last executing test programs: 9m12.951505093s ago: executing program 2 (id=1069): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@local, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x8, 0x33}, 0x0, @in6=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000497000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3cd1, 0x3fd}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x2, 0x4, 0x208, 0x9, 0x7fffffff, 0x80000000, 0x4, 0x800}, 0x20) 9m11.657813882s ago: executing program 2 (id=1072): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xa4, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000440)=0xc, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x3f7, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x48811}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x4000810) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x10102, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940), 0x511040, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000009c0)={0x401, 0x0, &(0x7f0000000980)=[r5]}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4010) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000bc0)='veth1_macvtap\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r3) write$P9_RLERRORu(r3, &(0x7f0000001040)={0x12, 0x7, 0x1, {{0x5, 'TIPC\x00'}, 0x99}}, 0x12) 9m8.630387148s ago: executing program 2 (id=1076): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0369e269b6, 0x8031, 0xffffffffffffffff, 0xfffff000) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10122, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) close(0xffffffffffffffff) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r3, r3, r3}, &(0x7f0000000100)=""/66, 0x8d, &(0x7f0000000340)={&(0x7f0000000300)={'streebog256\x00'}}) socket$nl_netfilter(0x10, 0x3, 0xc) 9m7.404582005s ago: executing program 2 (id=1078): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x6, 0x8}]}, 0x8) syz_extract_tcp_res(0x0, 0x6, 0x5) syz_emit_ethernet(0x30f, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000640)={0x0, 0x2, [0x4a1, 0xc34, 0xf62, 0x4b]}) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0xf20f, 0x40, 0x2, 0x1b}, &(0x7f0000000100), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x800448d5, 0x0) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e22, @multicast2}}}, &(0x7f0000000280)=0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x880b1) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x2004095) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0xe) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0x28) ioctl$FIONREAD(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) socket$inet6_sctp(0xa, 0x5, 0x84) 9m5.926928388s ago: executing program 2 (id=1083): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in=@private=0xa010102, @in6=@local, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x1, 0xa78a}, 0x100, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in6=@private2, 0x8, 0x33}, 0x0, @in6=@remote, 0x2, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r6, 0x0, 0x0, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) mbind(&(0x7f0000497000/0x4000)=nil, 0x4000, 0x8000, 0x0, 0x0, 0x7) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x3cd1, 0x3fd}, 0xc) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000280)={0x2, 0x4, 0x208, 0x9, 0x7fffffff, 0x80000000, 0x4, 0x800}, 0x20) 9m2.64104535s ago: executing program 2 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xa4, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000440)=0xc, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x3f7, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x48811}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x4000810) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x10102, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940), 0x511040, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000009c0)={0x401, 0x0, &(0x7f0000000980)=[r5]}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4010) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000bc0)='veth1_macvtap\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r3) write$P9_RLERRORu(r3, &(0x7f0000001040)={0x12, 0x7, 0x1, {{0x5, 'TIPC\x00'}, 0x99}}, 0x12) 8m48.026950863s ago: executing program 32 (id=1086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0xa4, 0x0, 0x9, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x4}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @local}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x8010}, 0x4) sendfile(r0, 0xffffffffffffffff, &(0x7f0000000200)=0x2, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, &(0x7f0000000440)=0xc, 0x4) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x3f7, 0x100, 0x70bd27, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044080}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x78, 0x4, 0x6, 0x401, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x48811}, 0x8000) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0/file0\x00'}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r3, &(0x7f0000000880)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0}, 0x4000810) openat$autofs(0xffffffffffffff9c, 0x0, 0x40, 0x0) r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000900), 0x10102, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000940), 0x511040, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000009c0)={0x401, 0x0, &(0x7f0000000980)=[r5]}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000b80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x4010) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCBRDELBR(r2, 0x89a1, &(0x7f0000000bc0)='veth1_macvtap\x00') syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000c40), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000dc0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc004}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), r3) write$P9_RLERRORu(r3, &(0x7f0000001040)={0x12, 0x7, 0x1, {{0x5, 'TIPC\x00'}, 0x99}}, 0x12) 7.362016261s ago: executing program 3 (id=2692): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0x1, 0x0, 0xe4}]}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000002c0)={@in={{0x2, 0x4e24, @local}}, 0x0, 0x0, 0x4, 0x0, "630f7e01b079f255c7c37456b9ed18a9f5281e976a75ce94c1374882a536148faf7f88773322b754e6b5c48464891f3a163d57c3844643e2dcc74e6eb9b5fd5b7823c874861ccc6946307ad5a6096187"}, 0xd8) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de250000000000000000", 0x40}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af", 0x110}, {&(0x7f0000001340)="641a6a2b8647e6b5208cf9599b1d890aa834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0186c6e0cd8e068d542bab5c97caba72ac16f5bc7741f5158ec0938626e40f5b86baaab3ced2903dddcca7363065dcaba065147a234a37da348f1b4674d", 0x6e}], 0x3}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)}], 0x1}}], 0x2, 0x4000000) 7.134169365s ago: executing program 3 (id=2695): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x52, 0x305, 0x0, 0x0, {0x1c}}, 0x14}}, 0x20008804) 7.052020828s ago: executing program 3 (id=2696): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000280)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, 0x0, 0x0) io_uring_setup(0x2f00, &(0x7f00000004c0)={0x0, 0xe8e2, 0x400, 0x20001, 0x2d6}) r4 = syz_open_procfs(0x0, 0x0) pread64(r4, &(0x7f0000000080)=""/102356, 0x18fd4, 0x6) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r5, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r7, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) recvmmsg(r5, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000800)=""/244, 0xf4}], 0x1}, 0x1}], 0x1, 0x18020, 0x0) 7.038868007s ago: executing program 0 (id=2697): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 6.678005226s ago: executing program 0 (id=2700): syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x8000, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0xff, @empty, @local, {[], {0x4e21, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x0, @void}}}}}}}}, 0x0) 6.444552601s ago: executing program 0 (id=2701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) creat(0x0, 0xae) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 5.54158072s ago: executing program 1 (id=2705): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 4.368062876s ago: executing program 3 (id=2708): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}]}}]}, 0x170}}, 0x24040004) 4.221901469s ago: executing program 0 (id=2709): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 4.087498622s ago: executing program 3 (id=2711): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d0102030109021200"], 0x0) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080), 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000340)=ANY=[@ANYBLOB="ed00b2796256e5ec1ca07dea375797c2232abaa42b84fc3056f519476d19b3557a1b5f1462"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f00000004c0)={0x40, 0x16, 0x4, "a3a94f33"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 3.992102984s ago: executing program 0 (id=2712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) add_key(&(0x7f0000000140)='encrypted\x00', 0x0, &(0x7f0000000100), 0x0, 0xfffffffffffffffe) chroot(&(0x7f0000000200)='./file0\x00') socket$key(0xf, 0x3, 0x2) 3.854107617s ago: executing program 5 (id=2713): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000001d25a80", 0x14}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x0) 3.753678709s ago: executing program 5 (id=2714): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d0000000000"], 0x1c}}, 0x0) 3.67867036s ago: executing program 5 (id=2715): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x4e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r2], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f00000003c0)="060000000000000500000000000000cd86dd", 0x12, 0x40015, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x5, 0x6, @remote}, 0x14) 3.564359333s ago: executing program 5 (id=2716): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[], 0x254fe) 2.407320687s ago: executing program 5 (id=2717): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 2.350150889s ago: executing program 1 (id=2718): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x11}, @multicast1}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@noop, @timestamp_addr={0x44, 0x4, 0xf, 0x1, 0x7}]}}}], 0x38}, 0x200040c4) 2.183252323s ago: executing program 1 (id=2719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) creat(0x0, 0xae) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.802022311s ago: executing program 1 (id=2722): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) socket(0x400000000010, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffbffffb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x20040084) 1.759627452s ago: executing program 4 (id=2723): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000a40)={[{@noblock_validity}, {@grpquota}, {@grpid}, {@nombcache}]}, 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x98}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 1.37165022s ago: executing program 4 (id=2724): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1400000034000b43d300fff5e700000001d25a80", 0x14}], 0x1}, 0x0) recvmsg(r0, 0x0, 0x0) 1.210028244s ago: executing program 4 (id=2725): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001800dd8d0000000000"], 0x1c}}, 0x0) 1.166266245s ago: executing program 4 (id=2726): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x4e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6c0000001000370403000000ffffffff00000000", @ANYRES32=r2], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4000010) sendto$packet(r0, &(0x7f00000003c0)="060000000000000500000000000000cd86dd", 0x12, 0x40015, &(0x7f0000000200)={0x11, 0x8100, r2, 0x1, 0x5, 0x6, @remote}, 0x14) 1.083006657s ago: executing program 4 (id=2727): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(r0, 0x0) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r4, &(0x7f00000000c0)=ANY=[], 0x254fe) 1.021699548s ago: executing program 5 (id=2728): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 897.97188ms ago: executing program 1 (id=2729): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) close(0x3) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r4, r4) setpgid(0x0, r4) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x2) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x40049366, 0x0) 852.891252ms ago: executing program 0 (id=2730): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000bc0)=ANY=[@ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r0) r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x200) syz_usb_disconnect(r1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x4004550d, 0x0) 110.762687ms ago: executing program 1 (id=2731): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x14, 0x52, 0x305, 0x0, 0x0, {0x1c}, [@generic]}, 0x14}}, 0x20008804) 69.991338ms ago: executing program 3 (id=2732): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x40001}}], 0x47f, 0xa4ff) 0s ago: executing program 4 (id=2733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x10, 0xfffa}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}, @TCA_GRED_PARMS={0x38, 0x1, {0xe0, 0x3, 0x4, 0xb, 0x3, 0x7, 0x9, 0x0, 0x0, 0x80, 0x5, 0x0, 0x1a, 0x4, 0xff, 0x1d4}}]}}]}, 0x170}}, 0x24040004) kernel console output (not intermixed with test programs): ding EA inode 1 err=-117 [ 952.774344][T12320] EXT4-fs (loop4): 1 orphan inode deleted [ 952.788601][T12320] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 953.120306][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 954.762981][ T5851] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 954.766440][ T26] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 955.883967][ T5851] usb 6-1: Using ep0 maxpacket: 32 [ 955.891620][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 955.938276][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 955.998080][ T5851] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 956.022914][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.048372][ T5851] usb 6-1: config 0 descriptor?? [ 956.067054][ T5851] hub 6-1:0.0: USB hub found [ 956.071647][ T26] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 956.092915][ T26] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 956.118389][ T26] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 956.145147][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 956.161140][ T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 956.188177][ T26] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 956.197360][ T26] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 956.205618][ T26] usb 5-1: Product: syz [ 956.209793][ T26] usb 5-1: Manufacturer: syz [ 956.228584][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 956.238425][ T26] cdc_wdm 5-1:1.0: skipping garbage [ 956.248150][ T26] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 956.257171][ T26] cdc_wdm 5-1:1.0: Unknown control protocol [ 956.267343][ T5851] hub 6-1:0.0: 1 port detected [ 956.402864][ T5048] usb 2-1: new full-speed USB device number 65 using dummy_hcd [ 956.432290][ T9148] usb 5-1: USB disconnect, device number 61 [ 956.600757][ T5048] usb 2-1: config 0 has an invalid descriptor of length 139, skipping remainder of the config [ 956.603579][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.612636][ T5048] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 956.621370][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.640107][ T5048] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 956.651266][ T5048] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.663511][ T5048] usb 2-1: config 0 descriptor?? [ 956.671819][ T5048] iowarrior 2-1:0.0: no interrupt-in endpoint found [ 956.857912][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.869255][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.881128][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.891820][ T26] usb 2-1: USB disconnect, device number 65 [ 956.896052][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.910936][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.920714][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.931446][T12352] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.941829][T12352] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 957.035255][ T22] kworker/dying (22) used greatest stack depth: 15488 bytes left [ 957.122987][ T9148] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 957.160021][ T5851] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 957.169013][ T5851] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 957.183628][T12378] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2081'. [ 957.202240][ T5851] usbhid 6-1:0.0: can't add hid device: -71 [ 957.209785][ T5851] usbhid: probe of 6-1:0.0 failed with error -71 [ 957.268925][ T5851] usb 6-1: USB disconnect, device number 36 [ 957.416260][ T9148] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 957.433879][ T9148] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 957.504093][ T9148] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 957.787969][ T9148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 958.076847][ T9148] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 958.322934][ T9148] usb 5-1: string descriptor 0 read error: -71 [ 958.347805][ T9148] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 958.430897][T12396] loop1: detected capacity change from 0 to 128 [ 958.457184][ T9148] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 958.490283][T12397] loop3: detected capacity change from 0 to 512 [ 958.554529][ T9148] usb 5-1: can't set config #1, error -71 [ 958.602066][T12397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802c118, mo2=0002] [ 958.624366][ T9148] usb 5-1: USB disconnect, device number 62 [ 958.672205][T12401] loop4: detected capacity change from 0 to 1024 [ 958.679145][T12397] System zones: 1-12 [ 958.714702][T12397] EXT4-fs (loop3): 1 truncate cleaned up [ 958.758559][T12397] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 958.805287][T12401] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 958.918426][T12401] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 959.134674][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 959.255079][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 959.472178][T12419] device gtp2 entered promiscuous mode [ 961.083048][ T4314] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 961.263301][ T5048] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 961.297163][ T4314] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 961.363253][ T4314] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 961.493793][ T5048] usb 2-1: Using ep0 maxpacket: 8 [ 961.534543][ T5048] usb 2-1: unable to get BOS descriptor or descriptor too short [ 961.573379][ T4314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 961.653814][ T5048] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 961.712488][ T4314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 961.794256][ T5048] usb 2-1: can't read configurations, error -71 [ 961.886276][ T4314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 961.954268][T12453] loop3: detected capacity change from 0 to 1024 [ 962.024050][ T4314] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 962.044868][T12453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 962.054063][T12453] ext4 filesystem being mounted at /389/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 962.060830][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 962.097544][T12460] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 962.124786][ T4314] usb 6-1: Product: syz [ 962.129003][ T4314] usb 6-1: Manufacturer: syz [ 962.184818][ T4314] cdc_wdm 6-1:1.0: skipping garbage [ 962.202840][ T4314] cdc_wdm 6-1:1.0: skipping garbage [ 962.212033][ T4314] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 962.219610][ T4314] cdc_wdm 6-1:1.0: Unknown control protocol [ 962.294714][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 962.588006][T12464] loop1: detected capacity change from 0 to 2048 [ 962.723077][T12464] loop1: p1 < > p4 [ 962.738158][T12464] loop1: p4 size 8388608 extends beyond EOD, truncated [ 963.562757][ C0] sched: RT throttling activated [ 963.566737][ T5851] usb 6-1: USB disconnect, device number 37 [ 964.835818][T12475] loop5: detected capacity change from 0 to 512 [ 964.954810][T12475] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 965.962304][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 966.031115][T12293] udevd[12293]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 966.031824][T12085] udevd[12085]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 966.162152][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 966.190277][T12085] udevd[12085]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 966.561337][T12506] loop1: detected capacity change from 0 to 2048 [ 967.583333][ T4371] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 967.892931][ T4371] usb 4-1: Using ep0 maxpacket: 8 [ 967.933014][ T4371] usb 4-1: unable to get BOS descriptor or descriptor too short [ 967.964226][ T4371] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 967.993792][ T4371] usb 4-1: can't read configurations, error -71 [ 968.722962][ T5048] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 968.978660][ T5048] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 968.987665][ T5048] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 968.998228][ T5048] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 969.007485][ T5048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 969.110843][ T5048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 969.149994][ T5048] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 969.172888][ T14] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 969.201109][ T5048] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 969.231527][ T5048] usb 2-1: Product: syz [ 969.245000][ T5048] usb 2-1: Manufacturer: syz [ 969.276286][ T5048] cdc_wdm 2-1:1.0: skipping garbage [ 969.279949][T12536] loop4: detected capacity change from 0 to 512 [ 969.291059][ T5048] cdc_wdm 2-1:1.0: skipping garbage [ 969.864343][T12536] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 969.885130][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 970.298176][T12536] EXT4-fs (loop4): 1 truncate cleaned up [ 970.352824][T12536] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 970.446283][ T5048] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 970.452267][ T5048] cdc_wdm 2-1:1.0: Unknown control protocol [ 970.458620][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 970.471222][ T5048] usb 2-1: USB disconnect, device number 68 [ 970.478166][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 970.479413][ T27] audit: type=1800 audit(1784193560.540:14): pid=12536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2126" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 970.490511][ T14] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 970.562817][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 970.600038][ T14] usb 1-1: config 0 descriptor?? [ 970.610297][ T14] hub 1-1:0.0: USB hub found [ 970.634860][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 970.696489][ T26] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 970.718808][T12557] loop4: detected capacity change from 0 to 256 [ 970.814961][ T14] hub 1-1:0.0: 1 port detected [ 970.892879][ T26] usb 6-1: Using ep0 maxpacket: 8 [ 970.901748][ T26] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 970.931864][ T26] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 970.934810][ T5048] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 970.949576][ T26] usb 6-1: Product: syz [ 970.954550][ T26] usb 6-1: Manufacturer: syz [ 971.170899][ T5048] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 971.231591][ T5048] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 971.317002][ T5048] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 971.403514][ T5048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 971.506734][ T5048] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 971.584186][T12568] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.751269][ T26] usb 6-1: SerialNumber: syz [ 971.757721][ T26] usb 6-1: config 0 descriptor?? [ 971.763007][ T4371] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 971.781247][T12568] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.864236][ T5048] usb 2-1: string descriptor 0 read error: -71 [ 971.870501][ T5048] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 971.890439][ T14] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 971.912909][ T14] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 971.942004][ T5048] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 971.957866][ T14] usbhid 1-1:0.0: can't add hid device: -32 [ 971.971350][ T14] usbhid: probe of 1-1:0.0 failed with error -32 [ 971.978344][ T4371] usb 5-1: Using ep0 maxpacket: 8 [ 972.005728][ T4371] usb 5-1: unable to get BOS descriptor or descriptor too short [ 972.025761][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.041116][ T26] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 972.056851][ T5048] usb 2-1: can't set config #1, error -71 [ 972.063156][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.258954][ T4371] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 972.275954][ T5048] usb 2-1: USB disconnect, device number 69 [ 972.342440][ T4371] usb 5-1: can't read configurations, error -71 [ 972.831606][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.850944][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.889412][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.939735][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 972.961303][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 972.981720][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 973.109366][T12578] device syzkaller0 entered promiscuous mode [ 973.233006][ T4371] usb 5-1: new full-speed USB device number 64 using dummy_hcd [ 973.338642][ T4316] usb 1-1: USB disconnect, device number 71 [ 973.373765][ T4315] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 973.394477][ T4371] usb 5-1: device descriptor read/64, error -71 [ 973.518955][ T4371] usb usb5-port1: attempt power cycle [ 973.569262][ T4315] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 973.582440][ T4315] usb 2-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 973.593645][ T4315] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 973.615183][ T4315] usb 2-1: config 0 descriptor?? [ 973.620979][T12586] raw-gadget.8 gadget.1: fail, usb_ep_enable returned -22 [ 973.683906][ T26] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 973.697911][ T26] usb 6-1: USB disconnect, device number 38 [ 973.944207][ T4371] usb 5-1: new full-speed USB device number 65 using dummy_hcd [ 973.993182][ T4371] usb 5-1: device descriptor read/8, error -71 [ 974.051832][ T4315] usbhid 2-1:0.0: can't add hid device: -71 [ 974.057883][ T4315] usbhid: probe of 2-1:0.0 failed with error -71 [ 974.075628][ T4315] usb 2-1: USB disconnect, device number 70 [ 974.263004][ T4371] usb 5-1: new full-speed USB device number 66 using dummy_hcd [ 974.313789][ T4371] usb 5-1: device descriptor read/8, error -71 [ 974.434049][ T4371] usb usb5-port1: unable to enumerate USB device [ 974.539529][T12605] loop5: detected capacity change from 0 to 512 [ 974.576806][T12605] EXT4-fs: Ignoring removed bh option [ 974.625378][T12605] EXT4-fs: Ignoring removed mblk_io_submit option [ 974.665607][T12605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 974.766425][T12605] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 974.805250][T12605] ext4 filesystem being mounted at /183/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 975.214412][T12605] EXT4-fs error (device loop5): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.5.2144: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 975.449878][T12605] EXT4-fs error (device loop5): ext4_get_first_dir_block:3594: inode #12: comm syz.5.2144: directory missing '.' [ 975.576521][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 975.949260][ T4371] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 976.161244][ T4371] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 976.189339][ T4371] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 976.841395][ T4371] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 976.851310][ T4371] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 976.863638][ T4371] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 976.878069][ T4371] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 976.887207][ T4371] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 976.928757][ T4371] usb 6-1: Product: syz [ 976.959771][ T4371] usb 6-1: Manufacturer: syz [ 976.983098][ T4371] cdc_wdm 6-1:1.0: skipping garbage [ 976.999727][ T4371] cdc_wdm 6-1:1.0: skipping garbage [ 977.028760][ T4371] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 977.102688][T12625] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2152'. [ 977.117294][ T4371] cdc_wdm 6-1:1.0: Unknown control protocol [ 978.088654][T12625] device ip6gre1 entered promiscuous mode [ 978.112934][ T4315] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 978.213577][T12614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 978.222447][T12614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 978.274155][ T4371] usb 6-1: USB disconnect, device number 39 [ 978.278107][T12641] loop4: detected capacity change from 0 to 512 [ 978.302946][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 978.309835][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 978.327942][T12641] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 978.352973][ T4315] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 978.376219][ T4315] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 978.390266][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.405193][T12641] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 978.423334][ T4315] usb 4-1: config 0 descriptor?? [ 978.435937][ T4315] hub 4-1:0.0: USB hub found [ 978.753790][ T4315] hub 4-1:0.0: 1 port detected [ 979.462947][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.541935][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 979.877877][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 979.995103][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.269215][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.421489][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.458234][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.490714][T12672] loop4: detected capacity change from 0 to 512 [ 980.500708][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.510612][ T4315] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 980.517219][ T4315] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 980.528235][T12626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 980.538712][ T4315] usbhid 4-1:0.0: can't add hid device: -32 [ 980.544884][T12626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 980.555184][T12672] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2167: inode #1: comm syz.4.2167: iget: illegal inode # [ 980.568269][ T4315] usbhid: probe of 4-1:0.0 failed with error -32 [ 980.574932][T12672] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2167: error while reading EA inode 1 err=-117 [ 980.605161][T12672] EXT4-fs (loop4): 1 orphan inode deleted [ 980.611064][T12672] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 980.679874][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 980.883504][ T14] usb 4-1: USB disconnect, device number 65 [ 980.930340][ T4315] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 981.208974][ T4315] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 981.343641][ T4315] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 981.541923][ T4315] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.572572][ T4315] usb 6-1: config 0 descriptor?? [ 981.589999][ T4315] iowarrior 6-1:0.0: no interrupt-in endpoint found [ 981.797943][ T4373] usb 6-1: USB disconnect, device number 40 [ 981.852980][ T4314] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 982.409360][ T4314] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 982.438120][ T4314] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 982.481709][ T4314] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 982.508524][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 982.642239][ T4314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 982.824043][ T4314] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 982.852805][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 982.860900][ T4314] usb 5-1: Product: syz [ 982.865861][ T4314] usb 5-1: Manufacturer: syz [ 982.878455][ T4314] cdc_wdm 5-1:1.0: skipping garbage [ 982.892827][ T4314] cdc_wdm 5-1:1.0: skipping garbage [ 982.901591][ T4314] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 982.913360][ T4314] cdc_wdm 5-1:1.0: Unknown control protocol [ 983.366335][T12689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 983.476301][T12689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 983.734581][ T4371] usb 5-1: USB disconnect, device number 67 [ 983.926522][T12718] loop1: detected capacity change from 0 to 512 [ 983.979638][T12721] loop5: detected capacity change from 0 to 512 [ 983.998556][T12718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2181: inode #1: comm syz.1.2181: iget: illegal inode # [ 984.083406][T12718] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2181: error while reading EA inode 1 err=-117 [ 984.108591][T12718] EXT4-fs (loop1): 1 orphan inode deleted [ 984.162868][T12718] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 984.194401][T12721] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 984.223818][T12721] ext4 filesystem being mounted at /188/file3 supports timestamps until 2038-01-19 (0x7fffffff) [ 984.294811][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 984.405786][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 984.465731][T12726] syz.1.2182 uses obsolete (PF_INET,SOCK_PACKET) [ 985.013012][ T9148] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 985.262876][ T9148] usb 5-1: Using ep0 maxpacket: 32 [ 985.288722][ T9148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.480149][ T9148] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.502848][ T9148] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 985.511930][ T9148] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.569031][ T9148] usb 5-1: config 0 descriptor?? [ 985.795500][ T9148] hub 5-1:0.0: USB hub found [ 986.907469][ T9148] hub 5-1:0.0: 1 port detected [ 987.277838][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 987.298735][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 987.529024][T12733] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 988.652794][ T9148] hub 5-1:0.0: hub_hub_status failed (err = -32) [ 988.723892][ T26] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 988.731585][ T9148] hub 5-1:0.0: config failed, can't get hub status (err -32) [ 988.735872][T12770] loop1: detected capacity change from 0 to 1024 [ 988.743626][T12733] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 989.390192][T12770] EXT4-fs: Ignoring removed bh option [ 989.493533][ T9148] usbhid 5-1:0.0: can't add hid device: -32 [ 989.509957][ T9148] usbhid: probe of 5-1:0.0 failed with error -32 [ 989.578639][T12770] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 989.594412][ T26] usb 4-1: Using ep0 maxpacket: 32 [ 989.601270][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.646436][ T27] audit: type=1804 audit(1784193579.710:15): pid=12770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2197" name="/newroot/451/file1/bus" dev="loop1" ino=18 res=1 errno=0 [ 989.673249][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.705793][ T26] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 989.726369][ T26] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.752035][ T26] usb 4-1: config 0 descriptor?? [ 989.768519][ T26] hub 4-1:0.0: USB hub found [ 989.833175][ T4314] usb 5-1: USB disconnect, device number 68 [ 989.853343][T12782] loop4: detected capacity change from 0 to 512 [ 989.893934][T12782] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.2201: inode #1: comm syz.4.2201: iget: illegal inode # [ 989.969429][ T26] hub 4-1:0.0: 1 port detected [ 990.019329][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 990.029523][T12782] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.2201: error while reading EA inode 1 err=-117 [ 990.152314][T12785] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 990.158645][T12782] EXT4-fs (loop4): 1 orphan inode deleted [ 990.198564][T12782] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 990.440338][T12794] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 990.456359][T12794] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 990.663929][ T26] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 990.666772][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 990.670301][ T26] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 991.415738][T12801] loop1: detected capacity change from 0 to 1024 [ 991.467162][ T26] usbhid 4-1:0.0: can't add hid device: -71 [ 991.473209][ T26] usbhid: probe of 4-1:0.0 failed with error -71 [ 991.480801][T12801] EXT4-fs: Ignoring removed bh option [ 991.488949][T12804] loop4: detected capacity change from 0 to 512 [ 991.523809][ T26] usb 4-1: USB disconnect, device number 66 [ 991.544509][T12804] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 991.562297][T12801] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 991.578760][T12803] EXT4-fs warning (device loop4): dx_probe:869: inode #2: comm syz.4.2207: Unimplemented hash flags: 0x0001 [ 991.590903][T12803] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.2207: Corrupt directory, running e2fsck is recommended [ 992.501446][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 992.512897][ T4373] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 992.534794][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 992.833590][ T4373] usb 1-1: Using ep0 maxpacket: 32 [ 992.840833][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 992.851874][ T4373] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 992.866649][ T4373] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 992.878413][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.884784][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.889189][T12828] loop1: detected capacity change from 0 to 512 [ 992.896001][ T4373] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.038992][T12828] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: comm syz.1.2217: inode #1: comm syz.1.2217: iget: illegal inode # [ 993.734363][ T4373] usb 1-1: config 0 descriptor?? [ 993.749292][T12828] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.2217: error while reading EA inode 1 err=-117 [ 993.813964][ T4373] hub 1-1:0.0: USB hub found [ 993.833796][T12828] EXT4-fs (loop1): 1 orphan inode deleted [ 993.866511][T12828] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 993.910150][T12835] loop3: detected capacity change from 0 to 512 [ 993.953334][ T4373] hub 1-1:0.0: 1 port detected [ 994.069642][T12835] EXT4-fs (loop3): 1 orphan inode deleted [ 994.091507][ T4566] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 994.138715][ T4566] EXT4-fs error (device loop3): ext4_release_dquot:6877: comm kworker/u4:15: Failed to release dquot type 1 [ 994.152625][T12835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 994.220965][T12835] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 994.259667][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 994.382538][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.447201][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.274722][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.421499][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.450019][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.464495][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.480841][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 995.501625][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 995.563777][ T4373] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 995.578949][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 995.582783][ T4373] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 995.597201][ T4373] usbhid 1-1:0.0: can't add hid device: -32 [ 995.604850][ T4373] usbhid: probe of 1-1:0.0 failed with error -32 [ 996.360425][T12853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 996.373111][T12853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 996.528563][T12856] loop3: detected capacity change from 0 to 1024 [ 996.573895][ T4373] usb 1-1: USB disconnect, device number 72 [ 996.667550][T12856] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 996.676732][T12856] ext4 filesystem being mounted at /412/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 996.793130][T12861] xt_hashlimit: size too large, truncated to 1048576 [ 996.821706][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 997.566221][T12871] loop5: detected capacity change from 0 to 2048 [ 1001.072187][T12896] loop4: detected capacity change from 0 to 2048 [ 1001.133908][T12896] loop4: p1 < > p4 [ 1001.145560][T12896] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1002.092852][ T3637] loop4: p1 < > p4 [ 1002.110861][ T3637] loop4: p4 size 8388608 extends beyond EOD, truncated [ 1002.543423][ T9148] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1002.702787][ T4314] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1002.760156][T12899] loop5: detected capacity change from 0 to 1024 [ 1002.873088][ T9148] usb 4-1: Using ep0 maxpacket: 32 [ 1002.883941][ T9148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.943874][T12899] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1002.972895][ T9148] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.973070][T12899] ext4 filesystem being mounted at /199/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1002.983431][ T9148] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1003.008410][ T9148] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1003.019418][ T9148] usb 4-1: config 0 descriptor?? [ 1003.026344][ T9148] hub 4-1:0.0: USB hub found [ 1003.082650][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1003.192820][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1003.203201][ T4314] usb 2-1: config 0 has no interfaces? [ 1003.230649][ T9148] hub 4-1:0.0: 1 port detected [ 1003.289194][T12293] udevd[12293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1003.309893][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1003.450275][T12913] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1003.501229][T12091] udevd[12091]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1003.512345][T12293] udevd[12293]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1003.546286][ T4314] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1003.555504][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1003.563570][ T4314] usb 2-1: Product: syz [ 1003.567750][ T4314] usb 2-1: Manufacturer: syz [ 1003.572422][ T4314] usb 2-1: SerialNumber: syz [ 1003.593715][ T4314] usb 2-1: config 0 descriptor?? [ 1003.718851][ T4371] usb 2-1: USB disconnect, device number 71 [ 1003.721533][T12895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.743261][T12895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1003.964868][T12895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1003.993126][T12895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.038226][T12895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.067004][T12922] loop4: detected capacity change from 0 to 256 [ 1004.141150][T12895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.196282][T12895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1004.252680][T12926] loop1: detected capacity change from 0 to 512 [ 1004.260933][T12895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1004.324111][ T9148] hub 4-1:0.0: hub_hub_status failed (err = -32) [ 1004.325327][T12926] EXT4-fs: Ignoring removed bh option [ 1004.330482][ T9148] hub 4-1:0.0: config failed, can't get hub status (err -32) [ 1004.363852][ T9148] usbhid 4-1:0.0: can't add hid device: -32 [ 1004.380055][ T9148] usbhid: probe of 4-1:0.0 failed with error -32 [ 1004.388486][T12926] EXT4-fs: Ignoring removed mblk_io_submit option [ 1004.441204][T12926] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1004.683780][T12895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.082313][T12937] loop4: detected capacity change from 0 to 2048 [ 1005.134263][T12895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.112876][T12926] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1006.173551][T12926] ext4 filesystem being mounted at /461/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1006.293752][T12926] EXT4-fs error (device loop1): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.1.2246: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1006.393193][T12926] EXT4-fs error (device loop1): ext4_get_first_dir_block:3594: inode #12: comm syz.1.2246: directory missing '.' [ 1006.747401][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1006.859381][ T4316] usb 4-1: USB disconnect, device number 67 [ 1007.364199][ T4314] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 1008.244895][ T4314] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.265306][ T4314] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1008.456343][ T4314] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1008.472788][ T4314] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1008.480821][ T4314] usb 1-1: Product: syz [ 1008.491598][ T4314] usb 1-1: Manufacturer: syz [ 1008.496837][ T4314] usb 1-1: SerialNumber: syz [ 1008.672028][T12971] loop4: detected capacity change from 0 to 512 [ 1008.963329][T12971] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1009.112414][ T4314] usb 1-1: config 0 descriptor?? [ 1009.128848][T12971] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #15: comm syz.4.2261: corrupted in-inode xattr [ 1009.151643][T12971] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.2261: couldn't read orphan inode 15 (err -117) [ 1009.212073][T12971] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1009.271256][T12980] loop5: detected capacity change from 0 to 1024 [ 1009.369799][T12980] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1009.382326][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1009.393289][T12980] ext4 filesystem being mounted at /203/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.462842][ T4314] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1009.575379][T12984] loop4: detected capacity change from 0 to 512 [ 1009.588367][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1009.600678][T12984] EXT4-fs: Ignoring removed bh option [ 1009.629442][T12984] EXT4-fs: Ignoring removed mblk_io_submit option [ 1009.649057][T12984] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1009.663117][ T4314] usb 4-1: Using ep0 maxpacket: 32 [ 1009.672331][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1009.699442][ T4314] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1009.720407][ T4314] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1009.741787][T12984] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1009.756063][ T4314] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.768944][T12984] ext4 filesystem being mounted at /455/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1009.814286][ T4314] usb 4-1: config 0 descriptor?? [ 1009.841860][ T4314] hub 4-1:0.0: USB hub found [ 1009.867898][T12984] EXT4-fs error (device loop4): ext4_get_first_dir_block:3591: inode #12: block 32: comm syz.4.2264: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=2048 fake=0 [ 1009.928200][T12984] EXT4-fs error (device loop4): ext4_get_first_dir_block:3594: inode #12: comm syz.4.2264: directory missing '.' [ 1009.995040][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1010.103907][T12991] loop5: detected capacity change from 0 to 2048 [ 1010.648899][T12997] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1010.792663][ T4373] usb 1-1: USB disconnect, device number 73 [ 1010.990329][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.007137][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.226285][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.243595][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.266264][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.298590][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.320227][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.341134][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1011.621432][ T4314] hub 4-1:0.0: 1 port detected [ 1011.733559][T13001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1011.742149][T13001] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.017440][ T4314] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 1012.053725][ T4314] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 1012.140067][ T4314] usbhid 4-1:0.0: can't add hid device: -71 [ 1012.156886][ T4314] usbhid: probe of 4-1:0.0 failed with error -71 [ 1012.171222][T13011] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2272'. [ 1012.246826][ T4314] usb 4-1: USB disconnect, device number 68 [ 1012.359460][T13019] loop5: detected capacity change from 0 to 1024 [ 1012.438005][T13019] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1012.468929][T13019] ext4 filesystem being mounted at /206/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1013.402151][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1013.723376][ T14] usb 2-1: new full-speed USB device number 72 using dummy_hcd [ 1013.926537][T13042] loop5: detected capacity change from 0 to 2048 [ 1016.330272][T13042] loop5: p1 < > p4 [ 1016.336031][T13042] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1016.601291][ T14] usb 2-1: device descriptor read/all, error -71 [ 1016.759025][T12085] udevd[12085]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 1016.771137][ T5048] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1017.588956][ T5851] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1017.726470][ T5048] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1017.735417][ T5048] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1017.750642][ T5048] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1017.760230][ T5048] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1017.771733][ T5048] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1017.787540][ T5048] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1017.797043][ T5048] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1017.817185][ T5048] usb 5-1: Product: syz [ 1017.821483][ T5048] usb 5-1: Manufacturer: syz [ 1017.835257][ T5048] cdc_wdm 5-1:1.0: skipping garbage [ 1017.846106][ T5048] cdc_wdm 5-1:1.0: skipping garbage [ 1017.860886][ T5048] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1017.877159][ T5048] cdc_wdm 5-1:1.0: Unknown control protocol [ 1017.883394][ T5851] usb 4-1: Using ep0 maxpacket: 8 [ 1017.893003][ T5851] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1017.913596][ T5851] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1017.921996][ T5851] usb 4-1: Product: syz [ 1017.930955][ T5851] usb 4-1: Manufacturer: syz [ 1017.954973][ T5851] usb 4-1: SerialNumber: syz [ 1017.977700][ T5851] usb 4-1: config 0 descriptor?? [ 1017.993113][ T14] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1018.042074][ T5048] usb 5-1: USB disconnect, device number 69 [ 1018.153006][ T14] usb 2-1: device descriptor read/64, error -71 [ 1018.199700][ T5851] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1018.303141][ T14] usb usb2-port1: attempt power cycle [ 1018.377997][T13077] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2296'. [ 1019.072849][ T14] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1019.103592][ T14] usb 2-1: device descriptor read/8, error -71 [ 1019.142833][ T5048] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1019.150831][ T4371] usb 1-1: new full-speed USB device number 74 using dummy_hcd [ 1019.416951][ T5048] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1019.425759][ T4371] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.436000][ T5048] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1020.103875][ T14] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1020.124051][ T4371] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1020.133230][ T5048] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1020.227462][ T14] usb 2-1: device descriptor read/8, error -71 [ 1020.236100][ T5851] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1020.247362][ T5851] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1020.255440][ T5048] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1020.264780][T13092] loop4: detected capacity change from 0 to 512 [ 1020.266544][ T5851] usb 4-1: media controller created [ 1020.278621][ T5048] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1020.292082][ T4371] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1020.311918][T13092] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1020.321925][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.336690][ T5851] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1020.345223][ T4371] usb 1-1: Product: syz [ 1020.353054][ T5048] usb 5-1: string descriptor 0 read error: -71 [ 1020.359287][ T5048] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1020.368866][ T14] usb usb2-port1: unable to enumerate USB device [ 1020.376587][T13094] loop1: detected capacity change from 0 to 1024 [ 1020.378610][T13097] loop5: detected capacity change from 0 to 512 [ 1020.383718][ T4371] usb 1-1: Manufacturer: syz [ 1020.399395][ T4371] usb 1-1: SerialNumber: syz [ 1020.404255][ T5048] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1020.414770][T13097] EXT4-fs: Ignoring removed bh option [ 1020.429100][T13092] EXT4-fs (loop4): 1 truncate cleaned up [ 1020.431637][ T4371] usb 1-1: config 0 descriptor?? [ 1020.439861][T13097] EXT4-fs: Ignoring removed mblk_io_submit option [ 1020.448768][ T5048] usb 5-1: can't set config #1, error -71 [ 1020.461227][T13092] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1020.469448][ T5048] usb 5-1: USB disconnect, device number 70 [ 1020.493959][T13094] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1020.513158][T13094] ext4 filesystem being mounted at /469/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.558509][ T27] audit: type=1800 audit(1784193610.620:16): pid=13092 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2301" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1020.572573][ T5851] i2c i2c-1: Added multiplexed i2c bus 2 [ 1020.617736][T13097] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1020.648929][ T5851] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1020.675444][T13097] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1020.693213][T13097] ext4 filesystem being mounted at /213/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1020.711363][ T5851] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1020.711519][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1020.751500][ T5851] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1020.804050][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1020.814147][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1020.851243][ T5851] DVB: Unable to find symbol fc0013_attach() [ 1020.991972][ T5851] usb 4-1: USB disconnect, device number 69 [ 1021.126573][T13115] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2307'. [ 1021.200356][T13120] loop4: detected capacity change from 0 to 1024 [ 1021.285158][T13120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1021.358531][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1021.665274][ T4314] usb 4-1: new full-speed USB device number 70 using dummy_hcd [ 1021.868726][ T4314] usb 4-1: no configurations [ 1021.873621][ T4314] usb 4-1: can't read configurations, error -22 [ 1022.123114][ T4314] usb 4-1: new full-speed USB device number 71 using dummy_hcd [ 1022.230612][ T5851] usb 1-1: USB disconnect, device number 74 [ 1022.232677][ T4373] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1022.353578][ T4314] usb 4-1: no configurations [ 1022.358223][ T4314] usb 4-1: can't read configurations, error -22 [ 1022.414030][ T4314] usb usb4-port1: attempt power cycle [ 1022.448364][T13139] loop4: detected capacity change from 0 to 512 [ 1022.467468][ T4373] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1022.476546][T13139] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1022.492805][ T4373] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1022.512844][ T4373] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1022.528226][ T4373] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1022.541056][T13139] EXT4-fs (loop4): 1 truncate cleaned up [ 1022.547871][T13139] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1022.662905][ T27] audit: type=1800 audit(1784193612.690:17): pid=13139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2315" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 1022.714534][ T4373] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1022.733932][ T4373] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1022.752768][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1022.760925][ T4373] usb 2-1: Product: syz [ 1022.781180][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1022.782778][ T4373] usb 2-1: Manufacturer: syz [ 1022.795959][ T4373] cdc_wdm 2-1:1.0: skipping garbage [ 1022.801666][ T4373] cdc_wdm 2-1:1.0: skipping garbage [ 1022.897936][ T4373] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1022.954742][ T4373] cdc_wdm 2-1:1.0: Unknown control protocol [ 1023.468470][ T4373] usb 2-1: USB disconnect, device number 76 [ 1023.547529][ T4314] usb 4-1: new full-speed USB device number 72 using dummy_hcd [ 1023.625131][ T4314] usb 4-1: no configurations [ 1023.629781][ T4314] usb 4-1: can't read configurations, error -22 [ 1023.792936][ T4314] usb 4-1: new full-speed USB device number 73 using dummy_hcd [ 1023.809453][T13154] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2321'. [ 1023.833855][ T4314] usb 4-1: no configurations [ 1023.838499][ T4314] usb 4-1: can't read configurations, error -22 [ 1023.852416][ T4314] usb usb4-port1: unable to enumerate USB device [ 1024.672213][T13172] loop4: detected capacity change from 0 to 1024 [ 1024.679182][ T4314] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1024.719562][T13172] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1024.730166][T13172] ext4 filesystem being mounted at /467/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1024.870406][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1024.930426][ T4314] usb 2-1: device descriptor read/64, error -71 [ 1025.972315][T13191] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2333'. [ 1025.984667][T13191] device ip6gre1 entered promiscuous mode [ 1026.145464][T13197] loop4: detected capacity change from 0 to 1024 [ 1026.358032][T13197] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1026.374847][T13197] ext4 filesystem being mounted at /471/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1027.174596][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1027.191139][T13211] loop5: detected capacity change from 0 to 256 [ 1028.242855][ T14] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1028.337991][ T5048] usb 4-1: new full-speed USB device number 74 using dummy_hcd [ 1028.439922][T13231] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2348'. [ 1028.460167][ T14] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1028.471823][T13231] device ip6gre1 entered promiscuous mode [ 1028.477695][ T14] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1028.495215][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1028.509365][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1028.521643][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1028.584155][ T14] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1028.599550][ T5048] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1028.610207][ T5048] usb 4-1: config 0 has no interfaces? [ 1028.621660][ T14] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1028.630095][ T14] usb 5-1: Product: syz [ 1028.642863][ T14] usb 5-1: Manufacturer: syz [ 1028.674850][ T5048] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1028.712965][ T5048] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.723353][ T14] cdc_wdm 5-1:1.0: skipping garbage [ 1028.728582][ T14] cdc_wdm 5-1:1.0: skipping garbage [ 1028.752285][ T14] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1028.775370][ T5048] usb 4-1: Product: syz [ 1028.779571][ T5048] usb 4-1: Manufacturer: syz [ 1028.789674][ T14] cdc_wdm 5-1:1.0: Unknown control protocol [ 1028.796365][ T5048] usb 4-1: SerialNumber: syz [ 1028.861306][ T5048] usb 4-1: config 0 descriptor?? [ 1029.109657][ T5048] usb 5-1: USB disconnect, device number 71 [ 1029.645854][T13249] loop5: detected capacity change from 0 to 1024 [ 1029.694565][T13249] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1029.710147][T13249] ext4 filesystem being mounted at /227/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1029.772155][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1029.826698][T13254] loop5: detected capacity change from 0 to 256 [ 1030.002961][ T5048] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1030.736582][ T5048] usb 5-1: device descriptor read/64, error -71 [ 1030.895672][ T4316] usb 4-1: USB disconnect, device number 74 [ 1030.987035][T13269] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2360'. [ 1031.294994][T13285] loop1: detected capacity change from 0 to 1024 [ 1031.349513][T13285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1031.359599][T13285] ext4 filesystem being mounted at /479/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1031.647012][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1031.832837][ T4373] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1031.996060][ T5048] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1032.118947][ T4373] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1032.189274][ T4373] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1032.421184][ T4373] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1032.499573][ T4373] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1032.502862][ T5048] usb 5-1: Using ep0 maxpacket: 8 [ 1032.540695][ T4373] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1032.542955][ T5048] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1032.588461][ T4373] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1032.611632][ T5048] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1032.620967][ T5048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1032.629160][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1032.637658][ T5048] usb 5-1: config 0 descriptor?? [ 1032.651389][ T4373] usb 1-1: Product: syz [ 1032.661503][ T4373] usb 1-1: Manufacturer: syz [ 1032.685413][ T4373] cdc_wdm 1-1:1.0: skipping garbage [ 1032.692887][ T4373] cdc_wdm 1-1:1.0: skipping garbage [ 1032.709426][ T4373] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1032.717085][ T4373] cdc_wdm 1-1:1.0: Unknown control protocol [ 1032.818304][T13318] loop3: detected capacity change from 0 to 512 [ 1032.852926][ T4315] usb 2-1: new full-speed USB device number 79 using dummy_hcd [ 1032.859210][ T5048] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1032.897514][ T4373] usb 1-1: USB disconnect, device number 75 [ 1032.924870][T13318] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.2378: bg 0: block 104: invalid block bitmap [ 1033.055047][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1033.072791][ T4315] usb 2-1: config 0 has no interfaces? [ 1033.085067][ T4315] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1033.090727][T13318] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6180: Corrupt filesystem [ 1033.103258][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.121928][ T4315] usb 2-1: Product: syz [ 1033.128596][T13318] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.2378: invalid indirect mapped block 1 (level 1) [ 1033.134890][ T4315] usb 2-1: Manufacturer: syz [ 1033.149266][T13318] EXT4-fs (loop3): 1 truncate cleaned up [ 1033.150034][ T4315] usb 2-1: SerialNumber: syz [ 1033.155166][T13318] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1033.164269][ T4315] usb 2-1: config 0 descriptor?? [ 1033.244296][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1033.475089][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.493485][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.511964][T13337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1033.522146][T13337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1033.693076][ T4315] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1033.880380][ T4315] usb 1-1: device descriptor read/64, error -71 [ 1034.303016][ T4315] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1034.522945][ T4315] usb 1-1: device descriptor read/64, error -71 [ 1034.652951][ T4315] usb usb1-port1: attempt power cycle [ 1034.710840][ T4314] usb 5-1: USB disconnect, device number 73 [ 1034.888151][ T27] audit: type=1326 audit(1784193624.950:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1035.410463][ T27] audit: type=1326 audit(1784193624.950:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1035.539180][ T27] audit: type=1326 audit(1784193624.950:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1035.680490][ T9148] usb 2-1: USB disconnect, device number 79 [ 1035.706641][ T27] audit: type=1326 audit(1784193624.950:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1035.741855][ T27] audit: type=1326 audit(1784193624.950:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1035.835001][ T27] audit: type=1326 audit(1784193624.950:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1035.888963][ T27] audit: type=1326 audit(1784193624.950:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1035.927814][ T27] audit: type=1326 audit(1784193624.950:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13362 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1036.040544][ T27] audit: type=1326 audit(1784193625.720:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7f2033f1d9 code=0x7ffc0000 [ 1036.091807][ T27] audit: type=1326 audit(1784193625.720:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.3.2393" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7f2039de59 code=0x7ffc0000 [ 1036.770169][ T9148] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1036.922933][ T4314] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1036.987231][ T9148] usb 1-1: Using ep0 maxpacket: 8 [ 1036.994297][ T9148] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1036.995069][T13395] loop3: detected capacity change from 0 to 1024 [ 1037.023025][T13397] loop1: detected capacity change from 0 to 512 [ 1037.032985][ T9148] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1037.044383][T13397] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1037.083688][ T9148] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.089729][T13397] EXT4-fs (loop1): 1 truncate cleaned up [ 1037.102955][T13397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1037.112860][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 1037.121152][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.137713][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.153548][ T4314] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1037.162842][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.173038][ T4314] usb 5-1: config 0 descriptor?? [ 1037.173846][T13395] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1037.179792][ T4314] hub 5-1:0.0: USB hub found [ 1037.199410][ T9148] usb 1-1: config 0 descriptor?? [ 1037.217564][T13395] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1037.341431][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1037.400418][ T4314] hub 5-1:0.0: 1 port detected [ 1037.435997][ T9148] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1038.243922][T13408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.264347][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1038.323009][T13410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.333584][T13410] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.341185][T13408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.367060][T13409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.396270][T13409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.420125][T13415] loop5: detected capacity change from 0 to 512 [ 1038.431610][T13409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1038.442959][ T4314] hub 5-1:0.0: hub_hub_status failed (err = -71) [ 1038.449332][ T4314] hub 5-1:0.0: config failed, can't get hub status (err -71) [ 1038.475292][T13409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1038.498878][ T4314] usbhid 5-1:0.0: can't add hid device: -71 [ 1038.506208][ T4314] usbhid: probe of 5-1:0.0 failed with error -71 [ 1038.542279][T13415] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1038.553995][ T4314] usb 5-1: USB disconnect, device number 74 [ 1038.588649][T13415] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1038.693574][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1038.729435][T13425] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2412'. [ 1038.742578][T13425] device ip6gre1 entered promiscuous mode [ 1038.772955][ T4315] usb 2-1: new full-speed USB device number 80 using dummy_hcd [ 1039.047934][ T4315] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.059803][ T4315] usb 2-1: config 0 has no interfaces? [ 1039.091291][ T4315] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1039.101083][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1039.208270][ T4315] usb 2-1: Product: syz [ 1039.269767][ T4315] usb 2-1: Manufacturer: syz [ 1039.352558][ T4315] usb 2-1: SerialNumber: syz [ 1039.569273][ T4315] usb 2-1: config 0 descriptor?? [ 1039.573044][ T4314] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1039.619736][ T4371] usb 1-1: USB disconnect, device number 79 [ 1039.775596][ T4314] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1039.806099][ T4314] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1039.843944][ T4314] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1039.861632][T13444] loop3: detected capacity change from 0 to 1024 [ 1039.868443][ T4314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1039.880440][ T4314] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1039.895005][ T4314] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1039.907723][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1039.916239][ T4314] usb 6-1: Product: syz [ 1039.920507][ T4314] usb 6-1: Manufacturer: syz [ 1039.930580][ T4314] cdc_wdm 6-1:1.0: skipping garbage [ 1039.937202][ T4314] cdc_wdm 6-1:1.0: skipping garbage [ 1039.952057][T13444] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1039.968050][ T4314] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1039.976544][ T4314] cdc_wdm 6-1:1.0: Unknown control protocol [ 1039.983362][T13444] ext4 filesystem being mounted at /444/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1040.049791][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1040.092875][ T4371] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1040.101006][T13448] loop3: detected capacity change from 0 to 512 [ 1040.114963][T13448] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1040.141986][ T4314] usb 6-1: USB disconnect, device number 41 [ 1040.143522][T13448] EXT4-fs (loop3): 1 truncate cleaned up [ 1040.159426][T13448] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1040.182595][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 1040.182634][ T27] audit: type=1800 audit(1784193630.240:30): pid=13448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2418" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 1040.272825][ T4371] usb 1-1: Using ep0 maxpacket: 32 [ 1040.281026][ T4371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1040.282543][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1040.292431][ T4371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1040.308044][ T4371] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1040.317410][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1040.357749][ T4371] usb 1-1: config 0 descriptor?? [ 1040.370638][ T4371] hub 1-1:0.0: USB hub found [ 1041.233836][ T4371] hub 1-1:0.0: 1 port detected [ 1041.382897][ T4314] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1041.403839][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.414748][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1041.541417][ T14] usb 2-1: USB disconnect, device number 80 [ 1041.547693][ T4314] usb 6-1: device descriptor read/64, error -71 [ 1041.795742][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1041.922319][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.168949][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.295409][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.337131][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.398004][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.634565][T13436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1042.664649][T13436] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1042.707906][ T4371] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 1042.714345][ T4371] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 1042.724972][ T4371] usbhid 1-1:0.0: can't add hid device: -32 [ 1042.730966][ T4371] usbhid: probe of 1-1:0.0 failed with error -32 [ 1042.843504][T13468] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2424'. [ 1043.409805][ T4371] usb 1-1: USB disconnect, device number 80 [ 1043.492274][T13473] loop1: detected capacity change from 0 to 1024 [ 1043.572639][T13477] loop3: detected capacity change from 0 to 1024 [ 1043.625452][T13473] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:477: comm syz.1.2425: Invalid block bitmap block 0 in block_group 0 [ 1043.651193][T13473] Quota error (device loop1): write_blk: dquota write failed [ 1043.667747][T13473] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1043.680404][T13473] EXT4-fs error (device loop1): ext4_acquire_dquot:6841: comm syz.1.2425: Failed to acquire dquot type 0 [ 1043.697628][T13473] EXT4-fs error (device loop1): ext4_free_blocks:6220: comm syz.1.2425: Freeing blocks not in datazone - block = 0, count = 4096 [ 1043.719895][T13473] EXT4-fs error (device loop1): ext4_read_inode_bitmap:140: comm syz.1.2425: Invalid inode bitmap blk 0 in block_group 0 [ 1043.733714][T11647] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 1043.743990][T11647] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:26: Failed to release dquot type 0 [ 1043.775013][T13473] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem [ 1043.799363][T13473] EXT4-fs (loop1): 1 orphan inode deleted [ 1043.827785][T13473] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1043.897037][T13477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1044.129195][T13477] ext4 filesystem being mounted at /448/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1044.408993][ T4371] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1044.422967][ T4314] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1044.602971][ T4314] usb 6-1: Using ep0 maxpacket: 32 [ 1044.614945][ T4371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1044.644422][ T4314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1044.673966][ T4371] usb 1-1: config 64 has an invalid interface number: 44 but max is 0 [ 1044.752868][ T4314] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1044.763133][ T4371] usb 1-1: config 64 has no interface number 0 [ 1044.788868][ T4371] usb 1-1: config 64 interface 44 altsetting 7 endpoint 0x83 has an invalid bInterval 57, changing to 9 [ 1044.831095][ T4314] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1044.844626][ T4371] usb 1-1: config 64 interface 44 has no altsetting 0 [ 1044.860630][ T4314] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1044.871533][ T4371] usb 1-1: New USB device found, idVendor=07c0, idProduct=158b, bcdDevice=d9.d2 [ 1044.881468][ T4371] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.890429][ T4314] usb 6-1: config 0 descriptor?? [ 1044.896374][ T4371] usb 1-1: Product: syz [ 1044.900968][ T4371] usb 1-1: Manufacturer: syz [ 1044.906862][ T4314] hub 6-1:0.0: USB hub found [ 1044.912292][ T4371] usb 1-1: SerialNumber: syz [ 1044.933764][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1044.937016][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1044.940468][T11659] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-7 [ 1044.987669][T11659] EXT4-fs error (device loop1): ext4_release_dquot:6877: comm kworker/u4:34: Failed to release dquot type 0 [ 1045.108102][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2433'. [ 1045.110890][ T4314] hub 6-1:0.0: 1 port detected [ 1045.174415][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.269403][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.333554][T13498] bond2: (slave geneve2): Error -99 calling set_mac_address [ 1045.362060][T13478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.388493][T13505] program syz.1.2434 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1045.394081][T13478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.494765][ T4371] iowarrior 1-1:64.44: no interrupt-out endpoint found [ 1045.504862][T13474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1045.538430][ T4371] usb 1-1: USB disconnect, device number 81 [ 1045.540331][T13474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1045.629553][ T4314] hub 6-1:0.0: hub_hub_status failed (err = -71) [ 1045.642111][ T4314] hub 6-1:0.0: config failed, can't get hub status (err -71) [ 1045.695266][ T4314] usbhid 6-1:0.0: can't add hid device: -71 [ 1045.701279][ T4314] usbhid: probe of 6-1:0.0 failed with error -71 [ 1045.759997][ T4314] usb 6-1: USB disconnect, device number 43 [ 1045.926020][T13513] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2438'. [ 1047.998162][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2443'. [ 1053.009264][ T27] audit: type=1326 audit(1784193643.070:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1053.503051][ T4314] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1053.580485][ T27] audit: type=1326 audit(1784193643.110:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1053.732902][ T4314] usb 5-1: Using ep0 maxpacket: 8 [ 1053.754428][ T4314] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1053.810068][ T27] audit: type=1326 audit(1784193643.120:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1053.838261][ T27] audit: type=1326 audit(1784193643.120:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1053.867024][ T27] audit: type=1326 audit(1784193643.120:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1053.895283][ T27] audit: type=1326 audit(1784193643.120:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1053.919546][ T4314] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1053.919574][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.947965][ T4314] usb 5-1: config 0 descriptor?? [ 1053.958086][ T27] audit: type=1326 audit(1784193643.130:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1053.994326][ T27] audit: type=1326 audit(1784193643.130:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1054.022095][ T27] audit: type=1326 audit(1784193643.140:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13547 comm="syz.5.2449" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fef44f9de59 code=0x7ffc0000 [ 1054.192598][ T4314] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1054.282984][ T5048] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1054.321002][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.327418][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.472877][ T5048] usb 1-1: Using ep0 maxpacket: 32 [ 1054.483570][ T5048] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1054.503465][ T5048] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1054.519335][ T5048] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1054.530168][ T5048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1054.578772][ T5048] usb 1-1: config 0 descriptor?? [ 1054.592173][ T5048] hub 1-1:0.0: USB hub found [ 1054.802190][ T5048] hub 1-1:0.0: 1 port detected [ 1057.713208][T13575] loop1: detected capacity change from 0 to 2048 [ 1057.724925][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.774175][ T5048] hub 1-1:0.0: hub_hub_status failed (err = -32) [ 1057.780558][ T5048] hub 1-1:0.0: config failed, can't get hub status (err -32) [ 1057.793635][T13560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.814415][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.834870][T13560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.855123][T13553] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1057.887414][ T5048] usbhid 1-1:0.0: can't add hid device: -32 [ 1057.916746][ T5048] usbhid: probe of 1-1:0.0 failed with error -32 [ 1057.934353][T13553] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1057.965680][T13575] loop1: p1 < > p4 [ 1057.971035][T13575] loop1: p4 size 8388608 extends beyond EOD, truncated [ 1058.893126][ T4314] usb 1-1: USB disconnect, device number 82 [ 1059.034742][ T4314] usb 5-1: USB disconnect, device number 75 [ 1060.388172][T13604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1060.403233][T13604] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1060.517288][T13555] udevd[13555]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 1060.624242][T13555] udevd[13555]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory [ 1063.458235][T13629] loop1: detected capacity change from 0 to 256 [ 1063.673372][T13632] loop1: detected capacity change from 0 to 128 [ 1063.694033][ T4371] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1063.714402][ T5048] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1063.722486][ T4314] usb 4-1: new full-speed USB device number 75 using dummy_hcd [ 1063.902962][ T5048] usb 6-1: Using ep0 maxpacket: 8 [ 1063.913521][ T4371] usb 1-1: Using ep0 maxpacket: 8 [ 1063.921613][ T4314] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1063.934637][ T4371] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1063.943528][ T5048] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1063.982933][ T4314] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1063.992123][ T4371] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1064.015454][ T5048] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1064.040376][ T4314] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1064.054691][ T4371] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1064.065058][ T5048] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.082854][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1064.090891][ T4314] usb 4-1: Product: syz [ 1064.097464][ T4371] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1064.138696][ T5048] usb 6-1: config 0 descriptor?? [ 1064.154958][ T4314] usb 4-1: Manufacturer: syz [ 1064.160042][ T4371] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1064.182827][ T4314] usb 4-1: SerialNumber: syz [ 1064.212277][ T4314] usb 4-1: config 0 descriptor?? [ 1064.217684][T13640] loop1: detected capacity change from 0 to 512 [ 1064.224297][ T4371] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1064.251720][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.306860][T13640] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1064.332552][T13640] ext4 filesystem being mounted at /499/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1064.369212][ T5048] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1064.509251][ T4371] usb 1-1: usb_control_msg returned -32 [ 1064.521683][ T4371] usbtmc 1-1:16.0: can't read capabilities [ 1064.692390][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1064.740209][ T5048] usb 1-1: USB disconnect, device number 83 [ 1064.907800][T13626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1064.939270][T13626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1064.982815][T13626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.013567][T13626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1065.047215][ T9148] usb 6-1: USB disconnect, device number 44 [ 1065.292949][ T5048] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1065.371450][T13654] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2482'. [ 1065.482776][ T5048] usb 1-1: Using ep0 maxpacket: 8 [ 1065.489636][ T5048] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1065.507341][ T5048] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1065.538030][ T5048] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1065.561185][ T5048] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1065.571635][ T5048] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1065.598073][ T5048] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1065.623975][ T5048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.875230][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1065.902004][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.130730][T13624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1066.143233][T13664] loop5: detected capacity change from 0 to 2048 [ 1066.144664][T13624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1066.195404][T13664] loop5: p1 < > p4 [ 1066.201886][T13664] loop5: p4 size 8388608 extends beyond EOD, truncated [ 1066.374667][ T5048] usb 1-1: usb_control_msg returned -71 [ 1066.382360][ T5048] usbtmc 1-1:16.0: can't read capabilities [ 1066.416304][ T5048] usb 1-1: USB disconnect, device number 84 [ 1066.481262][T13666] loop4: detected capacity change from 0 to 1024 [ 1066.511593][T13666] EXT4-fs: Ignoring removed nobh option [ 1066.526452][ T4314] usb 4-1: USB disconnect, device number 75 [ 1066.540195][T13666] EXT4-fs: Ignoring removed i_version option [ 1066.589556][T13666] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1066.747300][T13671] loop3: detected capacity change from 0 to 128 [ 1066.748708][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1066.982047][T13673] loop5: detected capacity change from 0 to 136 [ 1067.083130][T13675] loop4: detected capacity change from 0 to 512 [ 1067.117930][T13673] rock: directory entry would overflow storage [ 1067.147152][T13675] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1067.182983][T13673] rock: sig=0x4f50, size=4, remaining=3 [ 1067.200617][T13673] iso9660: Corrupted directory entry in block 2 of inode 1472 [ 1067.225237][T13675] EXT4-fs (loop4): 1 truncate cleaned up [ 1067.244101][T13675] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 1068.045446][T13692] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2494'. [ 1068.962928][ T4371] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1068.987214][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1069.152775][ T4371] usb 1-1: Using ep0 maxpacket: 8 [ 1069.159448][ T4371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1069.256570][ T4371] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1069.286201][ T4371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1069.336345][ T4371] usb 1-1: config 0 descriptor?? [ 1069.414911][T13716] loop3: detected capacity change from 0 to 128 [ 1069.567292][ T4371] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1069.622800][ T4314] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1069.812932][ T5048] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1069.827288][ T4314] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1069.851518][ T4314] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1069.878741][ T4314] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1069.890465][ T4314] usb 6-1: Product: syz [ 1069.900671][ T4314] usb 6-1: Manufacturer: syz [ 1069.908641][ T4314] usb 6-1: SerialNumber: syz [ 1069.919509][ T4314] usb 6-1: config 0 descriptor?? [ 1070.022856][ T5048] usb 5-1: Using ep0 maxpacket: 8 [ 1070.033313][ T5048] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1070.069112][ T5048] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1070.103097][T13702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.197094][T13702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.259203][ T5048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1070.327124][T13702] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1070.367141][ T5048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1070.425138][T13702] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1070.468722][ T5048] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1070.669946][ T5048] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1070.794169][ T5048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1070.867628][ T14] usb 1-1: USB disconnect, device number 85 [ 1071.018112][T13737] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2509'. [ 1071.093090][ T5048] usb 5-1: usb_control_msg returned -32 [ 1071.093382][T13739] loop3: detected capacity change from 0 to 512 [ 1071.098702][ T5048] usbtmc 5-1:16.0: can't read capabilities [ 1071.172319][T13739] EXT4-fs error (device loop3): __ext4_iget:5102: inode #11: block 1: comm syz.3.2510: invalid block [ 1071.217962][T13739] EXT4-fs error (device loop3): ext4_orphan_get:1410: comm syz.3.2510: couldn't read orphan inode 11 (err -117) [ 1071.300771][T13739] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1072.036391][T13718] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 1072.089679][ T4373] usb 5-1: USB disconnect, device number 76 [ 1072.100592][T13745] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1072.117630][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1072.284182][ T14] usb 6-1: USB disconnect, device number 45 [ 1072.382850][ T5851] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1072.584382][ T5851] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1072.643062][ T5851] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1072.686007][ T5851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1074.535468][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1074.560532][ T4373] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 1074.592840][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1074.688138][ T5851] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1074.773256][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1074.781370][ T5851] usb 2-1: Product: syz [ 1074.793229][ T5851] usb 2-1: Manufacturer: syz [ 1074.847628][ T5851] cdc_wdm 2-1:1.0: skipping garbage [ 1074.873906][ T5851] cdc_wdm 2-1:1.0: skipping garbage [ 1074.893079][ T5851] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1074.899025][ T5851] cdc_wdm 2-1:1.0: Unknown control protocol [ 1074.942846][ T4317] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1075.044903][ T5851] usb 2-1: USB disconnect, device number 81 [ 1075.153226][ T4317] usb 6-1: Using ep0 maxpacket: 8 [ 1075.169474][ T4317] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.222507][ T4317] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1075.229910][T13787] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1075.241642][ T4317] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.604712][ T4317] usb 6-1: config 0 descriptor?? [ 1075.647318][T13796] netlink: 'syz.3.2530': attribute type 12 has an invalid length. [ 1075.753511][ T5851] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1075.954322][ T5851] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1076.186201][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1076.892822][ T5851] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1076.972606][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.269290][ T4317] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1077.422571][ T5851] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1077.432313][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1077.443600][ T5851] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1077.453059][T13801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1077.643777][ T5851] usb 2-1: string descriptor 0 read error: -71 [ 1077.643777][T13801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1077.692985][ T5851] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1077.714990][ T5851] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1077.771241][ T14] usb 6-1: USB disconnect, device number 46 [ 1077.791347][ T5851] usb 2-1: can't set config #1, error -71 [ 1077.836118][ T5851] usb 2-1: USB disconnect, device number 82 [ 1077.922921][ T5048] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1078.115084][ T5048] usb 1-1: Using ep0 maxpacket: 8 [ 1078.122017][ T5048] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1078.147834][ T5048] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1078.222900][ T5048] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1078.256117][T13819] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2538'. [ 1078.259090][ T5048] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1078.357391][ T5048] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1078.416220][ T5048] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1078.474032][ T5048] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1078.719338][ T5048] usb 1-1: usb_control_msg returned -32 [ 1078.731807][ T5048] usbtmc 1-1:16.0: can't read capabilities [ 1078.923025][ T5048] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1079.132854][ T5048] usb 6-1: device descriptor read/64, error -71 [ 1079.295649][ T4321] usb 1-1: USB disconnect, device number 86 [ 1079.304701][T13804] usbtmc 1-1:16.0: usb_control_msg returned -71 [ 1079.412185][T13833] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1079.420438][ T5048] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1079.593158][ T5048] usb 6-1: device descriptor read/64, error -71 [ 1079.723144][ T5048] usb usb6-port1: attempt power cycle [ 1079.822386][T13841] loop3: detected capacity change from 0 to 1024 [ 1079.938891][T13841] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1079.960824][T13841] ext4 filesystem being mounted at /482/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1080.022921][ T4321] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1080.132950][ T5048] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1080.158347][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1080.189490][ T5048] usb 6-1: device descriptor read/8, error -71 [ 1080.222869][ T4321] usb 1-1: Using ep0 maxpacket: 8 [ 1080.234961][ T4321] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 1080.263642][ T4321] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1080.282897][ T4321] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1080.311715][T13849] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1080.349215][ T4321] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1080.379791][ T4321] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1080.439199][ T4321] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1080.466495][ T4321] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1080.480632][ T5048] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1080.533660][ T5048] usb 6-1: device descriptor read/8, error -71 [ 1080.653073][ T5048] usb usb6-port1: unable to enumerate USB device [ 1080.701512][T13859] netlink: 'syz.3.2552': attribute type 39 has an invalid length. [ 1080.708011][T13855] loop4: detected capacity change from 0 to 4096 [ 1080.749014][ T4321] usb 1-1: usb_control_msg returned -71 [ 1080.766916][ T4321] usbtmc 1-1:16.0: can't read capabilities [ 1080.777595][ T4314] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 1080.805035][T13855] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1080.840120][ T4321] usb 1-1: USB disconnect, device number 87 [ 1081.002474][ T4314] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1081.021630][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1081.027540][ T4314] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1081.052816][ T4314] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1081.074063][ T4314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1081.122648][ T4314] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1081.213492][ T4314] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1081.222584][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1081.243103][ T4314] usb 2-1: Product: syz [ 1081.247305][ T4314] usb 2-1: Manufacturer: syz [ 1081.292378][ T4314] cdc_wdm 2-1:1.0: skipping garbage [ 1081.309020][ T4314] cdc_wdm 2-1:1.0: skipping garbage [ 1081.348600][ T4314] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 1081.378765][ T4314] cdc_wdm 2-1:1.0: Unknown control protocol [ 1082.513270][T13853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1082.648753][T13853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1082.890967][T13884] loop3: detected capacity change from 0 to 512 [ 1082.910986][T13884] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1083.074073][T13892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1083.105042][T13892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1083.224988][T13894] loop5: detected capacity change from 0 to 1024 [ 1083.254186][T13894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1083.277491][T13894] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1083.373848][T13894] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1083.662788][T13905] device gtp3 entered promiscuous mode [ 1083.853717][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1083.996394][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1084.519503][ T4321] usb 2-1: USB disconnect, device number 83 [ 1084.574434][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1084.884105][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.282952][ T5048] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1085.502800][ T5048] usb 6-1: Using ep0 maxpacket: 8 [ 1085.508841][ T5048] usb 6-1: no configurations [ 1085.531650][ T5048] usb 6-1: can't read configurations, error -22 [ 1085.607688][T13927] netlink: 'syz.4.2577': attribute type 1 has an invalid length. [ 1085.689673][T13927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1085.714847][ T5048] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1085.745144][T13932] device bond3 entered promiscuous mode [ 1085.810011][T13927] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2577'. [ 1085.855025][T13927] netlink: 'syz.4.2577': attribute type 1 has an invalid length. [ 1085.901434][T13927] device bond3 left promiscuous mode [ 1085.913567][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1085.925776][ T5048] usb 6-1: Using ep0 maxpacket: 8 [ 1085.931733][ T5048] usb 6-1: no configurations [ 1085.946346][T13927] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1085.966059][ T5048] usb 6-1: can't read configurations, error -22 [ 1085.989183][ T5048] usb usb6-port1: attempt power cycle [ 1086.433093][ T5048] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1086.488494][ T5048] usb 6-1: Using ep0 maxpacket: 8 [ 1086.493859][ T14] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 1086.502517][ T5048] usb 6-1: no configurations [ 1086.519474][ T5048] usb 6-1: can't read configurations, error -22 [ 1086.682909][ T5048] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1086.699642][ T14] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1086.722879][ T14] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1086.734346][ T5048] usb 6-1: Using ep0 maxpacket: 8 [ 1086.744068][ T5048] usb 6-1: no configurations [ 1086.748688][ T5048] usb 6-1: can't read configurations, error -22 [ 1086.785453][ T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1086.805750][ T5048] usb usb6-port1: unable to enumerate USB device [ 1086.836058][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1086.879712][ T14] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1086.964870][ T14] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1087.004799][ T14] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1087.038796][ T14] usb 5-1: Product: syz [ 1087.058349][ T14] usb 5-1: Manufacturer: syz [ 1087.094205][ T9148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.117825][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1087.131079][ T14] cdc_wdm 5-1:1.0: skipping garbage [ 1087.157225][ T14] cdc_wdm 5-1:1.0: skipping garbage [ 1087.190379][ T14] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1087.235316][T13951] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 1087.252937][ T14] cdc_wdm 5-1:1.0: Unknown control protocol [ 1087.340032][T13954] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1087.540671][T13940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1087.560730][T13940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1088.194619][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.335282][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.513456][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1089.605252][ T14] usb 5-1: USB disconnect, device number 78 [ 1089.872877][ T5048] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 1090.073606][ T5048] usb 4-1: Using ep0 maxpacket: 8 [ 1090.084129][ T5048] usb 4-1: no configurations [ 1090.107531][ T5048] usb 4-1: can't read configurations, error -22 [ 1090.622771][ T14] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.693274][ T5048] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 1090.814348][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1090.882851][ T5048] usb 4-1: Using ep0 maxpacket: 8 [ 1090.888700][ T5048] usb 4-1: no configurations [ 1090.921445][ T5048] usb 4-1: can't read configurations, error -22 [ 1090.948368][ T5048] usb usb4-port1: attempt power cycle [ 1091.228358][T14024] loop5: detected capacity change from 0 to 1024 [ 1091.295842][T14024] EXT4-fs: Ignoring removed nobh option [ 1091.347857][T14024] EXT4-fs: Ignoring removed i_version option [ 1091.372900][ T5048] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1091.403457][ T5048] usb 4-1: Using ep0 maxpacket: 8 [ 1091.409386][ T5048] usb 4-1: no configurations [ 1091.434488][ T5048] usb 4-1: can't read configurations, error -22 [ 1091.435376][T14024] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 1091.546887][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1091.602900][ T5048] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1091.661843][ T5048] usb 4-1: Using ep0 maxpacket: 8 [ 1091.667757][ T5048] usb 4-1: no configurations [ 1091.672371][ T5048] usb 4-1: can't read configurations, error -22 [ 1091.718161][ T5048] usb usb4-port1: unable to enumerate USB device [ 1091.736991][T14037] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2616'. [ 1091.843444][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1092.012860][ T5048] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1092.984682][ T5048] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1093.017948][ T5048] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1093.058980][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.106624][ T5048] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1093.171887][ T5048] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 1093.221394][ T5048] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 1093.233695][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.242461][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.299420][ T5048] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1093.318467][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.361748][ T5048] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1093.386197][ T5048] usb 1-1: Product: syz [ 1093.391396][ T5048] usb 1-1: Manufacturer: syz [ 1093.412252][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.441227][ T5048] cdc_wdm 1-1:1.0: skipping garbage [ 1093.455035][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.466505][ T5048] cdc_wdm 1-1:1.0: skipping garbage [ 1093.498005][ T5048] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 1093.536542][ T5048] cdc_wdm 1-1:1.0: Unknown control protocol [ 1093.570019][T14049] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.614842][T14054] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.657805][T14064] loop1: detected capacity change from 0 to 1024 [ 1093.672894][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1093.691797][T14064] EXT4-fs: Ignoring removed nobh option [ 1093.759106][T14064] EXT4-fs: Ignoring removed i_version option [ 1093.856075][T14064] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1093.884124][T14035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1093.898125][T14035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1094.043482][T14070] loop3: detected capacity change from 0 to 1024 [ 1094.117991][T14070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1094.172874][T14070] ext4 filesystem being mounted at /498/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1094.431853][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1095.067915][T14085] loop1: detected capacity change from 0 to 512 [ 1095.115071][T14085] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1095.152880][ T4314] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1095.239566][T14085] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1095.326632][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1095.364484][T14085] EXT4-fs (loop1): 1 truncate cleaned up [ 1095.386930][T14085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 1095.395710][ T4314] usb 6-1: Using ep0 maxpacket: 8 [ 1095.396511][ T4314] usb 6-1: no configurations [ 1095.396527][ T4314] usb 6-1: can't read configurations, error -22 [ 1095.538210][ T4321] usb 1-1: USB disconnect, device number 88 [ 1095.544335][ T4314] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1095.762908][ T4314] usb 6-1: Using ep0 maxpacket: 8 [ 1095.769721][ T4314] usb 6-1: no configurations [ 1095.789647][ T4314] usb 6-1: can't read configurations, error -22 [ 1095.820338][ T4314] usb usb6-port1: attempt power cycle [ 1095.956321][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1096.189324][T14109] loop1: detected capacity change from 0 to 128 [ 1096.243504][T14109] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1096.253221][ T4314] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1096.285613][ T4314] usb 6-1: Using ep0 maxpacket: 8 [ 1096.292286][T14109] ext4 filesystem being mounted at /541/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1096.308969][ T4314] usb 6-1: no configurations [ 1096.319479][ T4314] usb 6-1: can't read configurations, error -22 [ 1096.873157][ T4314] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1096.933298][ T4314] usb 6-1: Using ep0 maxpacket: 8 [ 1097.093460][ T4314] usb 6-1: no configurations [ 1097.144887][ T4314] usb 6-1: can't read configurations, error -22 [ 1097.286327][T14157] loop3: detected capacity change from 0 to 1024 [ 1097.301519][ T4314] usb usb6-port1: unable to enumerate USB device [ 1097.394780][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1097.466969][ T4373] net_ratelimit: 298 callbacks suppressed [ 1097.467098][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1097.511400][T14161] loop4: detected capacity change from 0 to 1024 [ 1097.514224][T14157] EXT4-fs: Ignoring removed nobh option [ 1097.756589][T14157] EXT4-fs: Ignoring removed i_version option [ 1097.894980][T14157] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 1097.978263][T14161] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1098.088111][T14161] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1098.449004][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1099.033887][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1099.153433][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.191367][ T5048] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.612568][T14196] loop1: detected capacity change from 0 to 512 [ 1099.648178][T14196] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 1099.661793][T14196] ext4 filesystem being mounted at /544/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1099.757040][ T4314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1099.761462][ T4270] EXT4-fs (loop1): unmounting filesystem. [ 1099.874879][ T5048] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 1099.983584][ T4321] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1100.222941][ T4373] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1100.415000][ T5048] usb 5-1: Using ep0 maxpacket: 8 [ 1100.435652][ T4373] usb 2-1: Using ep0 maxpacket: 8 [ 1100.442015][ T5048] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1100.442199][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.450603][ T5048] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1100.450631][ T5048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1100.450654][ T5048] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1100.450675][ T5048] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1100.450713][ T5048] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1100.450735][ T5048] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.482872][ T4321] usb 4-1: device descriptor read/64, error -71 [ 1100.510353][ T4373] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.639200][ T4373] usb 2-1: config 0 has no interfaces? [ 1100.650014][ T4373] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1100.663201][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.672738][ T4373] usb 2-1: Product: syz [ 1100.677798][ T5048] usb 5-1: usb_control_msg returned -32 [ 1100.678174][ T4373] usb 2-1: Manufacturer: syz [ 1100.688880][ T5048] usbtmc 5-1:16.0: can't read capabilities [ 1100.737737][ T4373] usb 2-1: SerialNumber: syz [ 1100.769302][ T4373] usb 2-1: config 0 descriptor?? [ 1100.802981][ T4321] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 1100.851803][T14208] loop5: detected capacity change from 0 to 1024 [ 1100.983081][ T4321] usb 4-1: device descriptor read/64, error -71 [ 1101.020976][T14208] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1101.061007][T14208] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1101.087387][ T4371] usb 5-1: USB disconnect, device number 79 [ 1101.099671][T14197] usbtmc 5-1:16.0: usb_control_msg returned -71 [ 1101.107637][ T4321] usb usb4-port1: attempt power cycle [ 1101.138502][T14212] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1101.226344][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1101.524894][ T4321] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1101.563550][ T4321] usb 4-1: device descriptor read/8, error -71 [ 1101.713784][ T4371] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 1101.770657][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1101.832885][ T4321] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1101.883615][ T4321] usb 4-1: device descriptor read/8, error -71 [ 1101.903053][ T4371] usb 5-1: Using ep0 maxpacket: 8 [ 1101.914951][ T4371] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1101.925237][ T4371] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1101.935454][ T4371] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1101.945848][ T4371] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1101.956165][ T4371] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1101.959757][T14236] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2663'. [ 1101.969637][ T4371] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1101.969664][ T4371] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.001639][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2663'. [ 1102.003197][ T4321] usb usb4-port1: unable to enumerate USB device [ 1102.180879][T14197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.206707][T14197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.222460][T14197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1102.238868][T14197] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1102.452488][ T4371] usb 5-1: usb_control_msg returned -71 [ 1102.467728][ T4371] usbtmc 5-1:16.0: can't read capabilities [ 1102.699445][ T4371] usb 5-1: USB disconnect, device number 80 [ 1103.218801][ T4321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.229765][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.345956][ T4373] usb 2-1: USB disconnect, device number 84 [ 1103.959127][T14259] loop5: detected capacity change from 0 to 1024 [ 1104.093406][T14259] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1104.102393][T14259] ext4 filesystem being mounted at /291/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1104.182640][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2673'. [ 1104.245129][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1104.439834][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1105.371895][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1105.456500][T14279] tc action pedit offset 132 out of bounds [ 1105.564547][T14283] sg_write: data in/out 200860/136 bytes for SCSI command 0x0-- guessing data in; [ 1105.564547][T14283] program syz.4.2678 not setting count and/or reply_len properly [ 1106.061887][T14297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1106.234575][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1106.342873][ T4371] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 1106.513256][ T4371] usb 2-1: device descriptor read/64, error -71 [ 1106.591876][T14301] loop3: detected capacity change from 0 to 1024 [ 1106.669232][T14301] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 1106.691655][T14301] ext4 filesystem being mounted at /506/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1106.792827][ T4371] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1106.957828][ T4271] EXT4-fs (loop3): unmounting filesystem. [ 1106.963990][ T4371] usb 2-1: device descriptor read/64, error -71 [ 1107.073489][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1107.084264][ T4371] usb usb2-port1: attempt power cycle [ 1107.782003][T14320] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2690'. [ 1107.791259][ T4371] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1107.823581][ T4371] usb 2-1: device descriptor read/8, error -71 [ 1108.097832][ T4371] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 1108.143527][ T4371] usb 2-1: device descriptor read/8, error -71 [ 1108.273673][ T4371] usb usb2-port1: unable to enumerate USB device [ 1108.329652][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.775776][ T4371] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1109.611960][T14350] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2702'. [ 1110.084830][ T8654] usb 2-1: new full-speed USB device number 89 using dummy_hcd [ 1110.276058][ T8654] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1110.288707][ T8654] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1110.297845][ T8654] usb 2-1: Product: syz [ 1110.302251][ T8654] usb 2-1: Manufacturer: syz [ 1110.309723][ T8654] usb 2-1: SerialNumber: syz [ 1110.331987][ T8654] usb 2-1: config 0 descriptor?? [ 1110.337250][ T5851] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 1110.527186][ T5851] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1110.536950][ T5851] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1110.550664][ T5851] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1110.587621][ T8654] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1110.599030][ T5851] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1110.616264][ T5851] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1110.625757][ T5851] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1110.637530][ T5851] usb 5-1: Product: syz [ 1110.641743][ T5851] usb 5-1: Manufacturer: syz [ 1110.666370][ T5851] cdc_wdm 5-1:1.0: skipping garbage [ 1110.675765][ T5851] cdc_wdm 5-1:1.0: skipping garbage [ 1110.681086][ T5851] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1110.868017][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.876217][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1110.925135][ T4259] usb 5-1: USB disconnect, device number 81 [ 1111.201868][ T8654] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -32 [ 1111.263134][T14366] loop5: detected capacity change from 0 to 1024 [ 1111.324250][T14366] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 1111.338446][T14366] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1111.414603][ T8578] EXT4-fs (loop5): unmounting filesystem. [ 1111.515935][ T8654] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1111.598976][ T5851] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1111.615054][ T4259] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1111.635842][T14380] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2715'. [ 1111.703028][ T8654] usb 4-1: Using ep0 maxpacket: 8 [ 1111.710654][ T8654] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1111.727790][ T8654] usb 4-1: config 0 has no interfaces? [ 1111.736033][ T8654] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1111.750601][ T8654] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1111.759763][ T8654] usb 4-1: Product: syz [ 1111.769319][ T5851] usb 1-1: device descriptor read/64, error -71 [ 1111.775952][ T8654] usb 4-1: Manufacturer: syz [ 1111.780563][ T8654] usb 4-1: SerialNumber: syz [ 1111.794259][ T8654] usb 4-1: config 0 descriptor?? [ 1111.960326][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1111.984420][ T4259] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1112.002809][ T4259] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1112.042903][ T5851] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1112.212917][ T5851] usb 1-1: device descriptor read/64, error -71 [ 1112.333348][ T5851] usb usb1-port1: attempt power cycle [ 1112.742891][ T5851] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1112.783529][ T5851] usb 1-1: device descriptor read/8, error -71 [ 1112.836833][ T8654] usb 2-1: USB disconnect, device number 89 [ 1112.845815][ T4259] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1112.856231][ T4259] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 14129, setting to 64 [ 1112.893654][ T4259] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1112.910236][ T4259] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1112.919285][ T4259] usb 5-1: Product: syz [ 1112.924260][ T4259] usb 5-1: Manufacturer: syz [ 1112.960742][ T4259] cdc_wdm 5-1:1.0: skipping garbage [ 1112.972300][ T4259] cdc_wdm 5-1:1.0: skipping garbage [ 1112.988855][ T4259] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 1113.052895][ T5851] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1113.056457][ T4373] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.093872][ T5851] usb 1-1: device descriptor read/8, error -71 [ 1113.161549][ T4373] usb 5-1: USB disconnect, device number 82 [ 1113.213585][ T5851] usb usb1-port1: unable to enumerate USB device [ 1113.583912][T14404] loop4: detected capacity change from 0 to 1024 [ 1113.783387][T14404] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 1113.801225][T14404] ext4 filesystem being mounted at /536/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1113.894904][ T4282] EXT4-fs (loop4): unmounting filesystem. [ 1114.142947][T14414] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2726'. [ 1114.193594][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1114.203691][ T9148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.003973][T14424] autofs4:pid:14424:autofs_fill_super: called with bogus options [ 1115.132807][ T8654] usb 6-1: new full-speed USB device number 59 using dummy_hcd [ 1115.140513][ T5851] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1115.169346][ T4321] usb 4-1: USB disconnect, device number 84 [ 1115.310570][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1115.312971][ T5851] usb 1-1: device descriptor read/64, error -71 [ 1115.359363][ T8654] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1115.380514][ T8914] [ 1115.382870][ T8914] ============================================ [ 1115.389020][ T8914] WARNING: possible recursive locking detected [ 1115.395177][ T8914] syzkaller #0 Not tainted [ 1115.399594][ T8914] -------------------------------------------- [ 1115.405746][ T8914] kworker/u4:0/8914 is trying to acquire lock: [ 1115.411899][ T8914] ffff8880282921e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0x15c/0x550 [ 1115.421174][ T8914] [ 1115.421174][ T8914] but task is already holding lock: [ 1115.428548][ T8914] ffff8880282929e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 1115.437622][ T8914] [ 1115.437622][ T8914] other info that might help us debug this: [ 1115.445686][ T8914] Possible unsafe locking scenario: [ 1115.445686][ T8914] [ 1115.453155][ T8914] CPU0 [ 1115.456433][ T8914] ---- [ 1115.459718][ T8914] lock(rlock-AF_UNIX); [ 1115.463969][ T8914] lock(rlock-AF_UNIX); [ 1115.468218][ T8914] [ 1115.468218][ T8914] *** DEADLOCK *** [ 1115.468218][ T8914] [ 1115.476360][ T8914] May be due to missing lock nesting notation [ 1115.476360][ T8914] [ 1115.484689][ T8914] 4 locks held by kworker/u4:0/8914: [ 1115.489978][ T8914] #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1115.501116][ T8914] #1: ffffc900047f7d00 (unix_gc_work){+.+.}-{0:0}, at: process_one_work+0x7b4/0x1160 [ 1115.510707][ T8914] #2: ffffffff8de59358 (unix_gc_lock){+.+.}-{2:2}, at: __unix_gc+0xc4/0x18a0 [ 1115.519604][ T8914] #3: ffff8880282929e8 (rlock-AF_UNIX){+.+.}-{2:2}, at: unix_collect_skb+0xb7/0x550 [ 1115.529267][ T8914] [ 1115.529267][ T8914] stack backtrace: [ 1115.535176][ T8914] CPU: 0 PID: 8914 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 1115.542734][ T8914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1115.552871][ T8914] Workqueue: events_unbound __unix_gc [ 1115.558279][ T8914] Call Trace: [ 1115.561636][ T8914] [ 1115.564662][ T8914] dump_stack_lvl+0x188/0x24e [ 1115.569424][ T8914] ? show_regs_print_info+0x12/0x12 [ 1115.574637][ T8914] ? load_image+0x410/0x410 [ 1115.579172][ T8914] __lock_acquire+0x12c8/0x7c40 [ 1115.584063][ T8914] ? verify_lock_unused+0x140/0x140 [ 1115.589273][ T8914] ? check_noncircular+0x189/0x330 [ 1115.594401][ T8914] ? lockdep_unlock+0x142/0x2e0 [ 1115.599267][ T8914] lock_acquire+0x1bb/0x4a0 [ 1115.603781][ T8914] ? unix_collect_skb+0x15c/0x550 [ 1115.608820][ T8914] ? read_lock_is_recursive+0x10/0x10 [ 1115.614202][ T8914] ? do_raw_spin_lock+0x128/0x2f0 [ 1115.619234][ T8914] ? __rwlock_init+0x140/0x140 [ 1115.624002][ T8914] _raw_spin_lock+0x2a/0x40 [ 1115.628582][ T8914] ? unix_collect_skb+0x15c/0x550 [ 1115.633615][ T8914] unix_collect_skb+0x15c/0x550 [ 1115.638479][ T8914] __unix_gc+0x10c4/0x18a0 [ 1115.642935][ T8914] ? wait_for_unix_gc+0x190/0x190 [ 1115.647972][ T8914] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 1115.653967][ T8914] ? _raw_spin_unlock_irq+0x1f/0x40 [ 1115.659175][ T8914] ? process_one_work+0x7b4/0x1160 [ 1115.664298][ T8914] process_one_work+0x8ab/0x1160 [ 1115.669248][ T8914] ? worker_detach_from_pool+0x240/0x240 [ 1115.674894][ T8914] ? _raw_spin_lock_irq+0xb7/0xf0 [ 1115.679934][ T8914] ? _raw_spin_lock_irqsave+0x100/0x100 [ 1115.685487][ T8914] ? wq_worker_running+0x97/0x190 [ 1115.690593][ T8914] worker_thread+0xaf5/0x12a0 [ 1115.695282][ T8914] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 1115.701186][ T8914] kthread+0x29d/0x330 [ 1115.705312][ T8914] ? worker_clr_flags+0x1a0/0x1a0 [ 1115.710348][ T8914] ? kthread_blkcg+0xd0/0xd0 [ 1115.714948][ T8914] ret_from_fork+0x1f/0x30 [ 1115.719401][ T8914] [ 1115.726224][ T8654] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1115.734715][ T8654] usb 6-1: Product: syz [ 1115.737575][T14440] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 1115.744742][ T8654] usb 6-1: Manufacturer: syz [ 1115.751284][ T8654] usb 6-1: SerialNumber: syz [ 1115.764563][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.770874][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.790831][ T8654] usb 6-1: config 0 descriptor?? [ 1115.832018][T14440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1115.840707][T14441] device bond1 entered promiscuous mode [ 1115.857323][T14442] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2735'. [ 1115.874590][ T5851] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 1115.894333][T14442] netlink: 'syz.3.2735': attribute type 1 has an invalid length. [ 1115.909671][T14442] device bond1 left promiscuous mode [ 1115.916825][T14442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1116.000698][ T8654] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1116.052726][ T5851] usb 1-1: device descriptor read/64, error -71 [ 1116.172848][ T5851] usb usb1-port1: attempt power cycle [ 1116.316827][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1116.582772][ T5851] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1116.603239][ T8654] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 1116.613397][ T5851] usb 1-1: device descriptor read/8, error -71 [ 1116.882723][ T5851] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 1116.913216][ T5851] usb 1-1: device descriptor read/8, error -71 [ 1117.032967][ T5851] usb usb1-port1: unable to enumerate USB device [ 1117.273046][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.281720][ T8914] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.290423][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.299120][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.354860][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1117.624164][ T8654] usb 6-1: USB disconnect, device number 59 [ 1118.312916][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.443086][ T9148] net_ratelimit: 3 callbacks suppressed [ 1119.443103][ T9148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.233206][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.317775][ T5851] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.482991][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1120.874024][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.513014][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.521538][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1121.532358][ T4315] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1122.554610][ T4259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.353122][ T8654] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.635148][ T9148] net_ratelimit: 1 callbacks suppressed [ 1124.635175][ T9148] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog