 1878.455660][ T9619] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1878.465929][ T9619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1878.481492][ T9619] usb 1-1: config 0 descriptor?? [ 1878.501940][ T9619] as10x_usb: device has been detected [ 1878.508210][ T9619] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1878.531948][ T9619] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1878.548407][ T9619] as10x_usb: error during firmware upload part1 [ 1878.566456][ T9619] Registered device nBox DVB-T Dongle [ 1878.726157][T15682] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1878.758541][ T9619] usb 1-1: USB disconnect, device number 73 [ 1878.814327][ T9619] Unregistered device nBox DVB-T Dongle [ 1878.822498][ T9619] as10x_usb: device has been disconnected [ 1879.141432][T15682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 1879.151883][T15682] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 1879.162226][T15682] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 1879.174454][T15682] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 1879.266007][T20671] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3724'. [ 1879.976508][T15682] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1879.987951][T15682] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1880.002008][T15682] usb 4-1: config 0 descriptor?? [ 1880.612935][T20651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1880.703483][T20651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1880.871740][T15682] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 1880.879817][T15682] hdpvr 4-1:0.0: device init failed [ 1880.886523][T15682] hdpvr: probe of 4-1:0.0 failed with error -12 [ 1880.912629][T15682] usb 4-1: USB disconnect, device number 82 [ 1881.191427][T20679] QAT: Device 197 not found [ 1882.362197][ T9619] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1882.690854][ T9619] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1882.717900][ T9619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1882.803359][ T9619] usb 1-1: config 0 descriptor?? [ 1882.915877][ T9619] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1883.194306][ T787] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1883.231543][ T9619] gp8psk: usb in 128 operation failed. [ 1883.267382][ T9619] gp8psk: usb in 137 operation failed. [ 1883.289137][ T9619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1883.326648][ T9619] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1883.402195][ T9619] usb 1-1: media controller created [ 1883.471696][ T787] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1883.501236][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1883.560983][ T787] usb 2-1: Product: syz [ 1883.595879][ T787] usb 2-1: Manufacturer: syz [ 1883.641505][ T787] usb 2-1: SerialNumber: syz [ 1883.655795][ T9619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1883.671654][ T787] usb 2-1: config 0 descriptor?? [ 1883.765025][ T9619] gp8psk_fe: Frontend attached [ 1883.783706][ T9619] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1883.801112][ T9619] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1883.880488][T20701] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3732'. [ 1884.123730][ T9619] gp8psk: usb in 138 operation failed. [ 1884.138957][ T9619] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1884.150170][ T9619] gp8psk: found Genpix USB device pID = 203 (hex) [ 1884.997784][ T9619] usb 1-1: USB disconnect, device number 74 [ 1885.024710][ T787] usb 2-1: f81604_read: reg: 105 failed: -EPROTO [ 1885.048598][ T787] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO [ 1885.074890][ T787] f81604: probe of 2-1:0.0 failed with error -71 [ 1885.108022][ T787] usb 2-1: USB disconnect, device number 63 [ 1885.187741][ T9619] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1887.727679][ T787] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1887.986637][ T787] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1888.009046][T10570] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1888.017631][ T787] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1888.068996][ T787] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.080623][ T787] usb 4-1: config 220 has no interface number 2 [ 1888.087308][ T787] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1888.101293][ T787] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1888.110608][ T787] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1888.118262][ T787] usb 4-1: config 220 interface 1 has no altsetting 0 [ 1888.218860][ T787] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1888.229027][ T787] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1888.238556][ T787] usb 4-1: Product: syz [ 1888.245306][ T787] usb 4-1: Manufacturer: syz [ 1888.251180][ T787] usb 4-1: SerialNumber: syz [ 1888.318500][T10570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1888.385767][T10570] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1888.396365][T10570] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1888.404946][T10570] usb 2-1: Manufacturer: syz [ 1888.416159][T10570] usb 2-1: config 0 descriptor?? [ 1888.426567][T10570] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1888.520058][ T787] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1888.527785][ T787] usb 4-1: No valid video chain found. [ 1888.534662][ T787] usb 4-1: selecting invalid altsetting 0 [ 1888.576450][ T787] usb 4-1: selecting invalid altsetting 0 [ 1888.584383][ T787] usbtest: probe of 4-1:220.1 failed with error -22 [ 1888.609925][ T787] usb 4-1: USB disconnect, device number 83 [ 1888.661618][T10570] usb 2-1: USB disconnect, device number 64 [ 1889.492021][ T9619] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1889.722639][ T9619] usb 1-1: device descriptor read/64, error -71 [ 1890.978667][ T9619] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1891.117300][T20751] syz.2.3744: attempt to access beyond end of device [ 1891.117300][T20751] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1891.143503][T20751] syz.2.3744: attempt to access beyond end of device [ 1891.143503][T20751] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1891.159729][T20751] Mount JFS Failure: -5 [ 1891.164849][T20751] jfs_mount failed w/return code = -5 [ 1891.194923][ T9619] usb 1-1: device descriptor read/64, error -71 [ 1891.420501][ T9619] usb usb1-port1: attempt power cycle [ 1891.525004][T20755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3745'. [ 1891.953540][ T9619] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1892.025765][ T9619] usb 1-1: device descriptor read/8, error -71 [ 1892.337995][ T9619] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1892.492492][ T9619] usb 1-1: device descriptor read/8, error -71 [ 1892.645411][ T9619] usb usb1-port1: unable to enumerate USB device [ 1898.356552][T20807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3756'. [ 1898.599896][ T9619] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1898.837582][ T9619] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1898.848675][ T9619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1898.868080][ T9619] usb 4-1: config 0 descriptor?? [ 1898.882087][ T9619] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1899.241368][ T9619] gp8psk: usb in 128 operation failed. [ 1899.265842][ T9619] gp8psk: usb in 137 operation failed. [ 1899.295891][ T9619] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1899.411708][ T9619] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1899.488788][ T9619] usb 4-1: media controller created [ 1899.849305][ T9619] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1899.962155][ T9619] gp8psk_fe: Frontend attached [ 1900.012143][ T9619] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1900.053925][ T9619] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1900.154623][ T9619] gp8psk: usb in 138 operation failed. [ 1900.163978][ T9619] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1900.176650][ T9619] gp8psk: found Genpix USB device pID = 203 (hex) [ 1900.189713][ T9619] usb 4-1: USB disconnect, device number 84 [ 1900.342565][ T9619] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1900.550290][T20833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3764'. [ 1901.252701][T20837] netlink: 'syz.1.3766': attribute type 27 has an invalid length. [ 1901.379485][T15682] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1901.583325][T15682] usb 3-1: no configurations [ 1901.590954][T15682] usb 3-1: can't read configurations, error -22 [ 1901.786159][T15682] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1902.095824][T15682] usb 3-1: no configurations [ 1902.106056][T15682] usb 3-1: can't read configurations, error -22 [ 1902.125579][T15682] usb usb3-port1: attempt power cycle [ 1903.296496][T15682] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1903.464503][T15682] usb 3-1: device descriptor read/8, error -71 [ 1904.519024][T15682] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1904.573375][T15682] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1904.586162][T15682] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1904.632438][T15682] usb 3-1: config 0 descriptor?? [ 1904.666945][T15682] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1904.811557][T13397] Bluetooth: hci1: command 0x0406 tx timeout [ 1904.880530][T15682] gp8psk: usb in 128 operation failed. [ 1904.897171][T15682] gp8psk: usb in 137 operation failed. [ 1904.902978][T15682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1904.935288][T15682] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1904.955036][T15682] usb 3-1: media controller created [ 1905.046173][T15682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1905.079363][T15682] gp8psk_fe: Frontend attached [ 1905.084477][T15682] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1905.093030][T15682] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1905.114145][T10570] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1905.158813][T15682] gp8psk: usb in 138 operation failed. [ 1905.168144][T15682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1905.178745][T15682] gp8psk: found Genpix USB device pID = 203 (hex) [ 1905.423054][T15682] usb 3-1: USB disconnect, device number 84 [ 1905.877692][T20869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3776'. [ 1905.896603][T20868] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3775'. [ 1905.924404][T15682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1905.949826][T10570] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1905.967783][T10570] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1905.983762][T10570] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1905.995929][T10570] usb 1-1: config 220 has no interface number 2 [ 1906.003554][T10570] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1906.024314][T10570] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1906.034679][T10570] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1906.043223][T10570] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1906.193652][T10570] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1906.214333][T10570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1906.236304][T10570] usb 1-1: Product: syz [ 1906.241669][T10570] usb 1-1: Manufacturer: syz [ 1906.259612][T10570] usb 1-1: SerialNumber: syz [ 1906.504539][T10570] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1906.520033][T10570] usb 1-1: No valid video chain found. [ 1906.537070][T10570] usb 1-1: selecting invalid altsetting 0 [ 1906.567892][T10570] usb 1-1: selecting invalid altsetting 0 [ 1906.588420][T10570] usbtest: probe of 1-1:220.1 failed with error -22 [ 1906.613948][T10570] usb 1-1: USB disconnect, device number 79 [ 1906.620551][ T9619] usb 3-1: new low-speed USB device number 85 using dummy_hcd [ 1906.865412][ T9619] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1906.876830][ T9619] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1906.885564][ T9619] usb 3-1: can't read configurations, error -71 [ 1907.056157][T10570] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1907.260054][T10570] usb 4-1: no configurations [ 1907.272336][T10570] usb 4-1: can't read configurations, error -22 [ 1907.462587][T10570] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1907.920037][T10570] usb 4-1: no configurations [ 1907.928440][T10570] usb 4-1: can't read configurations, error -22 [ 1907.956649][T10570] usb usb4-port1: attempt power cycle [ 1908.422320][T10570] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 1908.533467][T10570] usb 4-1: no configurations [ 1908.538409][T10570] usb 4-1: can't read configurations, error -22 [ 1908.724096][T10570] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 1908.808345][T10570] usb 4-1: no configurations [ 1908.820489][T10570] usb 4-1: can't read configurations, error -22 [ 1908.827698][T10570] usb usb4-port1: unable to enumerate USB device [ 1909.599183][T20908] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3786'. [ 1910.311475][T10570] usb 1-1: new full-speed USB device number 80 using dummy_hcd [ 1910.602000][T10570] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1910.616216][T10570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1910.625158][T10570] usb 1-1: Product: syz [ 1910.629611][T10570] usb 1-1: Manufacturer: syz [ 1910.863314][T20915] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3787'. [ 1910.891834][T10570] usb 1-1: SerialNumber: syz [ 1911.640789][T10570] usb 1-1: config 0 descriptor?? [ 1911.986842][T10570] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1912.111180][T20924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3789'. [ 1912.691995][T15682] usb 2-1: new low-speed USB device number 65 using dummy_hcd [ 1912.932451][T15682] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1912.983601][T15682] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1913.038237][T15682] usb 2-1: can't read configurations, error -71 [ 1913.974335][T10570] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 1914.219473][ T786] usb 1-1: USB disconnect, device number 80 [ 1914.454405][T15682] usb 2-1: new full-speed USB device number 67 using dummy_hcd [ 1914.875776][T15682] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 1914.985905][T15682] usb 2-1: config 0 has no interface number 0 [ 1914.999492][T15682] usb 2-1: config 0 interface 104 has no altsetting 0 [ 1915.020287][T15682] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 1915.029818][T15682] usb 2-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1915.038732][T15682] usb 2-1: Product: syz [ 1915.062335][T15682] usb 2-1: Manufacturer: syz [ 1915.067924][T15682] usb 2-1: SerialNumber: syz [ 1915.093385][T15682] usb 2-1: config 0 descriptor?? [ 1916.175363][ T50] Bluetooth: hci1: command 0x0406 tx timeout [ 1916.490431][T20958] netlink: 'syz.1.3795': attribute type 14 has an invalid length. [ 1917.136907][T15682] usb 2-1: USB disconnect, device number 67 [ 1917.176041][T20955] syz.2.3798: attempt to access beyond end of device [ 1917.176041][T20955] loop2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 1917.522337][ T786] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1917.727281][ T786] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1917.765748][ T786] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1917.811505][ T786] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.853911][ T786] usb 1-1: config 220 has no interface number 2 [ 1917.864920][ T786] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1917.880657][ T786] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1917.930794][ T786] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1917.960715][ T786] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1917.982520][ T786] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1917.992783][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1918.009157][ T786] usb 1-1: Product: syz [ 1918.020005][ T786] usb 1-1: Manufacturer: syz [ 1918.028234][ T786] usb 1-1: SerialNumber: syz [ 1918.227945][T10570] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 1918.227961][T15682] usb 2-1: new low-speed USB device number 68 using dummy_hcd [ 1918.365220][ T786] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1918.375707][ T786] usb 1-1: No valid video chain found. [ 1918.393361][ T786] usb 1-1: selecting invalid altsetting 0 [ 1918.477307][T15682] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1918.547293][T15682] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1918.615219][ T786] usb 1-1: selecting invalid altsetting 0 [ 1918.631798][T15682] usb 2-1: can't read configurations, error -71 [ 1918.641633][ T786] usbtest: probe of 1-1:220.1 failed with error -22 [ 1918.691817][ T786] usb 1-1: USB disconnect, device number 81 [ 1919.335526][T10570] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1919.949355][T10570] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1919.993045][T10570] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1920.003046][T10570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1920.011785][T10570] usb 4-1: SerialNumber: syz [ 1920.396850][T10570] usb 4-1: 0:2 : does not exist [ 1920.438061][T10570] usb 4-1: USB disconnect, device number 89 [ 1921.118087][T20805] udevd[20805]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1921.418054][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1921.425431][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1922.087202][T15682] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 1922.343769][T10570] usb 2-1: new low-speed USB device number 70 using dummy_hcd [ 1923.211753][T15682] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 1923.223624][T15682] usb 4-1: config 0 has no interface number 0 [ 1923.230335][T15682] usb 4-1: config 0 interface 104 has no altsetting 0 [ 1923.243565][T15682] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 1923.403542][T15682] usb 4-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1923.412087][T15682] usb 4-1: Product: syz [ 1923.417281][T15682] usb 4-1: Manufacturer: syz [ 1923.422126][T15682] usb 4-1: SerialNumber: syz [ 1923.445397][T10570] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1923.446752][T15682] usb 4-1: config 0 descriptor?? [ 1923.521319][T21011] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3814'. [ 1924.312061][T10570] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1924.320513][T10570] usb 2-1: can't read configurations, error -71 [ 1929.223139][T21047] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3824'. [ 1930.059159][T10570] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1931.506175][T10570] usb 2-1: Using ep0 maxpacket: 32 [ 1931.629977][T21060] syz.0.3827: attempt to access beyond end of device [ 1931.629977][T21060] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1931.648437][T21060] syz.0.3827: attempt to access beyond end of device [ 1931.648437][T21060] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1931.664263][T21060] Mount JFS Failure: -5 [ 1931.668976][T21060] jfs_mount failed w/return code = -5 [ 1931.744693][T10570] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1931.759562][T10570] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1931.769799][T10570] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1931.807331][T10570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1931.851491][T10570] usb 2-1: config 0 descriptor?? [ 1932.148232][T15682] usb 4-1: USB disconnect, device number 90 [ 1933.520392][T10570] usb 2-1: USB disconnect, device number 72 [ 1935.711781][T21109] syz.0.3839: attempt to access beyond end of device [ 1935.711781][T21109] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1935.742269][T21109] syz.0.3839: attempt to access beyond end of device [ 1935.742269][T21109] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1935.777752][T21109] Mount JFS Failure: -5 [ 1935.786439][T21109] jfs_mount failed w/return code = -5 [ 1940.531334][T21140] QAT: Device 197 not found [ 1943.182350][T21160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3852'. [ 1943.308209][T15682] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1943.613895][T15682] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1943.622643][T15682] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1943.639970][T15682] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1943.654920][T15682] usb 2-1: config 220 has no interface number 2 [ 1943.664605][T15682] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1943.682307][T15682] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1943.702943][T15682] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1943.735245][T15682] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1943.764219][T15682] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1943.775978][T15682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1943.793938][T15682] usb 2-1: Product: syz [ 1943.802258][T15682] usb 2-1: Manufacturer: syz [ 1943.821320][T15682] usb 2-1: SerialNumber: syz [ 1944.094865][T15682] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1944.155647][T15682] usb 2-1: No valid video chain found. [ 1944.172973][T15682] usb 2-1: selecting invalid altsetting 0 [ 1944.224952][T15682] usb 2-1: selecting invalid altsetting 0 [ 1944.231752][T15682] usbtest: probe of 2-1:220.1 failed with error -22 [ 1944.274968][T15682] usb 2-1: USB disconnect, device number 73 [ 1945.072113][T15682] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1945.145024][T21177] QAT: Device 197 not found [ 1945.254342][T15682] usb 2-1: device descriptor read/64, error -71 [ 1946.119887][T15682] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1946.305857][T15682] usb 2-1: device descriptor read/64, error -71 [ 1946.470758][T15682] usb usb2-port1: attempt power cycle [ 1946.985706][T15682] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1947.030291][T15682] usb 2-1: device descriptor read/8, error -71 [ 1947.192133][T21191] netlink: 'syz.3.3863': attribute type 10 has an invalid length. [ 1947.218059][T21191] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1947.328036][T15682] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1947.393660][T15682] usb 2-1: device descriptor read/8, error -71 [ 1947.554000][T15682] usb usb2-port1: unable to enumerate USB device [ 1948.077528][T21201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1948.101005][T21201] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1948.845931][T15682] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 1949.092731][T15682] usb 4-1: too many configurations: 67, using maximum allowed: 8 [ 1949.724251][T15682] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1949.734254][T15682] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1949.743060][T15682] usb 4-1: Product: syz [ 1949.748205][T15682] usb 4-1: Manufacturer: syz [ 1949.753152][T15682] usb 4-1: SerialNumber: syz [ 1949.952481][T15682] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 1950.002461][ T786] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1950.440726][T15682] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1950.940600][T10570] usb 4-1: USB disconnect, device number 91 [ 1951.165819][ T786] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 1951.177952][ T786] ath9k_htc: Failed to initialize the device [ 1951.193090][T10570] usb 4-1: ath9k_htc: USB layer deinitialized [ 1951.221708][T15682] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1951.237435][T15682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1951.253294][T15682] usb 1-1: config 0 descriptor?? [ 1951.270608][T15682] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1951.488827][T15682] gp8psk: usb in 128 operation failed. [ 1951.499529][T15682] gp8psk: usb in 137 operation failed. [ 1951.505523][T15682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1951.530040][T15682] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1951.546142][T15682] usb 1-1: media controller created [ 1951.632807][T15682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1951.689138][T15682] gp8psk_fe: Frontend attached [ 1951.711618][T15682] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1951.729761][T15682] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1951.892892][T15682] gp8psk: usb in 138 operation failed. [ 1951.924680][T15682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1951.941465][T15682] gp8psk: found Genpix USB device pID = 203 (hex) [ 1951.957523][T15682] usb 1-1: USB disconnect, device number 82 [ 1951.999766][T10570] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1952.134631][T15682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1952.171278][T10570] usb 2-1: device descriptor read/64, error -71 [ 1952.454441][T21247] netlink: 'syz.3.3880': attribute type 27 has an invalid length. [ 1952.502475][T10570] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1953.139255][T10570] usb 2-1: device descriptor read/64, error -71 [ 1953.325745][T10570] usb usb2-port1: attempt power cycle [ 1953.776488][T21263] QAT: Device 197 not found [ 1953.977469][T10570] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1954.055888][T10570] usb 2-1: device descriptor read/8, error -71 [ 1954.244792][T21265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3885'. [ 1954.522238][T10570] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1954.564895][T21266] syz.2.3884: attempt to access beyond end of device [ 1954.564895][T21266] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1954.622322][T21266] syz.2.3884: attempt to access beyond end of device [ 1954.622322][T21266] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1954.635983][T21266] Mount JFS Failure: -5 [ 1954.642292][T21266] jfs_mount failed w/return code = -5 [ 1954.716981][T10570] usb 2-1: device descriptor read/8, error -71 [ 1955.025642][T10570] usb usb2-port1: unable to enumerate USB device [ 1955.591705][T15682] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1955.872105][T15682] usb 1-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 1955.882663][T15682] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1956.095213][T15682] usb 1-1: config 0 descriptor?? [ 1956.137077][T15682] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1956.362965][T15682] gp8psk: usb in 128 operation failed. [ 1956.371147][T15682] gp8psk: usb in 137 operation failed. [ 1956.376943][T15682] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1956.392171][T15682] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 1956.401669][T15682] usb 1-1: media controller created [ 1956.511508][T15682] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1956.536629][T15682] gp8psk_fe: Frontend attached [ 1956.542496][T15682] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 1956.551164][T15682] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 1956.669003][T15682] gp8psk: usb in 138 operation failed. [ 1956.681651][T15682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 1956.691630][T15682] gp8psk: found Genpix USB device pID = 203 (hex) [ 1956.702322][T15682] usb 1-1: USB disconnect, device number 83 [ 1956.814610][T15682] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 1957.113852][T21293] QAT: Device 197 not found [ 1958.247657][T21301] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3896'. [ 1959.174888][ T9619] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1959.589536][ T9619] usb 1-1: device descriptor read/64, error -71 [ 1960.028177][ T9619] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1960.225986][ T9619] usb 1-1: device descriptor read/64, error -71 [ 1960.756250][ T9619] usb usb1-port1: attempt power cycle [ 1960.940084][T21320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3902'. [ 1961.289721][ T9619] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1961.557918][ T28] audit: type=1326 audit(1759302125.544:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.376348][ T9619] usb 1-1: device descriptor read/8, error -71 [ 1962.380718][ T28] audit: type=1326 audit(1759302125.544:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.452699][ T28] audit: type=1326 audit(1759302125.544:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.515683][ T28] audit: type=1326 audit(1759302125.553:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.598791][ T28] audit: type=1326 audit(1759302125.553:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.759826][ T28] audit: type=1326 audit(1759302125.553:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.784351][ T28] audit: type=1326 audit(1759302125.553:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.808602][ T28] audit: type=1326 audit(1759302125.553:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.846035][ T28] audit: type=1326 audit(1759302125.562:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1962.921180][T21338] QAT: Device 197 not found [ 1963.599407][ T28] audit: type=1326 audit(1759302125.562:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21321 comm="syz.3.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac15b8eec9 code=0x7ffc0000 [ 1963.657698][T21334] loop3: detected capacity change from 0 to 512 [ 1963.722331][T21332] tmpfs: Unknown parameter 'qfÇ5Þh1_virt_wifi' [ 1963.759990][T21334] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 1963.783587][T21334] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1963.842121][T21334] System zones: 0-1, 15-15, 18-18, 34-34 [ 1963.875504][T21334] EXT4-fs (loop3): orphan cleanup on readonly fs [ 1963.914915][T21334] EXT4-fs warning (device loop3): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1963.981289][T21334] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 1964.056561][T21334] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.3907: bg 0: block 40: padding at end of block bitmap is not set [ 1964.422941][T21334] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6637: Corrupt filesystem [ 1964.544347][T21334] EXT4-fs (loop3): 1 truncate cleaned up [ 1964.578837][T21334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1964.659809][T21334] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.3907: bad symlink. [ 1964.834218][T15965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1966.335943][ T9619] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 1966.496064][ T9619] usb 4-1: device descriptor read/64, error -71 [ 1966.883943][ T9619] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 1967.054157][ T9619] usb 4-1: device descriptor read/64, error -71 [ 1967.180699][ T9619] usb usb4-port1: attempt power cycle [ 1967.346399][T21372] QAT: Device 197 not found [ 1968.120927][ T9619] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 1968.185863][ T9619] usb 4-1: device descriptor read/8, error -71 [ 1968.698366][ T9619] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 1969.206875][T21374] overlayfs: failed to resolve './file0': -2 [ 1969.252303][ T9619] usb 4-1: device descriptor read/8, error -71 [ 1969.399844][ T9619] usb usb4-port1: unable to enumerate USB device [ 1969.904267][T21391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3919'. [ 1970.857738][T15682] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1971.062913][T15682] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1971.103647][T15682] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1971.112772][T15682] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1971.167911][T15682] usb 2-1: config 220 has no interface number 2 [ 1971.174865][T15682] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1971.208271][T15682] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1971.215716][T15682] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1971.223018][T15682] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1971.235137][T15682] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1971.255009][T15682] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1971.263571][T15682] usb 2-1: Product: syz [ 1971.280034][T15682] usb 2-1: Manufacturer: syz [ 1971.284823][T15682] usb 2-1: SerialNumber: syz [ 1971.563978][T15682] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1971.570697][T15682] usb 2-1: No valid video chain found. [ 1971.593847][T15682] usb 2-1: selecting invalid altsetting 0 [ 1971.626174][T15682] usb 2-1: selecting invalid altsetting 0 [ 1971.643722][T15682] usbtest: probe of 2-1:220.1 failed with error -22 [ 1971.665549][T15682] usb 2-1: USB disconnect, device number 82 [ 1972.108550][ T786] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1972.765967][ T786] usb 1-1: device descriptor read/64, error -71 [ 1973.285006][T21420] bridge0: port 3(vlan2) entered blocking state [ 1973.291629][T21420] bridge0: port 3(vlan2) entered disabled state [ 1973.299193][T21420] vlan2: entered allmulticast mode [ 1973.304613][T21420] bridge0: entered allmulticast mode [ 1973.402397][ T786] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1973.573436][ T786] usb 1-1: device descriptor read/64, error -71 [ 1973.882509][T21420] vlan2: left allmulticast mode [ 1973.887709][T21420] bridge0: left allmulticast mode [ 1973.937448][ T786] usb usb1-port1: attempt power cycle [ 1974.385689][ T786] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1974.472215][ T786] usb 1-1: device descriptor read/8, error -71 [ 1974.782392][ T786] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1974.824773][ T786] usb 1-1: device descriptor read/8, error -71 [ 1974.999092][ T786] usb usb1-port1: unable to enumerate USB device [ 1975.343864][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3935'. [ 1976.254407][ T786] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1976.514978][T21449] loop3: detected capacity change from 0 to 16 [ 1976.633795][ T786] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 1976.683569][T21449] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 1976.948010][ T786] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1976.959111][ T786] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1976.993024][ T786] usb 1-1: config 220 has no interface number 2 [ 1977.066637][ T786] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1977.086887][ T786] usb 1-1: config 220 interface 0 has no altsetting 0 [ 1977.110894][ T786] usb 1-1: config 220 interface 76 has no altsetting 0 [ 1977.118820][ T786] usb 1-1: config 220 interface 1 has no altsetting 0 [ 1977.151557][ T786] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1977.163383][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1977.272745][ T786] usb 1-1: Product: syz [ 1977.277411][ T786] usb 1-1: Manufacturer: syz [ 1977.282279][ T786] usb 1-1: SerialNumber: syz [ 1977.650190][ T786] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 1977.657288][ T786] usb 1-1: No valid video chain found. [ 1977.663355][ T786] usb 1-1: selecting invalid altsetting 0 [ 1977.789178][ T786] usb 1-1: selecting invalid altsetting 0 [ 1977.795555][ T786] usbtest: probe of 1-1:220.1 failed with error -22 [ 1977.839503][ T786] usb 1-1: USB disconnect, device number 92 [ 1978.351440][T21450] ALSA: mixer_oss: invalid OSS volume '' [ 1979.827161][ T9619] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 1980.008128][ T786] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1980.051783][ T9619] usb 4-1: Using ep0 maxpacket: 32 [ 1980.080584][ T9619] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.096358][ T9619] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1980.112943][ T9619] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1980.122361][ T9619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.135066][ T9619] usb 4-1: config 0 descriptor?? [ 1980.144803][ T9619] hub 4-1:0.0: bad descriptor, ignoring hub [ 1980.165525][ T9619] hub: probe of 4-1:0.0 failed with error -5 [ 1980.175426][ T9619] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1980.258097][ T786] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1980.269003][ T786] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1980.278665][ T786] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1980.288070][ T786] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1980.300144][ T786] usb 1-1: config 0 descriptor?? [ 1980.540113][T21463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1980.549228][T21463] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1981.092130][T21466] netlink: 'syz.1.3945': attribute type 27 has an invalid length. [ 1982.177278][T21481] tmpfs: Unknown parameter 'qfÇ5Þh1_virt_wifi' [ 1982.942177][T15682] usb 1-1: USB disconnect, device number 93 [ 1983.046493][ T786] usb 4-1: USB disconnect, device number 96 [ 1983.574138][T21485] ALSA: mixer_oss: invalid OSS volume '' [ 1983.667530][T21492] vivid-004: disconnect [ 1983.672750][T21491] vivid-004: reconnect [ 1984.124085][T21497] binder: 21496:21497 ioctl c0306201 200000000540 returned -14 [ 1985.073776][T21507] syz.1.3957: attempt to access beyond end of device [ 1985.073776][T21507] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 1985.089616][T21507] syz.1.3957: attempt to access beyond end of device [ 1985.089616][T21507] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 1985.104665][T21507] Mount JFS Failure: -5 [ 1985.109135][T21507] jfs_mount failed w/return code = -5 [ 1985.304935][T21503] netlink: 'syz.3.3956': attribute type 27 has an invalid length. [ 1986.883119][T15682] usb 2-1: new full-speed USB device number 83 using dummy_hcd [ 1987.081177][T15682] usb 2-1: config 0 has an invalid interface number: 104 but max is 0 [ 1987.089999][T15682] usb 2-1: config 0 has no interface number 0 [ 1987.096431][T15682] usb 2-1: config 0 interface 104 has no altsetting 0 [ 1987.110981][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1987.111092][T15682] usb 2-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 1987.117670][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1987.127951][T15682] usb 2-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1987.144265][T15682] usb 2-1: Product: syz [ 1987.148604][T15682] usb 2-1: Manufacturer: syz [ 1987.154089][T15682] usb 2-1: SerialNumber: syz [ 1987.162414][T15682] usb 2-1: config 0 descriptor?? [ 1990.789716][T21524] netlink: 'syz.1.3961': attribute type 14 has an invalid length. [ 1991.562094][T21526] ALSA: mixer_oss: invalid OSS volume '' [ 1991.609781][T15682] usb 2-1: USB disconnect, device number 83 [ 1992.103774][T21545] netlink: 'syz.3.3967': attribute type 27 has an invalid length. [ 1992.901744][ T9619] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1993.266837][ T9619] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 1993.280161][ T9619] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1993.291587][ T9619] usb 2-1: config 220 has no interface number 2 [ 1993.301295][ T9619] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1993.316165][ T9619] usb 2-1: config 220 interface 0 has no altsetting 0 [ 1993.323670][ T9619] usb 2-1: config 220 interface 76 has no altsetting 0 [ 1994.131141][ T9619] usb 2-1: config 220 interface 1 has no altsetting 0 [ 1994.145062][ T9619] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1994.154488][ T9619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1994.167783][ T9619] usb 2-1: Product: syz [ 1994.214617][ T9619] usb 2-1: Manufacturer: syz [ 1994.238429][ T9619] usb 2-1: SerialNumber: syz [ 1994.592956][ T9619] usb 2-1: selecting invalid altsetting 0 [ 1994.636908][ T9619] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 1994.643721][ T9619] usb 2-1: No valid video chain found. [ 1994.657748][ T9619] usb 2-1: selecting invalid altsetting 0 [ 1994.663723][ T9619] usbtest: probe of 2-1:220.1 failed with error -22 [ 1994.690349][ T9619] usb 2-1: USB disconnect, device number 84 [ 1995.242973][T15682] usb 3-1: new full-speed USB device number 87 using dummy_hcd [ 1995.480179][T15682] usb 3-1: config 0 has an invalid interface number: 104 but max is 0 [ 1995.489263][T15682] usb 3-1: config 0 has no interface number 0 [ 1995.495737][T15682] usb 3-1: config 0 interface 104 has no altsetting 0 [ 1995.508668][T15682] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 1995.518097][T15682] usb 3-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 1995.526569][T15682] usb 3-1: Product: syz [ 1995.531032][T15682] usb 3-1: Manufacturer: syz [ 1995.535926][T15682] usb 3-1: SerialNumber: syz [ 1995.564809][T15682] usb 3-1: config 0 descriptor?? [ 1995.660016][T10570] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1996.135388][T21573] loop3: detected capacity change from 0 to 16 [ 1998.171964][T21573] erofs: (device loop3): mounted with root inode @ nid 36. [ 1998.184828][T10570] usb 2-1: Using ep0 maxpacket: 32 [ 1998.201746][T10570] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1998.217242][T10570] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1998.227864][T10570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1998.240053][T10570] usb 2-1: config 0 descriptor?? [ 1998.262122][T10570] hub 2-1:0.0: bad descriptor, ignoring hub [ 1998.268150][T10570] hub: probe of 2-1:0.0 failed with error -5 [ 1998.328775][T21572] can: request_module (can-proto-0) failed. [ 1998.452850][T10570] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1998.567503][T15682] usb 3-1: USB disconnect, device number 87 [ 1999.139800][T21582] netlink: 'syz.0.3978': attribute type 27 has an invalid length. [ 1999.220066][ T786] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 1999.426547][ T786] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1999.437215][ T786] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1999.447892][ T786] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 1999.458653][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1999.492134][ T786] usb 4-1: config 0 descriptor?? [ 1999.818876][T10570] usb 2-1: USB disconnect, device number 85 [ 1999.871079][T21579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1999.907258][T21579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2000.869456][T21605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3984'. [ 2001.818325][ T786] usb 4-1: USB disconnect, device number 97 [ 2002.045776][T21617] netlink: 'syz.2.3988': attribute type 27 has an invalid length. [ 2002.320395][ T786] usb 4-1: new full-speed USB device number 98 using dummy_hcd [ 2002.500613][T21622] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3986'. [ 2002.827211][ T786] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 2002.854727][ T786] usb 4-1: config 0 has no interface number 0 [ 2002.898352][ T786] usb 4-1: config 0 interface 104 has no altsetting 0 [ 2002.913931][ T786] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 2002.928808][ T786] usb 4-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 2002.965142][ T786] usb 4-1: Product: syz [ 2002.969873][ T786] usb 4-1: Manufacturer: syz [ 2002.983378][ T786] usb 4-1: SerialNumber: syz [ 2003.001512][ T786] usb 4-1: config 0 descriptor?? [ 2003.998855][ T9619] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 2004.052521][T21632] netlink: 'syz.3.3987': attribute type 14 has an invalid length. [ 2004.469401][ T9619] usb 1-1: Using ep0 maxpacket: 32 [ 2004.805486][ T9619] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2004.840753][ T9619] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2004.846563][ T786] usb 4-1: USB disconnect, device number 98 [ 2004.858811][ T9619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2004.874027][ T9619] usb 1-1: config 0 descriptor?? [ 2004.910078][ T9619] hub 1-1:0.0: bad descriptor, ignoring hub [ 2004.931039][ T9619] hub: probe of 1-1:0.0 failed with error -5 [ 2004.944021][ T9619] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2005.325471][T21641] loop2: detected capacity change from 0 to 512 [ 2005.712127][T21641] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2005.772686][T21641] __quota_error: 8 callbacks suppressed [ 2005.772749][T21641] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0 [ 2005.790431][T21641] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 2005.800464][T21641] EXT4-fs error (device loop2): ext4_acquire_dquot:6940: comm syz.2.3992: Failed to acquire dquot type 1 [ 2005.867955][T21641] EXT4-fs (loop2): 1 truncate cleaned up [ 2006.507588][T21641] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2007.580340][T10570] usb 1-1: USB disconnect, device number 94 [ 2008.058062][T15724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2008.283352][T21650] netlink: 'syz.2.3995': attribute type 12 has an invalid length. [ 2008.622330][T21652] loop3: detected capacity change from 0 to 16 [ 2008.786342][T21652] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 2010.069038][T21658] loop3: detected capacity change from 0 to 512 [ 2010.138742][T21658] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2010.176636][T21658] ext4 filesystem being mounted at /370/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 2010.554255][T21668] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3999'. [ 2010.586119][T21669] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3994'. [ 2011.439897][T21670] cgroup: Invalid name [ 2012.103903][T15965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2013.029196][T21683] kernel profiling enabled (shift: 62) [ 2013.037586][T21683] profiling shift: 62 too large [ 2013.182153][T10570] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 2013.439268][T10570] usb 4-1: Using ep0 maxpacket: 32 [ 2013.495036][T10570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2013.535306][ T9619] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2013.702704][T10570] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2013.716342][T10570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2013.744633][T10570] usb 4-1: config 0 descriptor?? [ 2013.765218][T10570] hub 4-1:0.0: bad descriptor, ignoring hub [ 2013.785521][T10570] hub: probe of 4-1:0.0 failed with error -5 [ 2013.801654][T10570] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2013.900995][ T9619] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2013.930996][ T9619] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2013.970542][ T9619] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2013.983938][ T9619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2014.001629][ T9619] usb 3-1: config 0 descriptor?? [ 2014.020549][ T9619] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 2014.033774][ T9619] hdpvr: probe of 3-1:0.0 failed with error -12 [ 2015.056825][T21687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2015.066335][T21687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2015.134106][T21700] syz.1.4008: attempt to access beyond end of device [ 2015.134106][T21700] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2015.147894][T21700] syz.1.4008: attempt to access beyond end of device [ 2015.147894][T21700] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2015.704911][T21696] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4007'. [ 2016.025651][T21700] Mount JFS Failure: -5 [ 2016.029893][T21700] jfs_mount failed w/return code = -5 [ 2016.485772][ T9619] usb 4-1: USB disconnect, device number 99 [ 2016.545946][ T786] usb 3-1: USB disconnect, device number 88 [ 2017.094713][ T786] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 2017.450227][ T786] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2017.473817][ T786] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2018.527562][ T786] usb 3-1: config 220 has no interface number 2 [ 2018.534222][ T786] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2018.550507][ T786] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2018.557828][ T786] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2018.565632][ T786] usb 3-1: config 220 interface 1 has no altsetting 0 [ 2018.584104][ T786] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2018.593679][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2018.602205][ T786] usb 3-1: Product: syz [ 2018.606533][ T786] usb 3-1: Manufacturer: syz [ 2018.613221][ T786] usb 3-1: SerialNumber: syz [ 2018.908065][ T786] usb 3-1: selecting invalid altsetting 0 [ 2018.990062][ T786] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 2018.996723][ T786] usb 3-1: No valid video chain found. [ 2019.043521][ T786] usb 3-1: selecting invalid altsetting 0 [ 2019.061821][ T786] usbtest: probe of 3-1:220.1 failed with error -22 [ 2019.086074][ T786] usb 3-1: USB disconnect, device number 89 [ 2019.088356][T21723] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4014'. [ 2019.876843][T21727] input: syz1 as /devices/virtual/input/input45 [ 2020.558837][T21721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4015'. [ 2020.591761][T21727] syz.2.4017[21727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2020.591890][T21727] syz.2.4017[21727] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2023.342959][T21751] tmpfs: Unknown parameter 'qfÇ5Þh1_virt_wifi' [ 2023.892861][T21766] tipc: Started in network mode [ 2023.911045][T21766] tipc: Node identity 4, cluster identity 4711 [ 2023.925934][T21766] tipc: Node number set to 4 [ 2024.352102][T21770] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4029'. [ 2025.040859][T21781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4032'. [ 2026.445321][T20132] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 2026.739988][T20132] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2026.754427][T20132] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 2026.765851][T20132] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2026.787167][T20132] usb 4-1: config 0 descriptor?? [ 2027.694600][T20132] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 2027.777642][T21809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 2028.382075][T20132] lenovo 0003:17EF:6047.0006: Failed to switch middle button: -71 [ 2028.404040][T20132] lenovo 0003:17EF:6047.0006: Fn-lock setting failed: -71 [ 2028.428430][T20132] lenovo 0003:17EF:6047.0006: Sensitivity setting failed: -71 [ 2028.574702][T20132] usb 4-1: USB disconnect, device number 100 [ 2029.133509][T21821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4044'. [ 2030.100125][T21834] syz.3.4047: attempt to access beyond end of device [ 2030.100125][T21834] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2030.114269][T21834] syz.3.4047: attempt to access beyond end of device [ 2030.114269][T21834] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2030.128699][T21834] Mount JFS Failure: -5 [ 2030.133322][T21834] jfs_mount failed w/return code = -5 [ 2030.345725][T21836] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4049'. [ 2032.756539][T20874] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 2032.959834][T20874] usb 2-1: Using ep0 maxpacket: 32 [ 2032.978629][T20874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2033.001492][T20874] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2033.025252][T20874] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2033.045554][T20874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2033.068603][T20874] usb 2-1: config 0 descriptor?? [ 2033.082702][T20874] hub 2-1:0.0: USB hub found [ 2033.305734][T20874] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 2033.463377][T21890] syz.2.4062: attempt to access beyond end of device [ 2033.463377][T21890] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2033.479321][T21890] syz.2.4062: attempt to access beyond end of device [ 2033.479321][T21890] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2033.494097][T21890] Mount JFS Failure: -5 [ 2033.498308][T21890] jfs_mount failed w/return code = -5 [ 2033.551334][T20874] usbhid 2-1:0.0: can't add hid device: -71 [ 2033.568129][T20874] usbhid: probe of 2-1:0.0 failed with error -71 [ 2033.639161][T20874] usb 2-1: USB disconnect, device number 86 [ 2034.432312][T21900] netlink: 'syz.1.4066': attribute type 27 has an invalid length. [ 2035.267309][T21915] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4069'. [ 2037.031036][T21929] syz.0.4074: attempt to access beyond end of device [ 2037.031036][T21929] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2037.046046][T21929] syz.0.4074: attempt to access beyond end of device [ 2037.046046][T21929] nbd0: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2037.059524][T21929] Mount JFS Failure: -5 [ 2037.064359][T21929] jfs_mount failed w/return code = -5 [ 2039.234983][ T9619] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 2039.439053][ T9619] usb 1-1: Using ep0 maxpacket: 32 [ 2039.489597][ T9619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2039.502380][ T9619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2039.514755][ T9619] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2039.524293][ T9619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2039.535472][ T9619] usb 1-1: config 0 descriptor?? [ 2039.544645][ T9619] hub 1-1:0.0: USB hub found [ 2039.765698][ T9619] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 2039.996648][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 2040.006397][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 2040.014118][ T9619] usbhid 1-1:0.0: can't add hid device: -32 [ 2040.020413][ T9619] usbhid: probe of 1-1:0.0 failed with error -32 [ 2040.082526][ T9619] usb 1-1: USB disconnect, device number 95 [ 2041.655471][T21944] netlink: 'syz.3.4079': attribute type 27 has an invalid length. [ 2041.959611][T21946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4080'. [ 2043.119274][T21961] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4084'. [ 2044.288476][T21972] netlink: 'syz.0.4089': attribute type 27 has an invalid length. [ 2045.908585][T21981] loop3: detected capacity change from 0 to 1024 [ 2045.921164][T21981] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2045.985188][T21981] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2047.347412][T15965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2047.666533][T21996] loop2: detected capacity change from 0 to 512 [ 2047.727137][T21993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4092'. [ 2047.771018][T21998] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4094'. [ 2048.357433][T21996] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2049.615763][ T28] audit: type=1800 audit(1759302463.930:24): pid=21996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4095" name="file0" dev="loop2" ino=1048617 res=0 errno=0 [ 2051.122422][T22030] loop2: detected capacity change from 0 to 512 [ 2051.161683][T22030] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2051.265082][T22033] netlink: 'syz.0.4105': attribute type 27 has an invalid length. [ 2052.500428][T22048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4108'. [ 2052.776702][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2052.783485][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2053.757565][T22070] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4116'. [ 2054.469158][T12383] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 2054.789248][T12383] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 2054.847673][T12383] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2054.912408][T12383] usb 3-1: config 220 has no interface number 2 [ 2054.958049][T12383] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2055.051571][T12383] usb 3-1: config 220 interface 0 has no altsetting 0 [ 2055.092939][T12383] usb 3-1: config 220 interface 76 has no altsetting 0 [ 2055.142640][T12383] usb 3-1: config 220 interface 1 has no altsetting 0 [ 2055.206298][T12383] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2055.313629][T12383] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2055.359118][T12383] usb 3-1: Product: syz [ 2055.363459][T12383] usb 3-1: Manufacturer: syz [ 2055.387029][T12383] usb 3-1: SerialNumber: syz [ 2055.441750][T22084] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4120'. [ 2055.640730][T12383] usb 3-1: selecting invalid altsetting 0 [ 2055.657558][T12383] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 2055.682476][T12383] usb 3-1: No valid video chain found. [ 2055.702662][T12383] usb 3-1: selecting invalid altsetting 0 [ 2055.708594][T12383] usbtest: probe of 3-1:220.1 failed with error -22 [ 2055.726097][T12383] usb 3-1: USB disconnect, device number 90 [ 2055.921850][T22097] loop3: detected capacity change from 0 to 128 [ 2056.933265][T18015] kworker/u4:20: attempt to access beyond end of device [ 2056.933265][T18015] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 2057.372789][T22113] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4127'. [ 2057.382651][T10570] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2057.593473][T10570] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2058.460478][T10570] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2058.471759][T10570] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2058.493058][T10570] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 2058.545621][T10570] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2058.649707][T10570] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2058.667326][T10570] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2058.725373][T10570] usb 3-1: Product: syz [ 2058.802125][T10570] usb 3-1: Manufacturer: syz [ 2058.806955][T10570] usb 3-1: SerialNumber: syz [ 2060.162825][T22089] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 2061.630453][T22145] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2061.685150][T22089] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 2061.702144][T22089] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2061.742842][T22089] usb 1-1: config 220 has no interface number 2 [ 2061.787398][T22089] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2062.051524][T22089] usb 1-1: config 220 interface 0 has no altsetting 0 [ 2062.260886][T22089] usb 1-1: config 220 interface 76 has no altsetting 0 [ 2062.361395][T22089] usb 1-1: config 220 interface 1 has no altsetting 0 [ 2062.388173][T22089] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2062.409045][T22089] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2062.417394][T22089] usb 1-1: Product: syz [ 2062.421735][T22089] usb 1-1: Manufacturer: syz [ 2062.427373][T22089] usb 1-1: SerialNumber: syz [ 2062.460036][T10570] cdc_ncm 3-1:1.0: bind() failure [ 2062.474590][T10570] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 2062.494129][T10570] cdc_ncm 3-1:1.1: bind() failure [ 2062.514218][T10570] usb 3-1: USB disconnect, device number 91 [ 2062.724280][T22089] usb 1-1: selecting invalid altsetting 0 [ 2062.759862][T22089] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 2062.816993][T22089] usb 1-1: No valid video chain found. [ 2062.845915][T22089] usb 1-1: selecting invalid altsetting 0 [ 2062.853983][T22089] usbtest: probe of 1-1:220.1 failed with error -22 [ 2062.890220][T22089] usb 1-1: USB disconnect, device number 96 [ 2062.898095][T22162] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4139'. [ 2064.625698][T22178] vivid-004: disconnect [ 2065.130439][T22175] vivid-004: reconnect [ 2065.599595][T22188] cgroup: Invalid name [ 2066.967026][T20874] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 2067.151075][T22202] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4152'. [ 2067.191211][T20874] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 2067.276870][T20874] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2067.291751][T20874] usb 4-1: config 220 has no interface number 2 [ 2067.298993][T20874] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2067.330289][T20874] usb 4-1: config 220 interface 0 has no altsetting 0 [ 2067.339169][T20874] usb 4-1: config 220 interface 76 has no altsetting 0 [ 2067.390188][T20874] usb 4-1: config 220 interface 1 has no altsetting 0 [ 2067.422521][T20874] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2067.442307][T20874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2068.369089][T20874] usb 4-1: Product: syz [ 2068.406623][T20874] usb 4-1: Manufacturer: syz [ 2068.459074][T20874] usb 4-1: SerialNumber: syz [ 2068.812246][T20874] usb 4-1: selecting invalid altsetting 0 [ 2068.838867][T20874] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 2068.845557][T20874] usb 4-1: No valid video chain found. [ 2069.021423][T20874] usb 4-1: selecting invalid altsetting 0 [ 2069.027613][T20874] usbtest: probe of 4-1:220.1 failed with error -22 [ 2069.083937][T20874] usb 4-1: USB disconnect, device number 101 [ 2069.164235][T22219] loop2: detected capacity change from 0 to 7 [ 2069.190996][T21325] Dev loop2: unable to read RDB block 7 [ 2069.196945][T21325] loop2: AHDI p1 p2 p3 [ 2069.201360][T21325] loop2: partition table partially beyond EOD, truncated [ 2069.204783][T22220] vivid-004: disconnect [ 2069.214331][T21325] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2069.223451][T21325] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2069.243608][T22219] Dev loop2: unable to read RDB block 7 [ 2069.249792][T22219] loop2: AHDI p1 p2 p3 [ 2069.254318][T22219] loop2: partition table partially beyond EOD, truncated [ 2069.265171][T22219] loop2: p1 start 1601398130 is beyond EOD, truncated [ 2069.286360][T22219] loop2: p2 start 1702059890 is beyond EOD, truncated [ 2069.328936][T22089] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 2069.632228][T22216] vivid-004: reconnect [ 2069.652035][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2069.683883][T22089] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2069.722207][T22089] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 2069.752677][T22089] usb 1-1: Manufacturer: syz [ 2069.769014][T22089] usb 1-1: config 0 descriptor?? [ 2069.814990][T22089] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2070.047349][T22089] usb 1-1: USB disconnect, device number 97 [ 2070.460343][T22243] loop3: detected capacity change from 0 to 512 [ 2070.469557][T22243] EXT4-fs: Ignoring removed mblk_io_submit option [ 2071.593366][T22243] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 2071.607068][T22243] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 2071.658990][T22243] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.4162: corrupted in-inode xattr: e_name out of bounds [ 2071.676485][T22243] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 2071.691324][T22243] EXT4-fs (loop3): 1 orphan inode deleted [ 2071.698969][T22243] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2074.261942][T15965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2074.858396][T22260] loop3: detected capacity change from 0 to 16 [ 2074.877612][T22260] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 2074.974502][ T9619] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 2075.194430][ T9619] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 2075.204920][ T9619] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2075.216336][ T9619] usb 1-1: config 220 has no interface number 2 [ 2075.223697][ T9619] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2075.237830][ T9619] usb 1-1: config 220 interface 0 has no altsetting 0 [ 2075.245205][ T9619] usb 1-1: config 220 interface 76 has no altsetting 0 [ 2075.253215][ T9619] usb 1-1: config 220 interface 1 has no altsetting 0 [ 2075.266930][ T9619] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2075.277782][ T9619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2075.286931][ T9619] usb 1-1: Product: syz [ 2075.291758][ T9619] usb 1-1: Manufacturer: syz [ 2075.298858][ T9619] usb 1-1: SerialNumber: syz [ 2075.545711][ T9619] usb 1-1: selecting invalid altsetting 0 [ 2075.560244][ T9619] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 2075.569492][ T9619] usb 1-1: No valid video chain found. [ 2075.595662][ T9619] usb 1-1: selecting invalid altsetting 0 [ 2075.602183][ T9619] usbtest: probe of 1-1:220.1 failed with error -22 [ 2075.644872][ T9619] usb 1-1: USB disconnect, device number 98 [ 2075.838258][T22269] vivid-004: disconnect [ 2076.754986][T22261] vivid-004: reconnect [ 2078.041771][ T28] audit: type=1326 audit(1759302489.972:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22277 comm="syz.0.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2078.065837][ T28] audit: type=1326 audit(1759302489.972:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22277 comm="syz.0.4174" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2079.084035][T22299] loop3: detected capacity change from 0 to 16 [ 2079.168781][T22299] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 2079.685256][T22302] vivid-002: disconnect [ 2079.861973][T22300] vivid-002: reconnect [ 2080.152589][T22311] loop3: detected capacity change from 0 to 512 [ 2080.263679][T22313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4182'. [ 2081.284941][T22311] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 2081.295114][T22311] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 2081.309236][T22311] EXT4-fs (loop3): 1 truncate cleaned up [ 2081.316706][T22311] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2081.346149][T22311] EXT4-fs error (device loop3): ext4_append:79: inode #2: comm syz.3.4183: Logical block already allocated [ 2084.552988][ T9619] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 2084.600825][T22339] loop2: detected capacity change from 0 to 256 [ 2084.645866][T22339] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2084.658026][T22339] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 2084.685169][T22339] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 2084.834377][ T9619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2084.844518][ T9619] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2084.879832][ T9619] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2084.911124][ T9619] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2084.956735][ T9619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2084.982813][ T9619] usb 1-1: config 0 descriptor?? [ 2085.004166][ T9619] hdpvr 1-1:0.0: Could not find bulk-in endpoint [ 2085.010659][ T9619] hdpvr: probe of 1-1:0.0 failed with error -12 [ 2085.029574][T22315] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters [ 2085.294176][T22336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2085.322529][T22336] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2085.610455][T15965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2086.091591][T22345] overlayfs: missing 'lowerdir' [ 2086.455335][T12383] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2086.551999][T22353] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4193'. [ 2086.700887][T12383] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 2086.731677][T12383] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2086.802687][T12383] usb 2-1: config 220 has no interface number 2 [ 2086.842426][T12383] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2086.919376][T12383] usb 2-1: config 220 interface 0 has no altsetting 0 [ 2086.962305][T12383] usb 2-1: config 220 interface 76 has no altsetting 0 [ 2087.024786][T12383] usb 2-1: config 220 interface 1 has no altsetting 0 [ 2087.087190][T12383] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2087.131096][T12383] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2087.150452][T12383] usb 2-1: Product: syz [ 2087.158657][T12383] usb 2-1: Manufacturer: syz [ 2087.168281][T12383] usb 2-1: SerialNumber: syz [ 2087.419893][T22089] usb 1-1: USB disconnect, device number 99 [ 2087.667011][T12383] usb 2-1: selecting invalid altsetting 0 [ 2087.673570][T12383] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 2087.695386][T12383] usb 2-1: No valid video chain found. [ 2087.707811][T12383] usb 2-1: selecting invalid altsetting 0 [ 2087.713731][T12383] usbtest: probe of 2-1:220.1 failed with error -22 [ 2087.811118][T12383] usb 2-1: USB disconnect, device number 87 [ 2092.453824][T10570] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 2092.680093][T10570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2092.701950][T10570] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2092.733941][T10570] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2092.771504][T10570] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2092.795026][T10570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2092.839492][T10570] usb 4-1: config 0 descriptor?? [ 2092.871380][T10570] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 2092.889222][T10570] hdpvr: probe of 4-1:0.0 failed with error -12 [ 2093.421993][T22390] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2093.487297][T22390] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2095.415973][T22089] usb 4-1: USB disconnect, device number 102 [ 2095.834848][T22414] loop3: detected capacity change from 0 to 512 [ 2095.899653][T22414] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.4209: iget: bad extended attribute block 1 [ 2095.919228][T22414] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.4209: couldn't read orphan inode 15 (err -117) [ 2095.938850][T22414] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2096.283452][T22418] 9pnet_fd: Insufficient options for proto=fd [ 2097.157342][T22416] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap [ 2097.346572][T15965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2097.601266][T22434] loop3: detected capacity change from 0 to 512 [ 2097.648608][T22434] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2097.746764][T22434] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2097.770350][T22434] ext4 filesystem being mounted at /424/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 2098.782713][T22447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4216'. [ 2099.174765][T22456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4218'. [ 2099.190100][T15965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2099.202022][T22456] loop2: detected capacity change from 0 to 128 [ 2099.268450][T22456] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2099.370649][T22456] ext4 filesystem being mounted at /425/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2099.480221][T22451] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.4218: No space for directory leaf checksum. Please run e2fsck -D. [ 2099.540196][T22451] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.4218: Directory block failed checksum [ 2099.597037][T22456] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.4218: No space for directory leaf checksum. Please run e2fsck -D. [ 2099.653184][T22456] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.4218: checksumming directory block 0 [ 2099.723217][T22466] loop3: detected capacity change from 0 to 16 [ 2099.801339][T22466] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 2099.959786][T22466] loop3: detected capacity change from 0 to 256 [ 2100.116610][T22466] FAT-fs (loop3): Directory bread(block 64) failed [ 2100.123708][T22466] FAT-fs (loop3): Directory bread(block 65) failed [ 2100.131896][T22466] FAT-fs (loop3): Directory bread(block 66) failed [ 2100.138734][T22466] FAT-fs (loop3): Directory bread(block 67) failed [ 2100.146772][T22466] FAT-fs (loop3): Directory bread(block 68) failed [ 2100.154303][T22466] FAT-fs (loop3): Directory bread(block 69) failed [ 2100.162154][T22466] FAT-fs (loop3): Directory bread(block 70) failed [ 2100.168900][T22466] FAT-fs (loop3): Directory bread(block 71) failed [ 2100.176674][T22466] FAT-fs (loop3): Directory bread(block 72) failed [ 2100.183502][T22466] FAT-fs (loop3): Directory bread(block 73) failed [ 2100.389203][T22465] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.4218: No space for directory leaf checksum. Please run e2fsck -D. [ 2100.437014][T22465] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.4218: checksumming directory block 0 [ 2100.685306][T15724] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2100.904465][T22475] random: crng reseeded on system resumption [ 2103.529957][T22503] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4230'. [ 2110.749096][T22564] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4244'. [ 2110.783976][T10570] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 2111.107843][T10570] usb 1-1: Using ep0 maxpacket: 32 [ 2111.130531][T10570] usb 1-1: config index 0 descriptor too short (expected 29220, got 36) [ 2111.149107][T10570] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2111.171985][T10570] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2111.192158][T10570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2111.213861][T10570] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2111.232619][T10570] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2111.268550][T10570] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2111.278024][T10570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.388802][T10570] usb 1-1: config 0 descriptor?? [ 2111.478946][T22568] loop3: detected capacity change from 0 to 16 [ 2111.489533][T22568] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 2112.270725][T10570] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 100 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2112.288038][T22568] loop3: detected capacity change from 0 to 256 [ 2112.343820][T10570] usb 1-1: USB disconnect, device number 100 [ 2112.844854][T10570] usblp0: removed [ 2112.889463][T22568] FAT-fs (loop3): Directory bread(block 64) failed [ 2112.899568][T22568] FAT-fs (loop3): Directory bread(block 65) failed [ 2112.906773][T22568] FAT-fs (loop3): Directory bread(block 66) failed [ 2112.913459][T22568] FAT-fs (loop3): Directory bread(block 67) failed [ 2112.920485][T22568] FAT-fs (loop3): Directory bread(block 68) failed [ 2112.927749][T22568] FAT-fs (loop3): Directory bread(block 69) failed [ 2112.935352][T22568] FAT-fs (loop3): Directory bread(block 70) failed [ 2112.942430][T22568] FAT-fs (loop3): Directory bread(block 71) failed [ 2112.949198][T22568] FAT-fs (loop3): Directory bread(block 72) failed [ 2112.955781][T22568] FAT-fs (loop3): Directory bread(block 73) failed [ 2114.309224][T22593] syz.1.4254: attempt to access beyond end of device [ 2114.309224][T22593] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2114.336081][T22593] syz.1.4254: attempt to access beyond end of device [ 2114.336081][T22593] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2114.385372][T10570] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 2114.422210][T22593] Mount JFS Failure: -5 [ 2114.432888][T22593] jfs_mount failed w/return code = -5 [ 2114.680790][T10570] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 2114.913610][T10570] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2114.932877][T10570] usb 1-1: config 220 descriptor has 1 excess byte, ignoring [ 2114.949514][T10570] usb 1-1: config 220 has no interface number 2 [ 2114.964100][T10570] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2114.994354][T10570] usb 1-1: config 220 interface 0 has no altsetting 0 [ 2115.017381][T10570] usb 1-1: config 220 interface 76 has no altsetting 0 [ 2115.041989][T10570] usb 1-1: config 220 interface 1 has no altsetting 0 [ 2115.063463][T10570] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2115.073021][T10570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2115.098206][T10570] usb 1-1: Product: syz [ 2115.102617][T10570] usb 1-1: Manufacturer: syz [ 2115.108742][T10570] usb 1-1: SerialNumber: syz [ 2115.511704][T10570] usb 1-1: selecting invalid altsetting 0 [ 2115.622466][T10570] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 2115.730710][T10570] usb 1-1: No valid video chain found. [ 2115.788044][T10570] usb 1-1: selecting invalid altsetting 0 [ 2115.809807][T10570] usbtest: probe of 1-1:220.1 failed with error -22 [ 2115.851622][T10570] usb 1-1: USB disconnect, device number 101 [ 2116.585958][T22608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4257'. [ 2118.281227][T22089] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 2118.458715][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2118.465744][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2118.619916][T22089] usb 1-1: Using ep0 maxpacket: 32 [ 2118.646930][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2118.659566][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2118.813483][T22089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2118.858544][T22089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2118.869691][T22089] usb 1-1: config 0 descriptor?? [ 2118.893591][T22089] hub 1-1:0.0: USB hub found [ 2119.177342][T22089] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2119.280645][T22666] random: crng reseeded on system resumption [ 2120.939594][T22089] usbhid 1-1:0.0: can't add hid device: -32 [ 2120.956070][T22089] usbhid: probe of 1-1:0.0 failed with error -32 [ 2121.041495][T22089] usb 1-1: USB disconnect, device number 102 [ 2123.559802][T22089] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 2125.117801][T22720] syz.2.4273: attempt to access beyond end of device [ 2125.117801][T22720] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2125.914467][T22720] syz.2.4273: attempt to access beyond end of device [ 2125.914467][T22720] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2126.029003][T22720] Mount JFS Failure: -5 [ 2126.085206][T22720] jfs_mount failed w/return code = -5 [ 2126.093718][T22089] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 2126.103171][T22089] usb 4-1: can't read configurations, error -71 [ 2126.513484][T10570] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2126.583741][T22732] loop3: detected capacity change from 0 to 2048 [ 2126.668745][T22732] loop3: p1 < > p3 [ 2126.680452][T22732] loop3: p3 size 134217728 extends beyond EOD, truncated [ 2126.791273][T10570] usb 2-1: Using ep0 maxpacket: 32 [ 2126.819784][T10570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2126.855858][T10570] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2126.886875][T10570] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2126.903600][T10570] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2126.916240][T22732] kvm: emulating exchange as write [ 2126.932336][T10570] usb 2-1: config 0 descriptor?? [ 2126.949273][T10570] hub 2-1:0.0: USB hub found [ 2127.178328][T10570] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 2127.389031][T22729] loop3: detected capacity change from 0 to 8192 [ 2127.687285][T22743] bridge0: port 3(gretap0) entered blocking state [ 2127.695516][T22743] bridge0: port 3(gretap0) entered disabled state [ 2127.703319][T22743] gretap0: entered allmulticast mode [ 2127.717723][T22743] gretap0: entered promiscuous mode [ 2127.733930][T22743] bridge0: port 3(gretap0) entered blocking state [ 2127.741726][T22743] bridge0: port 3(gretap0) entered forwarding state [ 2127.762014][T22743] gretap0: left allmulticast mode [ 2127.767978][T22743] gretap0: left promiscuous mode [ 2127.773669][T22743] bridge0: port 3(gretap0) entered disabled state [ 2128.145184][T10570] usbhid 2-1:0.0: can't add hid device: -32 [ 2128.295836][T10570] usbhid: probe of 2-1:0.0 failed with error -32 [ 2128.599389][T10570] usb 2-1: USB disconnect, device number 88 [ 2128.674947][T22745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4280'. [ 2128.817052][T22747] loop3: detected capacity change from 0 to 1024 [ 2129.157731][T22747] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2130.265531][T10570] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 2130.473142][T10570] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 2130.489914][T10570] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 2130.520283][T10570] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 2130.537674][T10570] usb 1-1: config 220 has no interface number 2 [ 2130.547967][T10570] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 2130.562698][T10570] usb 1-1: config 220 interface 0 has no altsetting 0 [ 2130.584118][T10570] usb 1-1: config 220 interface 76 has no altsetting 0 [ 2130.594979][T10570] usb 1-1: config 220 interface 1 has no altsetting 0 [ 2130.598878][T22762] loop2: detected capacity change from 0 to 1024 [ 2130.616384][T10570] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 2130.619792][T22762] EXT4-fs: Ignoring removed nobh option [ 2130.631561][T10570] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2130.655835][T22762] EXT4-fs: inline encryption not supported [ 2130.669821][T22762] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2130.691477][T10570] usb 1-1: Product: syz [ 2130.696784][T10570] usb 1-1: Manufacturer: syz [ 2130.702246][T10570] usb 1-1: SerialNumber: syz [ 2130.719522][T22762] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2130.806292][T22762] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4031: comm syz.2.4286: Allocating blocks 385-513 which overlap fs metadata [ 2130.871923][T22762] EXT4-fs (loop2): pa ffff888076d77d98: logic 16, phys. 129, len 24 [ 2130.881292][T22762] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:5372: group 0, free 0, pa_free 8 [ 2130.991017][T10570] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 2131.004398][T15724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2131.010784][T10570] usb 1-1: No valid video chain found. [ 2131.023696][T10570] usb 1-1: selecting invalid altsetting 0 [ 2131.078745][T10570] usb 1-1: selecting invalid altsetting 0 [ 2131.103201][T10570] usbtest: probe of 1-1:220.1 failed with error -22 [ 2131.129606][T10570] usb 1-1: USB disconnect, device number 103 [ 2133.118822][T22783] 9pnet_fd: Insufficient options for proto=fd [ 2133.243852][T22785] loop2: detected capacity change from 0 to 512 [ 2133.313780][T22785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2133.455639][T22789] veth0_vlan: entered allmulticast mode [ 2134.696752][T22785] EXT4-fs (loop2): 1 orphan inode deleted [ 2134.715945][T22785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2134.740973][T22790] veth0_vlan: left promiscuous mode [ 2134.750364][T22790] veth0_vlan: entered promiscuous mode [ 2135.053675][T15724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2135.168147][T15965] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2135.971786][T22807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4293'. [ 2142.716560][T22844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4302'. [ 2142.866847][T22844] loop2: detected capacity change from 0 to 128 [ 2143.462175][T22844] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2143.503571][T22844] ext4 filesystem being mounted at /447/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2143.785149][T22839] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.4302: No space for directory leaf checksum. Please run e2fsck -D. [ 2143.896918][T22839] EXT4-fs error (device loop2): htree_dirblock_to_tree:1083: inode #2: comm syz.2.4302: Directory block failed checksum [ 2143.929547][T22839] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.4302: No space for directory leaf checksum. Please run e2fsck -D. [ 2143.945653][T22839] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.4302: checksumming directory block 0 [ 2143.964413][T22839] EXT4-fs warning (device loop2): ext4_dirblock_csum_verify:406: inode #2: comm syz.2.4302: No space for directory leaf checksum. Please run e2fsck -D. [ 2143.992534][T22839] EXT4-fs error (device loop2): __ext4_find_entry:1696: inode #2: comm syz.2.4302: checksumming directory block 0 [ 2144.030975][T22855] input: syz1 as /devices/virtual/input/input53 [ 2146.113790][T15724] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2147.673913][T22867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4306'. [ 2148.685773][T22868] loop2: detected capacity change from 0 to 512 [ 2148.732246][T22868] EXT4-fs: Ignoring removed mblk_io_submit option [ 2153.107171][T22868] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2153.146134][T22868] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 2153.146669][T22868] EXT4-fs: failed to create workqueue [ 2153.162991][T22868] EXT4-fs (loop2): mount failed [ 2153.777723][T22876] QAT: failed to copy from user cfg_data. [ 2157.686067][T22904] overlayfs: failed to resolve './file0': -2 [ 2158.027460][T22913] loop2: detected capacity change from 0 to 256 [ 2158.085003][T22913] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fed1, chksum : 0xb3d13d88, utbl_chksum : 0xe619d30d) [ 2158.892494][ T786] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 2159.160367][ T28] audit: type=1326 audit(1759302566.413:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.0.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2159.184305][ T28] audit: type=1326 audit(1759302566.441:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.0.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2159.208116][ T28] audit: type=1326 audit(1759302566.441:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.0.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2159.220970][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2159.231672][ T28] audit: type=1326 audit(1759302566.441:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.0.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2159.231731][ T28] audit: type=1326 audit(1759302566.441:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22921 comm="syz.0.4322" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2159.330332][ T786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2159.340966][ T786] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2159.351407][ T786] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2159.383120][ T786] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2159.403676][ T786] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2159.426254][ T786] usb 4-1: config 0 descriptor?? [ 2159.846512][T22935] bridge0: port 3(gretap0) entered blocking state [ 2159.853314][T22935] bridge0: port 3(gretap0) entered disabled state [ 2159.860285][T22935] gretap0: entered allmulticast mode [ 2159.868694][T22935] gretap0: entered promiscuous mode [ 2159.884247][T22935] bridge0: port 3(gretap0) entered blocking state [ 2159.890899][T22935] bridge0: port 3(gretap0) entered forwarding state [ 2160.202554][T22935] gretap0: left allmulticast mode [ 2160.208391][T22935] gretap0: left promiscuous mode [ 2160.225950][T22935] bridge0: port 3(gretap0) entered disabled state [ 2160.805368][T22915] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2160.814723][T22915] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2160.851462][ T786] hdpvr 4-1:0.0: unexpected answer of status request, len 0 [ 2160.870545][ T786] hdpvr 4-1:0.0: device init failed [ 2160.877009][ T786] hdpvr: probe of 4-1:0.0 failed with error -12 [ 2161.082890][ T786] usb 4-1: USB disconnect, device number 105 [ 2163.147690][T22957] QAT: Device 197 not found [ 2165.540945][T22963] syz.2.4333: attempt to access beyond end of device [ 2165.540945][T22963] nbd2: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2165.715995][T22963] syz.2.4333: attempt to access beyond end of device [ 2165.715995][T22963] nbd2: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2165.762521][T22963] Mount JFS Failure: -5 [ 2165.770372][T22963] jfs_mount failed w/return code = -5 [ 2167.986104][T22982] loop2: detected capacity change from 0 to 4096 [ 2168.245020][T22982] EXT4-fs (loop2): Test dummy encryption mode enabled [ 2168.261035][T22982] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 2168.270760][T22982] System zones: 0-5 [ 2168.318468][T22998] overlayfs: upper fs does not support file handles, falling back to index=off. [ 2168.570514][T22982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2169.305115][T15724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2170.308830][T23016] overlayfs: failed to resolve './file0': -2 [ 2170.779286][T23018] infiniband syz1: set active [ 2171.841890][T23019] loop2: detected capacity change from 0 to 40427 [ 2172.041716][T23019] F2FS-fs (loop2): LFS is not compatible with checkpoint=disable [ 2172.974342][T23017] loop2: detected capacity change from 0 to 40427 [ 2172.987990][T23017] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2172.996361][T23017] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2173.048497][T23017] F2FS-fs (loop2): invalid crc value [ 2173.084195][T23017] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2173.187414][T23017] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2173.195027][T23017] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2173.214683][ T28] audit: type=1800 audit(1759302579.564:32): pid=23017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4345" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 2174.427644][T23040] loop3: detected capacity change from 0 to 16 [ 2174.527760][T23040] erofs: (device loop3): erofs_read_superblock: cannot find valid erofs superblock [ 2180.329766][T23076] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4361'. [ 2183.490865][ T786] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2183.707907][ T786] usb 2-1: Using ep0 maxpacket: 32 [ 2183.872328][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2183.946387][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2184.014415][ T786] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2184.071952][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2184.260814][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 2184.270674][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 2184.288957][ T786] usb 2-1: config 0 descriptor?? [ 2184.304912][ T786] hub 2-1:0.0: USB hub found [ 2184.661234][ T786] hub 2-1:0.0: 1 port detected [ 2184.769696][T23107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4369'. [ 2186.876591][T12383] hub 2-1:0.0: activate --> -90 [ 2186.878607][ T9619] usb 2-1: USB disconnect, device number 89 [ 2188.533389][ T28] audit: type=1326 audit(1759302593.876:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23127 comm="syz.3.4379" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fac15b8eec9 code=0x0 [ 2189.887875][T23148] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4384'. [ 2189.919737][T23148] netem: unknown loss type 13 [ 2190.335950][ T786] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 2190.379046][ T9619] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2190.442864][T10570] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 2190.541895][ T786] usb 3-1: config 0 has an invalid interface number: 104 but max is 0 [ 2190.551394][ T786] usb 3-1: config 0 has no interface number 0 [ 2190.558392][ T786] usb 3-1: config 0 interface 104 has no altsetting 0 [ 2190.572469][ T786] usb 3-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 2190.581943][ T786] usb 3-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 2190.590448][ T786] usb 3-1: Product: syz [ 2190.595081][ T786] usb 3-1: Manufacturer: syz [ 2190.600299][ T786] usb 3-1: SerialNumber: syz [ 2190.624657][ T9619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2190.636229][ T9619] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2190.636902][ T786] usb 3-1: config 0 descriptor?? [ 2190.647270][T10570] usb 1-1: Using ep0 maxpacket: 32 [ 2190.658387][ T9619] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2190.672472][ T9619] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2190.684011][ T9619] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2190.694736][ T9619] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.703521][T10570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2190.723718][ T9619] usb 2-1: config 0 descriptor?? [ 2190.729237][T10570] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2190.747941][T10570] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2190.758232][T10570] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2190.775250][T10570] usb 1-1: config 0 descriptor?? [ 2190.797887][T10570] hub 1-1:0.0: USB hub found [ 2190.893969][T23151] netlink: 'syz.2.4385': attribute type 14 has an invalid length. [ 2190.941637][ T786] usb 3-1: USB disconnect, device number 92 [ 2190.970867][T23155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2190.991280][T23155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2191.018803][T10570] hub 1-1:0.0: 1 port detected [ 2191.025006][ T9619] hdpvr 2-1:0.0: unexpected answer of status request, len 0 [ 2191.035182][ T9619] hdpvr 2-1:0.0: device init failed [ 2191.046046][ T9619] hdpvr: probe of 2-1:0.0 failed with error -12 [ 2191.210842][T23162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4389'. [ 2191.227759][T23162] loop3: detected capacity change from 0 to 128 [ 2191.249097][ T786] usb 2-1: USB disconnect, device number 90 [ 2191.272814][T23162] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 2191.290399][T23162] ext4 filesystem being mounted at /463/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 2191.304889][T23159] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.4389: No space for directory leaf checksum. Please run e2fsck -D. [ 2191.327372][T23159] EXT4-fs error (device loop3): htree_dirblock_to_tree:1083: inode #2: comm syz.3.4389: Directory block failed checksum [ 2191.347659][T23159] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.4389: No space for directory leaf checksum. Please run e2fsck -D. [ 2191.363773][T23159] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.4389: checksumming directory block 0 [ 2191.380833][T23159] EXT4-fs warning (device loop3): ext4_dirblock_csum_verify:406: inode #2: comm syz.3.4389: No space for directory leaf checksum. Please run e2fsck -D. [ 2191.398451][T23159] EXT4-fs error (device loop3): __ext4_find_entry:1696: inode #2: comm syz.3.4389: checksumming directory block 0 [ 2191.459874][T15965] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 2191.891060][T10570] hub 1-1:0.0: activate --> -90 [ 2191.907523][T10570] usb 1-1: Failed to suspend device, error -71 [ 2191.935588][T10570] usb 1-1: USB disconnect, device number 104 [ 2193.436265][ T9619] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 2193.589942][T23181] syz.1.4394[23181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2193.590176][T23181] syz.1.4394[23181] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 2193.983645][ T9619] usb 4-1: device descriptor read/64, error -71 [ 2195.488863][ T9619] usb 4-1: new high-speed USB device number 107 using dummy_hcd [ 2195.820192][ T9619] usb 4-1: Using ep0 maxpacket: 32 [ 2195.833516][ T9619] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 2195.849960][ T9619] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2195.870109][ T9619] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2195.890270][ T9619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2195.905742][ T9619] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2195.976083][ T9619] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2196.020809][ T9619] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2196.066202][ T9619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.096426][ T9619] usb 4-1: config 0 descriptor?? [ 2196.259492][T23201] fuse: root generation should be zero [ 2196.370914][ T9619] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 107 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2196.407047][ T9619] usb 4-1: USB disconnect, device number 107 [ 2196.419208][ T9619] usblp0: removed [ 2196.566527][T12383] usb 1-1: new full-speed USB device number 105 using dummy_hcd [ 2198.535898][T23217] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4403'. [ 2199.418551][T23216] loop2: detected capacity change from 0 to 16 [ 2199.467710][T23216] erofs: (device loop2): erofs_read_superblock: cannot find valid erofs superblock [ 2200.032280][ T9619] usb 4-1: new high-speed USB device number 108 using dummy_hcd [ 2200.502160][T12383] usb 1-1: device descriptor read/all, error -71 [ 2201.157059][T22089] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 2201.167254][T23233] netlink: 'syz.1.4409': attribute type 16 has an invalid length. [ 2201.175558][T23233] netlink: 'syz.1.4409': attribute type 17 has an invalid length. [ 2201.307432][T23233] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 2201.817596][T22089] usb 3-1: device descriptor read/64, error -71 [ 2202.127791][T22089] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 2202.310135][T22089] usb 3-1: device descriptor read/64, error -71 [ 2202.443916][T22089] usb usb3-port1: attempt power cycle [ 2202.500370][T23245] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4413'. [ 2203.299400][T23252] xt_bpf: check failed: parse error [ 2204.117458][T22089] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 2204.362086][T22089] usb 3-1: device not accepting address 95, error -71 [ 2206.996308][ T9619] usb 1-1: new full-speed USB device number 107 using dummy_hcd [ 2207.395380][ T9619] usb 1-1: device descriptor read/all, error -71 [ 2210.893970][T20874] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 2211.471401][T20874] usb 3-1: device descriptor read/64, error -71 [ 2211.941873][T20874] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 2212.305637][T20874] usb 3-1: device descriptor read/64, error -71 [ 2212.702340][T20874] usb usb3-port1: attempt power cycle [ 2213.573353][T23308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4430'. [ 2214.058516][T12383] usb 4-1: new full-speed USB device number 109 using dummy_hcd [ 2215.272735][T12383] usb 4-1: config 0 has an invalid interface number: 104 but max is 0 [ 2215.298508][T12383] usb 4-1: config 0 has no interface number 0 [ 2215.309652][T12383] usb 4-1: config 0 interface 104 has no altsetting 0 [ 2215.332474][T12383] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=77.43 [ 2215.352034][T12383] usb 4-1: New USB device strings: Mfr=1, Product=231, SerialNumber=3 [ 2215.408866][T12383] usb 4-1: Product: syz [ 2215.413956][T12383] usb 4-1: Manufacturer: syz [ 2215.419858][T12383] usb 4-1: SerialNumber: syz [ 2215.438971][T12383] usb 4-1: config 0 descriptor?? [ 2215.685675][T23313] netlink: 'syz.3.4432': attribute type 14 has an invalid length. [ 2215.716173][T12383] usb 4-1: USB disconnect, device number 109 [ 2215.898326][T23325] Bluetooth: hci4: Frame reassembly failed (-84) [ 2215.918500][T22682] Bluetooth: hci4: Frame reassembly failed (-84) [ 2215.926063][ T1128] Bluetooth: hci4: Frame reassembly failed (-84) [ 2216.249083][T23328] loop2: detected capacity change from 0 to 256 [ 2216.424625][T23328] xt_hashlimit: size too large, truncated to 1048576 [ 2218.088840][T13397] Bluetooth: hci4: command 0x1003 tx timeout [ 2218.098466][ T50] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 2219.534060][T20874] usb 4-1: new high-speed USB device number 110 using dummy_hcd [ 2219.714480][T12383] usb 1-1: new high-speed USB device number 109 using dummy_hcd [ 2219.724127][T20874] usb 4-1: device descriptor read/64, error -71 [ 2219.940248][T12383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2219.974055][T12383] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2219.992890][T12383] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2220.010619][T12383] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2220.021911][T12383] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2220.032046][T12383] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2220.040418][T20874] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2220.052551][T12383] usb 1-1: config 0 descriptor?? [ 2220.182745][T23351] syz.1.4442: attempt to access beyond end of device [ 2220.182745][T23351] nbd1: rw=0, sector=64, nr_sectors = 8 limit=0 [ 2220.199849][T23351] syz.1.4442: attempt to access beyond end of device [ 2220.199849][T23351] nbd1: rw=0, sector=120, nr_sectors = 8 limit=0 [ 2220.214342][T23351] Mount JFS Failure: -5 [ 2220.216379][T20874] usb 4-1: device descriptor read/64, error -71 [ 2220.225709][T23351] jfs_mount failed w/return code = -5 [ 2220.346901][T20874] usb usb4-port1: attempt power cycle [ 2220.381626][T23347] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2220.404690][T23347] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2220.514497][T12383] hdpvr 1-1:0.0: unexpected answer of status request, len 0 [ 2220.523429][T12383] hdpvr 1-1:0.0: device init failed [ 2220.534363][T12383] hdpvr: probe of 1-1:0.0 failed with error -12 [ 2220.804421][T20874] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2220.819504][T22089] usb 1-1: USB disconnect, device number 109 [ 2220.837258][T20874] usb 4-1: device descriptor read/8, error -71 [ 2221.326823][T20874] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2221.385296][T20874] usb 4-1: device descriptor read/8, error -71 [ 2221.559340][T20874] usb usb4-port1: unable to enumerate USB device [ 2222.484156][T22089] usb 1-1: new high-speed USB device number 110 using dummy_hcd [ 2222.850146][T22089] usb 1-1: Using ep0 maxpacket: 32 [ 2222.907096][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2222.967921][T22089] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2223.022540][T22089] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2223.057964][T22089] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2223.083192][T22089] usb 1-1: config 0 descriptor?? [ 2223.114347][T22089] hub 1-1:0.0: USB hub found [ 2223.360246][T22089] hub 1-1:0.0: 1 port detected [ 2224.872986][T23390] netlink: 64138 bytes leftover after parsing attributes in process `syz.1.4452'. [ 2225.269976][T20874] usb 1-1: USB disconnect, device number 110 [ 2225.666000][T20132] hub 1-1:0.0: activate --> -19 [ 2225.850120][T20132] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 2226.010555][T10570] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2226.044647][T20132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 2226.063920][T20132] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 2226.073811][T20132] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 2226.096182][T20132] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 2226.106127][T20132] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 2226.134732][T20132] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2226.161504][T20132] usb 3-1: config 0 descriptor?? [ 2226.203046][T10570] usb 2-1: device descriptor read/64, error -71 [ 2226.561564][ T28] audit: type=1326 audit(1759302629.449:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23395 comm="syz.0.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2226.655947][T23389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2226.732837][T23389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2226.762985][ T28] audit: type=1326 audit(1759302629.449:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23395 comm="syz.0.4456" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5d6258eec9 code=0x7ffc0000 [ 2227.256716][T20132] hdpvr 3-1:0.0: unexpected answer of status request, len 0 [ 2227.365069][T10570] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2227.377150][T20132] hdpvr 3-1:0.0: device init failed [ 2227.384312][T20132] hdpvr: probe of 3-1:0.0 failed with error -12 [ 2227.399586][T20132] usb 3-1: USB disconnect, device number 100 [ 2227.571584][T10570] usb 2-1: device descriptor read/64, error -71 [ 2227.700450][T10570] usb usb2-port1: attempt power cycle [ 2228.223569][T10570] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2228.267073][T10570] usb 2-1: device descriptor read/8, error -71 [ 2228.492591][T23411] loop2: detected capacity change from 0 to 512 [ 2228.505924][T23411] EXT4-fs: Ignoring removed nobh option [ 2228.525766][T23411] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 2228.601385][T23411] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2228.617267][T23411] Quota error (device loop2): v2_read_file_info: Free block number 1 out of range (1, 6). [ 2228.628987][T23411] EXT4-fs warning (device loop2): ext4_enable_quotas:7175: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2228.660915][T23411] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 2228.703644][T23411] EXT4-fs (loop2): 1 truncate cleaned up [ 2228.720026][T23411] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2231.521729][T23415] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 2231.531480][T23415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 2231.542460][T23415] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2231.630858][T15724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2233.208305][T23433] tmpfs: Unknown parameter '' [ 2233.416219][T23437] loop2: detected capacity change from 0 to 512 [ 2233.465064][T23437] EXT4-fs: Ignoring removed mblk_io_submit option [ 2233.511961][T23437] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 2233.591990][T23437] EXT4-fs (loop2): 1 truncate cleaned up [ 2233.599042][T23437] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2233.919244][T15724] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2235.439840][T20132] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2235.621366][T20132] usb 4-1: device descriptor read/64, error -71 [ 2235.639576][T23453] loop2: detected capacity change from 0 to 512 [ 2235.706459][T23453] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x00000000 (sector = 14) [ 2235.750876][T23453] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start a8000002) [ 2235.773843][T23453] FAT-fs (loop2): Filesystem has been set read-only [ 2235.921049][T20132] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2236.013353][T23456] ================================================================== [ 2236.021518][T23456] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x598/0x11f0 [ 2236.029501][T23456] Read of size 4 at addr ffff88805ac4c8a0 by task syz.2.4471/23456 [ 2236.037868][T23456] [ 2236.040404][T23456] CPU: 0 PID: 23456 Comm: syz.2.4471 Not tainted syzkaller #0 [ 2236.048080][T23456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2236.058439][T23456] Call Trace: [ 2236.061830][T23456] [ 2236.064876][T23456] dump_stack_lvl+0x16c/0x230 [ 2236.069941][T23456] ? __lock_acquire+0x7c80/0x7c80 [ 2236.075192][T23456] ? show_regs_print_info+0x20/0x20 [ 2236.080528][T23456] ? load_image+0x3b0/0x3b0 [ 2236.085106][T23456] ? __virt_addr_valid+0x469/0x540 [ 2236.090564][T23456] print_report+0xac/0x220 [ 2236.095287][T23456] ? xfrm_alloc_spi+0x598/0x11f0 [ 2236.100486][T23456] kasan_report+0x117/0x150 [ 2236.105168][T23456] ? xfrm_alloc_spi+0x598/0x11f0 [ 2236.110307][T23456] xfrm_alloc_spi+0x598/0x11f0 [ 2236.115355][T23456] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 2236.120511][T23456] ? verify_spi_info+0x120/0x120 [ 2236.125561][T23456] ? xfrm_find_acq+0x79/0x90 [ 2236.130264][T23456] xfrm_alloc_userspi+0x5d1/0xa90 [ 2236.135483][T23456] ? end_current_label_crit_section+0x170/0x170 [ 2236.142201][T23456] ? apparmor_capable+0x137/0x1a0 [ 2236.147428][T23456] ? xfrm_dump_policy_done+0x90/0x90 [ 2236.152954][T23456] ? __nla_parse+0x40/0x50 [ 2236.157429][T23456] xfrm_user_rcv_msg+0x596/0x870 [ 2236.162564][T23456] ? lockdep_hardirqs_on+0x98/0x150 [ 2236.167795][T23456] ? xfrm_netlink_rcv+0x90/0x90 [ 2236.172660][T23456] ? __local_bh_enable_ip+0x12e/0x1c0 [ 2236.178406][T23456] ? __dev_queue_xmit+0x245/0x35a0 [ 2236.183720][T23456] ? __mutex_trylock_common+0x153/0x250 [ 2236.189303][T23456] netlink_rcv_skb+0x216/0x480 [ 2236.194173][T23456] ? xfrm_netlink_rcv+0x90/0x90 [ 2236.199472][T23456] ? netlink_ack+0x1110/0x1110 [ 2236.204450][T23456] ? netlink_deliver_tap+0x2e/0x1b0 [ 2236.209846][T23456] ? __lock_acquire+0x7c80/0x7c80 [ 2236.214889][T23456] xfrm_netlink_rcv+0x79/0x90 [ 2236.219755][T23456] netlink_unicast+0x751/0x8d0 [ 2236.224566][T23456] netlink_sendmsg+0x8c1/0xbe0 [ 2236.229373][T23456] ? netlink_getsockopt+0x580/0x580 [ 2236.234598][T23456] ? aa_sock_msg_perm+0x94/0x150 [ 2236.239733][T23456] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2236.245165][T23456] ? security_socket_sendmsg+0x80/0xa0 [ 2236.250731][T23456] ? netlink_getsockopt+0x580/0x580 [ 2236.255964][T23456] ____sys_sendmsg+0x5bf/0x950 [ 2236.261029][T23456] ? __asan_memset+0x22/0x40 [ 2236.266099][T23456] ? __sys_sendmsg_sock+0x30/0x30 [ 2236.271255][T23456] ? __import_iovec+0x5f2/0x860 [ 2236.276191][T23456] ? import_iovec+0x73/0xa0 [ 2236.280813][T23456] ___sys_sendmsg+0x220/0x290 [ 2236.285611][T23456] ? __sys_sendmsg+0x270/0x270 [ 2236.290507][T23456] __se_sys_sendmsg+0x1a5/0x270 [ 2236.295475][T23456] ? __x64_sys_sendmsg+0x80/0x80 [ 2236.300540][T23456] ? lockdep_hardirqs_on+0x98/0x150 [ 2236.305866][T23456] do_syscall_64+0x55/0xb0 [ 2236.310366][T23456] ? clear_bhb_loop+0x40/0x90 [ 2236.315292][T23456] ? clear_bhb_loop+0x40/0x90 [ 2236.320251][T23456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2236.326600][T23456] RIP: 0033:0x7efc30f8eec9 [ 2236.331163][T23456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2236.352632][T23456] RSP: 002b:00007efc31d61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2236.361169][T23456] RAX: ffffffffffffffda RBX: 00007efc311e5fa0 RCX: 00007efc30f8eec9 [ 2236.370095][T23456] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 2236.378638][T23456] RBP: 00007efc31011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2236.387356][T23456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2236.396072][T23456] R13: 00007efc311e6038 R14: 00007efc311e5fa0 R15: 00007ffc2154ed38 [ 2236.404626][T23456] [ 2236.407953][T23456] [ 2236.410505][T23456] Allocated by task 23072: [ 2236.415279][T23456] kasan_set_track+0x4e/0x70 [ 2236.419896][T23456] __kasan_slab_alloc+0x6c/0x80 [ 2236.424792][T23456] slab_post_alloc_hook+0x6e/0x4d0 [ 2236.431258][T23456] kmem_cache_alloc+0x11e/0x2e0 [ 2236.436297][T23456] xfrm_state_alloc+0x22/0x2a0 [ 2236.441291][T23456] __find_acq_core+0x7d8/0x19d0 [ 2236.446198][T23456] xfrm_find_acq+0x6a/0x90 [ 2236.450652][T23456] xfrm_alloc_userspi+0x57a/0xa90 [ 2236.456089][T23456] xfrm_user_rcv_msg+0x596/0x870 [ 2236.461231][T23456] netlink_rcv_skb+0x216/0x480 [ 2236.466031][T23456] xfrm_netlink_rcv+0x79/0x90 [ 2236.470748][T23456] netlink_unicast+0x751/0x8d0 [ 2236.475626][T23456] netlink_sendmsg+0x8c1/0xbe0 [ 2236.480411][T23456] ____sys_sendmsg+0x5bf/0x950 [ 2236.485281][T23456] ___sys_sendmsg+0x220/0x290 [ 2236.490146][T23456] __se_sys_sendmsg+0x1a5/0x270 [ 2236.495023][T23456] do_syscall_64+0x55/0xb0 [ 2236.499461][T23456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2236.505758][T23456] [ 2236.508100][T23456] Freed by task 9619: [ 2236.512813][T23456] kasan_set_track+0x4e/0x70 [ 2236.517641][T23456] kasan_save_free_info+0x2e/0x50 [ 2236.522720][T23456] ____kasan_slab_free+0x126/0x1e0 [ 2236.528336][T23456] slab_free_freelist_hook+0x130/0x1b0 [ 2236.534505][T23456] kmem_cache_free+0xf8/0x280 [ 2236.540126][T23456] xfrm_state_gc_task+0x10a/0x160 [ 2236.546619][T23456] process_scheduled_works+0xa45/0x15b0 [ 2236.553161][T23456] worker_thread+0xa55/0xfc0 [ 2236.558072][T23456] kthread+0x2fa/0x390 [ 2236.562191][T23456] ret_from_fork+0x48/0x80 [ 2236.567264][T23456] ret_from_fork_asm+0x11/0x20 [ 2236.572551][T23456] [ 2236.574901][T23456] The buggy address belongs to the object at ffff88805ac4c800 [ 2236.574901][T23456] which belongs to the cache xfrm_state of size 848 [ 2236.589503][T23456] The buggy address is located 160 bytes inside of [ 2236.589503][T23456] freed 848-byte region [ffff88805ac4c800, ffff88805ac4cb50) [ 2236.603412][T23456] [ 2236.605839][T23456] The buggy address belongs to the physical page: [ 2236.612273][T23456] page:ffffea00016b1300 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805ac4dc00 pfn:0x5ac4c [ 2236.624219][T23456] head:ffffea00016b1300 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 2236.633448][T23456] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 2236.641788][T23456] page_type: 0xffffffff() [ 2236.646519][T23456] raw: 00fff00000000840 ffff888145643500 dead000000000122 0000000000000000 [ 2236.655581][T23456] raw: ffff88805ac4dc00 0000000080100005 00000001ffffffff 0000000000000000 [ 2236.664337][T23456] page dumped because: kasan: bad access detected [ 2236.671128][T23456] page_owner tracks the page as allocated [ 2236.677009][T23456] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9745, tgid 9744 (syz.1.914), ts 535025666811, free_ts 534836221158 [ 2236.698229][T23456] post_alloc_hook+0x1cd/0x210 [ 2236.703230][T23456] get_page_from_freelist+0x195c/0x19f0 [ 2236.708973][T23456] __alloc_pages+0x1e3/0x460 [ 2236.713688][T23456] alloc_slab_page+0x5d/0x170 [ 2236.718387][T23456] new_slab+0x87/0x2e0 [ 2236.722477][T23456] ___slab_alloc+0xc6d/0x1300 [ 2236.727174][T23456] kmem_cache_alloc+0x1b7/0x2e0 [ 2236.732231][T23456] xfrm_state_alloc+0x22/0x2a0 [ 2236.737098][T23456] xfrm_add_acquire+0x105/0xaf0 [ 2236.741981][T23456] xfrm_user_rcv_msg+0x596/0x870 [ 2236.747024][T23456] netlink_rcv_skb+0x216/0x480 [ 2236.751825][T23456] xfrm_netlink_rcv+0x79/0x90 [ 2236.756609][T23456] netlink_unicast+0x751/0x8d0 [ 2236.761574][T23456] netlink_sendmsg+0x8c1/0xbe0 [ 2236.766459][T23456] ____sys_sendmsg+0x5bf/0x950 [ 2236.771399][T23456] ___sys_sendmsg+0x220/0x290 [ 2236.776227][T23456] page last free stack trace: [ 2236.781096][T23456] free_unref_page_prepare+0x7ce/0x8e0 [ 2236.786601][T23456] free_unref_page+0x32/0x2e0 [ 2236.791363][T23456] __stack_depot_save+0x572/0x630 [ 2236.796398][T23456] kasan_set_track+0x5f/0x70 [ 2236.801174][T23456] kasan_save_free_info+0x2e/0x50 [ 2236.806329][T23456] ____kasan_slab_free+0x126/0x1e0 [ 2236.811591][T23456] slab_free_freelist_hook+0x130/0x1b0 [ 2236.817381][T23456] __kmem_cache_free+0xba/0x1f0 [ 2236.822532][T23456] kobject_uevent_env+0x359/0x8c0 [ 2236.827640][T23456] device_add+0x5e8/0xc20 [ 2236.832097][T23456] device_create+0x25c/0x2e0 [ 2236.836723][T23456] sound_insert_unit+0x6bf/0x710 [ 2236.841796][T23456] register_sound_special_device+0x3c4/0x470 [ 2236.847999][T23456] snd_register_oss_device+0x34f/0x4e0 [ 2236.853834][T23456] snd_mixer_oss_notify_handler+0x194/0x1010 [ 2236.860001][T23456] snd_card_register+0x549/0x6d0 [ 2236.865151][T23456] [ 2236.867488][T23456] Memory state around the buggy address: [ 2236.873395][T23456] ffff88805ac4c780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 2236.881798][T23456] ffff88805ac4c800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2236.890059][T23456] >ffff88805ac4c880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2236.898417][T23456] ^ [ 2236.903551][T23456] ffff88805ac4c900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2236.911726][T23456] ffff88805ac4c980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2236.920285][T23456] ================================================================== [ 2236.929077][T23456] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 2236.936313][T23456] CPU: 0 PID: 23456 Comm: syz.2.4471 Not tainted syzkaller #0 [ 2236.944258][T23456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2236.954882][T23456] Call Trace: [ 2236.958300][T23456] [ 2236.961607][T23456] dump_stack_lvl+0x16c/0x230 [ 2236.966603][T23456] ? show_regs_print_info+0x20/0x20 [ 2236.971871][T23456] ? load_image+0x3b0/0x3b0 [ 2236.976535][T23456] panic+0x2c0/0x710 [ 2236.980584][T23456] ? bpf_jit_dump+0xd0/0xd0 [ 2236.985166][T23456] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 2236.991216][T23456] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 2236.997212][T23456] ? _raw_spin_unlock+0x40/0x40 [ 2237.002460][T23456] ? print_memory_metadata+0x314/0x400 [ 2237.008311][T23456] ? xfrm_alloc_spi+0x598/0x11f0 [ 2237.013381][T23456] check_panic_on_warn+0x84/0xa0 [ 2237.018364][T23456] ? xfrm_alloc_spi+0x598/0x11f0 [ 2237.023439][T23456] end_report+0x6f/0x140 [ 2237.027899][T23456] kasan_report+0x128/0x150 [ 2237.032943][T23456] ? xfrm_alloc_spi+0x598/0x11f0 [ 2237.038041][T23456] xfrm_alloc_spi+0x598/0x11f0 [ 2237.042942][T23456] ? xfrm_alloc_spi+0x2a1/0x11f0 [ 2237.047924][T23456] ? verify_spi_info+0x120/0x120 [ 2237.053012][T23456] ? xfrm_find_acq+0x79/0x90 [ 2237.057650][T23456] xfrm_alloc_userspi+0x5d1/0xa90 [ 2237.062708][T23456] ? end_current_label_crit_section+0x170/0x170 [ 2237.069359][T23456] ? apparmor_capable+0x137/0x1a0 [ 2237.074413][T23456] ? xfrm_dump_policy_done+0x90/0x90 [ 2237.080334][T23456] ? __nla_parse+0x40/0x50 [ 2237.084804][T23456] xfrm_user_rcv_msg+0x596/0x870 [ 2237.089778][T23456] ? lockdep_hardirqs_on+0x98/0x150 [ 2237.095122][T23456] ? xfrm_netlink_rcv+0x90/0x90 [ 2237.100108][T23456] ? __local_bh_enable_ip+0x12e/0x1c0 [ 2237.105626][T23456] ? __dev_queue_xmit+0x245/0x35a0 [ 2237.110875][T23456] ? __mutex_trylock_common+0x153/0x250 [ 2237.116473][T23456] netlink_rcv_skb+0x216/0x480 [ 2237.121291][T23456] ? xfrm_netlink_rcv+0x90/0x90 [ 2237.126191][T23456] ? netlink_ack+0x1110/0x1110 [ 2237.131139][T23456] ? netlink_deliver_tap+0x2e/0x1b0 [ 2237.136407][T23456] ? __lock_acquire+0x7c80/0x7c80 [ 2237.141666][T23456] xfrm_netlink_rcv+0x79/0x90 [ 2237.146493][T23456] netlink_unicast+0x751/0x8d0 [ 2237.151524][T23456] netlink_sendmsg+0x8c1/0xbe0 [ 2237.156345][T23456] ? netlink_getsockopt+0x580/0x580 [ 2237.161591][T23456] ? aa_sock_msg_perm+0x94/0x150 [ 2237.166581][T23456] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2237.172080][T23456] ? security_socket_sendmsg+0x80/0xa0 [ 2237.177764][T23456] ? netlink_getsockopt+0x580/0x580 [ 2237.183111][T23456] ____sys_sendmsg+0x5bf/0x950 [ 2237.188030][T23456] ? __asan_memset+0x22/0x40 [ 2237.192666][T23456] ? __sys_sendmsg_sock+0x30/0x30 [ 2237.197830][T23456] ? __import_iovec+0x5f2/0x860 [ 2237.202736][T23456] ? import_iovec+0x73/0xa0 [ 2237.207644][T23456] ___sys_sendmsg+0x220/0x290 [ 2237.212457][T23456] ? __sys_sendmsg+0x270/0x270 [ 2237.217501][T23456] __se_sys_sendmsg+0x1a5/0x270 [ 2237.222668][T23456] ? __x64_sys_sendmsg+0x80/0x80 [ 2237.227687][T23456] ? lockdep_hardirqs_on+0x98/0x150 [ 2237.233038][T23456] do_syscall_64+0x55/0xb0 [ 2237.237511][T23456] ? clear_bhb_loop+0x40/0x90 [ 2237.242322][T23456] ? clear_bhb_loop+0x40/0x90 [ 2237.247057][T23456] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2237.253012][T23456] RIP: 0033:0x7efc30f8eec9 [ 2237.257457][T23456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2237.277312][T23456] RSP: 002b:00007efc31d61038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2237.285884][T23456] RAX: ffffffffffffffda RBX: 00007efc311e5fa0 RCX: 00007efc30f8eec9 [ 2237.293979][T23456] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 2237.302863][T23456] RBP: 00007efc31011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2237.311492][T23456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2237.320171][T23456] R13: 00007efc311e6038 R14: 00007efc311e5fa0 R15: 00007ffc2154ed38 [ 2237.328554][T23456] [ 2237.331920][T23456] Kernel Offset: disabled [ 2237.336367][T23456] Rebooting in 86400 seconds..