last executing test programs: 13.692862172s ago: executing program 1 (id=737): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0xa, 0x801, 0x84) syz_open_dev$mtd(&(0x7f0000000080), 0x0, 0x80) syz_open_dev$video(&(0x7f00000002c0), 0x7, 0x20800) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000c80), 0x0, 0x40800) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x15, 0x0, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) socket$packet(0x11, 0x2, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf254300000008000300", @ANYRES32=r9, @ANYBLOB='\f\x00X'], 0x40}, 0x1, 0x0, 0x0, 0x40018d1}, 0x4000) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x10000, 0xa100, 0x10000004, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0xae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x4000, 0x1, 0xf8, 0x0, r11}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x20, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 12.108151264s ago: executing program 1 (id=743): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000195c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000019600)={0x1, 0x1c, &(0x7f0000019900)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000019a00)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.629348869s ago: executing program 3 (id=756): syz_open_dev$sndpcmc(&(0x7f00000001a0), 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f000021b000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00003fd000/0x2000)=nil) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/test\x00', 0x777) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000540)='10000', 0x5) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000640)='0', 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f00000006c0)={0x0, 0x200000}) syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100), &(0x7f0000000280), 0x0) 7.823412871s ago: executing program 1 (id=758): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000200)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x5}], 0x1, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 7.623445022s ago: executing program 3 (id=760): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000580)="000008004500001c123400004011e5c8ac141401ac14140204d204d200080000", 0x20) close(0x4) 6.56607106s ago: executing program 2 (id=762): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x24) open$dir(&(0x7f0000000680)='./mnt\x00', 0x0, 0x2) socket$xdp(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$igmp(0x2, 0x3, 0x2) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x4004000) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socket(0x840000000002, 0x3, 0x100) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x8800) recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000740)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe702, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x542b, 0x2, 0x4, 0x1bf, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93f9, 0x8000, 0x2, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x3, 0x8}}], 0x1, 0x0, 0x0) 6.433332393s ago: executing program 3 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'tunl0\x00'}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) 6.275045429s ago: executing program 0 (id=765): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sendfile(r0, r0, 0x0, 0x20000005) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x3, 0x0, 0x9, 0x1, 0x0, 0xfa11, 0xac}, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r1, 0x1, 0x3c, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e06, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c) sendmmsg$inet6(r1, 0x0, 0x0, 0x4000000) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/35, 0x23) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) sendmmsg$inet(r1, 0x0, 0x0, 0x2400c8c4) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = add_key(&(0x7f0000000180)='asymmetric\x00', 0x0, &(0x7f0000000300)="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", 0x559, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000880)={r3, 0x0, 0x300}, &(0x7f00000008c0)={'enc=', 'pkcs1', ' hash=', {'sha256\x00'}}, 0x0, 0x0) request_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)='/dev/nullb0\x00', r3) socket$nl_route(0x10, 0x3, 0x0) userfaultfd(0x801) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) 6.273662509s ago: executing program 3 (id=766): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000540)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000019540)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000195c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000019600)={0x1, 0x1c, &(0x7f0000019900)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000019a00)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.142396845s ago: executing program 2 (id=767): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/4092, 0xffc}, 0x2}], 0x1, 0x40012141, 0x0) 5.079885282s ago: executing program 0 (id=768): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) mkdir(&(0x7f0000000300)='./pipefs\x00', 0xd) mount(0x0, &(0x7f0000000340)='./my_configfs\x00', &(0x7f00000003c0)='configfs\x00', 0x10040, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_getparam(0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000003100), 0x2, 0x143102) writev(r1, 0x0, 0x0) mount(0x0, &(0x7f0000003200)='./pipefs\x00', &(0x7f0000003240)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000003280)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = fsopen(&(0x7f00000032c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003300)='source\x00', &(0x7f0000003340)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003380)='addr\x00', &(0x7f00000033c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003400)='vers\x00', &(0x7f0000003440)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$proc_mixer(r2, &(0x7f0000003480)=ANY=[], 0x1001) mount(0x0, &(0x7f0000004500)='./dev\x00', &(0x7f0000004540)='devtmpfs\x00', 0x0, 0x0) 4.914645948s ago: executing program 2 (id=769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x478, 0x2c, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x448, 0x2, [@TCA_BASIC_POLICE={0x444, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x4, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x5, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0xffffffff, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x5, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0x0, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10020000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x52b, 0xd, 0x0, 0x1, 0x3, 0xb, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x478}}, 0x0) 4.832702887s ago: executing program 1 (id=770): mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x11) setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141142) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000600)) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000640)={0x7, &(0x7f0000000680)=[{0x15, '\x00', @buffer={"382e5803ed92f7e3a82382b3f29b773f0d7a000000a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}, {0x0, '\x00', @buffer={"ca0e0de0e3bfde98906058e2a46554208d5237cf85e96d768a2fdaa93f9cfff4", 0x20}, 0x2f79}, {0x3c, '\x00', @data=0x4, 0x6}, {0x1d, '\x00', @data=0xab, 0x9}]}) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f00000007c0)={0x30a32c0, 0x1, @vsb={0x6}}) 4.761099614s ago: executing program 0 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f00000016c0)={0x10, 0x0, 0x25dfdbfb, 0x40000044}, 0xc) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 3.836467578s ago: executing program 2 (id=772): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) syz_open_dev$vcsa(&(0x7f00000002c0), 0x5, 0x8000) r1 = openat$cgroup_pressure(0xffffffffffffffff, 0x0, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP64(r1, 0x4030582a, &(0x7f0000000100)={0x1, 0x0, 0x3, 0x9, 0x8b, 0xed1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x110) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x404, &(0x7f0000000740)=ANY=[@ANYBLOB]) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x1c00000, 0x200000f, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, &(0x7f0000000480)) r6 = inotify_init1(0x0) inotify_add_watch(r6, &(0x7f0000000140)='.\x00', 0xa4000831) read(r6, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) close(r6) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffff4f, 0x0, 0x0, 0x7}, 0x94) 3.607796852s ago: executing program 1 (id=773): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x801) syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x6, 0x8, 0x4, 0x0, 0x9, 0xffffffffffffffff, 0x100000000000006, 0xfa11, 0xffffffff}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndmidi(&(0x7f0000000000), 0x5, 0x101080) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x0) r2 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000003, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000240)=[{0x30, 0x1, 0x0, 0x8001}, {0x28, 0x1, 0x50, 0xfffff038}, {0x6, 0xfd, 0x4, 0x1579}]}, 0x10) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000580)=ANY=[@ANYRES16=r2, @ANYBLOB="54e780cb9468ce7b786e2044b00b55f991", @ANYRES64=r1], 0x9ffc) r3 = signalfd4(0xffffffffffffffff, &(0x7f00000002c0)={[0x1003ffffffc]}, 0x8, 0x800) poll(&(0x7f0000000300)=[{r3, 0x5}], 0x1, 0x90) timer_create(0x2, &(0x7f0000000340)={0x0, 0x11}, &(0x7f0000000380)=0x0) timer_settime(r4, 0x236bd4336e4642df, &(0x7f0000000440)={{}, {0x0, 0xe4c}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fsopen(&(0x7f0000000180)='ntfs3\x00', 0x0) r5 = open(&(0x7f0000000200)='.\x00', 0x100, 0x0) fcntl$notify(r5, 0x402, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x7, 0xa0, 0x9, "", [{{0x9, 0x4, 0x0, 0x7, 0x2, 0x7, 0x1, 0x2, 0x0, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x2, 0x5, 0xd}}}}}]}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x40, 0x6, 0x2, 0x20, 0xfc}, 0x0, 0x0, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)=0xd) 2.683412476s ago: executing program 2 (id=774): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000c00)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000000d40)='N', 0x1, 0x24000045, &(0x7f0000000d80)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000dc0)='veno', 0x4) shutdown(r0, 0x1) 2.421563113s ago: executing program 2 (id=775): syz_usb_connect(0x5, 0x24, &(0x7f0000000240)=ANY=[], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000280), 0x1, 0x2003) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0xfff) 1.774610769s ago: executing program 3 (id=776): openat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x40, 0x80) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000600), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r0, &(0x7f0000002780)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0xffffffff80410480, 0x0, 0x0, 0x3}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000008c00)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 1.288772728s ago: executing program 0 (id=777): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f00000001c0)=0xb2, 0x4) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000280)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=""/4092, 0xffc}, 0x2}], 0x1, 0x40012141, 0x0) 1.103966507s ago: executing program 0 (id=778): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = accept4(r3, 0x0, 0x0, 0x0) sendto$packet(r4, &(0x7f0000000200)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebfe0edee", 0xfffffffffffffec6, 0x100000000000000, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) poll(&(0x7f0000000280)=[{0xffffffffffffffff, 0x5}], 0x1, 0x90) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 645.901203ms ago: executing program 3 (id=779): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xd, 0x4, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0xc3, &(0x7f0000000180)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f00000002c0), 0x10}, 0x94) mkdir(&(0x7f0000000300)='./pipefs\x00', 0xd) mount(0x0, &(0x7f0000000340)='./my_configfs\x00', &(0x7f00000003c0)='configfs\x00', 0x10040, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x29, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000440)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000480)=0x7) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sched_getparam(0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000003100), 0x2, 0x143102) writev(r1, 0x0, 0x0) mount(0x0, &(0x7f0000003200)='./pipefs\x00', &(0x7f0000003240)='rpc_pipefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000003280)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) r3 = fsopen(&(0x7f00000032c0)='nfs4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003300)='source\x00', &(0x7f0000003340)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003380)='addr\x00', &(0x7f00000033c0)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000003400)='vers\x00', &(0x7f0000003440)='4.0\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) write$proc_mixer(r2, &(0x7f0000003480)=ANY=[], 0x1001) mount(0x0, &(0x7f0000004500)='./dev\x00', &(0x7f0000004540)='devtmpfs\x00', 0x0, 0x0) 269.676252ms ago: executing program 0 (id=780): socket$netlink(0x10, 0x3, 0x0) landlock_create_ruleset(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x13, 0x401d031, 0xffffffffffffffff, 0x0) request_key(0x0, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x1, 0x7fff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24008084}, 0x20000000) 0s ago: executing program 1 (id=781): mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/cpu_dma_latency\x00', 0x20c01, 0x11) setns(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x2, 0x141142) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000400)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dvb_frontend(&(0x7f00000005c0), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, &(0x7f0000000600)) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000640)={0x7, &(0x7f0000000680)=[{0x15, '\x00', @buffer={"382e5803ed92f7e3a82382b3f29b773f0d7a000000a8a725cd14ccf5807ab2b2", 0x20}, 0xfffffff4}, {0x0, '\x00', @buffer={"ca0e0de0e3bfde98906058e2a46554208d5237cf85e96d768a2fdaa93f9cfff4", 0x20}, 0x2f79}, {0x3c, '\x00', @data=0x4, 0x6}, {0x1d, '\x00', @data=0xab, 0x9}]}) ioctl$FE_SET_FRONTEND(r1, 0x40246f4c, &(0x7f00000007c0)={0x30a32c0, 0x1, @vsb={0x6}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.53' (ED25519) to the list of known hosts. [ 84.333354][ T5773] cgroup: Unknown subsys name 'net' [ 84.444942][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.151709][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.512157][ T5789] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.521431][ T5789] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.531963][ T5799] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.540018][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.548939][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.556949][ T5799] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.565359][ T5799] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.573806][ T5799] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.581951][ T5799] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.595693][ T5795] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.604332][ T5795] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.612167][ T5795] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 88.619739][ T5795] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.624856][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.632555][ T5795] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.635991][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.648973][ T5795] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.654828][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.673501][ T5799] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.683924][ T5799] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 88.691848][ T5799] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.696814][ T5795] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.709395][ T5795] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 88.716844][ T5795] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.791882][ T5784] (null): rxe_set_mtu: Set mtu to 1024 [ 88.801622][ T5787] (null): rxe_set_mtu: Set mtu to 1024 [ 88.808637][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.816661][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.836820][ T5785] (null): rxe_set_mtu: Set mtu to 1024 [ 88.842664][ T5785] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.855008][ T5786] (null): rxe_set_mtu: Set mtu to 1024 [ 88.866033][ T5786] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 88.873957][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 88.905882][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.199338][ T5784] infiniband rxe0: set active [ 89.204290][ T5784] infiniband rxe0: added rxe_eth0 [ 89.217841][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.309823][ T5784] RDS/IB: rxe0: added [ 89.314916][ T5784] smc: adding ib device rxe0 with port count 1 [ 89.321657][ T5784] smc: ib device rxe0 port 1 has pnetid [ 89.349953][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 89.361061][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.387468][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.496565][ T5786] chnl_net:caif_netlink_parms(): no params data found [ 89.546639][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 89.692275][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.700528][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.708152][ T5787] bridge_slave_0: entered allmulticast mode [ 89.716253][ T5787] bridge_slave_0: entered promiscuous mode [ 89.752993][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 89.760670][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.785676][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.792968][ T5787] bridge_slave_1: entered allmulticast mode [ 89.817280][ T5787] bridge_slave_1: entered promiscuous mode [ 89.963296][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.988496][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.002103][ T5786] bridge_slave_0: entered allmulticast mode [ 90.019599][ T5786] bridge_slave_0: entered promiscuous mode [ 90.057469][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.071466][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.080321][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.093575][ T5786] bridge_slave_1: entered allmulticast mode [ 90.101546][ T5786] bridge_slave_1: entered promiscuous mode [ 90.159621][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.191098][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.225611][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.232837][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.256463][ T5785] bridge_slave_0: entered allmulticast mode [ 90.264059][ T5785] bridge_slave_0: entered promiscuous mode [ 90.317959][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.342686][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.352914][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.361037][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.368581][ T5785] bridge_slave_1: entered allmulticast mode [ 90.377151][ T5785] bridge_slave_1: entered promiscuous mode [ 90.406383][ T5787] team0: Port device team_slave_0 added [ 90.462559][ T5787] team0: Port device team_slave_1 added [ 90.542120][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.572897][ T5786] team0: Port device team_slave_0 added [ 90.586469][ T5786] team0: Port device team_slave_1 added [ 90.594522][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.631946][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.641793][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.668245][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.705190][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.712415][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.739446][ T5795] Bluetooth: hci3: command tx timeout [ 90.745203][ T5795] Bluetooth: hci0: command tx timeout [ 90.751155][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.752730][ T5795] Bluetooth: hci2: command tx timeout [ 90.769921][ T5784] rxe_eth0 speed is unknown, defaulting to 1000 [ 90.792007][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.799148][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.826062][ T5795] Bluetooth: hci1: command tx timeout [ 90.832763][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.853257][ T5785] team0: Port device team_slave_0 added [ 90.862772][ T5785] team0: Port device team_slave_1 added [ 90.914742][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.933328][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.000027][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.092810][ T5787] hsr_slave_0: entered promiscuous mode [ 91.100600][ T5787] hsr_slave_1: entered promiscuous mode [ 91.139090][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.150130][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.176668][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.242241][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.253632][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.283735][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.393524][ T5786] hsr_slave_0: entered promiscuous mode [ 91.403580][ T5786] hsr_slave_1: entered promiscuous mode [ 91.411782][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.423153][ T5786] Cannot create hsr debugfs directory [ 91.600505][ T5785] hsr_slave_0: entered promiscuous mode [ 91.608734][ T5785] hsr_slave_1: entered promiscuous mode [ 91.615379][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.627821][ T5785] Cannot create hsr debugfs directory [ 91.770248][ T28] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.172944][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 92.286215][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.372355][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.386554][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.426105][ T5447] infiniband rxe0: set active [ 92.432318][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.493560][ T5166] rxe_eth0 speed is unknown, defaulting to 1000 [ 92.516270][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.523530][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.531028][ T5784] bridge_slave_0: entered allmulticast mode [ 92.538548][ T5784] bridge_slave_0: entered promiscuous mode [ 92.548012][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.556053][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.563366][ T5784] bridge_slave_1: entered allmulticast mode [ 92.571109][ T5784] bridge_slave_1: entered promiscuous mode [ 92.613241][ T5786] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.629940][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.646963][ T5786] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.661818][ T5786] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.673956][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.708728][ T5786] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.777720][ T5784] team0: Port device team_slave_0 added [ 92.787744][ T5784] team0: Port device team_slave_1 added [ 92.811922][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.818792][ T5795] Bluetooth: hci0: command tx timeout [ 92.824227][ T5795] Bluetooth: hci3: command tx timeout [ 92.830361][ T5097] Bluetooth: hci2: command tx timeout [ 92.858064][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.865060][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.893739][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.904502][ T5795] Bluetooth: hci1: command tx timeout [ 92.912797][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.920222][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.949481][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.962121][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.973211][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.014066][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.051582][ T5784] hsr_slave_0: entered promiscuous mode [ 93.059014][ T5784] hsr_slave_1: entered promiscuous mode [ 93.065350][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.074011][ T5784] Cannot create hsr debugfs directory [ 93.366581][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.387790][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.474734][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.498123][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.506112][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.519308][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.532115][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.545637][ T5786] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.578415][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.585943][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.601417][ T2942] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.608646][ T2942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.657892][ T2942] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.665048][ T2942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.696214][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.703487][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.729737][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.811209][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.833275][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.840666][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.861420][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.869011][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.091533][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.169385][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.211916][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.219186][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.251889][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.259130][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.431616][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.584300][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.613800][ T5787] veth0_vlan: entered promiscuous mode [ 94.658750][ T5787] veth1_vlan: entered promiscuous mode [ 94.723001][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.830972][ T5786] veth0_vlan: entered promiscuous mode [ 94.857364][ T5787] veth0_macvtap: entered promiscuous mode [ 94.878084][ T5787] veth1_macvtap: entered promiscuous mode [ 94.898108][ T5795] Bluetooth: hci3: command tx timeout [ 94.901670][ T5097] Bluetooth: hci2: command tx timeout [ 94.903649][ T5790] Bluetooth: hci0: command tx timeout [ 94.919946][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.933770][ T5786] veth1_vlan: entered promiscuous mode [ 94.976844][ T5795] Bluetooth: hci1: command tx timeout [ 94.993057][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.019771][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.033714][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.043009][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.053448][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.063224][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.091660][ T5785] veth0_vlan: entered promiscuous mode [ 95.111881][ T5786] veth0_macvtap: entered promiscuous mode [ 95.132855][ T5785] veth1_vlan: entered promiscuous mode [ 95.154208][ T5786] veth1_macvtap: entered promiscuous mode [ 95.212706][ T5784] veth0_vlan: entered promiscuous mode [ 95.250604][ T5784] veth1_vlan: entered promiscuous mode [ 95.271861][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.284307][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.298084][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.323780][ T5785] veth0_macvtap: entered promiscuous mode [ 95.348651][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.362533][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.378652][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.415126][ T5785] veth1_macvtap: entered promiscuous mode [ 95.436889][ T5786] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.449167][ T5786] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.459685][ T5786] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.471912][ T5786] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.506303][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.524597][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.537375][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.551754][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.564162][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.576894][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.591928][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.644766][ T5784] veth0_macvtap: entered promiscuous mode [ 95.657105][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.668094][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.680299][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.691671][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.705056][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.727178][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.736809][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.747789][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.755707][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.759165][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.779533][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.795150][ T5784] veth1_macvtap: entered promiscuous mode [ 95.882954][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.895813][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.912667][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.924115][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.935231][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.946966][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.960180][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.977692][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.992313][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.003288][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.014168][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.026056][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.037013][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.051625][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.079969][ T5787] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.124971][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.141013][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.151164][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.166346][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.179760][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.203108][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.331688][ T2885] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.350850][ T2885] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.359750][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.380250][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.476348][ T2942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.490098][ T2942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.542580][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.569892][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.605013][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.640025][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.888598][ T5905] syz.0.1[5905]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 96.923779][ T5905] loop0: detected capacity change from 0 to 256 [ 96.936833][ T5905] ======================================================= [ 96.936833][ T5905] WARNING: The mand mount option has been deprecated and [ 96.936833][ T5905] and is ignored by this kernel. Remove the mand [ 96.936833][ T5905] option from the mount to silence this warning. [ 96.936833][ T5905] ======================================================= [ 97.033281][ T5795] Bluetooth: hci3: command tx timeout [ 97.040205][ T5795] Bluetooth: hci0: command tx timeout [ 97.047154][ T5795] Bluetooth: hci2: command tx timeout [ 97.147331][ T5790] Bluetooth: hci1: command tx timeout [ 97.242500][ T1194] cfg80211: failed to load regulatory.db [ 98.216009][ T5877] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 98.420375][ T5877] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 98.475505][ T5877] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.502520][ T5877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 98.560553][ T5877] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 98.610185][ T5877] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.682272][ T5877] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.744743][ T5911] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 98.772806][ T5877] hub 1-1:1.0: bad descriptor, ignoring hub [ 98.808466][ T5877] hub: probe of 1-1:1.0 failed with error -5 [ 98.846299][ T5877] cdc_wdm 1-1:1.0: skipping garbage [ 98.851612][ T5877] cdc_wdm 1-1:1.0: skipping garbage [ 98.928150][ T5877] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 98.940316][ T5877] cdc_wdm 1-1:1.0: Unknown control protocol [ 99.150787][ T5933] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 99.169684][ T5933] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 99.501445][ T5929] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 99.608909][ T5911] usb 1-1: reset full-speed USB device number 2 using dummy_hcd [ 99.843372][ T5931] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 99.888530][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 99.895954][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 99.902969][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 99.909626][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 99.916046][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 99.922660][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 99.928931][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 99.935535][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 99.942072][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 99.948716][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 99.955294][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 99.961929][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 99.968676][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 99.975307][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 99.981668][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 99.988291][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 99.994571][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 100.001176][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 100.007720][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 100.014371][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 100.388698][ T5940] syz.1.10 invoked oom-killer: gfp_mask=0x400cc0(GFP_KERNEL_ACCOUNT), order=1, oom_score_adj=1000 [ 100.415461][ T5940] CPU: 0 PID: 5940 Comm: syz.1.10 Not tainted syzkaller #0 [ 100.422787][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 100.432916][ T5940] Call Trace: [ 100.436247][ T5940] [ 100.439233][ T5940] dump_stack_lvl+0x18c/0x250 [ 100.444021][ T5940] ? show_regs_print_info+0x20/0x20 [ 100.449286][ T5940] ? load_image+0x420/0x420 [ 100.453856][ T5940] dump_header+0xd8/0x820 [ 100.458244][ T5940] out_of_memory+0xe83/0x1200 [ 100.462994][ T5940] ? mem_cgroup_out_of_memory+0xc1/0x390 [ 100.468689][ T5940] ? mutex_lock_nested+0x20/0x20 [ 100.473689][ T5940] ? unregister_oom_notifier+0x20/0x20 [ 100.479229][ T5940] mem_cgroup_out_of_memory+0x2c2/0x390 [ 100.484851][ T5940] ? try_charge_memcg+0xc8c/0x17c0 [ 100.490055][ T5940] ? drain_local_stock+0x630/0x630 [ 100.495257][ T5940] ? do_raw_spin_unlock+0x121/0x230 [ 100.500539][ T5940] try_charge_memcg+0xc9c/0x17c0 [ 100.505589][ T5940] ? folio_flags+0x120/0x120 [ 100.510249][ T5940] ? percpu_ref_tryget+0x15/0x180 [ 100.515341][ T5940] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 100.521170][ T5940] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 100.527222][ T5940] ? percpu_ref_tryget+0x15/0x180 [ 100.532358][ T5876] usb 1-1: USB disconnect, device number 2 [ 100.532357][ T5940] ? percpu_ref_tryget+0x15/0x180 [ 100.543385][ T5940] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 100.549176][ T5940] ? get_mem_cgroup_from_objcg+0x19/0x150 [ 100.554965][ T5940] ? get_mem_cgroup_from_objcg+0x13c/0x150 [ 100.560844][ T5940] obj_cgroup_charge+0x36e/0x630 [ 100.565847][ T5940] ? get_obj_cgroup_from_current+0xd4/0x280 [ 100.571809][ T5940] ? obj_cgroup_charge+0xed/0x630 [ 100.576898][ T5940] ? mod_objcg_mlstate+0x320/0x320 [ 100.582081][ T5940] ? get_obj_cgroup_from_current+0xd4/0x280 [ 100.588040][ T5940] ? get_obj_cgroup_from_current+0xd4/0x280 [ 100.594014][ T5940] pcpu_alloc+0x229/0x1880 [ 100.598539][ T5940] mem_cgroup_css_alloc+0x2a5/0x15d0 [ 100.603896][ T5940] cgroup_apply_control_enable+0x3cc/0xb00 [ 100.609785][ T5940] cgroup_mkdir+0xc83/0xe70 [ 100.614370][ T5940] ? css_task_iter_end+0x2c0/0x2c0 [ 100.619559][ T5940] ? kernfs_iop_permission+0x2c4/0x3b0 [ 100.625095][ T5940] ? css_task_iter_end+0x2c0/0x2c0 [ 100.630281][ T5940] kernfs_iop_mkdir+0x241/0x3e0 [ 100.635195][ T5940] vfs_mkdir+0x2a5/0x470 [ 100.639509][ T5940] do_mkdirat+0x1dc/0x450 [ 100.643904][ T5940] ? vfs_mkdir+0x470/0x470 [ 100.648385][ T5940] __x64_sys_mkdirat+0x89/0xa0 [ 100.653225][ T5940] do_syscall_64+0x55/0xb0 [ 100.657708][ T5940] ? clear_bhb_loop+0x40/0x90 [ 100.662460][ T5940] ? clear_bhb_loop+0x40/0x90 [ 100.667214][ T5940] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 100.673179][ T5940] RIP: 0033:0x7fa35fba94d9 [ 100.677664][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 100.697330][ T5940] RSP: 002b:00007fa360b1e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 100.705809][ T5940] RAX: ffffffffffffffda RBX: 00007fa35fe25fa0 RCX: 00007fa35fba94d9 [ 100.713862][ T5940] RDX: 0000000000000020 RSI: 0000200000000f40 RDI: ffffffffffffff9c [ 100.721895][ T5940] RBP: 00007fa35fc3804e R08: 0000000000000000 R09: 0000000000000000 [ 100.729921][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 100.737949][ T5940] R13: 00007fa35fe26038 R14: 00007fa35fe25fa0 R15: 00007ffffb17e258 [ 100.746011][ T5940] [ 100.786981][ T5940] memory: usage 0kB, limit 0kB, failcnt 19 [ 100.799982][ T5940] memory+swap: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 100.807658][ T5940] kmem: usage 0kB, limit 9007199254740988kB, failcnt 0 [ 100.814675][ T5940] Memory cgroup stats for /syz1/test: [ 100.815173][ T5940] cache 0 [ 100.841743][ T5940] rss 0 [ 100.844601][ T5940] rss_huge 0 [ 100.875854][ T5940] shmem 0 [ 100.882363][ T5940] mapped_file 0 [ 100.896771][ T5940] dirty 0 [ 100.942965][ T5940] writeback 0 [ 100.970035][ T5940] workingset_refault_anon 0 [ 101.017960][ T5940] workingset_refault_file 0 [ 101.088404][ T5940] swap 0 [ 101.146734][ T5940] pgpgin 0 [ 101.208336][ T5940] pgpgout 0 [ 101.254073][ T5940] pgfault 0 [ 101.301631][ T5940] pgmajfault 0 [ 101.368932][ T5940] inactive_anon 0 [ 101.453429][ T5940] active_anon 0 [ 103.035727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 103.445581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 103.587109][ T5940] inactive_file 0 [ 103.639031][ T5940] active_file 0 [ 103.682796][ T5940] unevictable 0 [ 103.721571][ T5940] hierarchical_memory_limit 0 [ 103.837003][ T5940] hierarchical_memsw_limit 9223372036854771712 [ 103.930756][ T5940] total_cache 0 [ 103.969053][ T5940] total_rss 0 [ 103.998219][ T5940] total_rss_huge 0 [ 104.045928][ T5940] total_shmem 0 [ 104.077146][ T5940] total_mapped_file 0 [ 104.127396][ T5940] total_dirty 0 [ 104.171363][ T5940] total_writeback 0 [ 104.234053][ T5940] total_workingset_refault_anon 0 [ 104.295485][ T5940] total_workingset_refault_file 0 [ 104.393954][ T5940] total_swap 0 [ 104.476375][ T5940] total_pgpgin 0 [ 104.534720][ T5940] total_pgpgout 0 [ 104.619596][ T5940] total_pgfault 0 [ 104.682311][ T5940] total_pgmajfault 0 [ 104.733947][ T5940] total_inactive_anon 0 [ 104.782826][ T5940] total_active_anon 0 [ 104.834337][ T5940] total_inactive_file 0 [ 104.885865][ T5940] total_active_file 0 [ 104.947300][ T5940] total_unevictable 0 [ 104.996791][ T5940] anon_cost 0 [ 105.022812][ T5940] file_cost 0 [ 105.052140][ T5940] Out of memory and no killable processes... [ 106.579521][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14'. [ 107.918845][ T5876] rxe_eth0 speed is unknown, defaulting to 1000 [ 110.587530][ T5987] loop0: detected capacity change from 0 to 256 [ 112.946415][ T6000] process 'syz.3.20' launched './file0' with NULL argv: empty string added [ 115.835700][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 116.245476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 116.404100][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22'. [ 116.413608][ T6005] tipc: Started in network mode [ 116.418683][ T6005] tipc: Node identity 7, cluster identity 4711 [ 116.425054][ T6005] tipc: Node number set to 7 [ 116.522580][ T6017] loop2: detected capacity change from 0 to 32768 [ 116.836166][ T6030] loop3: detected capacity change from 0 to 2048 [ 116.896385][ T6030] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 118.926282][ T5877] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 119.112878][ T6049] loop2: detected capacity change from 0 to 128 [ 119.158088][ T5877] usb 4-1: unable to get BOS descriptor or descriptor too short [ 119.169599][ T5877] usb 4-1: not running at top speed; connect to a high speed hub [ 119.179617][ T6049] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 119.193634][ T5877] usb 4-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.40 [ 119.219165][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.235864][ T5877] usb 4-1: Product: syz [ 119.246036][ T5877] usb 4-1: Manufacturer: syz [ 119.254462][ T5877] usb 4-1: SerialNumber: syz [ 119.265282][ T6049] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.094858][ T5877] usb 4-1: can't set config #1, error -71 [ 121.120490][ T5877] usb 4-1: USB disconnect, device number 2 [ 121.350172][ T1020] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 121.595903][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.805676][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 121.934273][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 122.191656][ T23] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 122.257545][ T23] usb 2-1: can't read configurations, error -71 [ 126.057774][ T6076] loop2: detected capacity change from 0 to 4096 [ 126.157251][ T6076] NILFS (loop2): invalid segment: Checksum error in segment payload [ 126.225480][ T6076] NILFS (loop2): trying rollback from an earlier position [ 126.389014][ T6076] NILFS (loop2): recovery complete [ 126.422609][ T6079] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.556358][ T27] audit: type=1800 audit(1794535930.928:2): pid=6076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.39" name="file1" dev="loop2" ino=12 res=0 errno=0 [ 127.099879][ T6090] loop1: detected capacity change from 0 to 1024 [ 127.737897][ T1020] hfsplus: b-tree write err: -5, ino 25 [ 127.823278][ T1020] hfsplus: b-tree write err: -5, ino 4 [ 127.887979][ T1020] hfsplus: b-tree write err: -5, ino 2 [ 127.992451][ T1020] hfsplus: b-tree write err: -5, ino 26 [ 128.636361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c0!!! [ 129.045826][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 131.195659][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 132.015579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 133.352591][ T6112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.44'. [ 134.165572][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 134.498613][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.508927][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.670844][ T5922] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 134.935617][ T6121] syz.3.49 uses obsolete (PF_INET,SOCK_PACKET) [ 139.285467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 144.335075][ T6174] block device autoloading is deprecated and will be removed. [ 144.730039][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.63'. [ 145.135263][ T6180] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 145.449800][ T27] audit: type=1800 audit(1794535949.838:3): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="c_chmask" dev="configfs" ino=8358 res=0 errno=0 [ 145.510725][ T27] audit: type=1800 audit(1794535949.858:4): pid=6184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.64" name="UDC" dev="configfs" ino=8359 res=0 errno=0 [ 145.836476][ T6191] loop2: detected capacity change from 0 to 164 [ 145.879306][ T6193] device-mapper: raid: Choosing default region size of 4MiB [ 145.890943][ T6193] device-mapper: raid: Device 0 specified for rebuild; clearing superblock [ 145.990767][ T6197] loop0: detected capacity change from 0 to 164 [ 146.057409][ T6193] md/raid:mdX: device ram7 operational as raid disk 1 [ 146.174320][ T6193] md/raid:mdX: raid level 5 active with 1 out of 2 devices, algorithm 1 [ 146.196001][ T6193] mdX: invalid bitmap file superblock: bad magic [ 146.202462][ T6193] mdX: failed to create bitmap (-22) [ 146.526506][ T6207] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 147.590703][ T6193] device-mapper: table: 248:0: raid: Failed to run raid array (-EINVAL) [ 147.633247][ T6193] device-mapper: ioctl: error adding target to table [ 147.657731][ T6213] block device autoloading is deprecated and will be removed. [ 149.400303][ T6213] tipc: Started in network mode [ 149.405254][ T6213] tipc: Node identity ac14140f, cluster identity 4711 [ 149.460130][ T6213] tipc: Enabled bearer , priority 10 [ 149.675558][ T6219] device-mapper: clone: Destination device (ram1) discard unsupported: Disabling discard passdown. [ 150.369522][ T1194] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 150.577732][ T23] tipc: Node number set to 2886997007 [ 150.675083][ T6232] syz.2.77 (6232) used greatest stack depth: 19560 bytes left [ 150.818592][ T6235] loop0: detected capacity change from 0 to 164 [ 150.887399][ T1194] usb 2-1: not running at top speed; connect to a high speed hub [ 150.910251][ T1194] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 150.921260][ T6237] loop2: detected capacity change from 0 to 164 [ 150.954146][ T1194] usb 2-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 150.976180][ T1194] usb 2-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 150.984636][ T1194] usb 2-1: Product: syz [ 151.012655][ T1194] usb 2-1: Manufacturer: syz [ 151.087121][ T1194] usb 2-1: Found UVC 1.00 device syz (225a:e1d4) [ 153.228228][ T1194] usb 2-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 153.269663][ T1194] uvcvideo 2-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 153.321897][ T1194] uvcvideo 2-1:1.1: Failed to initialize the device (-71). [ 153.501741][ T1194] usb 2-1: USB disconnect, device number 4 [ 157.478683][ T6265] device-mapper: clone: Destination device (ram3) discard unsupported: Disabling discard passdown. [ 157.538672][ T6272] loop2: detected capacity change from 0 to 164 [ 159.714697][ T6287] loop1: detected capacity change from 0 to 164 [ 163.665245][ T6322] loop2: detected capacity change from 0 to 164 [ 163.829129][ T6332] loop3: detected capacity change from 0 to 164 [ 170.788616][ T6356] loop3: detected capacity change from 0 to 164 [ 171.672981][ T6380] loop3: detected capacity change from 0 to 1024 [ 171.861637][ T6380] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 171.871535][ T6380] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 172.275624][ T12] hfsplus: b-tree write err: -5, ino 25 [ 172.301157][ T12] hfsplus: b-tree write err: -5, ino 4 [ 172.331530][ T12] hfsplus: b-tree write err: -5, ino 2 [ 172.350869][ T12] hfsplus: b-tree write err: -5, ino 26 [ 172.367694][ T6385] loop0: detected capacity change from 0 to 128 [ 172.397289][ T6385] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 172.447304][ T6385] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.558631][ T12] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 174.439868][ T6394] loop0: detected capacity change from 0 to 164 [ 177.535048][ T6417] loop2: detected capacity change from 0 to 128 [ 177.567612][ T6417] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 177.608711][ T6417] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 177.764451][ T6419] loop3: detected capacity change from 0 to 164 [ 177.774791][ T1020] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 178.565517][ T6427] loop2: detected capacity change from 0 to 1024 [ 178.761070][ T6427] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 178.770305][ T6427] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 180.116464][ T1020] hfsplus: b-tree write err: -5, ino 25 [ 180.122679][ T1020] hfsplus: b-tree write err: -5, ino 4 [ 180.179906][ T1020] hfsplus: b-tree write err: -5, ino 2 [ 180.210791][ T1020] hfsplus: b-tree write err: -5, ino 26 [ 182.694087][ T6452] loop1: detected capacity change from 0 to 128 [ 182.704357][ T6452] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 182.747838][ T6452] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 182.875015][ T1020] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 184.816267][ T6477] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 185.070232][ T6460] sched: RT throttling activated [ 185.119409][ T6477] Need at least one configuration in g1. [ 185.126030][ T6477] udc dummy_udc.0: failed to start g1: -22 [ 185.131943][ T6477] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 185.142734][ T6477] UDC core: g1: couldn't find an available UDC or it's busy [ 185.315503][ T27] audit: type=1800 audit(1794535989.498:5): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.157" name="c_chmask" dev="configfs" ino=9441 res=0 errno=0 [ 186.686177][ T27] audit: type=1800 audit(1794535989.508:6): pid=6477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.157" name="UDC" dev="configfs" ino=9442 res=0 errno=0 [ 187.150695][ T6473] loop3: detected capacity change from 0 to 32768 [ 187.221333][ T6473] XFS (loop3): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 187.357798][ T6473] XFS (loop3): Ending clean mount [ 187.405833][ T5877] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 187.418619][ T5784] XFS (loop3): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 187.639786][ T5877] usb 3-1: not running at top speed; connect to a high speed hub [ 187.656432][ T5877] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 187.677609][ T5877] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 187.703947][ T5877] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 187.721632][ T5877] usb 3-1: Product: syz [ 187.735430][ T5877] usb 3-1: Manufacturer: syz [ 187.757153][ T5877] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 187.947915][ T5877] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 187.968162][ T5877] uvcvideo 3-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 187.984511][ T5877] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 188.038947][ T5877] usb 3-1: USB disconnect, device number 2 [ 189.933560][ T6510] loop0: detected capacity change from 0 to 164 [ 190.202271][ T6520] loop3: detected capacity change from 0 to 164 [ 195.056980][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.063365][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.979048][ T6546] loop1: detected capacity change from 0 to 128 [ 196.996959][ T6546] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 197.043586][ T6546] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 197.203571][ T60] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 198.251049][ T5876] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 198.470449][ T5876] usb 1-1: not running at top speed; connect to a high speed hub [ 198.499441][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 198.573384][ T5876] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 198.631826][ T5876] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 198.714105][ T5876] usb 1-1: Product: syz [ 198.753384][ T5876] usb 1-1: Manufacturer: syz [ 198.936679][ T5876] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 199.095815][ T5876] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 199.141882][ T5876] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 199.320655][ T5876] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 201.102312][ T5876] usb 1-1: USB disconnect, device number 3 [ 208.506473][ T6610] loop3: detected capacity change from 0 to 128 [ 208.528368][ T6610] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 208.613288][ T6614] loop2: detected capacity change from 0 to 164 [ 210.264072][ T6610] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 210.536049][ T60] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 212.255584][ T52] Bluetooth: hci1: command 0x0406 tx timeout [ 212.264543][ T5798] Bluetooth: hci3: command 0x0406 tx timeout [ 212.277451][ T5798] Bluetooth: hci0: command 0x0406 tx timeout [ 212.284882][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 216.547503][ T6648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.207'. [ 217.847836][ T6663] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 218.080549][ T5877] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 218.156498][ T27] audit: type=1800 audit(1794536022.548:7): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.211" name="c_chmask" dev="configfs" ino=10390 res=0 errno=0 [ 218.181424][ T6664] Need at least one configuration in g1. [ 218.189227][ T6664] udc dummy_udc.0: failed to start g1: -22 [ 218.195098][ T6664] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 218.203396][ T6664] UDC core: g1: couldn't find an available UDC or it's busy [ 218.219164][ T27] audit: type=1800 audit(1794536022.568:8): pid=6664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.211" name="UDC" dev="configfs" ino=10391 res=0 errno=0 [ 218.313479][ T5877] usb 4-1: not running at top speed; connect to a high speed hub [ 218.337087][ T5877] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 218.370968][ T5877] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 218.383495][ T5877] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 218.394508][ T5877] usb 4-1: Product: syz [ 218.402778][ T5877] usb 4-1: Manufacturer: syz [ 218.456425][ T5877] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 218.478630][ T6670] loop1: detected capacity change from 0 to 164 [ 218.649539][ T5877] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 218.678749][ T5877] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 218.690445][ T5877] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 218.742976][ T5877] usb 4-1: USB disconnect, device number 4 [ 220.991487][ T6677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.214'. [ 223.303804][ T6683] Zero length message leads to an empty skb [ 224.657357][ T27] audit: type=1800 audit(1794536029.038:9): pid=6696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.221" name="/" dev="fuse" ino=4 res=0 errno=0 [ 226.963371][ T6717] loop1: detected capacity change from 0 to 164 [ 230.102209][ T27] audit: type=1800 audit(1794536034.488:10): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.233" name="/" dev="fuse" ino=4 res=0 errno=0 [ 231.021605][ T6761] loop0: detected capacity change from 0 to 164 [ 233.883402][ T6784] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 236.925569][ T5876] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 237.275626][ T5876] usb 4-1: Using ep0 maxpacket: 16 [ 237.300948][ T5876] usb 4-1: unable to get BOS descriptor or descriptor too short [ 237.313041][ T5876] usb 4-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 237.325314][ T5876] usb 4-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 237.352957][ T5876] usb 4-1: config 1 interface 0 has no altsetting 0 [ 237.379243][ T5876] usb 4-1: string descriptor 0 read error: -22 [ 237.390441][ T5876] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 237.448764][ T5876] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.505924][ T6803] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 237.685651][ T6817] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 237.783917][ T6819] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 239.084686][ T23] usb 4-1: USB disconnect, device number 5 [ 239.585678][ T6835] loop0: detected capacity change from 0 to 164 [ 240.736219][ T27] audit: type=1800 audit(1794536045.118:11): pid=6837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.267" name="idVendor" dev="configfs" ino=10016 res=0 errno=0 [ 240.769250][ T6837] Need at least one configuration in g1. [ 240.775036][ T6837] udc dummy_udc.0: failed to start g1: -22 [ 240.781047][ T6837] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 240.789128][ T6837] UDC core: g1: couldn't find an available UDC or it's busy [ 242.867728][ T6854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 245.502448][ T6867] loop1: detected capacity change from 0 to 164 [ 247.776762][ T6880] Need at least one configuration in g1. [ 247.782555][ T6880] udc dummy_udc.0: failed to start g1: -22 [ 247.788712][ T6880] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 247.796788][ T6880] UDC core: g1: couldn't find an available UDC or it's busy [ 247.820522][ T27] audit: type=1800 audit(1794536052.158:12): pid=6880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.281" name="idVendor" dev="configfs" ino=10822 res=0 errno=0 [ 249.781502][ T6893] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 249.836176][ T6893] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 251.896792][ T6899] loop2: detected capacity change from 0 to 32768 [ 253.691085][ T6926] Need at least one configuration in g1. [ 253.705486][ T6926] udc dummy_udc.0: failed to start g1: -22 [ 253.711717][ T6926] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 253.875407][ T6926] UDC core: g1: couldn't find an available UDC or it's busy [ 254.058155][ T27] audit: type=1800 audit(1794536058.448:13): pid=6921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.294" name="idVendor" dev="configfs" ino=10970 res=0 errno=0 [ 254.144304][ T6925] loop2: detected capacity change from 0 to 164 [ 255.135565][ T5876] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 255.346602][ T5876] usb 1-1: not running at top speed; connect to a high speed hub [ 255.363958][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 255.378099][ T5876] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 255.394280][ T5876] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 255.430489][ T5876] usb 1-1: Product: syz [ 255.440446][ T5876] usb 1-1: Manufacturer: syz [ 255.485784][ T5876] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 255.682498][ T5876] usb 1-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 255.712374][ T5876] uvcvideo 1-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 255.730673][ T5876] uvcvideo 1-1:1.1: Failed to initialize the device (-71). [ 255.810650][ T5876] usb 1-1: USB disconnect, device number 4 [ 255.940501][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.948103][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.455492][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 259.645542][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 259.707062][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.718729][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 259.730118][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 259.750121][ T9] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 259.905430][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.921135][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 259.930769][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 259.970653][ T9] usb 3-1: Manufacturer: syz [ 260.147702][ T9] usb 3-1: config 0 descriptor?? [ 261.485935][ T9] rc_core: IR keymap rc-hauppauge not found [ 261.491993][ T9] Registered IR keymap rc-empty [ 261.524812][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.546082][ T7017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.325'. [ 261.582447][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.648099][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 261.677189][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7 [ 261.732662][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.775615][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.807274][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.880758][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.945531][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 261.985493][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.036299][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.102942][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.186045][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.236094][ T9] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 262.297287][ T9] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 262.344546][ T9] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 262.391382][ T9] usb 3-1: USB disconnect, device number 3 [ 263.792263][ T7042] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 264.033846][ T27] audit: type=1800 audit(1794536068.418:14): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.333" name="c_chmask" dev="configfs" ino=11611 res=0 errno=0 [ 264.056843][ T7045] Need at least one configuration in g1. [ 264.062655][ T7045] udc dummy_udc.0: failed to start g1: -22 [ 264.068726][ T7045] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 264.077280][ T7045] UDC core: g1: couldn't find an available UDC or it's busy [ 264.094940][ T27] audit: type=1800 audit(1794536068.448:15): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.333" name="UDC" dev="configfs" ino=11612 res=0 errno=0 [ 265.242839][ T7056] netlink: 'syz.3.337': attribute type 1 has an invalid length. [ 265.383607][ T7056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.428785][ T7060] bond1: (slave ip6erspan0): making interface the new active one [ 265.499038][ T7060] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 268.973931][ T7090] loop0: detected capacity change from 0 to 164 [ 270.337023][ T7108] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 270.649780][ T7112] Need at least one configuration in g1. [ 270.655642][ T7112] udc dummy_udc.0: failed to start g1: -22 [ 270.661498][ T7112] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 270.671598][ T7112] UDC core: g1: couldn't find an available UDC or it's busy [ 270.706031][ T27] audit: type=1800 audit(1794536075.038:16): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.344" name="c_chmask" dev="configfs" ino=11735 res=0 errno=0 [ 270.743611][ T27] audit: type=1800 audit(1794536075.038:17): pid=7112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.344" name="UDC" dev="configfs" ino=11736 res=0 errno=0 [ 272.635144][ T7124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.357'. [ 272.763854][ T7127] loop0: detected capacity change from 0 to 164 [ 273.306373][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 273.562807][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.661296][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 273.793748][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 273.871973][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 273.913462][ T23] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 273.974512][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.013491][ T7133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 274.044991][ T23] hub 4-1:1.0: bad descriptor, ignoring hub [ 274.065153][ T23] hub: probe of 4-1:1.0 failed with error -5 [ 274.306039][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 274.311319][ T23] cdc_wdm 4-1:1.0: skipping garbage [ 274.335882][ T23] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 274.341864][ T23] cdc_wdm 4-1:1.0: Unknown control protocol [ 274.899071][ T23] usb 4-1: reset full-speed USB device number 6 using dummy_hcd [ 275.121424][ T7133] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 275.380009][ T7164] netlink: 4 bytes leftover after parsing attributes in process `syz.2.371'. [ 275.615752][ T5877] usb 4-1: USB disconnect, device number 6 [ 276.727531][ T7178] loop1: detected capacity change from 0 to 164 [ 276.738011][ T7179] loop0: detected capacity change from 0 to 164 [ 277.226441][ T7194] netlink: 4 bytes leftover after parsing attributes in process `syz.1.380'. [ 277.605535][ T5876] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 277.799705][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.810326][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.819857][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 277.831225][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 277.842830][ T5876] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 277.851982][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.863446][ T7200] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 277.877549][ T5876] hub 1-1:1.0: bad descriptor, ignoring hub [ 277.883502][ T5876] hub: probe of 1-1:1.0 failed with error -5 [ 277.890860][ T5876] cdc_wdm 1-1:1.0: skipping garbage [ 277.896259][ T5876] cdc_wdm 1-1:1.0: skipping garbage [ 277.903119][ T5876] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 277.910489][ T5876] cdc_wdm 1-1:1.0: Unknown control protocol [ 278.163169][ T7212] loop2: detected capacity change from 0 to 164 [ 278.526277][ T7200] usb 1-1: reset full-speed USB device number 5 using dummy_hcd [ 278.647251][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.1.393'. [ 278.722997][ T7213] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 278.751927][ C1] wdm_int_callback: 283 callbacks suppressed [ 278.751950][ C1] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 278.764642][ C1] wdm_int_callback: 283 callbacks suppressed [ 278.764662][ C1] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 278.875478][ T27] audit: type=1326 audit(1794536083.248:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7224 comm="syz.2.394" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7feba11a3257 code=0x0 [ 279.386729][ T9] usb 1-1: USB disconnect, device number 5 [ 279.555473][ T5876] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 279.725509][ T5876] usb 2-1: device descriptor read/64, error -71 [ 280.015726][ T5876] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 280.195498][ T5876] usb 2-1: device descriptor read/64, error -71 [ 280.319343][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 280.331037][ T5876] usb usb2-port1: attempt power cycle [ 280.745619][ T5876] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 280.811000][ T5876] usb 2-1: device descriptor read/8, error -71 [ 281.117598][ T5876] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 281.220913][ T5876] usb 2-1: device descriptor read/8, error -71 [ 281.375863][ T5876] usb usb2-port1: unable to enumerate USB device [ 281.501418][ T7264] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 281.974028][ T7276] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 282.043688][ T5876] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 282.077664][ T7278] netlink: 12 bytes leftover after parsing attributes in process `syz.0.411'. [ 282.201136][ T7280] netlink: 4 bytes leftover after parsing attributes in process `syz.0.412'. [ 282.248403][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 282.275510][ T5876] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 282.290514][ T27] audit: type=1800 audit(1794536086.678:19): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.410" name="c_chmask" dev="configfs" ino=12696 res=0 errno=0 [ 282.295054][ T5876] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 282.324236][ T7281] Need at least one configuration in g1. [ 282.330440][ T7281] udc dummy_udc.0: failed to start g1: -22 [ 282.336504][ T7281] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 282.345973][ T7281] UDC core: g1: couldn't find an available UDC or it's busy [ 282.382228][ T27] audit: type=1800 audit(1794536086.708:20): pid=7281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.410" name="UDC" dev="configfs" ino=12697 res=0 errno=0 [ 282.402637][ T5876] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 282.439085][ T5876] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 282.451669][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.545808][ T7274] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 282.567025][ T5876] hub 3-1:1.0: bad descriptor, ignoring hub [ 282.598646][ T5876] hub: probe of 3-1:1.0 failed with error -5 [ 282.623429][ T5876] cdc_wdm 3-1:1.0: skipping garbage [ 282.631906][ T5876] cdc_wdm 3-1:1.0: skipping garbage [ 282.668089][ T5876] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 282.693075][ T5876] cdc_wdm 3-1:1.0: Unknown control protocol [ 283.812338][ T7304] netlink: 12 bytes leftover after parsing attributes in process `syz.3.420'. [ 283.836167][ T7274] usb 3-1: reset full-speed USB device number 4 using dummy_hcd [ 283.918252][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 284.048152][ T7292] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 284.061351][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 284.068043][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 284.074442][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 284.081097][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 284.090314][ T7314] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 284.097657][ C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71 [ 284.104384][ C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes [ 284.343802][ T27] audit: type=1800 audit(1794536088.728:21): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.424" name="UDC" dev="configfs" ino=12753 res=0 errno=0 [ 284.364802][ T7315] Need at least one configuration in g1. [ 284.371237][ T7315] udc dummy_udc.0: failed to start g1: -22 [ 284.377250][ T7315] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 284.386754][ T7315] UDC core: g1: couldn't find an available UDC or it's busy [ 284.394729][ T1194] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 284.411174][ T9] usb 3-1: USB disconnect, device number 4 [ 284.565430][ T1194] usb 4-1: device descriptor read/64, error -71 [ 284.845547][ T1194] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 285.075610][ T1194] usb 4-1: device descriptor read/64, error -71 [ 285.225888][ T1194] usb usb4-port1: attempt power cycle [ 287.035829][ T1194] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 287.131302][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.2.430'. [ 287.200722][ T7333] netlink: 4 bytes leftover after parsing attributes in process `syz.3.431'. [ 287.278034][ T1194] usb 4-1: device not accepting address 9, error -71 [ 287.521744][ T7340] netlink: 'syz.2.434': attribute type 1 has an invalid length. [ 287.604101][ T7340] 8021q: adding VLAN 0 to HW filter on device bond1 [ 287.688896][ T7342] bond1: (slave ip6erspan0): making interface the new active one [ 287.721305][ T7342] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 287.885581][ T5899] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 288.074869][ T7353] loop0: detected capacity change from 0 to 164 [ 288.093422][ T5899] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 288.114453][ T5899] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 288.146372][ T5899] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 288.185703][ T5899] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 288.213503][ T5899] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 288.230997][ T5899] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.269813][ T7344] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 288.300466][ T5899] hub 2-1:1.0: bad descriptor, ignoring hub [ 288.328996][ T5899] hub: probe of 2-1:1.0 failed with error -5 [ 288.357000][ T5899] cdc_wdm 2-1:1.0: skipping garbage [ 288.380801][ T5899] cdc_wdm 2-1:1.0: skipping garbage [ 288.399990][ T5899] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 288.415879][ T5899] cdc_wdm 2-1:1.0: Unknown control protocol [ 289.764721][ T5876] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 290.365752][ T5876] usb 3-1: device descriptor read/64, error -71 [ 290.376473][ T5899] usb 2-1: reset full-speed USB device number 9 using dummy_hcd [ 290.614060][ T7344] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 290.645443][ T5876] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 290.780421][ T7369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 290.801924][ T5876] usb 3-1: device descriptor read/64, error -71 [ 290.874453][ T7371] netlink: 4 bytes leftover after parsing attributes in process `syz.1.442'. [ 290.905767][ T788] usb 2-1: USB disconnect, device number 9 [ 290.930532][ T5876] usb usb3-port1: attempt power cycle [ 291.365445][ T5876] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 291.406254][ T5876] usb 3-1: device descriptor read/8, error -71 [ 291.735173][ T7385] loop2: detected capacity change from 0 to 164 [ 292.403987][ T7394] netlink: 12 bytes leftover after parsing attributes in process `syz.3.451'. [ 292.567432][ T23] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 292.778204][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.791159][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 292.800315][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 292.815070][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 292.829173][ T7408] loop1: detected capacity change from 0 to 164 [ 292.834870][ T23] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 292.858406][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.901322][ T7392] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 292.925065][ T23] hub 1-1:1.0: bad descriptor, ignoring hub [ 292.941766][ T23] hub: probe of 1-1:1.0 failed with error -5 [ 292.956889][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 292.963578][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 292.971346][ T23] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 292.988214][ T23] cdc_wdm 1-1:1.0: Unknown control protocol [ 293.055449][ T5899] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 293.225427][ T5899] usb 4-1: device descriptor read/64, error -71 [ 293.518614][ T5899] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 293.695604][ T5899] usb 4-1: device descriptor read/64, error -71 [ 293.826526][ T5899] usb usb4-port1: attempt power cycle [ 293.917765][ T7392] usb 1-1: reset full-speed USB device number 6 using dummy_hcd [ 294.118008][ T7419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.460'. [ 294.148282][ T7415] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 294.255618][ T5899] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 294.296663][ T5899] usb 4-1: device descriptor read/8, error -71 [ 294.480882][ T9] usb 1-1: USB disconnect, device number 6 [ 294.585444][ T5899] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 294.638965][ T5899] usb 4-1: device descriptor read/8, error -71 [ 294.748572][ T7433] loop2: detected capacity change from 0 to 164 [ 294.772522][ T5899] usb usb4-port1: unable to enumerate USB device [ 295.153308][ T7442] netlink: 12 bytes leftover after parsing attributes in process `syz.0.469'. [ 296.435474][ T5899] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 296.655744][ T5899] usb 4-1: Using ep0 maxpacket: 32 [ 296.680618][ T5899] usb 4-1: config index 0 descriptor too short (expected 29220, got 36) [ 296.700838][ T5899] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 296.739993][ T5899] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 296.760963][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 296.790108][ T5899] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 296.818003][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 296.855545][ T5899] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 296.875224][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.895211][ T5899] usb 4-1: config 0 descriptor?? [ 296.905723][ T1194] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 297.076266][ T7466] netlink: 12 bytes leftover after parsing attributes in process `syz.2.478'. [ 297.109251][ T1194] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 297.125453][ T1194] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 297.139553][ T1194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 297.152922][ T5899] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 297.172330][ T1194] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 297.207144][ T1194] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 297.219396][ T1194] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.231606][ T7459] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 297.247858][ T1194] hub 2-1:1.0: bad descriptor, ignoring hub [ 297.264147][ T1194] hub: probe of 2-1:1.0 failed with error -5 [ 297.279141][ T1194] cdc_wdm 2-1:1.0: skipping garbage [ 297.284686][ T1194] cdc_wdm 2-1:1.0: skipping garbage [ 297.303530][ T1194] cdc_wdm 2-1:1.0: cdc-wdm1: USB WDM device [ 297.312089][ T1194] cdc_wdm 2-1:1.0: Unknown control protocol [ 297.403175][ C0] usblp0: nonzero read bulk status received: -71 [ 297.407331][ T5876] usb 4-1: USB disconnect, device number 15 [ 297.416854][ T7456] usblp0: error -71 reading from printer [ 297.431941][ T5876] usblp0: removed [ 297.605971][ T1194] usb 2-1: USB disconnect, device number 10 [ 297.955538][ T5876] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 298.147649][ T5876] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.157972][ T5876] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 298.167016][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 298.179651][ T5876] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 298.190730][ T5876] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 298.200069][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.212735][ T7459] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 298.231735][ T5876] hub 2-1:1.0: bad descriptor, ignoring hub [ 298.253442][ T5876] hub: probe of 2-1:1.0 failed with error -5 [ 298.269574][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 298.274962][ T5876] cdc_wdm 2-1:1.0: skipping garbage [ 298.290665][ T788] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 298.304916][ T5876] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 298.315970][ T5876] cdc_wdm 2-1:1.0: Unknown control protocol [ 298.388428][ T7480] netlink: 'syz.2.483': attribute type 1 has an invalid length. [ 298.429109][ T7480] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.497146][ T788] usb 4-1: not running at top speed; connect to a high speed hub [ 298.586026][ T9] usb 2-1: USB disconnect, device number 11 [ 299.434883][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.476426][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 299.488141][ T788] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 299.505443][ T788] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 299.539723][ T788] usb 4-1: Product: syz [ 299.546127][ T788] usb 4-1: Manufacturer: syz [ 299.590865][ T788] usb 4-1: Found UVC 1.00 device syz (225a:e1d4) [ 299.604725][ T788] usb 4-1: No streaming interface found for terminal 2. [ 299.750808][ T7494] netlink: 12 bytes leftover after parsing attributes in process `syz.2.488'. [ 299.804736][ T788] usb 4-1: USB disconnect, device number 16 [ 300.066144][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.490'. [ 300.885623][ T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 301.082507][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 301.096983][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 301.109071][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 301.123206][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 301.137187][ T9] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 301.164909][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.199063][ T7513] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 301.233896][ T9] hub 4-1:1.0: bad descriptor, ignoring hub [ 301.256680][ T9] hub: probe of 4-1:1.0 failed with error -5 [ 301.291775][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 301.305182][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 301.333892][ T9] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 301.355185][ T9] cdc_wdm 4-1:1.0: Unknown control protocol [ 303.386130][ T7513] usb 4-1: reset full-speed USB device number 17 using dummy_hcd [ 303.641791][ T7520] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 303.737447][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.744140][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.751826][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.758504][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.765028][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.771893][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.779363][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.786026][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.792407][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.799093][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.805627][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.812331][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.818693][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.825361][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.831756][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.838388][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.845452][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.852100][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 303.858672][ C0] cdc_wdm 4-1:1.0: nonzero urb status received: -71 [ 303.865329][ C0] cdc_wdm 4-1:1.0: wdm_int_callback - 0 bytes [ 304.050147][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'. [ 304.126562][ T9] usb 4-1: USB disconnect, device number 17 [ 306.315414][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 307.075889][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 307.109925][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.138747][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 307.160609][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 307.183212][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 307.203425][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.236943][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 307.255627][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 307.263784][ T9] usb 2-1: Manufacturer: syz [ 307.285453][ T9] usb 2-1: config 0 descriptor?? [ 307.625690][ T9] rc_core: IR keymap rc-hauppauge not found [ 307.637519][ T9] Registered IR keymap rc-empty [ 307.651596][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 307.706761][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 307.768786][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 307.802084][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 307.850417][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.685970][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.725447][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.760739][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.805537][ T5876] usb 4-1: new full-speed USB device number 18 using dummy_hcd [ 308.805554][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 309.590179][ T7573] Need at least one configuration in g1. [ 309.599620][ T7573] udc dummy_udc.0: failed to start g1: -22 [ 309.605782][ T7573] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 309.642375][ T7573] UDC core: g1: couldn't find an available UDC or it's busy [ 310.514250][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 310.523564][ T27] audit: type=1800 audit(1794536113.878:22): pid=7573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.515" name="idVendor" dev="configfs" ino=14437 res=0 errno=0 [ 310.547953][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 310.596587][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 310.636559][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 310.669127][ T5876] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 310.675770][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 310.686476][ T5876] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 310.686535][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 310.686566][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 310.686614][ T5876] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 310.686640][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.707086][ T7566] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 310.818455][ T5876] hub 4-1:1.0: bad descriptor, ignoring hub [ 310.819756][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 310.824434][ T5876] hub: probe of 4-1:1.0 failed with error -5 [ 310.836408][ T5876] cdc_wdm 4-1:1.0: skipping garbage [ 310.855799][ T5876] cdc_wdm 4-1:1.0: skipping garbage [ 310.860622][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 310.882816][ T5876] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 310.895198][ T5876] cdc_wdm 4-1:1.0: Unknown control protocol [ 310.920346][ T9] usb 2-1: USB disconnect, device number 12 [ 311.333915][ T7586] usb usb8: usbfs: process 7586 (syz.2.519) did not claim interface 0 before use [ 311.464654][ T7566] usb 4-1: reset full-speed USB device number 18 using dummy_hcd [ 311.664873][ T7583] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 312.091772][ T1194] usb 4-1: USB disconnect, device number 18 [ 314.235361][ T7611] Need at least one configuration in g1. [ 314.247728][ T7611] udc dummy_udc.0: failed to start g1: -22 [ 314.253780][ T7611] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 314.298964][ T7611] UDC core: g1: couldn't find an available UDC or it's busy [ 315.148407][ T27] audit: type=1800 audit(1794536118.538:23): pid=7611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.525" name="idVendor" dev="configfs" ino=14487 res=0 errno=0 [ 316.621558][ T7631] netlink: 'syz.0.534': attribute type 1 has an invalid length. [ 316.656591][ T7631] 8021q: adding VLAN 0 to HW filter on device bond1 [ 316.684189][ T7631] bond1: (slave ip6erspan0): making interface the new active one [ 316.693193][ T7631] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 316.721011][ T7634] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 316.815489][ T5876] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 317.018212][ T5876] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 317.035780][ T27] audit: type=1800 audit(1794536121.418:24): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.528" name="c_chmask" dev="configfs" ino=14520 res=0 errno=0 [ 317.061467][ T5876] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 317.062242][ T7640] Need at least one configuration in g1. [ 317.078828][ T7640] udc dummy_udc.0: failed to start g1: -22 [ 317.084726][ T7640] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 317.084880][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.096927][ T7640] UDC core: g1: couldn't find an available UDC or it's busy [ 317.122869][ T27] audit: type=1800 audit(1794536121.448:25): pid=7640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.528" name="UDC" dev="configfs" ino=14521 res=0 errno=0 [ 317.152512][ T5876] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 317.164806][ T5876] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 317.205042][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.244467][ T7629] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 317.269229][ T5876] hub 4-1:1.0: bad descriptor, ignoring hub [ 317.290250][ T5876] hub: probe of 4-1:1.0 failed with error -5 [ 317.303880][ T5876] cdc_wdm 4-1:1.0: skipping garbage [ 317.309540][ T5876] cdc_wdm 4-1:1.0: skipping garbage [ 317.336013][ T5876] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 317.354554][ T5876] cdc_wdm 4-1:1.0: Unknown control protocol [ 317.380347][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.391143][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.595156][ T7647] vrf0: entered allmulticast mode [ 317.604767][ T7647] batman_adv: batadv0: Adding interface: vrf0 [ 317.623650][ T7647] batman_adv: batadv0: Interface activated: vrf0 [ 320.035440][ T7629] cdc_wdm 4-1:1.0: Error autopm - -16 [ 320.212935][ T5922] usb 4-1: USB disconnect, device number 19 [ 320.606606][ T7675] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 320.646177][ T7675] 8021q: adding VLAN 0 to HW filter on device bond2 [ 320.855573][ T5922] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 321.046764][ T5922] usb 3-1: Using ep0 maxpacket: 16 [ 321.089047][ T5922] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.115882][ T5922] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 321.143980][ T5922] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 321.184930][ T5922] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.222509][ T5922] usb 3-1: config 0 descriptor?? [ 325.498143][ T9] usb 3-1: USB disconnect, device number 9 [ 325.971705][ T7702] netlink: 4 bytes leftover after parsing attributes in process `syz.0.548'. [ 326.105626][ T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 326.337602][ T9] usb 3-1: not running at top speed; connect to a high speed hub [ 326.356575][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.376225][ T9] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 326.395382][ T9] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 326.403804][ T9] usb 3-1: Product: syz [ 326.415374][ T9] usb 3-1: Manufacturer: syz [ 326.435524][ T5876] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 326.447018][ T9] uvcvideo 3-1:1.1: Unknown video format 32595559-0000-0010-8000-00aa000d0000 [ 326.456808][ T9] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 326.463258][ T9] uvcvideo 3-1:1.1: No supported video formats found. [ 326.470237][ T9] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 326.628171][ T5876] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 326.655899][ T5876] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 326.660490][ T9] usb 3-1: USB disconnect, device number 10 [ 326.664853][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 326.664886][ T5876] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 255, setting to 64 [ 326.664983][ T5876] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 326.704431][ T5876] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.791276][ T7707] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 326.822153][ T5876] hub 1-1:1.0: bad descriptor, ignoring hub [ 326.846205][ T5876] hub: probe of 1-1:1.0 failed with error -5 [ 326.853208][ T5876] cdc_wdm 1-1:1.0: skipping garbage [ 326.859426][ T5876] cdc_wdm 1-1:1.0: skipping garbage [ 326.890691][ T5876] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 326.905191][ T5876] cdc_wdm 1-1:1.0: Unknown control protocol [ 329.703752][ T7736] netlink: 4 bytes leftover after parsing attributes in process `syz.2.560'. [ 330.085560][ T5876] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 331.056454][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 331.066079][ T5876] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 331.085483][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.096783][ T5876] usb 3-1: config 0 descriptor?? [ 331.318518][ T5876] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 331.346967][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 331.361278][ T5876] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 331.375915][ T5876] usb 3-1: media controller created [ 331.438730][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.532336][ T5876] az6027: usb out operation failed. (-71) [ 331.545440][ T5876] az6027: usb out operation failed. (-71) [ 331.558047][ T5876] stb0899_attach: Driver disabled by Kconfig [ 331.573338][ T5876] az6027: no front-end attached [ 331.573338][ T5876] [ 331.589175][ T5876] az6027: usb out operation failed. (-71) [ 331.601977][ T5876] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 331.618823][ T5876] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 331.644061][ T5876] dvb-usb: schedule remote query interval to 400 msecs. [ 331.663760][ T5876] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 331.692735][ T5876] usb 3-1: USB disconnect, device number 11 [ 331.826168][ T5876] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 333.779724][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.569'. [ 333.943487][ T7707] cdc_wdm 1-1:1.0: Error autopm - -16 [ 333.950440][ T5899] usb 1-1: USB disconnect, device number 7 [ 334.565727][ T5899] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 335.715396][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 335.747001][ T5899] usb 1-1: config 0 has an invalid interface number: 34 but max is 0 [ 335.755180][ T5899] usb 1-1: config 0 has no interface number 0 [ 335.795406][ T5899] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 335.825604][ T5899] usb 1-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 335.848163][ T5899] usb 1-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 335.865793][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.873950][ T5899] usb 1-1: Product: syz [ 335.882948][ T5899] usb 1-1: Manufacturer: syz [ 335.894712][ T5899] usb 1-1: SerialNumber: syz [ 335.925659][ T5899] usb 1-1: config 0 descriptor?? [ 335.931577][ T7772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 335.953946][ T7772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.206927][ T7772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.229746][ T7772] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 336.416808][ T5876] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 336.478258][ T5899] asix 1-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 336.607026][ T5876] usb 3-1: not running at top speed; connect to a high speed hub [ 336.632976][ T5876] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 336.658186][ T5876] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 336.674860][ T5876] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 336.693881][ T5876] usb 3-1: Product: syz [ 336.704586][ T5876] usb 3-1: Manufacturer: syz [ 336.733913][ T5876] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 336.754561][ T5876] usb 3-1: No streaming interface found for terminal 2. [ 336.886494][ T5899] asix 1-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 336.916153][ T5899] asix: probe of 1-1:0.34 failed with error -71 [ 336.941882][ T5876] usb 3-1: USB disconnect, device number 12 [ 336.946923][ T5899] usb 1-1: USB disconnect, device number 8 [ 339.066928][ T7797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.578'. [ 339.926149][ T7810] loop2: detected capacity change from 0 to 7 [ 339.959322][ T7810] Dev loop2: unable to read RDB block 7 [ 339.985630][ T7810] loop2: unable to read partition table [ 339.992803][ T7810] loop2: partition table beyond EOD, truncated [ 340.011486][ T7812] netlink: 'syz.2.583': attribute type 1 has an invalid length. [ 340.040677][ T7810] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 341.331158][ T7812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 341.393794][ T7816] bond3: (slave gretap1): making interface the new active one [ 342.619184][ T7816] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 343.611116][ T5151] Dev loop2: unable to read RDB block 7 [ 343.627894][ T5151] loop2: unable to read partition table [ 343.633888][ T5151] loop2: partition table beyond EOD, truncated [ 343.775897][ T5877] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 343.968777][ T7825] mmap: syz.1.585 (7825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 343.976564][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 344.011569][ T5877] usb 1-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 344.045627][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.053738][ T5877] usb 1-1: Product: syz [ 344.083238][ T5877] usb 1-1: Manufacturer: syz [ 344.099914][ T5877] usb 1-1: SerialNumber: syz [ 344.141962][ T5877] usb 1-1: config 0 descriptor?? [ 344.181557][ T5877] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 344.215502][ T5877] dvb-usb: bulk message failed: -22 (4/0) [ 344.254511][ T5877] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 344.275055][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 344.295214][ T5877] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 344.362282][ T5877] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 344.406081][ T5877] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 344.414204][ T5877] usb 1-1: media controller created [ 344.486963][ T5877] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 344.569500][ T5877] usb 1-1: selecting invalid altsetting 3 [ 344.579496][ T5877] ttusb2: set interface to alts=3 failed [ 344.682345][ T5877] DVB: Unable to find symbol tda10086_attach() [ 344.696885][ T5877] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 344.733589][ T5877] dvb-usb: bulk message failed: -22 (4/0) [ 344.745414][ T5877] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 344.784686][ T5877] dvb-usb: bulk message failed: -22 (5/0) [ 344.790930][ T5877] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 344.844869][ T5877] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 344.893769][ T5877] usb 1-1: USB disconnect, device number 9 [ 345.032088][ T5877] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 347.816054][ T7862] fuse: Bad value for 'fd' [ 349.785449][ T5922] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 349.936435][ T7879] program syz.1.605 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 350.915468][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 350.923060][ T5922] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 350.943774][ T5922] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 350.975360][ T5922] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 351.013718][ T5922] usb 4-1: string descriptor 0 read error: -71 [ 351.036653][ T5922] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 351.059864][ T7887] fuse: Bad value for 'fd' [ 351.075643][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 351.115633][ T5922] usb 4-1: can't set config #155, error -71 [ 351.142226][ T5922] usb 4-1: USB disconnect, device number 20 [ 355.295540][ T1194] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 355.475596][ T1194] usb 4-1: Using ep0 maxpacket: 32 [ 355.493427][ T1194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.508219][ T1194] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 355.530861][ T1194] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 355.579931][ T1194] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 355.605817][ T1194] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.618741][ T1194] usb 4-1: config 0 descriptor?? [ 356.192043][ T1194] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input10 [ 356.336685][ T7964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.636'. [ 356.443065][ T1194] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5011.0001/input/input11 [ 356.678036][ T1194] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 357.358312][ C0] kye 0003:0458:5011.0001: usb_submit_urb(ctrl) failed: -1 [ 357.785446][ T5899] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 357.985378][ T5899] usb 3-1: Using ep0 maxpacket: 16 [ 358.009997][ T5899] usb 3-1: unable to get BOS descriptor or descriptor too short [ 358.047741][ T5899] usb 3-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 358.086997][ T5899] usb 3-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.120750][ T5899] usb 3-1: config 1 interface 0 has no altsetting 0 [ 358.151359][ T5899] usb 3-1: string descriptor 0 read error: -22 [ 358.165494][ T5899] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 358.199851][ T5899] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.231779][ T7978] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 358.248577][ T1194] usb 4-1: USB disconnect, device number 21 [ 359.875477][ T1194] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 360.065455][ T1194] usb 4-1: Using ep0 maxpacket: 32 [ 360.082627][ T1194] usb 4-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 360.092345][ T1194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.101961][ T1194] usb 4-1: Product: syz [ 360.106635][ T1194] usb 4-1: Manufacturer: syz [ 360.111334][ T1194] usb 4-1: SerialNumber: syz [ 360.126530][ T1194] usb 4-1: config 0 descriptor?? [ 360.149077][ T1194] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 360.160997][ T1194] dvb-usb: bulk message failed: -22 (4/0) [ 360.169947][ T1194] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 360.181617][ T1194] dvb-usb: bulk message failed: -22 (5/0) [ 360.188560][ T1194] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 360.203815][ T1194] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 360.215878][ T1194] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 360.224122][ T1194] usb 4-1: media controller created [ 360.251946][ T1194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 360.283389][ T1194] usb 4-1: selecting invalid altsetting 3 [ 360.293888][ T1194] ttusb2: set interface to alts=3 failed [ 360.342462][ T1194] DVB: Unable to find symbol tda10086_attach() [ 360.369714][ T1194] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 360.380311][ T1194] dvb-usb: bulk message failed: -22 (4/0) [ 360.390458][ T1194] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 360.402481][ T1194] dvb-usb: bulk message failed: -22 (5/0) [ 360.412550][ T1194] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 360.424821][ T1194] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 360.442582][ T1194] usb 4-1: USB disconnect, device number 22 [ 360.527288][ T1194] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 361.306755][ T8029] Need at least one configuration in g1. [ 361.314842][ T8029] udc dummy_udc.0: failed to start g1: -22 [ 361.321182][ T8029] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 361.347771][ T8029] UDC core: g1: couldn't find an available UDC or it's busy [ 362.260374][ T27] audit: type=1800 audit(1794536165.638:26): pid=8029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.658" name="idVendor" dev="configfs" ino=16470 res=0 errno=0 [ 362.295090][ T5922] usb 3-1: USB disconnect, device number 13 [ 363.914058][ T8052] Need at least one configuration in g1. [ 363.925447][ T8052] udc dummy_udc.0: failed to start g1: -22 [ 363.931511][ T8052] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 363.968109][ T8052] UDC core: g1: couldn't find an available UDC or it's busy [ 365.945796][ T1194] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 366.164346][ T1194] usb 2-1: Using ep0 maxpacket: 32 [ 366.182076][ T1194] usb 2-1: New USB device found, idVendor=2304, idProduct=0222, bcdDevice=77.3f [ 366.199378][ T1194] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.227844][ T1194] usb 2-1: Product: syz [ 366.239664][ T1194] usb 2-1: Manufacturer: syz [ 366.244827][ T1194] usb 2-1: SerialNumber: syz [ 366.260686][ T1194] usb 2-1: config 0 descriptor?? [ 366.289622][ T1194] dvb-usb: found a 'Pinnacle 450e DVB-S USB2.0' in warm state. [ 366.308233][ T1194] dvb-usb: bulk message failed: -22 (4/0) [ 366.314047][ T1194] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 366.357148][ T1194] dvb-usb: bulk message failed: -22 (5/0) [ 366.385357][ T1194] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 366.423580][ T1194] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 366.454255][ T1194] dvbdev: DVB: registering new adapter (Pinnacle 450e DVB-S USB2.0) [ 366.481310][ T1194] usb 2-1: media controller created [ 366.552493][ T1194] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 366.646406][ T1194] usb 2-1: selecting invalid altsetting 3 [ 366.665428][ T1194] ttusb2: set interface to alts=3 failed [ 366.813580][ T1194] DVB: Unable to find symbol tda10086_attach() [ 366.837280][ T1194] dvb-usb: no frontend was attached by 'Pinnacle 450e DVB-S USB2.0' [ 366.868247][ T1194] dvb-usb: bulk message failed: -22 (4/0) [ 366.874053][ T1194] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 366.915673][ T1194] dvb-usb: bulk message failed: -22 (5/0) [ 366.926258][ T1194] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 366.960246][ T1194] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully initialized and connected. [ 367.013284][ T1194] usb 2-1: USB disconnect, device number 13 [ 367.195788][ T1194] dvb-usb: Pinnacle 450e DVB-S USB2.0 successfully deinitialized and disconnected. [ 368.527900][ T8090] Need at least one configuration in g1. [ 368.536902][ T8090] udc dummy_udc.0: failed to start g1: -22 [ 368.542943][ T8090] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 368.575052][ T8090] UDC core: g1: couldn't find an available UDC or it's busy [ 369.517230][ T1194] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 369.727989][ T1194] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 369.755651][ T1194] usb 4-1: config 0 has no interface number 0 [ 369.768176][ T1194] usb 4-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 369.795780][ T1194] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.803864][ T1194] usb 4-1: Product: syz [ 369.821660][ T1194] usb 4-1: Manufacturer: syz [ 369.835633][ T1194] usb 4-1: SerialNumber: syz [ 369.846848][ T1194] usb 4-1: config 0 descriptor?? [ 369.858728][ T1194] usb 4-1: selecting invalid altsetting 1 [ 369.887135][ T1194] dvb_ttusb_budget: ttusb_init_controller: error [ 369.894632][ T1194] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 370.078535][ T1194] DVB: Unable to find symbol stv0299_attach() [ 370.185899][ T1194] DVB: Unable to find symbol tda8083_attach() [ 370.192059][ T1194] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 370.235452][ T1194] usb 4-1: USB disconnect, device number 23 [ 370.275711][ T5899] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 370.456952][ T5899] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 370.485531][ T5899] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 370.508189][ T5899] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 370.525906][ T5899] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.554602][ T8095] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 370.589391][ T5899] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 371.218504][ T1194] usb 1-1: USB disconnect, device number 10 [ 372.838280][ T8120] Need at least one configuration in g1. [ 372.844062][ T8120] udc dummy_udc.0: failed to start g1: -22 [ 372.850017][ T8120] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 372.858130][ T8120] UDC core: g1: couldn't find an available UDC or it's busy [ 375.805234][ T27] audit: type=1800 audit(1794536179.218:27): pid=8145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.698" name="idVendor" dev="configfs" ino=16662 res=0 errno=0 [ 376.652287][ T8152] input: syz0 as /devices/virtual/input/input12 [ 377.420324][ T8160] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 379.321391][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.327910][ T27] audit: type=1800 audit(1794536182.738:28): pid=8173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.707" name="idVendor" dev="configfs" ino=16730 res=0 errno=0 [ 379.348670][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.746143][ T8191] netlink: 24 bytes leftover after parsing attributes in process `syz.0.715'. [ 380.767937][ T8194] IPVS: set_ctl: invalid protocol: 12 224.0.0.1:20001 [ 381.084649][ T27] audit: type=1800 audit(1794536185.468:29): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.716" name="c_chmask" dev="configfs" ino=16773 res=0 errno=0 [ 381.135031][ T27] audit: type=1800 audit(1794536185.498:30): pid=8197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.716" name="UDC" dev="configfs" ino=16774 res=0 errno=0 [ 383.605788][ T5877] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 383.668304][ T8230] netlink: 24 bytes leftover after parsing attributes in process `syz.3.727'. [ 383.808059][ T5877] usb 1-1: Using ep0 maxpacket: 16 [ 383.834426][ T5877] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 383.859970][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 383.884788][ T5877] usb 1-1: config 0 has no interface number 0 [ 383.905029][ T5877] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 383.925114][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.933713][ T5877] usb 1-1: Product: syz [ 383.963077][ T5877] usb 1-1: Manufacturer: syz [ 383.985688][ T5877] usb 1-1: SerialNumber: syz [ 384.036346][ T5877] usb 1-1: config 0 descriptor?? [ 384.058030][ T5877] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 384.079734][ T5877] usb 1-1: No valid video chain found. [ 385.779815][ T8253] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 385.895588][ T23] usb 1-1: USB disconnect, device number 11 [ 386.905055][ T8277] netlink: 24 bytes leftover after parsing attributes in process `syz.1.737'. [ 386.918564][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 387.125922][ T23] usb 1-1: Using ep0 maxpacket: 32 [ 387.137631][ T23] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 387.165415][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.206896][ T23] usb 1-1: config 0 descriptor?? [ 387.431456][ T23] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 387.493890][ T23] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 387.580147][ T23] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 389.695827][ T5877] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 389.816864][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.537547][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.623515][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 391.757010][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.740842][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.750226][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 392.904194][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.015743][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 393.451851][ T8347] TC_ACT_REPEAT abuse ? [ 395.306629][ T1147] net_ratelimit: 2 callbacks suppressed [ 395.306649][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.463506][ T8373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 396.616999][ T8381] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 397.218711][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.376287][ T1147] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.387245][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 397.635508][ T5876] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 397.865518][ T5876] usb 2-1: Using ep0 maxpacket: 16 [ 397.879061][ T5876] usb 2-1: unable to get BOS descriptor or descriptor too short [ 397.894864][ T5876] usb 2-1: config 1 interface 0 altsetting 7 bulk endpoint 0x1 has invalid maxpacket 32 [ 397.918265][ T5876] usb 2-1: config 1 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 397.964377][ T5876] usb 2-1: config 1 interface 0 has no altsetting 0 [ 398.012202][ T8397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.119216][ T5876] usb 2-1: string descriptor 0 read error: -22 [ 398.136454][ T5876] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 398.156615][ T5876] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.186944][ T8390] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 398.376021][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.475382][ T5899] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 398.655798][ T5899] usb 3-1: device descriptor read/64, error -71 [ 398.674140][ T42] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 398.979870][ T5899] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 399.145735][ T5899] usb 3-1: device descriptor read/64, error -71 [ 399.275761][ T5899] usb usb3-port1: attempt power cycle [ 399.307277][ T1194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.317501][ T60] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 399.735631][ T5899] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 399.776532][ T5899] usb 3-1: device descriptor read/8, error -71 [ 400.055610][ T5899] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 400.098968][ T5899] usb 3-1: device descriptor read/8, error -71 [ 400.235780][ T5899] usb usb3-port1: unable to enumerate USB device [ 400.442794][ T788] usb 2-1: USB disconnect, device number 14 [ 400.596999][ T6403] net_ratelimit: 1 callbacks suppressed [ 400.597017][ T6403] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.643413][ T8416] ================================================================== [ 400.651570][ T8416] BUG: KASAN: slab-use-after-free in dvb_device_open+0xc9/0x360 [ 400.659296][ T8416] Read of size 8 at addr ffff888027aeea18 by task syz.1.781/8416 [ 400.667238][ T8416] [ 400.669639][ T8416] CPU: 1 PID: 8416 Comm: syz.1.781 Not tainted syzkaller #0 [ 400.676984][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 400.687101][ T8416] Call Trace: [ 400.690410][ T8416] [ 400.693375][ T8416] dump_stack_lvl+0x18c/0x250 [ 400.698134][ T8416] ? read_lock_is_recursive+0x20/0x20 [ 400.703557][ T8416] ? show_regs_print_info+0x20/0x20 [ 400.708801][ T8416] ? load_image+0x420/0x420 [ 400.713349][ T8416] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 400.718857][ T8416] ? __virt_addr_valid+0x10c/0x380 [ 400.724014][ T8416] ? __virt_addr_valid+0x10c/0x380 [ 400.729168][ T8416] ? __virt_addr_valid+0x10c/0x380 [ 400.734342][ T8416] print_report+0xa8/0x210 [ 400.738817][ T8416] ? dvb_device_open+0xc9/0x360 [ 400.743710][ T8416] kasan_report+0x117/0x150 [ 400.748266][ T8416] ? chrdev_open+0x385/0x600 [ 400.752895][ T8416] ? dvb_device_open+0xc9/0x360 [ 400.757789][ T8416] dvb_device_open+0xc9/0x360 [ 400.762514][ T8416] chrdev_open+0x58c/0x600 [ 400.766975][ T8416] ? cd_forget+0x160/0x160 [ 400.771448][ T8416] ? fsnotify_perm+0x3ed/0x5e0 [ 400.776254][ T8416] do_dentry_open+0x880/0x14b0 [ 400.781084][ T8416] ? cd_forget+0x160/0x160 [ 400.785547][ T8416] path_openat+0x284f/0x3270 [ 400.790192][ T8416] ? do_sys_openat2+0xda/0x1d0 [ 400.794996][ T8416] ? __x64_sys_openat+0x139/0x160 [ 400.800066][ T8416] ? verify_lock_unused+0x140/0x140 [ 400.805553][ T8416] ? do_filp_open+0x430/0x430 [ 400.810270][ T8416] do_filp_open+0x1f2/0x430 [ 400.814809][ T8416] ? vfs_tmpfile+0x620/0x620 [ 400.819447][ T8416] ? _raw_spin_unlock+0x28/0x40 [ 400.824330][ T8416] ? alloc_fd+0x590/0x640 [ 400.828731][ T8416] do_sys_openat2+0x134/0x1d0 [ 400.833465][ T8416] ? do_sys_open+0xe0/0xe0 [ 400.837927][ T8416] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 400.843954][ T8416] ? lock_chain_count+0x20/0x20 [ 400.848827][ T8416] __x64_sys_openat+0x139/0x160 [ 400.853702][ T8416] do_syscall_64+0x55/0xb0 [ 400.858158][ T8416] ? clear_bhb_loop+0x40/0x90 [ 400.862890][ T8416] ? clear_bhb_loop+0x40/0x90 [ 400.867619][ T8416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 400.873601][ T8416] RIP: 0033:0x7fa35fb69d0e [ 400.878060][ T8416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 400.897701][ T8416] RSP: 002b:00007fa360afcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 400.906160][ T8416] RAX: ffffffffffffffda RBX: 00007fa360afd6c0 RCX: 00007fa35fb69d0e [ 400.914167][ T8416] RDX: 0000000000040002 RSI: 00007fa360afcc00 RDI: ffffffffffffff9c [ 400.922153][ T8416] RBP: 00007fa360afcc00 R08: 0000000000000000 R09: 0000000000000000 [ 400.930131][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 400.938121][ T8416] R13: 00007fa35fe26128 R14: 00007fa35fe26090 R15: 00007ffffb17e258 [ 400.946111][ T8416] [ 400.949134][ T8416] [ 400.951463][ T8416] Allocated by task 1: [ 400.955531][ T8416] kasan_set_track+0x4e/0x70 [ 400.960152][ T8416] __kasan_kmalloc+0x8f/0xa0 [ 400.964750][ T8416] dvb_register_device+0x309/0x1df0 [ 400.969959][ T8416] dvb_register_frontend+0x62d/0x900 [ 400.975280][ T8416] vidtv_bridge_probe+0x9d6/0xf60 [ 400.980335][ T8416] platform_probe+0x13b/0x1c0 [ 400.985042][ T8416] really_probe+0x24a/0xae0 [ 400.989561][ T8416] __driver_probe_device+0x1f5/0x390 [ 400.994860][ T8416] driver_probe_device+0x4f/0x420 [ 400.999895][ T8416] __driver_attach+0x444/0x6d0 [ 401.004687][ T8416] bus_for_each_dev+0x235/0x2b0 [ 401.009565][ T8416] bus_add_driver+0x340/0x630 [ 401.014272][ T8416] driver_register+0x23a/0x310 [ 401.019050][ T8416] vidtv_bridge_init+0x49/0x80 [ 401.023828][ T8416] do_one_initcall+0x242/0x790 [ 401.028611][ T8416] do_initcall_level+0x13d/0x1f0 [ 401.033552][ T8416] do_initcalls+0x69/0xd0 [ 401.037908][ T8416] kernel_init_freeable+0x3d9/0x560 [ 401.043111][ T8416] kernel_init+0x1d/0x1c0 [ 401.047445][ T8416] ret_from_fork+0x48/0x80 [ 401.051872][ T8416] ret_from_fork_asm+0x11/0x20 [ 401.056649][ T8416] [ 401.058978][ T8416] Freed by task 8381: [ 401.062973][ T8416] kasan_set_track+0x4e/0x70 [ 401.067574][ T8416] kasan_save_free_info+0x28/0x40 [ 401.072611][ T8416] ____kasan_slab_free+0x126/0x1f0 [ 401.077726][ T8416] slab_free_freelist_hook+0x154/0x240 [ 401.083191][ T8416] __kmem_cache_free+0xba/0x1f0 [ 401.088045][ T8416] dvb_device_open+0x2d9/0x360 [ 401.092821][ T8416] chrdev_open+0x58c/0x600 [ 401.097247][ T8416] do_dentry_open+0x880/0x14b0 [ 401.102023][ T8416] path_openat+0x284f/0x3270 [ 401.106620][ T8416] do_filp_open+0x1f2/0x430 [ 401.111129][ T8416] do_sys_openat2+0x134/0x1d0 [ 401.115827][ T8416] __x64_sys_openat+0x139/0x160 [ 401.120708][ T8416] do_syscall_64+0x55/0xb0 [ 401.125149][ T8416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.131057][ T8416] [ 401.133427][ T8416] The buggy address belongs to the object at ffff888027aeea00 [ 401.133427][ T8416] which belongs to the cache kmalloc-256 of size 256 [ 401.147496][ T8416] The buggy address is located 24 bytes inside of [ 401.147496][ T8416] freed 256-byte region [ffff888027aeea00, ffff888027aeeb00) [ 401.161223][ T8416] [ 401.163569][ T8416] The buggy address belongs to the physical page: [ 401.169988][ T8416] page:ffffea00009ebb80 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x27aee [ 401.180193][ T8416] head:ffffea00009ebb80 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 401.189163][ T8416] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 401.197182][ T8416] page_type: 0xffffffff() [ 401.201540][ T8416] raw: 00fff00000000840 ffff888018c41b40 dead000000000122 0000000000000000 [ 401.210135][ T8416] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 401.218722][ T8416] page dumped because: kasan: bad access detected [ 401.225160][ T8416] page_owner tracks the page as allocated [ 401.230892][ T8416] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 19475615673, free_ts 0 [ 401.250613][ T8416] post_alloc_hook+0x1c1/0x200 [ 401.255408][ T8416] get_page_from_freelist+0x2181/0x22a0 [ 401.260966][ T8416] __alloc_pages+0x1f0/0x460 [ 401.265561][ T8416] alloc_page_interleave+0x24/0x1e0 [ 401.270762][ T8416] alloc_slab_page+0x5d/0x180 [ 401.275441][ T8416] new_slab+0x87/0x2d0 [ 401.279511][ T8416] ___slab_alloc+0xc5c/0x12f0 [ 401.284211][ T8416] __kmem_cache_alloc_node+0x122/0x260 [ 401.289698][ T8416] kmalloc_trace+0x2a/0xe0 [ 401.294131][ T8416] bus_add_driver+0x162/0x630 [ 401.298820][ T8416] driver_register+0x23a/0x310 [ 401.303595][ T8416] usb_register_driver+0x1aa/0x360 [ 401.308717][ T8416] do_one_initcall+0x242/0x790 [ 401.313489][ T8416] do_initcall_level+0x13d/0x1f0 [ 401.318433][ T8416] do_initcalls+0x69/0xd0 [ 401.322796][ T8416] kernel_init_freeable+0x3d9/0x560 [ 401.328011][ T8416] page_owner free stack trace missing [ 401.333398][ T8416] [ 401.335725][ T8416] Memory state around the buggy address: [ 401.341357][ T8416] ffff888027aee900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 401.349425][ T8416] ffff888027aee980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 401.357512][ T8416] >ffff888027aeea00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.365578][ T8416] ^ [ 401.370434][ T8416] ffff888027aeea80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 401.378507][ T8416] ffff888027aeeb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 401.386568][ T8416] ================================================================== [ 401.414162][ T8416] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 401.421440][ T8416] CPU: 0 PID: 8416 Comm: syz.1.781 Not tainted syzkaller #0 [ 401.428767][ T8416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 401.438873][ T8416] Call Trace: [ 401.442194][ T8416] [ 401.445160][ T8416] dump_stack_lvl+0x18c/0x250 [ 401.449892][ T8416] ? show_regs_print_info+0x20/0x20 [ 401.455138][ T8416] ? load_image+0x420/0x420 [ 401.459730][ T8416] panic+0x2ca/0x720 [ 401.463673][ T8416] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 401.469884][ T8416] ? bpf_jit_dump+0xd0/0xd0 [ 401.474470][ T8416] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 401.480510][ T8416] ? _raw_spin_unlock+0x40/0x40 [ 401.485408][ T8416] ? dvb_device_open+0xc9/0x360 [ 401.490309][ T8416] check_panic_on_warn+0x84/0xa0 [ 401.495294][ T8416] ? dvb_device_open+0xc9/0x360 [ 401.500197][ T8416] end_report+0x6f/0x130 [ 401.504508][ T8416] kasan_report+0x128/0x150 [ 401.509092][ T8416] ? chrdev_open+0x385/0x600 [ 401.513749][ T8416] ? dvb_device_open+0xc9/0x360 [ 401.518660][ T8416] dvb_device_open+0xc9/0x360 [ 401.523471][ T8416] chrdev_open+0x58c/0x600 [ 401.527952][ T8416] ? cd_forget+0x160/0x160 [ 401.532426][ T8416] ? fsnotify_perm+0x3ed/0x5e0 [ 401.537240][ T8416] do_dentry_open+0x880/0x14b0 [ 401.542056][ T8416] ? cd_forget+0x160/0x160 [ 401.546537][ T8416] path_openat+0x284f/0x3270 [ 401.551182][ T8416] ? do_sys_openat2+0xda/0x1d0 [ 401.555990][ T8416] ? __x64_sys_openat+0x139/0x160 [ 401.561063][ T8416] ? verify_lock_unused+0x140/0x140 [ 401.566326][ T8416] ? do_filp_open+0x430/0x430 [ 401.571054][ T8416] do_filp_open+0x1f2/0x430 [ 401.575607][ T8416] ? vfs_tmpfile+0x620/0x620 [ 401.580265][ T8416] ? _raw_spin_unlock+0x28/0x40 [ 401.585166][ T8416] ? alloc_fd+0x590/0x640 [ 401.589569][ T8416] do_sys_openat2+0x134/0x1d0 [ 401.594356][ T8416] ? do_sys_open+0xe0/0xe0 [ 401.598843][ T8416] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 401.604872][ T8416] ? lock_chain_count+0x20/0x20 [ 401.609771][ T8416] __x64_sys_openat+0x139/0x160 [ 401.614683][ T8416] do_syscall_64+0x55/0xb0 [ 401.619155][ T8416] ? clear_bhb_loop+0x40/0x90 [ 401.623889][ T8416] ? clear_bhb_loop+0x40/0x90 [ 401.628645][ T8416] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 401.634599][ T8416] RIP: 0033:0x7fa35fb69d0e [ 401.639066][ T8416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 401.658733][ T8416] RSP: 002b:00007fa360afcb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 401.667251][ T8416] RAX: ffffffffffffffda RBX: 00007fa360afd6c0 RCX: 00007fa35fb69d0e [ 401.675273][ T8416] RDX: 0000000000040002 RSI: 00007fa360afcc00 RDI: ffffffffffffff9c [ 401.683284][ T8416] RBP: 00007fa360afcc00 R08: 0000000000000000 R09: 0000000000000000 [ 401.691301][ T8416] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 401.699323][ T8416] R13: 00007fa35fe26128 R14: 00007fa35fe26090 R15: 00007ffffb17e258 [ 401.707685][ T8416] [ 401.711303][ T8416] Kernel Offset: disabled [ 401.715655][ T8416] Rebooting in 86400 seconds..