last executing test programs: 6m48.462332266s ago: executing program 4 (id=59): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x10006, 0x100000008}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6m46.956788534s ago: executing program 4 (id=61): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) 6m44.750525639s ago: executing program 4 (id=63): syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000001100)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x5452, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f00000007c0)='\v', 0x1) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x2a, 0x9d, 0x7b, 0x8, 0x102c, 0x6151, 0x4a36, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x1f, 0x1, 0x0, 0xd, "", [{{0x9, 0x4, 0xc5, 0x9, 0x0, 0xb4, 0x2, 0xad}}]}}]}}, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_disconnect(r2) 6m40.740010239s ago: executing program 4 (id=76): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect(0x0, 0x575, &(0x7f0000000780)=ANY=[@ANYBLOB="120100009ba23610030478faffc5010203010902630501000000000904"], 0x0) read$char_usb(r1, &(0x7f0000000a80)=""/188, 0xba) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a8230800090400bc6435fb4d00"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0xfffffffffffffffd) syz_usb_disconnect(r2) write$char_usb(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4b4, 0xbca1, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) r5 = syz_open_dev$evdev(0x0, 0x800, 0x20100) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f0000000b40)=""/4096) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect(0x3, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b7"], 0x0) 6m36.815824844s ago: executing program 4 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x52}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) ioctl$BTRFS_IOC_ENCODED_READ(r6, 0x80809440, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6m35.208165658s ago: executing program 4 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x10006, 0x100000008}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 6m19.897583757s ago: executing program 32 (id=85): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x10006, 0x100000008}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 24.679674432s ago: executing program 2 (id=892): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(r0, 0x0, 0x60800) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x8000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc08c5332, &(0x7f0000000400)={{0x40, 0x9}, 0x0, 0x5, 0xff, {0x8, 0x7}, 0x6, 0x6eef}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$kcm(0x10, 0x2, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) read$eventfd(r3, &(0x7f00000003c0), 0x8) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x12, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x1078, 0x4) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r4, r4, 0x0, 0x200000) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) 20.831948493s ago: executing program 2 (id=900): dup2(0xffffffffffffffff, 0xffffffffffffffff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) epoll_create(0xc) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)=""/9, 0x9}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x5, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0x18}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 19.9252307s ago: executing program 2 (id=904): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 14.490143064s ago: executing program 2 (id=915): syz_mount_image$jfs(&(0x7f0000000540), &(0x7f00000004c0)='./bus\x00', 0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYRES8, @ANYRES8, @ANYRES64, @ANYRESOCT], 0x1, 0x619f, &(0x7f000001a240)="$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") syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000100)='./bus/file0\x00', 0x0) 14.37581378s ago: executing program 5 (id=916): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f00000019c0)='a', 0x1}], 0x1, 0x0, 0x0, 0x1ffff000}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r3, 0x26, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000100)={0x5af15c3c, 0x2, 0x2, 0x10001, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x6, 0x52, 0x1, 0x0, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 13.445539598s ago: executing program 1 (id=921): set_mempolicy(0x3, &(0x7f00000000c0)=0xe5, 0x6) r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)={[{0x0, 0x0, 0x103}]}, 0x1}, 0x1) 13.189260851s ago: executing program 1 (id=923): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10) r2 = socket(0x2c, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="110000000400000004000000"], 0x48) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r5 = syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0xbf7ecaf90944b16) ioctl$BLKGETDISKSEQ(r5, 0x80081280, &(0x7f0000000140)) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = getpid() sched_setscheduler(r6, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r9 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x162281) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r9, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) r10 = dup2(r4, r4) ioctl$VIDIOC_LOG_STATUS(r10, 0x5646, 0x0) read$char_usb(r10, &(0x7f00000000c0)=""/192, 0xc0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000140), &(0x7f0000000080)=@udp=r2}, 0x20) 12.141201446s ago: executing program 0 (id=924): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) 11.566879986s ago: executing program 1 (id=925): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 10.455692544s ago: executing program 0 (id=926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) setsockopt$sock_int(r3, 0x1, 0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) pipe(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) 9.95481298s ago: executing program 0 (id=927): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) chdir(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 9.863880005s ago: executing program 2 (id=928): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r0, 0xc0805841, &(0x7f0000000180)={0x1, 0x1, 0x2}) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$dupfd(0xffffffffffffffff, 0x2, 0xffffffffffffffff) fsmount(0xffffffffffffffff, 0x0, 0x8) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x64) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x200031, &(0x7f0000000100)={[{@stats}]}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008001f80"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) 8.764566853s ago: executing program 0 (id=929): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) ioctl$IOC_PR_PREEMPT(r2, 0x40046109, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = syz_open_dev$vim2m(&(0x7f0000002c80), 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000140)={0x3, 0x1, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 5.911738102s ago: executing program 3 (id=931): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, 0x0) mlock2(&(0x7f0000ff5000/0x9000)=nil, 0x9000, 0x0) munlock(&(0x7f0000ffc000/0x1000)=nil, 0x1000) 5.889744113s ago: executing program 5 (id=932): r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_to_batadv\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000014002b8008000100", @ANYRES32, @ANYBLOB="080003000200e9"], 0x34}, 0x1, 0x0, 0x0, 0x88000}, 0x0) 5.703103623s ago: executing program 2 (id=933): syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) syz_usb_connect$uac1(0x3, 0xe5, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x0, 0x5, &(0x7f0000000280)={0x5, 0xf, 0x5}, 0x6, [{0xf5, &(0x7f0000000880)=ANY=[@ANYBLOB="f50349190bc465b1ba9ba3bc71ee4c09ab04c7052ccd3a9baecf68f217238bb4b5a5ad1de43aea65757e36fc769e4babbdc9df1cf935f6065e5b9824d1c4a1c67a17da9e95d70aa43acb3ba25fa22a05dc09af98ea5392503102faaddedfacda86b1faceada55725abd6a3807a46005f30516b001cb060d4c7a5dcc2183d46b7de0842ab0c3eea4071e90010e77e0acdc44814a0d3da78edb22b5a5a16"]}, {0x0, 0x0}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x437}}, {0x84, &(0x7f0000000500)=@string={0x84, 0x3, "efcfb4fc136cce015f2570a9e9cb08883429ca19ee7bb4c132f11211d0ae136b82e39eda5307f552e126317883196bdba7585aa40f1bd0e8334ba0f49d487aa2f1be96685a9be2112c3df281396077e41dca9c307813b444a6c083dba50aeb5ab39f0b58bb30dac9ae2cdf6217c061ee63ecff4230616a1e53c9566acaeebef612a9"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xc01}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xecf3}}]}) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243) close(r0) syz_ublk_setup_io_uring(0x21d0, &(0x7f00000006c0)={0x0, 0x8b9f, 0x10000, 0x1, 0x39c}, &(0x7f0000000740), &(0x7f0000000780), &(0x7f00000007c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) 5.003904209s ago: executing program 5 (id=934): clock_getres(0x4, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x8936, 0x0) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.877396765s ago: executing program 1 (id=935): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000380)="c1", 0x1, 0x20004081, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=@ipv4_delroute={0x1c, 0x19, 0x4, 0x70bd25, 0x25dfdbfb, {0x2, 0x10, 0x10, 0x5, 0x0, 0x0, 0xfd, 0x6, 0x2100}}, 0x1c}}, 0x804c844) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 4.79483197s ago: executing program 3 (id=936): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fcntl$setown(0xffffffffffffffff, 0x8, r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r3) keyctl$KEYCTL_MOVE(0x1e, r4, r4, r3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) 4.465910487s ago: executing program 1 (id=937): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x100) setsockopt$sock_int(r3, 0x1, 0x20, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) pipe(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x40810, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x141}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x13) 3.345083805s ago: executing program 3 (id=938): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20085e, &(0x7f00000107c0)={[{@grpjquota}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0xa32}}, {@acl}]}, 0x1, 0x53a, &(0x7f0000010280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xfffffe57}], 0x1, 0x5405, 0x0, 0x0) 3.123719387s ago: executing program 0 (id=939): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x41, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) chdir(0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 3.07994212s ago: executing program 5 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001840)={0x28, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7, 0x52}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x14001}, 0x9590f6cc3ea35512) ioctl$BTRFS_IOC_ENCODED_READ(r6, 0x80809440, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000140)={0x2c, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r0) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00', @ANYRES16=r7, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2.693009879s ago: executing program 1 (id=941): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000a00)={0x44, &(0x7f00000007c0)={0x20, 0x10, 0x4, "8d4b2751"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.568168868s ago: executing program 0 (id=942): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x28, 0xb, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg(r2, &(0x7f0000000380)=[{{&(0x7f0000000580)=@nl=@proc, 0x80, &(0x7f0000001900)=[{&(0x7f00000019c0)='a', 0x1}], 0x1, 0x0, 0x0, 0x1ffff000}}, {{&(0x7f0000000200)=@nl=@proc, 0x80, 0x0}}], 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$lock(r3, 0x26, &(0x7f00000031c0)={0x1}) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x3}) fcntl$lock(r3, 0x26, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r5], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) r6 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_TRANSMIT(r6, 0xc0386105, &(0x7f0000000100)={0x5af15c3c, 0x2, 0x2, 0x10001, 0x4, 0x7fff, "16b0bc450cfc47961ed5d8167d4f7865", 0x6, 0x52, 0x1, 0x0, 0x9, 0x9, 0xd}) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x5, 0x0, 0x3, 0x1000006, 'U\x00', "1575a859", "0725eade", '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) 1.34911446s ago: executing program 5 (id=943): mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0xa002, &(0x7f0000000140)=0x3, 0x80000000, 0x2) 1.260681934s ago: executing program 3 (id=944): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) add_key$keyring(0x0, &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r3, 0x0) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) 1.250619045s ago: executing program 5 (id=945): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000022c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xffff, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x57f}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4e3, 0xca0b, 0x6, 0x3}, 0x3}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x44000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r10, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 252.255597ms ago: executing program 3 (id=946): r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup2(r1, r0) write$tun(r2, &(0x7f0000000c40)={@void, @void, @mpls={[], @llc={@snap={0xab, 0xab, "a0", "13aa7d", 0x18}}}}, 0x8) r3 = syz_open_dev$loop(&(0x7f0000000500), 0xee8, 0x5042) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20940, 0x1e2) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000140)={r4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8004, 0x0, 0x0, 0x5, 0x4, "6fa715e63fee9cb07f3c19ed0c04afcaba06f6d9584488da0162d4cc7030ec4f7b9ab89b3e19b47b6669f6bdb9c400", "8bc975aabbbbe9e4cbb0e98d43a12e12538b330e6fe3bce73919393417abdc6c58f0abd4f0c29b3c71757f74bc429c808f46e9cda4584203143a0b9705fb16b6", "666f1d5f5c43005b310134ce9a6d0369862b72c1f9f4980a2346c4dd62ad8050", [0x6, 0x61fe]}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000007) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000a80)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$LOOP_SET_STATUS(r3, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x8, 0xa, 0x7, 0x8, "b01eb45b7b42d1b78db69e4ddcbe602aceee5ab4c7351181a15d8f7a28bf04c5a4ee342b6847cb70588f8f84cf676d0afca0f2e6f4d82e4208ca4c5f7365d431", "b31f22c9080873366b499607be231200bc798b00", [0x2, 0x2000005e8]}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r3) r6 = open_tree(r4, &(0x7f0000000000)='./file0\x00', 0x43289727b327133f) ioctl$BLKIOOPT(r6, 0x1279, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) 0s ago: executing program 3 (id=947): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe00000000a4080000000048027b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): [ 82.059683][ T4316] vivid-004: RDS Reception: true [ 82.065222][ T4316] vivid-004: RDS Program Type: 0 inactive [ 82.071110][ T4316] vivid-004: RDS PS Name: inactive [ 82.077713][ T4316] vivid-004: RDS Radio Text: inactive [ 82.098726][ T4316] vivid-004: RDS Traffic Announcement: false inactive [ 82.115809][ T4316] vivid-004: RDS Traffic Program: false inactive [ 82.131322][ T4316] vivid-004: RDS Music: false inactive [ 82.227604][ T4316] vivid-004: ================== END STATUS ================== [ 82.273896][ T4173] usb 4-1: Using ep0 maxpacket: 16 [ 83.082935][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.102923][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.112920][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.122919][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.132920][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.142923][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.152921][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.163653][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!! [ 83.364125][ T4349] netlink: 'syz.0.18': attribute type 1 has an invalid length. [ 83.563469][ T4173] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 83.578862][ T4173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.764799][ T4358] netlink: 'syz.0.23': attribute type 12 has an invalid length. [ 83.793606][ T4173] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 83.802725][ T4173] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.874038][ T4173] usb 4-1: Product: syz [ 84.826421][ T4367] hub 8-0:1.0: USB hub found [ 84.943332][ T4367] hub 8-0:1.0: 1 port detected [ 85.139801][ T4367] vivid-003: ================= START STATUS ================= [ 85.199811][ T4367] vivid-003: Radio HW Seek Mode: Bounded [ 85.377134][ T4367] vivid-003: Radio Programmable HW Seek: false [ 85.412975][ T4367] vivid-003: RDS Rx I/O Mode: Block I/O [ 85.532142][ T4367] vivid-003: Generate RBDS Instead of RDS: false [ 85.629416][ T4367] vivid-003: RDS Reception: true [ 85.757881][ T4367] vivid-003: RDS Program Type: 0 inactive [ 85.852972][ T4367] vivid-003: RDS PS Name: inactive [ 85.928886][ T4367] vivid-003: RDS Radio Text: inactive [ 85.982978][ T4367] vivid-003: RDS Traffic Announcement: false inactive [ 85.997983][ T4173] usb 4-1: Manufacturer: syz [ 86.002661][ T4173] usb 4-1: SerialNumber: syz [ 86.011490][ T4173] usb 4-1: config 0 descriptor?? [ 86.034564][ T4173] usb 4-1: can't set config #0, error -71 [ 86.084392][ T4173] usb 4-1: USB disconnect, device number 2 [ 86.323857][ T4367] vivid-003: RDS Traffic Program: false inactive [ 86.330291][ T4367] vivid-003: RDS Music: false inactive [ 86.346385][ T4367] vivid-003: ================== END STATUS ================== [ 88.669687][ T1108] cfg80211: failed to load regulatory.db [ 89.839444][ T4394] netlink: 'syz.0.32': attribute type 1 has an invalid length. [ 89.847214][ T4173] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.093052][ T4173] usb 2-1: Using ep0 maxpacket: 8 [ 90.332809][ T4402] netlink: 44 bytes leftover after parsing attributes in process `syz.3.31'. [ 90.543216][ T4173] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 90.601826][ T4173] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 90.854085][ T4173] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 91.033027][ T4173] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 91.078151][ T4173] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 91.172603][ T4173] usb 2-1: config 168 interface 0 has no altsetting 0 [ 91.273249][ T4173] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 91.282995][ T4173] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 91.298158][ T4411] tipc: Started in network mode [ 91.313267][ T4411] tipc: Node identity fe800000000000000000000000000014, cluster identity 4711 [ 91.325876][ T4173] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 91.346865][ T4411] tipc: Enabled bearer , priority 10 [ 91.354924][ T4173] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 91.387376][ T4173] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 91.402583][ T4173] usb 2-1: config 168 interface 0 has no altsetting 0 [ 91.593729][ T4173] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 91.604247][ T4173] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 91.685702][ T4173] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 91.697585][ T4173] usb 2-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 91.721198][ T4173] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 91.738054][ T4173] usb 2-1: config 168 interface 0 has no altsetting 0 [ 92.483647][ T4303] tipc: Node number set to 4269801492 [ 92.493375][ T4173] usb 2-1: string descriptor 0 read error: -71 [ 92.504740][ T4173] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 92.559610][ T4173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.680683][ T4230] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 92.700983][ T4173] usb 2-1: can't set config #168, error -71 [ 92.742386][ T4173] usb 2-1: USB disconnect, device number 2 [ 93.583027][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 93.663462][ T4303] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 93.753784][ T4230] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 93.800189][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.818420][ T4435] netlink: 'syz.0.44': attribute type 1 has an invalid length. [ 93.922989][ T4303] usb 3-1: Using ep0 maxpacket: 8 [ 94.623066][ T4230] usb 4-1: string descriptor 0 read error: -71 [ 94.629424][ T4230] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 94.642916][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.704731][ T4230] usb 4-1: config 0 descriptor?? [ 94.732105][ T4230] usb 4-1: can't set config #0, error -71 [ 94.757412][ T4230] usb 4-1: USB disconnect, device number 3 [ 94.823306][ T4303] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 94.837091][ T4303] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 94.910610][ T4303] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 94.942080][ T4303] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 94.971691][ T4303] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 95.001741][ T4303] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.042747][ T4303] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 96.187182][ T4303] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.223054][ T4303] usb 3-1: can't set config #16, error -71 [ 96.521970][ T4230] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.861853][ T4303] usb 3-1: USB disconnect, device number 2 [ 96.885910][ T4452] netlink: 'syz.4.49': attribute type 12 has an invalid length. [ 98.176177][ T4465] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.192469][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 98.359056][ T4230] usb 4-1: device descriptor read/all, error -71 [ 98.993883][ T4279] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 99.243017][ T4279] usb 1-1: Using ep0 maxpacket: 16 [ 99.483197][ T4279] usb 1-1: unable to get BOS descriptor or descriptor too short [ 99.573296][ T4279] usb 1-1: config 1 has an invalid interface number: 231 but max is 0 [ 99.584969][ T4279] usb 1-1: config 1 has no interface number 0 [ 99.753192][ T4279] usb 1-1: New USB device found, idVendor=152d, idProduct=0310, bcdDevice=3b.0a [ 99.766707][ T4279] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.777713][ T4279] usb 1-1: Product: syz [ 99.782009][ T4279] usb 1-1: Manufacturer: syz [ 99.790875][ T4279] usb 1-1: SerialNumber: syz [ 100.181797][ T4279] usb 1-1: USB disconnect, device number 2 [ 101.693599][ T4303] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 103.112944][ T1111] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 104.668155][ T1111] usb 3-1: device descriptor read/64, error -71 [ 104.714373][ T4230] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.571316][ T1111] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.579144][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 106.975090][ T4230] usb 5-1: device descriptor read/all, error -71 [ 106.981814][ T1325] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 108.054188][ T4231] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.061934][ T1111] usb 3-1: device descriptor read/64, error -71 [ 108.963191][ T1325] usb 1-1: device not accepting address 3, error -71 [ 108.970782][ T1111] usb usb3-port1: attempt power cycle [ 109.043247][ T4230] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 109.123189][ T4231] usb 4-1: Using ep0 maxpacket: 8 [ 109.183158][ T4303] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 109.324522][ T4230] usb 5-1: Using ep0 maxpacket: 8 [ 109.385599][ T4231] usb 4-1: unable to get BOS descriptor or descriptor too short [ 109.413589][ T1111] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 109.484169][ T4230] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 109.499430][ T4230] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 109.513097][ T4231] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.555559][ T4231] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 109.568880][ T1111] usb 3-1: Using ep0 maxpacket: 16 [ 109.608234][ T4230] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 109.654424][ T4303] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 109.690789][ T4303] usb 2-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 109.705421][ T4230] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 109.743900][ T1111] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 109.764052][ T1111] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.784727][ T4303] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.810290][ T4230] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 109.853732][ T4231] usb 4-1: New USB device found, idVendor=1235, idProduct=8217, bcdDevice= 0.40 [ 109.872833][ T4303] usb 2-1: config 0 descriptor?? [ 109.881186][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.892926][ T4230] usb 5-1: config 168 interface 0 has no altsetting 0 [ 109.900189][ T4231] usb 4-1: Product: syz [ 109.905079][ T4556] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 109.917501][ T4231] usb 4-1: Manufacturer: syz [ 109.922158][ T4231] usb 4-1: SerialNumber: syz [ 109.998117][ T4231] usb 4-1: can't set config #1, error -71 [ 110.004527][ T4230] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 110.011971][ T4230] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 110.024144][ T1111] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 110.043317][ T4231] usb 4-1: USB disconnect, device number 6 [ 110.082914][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.200458][ T4568] hub 8-0:1.0: USB hub found [ 110.207114][ T4568] hub 8-0:1.0: 1 port detected [ 110.226522][ T4568] vivid-001: ================= START STATUS ================= [ 110.234359][ T4568] vivid-001: Radio HW Seek Mode: Bounded [ 110.241658][ T4568] vivid-001: Radio Programmable HW Seek: false [ 110.248086][ T4568] vivid-001: RDS Rx I/O Mode: Block I/O [ 110.253866][ T4568] vivid-001: Generate RBDS Instead of RDS: false [ 110.260416][ T4568] vivid-001: RDS Reception: true [ 110.265575][ T4568] vivid-001: RDS Program Type: 0 inactive [ 110.271536][ T4568] vivid-001: RDS PS Name: inactive [ 110.276993][ T4568] vivid-001: RDS Radio Text: inactive [ 110.282663][ T4568] vivid-001: RDS Traffic Announcement: false inactive [ 110.289674][ T4568] vivid-001: RDS Traffic Program: false inactive [ 110.296235][ T4568] vivid-001: RDS Music: false inactive [ 110.301875][ T4568] vivid-001: ================== END STATUS ================== [ 111.056297][ T1111] usb 3-1: Product: syz [ 111.060949][ T1111] usb 3-1: Manufacturer: syz [ 111.065684][ T4230] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 111.085743][ T1111] usb 3-1: SerialNumber: syz [ 111.091440][ T4230] usb 5-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 111.140992][ T1111] usb 3-1: config 0 descriptor?? [ 111.146714][ T4230] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 111.180061][ T1111] usb 3-1: can't set config #0, error -71 [ 111.406198][ T4303] hid (null): unknown global tag 0xe [ 111.415551][ T4303] hid (null): report_id 2029225129 is invalid [ 111.426378][ T1111] usb 3-1: USB disconnect, device number 5 [ 111.432444][ T4230] usb 5-1: config 168 interface 0 has no altsetting 0 [ 111.450170][ T4303] hid (null): bogus close delimiter [ 111.471366][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 112.273343][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 112.280560][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 112.288065][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 112.297950][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 112.305206][ T4230] usb 5-1: unable to read config index 2 descriptor/start: -71 [ 112.312834][ T4230] usb 5-1: can't read configurations, error -71 [ 112.359039][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 112.383563][ T4230] usb usb5-port1: attempt power cycle [ 112.401955][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 112.673770][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 112.873395][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.813497][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.820565][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.830570][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.838075][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.845315][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.852268][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.859728][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.866980][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.891323][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.898792][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.906137][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.913459][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.920395][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.928119][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.935426][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.951672][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.959744][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.968067][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.975451][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.982424][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 113.990309][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.007288][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.014689][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.030016][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.049131][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.065252][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.080436][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.095291][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.112135][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.129800][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.148077][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.165315][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.177287][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.185842][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.192774][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.200298][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.207544][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.214939][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.221990][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.229693][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.249954][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.262950][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.273635][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.290889][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.313050][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.330248][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.340367][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x4 [ 114.360628][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.368079][ T4303] wacom 0003:056A:0084.0001: unknown main item tag 0x0 [ 114.394398][ T4303] wacom 0003:056A:0084.0001: unknown global tag 0xe [ 114.403189][ T4303] wacom 0003:056A:0084.0001: item 0 4 1 14 parsing failed [ 114.410959][ T4303] wacom 0003:056A:0084.0001: parse failed [ 114.448232][ T4303] wacom: probe of 0003:056A:0084.0001 failed with error -22 [ 114.475671][ T4303] usb 2-1: USB disconnect, device number 4 [ 116.396321][ T4507] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.195207][ T4507] usb 1-1: Using ep0 maxpacket: 16 [ 118.313197][ T4507] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 118.334417][ T4507] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 118.360872][ T4507] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 118.387262][ T4507] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 118.417873][ T4507] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 118.462984][ T4507] usb 1-1: config 1 interface 0 has no altsetting 0 [ 118.483012][ T4507] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 118.533536][ T4507] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.685496][ T4507] ums-sddr09 1-1:1.0: USB Mass Storage device detected [ 120.349035][ T4507] ums-sddr09: probe of 1-1:1.0 failed with error -22 [ 120.410916][ T4507] usb 1-1: USB disconnect, device number 5 [ 120.623068][ T4283] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 120.860408][ T26] audit: type=1326 audit(1777353496.639:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 120.928420][ T4283] usb 3-1: Using ep0 maxpacket: 16 [ 120.935807][ T26] audit: type=1326 audit(1777353496.669:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 120.978853][ T26] audit: type=1326 audit(1777353496.669:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fcad64b522c code=0x7ffc0000 [ 121.093354][ T4283] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.148559][ T4283] usb 3-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.192699][ T26] audit: type=1326 audit(1777353496.669:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fcad64b528e code=0x7ffc0000 [ 121.214822][ T4283] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.214890][ T4283] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b1c, bcdDevice= 0.00 [ 121.214915][ T4283] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.336816][ T26] audit: type=1326 audit(1777353496.669:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcad64f8a6b code=0x7ffc0000 [ 122.118346][ T26] audit: type=1326 audit(1777353496.669:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 122.207359][ T26] audit: type=1326 audit(1777353496.669:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 122.302414][ T26] audit: type=1326 audit(1777353496.679:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 122.393458][ T26] audit: type=1326 audit(1777353496.679:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 122.433900][ T4283] usb 3-1: config 0 descriptor?? [ 122.554458][ T26] audit: type=1326 audit(1777353496.679:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4641 comm="syz.0.101" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 122.894430][ T4630] udc-core: couldn't find an available UDC or it's busy [ 122.901457][ T4630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.275769][ T4630] udc-core: couldn't find an available UDC or it's busy [ 123.283209][ T4630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.380026][ T4630] udc-core: couldn't find an available UDC or it's busy [ 123.413012][ T4630] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 123.456120][ T4283] hid-generic 0003:1B1C:1B1C.0002: unknown main item tag 0x0 [ 123.503214][ T4283] hid-generic 0003:1B1C:1B1C.0002: unknown main item tag 0x0 [ 123.538917][ T4283] hid-generic 0003:1B1C:1B1C.0002: unknown main item tag 0x0 [ 123.572434][ T4283] hid-generic 0003:1B1C:1B1C.0002: unknown main item tag 0x0 [ 125.038378][ T4283] hid-generic 0003:1B1C:1B1C.0002: hidraw0: USB HID v0.05 Device [HID 1b1c:1b1c] on usb-dummy_hcd.2-1/input0 [ 125.078119][ T4283] usb 3-1: USB disconnect, device number 6 [ 125.539069][ T4680] fido_id[4680]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 127.222621][ T4690] hub 8-0:1.0: USB hub found [ 127.227781][ T4690] hub 8-0:1.0: 1 port detected [ 127.235113][ T4690] vivid-002: ================= START STATUS ================= [ 127.243592][ T4690] vivid-002: Radio HW Seek Mode: Bounded [ 127.249266][ T4690] vivid-002: Radio Programmable HW Seek: false [ 127.255963][ T4690] vivid-002: RDS Rx I/O Mode: Block I/O [ 127.261549][ T4690] vivid-002: Generate RBDS Instead of RDS: false [ 127.267973][ T4690] vivid-002: RDS Reception: true [ 127.272999][ T4690] vivid-002: RDS Program Type: 0 inactive [ 127.278833][ T4690] vivid-002: RDS PS Name: inactive [ 127.284126][ T4690] vivid-002: RDS Radio Text: inactive [ 127.289640][ T4690] vivid-002: RDS Traffic Announcement: false inactive [ 127.296521][ T4690] vivid-002: RDS Traffic Program: false inactive [ 127.302947][ T4690] vivid-002: RDS Music: false inactive [ 127.308466][ T4690] vivid-002: ================== END STATUS ================== [ 128.072161][ T4707] device batadv_slave_1 entered promiscuous mode [ 128.093895][ T4706] device batadv_slave_1 left promiscuous mode [ 132.758464][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.765131][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.032031][ T4232] Bluetooth: hci5: command 0x0409 tx timeout [ 135.191191][ T4507] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 135.208451][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 135.473819][ T4507] usb 3-1: Using ep0 maxpacket: 16 [ 135.832587][ T4723] chnl_net:caif_netlink_parms(): no params data found [ 135.853822][ T4507] usb 3-1: config 1 has an invalid interface number: 105 but max is 0 [ 135.888608][ T4507] usb 3-1: config 1 has no interface number 0 [ 135.903042][ T4507] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 135.995064][ T4766] binder: 4761:4766 unknown command 543388532 [ 136.001365][ T4766] binder: 4761:4766 ioctl c0306201 200000000080 returned -22 [ 136.017541][ T4766] binder: BINDER_SET_CONTEXT_MGR already set [ 136.023949][ T4766] binder: 4761:4766 ioctl 4018620d 200000000040 returned -16 [ 138.409394][ T4507] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 138.549191][ T4507] usb 3-1: config 1 interface 105 has no altsetting 0 [ 138.658477][ T4232] Bluetooth: hci5: command 0x040f tx timeout [ 138.783305][ T4507] usb 3-1: string descriptor 0 read error: -71 [ 138.818146][ T4507] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 138.969938][ T4507] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 139.213203][ T4507] usb 3-1: can't set config #1, error -71 [ 139.275138][ T4507] usb 3-1: USB disconnect, device number 7 [ 139.603828][ T4723] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.634746][ T4723] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.644625][ T4723] device bridge_slave_0 entered promiscuous mode [ 139.670036][ T4723] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.677469][ T4723] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.696254][ T4723] device bridge_slave_1 entered promiscuous mode [ 140.761203][ T4232] Bluetooth: hci5: command 0x0419 tx timeout [ 140.923784][ T4723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.050418][ T4723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.077801][ T4723] team0: Port device team_slave_0 added [ 141.086870][ T4723] team0: Port device team_slave_1 added [ 141.751654][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.783714][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.895707][ T4723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.941834][ T4723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.972513][ T4723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.015485][ T4723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.109741][ T4723] device hsr_slave_0 entered promiscuous mode [ 143.167799][ T4723] device hsr_slave_1 entered promiscuous mode [ 143.211031][ T4723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.229813][ T4723] Cannot create hsr debugfs directory [ 145.320055][ T4723] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 145.505566][ T4723] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 145.552258][ T4723] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 145.590258][ T4723] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 145.755246][ T4846] hub 8-0:1.0: USB hub found [ 145.846192][ T4846] hub 8-0:1.0: 1 port detected [ 145.865367][ T4723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.901953][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 145.946037][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 145.999798][ T4723] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.018616][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 146.040763][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 146.164729][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.172062][ T4296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.413569][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 146.520414][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 146.640262][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 146.742450][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.749683][ T4296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.956407][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 147.114587][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 147.259720][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 147.406899][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 147.602058][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 147.751363][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 147.900729][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 148.101740][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 148.172695][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 148.321350][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 148.448193][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 148.584184][ T4723] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 150.602662][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 150.706147][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 150.906537][ T4869] IPv6: NLM_F_REPLACE set, but no existing node found! [ 151.440603][ T4723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.986920][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 152.004312][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 152.163145][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 152.183622][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 152.268637][ T4723] device veth0_vlan entered promiscuous mode [ 152.739075][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 153.905707][ T4378] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 154.263890][ T4723] device veth1_vlan entered promiscuous mode [ 154.415979][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 154.428507][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 154.735546][ T4723] device veth0_macvtap entered promiscuous mode [ 156.209824][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.238037][ T4723] device veth1_macvtap entered promiscuous mode [ 157.293191][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.553013][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.597020][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.672275][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.729284][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.749261][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.787477][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.822790][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.863057][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.874500][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.885026][ T4228] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 157.906091][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.916277][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 157.927235][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 157.940291][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 157.981457][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.032513][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.065614][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.076365][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.087396][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.097421][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.107919][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.117979][ T4723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.128741][ T4723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.143125][ T4228] usb 1-1: Using ep0 maxpacket: 8 [ 158.154564][ T4723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.176937][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.202272][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.287808][ T4228] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 158.316547][ T4228] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.334952][ T4723] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.374035][ T4723] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.383555][ T4228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.422766][ T4723] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.431714][ T4723] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.435500][ T4228] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.510310][ T4228] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.589762][ T4228] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 158.636580][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.023332][ T4228] usb 1-1: GET_CAPABILITIES returned 0 [ 159.076167][ T4228] usbtmc 1-1:16.0: can't read capabilities [ 159.272636][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.282801][ T4915] fuse: Unknown parameter 'group_i00000000000000000000' [ 159.296357][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.346445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.368762][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 159.368777][ T26] audit: type=1326 audit(1777353535.149:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 159.406293][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.414183][ T4279] usb 1-1: USB disconnect, device number 6 [ 159.421230][ T4928] hub 8-0:1.0: USB hub found [ 159.438579][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.465560][ T4928] hub 8-0:1.0: 1 port detected [ 159.470597][ T26] audit: type=1326 audit(1777353535.149:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 159.486342][ T4237] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.542005][ T26] audit: type=1326 audit(1777353535.149:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 159.619770][ T26] audit: type=1326 audit(1777353535.159:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 159.689933][ T26] audit: type=1326 audit(1777353535.159:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 159.842321][ T26] audit: type=1326 audit(1777353535.159:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 159.864839][ T26] audit: type=1326 audit(1777353535.159:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcad64f8dd9 code=0x7ffc0000 [ 159.893908][ T4932] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 159.907688][ T26] audit: type=1326 audit(1777353535.199:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcad64b960e code=0x7ffc0000 [ 159.944635][ T26] audit: type=1326 audit(1777353535.299:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcad64b960e code=0x7ffc0000 [ 159.969558][ T26] audit: type=1326 audit(1777353535.399:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fcad64b960e code=0x7ffc0000 [ 160.337698][ T23] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 162.455252][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.501675][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 162.537889][ T23] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 162.576458][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.638498][ T23] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 162.677772][ T23] usb 6-1: no configuration chosen from 1 choice [ 162.783797][ T4230] usb 6-1: USB disconnect, device number 2 [ 164.025807][ T4972] fuse: Unknown parameter 'group_i00000000000000000000' [ 165.030127][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 165.030142][ T26] audit: type=1326 audit(1777353540.809:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f894194f60e code=0x7ffc0000 [ 165.153929][ T26] audit: type=1326 audit(1777353540.909:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f894194f60e code=0x7ffc0000 [ 165.272945][ T26] audit: type=1326 audit(1777353541.009:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4971 comm="syz.3.192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f894198edd9 code=0x7ffc0000 [ 165.558247][ T4995] fuse: Invalid rootmode [ 171.800827][ T5035] tipc: Enabling of bearer rejected, failed to enable media [ 174.927881][ T5050] fuse: Invalid rootmode [ 176.461135][ T5066] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 177.341007][ T26] audit: type=1326 audit(1777353553.119:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.5.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663cddcdd9 code=0x7ffc0000 [ 177.383270][ T4507] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 177.905456][ T26] audit: type=1326 audit(1777353553.149:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.5.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663cddcdd9 code=0x7ffc0000 [ 178.061394][ T26] audit: type=1326 audit(1777353553.159:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.5.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=111 compat=0 ip=0x7f663cddcdd9 code=0x7ffc0000 [ 180.002483][ T4507] usb 4-1: device not accepting address 7, error -71 [ 180.076233][ T26] audit: type=1326 audit(1777353553.159:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.5.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663cddcdd9 code=0x7ffc0000 [ 180.253286][ T26] audit: type=1326 audit(1777353553.159:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5071 comm="syz.5.211" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f663cddcdd9 code=0x7ffc0000 [ 180.503762][ T4230] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 182.720546][ T5116] binder: 5112:5116 unknown command 543388532 [ 182.726795][ T5116] binder: 5112:5116 ioctl c0306201 200000000080 returned -22 [ 186.983053][ T5140] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 187.872738][ T5144] tipc: Enabling of bearer rejected, already enabled [ 190.327673][ T4230] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 191.947200][ T5175] hub 8-0:1.0: USB hub found [ 191.953895][ T5175] hub 8-0:1.0: 1 port detected [ 192.017000][ T5175] vivid-000: ================= START STATUS ================= [ 192.024935][ T5175] vivid-000: Radio HW Seek Mode: Bounded [ 192.031028][ T5175] vivid-000: Radio Programmable HW Seek: false [ 192.037813][ T5175] vivid-000: RDS Rx I/O Mode: Block I/O [ 192.043925][ T5175] vivid-000: Generate RBDS Instead of RDS: false [ 192.050763][ T5175] vivid-000: RDS Reception: true [ 192.056360][ T5175] vivid-000: RDS Program Type: 0 inactive [ 192.062702][ T5175] vivid-000: RDS PS Name: inactive [ 192.068639][ T5175] vivid-000: RDS Radio Text: inactive [ 192.074744][ T5175] vivid-000: RDS Traffic Announcement: false inactive [ 192.082188][ T5175] vivid-000: RDS Traffic Program: false inactive [ 192.089135][ T5175] vivid-000: RDS Music: false inactive [ 192.095298][ T5175] vivid-000: ================== END STATUS ================== [ 192.856113][ T4303] Bluetooth: hci0: command 0x0406 tx timeout [ 192.862348][ T4303] Bluetooth: hci1: command 0x0406 tx timeout [ 192.869783][ T4303] Bluetooth: hci2: command 0x0406 tx timeout [ 192.877191][ T4303] Bluetooth: hci3: command 0x0406 tx timeout [ 194.203560][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.210616][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.703059][ T4230] usb 6-1: device descriptor read/all, error -71 [ 196.113387][ T5200] binder: 5191:5200 unknown command 543388532 [ 196.119609][ T5200] binder: 5191:5200 ioctl c0306201 200000000080 returned -22 [ 210.207766][ T5316] hub 8-0:1.0: USB hub found [ 210.212750][ T5316] hub 8-0:1.0: 1 port detected [ 210.239500][ T5316] vivid-000: ================= START STATUS ================= [ 210.247435][ T5316] vivid-000: Radio HW Seek Mode: Bounded [ 210.253320][ T5316] vivid-000: Radio Programmable HW Seek: false [ 210.259683][ T5316] vivid-000: RDS Rx I/O Mode: Block I/O [ 210.265468][ T5316] vivid-000: Generate RBDS Instead of RDS: false [ 210.271976][ T5316] vivid-000: RDS Reception: true [ 210.277084][ T5316] vivid-000: RDS Program Type: 0 inactive [ 210.283810][ T5316] vivid-000: RDS PS Name: inactive [ 210.289524][ T5316] vivid-000: RDS Radio Text: inactive [ 210.295263][ T5316] vivid-000: RDS Traffic Announcement: false inactive [ 210.302254][ T5316] vivid-000: RDS Traffic Program: false inactive [ 210.308832][ T5316] vivid-000: RDS Music: false inactive [ 210.314529][ T5316] vivid-000: ================== END STATUS ================== [ 213.621473][ T5340] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 214.061832][ T4301] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 214.543871][ T4301] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.884145][ T4301] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 214.899568][ T4301] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 214.909319][ T4301] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.975164][ T4301] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 215.012916][ T4301] usb 6-1: no configuration chosen from 1 choice [ 216.961313][ T23] usb 6-1: USB disconnect, device number 5 [ 220.639071][ T5380] netlink: 'syz.0.299': attribute type 1 has an invalid length. [ 223.570500][ T5416] binder: 5409:5416 unknown command 543388532 [ 223.576823][ T5416] binder: 5409:5416 ioctl c0306201 200000000080 returned -22 [ 229.077273][ T5437] hub 8-0:1.0: USB hub found [ 229.082926][ T5437] hub 8-0:1.0: 1 port detected [ 229.089854][ T5437] vivid-002: ================= START STATUS ================= [ 229.097626][ T5437] vivid-002: Radio HW Seek Mode: Bounded [ 229.103362][ T5437] vivid-002: Radio Programmable HW Seek: false [ 229.109569][ T5437] vivid-002: RDS Rx I/O Mode: Block I/O [ 229.115222][ T5437] vivid-002: Generate RBDS Instead of RDS: false [ 229.121596][ T5437] vivid-002: RDS Reception: true [ 229.127369][ T5437] vivid-002: RDS Program Type: 0 inactive [ 229.133230][ T5437] vivid-002: RDS PS Name: inactive [ 229.138494][ T5437] vivid-002: RDS Radio Text: inactive [ 229.144109][ T5437] vivid-002: RDS Traffic Announcement: false inactive [ 229.150941][ T5437] vivid-002: RDS Traffic Program: false inactive [ 229.157412][ T5437] vivid-002: RDS Music: false inactive [ 229.163012][ T5437] vivid-002: ================== END STATUS ================== [ 230.756903][ T5434] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.765833][ T5434] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.132052][ T5460] fuse: Bad value for 'fd' [ 233.123598][ T5434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.179272][ T5434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.591248][ T5475] binder: 5472:5475 unknown command 543388532 [ 233.597526][ T5475] binder: 5472:5475 ioctl c0306201 200000000080 returned -22 [ 236.360778][ T5434] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.370034][ T5434] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.379039][ T5434] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.388104][ T5434] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.547196][ T5434] syz.5.313 (5434) used greatest stack depth: 19096 bytes left [ 236.758660][ T5490] netlink: 'syz.0.327': attribute type 12 has an invalid length. [ 237.901427][ T5509] fuse: Bad value for 'fd' [ 241.653596][ T5531] hub 8-0:1.0: USB hub found [ 241.659938][ T5531] hub 8-0:1.0: 1 port detected [ 241.683126][ T5531] vivid-001: ================= START STATUS ================= [ 241.690878][ T5531] vivid-001: Radio HW Seek Mode: Bounded [ 241.696639][ T5531] vivid-001: Radio Programmable HW Seek: false [ 241.702980][ T5531] vivid-001: RDS Rx I/O Mode: Block I/O [ 241.708843][ T5531] vivid-001: Generate RBDS Instead of RDS: false [ 241.715390][ T5531] vivid-001: RDS Reception: true [ 241.720566][ T5531] vivid-001: RDS Program Type: 0 inactive [ 241.726580][ T5531] vivid-001: RDS PS Name: inactive [ 241.732130][ T5531] vivid-001: RDS Radio Text: inactive [ 241.737898][ T5531] vivid-001: RDS Traffic Announcement: false inactive [ 241.744871][ T5531] vivid-001: RDS Traffic Program: false inactive [ 241.751490][ T5531] vivid-001: RDS Music: false inactive [ 241.757238][ T5531] vivid-001: ================== END STATUS ================== [ 243.299390][ T5557] kernel profiling enabled (shift: 9) [ 243.444438][ T5560] netlink: 'syz.1.343': attribute type 1 has an invalid length. [ 244.152631][ T5564] netlink: 'syz.1.346': attribute type 12 has an invalid length. [ 247.230192][ T5577] hub 8-0:1.0: USB hub found [ 247.236873][ T5577] hub 8-0:1.0: 1 port detected [ 247.245053][ T5577] vivid-000: ================= START STATUS ================= [ 247.252794][ T5577] vivid-000: Radio HW Seek Mode: Bounded [ 247.258544][ T5577] vivid-000: Radio Programmable HW Seek: false [ 247.264784][ T5577] vivid-000: RDS Rx I/O Mode: Block I/O [ 247.270370][ T5577] vivid-000: Generate RBDS Instead of RDS: false [ 247.276858][ T5577] vivid-000: RDS Reception: true [ 247.281843][ T5577] vivid-000: RDS Program Type: 0 inactive [ 247.287662][ T5577] vivid-000: RDS PS Name: inactive [ 247.292945][ T5577] vivid-000: RDS Radio Text: inactive [ 247.298487][ T5577] vivid-000: RDS Traffic Announcement: false inactive [ 247.305337][ T5577] vivid-000: RDS Traffic Program: false inactive [ 247.311719][ T5577] vivid-000: RDS Music: false inactive [ 247.317325][ T5577] vivid-000: ================== END STATUS ================== [ 253.166742][ T5428] Bluetooth: hci5: command 0x0406 tx timeout [ 255.640807][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.648471][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.935316][ T5645] TC_ACT_REPEAT abuse ? [ 256.102939][ T5653] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 256.383032][ T4894] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 256.783130][ T4894] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.802020][ T4894] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 256.813444][ T4894] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 256.822742][ T4894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.843992][ T4894] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 256.852908][ T4894] usb 2-1: no configuration chosen from 1 choice [ 259.037497][ T4894] usb 2-1: USB disconnect, device number 6 [ 261.427660][ T5697] fuse: Invalid rootmode [ 263.722752][ T5720] hub 8-0:1.0: USB hub found [ 263.728046][ T5720] hub 8-0:1.0: 1 port detected [ 264.572982][ T4235] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 266.313146][ T4235] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.394767][ T4235] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 266.689929][ T4235] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 267.297141][ T5727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.380'. [ 267.387228][ T5728] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 267.617524][ T4235] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.783201][ T4235] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 267.823665][ T4235] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.914208][ T4235] usb 2-1: Product: syz [ 267.962244][ T4235] usb 2-1: Manufacturer: syz [ 268.008897][ T4235] usb 2-1: SerialNumber: syz [ 268.115076][ T4235] usb 2-1: config 0 descriptor?? [ 268.392913][ T4229] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 269.132571][ T4235] usb 2-1: can't set config #0, error -71 [ 269.190041][ T4235] usb 2-1: USB disconnect, device number 7 [ 270.171231][ T4229] usb 1-1: device not accepting address 7, error -71 [ 270.506995][ T5749] fuse: Invalid rootmode [ 271.462935][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 271.773046][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 272.176577][ T7] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 272.209573][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 272.403176][ T7] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 272.422952][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.452919][ T7] usb 2-1: Product: syz [ 272.457164][ T7] usb 2-1: Manufacturer: syz [ 272.522982][ T7] usb 2-1: SerialNumber: syz [ 272.623799][ T7] usb 2-1: config 0 descriptor?? [ 272.668184][ T7] asix: probe of 2-1:0.0 failed with error -22 [ 272.870693][ T7] usb 2-1: USB disconnect, device number 8 [ 273.585240][ T5767] hub 8-0:1.0: USB hub found [ 273.591712][ T5767] hub 8-0:1.0: 1 port detected [ 276.135595][ T5787] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 276.943925][ T5801] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 279.473128][ T4173] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 279.578757][ T5821] hub 8-0:1.0: USB hub found [ 279.584795][ T5821] hub 8-0:1.0: 1 port detected [ 279.802995][ T4173] usb 3-1: Using ep0 maxpacket: 16 [ 279.940983][ T4173] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 280.403011][ T4173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 280.620626][ T4173] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 280.646908][ T4173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.655366][ T4173] usb 3-1: Product: syz [ 280.659593][ T4173] usb 3-1: Manufacturer: syz [ 280.664559][ T4173] usb 3-1: SerialNumber: syz [ 280.671784][ T4173] usb 3-1: config 0 descriptor?? [ 280.804081][ T4173] asix: probe of 3-1:0.0 failed with error -22 [ 281.776585][ T4301] usb 3-1: USB disconnect, device number 8 [ 281.885941][ T5833] TC_ACT_REPEAT abuse ? [ 284.267136][ T5854] netlink: 16 bytes leftover after parsing attributes in process `syz.5.419'. [ 285.363620][ T5865] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 285.713494][ T4229] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 286.073041][ T4229] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.122301][ T4229] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 286.174940][ T4229] usb 6-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 286.243432][ T4229] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.320374][ T4229] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 286.385037][ T4229] usb 6-1: no configuration chosen from 1 choice [ 286.922193][ T5879] hub 8-0:1.0: USB hub found [ 286.927256][ T5879] hub 8-0:1.0: 1 port detected [ 286.934978][ T5879] vivid-000: ================= START STATUS ================= [ 286.942722][ T5879] vivid-000: Radio HW Seek Mode: Bounded [ 286.948472][ T5879] vivid-000: Radio Programmable HW Seek: false [ 286.954862][ T5879] vivid-000: RDS Rx I/O Mode: Block I/O [ 286.960486][ T5879] vivid-000: Generate RBDS Instead of RDS: false [ 286.966902][ T5879] vivid-000: RDS Reception: true [ 286.971893][ T5879] vivid-000: RDS Program Type: 0 inactive [ 286.977830][ T5879] vivid-000: RDS PS Name: inactive [ 286.983420][ T5879] vivid-000: RDS Radio Text: inactive [ 286.988954][ T5879] vivid-000: RDS Traffic Announcement: false inactive [ 286.995955][ T5879] vivid-000: RDS Traffic Program: false inactive [ 287.002363][ T5879] vivid-000: RDS Music: false inactive [ 287.007965][ T5879] vivid-000: ================== END STATUS ================== [ 289.203032][ T1108] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 289.362445][ T5892] TC_ACT_REPEAT abuse ? [ 289.503133][ T1108] usb 1-1: Using ep0 maxpacket: 16 [ 289.653543][ T1108] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 289.668211][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 289.788619][ T7] usb 6-1: USB disconnect, device number 6 [ 289.913138][ T1108] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 289.922256][ T1108] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.977054][ T1108] usb 1-1: Product: syz [ 289.981397][ T1108] usb 1-1: Manufacturer: syz [ 289.986468][ T1108] usb 1-1: SerialNumber: syz [ 290.791686][ T1108] usb 1-1: config 0 descriptor?? [ 290.804930][ T5901] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 290.834423][ T5901] overlayfs: missing 'lowerdir' [ 290.983742][ T1108] asix: probe of 1-1:0.0 failed with error -22 [ 291.896802][ T7] usb 1-1: USB disconnect, device number 9 [ 294.357172][ T5943] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 294.850387][ T1108] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 295.743002][ T4235] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 295.903013][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.003570][ T1108] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.123239][ T4235] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.169813][ T1108] usb 1-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 296.207547][ T4235] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 296.323067][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.356481][ T4235] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 296.757208][ T1108] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 296.780600][ T4235] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 296.954512][ T1108] usb 1-1: no configuration chosen from 1 choice [ 297.613126][ T4235] usb 6-1: string descriptor 0 read error: -71 [ 297.792916][ T7] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 297.825980][ T4235] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 297.836640][ T4235] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.906124][ T4235] usb 6-1: config 0 descriptor?? [ 297.933317][ T4235] usb 6-1: can't set config #0, error -71 [ 297.960718][ T4235] usb 6-1: USB disconnect, device number 7 [ 298.103612][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 298.693075][ T7] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 298.706692][ T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.805848][ T23] usb 1-1: USB disconnect, device number 10 [ 299.623001][ T7] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 299.632113][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.682999][ T7] usb 2-1: Product: syz [ 299.687249][ T7] usb 2-1: Manufacturer: syz [ 299.733302][ T7] usb 2-1: SerialNumber: syz [ 299.778492][ T7] usb 2-1: config 0 descriptor?? [ 299.847357][ T7] asix: probe of 2-1:0.0 failed with error -22 [ 300.081999][ T7] usb 2-1: USB disconnect, device number 9 [ 302.754695][ T6009] netlink: 'syz.0.461': attribute type 3 has an invalid length. [ 302.796694][ T6009] netlink: 'syz.0.461': attribute type 3 has an invalid length. [ 302.963166][ T5461] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 303.883146][ T5461] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 303.911158][ T5461] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 303.969195][ T5461] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 303.989640][ T5461] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.323034][ T5461] usb 4-1: string descriptor 0 read error: -71 [ 304.329327][ T5461] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 304.388794][ T5461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.448973][ T5461] usb 4-1: config 0 descriptor?? [ 304.513084][ T5461] usb 4-1: can't set config #0, error -71 [ 304.656680][ T5461] usb 4-1: USB disconnect, device number 9 [ 306.962933][ T5461] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 307.222970][ T5461] usb 4-1: Using ep0 maxpacket: 16 [ 307.343225][ T5461] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 307.361748][ T5461] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.383059][ T5461] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 308.392321][ T5461] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.580437][ T5461] usb 4-1: Product: syz [ 308.585090][ T5461] usb 4-1: Manufacturer: syz [ 308.590113][ T5461] usb 4-1: SerialNumber: syz [ 308.598598][ T5461] usb 4-1: config 0 descriptor?? [ 308.643956][ T5461] asix: probe of 4-1:0.0 failed with error -22 [ 308.857409][ T4232] usb 4-1: USB disconnect, device number 10 [ 311.871300][ T4173] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 315.084448][ T6091] netlink: 'syz.2.482': attribute type 1 has an invalid length. [ 315.893007][ T4173] usb 6-1: device descriptor read/all, error -71 [ 317.078518][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.085251][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.242992][ T6117] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 322.242977][ T1108] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 322.299221][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 322.843153][ T1108] usb 4-1: device not accepting address 11, error -71 [ 323.563686][ T6136] hub 8-0:1.0: USB hub found [ 323.569726][ T6136] hub 8-0:1.0: 1 port detected [ 323.589768][ T6136] vivid-001: ================= START STATUS ================= [ 323.597586][ T6136] vivid-001: Radio HW Seek Mode: Bounded [ 323.603538][ T6136] vivid-001: Radio Programmable HW Seek: false [ 323.610044][ T6136] vivid-001: RDS Rx I/O Mode: Block I/O [ 323.615791][ T6136] vivid-001: Generate RBDS Instead of RDS: false [ 323.622303][ T6136] vivid-001: RDS Reception: true [ 323.627680][ T6136] vivid-001: RDS Program Type: 0 inactive [ 323.633781][ T6136] vivid-001: RDS PS Name: inactive [ 323.639357][ T6136] vivid-001: RDS Radio Text: inactive [ 323.645031][ T6136] vivid-001: RDS Traffic Announcement: false inactive [ 323.652023][ T6136] vivid-001: RDS Traffic Program: false inactive [ 323.658716][ T6136] vivid-001: RDS Music: false inactive [ 323.664460][ T6136] vivid-001: ================== END STATUS ================== [ 326.413382][ T4301] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 326.803291][ T4301] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.002354][ T4301] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 327.683746][ T4301] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 327.714637][ T4301] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 327.802931][ T4301] usb 6-1: string descriptor 0 read error: -71 [ 327.809722][ T4301] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 327.837205][ T6171] loop2: detected capacity change from 0 to 128 [ 328.007169][ T4301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.070341][ T4301] usb 6-1: config 0 descriptor?? [ 328.092992][ T4301] usb 6-1: can't set config #0, error -71 [ 328.100164][ T4301] usb 6-1: USB disconnect, device number 10 [ 328.282008][ T6171] omfs: sysblock number (f784317bf884317b) is out of range [ 328.303652][ T4894] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 328.592917][ T4894] usb 1-1: Using ep0 maxpacket: 16 [ 328.872968][ T4894] usb 1-1: config index 0 descriptor too short (expected 52, got 36) [ 328.881138][ T4894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 329.441801][ T6171] tmpfs: Unknown parameter '' [ 329.513113][ T4894] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 329.522216][ T4894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.631559][ T4894] usb 1-1: Product: syz [ 329.663605][ T4894] usb 1-1: Manufacturer: syz [ 329.702904][ T4894] usb 1-1: SerialNumber: syz [ 329.751516][ T4894] usb 1-1: config 0 descriptor?? [ 329.818105][ T4894] asix: probe of 1-1:0.0 failed with error -22 [ 332.543143][ T7] usb 1-1: USB disconnect, device number 11 [ 334.683020][ T6065] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 334.774330][ T6221] netlink: 'syz.2.523': attribute type 39 has an invalid length. [ 334.783569][ T4232] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 335.214561][ T4232] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.266132][ T4232] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 335.317130][ T6065] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 335.357777][ T6065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.387995][ T4232] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 335.451919][ T6065] usb 1-1: Product: syz [ 335.487354][ T4232] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 335.487895][ T6065] usb 1-1: Manufacturer: syz [ 335.508126][ T6065] usb 1-1: SerialNumber: syz [ 335.612534][ T6065] usb 1-1: config 0 descriptor?? [ 335.883502][ T4232] usb 4-1: string descriptor 0 read error: -71 [ 335.889811][ T4232] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 335.925387][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.974176][ T6065] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.993735][ T4232] usb 4-1: config 0 descriptor?? [ 336.142552][ T4232] usb 4-1: can't set config #0, error -71 [ 336.199133][ T4232] usb 4-1: USB disconnect, device number 13 [ 337.719087][ T6241] loop2: detected capacity change from 0 to 128 [ 337.889381][ T4229] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 337.897855][ T7] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 337.966331][ T6065] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 338.049519][ T6065] usb 1-1: USB disconnect, device number 12 [ 338.583361][ T4229] usb 4-1: Using ep0 maxpacket: 16 [ 338.703028][ T7] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 338.711754][ T4229] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 338.782198][ T4229] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 338.802696][ T7] usb 6-1: config 4 has no interface number 0 [ 338.974214][ T7] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 339.283415][ T4229] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 339.612169][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.631735][ T4229] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.652264][ T7] usb 6-1: Product: syz [ 339.656881][ T4229] usb 4-1: Product: syz [ 339.661103][ T4229] usb 4-1: Manufacturer: syz [ 339.672922][ T7] usb 6-1: Manufacturer: syz [ 339.677966][ T7] usb 6-1: SerialNumber: syz [ 339.688162][ T4229] usb 4-1: SerialNumber: syz [ 340.150695][ T4229] usb 4-1: config 0 descriptor?? [ 340.263624][ T7] usb 6-1: can't set config #4, error -71 [ 340.366193][ T7] usb 6-1: USB disconnect, device number 11 [ 340.593030][ T4229] usb 4-1: can't set config #0, error -71 [ 340.631532][ T4229] usb 4-1: USB disconnect, device number 14 [ 341.233956][ T4507] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 343.133155][ T1108] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 343.253380][ T4507] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 343.293406][ T4507] usb 3-1: config 0 has no interface number 0 [ 343.563808][ T1108] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.574449][ T4507] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 343.636974][ T4507] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.680266][ T1108] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 343.819288][ T4507] usb 3-1: Product: syz [ 343.860617][ T1108] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 343.892557][ T4507] usb 3-1: Manufacturer: syz [ 343.969060][ T4507] usb 3-1: SerialNumber: syz [ 344.072709][ T6273] loop1: detected capacity change from 0 to 512 [ 344.082306][ T1108] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 344.148955][ T4507] usb 3-1: config 0 descriptor?? [ 344.243072][ T4507] usb 3-1: can't set config #0, error -71 [ 344.293442][ T4507] usb 3-1: USB disconnect, device number 9 [ 344.306825][ T6273] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.540: bg 0: block 393: padding at end of block bitmap is not set [ 344.329171][ T6273] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 344.342957][ T1108] usb 6-1: string descriptor 0 read error: -71 [ 344.349306][ T1108] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 344.384163][ T6273] EXT4-fs (loop1): 2 truncates cleaned up [ 344.389960][ T6273] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.519564][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.721759][ T1108] usb 6-1: config 0 descriptor?? [ 345.355000][ T1108] usb 6-1: can't set config #0, error -71 [ 345.391555][ T1108] usb 6-1: USB disconnect, device number 12 [ 345.783230][ T1108] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 346.210000][ T1108] usb 6-1: Using ep0 maxpacket: 16 [ 347.243125][ T1108] usb 6-1: unable to get BOS descriptor or descriptor too short [ 348.061171][ T4303] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 348.103088][ T1108] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 348.322888][ T4303] usb 4-1: Using ep0 maxpacket: 16 [ 348.433490][ T1108] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 348.443086][ T4303] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 348.566186][ T1108] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.582898][ T1108] usb 6-1: Product: syz [ 348.587446][ T1108] usb 6-1: Manufacturer: syz [ 348.623101][ T1108] usb 6-1: can't set config #1, error -71 [ 348.643038][ T4303] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.671318][ T1108] usb 6-1: USB disconnect, device number 13 [ 351.122865][ T1108] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 351.273570][ T4303] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 351.355836][ T4303] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.558756][ T4303] usb 4-1: config 0 descriptor?? [ 351.653308][ T4303] usb 4-1: can't set config #0, error -71 [ 351.777962][ T4303] usb 4-1: USB disconnect, device number 15 [ 352.858362][ T6341] tipc: Failed to remove unknown binding: 66,2,2/0:2777251536/2777251539 [ 353.120365][ T1108] usb 6-1: device descriptor read/all, error -71 [ 353.876298][ T6350] XFS (nbd0): no-recovery mounts must be read-only. [ 358.083433][ T4507] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 358.083632][ T5428] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 358.453325][ T5428] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 358.465546][ T4507] usb 4-1: Using ep0 maxpacket: 16 [ 358.535555][ T5428] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.685696][ T4507] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 358.753995][ T4507] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 358.804067][ T5428] usb 3-1: config 0 descriptor?? [ 359.163336][ T4507] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 359.184683][ T4507] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.209399][ T4507] usb 4-1: Product: syz [ 359.226584][ T4507] usb 4-1: Manufacturer: syz [ 359.254470][ T4507] usb 4-1: SerialNumber: syz [ 359.277931][ T4507] usb 4-1: config 0 descriptor?? [ 359.336136][ T4507] asix: probe of 4-1:0.0 failed with error -22 [ 359.509511][ T5428] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 359.524838][ T5428] [drm] Initialized udl on minor 2 [ 359.552592][ T5461] usb 4-1: USB disconnect, device number 16 [ 359.712994][ T5428] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 359.728228][ T5428] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 359.746716][ T5428] usb 3-1: USB disconnect, device number 10 [ 359.754934][ T4507] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 359.780261][ T4507] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 359.838884][ T4507] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 361.930862][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.574'. [ 365.392885][ T6283] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 366.082971][ T6283] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 366.097648][ T6283] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 366.264603][ T6432] loop1: detected capacity change from 0 to 32768 [ 366.274323][ T6283] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 366.284305][ T6283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.299182][ T6283] usb 6-1: config 0 descriptor?? [ 366.348059][ T6283] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 366.360199][ T6432] (syz.1.582,6432,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.364544][ T4303] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 366.389602][ T6432] (syz.1.582,6432,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 366.441000][ T6432] JBD2: Ignoring recovery information on journal [ 366.492331][ T6432] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 366.572976][ T6283] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 366.765131][ T13] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 366.784129][ T4303] usb 1-1: config 0 has no interfaces? [ 366.789675][ T4303] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 366.803498][ T4303] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.821731][ T4303] usb 1-1: config 0 descriptor?? [ 366.913607][ T4184] ocfs2: Unmounting device (7,1) on (node local) [ 367.032861][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 367.110670][ T6426] udc-core: couldn't find an available UDC or it's busy [ 367.125424][ T6426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 367.147603][ T4303] usb 1-1: USB disconnect, device number 13 [ 367.163334][ T13] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 367.173103][ T6283] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 367.183232][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.192735][ T6283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.201702][ T6283] usb 4-1: Product: syz [ 367.216075][ T6283] usb 4-1: Manufacturer: syz [ 367.220867][ T6283] usb 4-1: SerialNumber: syz [ 367.274275][ T6283] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 367.383258][ T13] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 367.394293][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.410717][ T13] usb 3-1: Product: syz [ 367.418198][ T13] usb 3-1: Manufacturer: syz [ 367.427830][ T13] usb 3-1: SerialNumber: syz [ 367.457935][ T13] usb 3-1: config 0 descriptor?? [ 367.514270][ T13] asix: probe of 3-1:0.0 failed with error -22 [ 367.733012][ T4303] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 367.812249][ T13] usb 3-1: USB disconnect, device number 11 [ 368.033547][ T4303] usb 1-1: Using ep0 maxpacket: 16 [ 368.154080][ T4303] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 368.190653][ T4303] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 368.396280][ T5461] usb 6-1: USB disconnect, device number 16 [ 368.443555][ T4303] usb 1-1: string descriptor 0 read error: -71 [ 368.450227][ T4303] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40 [ 368.529079][ T4303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.823027][ T6283] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 369.369570][ T1108] usb 4-1: USB disconnect, device number 17 [ 369.873135][ T4303] usb 1-1: can't set config #1, error -71 [ 370.577881][ T6283] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 370.688066][ T6283] ath9k_htc: Failed to initialize the device [ 370.748060][ T1108] usb 4-1: ath9k_htc: USB layer deinitialized [ 371.640573][ T4303] usb 1-1: USB disconnect, device number 14 [ 372.038252][ T6483] securityfs: Unknown parameter '' [ 373.688813][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.594'. [ 375.359462][ T6492] loop3: detected capacity change from 0 to 2048 [ 375.472128][ T6492] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 375.573960][ T6495] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 375.586404][ T6492] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6) [ 375.620443][ T6492] Remounting filesystem read-only [ 376.054809][ T6504] fuse: Bad value for 'fd' [ 376.191853][ T6494] loop2: detected capacity change from 0 to 32768 [ 377.574731][ T6494] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 scanned by syz.2.600 (6494) [ 378.068480][ T6494] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 378.533116][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.533274][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.654498][ T6494] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 378.822351][ T6494] BTRFS info (device loop2): use zstd compression, level 3 [ 378.829744][ T6494] BTRFS info (device loop2): using free space tree [ 378.836879][ T6494] BTRFS info (device loop2): has skinny extents [ 379.195344][ T6494] BTRFS error (device loop2): open_ctree failed: -12 [ 379.233244][ T4226] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 379.663365][ T4226] usb 4-1: config 8 has an invalid interface number: 177 but max is 0 [ 379.695681][ T4226] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 379.822862][ T4226] usb 4-1: config 8 has no interface number 0 [ 379.829056][ T4226] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid wMaxPacketSize 0 [ 379.920249][ T4226] usb 4-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 380.002458][ T4226] usb 4-1: config 8 interface 177 has no altsetting 0 [ 380.227630][ T4226] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 380.252843][ T4226] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.803379][ T4226] usb 4-1: string descriptor 0 read error: -71 [ 381.019729][ T4226] ir_toy 4-1:8.177: required endpoints not found [ 381.083046][ T4226] usb 4-1: USB disconnect, device number 18 [ 381.542900][ T7] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 382.147435][ T6574] ======================================================= [ 382.147435][ T6574] WARNING: The mand mount option has been deprecated and [ 382.147435][ T6574] and is ignored by this kernel. Remove the mand [ 382.147435][ T6574] option from the mount to silence this warning. [ 382.147435][ T6574] ======================================================= [ 382.702898][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 383.634617][ T7] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 383.676648][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.812121][ T6585] loop0: detected capacity change from 0 to 64 [ 383.865451][ T6585] hfs: unable to parse mount options [ 384.135808][ T7] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 384.145637][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.161759][ T7] usb 3-1: Product: syz [ 384.166649][ T6585] loop0: detected capacity change from 0 to 32768 [ 384.173580][ T7] usb 3-1: Manufacturer: syz [ 384.178241][ T7] usb 3-1: SerialNumber: syz [ 384.190623][ T7] usb 3-1: config 0 descriptor?? [ 384.308697][ T6582] loop3: detected capacity change from 0 to 2048 [ 384.523547][ T7] usb 3-1: can't set config #0, error -71 [ 384.545726][ T6585] JBD2: Ignoring recovery information on journal [ 384.625486][ T7] usb 3-1: USB disconnect, device number 12 [ 384.860694][ T6585] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 385.192154][ T6598] hub 8-0:1.0: USB hub found [ 385.198000][ T6598] hub 8-0:1.0: 1 port detected [ 385.216119][ T6598] vivid-000: ================= START STATUS ================= [ 385.223955][ T6598] vivid-000: Radio HW Seek Mode: Bounded [ 385.229836][ T6598] vivid-000: Radio Programmable HW Seek: false [ 385.236570][ T6598] vivid-000: RDS Rx I/O Mode: Block I/O [ 385.242644][ T6598] vivid-000: Generate RBDS Instead of RDS: false [ 385.249283][ T6598] vivid-000: RDS Reception: true [ 385.255038][ T6598] vivid-000: RDS Program Type: 0 inactive [ 385.261590][ T6598] vivid-000: RDS PS Name: inactive [ 385.267604][ T6598] vivid-000: RDS Radio Text: inactive [ 385.273885][ T6598] vivid-000: RDS Traffic Announcement: false inactive [ 385.281459][ T6598] vivid-000: RDS Traffic Program: false inactive [ 385.289353][ T6598] vivid-000: RDS Music: false inactive [ 385.295801][ T6598] vivid-000: ================== END STATUS ================== [ 386.746103][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 389.602915][ T7] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 389.843863][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 389.963350][ T7] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 390.005360][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 390.313775][ T7] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 390.361256][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.489052][ T7] usb 3-1: Product: syz [ 390.500237][ T7] usb 3-1: Manufacturer: syz [ 390.522045][ T7] usb 3-1: SerialNumber: syz [ 390.649744][ T6630] tipc: Started in network mode [ 390.664854][ T7] usb 3-1: config 0 descriptor?? [ 390.680358][ T6630] tipc: Node identity 84e, cluster identity 4711 [ 390.734186][ T7] asix: probe of 3-1:0.0 failed with error -22 [ 390.793061][ T6630] tipc: Node number set to 2126 [ 391.028342][ T6644] hub 8-0:1.0: USB hub found [ 391.035805][ T6644] hub 8-0:1.0: 1 port detected [ 391.079301][ T6644] vivid-001: ================= START STATUS ================= [ 391.087293][ T6644] vivid-001: Radio HW Seek Mode: Bounded [ 391.093543][ T6644] vivid-001: Radio Programmable HW Seek: false [ 391.100172][ T6644] vivid-001: RDS Rx I/O Mode: Block I/O [ 391.106000][ T6644] vivid-001: Generate RBDS Instead of RDS: false [ 391.112840][ T6644] vivid-001: RDS Reception: true [ 391.118306][ T6644] vivid-001: RDS Program Type: 0 inactive [ 391.124798][ T6644] vivid-001: RDS PS Name: inactive [ 391.130985][ T6644] vivid-001: RDS Radio Text: inactive [ 391.137227][ T6644] vivid-001: RDS Traffic Announcement: false inactive [ 391.144790][ T6644] vivid-001: RDS Traffic Program: false inactive [ 391.151947][ T6644] vivid-001: RDS Music: false inactive [ 391.158228][ T6644] vivid-001: ================== END STATUS ================== [ 393.562492][ T6548] usb 3-1: USB disconnect, device number 13 [ 394.895665][ T6653] netlink: 'syz.0.644': attribute type 11 has an invalid length. [ 394.933201][ T6653] netlink: 'syz.0.644': attribute type 6 has an invalid length. [ 394.947523][ T6653] netlink: 232 bytes leftover after parsing attributes in process `syz.0.644'. [ 394.998031][ T6657] netlink: 'syz.0.644': attribute type 11 has an invalid length. [ 395.009084][ T6657] netlink: 5252 bytes leftover after parsing attributes in process `syz.0.644'. [ 395.060234][ T6651] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.558768][ T6665] loop3: detected capacity change from 0 to 1024 [ 398.773195][ T4232] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 398.918006][ T6695] hub 8-0:1.0: USB hub found [ 398.924827][ T6695] hub 8-0:1.0: 1 port detected [ 398.941378][ T6695] vivid-001: ================= START STATUS ================= [ 398.949472][ T6695] vivid-001: Radio HW Seek Mode: Bounded [ 398.955335][ T6695] vivid-001: Radio Programmable HW Seek: false [ 398.961678][ T6695] vivid-001: RDS Rx I/O Mode: Block I/O [ 398.967410][ T6695] vivid-001: Generate RBDS Instead of RDS: false [ 398.974005][ T6695] vivid-001: RDS Reception: true [ 398.979125][ T6695] vivid-001: RDS Program Type: 0 inactive [ 398.985152][ T6695] vivid-001: RDS PS Name: inactive [ 398.990607][ T6695] vivid-001: RDS Radio Text: inactive [ 398.997275][ T6695] vivid-001: RDS Traffic Announcement: false inactive [ 399.004441][ T6695] vivid-001: RDS Traffic Program: false inactive [ 399.011905][ T6695] vivid-001: RDS Music: false inactive [ 399.017854][ T6695] vivid-001: ================== END STATUS ================== [ 399.683131][ T4232] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 399.701763][ T4232] usb 2-1: config 0 has no interface number 0 [ 400.094320][ T4232] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 400.221946][ T4232] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.605742][ T4232] usb 2-1: Product: syz [ 400.610698][ T4232] usb 2-1: Manufacturer: syz [ 400.617287][ T4232] usb 2-1: SerialNumber: syz [ 400.646166][ T4232] usb 2-1: config 0 descriptor?? [ 401.302908][ T7] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 401.451386][ T6714] netlink: 'syz.3.661': attribute type 10 has an invalid length. [ 401.481507][ T6714] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.508673][ T6714] bond0: (slave team0): Enslaving as an active interface with an up link [ 401.582988][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 401.613035][ T4232] asix: probe of 2-1:0.251 failed with error -71 [ 401.663094][ T4232] usb 2-1: USB disconnect, device number 11 [ 401.703005][ T7] usb 6-1: config index 0 descriptor too short (expected 52, got 36) [ 401.711255][ T7] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.802978][ T13] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 401.898572][ T7] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 401.922667][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.950455][ T6720] loop3: detected capacity change from 0 to 8192 [ 401.957130][ T7] usb 6-1: Product: syz [ 401.961476][ T7] usb 6-1: Manufacturer: syz [ 401.972878][ T7] usb 6-1: SerialNumber: syz [ 401.987242][ T7] usb 6-1: config 0 descriptor?? [ 402.043904][ T7] asix: probe of 6-1:0.0 failed with error -22 [ 402.102566][ T6720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 402.113038][ T6720] FAT-fs (loop3): Filesystem has been set read-only [ 402.120703][ T6720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 402.191140][ T6733] hub 8-0:1.0: USB hub found [ 402.196732][ T6733] hub 8-0:1.0: 1 port detected [ 402.213989][ T6733] vivid-002: ================= START STATUS ================= [ 402.221832][ T6733] vivid-002: Radio HW Seek Mode: Bounded [ 402.227801][ T6733] vivid-002: Radio Programmable HW Seek: false [ 402.234366][ T6733] vivid-002: RDS Rx I/O Mode: Block I/O [ 402.240233][ T6733] vivid-002: Generate RBDS Instead of RDS: false [ 402.246922][ T6733] vivid-002: RDS Reception: true [ 402.252059][ T6733] vivid-002: RDS Program Type: 0 inactive [ 402.258094][ T6733] vivid-002: RDS PS Name: inactive [ 402.263649][ T6733] vivid-002: RDS Radio Text: inactive [ 402.269328][ T6733] vivid-002: RDS Traffic Announcement: false inactive [ 402.276498][ T6733] vivid-002: RDS Traffic Program: false inactive [ 402.284084][ T6733] vivid-002: RDS Music: false inactive [ 402.290122][ T6733] vivid-002: ================== END STATUS ================== [ 402.315361][ T6720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 402.769702][ T6720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 402.846359][ T4232] usb 6-1: USB disconnect, device number 17 [ 403.090033][ T6720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 403.099700][ T13] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 403.120529][ T13] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 403.140967][ T6720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 403.170470][ T6720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 403.210100][ T6720] FAT-fs (loop3): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 403.243163][ T13] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 403.243462][ T26] audit: type=1800 audit(1777353779.019:46): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.664" name="file2" dev="loop3" ino=1048607 res=0 errno=0 [ 403.267299][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 403.291928][ T6735] loop1: detected capacity change from 0 to 4096 [ 403.300909][ T13] usb 1-1: SerialNumber: syz [ 403.512723][ T6740] fuse: Bad value for 'fd' [ 403.658347][ T13] usb 1-1: 0:2 : does not exist [ 404.159033][ T13] usb 1-1: USB disconnect, device number 15 [ 404.264321][ T6746] fuse: Unknown parameter 'grou00000000000000000000' [ 404.728859][ T6290] udevd[6290]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.140277][ T6752] comedi comedi4: bad chanlist[0]=0xffffffff chan=65535 range length=2 [ 406.240439][ T6775] loop5: detected capacity change from 0 to 128 [ 410.792895][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 411.542986][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 411.935959][ T23] usb 2-1: config index 0 descriptor too short (expected 52, got 36) [ 412.139367][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.162127][ T6799] fuse: Bad value for 'fd' [ 412.755503][ T6801] process 'syz.0.688' launched '/dev/fd/6' with NULL argv: empty string added [ 413.445350][ T23] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 413.491525][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.582989][ T23] usb 2-1: Product: syz [ 413.596193][ T6811] input: syz1 as /devices/virtual/input/input7 [ 413.620884][ T23] usb 2-1: Manufacturer: syz [ 413.629963][ T23] usb 2-1: SerialNumber: syz [ 413.661831][ T23] usb 2-1: config 0 descriptor?? [ 413.897203][ T6817] block device autoloading is deprecated and will be removed. [ 413.971230][ T6816] md: superblock version 12389 not known [ 413.978636][ T6816] md: couldn't set array info. -22 [ 414.630707][ T23] usb 2-1: can't set config #0, error -71 [ 414.637744][ T23] usb 2-1: USB disconnect, device number 12 [ 414.849738][ T6827] binder: 6818:6827 unknown command 0 [ 414.855273][ T6827] binder: 6818:6827 ioctl c0306201 200000000080 returned -22 [ 415.246561][ T6828] loop3: detected capacity change from 0 to 32768 [ 415.643313][ T6824] loop1: detected capacity change from 0 to 40427 [ 415.844660][ T6828] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.695 (6828) [ 415.864988][ T6828] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 415.874426][ T6828] BTRFS info (device loop3): turning on async discard [ 415.874703][ T6824] F2FS-fs (loop1): Unrecognized mount option "age_extent_cache" or missing value [ 415.892965][ T6828] BTRFS info (device loop3): metadata ratio 0 [ 415.899100][ T6828] BTRFS info (device loop3): setting nodatasum [ 415.905951][ T6828] BTRFS info (device loop3): using free space tree [ 415.912510][ T6828] BTRFS info (device loop3): has skinny extents [ 416.503962][ T6809] loop0: detected capacity change from 0 to 32768 [ 417.719932][ T6828] BTRFS info (device loop3): enabling ssd optimizations [ 417.851400][ T6861] device syzkaller0 entered promiscuous mode [ 419.701779][ T6890] binder: 6887:6890 unknown command 0 [ 419.707287][ T6890] binder: 6887:6890 ioctl c0306201 200000000080 returned -22 [ 419.716859][ T6890] binder: BINDER_SET_CONTEXT_MGR already set [ 419.722934][ T6890] binder: 6887:6890 ioctl 4018620d 200000000040 returned -16 [ 420.652865][ T4507] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 420.793963][ T6897] NILFS (nullb0): couldn't find nilfs on the device [ 421.322660][ T6900] loop1: detected capacity change from 0 to 256 [ 421.373045][ T4507] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 421.381106][ T4507] usb 1-1: config 0 has no interface number 0 [ 421.905507][ T6915] fuse: Bad value for 'fd' [ 423.503684][ T4507] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 423.632498][ T4507] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.661936][ T6900] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 423.676974][ T4507] usb 1-1: Product: syz [ 423.692319][ T4507] usb 1-1: Manufacturer: syz [ 423.886023][ T4507] usb 1-1: config 0 descriptor?? [ 423.943037][ T7] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 424.086257][ T4507] usb 1-1: can't set config #0, error -71 [ 424.094988][ T4507] usb 1-1: USB disconnect, device number 16 [ 424.976842][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 426.393200][ T7] usb 3-1: config index 0 descriptor too short (expected 52, got 36) [ 426.401479][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 426.625675][ T6943] loop1: detected capacity change from 0 to 32768 [ 426.658824][ T6949] loop3: detected capacity change from 0 to 512 [ 426.668901][ T6943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.725 (6943) [ 426.914793][ T7] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 426.938989][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.967848][ T7] usb 3-1: Product: syz [ 426.979941][ T7] usb 3-1: config 0 descriptor?? [ 427.179687][ T6943] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 427.188663][ T6943] BTRFS info (device loop1): turning on sync discard [ 427.195531][ T6943] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 427.205107][ T6943] BTRFS info (device loop1): use zstd compression, level 3 [ 427.212491][ T6943] BTRFS info (device loop1): turning on async discard [ 427.215853][ T7] usb 3-1: can't set config #0, error -71 [ 427.220222][ T6943] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 427.238119][ T6943] BTRFS info (device loop1): trying to use backup root at mount time [ 427.246306][ T6943] BTRFS info (device loop1): force zlib compression, level 3 [ 427.253884][ T6943] BTRFS info (device loop1): using free space tree [ 427.260522][ T6943] BTRFS info (device loop1): has skinny extents [ 428.203944][ T7] usb 3-1: USB disconnect, device number 14 [ 428.533591][ T6969] fuse: Bad value for 'fd' [ 428.561734][ T6949] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 428.793844][ T4580] BTRFS warning (device loop1): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0 [ 428.826448][ T6943] BTRFS warning (device loop1): failed to read root (objectid=2): -5 [ 428.835132][ T4580] BTRFS warning (device loop1): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0 [ 428.849483][ T6943] BTRFS warning (device loop1): couldn't read tree root [ 428.857246][ T6943] BTRFS error (device loop1): parent transid verify failed on 5255168 wanted 5 found 7 [ 428.868561][ T6943] BTRFS warning (device loop1): couldn't read tree root [ 428.967334][ T6943] BTRFS info (device loop1): enabling ssd optimizations [ 428.980837][ T6943] BTRFS info (device loop1): clearing free space tree [ 428.988189][ T6943] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 428.998341][ T6943] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 429.047192][ T6943] BTRFS info (device loop1): creating free space tree [ 429.056381][ T6943] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 429.066110][ T6943] BTRFS info (device loop1): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 429.434949][ T6996] loop0: detected capacity change from 0 to 32768 [ 429.532783][ T6996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.734 (6996) [ 429.554291][ T6996] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 429.563057][ T6996] BTRFS info (device loop0): force clearing of disk cache [ 429.570308][ T6996] BTRFS info (device loop0): enabling auto defrag [ 429.576836][ T6996] BTRFS info (device loop0): max_inline at 0 [ 429.582906][ T6996] BTRFS info (device loop0): enabling ssd optimizations [ 429.589874][ T6996] BTRFS info (device loop0): using spread ssd allocation scheme [ 429.597541][ T6996] BTRFS info (device loop0): using free space tree [ 429.604287][ T6996] BTRFS info (device loop0): has skinny extents [ 430.248227][ T6996] BTRFS info (device loop0): clearing free space tree [ 430.255711][ T6996] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 430.265951][ T6996] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 430.313737][ T6996] BTRFS info (device loop0): creating free space tree [ 430.321554][ T6996] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 430.331292][ T6996] BTRFS info (device loop0): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 431.233283][ T1111] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 432.011567][ T7012] loop1: detected capacity change from 0 to 32768 [ 432.212910][ T1111] usb 4-1: Using ep0 maxpacket: 16 [ 432.332988][ T1111] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 432.335228][ T7012] XFS (loop1): Mounting V5 Filesystem [ 432.351439][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.457738][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.2.744'. [ 432.525228][ T1111] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 432.545303][ T1111] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.600517][ T1111] usb 4-1: Product: syz [ 432.605088][ T1111] usb 4-1: Manufacturer: syz [ 432.609721][ T1111] usb 4-1: SerialNumber: syz [ 432.623573][ T1111] usb 4-1: config 0 descriptor?? [ 432.674602][ T1111] asix: probe of 4-1:0.0 failed with error -22 [ 432.880901][ T1111] usb 4-1: USB disconnect, device number 19 [ 432.923356][ T7012] XFS (loop1): Ending clean mount [ 432.939204][ T7060] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 433.019992][ T7060] team0: Port device team_slave_0 removed [ 433.180996][ T7071] netlink: 'syz.3.745': attribute type 12 has an invalid length. [ 433.345964][ T4184] XFS (loop1): Unmounting Filesystem [ 435.261682][ T1111] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 435.479784][ T7103] fuse: Bad value for 'fd' [ 435.693057][ T1111] usb 6-1: Using ep0 maxpacket: 16 [ 435.751666][ T7106] netlink: 'syz.0.757': attribute type 12 has an invalid length. [ 435.819544][ T1111] usb 6-1: config index 0 descriptor too short (expected 52, got 36) [ 435.848273][ T1111] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.053055][ T1111] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 436.082823][ T1111] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.090895][ T1111] usb 6-1: Product: syz [ 436.146818][ T1111] usb 6-1: Manufacturer: syz [ 436.151604][ T1111] usb 6-1: SerialNumber: syz [ 436.366782][ T1111] usb 6-1: config 0 descriptor?? [ 436.529504][ T1111] asix: probe of 6-1:0.0 failed with error -22 [ 436.773042][ T1111] usb 6-1: USB disconnect, device number 18 [ 438.655909][ T7147] hub 8-0:1.0: USB hub found [ 438.660861][ T7147] hub 8-0:1.0: 1 port detected [ 438.685387][ T7147] vivid-002: ================= START STATUS ================= [ 438.693286][ T7147] vivid-002: Radio HW Seek Mode: Bounded [ 438.699102][ T7147] vivid-002: Radio Programmable HW Seek: false [ 438.705570][ T7147] vivid-002: RDS Rx I/O Mode: Block I/O [ 438.711392][ T7147] vivid-002: Generate RBDS Instead of RDS: false [ 438.717953][ T7147] vivid-002: RDS Reception: true [ 438.723071][ T7147] vivid-002: RDS Program Type: 0 inactive [ 438.729036][ T7147] vivid-002: RDS PS Name: inactive [ 438.734498][ T7147] vivid-002: RDS Radio Text: inactive [ 438.741039][ T7147] vivid-002: RDS Traffic Announcement: false inactive [ 438.748255][ T7147] vivid-002: RDS Traffic Program: false inactive [ 438.754913][ T7147] vivid-002: RDS Music: false inactive [ 438.760628][ T7147] vivid-002: ================== END STATUS ================== [ 439.603463][ T7151] netlink: 'syz.1.769': attribute type 12 has an invalid length. [ 440.093412][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.099765][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.301097][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.5.768'. [ 442.582934][ T7185] binder: 7183:7185 unknown command 0 [ 442.588437][ T7185] binder: 7183:7185 ioctl c0306201 200000000080 returned -22 [ 442.597570][ T7185] binder: BINDER_SET_CONTEXT_MGR already set [ 442.603629][ T7185] binder: 7183:7185 ioctl 4018620d 200000000040 returned -16 [ 442.802847][ T4301] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 442.869295][ T7188] fuse: Bad value for 'fd' [ 443.438726][ T7194] netlink: 'syz.5.782': attribute type 12 has an invalid length. [ 443.542994][ T4301] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 443.552380][ T4301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.330783][ T4301] usb 4-1: Product: syz [ 444.335567][ T4301] usb 4-1: Manufacturer: syz [ 444.340591][ T4301] usb 4-1: SerialNumber: syz [ 444.803178][ T4301] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 444.969348][ T7208] md: could not open device unknown-block(0,0). [ 444.976139][ T7208] md: md_import_device returned -6 [ 445.260190][ T7220] loop5: detected capacity change from 0 to 64 [ 445.751894][ T4301] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 445.772820][ T4301] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 445.788102][ T4301] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 445.812285][ T4301] lan78xx: probe of 4-1:1.0 failed with error -71 [ 446.108555][ T4301] usb 4-1: USB disconnect, device number 20 [ 446.492993][ T7238] netlink: 'syz.2.793': attribute type 12 has an invalid length. [ 446.698949][ T7241] loop2: detected capacity change from 0 to 512 [ 447.317005][ T7241] EXT4-fs (loop2): 1 truncate cleaned up [ 447.383598][ T7241] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 447.492933][ T26] audit: type=1800 audit(1777353823.279:47): pid=7241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.796" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 447.600853][ T7250] EXT4-fs (loop2): re-mounted. Opts: . Quota mode: none. [ 447.638077][ T7250] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.796: bg 0: block 465: padding at end of block bitmap is not set [ 447.653257][ T7054] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 447.685076][ T7250] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1088 with error 28 [ 447.726387][ T7250] EXT4-fs (loop2): This should not happen!! Data will be lost [ 447.726387][ T7250] [ 447.782215][ T7250] EXT4-fs (loop2): Total free blocks count 0 [ 447.805205][ T7250] EXT4-fs (loop2): Free/Dirty block details [ 447.995398][ T7250] EXT4-fs (loop2): free_blocks=0 [ 448.013544][ T7054] usb 6-1: config 4 has an invalid interface number: 44 but max is 0 [ 448.104693][ T7054] usb 6-1: config 4 has no interface number 0 [ 448.204441][ T7250] EXT4-fs (loop2): dirty_blocks=1089 [ 448.218537][ T7054] usb 6-1: config 4 interface 44 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 448.309514][ T7250] EXT4-fs (loop2): Block reservation details [ 448.315648][ T7250] EXT4-fs (loop2): i_reserved_data_blocks=1089 [ 448.494016][ T7054] usb 6-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 448.543362][ T7250] EXT4-fs error (device loop2) in ext4_setattr:5645: error 28 [ 448.584918][ T7054] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.711010][ T7054] usb 6-1: Product: syz [ 448.725971][ T7054] usb 6-1: Manufacturer: syz [ 448.730638][ T7054] usb 6-1: SerialNumber: syz [ 448.783337][ T5291] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 449.093749][ T7268] loop0: detected capacity change from 0 to 1024 [ 449.453772][ T7271] fuse: Bad value for 'fd' [ 449.688417][ T7054] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 449.701941][ T7054] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 449.723445][ T7054] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 449.730912][ T7054] usb 6-1: media controller created [ 449.811993][ T7054] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 449.823014][ T7280] netlink: 'syz.1.806': attribute type 12 has an invalid length. [ 450.269607][ T7054] DVB: Unable to find symbol dib7000p_attach() [ 450.280991][ T7054] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 450.840582][ T7296] loop3: detected capacity change from 0 to 256 [ 451.053179][ T7054] rc_core: IR keymap rc-dib0700-rc5 not found [ 451.059408][ T7054] Registered IR keymap rc-empty [ 451.070764][ T7054] dvb-usb: could not initialize remote control. [ 451.131397][ T7054] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 451.534227][ T7054] usb 6-1: USB disconnect, device number 19 [ 451.551714][ T7054] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 454.049345][ T7325] fuse: Bad value for 'fd' [ 454.235886][ T7336] netlink: 'syz.0.818': attribute type 12 has an invalid length. [ 455.506276][ T7348] loop2: detected capacity change from 0 to 512 [ 455.558528][ T7348] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.768283][ T7351] loop5: detected capacity change from 0 to 40427 [ 455.893188][ T7351] F2FS-fs (loop5): Unrecognized mount option "age_extent_cache" or missing value [ 456.859817][ T7348] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3894: comm syz.2.821: Allocating blocks 41-42 which overlap fs metadata [ 457.052177][ T7348] Quota error (device loop2): write_blk: dquota write failed [ 457.101705][ T7348] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5 [ 457.245195][ T7371] loop5: detected capacity change from 0 to 64 [ 457.337996][ T7348] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 457.429536][ T7348] EXT4-fs error (device loop2): ext4_acquire_dquot:6236: comm syz.2.821: Failed to acquire dquot type 1 [ 457.521347][ T7348] EXT4-fs error (device loop2): mb_free_blocks:1889: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt. [ 457.562150][ T7348] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.821: corrupted inode contents [ 457.736106][ T7374] fuse: Bad value for 'fd' [ 457.754981][ T7348] EXT4-fs error (device loop2): ext4_dirty_inode:6077: inode #12: comm syz.2.821: mark_inode_dirty error [ 457.933638][ T7348] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.821: corrupted inode contents [ 458.112320][ T7348] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #12: comm syz.2.821: mark_inode_dirty error [ 458.142870][ T7348] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.821: corrupted inode contents [ 458.932982][ T7348] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 458.977623][ T7348] EXT4-fs error (device loop2): ext4_do_update_inode:5229: inode #12: comm syz.2.821: corrupted inode contents [ 459.147445][ T7348] EXT4-fs error (device loop2): ext4_truncate:4286: inode #12: comm syz.2.821: mark_inode_dirty error [ 459.182150][ T7348] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 459.200666][ T7348] EXT4-fs (loop2): 1 truncate cleaned up [ 459.250785][ T7382] netlink: 'syz.1.831': attribute type 12 has an invalid length. [ 459.264604][ T7348] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000800000,noblock_validity,inode_readahead_blks=0x0000000000200000,errors=remount-ro,noinit_itable,abort,noauto_da_alloc,errors=continue,resgid=0x00000000000000002. Quota mode: writeback. [ 460.740865][ T7414] loop5: detected capacity change from 0 to 1024 [ 460.967744][ T7416] hub 8-0:1.0: USB hub found [ 460.972962][ T7416] hub 8-0:1.0: 1 port detected [ 460.978591][ T7053] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 461.000209][ T7416] vivid-002: ================= START STATUS ================= [ 461.008129][ T7416] vivid-002: Radio HW Seek Mode: Bounded [ 461.014516][ T7416] vivid-002: Radio Programmable HW Seek: false [ 461.021442][ T7416] vivid-002: RDS Rx I/O Mode: Block I/O [ 461.027083][ T7416] vivid-002: Generate RBDS Instead of RDS: false [ 461.033490][ T7416] vivid-002: RDS Reception: true [ 461.038470][ T7416] vivid-002: RDS Program Type: 0 inactive [ 461.044312][ T7416] vivid-002: RDS PS Name: inactive [ 461.049557][ T7416] vivid-002: RDS Radio Text: inactive [ 461.055137][ T7416] vivid-002: RDS Traffic Announcement: false inactive [ 461.062803][ T7416] vivid-002: RDS Traffic Program: false inactive [ 461.069197][ T7416] vivid-002: RDS Music: false inactive [ 461.076781][ T7418] fuse: Bad value for 'fd' [ 461.081650][ T7416] vivid-002: ================== END STATUS ================== [ 462.458057][ T7414] EXT4-fs (loop5): Ignoring removed bh option [ 462.781758][ T7414] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none. [ 462.809985][ T7431] netlink: 'syz.1.843': attribute type 12 has an invalid length. [ 462.924336][ T7053] usb 4-1: unable to get BOS descriptor or descriptor too short [ 463.104813][ T7053] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 463.183503][ T7414] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 463.293074][ T7053] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 463.418944][ T7053] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.727320][ T7053] usb 4-1: Product: syz [ 463.784946][ T7053] usb 4-1: Manufacturer: syz [ 463.806372][ T7053] usb 4-1: SerialNumber: syz [ 463.868653][ T7053] usb 4-1: can't set config #1, error -71 [ 463.896284][ T7446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 463.921045][ T7053] usb 4-1: USB disconnect, device number 21 [ 464.382896][ T21] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 465.457098][ T7467] fuse: Bad value for 'fd' [ 465.873654][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 466.682991][ T21] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 466.711667][ T21] usb 1-1: config 0 has no interface number 0 [ 467.523064][ T21] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 467.604056][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.637711][ T21] usb 1-1: Product: syz [ 467.674272][ T21] usb 1-1: config 0 descriptor?? [ 467.703017][ T21] usb 1-1: can't set config #0, error -71 [ 467.723173][ T21] usb 1-1: USB disconnect, device number 17 [ 473.179318][ T7503] bridge0: port 2(bridge_slave_1) entered disabled state [ 473.186721][ T7503] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.632896][ T7054] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 473.977834][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 474.028161][ T7503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 474.043130][ T7054] usb 2-1: unable to get BOS descriptor or descriptor too short [ 474.132978][ T7054] usb 2-1: config index 0 descriptor too short (expected 2182, got 134) [ 474.141442][ T7054] usb 2-1: config 0 has an invalid interface number: 0 but max is -1 [ 474.150807][ T7054] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 474.161210][ T7054] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 474.322930][ T7054] usb 2-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40 [ 474.332035][ T7054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.347482][ T7054] usb 2-1: Product: syz [ 474.351730][ T7054] usb 2-1: Manufacturer: syz [ 474.356605][ T7054] usb 2-1: SerialNumber: syz [ 474.373249][ T7054] usb 2-1: config 0 descriptor?? [ 474.592090][ T7503] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.601312][ T7503] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.610288][ T7503] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.619359][ T7503] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.693020][ T7054] usb 2-1: Focusrite Scarlett Gen 2/3 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8201 device_setup=1 to enable and report any issues to g@b4.vu [ 474.733677][ T7054] usb 2-1: USB disconnect, device number 13 [ 474.931396][ T7532] tipc: Started in network mode [ 474.951688][ T7532] tipc: Node identity ba1454e2fd64, cluster identity 4711 [ 474.966251][ T7532] tipc: Enabled bearer , priority 0 [ 475.105907][ T7532] tipc: Disabling bearer [ 475.251444][ T6290] udevd[6290]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 476.974809][ T7558] loop3: detected capacity change from 0 to 512 [ 478.558890][ T7558] EXT4-fs (loop3): 1 truncate cleaned up [ 478.572979][ T7558] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,,errors=continue. Quota mode: none. [ 478.649505][ T26] audit: type=1800 audit(1777353854.429:48): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.881" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 479.063264][ T7577] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 479.248397][ T7589] EXT4-fs (loop3): re-mounted. Opts: . Quota mode: none. [ 479.336789][ T7558] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 320 with error 28 [ 479.387746][ T7558] EXT4-fs (loop3): This should not happen!! Data will be lost [ 479.387746][ T7558] [ 479.425552][ T7558] EXT4-fs (loop3): Total free blocks count 0 [ 479.513019][ T7558] EXT4-fs (loop3): Free/Dirty block details [ 479.592540][ T7558] EXT4-fs (loop3): free_blocks=0 [ 479.606056][ T7558] EXT4-fs (loop3): dirty_blocks=321 [ 479.611473][ T7558] EXT4-fs (loop3): Block reservation details [ 480.423778][ T7558] EXT4-fs (loop3): i_reserved_data_blocks=321 [ 480.436113][ T7558] EXT4-fs error (device loop3) in ext4_setattr:5645: error 28 [ 480.454931][ T7598] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 480.488966][ T7602] loop2: detected capacity change from 0 to 2048 [ 480.508065][ T7602] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.546077][ T7598] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 481.492108][ T4297] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 28 [ 486.580600][ T7648] NILFS (nullb0): couldn't find nilfs on the device [ 489.758478][ T7677] loop0: detected capacity change from 0 to 512 [ 489.865348][ T7677] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 489.887049][ T7677] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 489.970393][ T7677] EXT4-fs error (device loop0): ext4_orphan_get:1432: comm syz.0.907: bad orphan inode 131083 [ 490.053418][ T7677] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 490.139284][ T26] audit: type=1800 audit(1777353865.919:49): pid=7677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.907" name="bus" dev="loop0" ino=18 res=0 errno=0 [ 491.194929][ T7695] binder: 7688:7695 unknown command 0 [ 491.220900][ T7695] binder: 7688:7695 ioctl c0306201 200000000080 returned -22 [ 492.826548][ T7714] fuse: Bad value for 'fd' [ 493.860958][ T7723] loop0: detected capacity change from 0 to 1024 [ 493.952973][ T7723] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 494.029499][ T7723] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000080,nodelalloc,grpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 494.091563][ T7723] EXT4-fs (loop0): Online resizing not supported with bigalloc [ 494.741559][ T7741] fuse: Bad value for 'fd' [ 495.572162][ T7743] hub 8-0:1.0: USB hub found [ 495.578392][ T7743] hub 8-0:1.0: 1 port detected [ 495.597964][ T7743] vivid-002: ================= START STATUS ================= [ 495.605810][ T7743] vivid-002: Radio HW Seek Mode: Bounded [ 495.611633][ T7743] vivid-002: Radio Programmable HW Seek: false [ 495.617996][ T7743] vivid-002: RDS Rx I/O Mode: Block I/O [ 495.623753][ T7743] vivid-002: Generate RBDS Instead of RDS: false [ 495.630271][ T7743] vivid-002: RDS Reception: true [ 495.635518][ T7743] vivid-002: RDS Program Type: 0 inactive [ 495.641460][ T7743] vivid-002: RDS PS Name: inactive [ 495.646897][ T7743] vivid-002: RDS Radio Text: inactive [ 495.652616][ T7743] vivid-002: RDS Traffic Announcement: false inactive [ 495.659572][ T7743] vivid-002: RDS Traffic Program: false inactive [ 495.666083][ T7743] vivid-002: RDS Music: false inactive [ 495.672545][ T7743] vivid-002: ================== END STATUS ================== [ 498.249237][ T7763] fuse: Invalid rootmode [ 499.013275][ T7764] binder: Binderfs stats mode cannot be changed during a remount [ 501.011229][ T7774] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 501.801138][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.813223][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.613042][ T4229] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 503.301387][ T4229] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 503.339413][ T4229] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 503.350075][ T4229] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 503.363874][ T4229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.566381][ T7795] fuse: Bad value for 'fd' [ 504.673298][ T7785] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 504.732514][ T7804] loop3: detected capacity change from 0 to 512 [ 505.029453][ T7785] udc-core: couldn't find an available UDC or it's busy [ 505.108660][ T7810] fuse: Invalid rootmode [ 506.234207][ T7785] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 506.315763][ T7804] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a32,acl,,errors=continue. Quota mode: writeback. [ 506.332995][ T7804] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 506.553250][ T7054] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 506.812843][ T7054] usb 2-1: Using ep0 maxpacket: 32 [ 507.093828][ T7054] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 507.633034][ T7054] usb 2-1: config 0 has no interface number 0 [ 507.650828][ T7834] loop6: detected capacity change from 0 to 8 [ 507.813192][ T7054] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 507.844438][ T7054] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.866501][ T5101] [ 507.868892][ T5101] ====================================================== [ 507.875942][ T5101] WARNING: possible circular locking dependency detected [ 507.882999][ T5101] syzkaller #0 Not tainted [ 507.887447][ T5101] ------------------------------------------------------ [ 507.894496][ T5101] udevd/5101 is trying to acquire lock: [ 507.900068][ T5101] ffff888078011938 ((wq_completion)loop6){+.+.}-{0:0}, at: flush_workqueue+0x150/0x13d0 [ 507.910017][ T5101] [ 507.910017][ T5101] but task is already holding lock: [ 507.917412][ T5101] ffff8881476f8468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 507.926261][ T5101] [ 507.926261][ T5101] which lock already depends on the new lock. [ 507.926261][ T5101] [ 507.936694][ T5101] [ 507.936694][ T5101] the existing dependency chain (in reverse order) is: [ 507.945752][ T5101] [ 507.945752][ T5101] -> #8 (&lo->lo_mutex){+.+.}-{3:3}: [ 507.953272][ T5101] __mutex_lock_common+0x1e3/0x2400 [ 507.959034][ T5101] mutex_lock_killable_nested+0x17/0x20 [ 507.965141][ T5101] lo_open+0x6a/0x100 [ 507.969680][ T5101] blkdev_get_whole+0x90/0x390 [ 507.974995][ T5101] blkdev_get_by_dev+0x2d0/0xa60 [ 507.980524][ T5101] blkdev_open+0x12d/0x2c0 [ 507.985495][ T5101] do_dentry_open+0x7ff/0xf80 [ 507.990768][ T5101] path_openat+0x26f5/0x2fa0 [ 507.995911][ T5101] do_filp_open+0x1e2/0x410 [ 508.000965][ T5101] do_sys_openat2+0x150/0x4b0 [ 508.006192][ T5101] __x64_sys_openat+0x135/0x160 [ 508.011593][ T5101] do_syscall_64+0x4c/0xa0 [ 508.016571][ T5101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.023026][ T5101] [ 508.023026][ T5101] -> #7 (&disk->open_mutex){+.+.}-{3:3}: [ 508.030885][ T5101] __mutex_lock_common+0x1e3/0x2400 [ 508.036644][ T5101] mutex_lock_nested+0x17/0x20 [ 508.041978][ T5101] bd_register_pending_holders+0x33/0x310 [ 508.048268][ T5101] device_add_disk+0x5a7/0xd40 [ 508.053588][ T5101] md_alloc+0x809/0xc00 [ 508.058382][ T5101] blk_request_module+0x26e/0x290 [ 508.063964][ T5101] blkdev_get_no_open+0x38/0x1d0 [ 508.069455][ T5101] blkdev_get_by_dev+0x77/0xa60 [ 508.074875][ T5101] swsusp_check+0xa1/0x2b0 [ 508.079845][ T5101] software_resume+0xc6/0x3b0 [ 508.085076][ T5101] resume_store+0xe4/0x130 [ 508.090053][ T5101] kernfs_fop_write_iter+0x379/0x4c0 [ 508.095902][ T5101] vfs_write+0x745/0xd60 [ 508.100696][ T5101] ksys_write+0x152/0x260 [ 508.105575][ T5101] do_syscall_64+0x4c/0xa0 [ 508.110638][ T5101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.117186][ T5101] [ 508.117186][ T5101] -> #6 (disks_mutex){+.+.}-{3:3}: [ 508.124524][ T5101] __mutex_lock_common+0x1e3/0x2400 [ 508.130274][ T5101] mutex_lock_nested+0x17/0x20 [ 508.135588][ T5101] md_alloc+0x48/0xc00 [ 508.140207][ T5101] blk_request_module+0x26e/0x290 [ 508.145780][ T5101] blkdev_get_no_open+0x38/0x1d0 [ 508.151276][ T5101] blkdev_get_by_dev+0x77/0xa60 [ 508.156689][ T5101] swsusp_check+0xa1/0x2b0 [ 508.161668][ T5101] software_resume+0xc6/0x3b0 [ 508.166901][ T5101] resume_store+0xe4/0x130 [ 508.171903][ T5101] kernfs_fop_write_iter+0x379/0x4c0 [ 508.177745][ T5101] vfs_write+0x745/0xd60 [ 508.182555][ T5101] ksys_write+0x152/0x260 [ 508.187439][ T5101] do_syscall_64+0x4c/0xa0 [ 508.192410][ T5101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.198859][ T5101] [ 508.198859][ T5101] -> #5 (major_names_lock){+.+.}-{3:3}: [ 508.206622][ T5101] __mutex_lock_common+0x1e3/0x2400 [ 508.212388][ T5101] mutex_lock_nested+0x17/0x20 [ 508.217711][ T5101] blk_request_module+0x31/0x290 [ 508.223299][ T5101] blkdev_get_no_open+0x38/0x1d0 [ 508.228792][ T5101] blkdev_get_by_dev+0x77/0xa60 [ 508.234279][ T5101] swsusp_check+0xa1/0x2b0 [ 508.239253][ T5101] software_resume+0xc6/0x3b0 [ 508.244063][ T7] usb 3-1: USB disconnect, device number 15 [ 508.244485][ T5101] resume_store+0xe4/0x130 [ 508.255586][ T5101] kernfs_fop_write_iter+0x379/0x4c0 [ 508.261436][ T5101] vfs_write+0x745/0xd60 [ 508.266231][ T5101] ksys_write+0x152/0x260 [ 508.271109][ T5101] do_syscall_64+0x4c/0xa0 [ 508.276084][ T5101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.282625][ T5101] [ 508.282625][ T5101] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 508.291190][ T5101] __mutex_lock_common+0x1e3/0x2400 [ 508.296946][ T5101] mutex_lock_nested+0x17/0x20 [ 508.302265][ T5101] software_resume+0x7c/0x3b0 [ 508.307493][ T5101] resume_store+0xe4/0x130 [ 508.312552][ T5101] kernfs_fop_write_iter+0x379/0x4c0 [ 508.318579][ T5101] vfs_write+0x745/0xd60 [ 508.323393][ T5101] ksys_write+0x152/0x260 [ 508.328289][ T5101] do_syscall_64+0x4c/0xa0 [ 508.333294][ T5101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.339748][ T5101] [ 508.339748][ T5101] -> #3 (&of->mutex){+.+.}-{3:3}: [ 508.346995][ T5101] __mutex_lock_common+0x1e3/0x2400 [ 508.352762][ T5101] mutex_lock_nested+0x17/0x20 [ 508.358100][ T5101] kernfs_seq_start+0x51/0x3c0 [ 508.363524][ T5101] seq_read_iter+0x3c4/0xd50 [ 508.368670][ T5101] vfs_read+0x759/0xd60 [ 508.373387][ T5101] ksys_read+0x152/0x260 [ 508.378189][ T5101] do_syscall_64+0x4c/0xa0 [ 508.383267][ T5101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.389724][ T5101] [ 508.389724][ T5101] -> #2 (&p->lock){+.+.}-{3:3}: [ 508.396800][ T5101] __mutex_lock_common+0x1e3/0x2400 [ 508.402646][ T5101] mutex_lock_nested+0x17/0x20 [ 508.407975][ T5101] seq_read_iter+0xad/0xd50 [ 508.413036][ T5101] do_iter_readv_writev+0x47e/0x5f0 [ 508.418787][ T5101] do_iter_read+0x20b/0x7c0 [ 508.423844][ T5101] loop_process_work+0x16dd/0x24a0 [ 508.429512][ T5101] process_one_work+0x85f/0x1010 [ 508.435002][ T5101] worker_thread+0xaa6/0x1290 [ 508.440231][ T5101] kthread+0x436/0x520 [ 508.444858][ T5101] ret_from_fork+0x1f/0x30 [ 508.449830][ T5101] [ 508.449830][ T5101] -> #1 ((work_completion)(&lo->rootcg_work)){+.+.}-{0:0}: [ 508.459251][ T5101] process_one_work+0x7bb/0x1010 [ 508.464753][ T5101] worker_thread+0xaa6/0x1290 [ 508.469995][ T5101] kthread+0x436/0x520 [ 508.474619][ T5101] ret_from_fork+0x1f/0x30 [ 508.479631][ T5101] [ 508.479631][ T5101] -> #0 ((wq_completion)loop6){+.+.}-{0:0}: [ 508.487937][ T5101] __lock_acquire+0x2c42/0x7d10 [ 508.493393][ T5101] lock_acquire+0x19e/0x400 [ 508.498462][ T5101] flush_workqueue+0x16c/0x13d0 [ 508.503873][ T5101] drain_workqueue+0xcf/0x380 [ 508.509107][ T5101] destroy_workqueue+0x7b/0xb20 [ 508.514518][ T5101] __loop_clr_fd+0x234/0xb90 [ 508.519797][ T5101] blkdev_put+0x53f/0x7d0 [ 508.524686][ T5101] blkdev_close+0x76/0xa0 [ 508.529575][ T5101] __fput+0x234/0x930 [ 508.534105][ T5101] task_work_run+0x125/0x1a0 [ 508.539251][ T5101] exit_to_user_mode_loop+0x10f/0x130 [ 508.545182][ T5101] exit_to_user_mode_prepare+0xee/0x180 [ 508.551285][ T5101] syscall_exit_to_user_mode+0x16/0x40 [ 508.557303][ T5101] do_syscall_64+0x58/0xa0 [ 508.562282][ T5101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.568742][ T5101] [ 508.568742][ T5101] other info that might help us debug this: [ 508.568742][ T5101] [ 508.579079][ T5101] Chain exists of: [ 508.579079][ T5101] (wq_completion)loop6 --> &disk->open_mutex --> &lo->lo_mutex [ 508.579079][ T5101] [ 508.592596][ T5101] Possible unsafe locking scenario: [ 508.592596][ T5101] [ 508.600087][ T5101] CPU0 CPU1 [ 508.605485][ T5101] ---- ---- [ 508.610880][ T5101] lock(&lo->lo_mutex); [ 508.615315][ T5101] lock(&disk->open_mutex); [ 508.622469][ T5101] lock(&lo->lo_mutex); [ 508.629312][ T5101] lock((wq_completion)loop6); [ 508.634203][ T5101] [ 508.634203][ T5101] *** DEADLOCK *** [ 508.634203][ T5101] [ 508.642374][ T5101] 2 locks held by udevd/5101: [ 508.647130][ T5101] #0: ffff8880206d4518 (&disk->open_mutex){+.+.}-{3:3}, at: blkdev_put+0xf9/0x7d0 [ 508.656486][ T5101] #1: ffff8881476f8468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 508.665724][ T5101] [ 508.665724][ T5101] stack backtrace: [ 508.671635][ T5101] CPU: 1 PID: 5101 Comm: udevd Not tainted syzkaller #0 [ 508.678694][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 508.688788][ T5101] Call Trace: [ 508.692108][ T5101] [ 508.695044][ T5101] dump_stack_lvl+0x188/0x250 [ 508.699819][ T5101] ? load_image+0x400/0x400 [ 508.704334][ T5101] ? show_regs_print_info+0x20/0x20 [ 508.709562][ T5101] ? print_circular_bug+0x12b/0x1a0 [ 508.714772][ T5101] check_noncircular+0x296/0x330 [ 508.719754][ T5101] ? add_chain_block+0x940/0x940 [ 508.724734][ T5101] ? lockdep_lock+0xf1/0x1f0 [ 508.729371][ T5101] ? mark_lock+0x94/0x320 [ 508.733727][ T5101] ? _find_first_zero_bit+0xce/0xf0 [ 508.738940][ T5101] __lock_acquire+0x2c42/0x7d10 [ 508.743814][ T5101] ? finish_lock_switch+0x12f/0x280 [ 508.749036][ T5101] ? lockdep_hardirqs_on+0x94/0x140 [ 508.754248][ T5101] ? finish_lock_switch+0x12f/0x280 [ 508.759465][ T5101] ? verify_lock_unused+0x140/0x140 [ 508.764673][ T5101] ? finish_task_switch+0x12f/0x640 [ 508.769895][ T5101] ? __switch_to_asm+0x34/0x60 [ 508.774701][ T5101] ? __schedule+0x11f7/0x43c0 [ 508.779420][ T5101] ? verify_lock_unused+0x140/0x140 [ 508.784652][ T5101] ? memset+0x1e/0x40 [ 508.788640][ T5101] lock_acquire+0x19e/0x400 [ 508.793153][ T5101] ? flush_workqueue+0x150/0x13d0 [ 508.798185][ T5101] ? __mutex_trylock_common+0x155/0x260 [ 508.803733][ T5101] ? read_lock_is_recursive+0x10/0x10 [ 508.809116][ T5101] ? __init_swait_queue_head+0xa5/0x150 [ 508.814686][ T5101] flush_workqueue+0x16c/0x13d0 [ 508.819546][ T5101] ? flush_workqueue+0x150/0x13d0 [ 508.824581][ T5101] ? __lock_acquire+0x7d10/0x7d10 [ 508.829650][ T5101] ? preempt_schedule+0xbc/0xd0 [ 508.834526][ T5101] ? schedule_preempt_disabled+0x20/0x20 [ 508.840185][ T5101] ? rcu_work_rcufn+0x120/0x120 [ 508.845058][ T5101] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 508.850705][ T5101] ? finish_wait+0xc0/0x1d0 [ 508.855306][ T5101] drain_workqueue+0xcf/0x380 [ 508.859987][ T5101] destroy_workqueue+0x7b/0xb20 [ 508.864850][ T5101] __loop_clr_fd+0x234/0xb90 [ 508.869445][ T5101] ? lo_release+0x172/0x1f0 [ 508.873959][ T5101] ? lo_open+0x100/0x100 [ 508.878228][ T5101] blkdev_put+0x53f/0x7d0 [ 508.882585][ T5101] blkdev_close+0x76/0xa0 [ 508.886926][ T5101] ? blkdev_open+0x2c0/0x2c0 [ 508.891546][ T5101] __fput+0x234/0x930 [ 508.895541][ T5101] task_work_run+0x125/0x1a0 [ 508.900140][ T5101] exit_to_user_mode_loop+0x10f/0x130 [ 508.905551][ T5101] exit_to_user_mode_prepare+0xee/0x180 [ 508.911108][ T5101] syscall_exit_to_user_mode+0x16/0x40 [ 508.916583][ T5101] do_syscall_64+0x58/0xa0 [ 508.921023][ T5101] ? clear_bhb_loop+0x30/0x80 [ 508.925711][ T5101] ? clear_bhb_loop+0x30/0x80 [ 508.930430][ T5101] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 508.936457][ T5101] RIP: 0033:0x7fa373223407 [ 508.940899][ T5101] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 508.960546][ T5101] RSP: 002b:00007ffe47789c30 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 508.968987][ T5101] RAX: 0000000000000000 RBX: 00007fa373135880 RCX: 00007fa373223407 [ 508.976984][ T5101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 508.985032][ T5101] RBP: 00007fa3731356e8 R08: 0000000000000000 R09: 0000000000000000 [ 508.993053][ T5101] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 509.001037][ T5101] R13: 00005629acb6f410 R14: 0000000000000008 R15: 00005629acb6c830 [ 509.009042][ T5101] [ 509.021953][ T7054] usb 2-1: Product: syz [ 509.026515][ T7054] usb 2-1: Manufacturer: syz [ 509.031234][ T7054] usb 2-1: SerialNumber: syz [ 509.047038][ T7054] usb 2-1: config 0 descriptor?? [ 509.093656][ T7054] smsc95xx v2.0.0 [ 509.252871][ T7054] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 509.266137][ T7054] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 509.294085][ T7054] usb 2-1: USB disconnect, device number 14