last executing test programs: 1m18.732335702s ago: executing program 1 (id=957): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)='L', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000400)={0x25b, 0x0, r4, 0xbbbbbbbb}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000001300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000680)="d4", 0x1}], 0x1}}], 0x1, 0x20000050) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000d80", 0x6) close_range(r5, 0xffffffffffffffff, 0x0) 1m16.760750055s ago: executing program 1 (id=965): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f00000005c0)={[{@discard}, {@bh}, {@nomblk_io_submit}]}, 0x1, 0x5d8, &(0x7f0000000c00)="$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") openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x30) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) io_setup(0x2, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r0, 0x4068aea3, &(0x7f0000000500)={0x8f, 0x0, 0x1}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 1m13.517067392s ago: executing program 1 (id=975): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)='L', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000400)={0x25b, 0x0, r4, 0xbbbbbbbb}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000001300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000680)="d4", 0x1}], 0x1}}], 0x1, 0x20000050) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ff", 0x7) close_range(r5, 0xffffffffffffffff, 0x0) 1m11.597482361s ago: executing program 1 (id=982): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x40, &(0x7f0000000080)={[{@bsdgroups}, {@nogrpid}]}, 0x0, 0x506, &(0x7f00000023c0)="$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") chdir(&(0x7f0000000240)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000100)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 1m10.418380708s ago: executing program 1 (id=992): socket$inet_tcp(0x2, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x22, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1m9.010370664s ago: executing program 1 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)='L', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000400)={0x25b, 0x0, r4, 0xbbbbbbbb}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000001300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000680)="d4", 0x1}], 0x1}}], 0x1, 0x20000050) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ff", 0x7) close_range(r5, 0xffffffffffffffff, 0x0) 1m8.3277374s ago: executing program 32 (id=1000): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$dri(0x0, 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f00000003c0)={&(0x7f0000000340)='L', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r3, 0xc01864ba, &(0x7f0000000400)={0x25b, 0x0, r4, 0xbbbbbbbb}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = socket$inet_sctp(0x2, 0x1, 0x84) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r6, &(0x7f0000001300)=[{{&(0x7f0000000340)={0xa, 0x4e23, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000680)="d4", 0x1}], 0x1}}], 0x1, 0x20000050) setsockopt(r6, 0x84, 0x7f, &(0x7f0000000040)="020000000d80ff", 0x7) close_range(r5, 0xffffffffffffffff, 0x0) 11.896453469s ago: executing program 3 (id=1209): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x341a82, 0x0) sendfile(r1, r1, 0x0, 0x4) r2 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, &(0x7f0000000240)=@IORING_OP_SYMLINKAT={0x26, 0x1, 0x0, r1, &(0x7f00000001c0)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f0000000200)='.\x00', 0x0, 0x0, 0x1, {0x0, r2}}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000022c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48014}, 0x24000100) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r3, 0x0, 0x0) 10.67640203s ago: executing program 3 (id=1213): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 7.908766178s ago: executing program 2 (id=1221): socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x2c}}, 0x40) 7.009375692s ago: executing program 2 (id=1224): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x18}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r2) close(r3) 6.641188373s ago: executing program 2 (id=1225): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x250, 0x85, 0x8b, 0xa3, 0x10, 0xbfd, 0x10c, 0xbbc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xfe, 0xe0, 0x2, [{{0x9, 0x4, 0x7c, 0x64, 0x0, 0x93, 0xea, 0x4b, 0x5}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.473078397s ago: executing program 4 (id=1226): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 6.31446186s ago: executing program 5 (id=1229): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x2b, 0x80801, 0x1) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x800, 0xffffffff, 0x16}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r1, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 6.312944139s ago: executing program 4 (id=1230): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 6.266855434s ago: executing program 4 (id=1231): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) 5.599491329s ago: executing program 3 (id=1232): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="01002dbd70000000000044000000080003", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="8770a754ac000000300012800b000100697036746e6c0000200002801400030000000000000000000000000000000001060012004e23000027ef003d56cbc8a1c5578b2fd97a37ca46c9754a711fa473f149fce5f80de5e6fe98f2e26cff13049fddd16b1380335369693cd3a46cb32798ca4b9e73fa397115f5edaeb4d56d2405bf768fec730741f90f80fc83db3b5622c09b923ee5c66a1e891a5fd8"], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0xfffffffffffffe29, 0x1, {0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 5.114055439s ago: executing program 3 (id=1233): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="fffffef9", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800000005000200d00000000000000000"], 0x44}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000500)={[{@fat=@debug}, {@shortname_win95}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@utf8}, {@rodir}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@nonumtail}, {@numtail}], [{@appraise}, {@subj_role={'subj_role', 0x3d, 'shortname=win95'}}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0xb}}]}, 0x1, 0x36b, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002600)='blkio.bfq.time\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCGETS2(r4, 0x802c542a, 0x0) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x5c) keyctl$revoke(0x3, r6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) memfd_secret(0x0) close_range(r8, 0xffffffffffffffff, 0x0) 4.820069373s ago: executing program 2 (id=1234): socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x2c}}, 0x40) 4.714470821s ago: executing program 0 (id=1235): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = eventfd(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x0, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB]) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x1}) write$eventfd(r2, &(0x7f0000000140)=0x7, 0x8) 4.714045022s ago: executing program 5 (id=1236): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x18}, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="540000000000000000000004000000000000000100000001001d0001000000010000000700000007442cc05000000000000000010000ee06000000080000000100000e4a000000200065000300000005000000080000000030000000000000000100000001"], 0x88}, 0x0) close(r2) close(r3) 4.713705931s ago: executing program 4 (id=1237): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e395292024042c011e710102030109022d000100001000090485000342e6"], 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) 4.381173999s ago: executing program 5 (id=1238): syz_open_dev$sg(0x0, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="ad56b287db1e57f7b0a3db92ea364143eaba7ec841abb59b14a95608c8d4a138a13c033c2f1719b6a8f809786681fff5a7056d67175c055a0e530b86856891893ab2f7aab7d7604999dcecbbe37259d90a6e0b077196638ccd1b3eb39021d7d612191e74870cb7ae885248d8a4b4726b245676527a735feab1ddd2e7dd448ed30760fc64", 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x5, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$midi(0xffffffffffffffff, &(0x7f00000005c0)="46b1e509d5b8b7c4b207c3e0af08f4c1ee10e965b80ae88a39a44e77fd6e3e1288cb694d7a2b3a2d58df574bfd6ec7d74e9006baa9dc6ebc8fb45bde80af3dc63ea7be444258d0bc21a73aaef3471c4d0c503a58a88f8b7da1f70ac543579046a967f6accb3e08497e5e4fa260b7630438070db60818ab441f2aee8b6264ab8a784c94c4628d42fd60efdec1c38a4581f5ef98da6182bdccb23ad32111f0277412", 0xa1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x2}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x6}, 0x50) socket$inet(0x2, 0x2, 0x0) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b1000", 0x2c}], 0x1}, 0x0) 4.277539027s ago: executing program 0 (id=1239): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = mmap$IORING_OFF_SQES(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000004, 0x50, 0xffffffffffffffff, 0x10000000) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x341a82, 0x0) sendfile(r1, r1, &(0x7f0000000000)=0x1, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000022c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x48014}, 0x24000100) socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r2, 0x0, 0x0) 3.226496224s ago: executing program 2 (id=1240): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000001c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x10, 0x38, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fstat(r1, &(0x7f0000000000)) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000700), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) 3.178810288s ago: executing program 3 (id=1241): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) 2.512974813s ago: executing program 3 (id=1242): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x17, 0x1, 'i'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000001c0)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 2.395715043s ago: executing program 5 (id=1243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRES16, @ANYBLOB="01002dbd70000000000044000000080003", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x4}}}, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=r4, @ANYBLOB="8770a754ac000000300012800b000100697036746e6c0000200002801400030000000000000000000000000000000001060012004e23000027ef003d56cbc8a1c5578b2fd97a37ca46c9754a711fa473f149fce5f80de5e6fe98f2e26cff13049fddd16b1380335369693cd3a46cb32798ca4b9e73fa397115f5edaeb4d56d2405bf768fec730741f90f80fc83db3b5622c09b923ee5c66a1e891a5fd8"], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r7, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0xfffffffffffffe29, 0x1, {0xc}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.372421845s ago: executing program 0 (id=1244): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ff7fb7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000008000850000001700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000086000000bf91000000000000b702000000000000850000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x900, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2.251615655s ago: executing program 0 (id=1245): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000690000000000000100000094"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000080)=0xa0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r5, 0x7ab, &(0x7f0000000280)={&(0x7f00000002c0)={{@my=0x0, 0x4000000}, {@any, 0x800000}, 0x400, "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"}, 0x418, 0x6}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) io_setup(0x30, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x14, r7, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}}, 0x48040) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r7, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x48f}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) r8 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(0x0, 0x1, &(0x7f0000000780)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0, 0x0, 0x1}]) 2.251022415s ago: executing program 2 (id=1246): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) fsopen(&(0x7f00000000c0)='hugetlbfs\x00', 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)={{0x12, 0x1, 0x250, 0x85, 0x8b, 0xa3, 0x10, 0xbfd, 0x10c, 0xbbc4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x2, 0xfe, 0xe0, 0x2, [{{0x9, 0x4, 0x7c, 0x64, 0x0, 0x93, 0xea, 0x4b, 0x5}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x40000) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.169769773s ago: executing program 4 (id=1247): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vim2m(&(0x7f0000000100), 0x80000000, 0x2) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$key(0xf, 0x3, 0x2) socket(0x2b, 0x80801, 0x1) syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x800, 0xffffffff, 0x16}, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000a700000005"], 0x48) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x8}, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0xc, 0x0, 0x9, 0x466, 0xffffffffffffffff}, 0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r1, 0x0, 0x0, 0x1f5, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.151506325s ago: executing program 0 (id=1248): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69703000) r2 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r4, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r2, &(0x7f0000000000)={0xa0000001}) 1.041932754s ago: executing program 5 (id=1249): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x181002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0x79, 0x0, 0xc}) r2 = eventfd(0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x30, 0x28, 0xd27, 0x70bd28, 0x4, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xf}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000804}, 0x40) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x0, 0x0, r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000000000"]) ioctl$KVM_CAP_X2APIC_API(r1, 0x4068aea3, &(0x7f00000000c0)={0x81, 0x0, 0x1}) write$eventfd(r2, &(0x7f0000000140)=0x7, 0x8) 930.997313ms ago: executing program 5 (id=1250): socket$nl_generic(0x10, 0x3, 0x10) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40010}, 0x14000012) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000840}, 0x880) recvmsg$can_raw(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000000)=""/34, 0x62}, {&(0x7f00000006c0)=""/117, 0x4e}], 0x2}, 0x0) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x2c}}, 0x40) 106.263902ms ago: executing program 0 (id=1251): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="fffffef9", @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e0000000000000000000800000005000200d00000000000000000"], 0x44}}, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000500)={[{@fat=@debug}, {@shortname_win95}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@uni_xlate}, {@utf8}, {@rodir}, {@uni_xlateno}, {@shortname_lower}, {@shortname_winnt}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@shortname_lower}, {@rodir}, {@nonumtail}, {@numtail}], [{@appraise}, {@subj_role={'subj_role', 0x3d, 'shortname=win95'}}, {@euid_gt}, {@pcr={'pcr', 0x3d, 0xb}}]}, 0x1, 0x36b, &(0x7f0000001480)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002600)='blkio.bfq.time\x00', 0x275a, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$TCGETS2(r4, 0x802c542a, 0x0) syz_io_uring_setup(0x9eb, &(0x7f0000000140)={0x0, 0xfad6}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x0, 0x40000000002, 0x8000000000000000, 0x8000f, 0x7fff, 0x0, 0x100, 0x10001000}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r7, 0x5760, 0x1f) keyctl$KEYCTL_WATCH_KEY(0x20, r6, r7, 0x5c) keyctl$revoke(0x3, r6) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x1, 0x0, 0x7fff0006}]}) memfd_secret(0x0) close_range(r8, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=1252): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x10000000000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, &(0x7f00000049c0), 0x0, 0x0, 0x0}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) kernel console output (not intermixed with test programs): IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.145319][ T4189] device veth1_vlan entered promiscuous mode [ 74.151659][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.165532][ T4190] device veth1_macvtap entered promiscuous mode [ 74.174617][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.183493][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.192440][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.201143][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 74.209890][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 74.273258][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.283848][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.285943][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.301996][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.313529][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.326348][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.338399][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.352735][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.363847][ T4294] Bluetooth: hci4: command 0x040f tx timeout [ 74.370337][ T4294] Bluetooth: hci3: command 0x040f tx timeout [ 74.376578][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.387136][ T4294] Bluetooth: hci2: command 0x040f tx timeout [ 74.387330][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.393684][ T4294] Bluetooth: hci1: command 0x040f tx timeout [ 74.411060][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.423695][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.438550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.447909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.456399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.459369][ T4294] Bluetooth: hci0: command 0x040f tx timeout [ 74.466505][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.479750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 74.488543][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 74.497508][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.506947][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.523908][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 74.533597][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 74.544805][ T4184] device veth0_vlan entered promiscuous mode [ 74.556326][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.565646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.580234][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.589514][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.602619][ T4190] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.615297][ T4190] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.624125][ T4190] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.634278][ T4190] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.657269][ T4184] device veth1_vlan entered promiscuous mode [ 74.667485][ T4189] device veth0_macvtap entered promiscuous mode [ 74.697787][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 74.707329][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.739298][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.781406][ T4189] device veth1_macvtap entered promiscuous mode [ 74.869247][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 74.885279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.961510][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.972434][ T3108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.988894][ T4184] device veth0_macvtap entered promiscuous mode [ 75.010161][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.034764][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.056343][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.069030][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.079578][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.091922][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.113910][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.134828][ T4184] device veth1_macvtap entered promiscuous mode [ 75.147200][ T4303] netlink: 'syz.1.2': attribute type 6 has an invalid length. [ 75.168296][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.193783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 75.211902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.221476][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.245050][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.264265][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.275620][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.287530][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.301683][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.321432][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.342648][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.395133][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.408128][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.415979][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.426823][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.457444][ T4189] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.469804][ T4189] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.481004][ T4189] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.489902][ T4189] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.516523][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.532355][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.546884][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.589523][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.608008][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.626576][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.641291][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.660810][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.693032][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.725105][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.801232][ T4294] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 75.891084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.941700][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.968126][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.991490][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.004836][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.026547][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.059251][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.100827][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.134445][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.145328][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.161900][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.208163][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.235282][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.260891][ T4294] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 76.298264][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.302536][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.310327][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.320232][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.338819][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.348065][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.396093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.442899][ T4196] Bluetooth: hci3: command 0x0419 tx timeout [ 76.452557][ T4250] Bluetooth: hci1: command 0x0419 tx timeout [ 76.461056][ T4294] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 76.477480][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.495238][ T4294] usb 3-1: Product: syz [ 76.499577][ T4294] usb 3-1: Manufacturer: syz [ 76.504891][ T4294] usb 3-1: SerialNumber: syz [ 76.508909][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.551544][ T13] Bluetooth: hci2: command 0x0419 tx timeout [ 76.558202][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 76.565904][ T4309] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 76.571536][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.585840][ T4312] Bluetooth: hci0: command 0x0419 tx timeout [ 76.675844][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.778160][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 76.840916][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 76.880585][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.161145][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 77.187813][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.392567][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 77.487289][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.531462][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.543976][ T4294] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 77.565181][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.580019][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.606552][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.629044][ T4294] usb 3-1: USB disconnect, device number 2 [ 77.656983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.669078][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.886476][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.954889][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.986586][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.260872][ T4294] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 78.310806][ T13] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 78.361238][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.370689][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 78.380675][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 78.501021][ T4241] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 78.637481][ T4332] loop3: detected capacity change from 0 to 256 [ 78.686816][ T4332] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 78.798867][ T4294] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 0 [ 78.880974][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.181136][ T4241] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 79.393848][ T4294] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 79.499308][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.507961][ T13] usb 5-1: config 0 interface 0 has no altsetting 0 [ 79.515026][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.523599][ T4241] usb 1-1: Product: syz [ 79.527811][ T4241] usb 1-1: Manufacturer: syz [ 79.536096][ T4241] usb 1-1: SerialNumber: syz [ 79.561726][ T4294] usb 3-1: can't set config #1, error -71 [ 79.595946][ T4294] usb 3-1: USB disconnect, device number 3 [ 79.615903][ T4241] usb 1-1: config 0 descriptor?? [ 79.681175][ T13] usb 5-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce [ 79.690304][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.730548][ T13] usb 5-1: Product: syz [ 79.875310][ T13] usb 5-1: Manufacturer: syz [ 79.903610][ T13] usb 5-1: SerialNumber: syz [ 79.925698][ T13] usb 5-1: config 0 descriptor?? [ 79.951006][ T4241] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 79.982916][ T13] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 80.047676][ T13] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 80.111744][ T13] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 80.162787][ T13] usb 5-1: media controller created [ 80.244921][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.438369][ T13] DVB: Unable to find symbol tda10046_attach() [ 80.448170][ T13] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 80.504021][ T13] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 81.159362][ T4353] loop1: detected capacity change from 0 to 40427 [ 81.211625][ T4353] F2FS-fs (loop1): invalid crc value [ 81.222056][ T4353] F2FS-fs (loop1): Found nat_bits in checkpoint [ 81.265317][ T4353] F2FS-fs (loop1): Start checkpoint disabled! [ 81.285979][ T4353] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 81.368992][ T4353] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.15'. [ 81.517737][ T154] attempt to access beyond end of device [ 81.517737][ T154] loop1: rw=2049, want=40968, limit=40427 [ 81.722441][ T13] dvb_usb_m920x: probe of 5-1:0.0 failed with error -71 [ 81.759124][ T13] usb 5-1: USB disconnect, device number 2 [ 82.146499][ T4241] usb 1-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 82.157186][ T4241] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 82.171120][ T4241] usb 1-1: media controller created [ 82.178340][ T4241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 83.167562][ T4241] i2c i2c-2: Added multiplexed i2c bus 3 [ 83.174162][ T4241] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 83.182892][ T4241] usb 1-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 83.192697][ T4241] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 83.257429][ T4241] DVB: Unable to find symbol r820t_attach() [ 85.117465][ T4240] hid-generic 0005:16C0:05DF.0001: item fetching failed at offset 0/1 [ 85.166522][ T4241] usb 1-1: USB disconnect, device number 2 [ 85.176570][ T4240] hid-generic: probe of 0005:16C0:05DF.0001 failed with error -22 [ 86.080312][ T4394] fuse: Bad value for 'rootmode' [ 86.513336][ T4400] loop3: detected capacity change from 0 to 40427 [ 86.537182][ T4400] F2FS-fs (loop3): invalid crc value [ 86.584563][ T4400] F2FS-fs (loop3): Found nat_bits in checkpoint [ 86.618375][ T4400] F2FS-fs (loop3): Start checkpoint disabled! [ 86.925209][ T1110] cfg80211: failed to load regulatory.db [ 87.495526][ T4394] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 87.507016][ T4394] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 87.561174][ T4394] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 87.602953][ T4400] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 87.684934][ T4415] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.27'. [ 88.056517][ T4423] binder: 4422:4423 ioctl 4018620d 0 returned -22 [ 88.122353][ T155] attempt to access beyond end of device [ 88.122353][ T155] loop3: rw=2049, want=40968, limit=40427 [ 91.013834][ T4444] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 91.246871][ T4446] syz.2.39 sent an empty control message without MSG_MORE. [ 92.767638][ T4455] loop2: detected capacity change from 0 to 40427 [ 92.820552][ T4455] F2FS-fs (loop2): invalid crc value [ 92.858120][ T4455] F2FS-fs (loop2): Found nat_bits in checkpoint [ 92.896770][ T4455] F2FS-fs (loop2): Start checkpoint disabled! [ 92.951613][ T4455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 93.046500][ T4455] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.42'. [ 94.569000][ T3056] attempt to access beyond end of device [ 94.569000][ T3056] loop2: rw=2049, want=40968, limit=40427 [ 94.718798][ T4477] ptrace attach of "./syz-executor exec"[4189] was attempted by "./syz-executor exec"[4477] [ 95.233356][ T4483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.50'. [ 95.251608][ T4483] netlink: 8 bytes leftover after parsing attributes in process `syz.3.50'. [ 97.617707][ T4508] binder: 4507:4508 ioctl 4018620d 0 returned -22 [ 98.697419][ T4530] binder: 4529:4530 unknown command 1074553619 [ 98.746442][ T4530] binder: 4529:4530 ioctl c0306201 200000000540 returned -22 [ 100.829470][ T4561] binder: BINDER_SET_CONTEXT_MGR already set [ 100.836706][ T4561] binder: 4560:4561 ioctl 4018620d 200000004a80 returned -16 [ 101.698469][ T4552] sctp: failed to load transform for md5: -2 [ 102.400734][ T4275] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 102.485678][ T4585] syz.4.77 uses obsolete (PF_INET,SOCK_PACKET) [ 102.670849][ T4275] usb 3-1: Using ep0 maxpacket: 32 [ 102.806011][ T4275] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 102.850147][ T4275] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 103.717419][ T4275] usb 3-1: config 0 has no interface number 0 [ 103.724121][ T4275] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 103.738844][ T4275] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 103.910913][ T4275] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 103.931392][ T4275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.960821][ T4275] usb 3-1: Product: syz [ 103.965034][ T4275] usb 3-1: Manufacturer: syz [ 103.972271][ T4275] usb 3-1: SerialNumber: syz [ 104.003106][ T4275] usb 3-1: config 0 descriptor?? [ 104.024298][ T4576] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 104.046726][ T4603] Zero length message leads to an empty skb [ 104.234882][ T4603] device geneve2 entered promiscuous mode [ 104.852570][ T4275] usb 3-1: probing VID:PID(0424:012C) [ 104.869035][ T4275] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 104.885699][ T4275] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 104.905131][ T4275] vub300: probe of 3-1:0.133 failed with error -22 [ 104.939090][ T4611] binder: 4610:4611 unknown command 1074553619 [ 104.990776][ T4611] binder: 4610:4611 ioctl c0306201 200000000540 returned -22 [ 105.012909][ T4275] usb 3-1: USB disconnect, device number 4 [ 105.673834][ T4619] binder: BINDER_SET_CONTEXT_MGR already set [ 105.836420][ T4619] binder: 4618:4619 ioctl 4018620d 200000004a80 returned -16 [ 106.251576][ T4626] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 109.501921][ T4652] block device autoloading is deprecated and will be removed. [ 110.065302][ T4676] binder: BINDER_SET_CONTEXT_MGR already set [ 110.090783][ T4676] binder: 4672:4676 ioctl 4018620d 200000004a80 returned -16 [ 110.519111][ T4674] kvm: pic: single mode not supported [ 110.519366][ T4674] kvm: pic: non byte read [ 110.553778][ T4674] kvm: pic: non byte read [ 111.298892][ T4695] loop2: detected capacity change from 0 to 40427 [ 111.385767][ T4695] F2FS-fs (loop2): invalid crc value [ 111.407112][ T4695] F2FS-fs (loop2): Found nat_bits in checkpoint [ 111.438240][ T4695] F2FS-fs (loop2): Start checkpoint disabled! [ 111.482845][ T4695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 111.624157][ T4695] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.105'. [ 112.918242][ T3108] attempt to access beyond end of device [ 112.918242][ T3108] loop2: rw=2049, want=40968, limit=40427 [ 113.070850][ T4312] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 113.322854][ T4312] usb 1-1: Using ep0 maxpacket: 8 [ 113.600856][ T4312] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 113.620873][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.629035][ T4312] usb 1-1: Product: syz [ 113.634574][ T4312] usb 1-1: Manufacturer: syz [ 113.640043][ T4312] usb 1-1: SerialNumber: syz [ 113.655867][ T4312] usb 1-1: config 0 descriptor?? [ 113.705715][ T4312] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 113.716183][ T4312] usb 1-1: setting power ON [ 113.722359][ T4312] dvb-usb: bulk message failed: -22 (2/0) [ 113.742922][ T4312] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 113.780999][ T4312] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 113.802995][ T4312] usb 1-1: media controller created [ 113.838853][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 113.859367][ T4312] usb 1-1: selecting invalid altsetting 6 [ 113.865615][ T4312] usb 1-1: digital interface selection failed (-22) [ 113.872568][ T4312] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 113.931160][ T4312] usb 1-1: setting power OFF [ 113.937253][ T4312] dvb-usb: bulk message failed: -22 (2/0) [ 113.944966][ T4716] binder: 4715:4716 unknown command 1074553619 [ 113.968969][ T4312] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 113.978687][ T4312] (NULL device *): no alternate interface [ 113.985207][ T4716] binder: 4715:4716 ioctl c0306201 200000000540 returned -22 [ 114.020556][ T4312] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 114.044711][ T4312] usb 1-1: USB disconnect, device number 3 [ 114.164963][ T4721] af_packet: tpacket_rcv: packet too big, clamped from 126 to 4294967286. macoff=82 [ 114.320832][ T1110] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 114.378896][ T4725] binder: 4724:4725 ioctl c0306201 0 returned -14 [ 114.710900][ T1110] usb 5-1: config 0 has no interfaces? [ 114.716591][ T1110] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 114.737549][ T1110] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.757540][ T1110] usb 5-1: config 0 descriptor?? [ 115.942229][ T4745] binder: BINDER_SET_CONTEXT_MGR already set [ 116.013163][ T4745] binder: 4744:4745 ioctl 4018620d 200000000040 returned -16 [ 116.076968][ T4718] udc-core: couldn't find an available UDC or it's busy [ 116.100104][ T4718] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 116.420776][ T13] usb 5-1: USB disconnect, device number 3 [ 116.915697][ T4740] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.924260][ T4740] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.220844][ T4312] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 117.790861][ T4312] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 117.806801][ T4312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.835262][ T4312] usb 5-1: Product: syz [ 117.848768][ T4312] usb 5-1: Manufacturer: syz [ 117.865257][ T4312] usb 5-1: SerialNumber: syz [ 117.896399][ T4312] usb 5-1: config 0 descriptor?? [ 118.180960][ T4312] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 118.252363][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.340540][ T4740] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.598612][ T4784] binder: 4783:4784 ioctl c0306201 0 returned -14 [ 119.616543][ T4784] binder: BINDER_SET_CONTEXT_MGR already set [ 119.622957][ T4784] binder: 4783:4784 ioctl 4018620d 200000004a80 returned -16 [ 119.812801][ T4740] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.821844][ T4740] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.831204][ T4740] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.840103][ T4740] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.026331][ T4740] syz.2.120 (4740) used greatest stack depth: 19840 bytes left [ 120.104661][ T4789] binder: BINDER_SET_CONTEXT_MGR already set [ 120.131459][ T4789] binder: 4787:4789 ioctl 4018620d 200000000040 returned -16 [ 120.156864][ T4791] tipc: Started in network mode [ 120.164902][ T4791] tipc: Node identity 0a255f3f8da, cluster identity 4711 [ 120.176255][ T4791] tipc: Enabled bearer , priority 0 [ 120.186975][ T4791] +: renamed from syzkaller0 [ 120.224831][ T4791] tipc: Disabling bearer [ 120.441547][ T4312] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 120.497321][ T4312] usb 5-1: USB disconnect, device number 4 [ 120.505571][ T4795] kvm: pic: single mode not supported [ 120.505652][ T4795] kvm: pic: non byte read [ 120.516483][ T4795] kvm: pic: non byte read [ 121.687375][ T4824] binder: BINDER_SET_CONTEXT_MGR already set [ 121.724785][ T4824] binder: 4823:4824 ioctl 4018620d 200000000040 returned -16 [ 121.837023][ T4832] binder: 4830:4832 ioctl c0306201 0 returned -14 [ 122.714601][ T4859] binder: 4858:4859 unknown command 1074553619 [ 122.747552][ T4859] binder: 4858:4859 ioctl c0306201 200000000540 returned -22 [ 122.756194][ T4240] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 124.251142][ T4240] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 124.309960][ T4240] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.380800][ T4240] usb 2-1: Product: syz [ 124.406425][ T4240] usb 2-1: Manufacturer: syz [ 124.436789][ T4240] usb 2-1: SerialNumber: syz [ 124.499458][ T4240] usb 2-1: config 0 descriptor?? [ 124.800896][ T4240] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 124.910673][ T4879] loop3: detected capacity change from 0 to 40427 [ 124.985108][ T4879] F2FS-fs (loop3): invalid crc value [ 125.005454][ T4879] F2FS-fs (loop3): Found nat_bits in checkpoint [ 125.040853][ T4879] F2FS-fs (loop3): Start checkpoint disabled! [ 125.059857][ T4879] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 125.130765][ T4882] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.165'. [ 125.471208][ T154] attempt to access beyond end of device [ 125.471208][ T154] loop3: rw=2049, want=40968, limit=40427 [ 125.805854][ T4890] binder: BINDER_SET_CONTEXT_MGR already set [ 125.813397][ T4891] binder: 4888:4891 unknown command 1074553619 [ 125.819605][ T4891] binder: 4888:4891 ioctl c0306201 200000000540 returned -22 [ 125.860715][ T4890] binder: 4889:4890 ioctl 4018620d 200000004a80 returned -16 [ 127.229576][ T4916] process 'syz.0.175' launched '/dev/fd/6' with NULL argv: empty string added [ 127.435687][ T4919] loop4: detected capacity change from 0 to 40427 [ 127.560480][ T4919] F2FS-fs (loop4): invalid crc value [ 127.596449][ T4919] F2FS-fs (loop4): Found nat_bits in checkpoint [ 127.640875][ T4919] F2FS-fs (loop4): Start checkpoint disabled! [ 127.647589][ T4240] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 127.662638][ T4240] usb 2-1: USB disconnect, device number 2 [ 127.686156][ T4919] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 127.801632][ T4928] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.177'. [ 128.134829][ T144] attempt to access beyond end of device [ 128.134829][ T144] loop4: rw=2049, want=40968, limit=40427 [ 128.339995][ T4934] binder: 4933:4934 unknown command 1074553619 [ 128.361001][ T4298] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.378874][ T4934] binder: 4933:4934 ioctl c0306201 200000000540 returned -22 [ 128.650707][ T4298] usb 3-1: Using ep0 maxpacket: 32 [ 128.691130][ T4937] binder: BINDER_SET_CONTEXT_MGR already set [ 128.731014][ T4937] binder: 4936:4937 ioctl 4018620d 200000000040 returned -16 [ 128.770834][ T4298] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 128.786067][ T4298] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.850843][ T4298] usb 3-1: config 0 has no interface number 0 [ 128.880852][ T4298] usb 3-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 128.909555][ T4298] usb 3-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 130.040917][ T4298] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 130.058455][ T4298] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.077885][ T4298] usb 3-1: Product: syz [ 130.198365][ T4298] usb 3-1: Manufacturer: syz [ 130.203144][ T4298] usb 3-1: SerialNumber: syz [ 130.211759][ T4298] usb 3-1: config 0 descriptor?? [ 130.239941][ T4949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 130.341447][ T4930] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.331643][ T4298] usb 3-1: probing VID:PID(0424:012C) [ 131.338284][ T4298] usb 3-1: vub300 testing BULK OUT EndPoint(0) 0B [ 131.558756][ T4960] loop0: detected capacity change from 0 to 40427 [ 131.576928][ T4298] usb 3-1: Could not find two sets of bulk-in/out endpoint pairs [ 131.590401][ T4298] vub300: probe of 3-1:0.133 failed with error -22 [ 131.616785][ T4960] F2FS-fs (loop0): invalid crc value [ 131.626069][ T4298] usb 3-1: USB disconnect, device number 5 [ 131.630713][ T4248] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 131.634699][ T4960] F2FS-fs (loop0): Found nat_bits in checkpoint [ 131.678611][ T4960] F2FS-fs (loop0): Start checkpoint disabled! [ 131.705119][ T4960] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 131.776746][ T4969] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.190'. [ 131.845543][ T4970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.191'. [ 131.931000][ T4970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 131.993043][ T4970] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.021727][ T4970] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.137690][ T4970] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.169020][ T4970] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.180816][ T4248] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 132.201378][ T4248] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.208701][ T4970] device geneve2 entered promiscuous mode [ 132.237537][ T4248] usb 2-1: Product: syz [ 132.281906][ T4248] usb 2-1: Manufacturer: syz [ 132.307015][ T4248] usb 2-1: SerialNumber: syz [ 132.332122][ T4974] binder: BINDER_SET_CONTEXT_MGR already set [ 132.346304][ T4248] usb 2-1: config 0 descriptor?? [ 132.403304][ T4974] binder: 4973:4974 ioctl 4018620d 200000000040 returned -16 [ 132.519325][ T144] attempt to access beyond end of device [ 132.519325][ T144] loop0: rw=2049, want=40968, limit=40427 [ 132.732371][ T4248] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 133.014704][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.023236][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.751075][ T4312] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 133.925450][ T4991] binder: 4990:4991 unknown command 1074553619 [ 133.936033][ T4991] binder: 4990:4991 ioctl c0306201 200000000540 returned -22 [ 134.010772][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 134.152964][ T4312] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 134.171503][ T4312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 134.220939][ T4312] usb 4-1: config 0 has no interface number 0 [ 134.228002][ T4312] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 134.246960][ T4312] usb 4-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 134.491014][ T4312] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 134.504988][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.543823][ T4312] usb 4-1: Product: syz [ 134.555773][ T4312] usb 4-1: Manufacturer: syz [ 134.570970][ T4312] usb 4-1: SerialNumber: syz [ 134.578820][ T4312] usb 4-1: config 0 descriptor?? [ 134.584152][ T4294] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 134.621279][ T4983] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 134.693006][ T4962] syz.4.189 (4962): drop_caches: 1 [ 134.709484][ T4964] syz.4.189 (4964): drop_caches: 1 [ 134.845154][ T4248] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 134.873482][ T4248] usb 2-1: USB disconnect, device number 3 [ 135.066143][ T5000] loop4: detected capacity change from 0 to 40427 [ 135.081793][ T5003] input: syz1 as /devices/virtual/input/input5 [ 135.155330][ T5000] F2FS-fs (loop4): invalid crc value [ 135.238743][ T5000] F2FS-fs (loop4): Found nat_bits in checkpoint [ 135.278211][ T4294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 135.287149][ T4294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 135.298478][ T5000] F2FS-fs (loop4): Start checkpoint disabled! [ 135.305813][ T4294] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 135.318848][ T5000] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 135.340829][ T4312] usb 4-1: probing VID:PID(0424:012C) [ 135.356154][ T4312] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 135.447835][ T4294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 136.175102][ T4312] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 136.183147][ T4294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 136.216671][ T5000] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.204'. [ 136.234495][ T4294] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 136.288561][ T4312] vub300: probe of 4-1:0.133 failed with error -22 [ 136.320861][ T4312] usb 4-1: USB disconnect, device number 2 [ 136.332159][ T4294] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 136.348040][ T4294] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 136.360954][ T4294] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 136.411427][ T5017] capability: warning: `syz.0.208' uses 32-bit capabilities (legacy support in use) [ 136.449538][ T5016] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 136.556081][ T5021] loop6: detected capacity change from 0 to 7 [ 136.572585][ T4781] attempt to access beyond end of device [ 136.572585][ T4781] loop4: rw=2049, want=40968, limit=40427 [ 136.581960][ T5016] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 136.637561][ T4349] Dev loop6: unable to read RDB block 7 [ 136.657180][ T4349] loop6: unable to read partition table [ 136.681005][ T4294] usb 3-1: string descriptor 0 read error: -22 [ 136.684138][ T4349] loop6: partition table beyond EOD, [ 136.696500][ T4294] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 136.716493][ T4349] truncated [ 136.758032][ T4294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.800336][ T5021] Dev loop6: unable to read RDB block 7 [ 136.819086][ T5021] loop6: unable to read partition table [ 136.826589][ T4294] adutux 3-1:168.0: interrupt endpoints not found [ 136.868156][ T5021] loop6: partition table beyond EOD, truncated [ 136.920087][ T5021] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 137.101291][ T4275] usb 3-1: USB disconnect, device number 6 [ 137.820700][ T4248] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 138.831612][ T4248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 138.868052][ T4248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 138.906692][ T4248] usb 1-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 138.916894][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.942421][ T4248] usb 1-1: config 0 descriptor?? [ 138.980764][ T4294] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 139.453170][ T4248] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 139.469643][ T4248] isku 0003:1E7D:319C.0002: unknown main item tag 0x0 [ 139.503618][ T4248] isku 0003:1E7D:319C.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.0-1/input0 [ 139.570709][ T4294] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.582789][ T4294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.592816][ T4294] usb 4-1: Product: syz [ 139.597034][ T4294] usb 4-1: Manufacturer: syz [ 139.602085][ T4294] usb 4-1: SerialNumber: syz [ 139.608760][ T4294] usb 4-1: config 0 descriptor?? [ 139.700866][ T4248] isku 0003:1E7D:319C.0002: couldn't init struct isku_device [ 139.708395][ T4248] isku 0003:1E7D:319C.0002: couldn't install keyboard [ 139.747615][ T4248] isku: probe of 0003:1E7D:319C.0002 failed with error -71 [ 139.798733][ T4248] usb 1-1: USB disconnect, device number 4 [ 139.871031][ T4294] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 140.081103][ T5067] fido_id[5067]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 142.060880][ T4294] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 142.768397][ T4294] usb 4-1: USB disconnect, device number 3 [ 145.188650][ T5110] syz.2.238 (5110): drop_caches: 1 [ 145.325693][ T5111] syz.2.238 (5111): drop_caches: 1 [ 145.450838][ T4275] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 145.817642][ T5110] syz.2.238 (5110): drop_caches: 1 [ 146.217688][ T5141] loop1: detected capacity change from 0 to 40427 [ 146.260795][ T4275] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 146.270017][ T4275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.285336][ T4275] usb 4-1: Product: syz [ 146.289583][ T4275] usb 4-1: Manufacturer: syz [ 146.300688][ T4275] usb 4-1: SerialNumber: syz [ 146.309892][ T4275] usb 4-1: config 0 descriptor?? [ 146.315076][ T5141] F2FS-fs (loop1): invalid crc value [ 146.337217][ T5141] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.380706][ T5141] F2FS-fs (loop1): Start checkpoint disabled! [ 146.400871][ T5141] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 146.566341][ T5148] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.248'. [ 146.650892][ T4275] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 147.036626][ T3108] attempt to access beyond end of device [ 147.036626][ T3108] loop1: rw=2049, want=40968, limit=40427 [ 147.415302][ T5154] loop0: detected capacity change from 0 to 256 [ 147.443298][ T5154] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 150.535286][ T4275] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 150.557889][ T4275] usb 4-1: USB disconnect, device number 4 [ 150.767462][ T5188] netlink: 4 bytes leftover after parsing attributes in process `syz.1.259'. [ 150.891609][ T5195] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 151.091858][ T5183] syz.0.258 (5183): drop_caches: 1 [ 151.109746][ T5187] syz.0.258 (5187): drop_caches: 1 [ 151.452786][ T5183] syz.0.258 (5183): drop_caches: 1 [ 152.433547][ T5208] kvm: pic: single mode not supported [ 152.433618][ T5208] kvm: pic: non byte read [ 152.529375][ T5208] kvm: pic: non byte read [ 152.636115][ T5214] loop3: detected capacity change from 0 to 256 [ 152.722534][ T5214] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 154.410777][ T4240] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 154.811768][ T4275] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.931279][ T4240] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 154.940433][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.948882][ T4240] usb 5-1: Product: syz [ 154.953813][ T4240] usb 5-1: Manufacturer: syz [ 154.958450][ T4240] usb 5-1: SerialNumber: syz [ 154.965749][ T4240] usb 5-1: config 0 descriptor?? [ 155.120804][ T1110] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 155.191042][ T4275] usb 4-1: config 0 has no interfaces? [ 155.196752][ T4275] usb 4-1: New USB device found, idVendor=0408, idProduct=ea42, bcdDevice=3a.da [ 155.207535][ T4275] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.227178][ T4275] usb 4-1: config 0 descriptor?? [ 155.232553][ T4240] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 155.360799][ T1110] usb 3-1: Using ep0 maxpacket: 16 [ 155.454823][ T5235] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 155.496027][ T5233] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.505642][ T5233] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.514431][ T5233] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.523206][ T5233] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 155.552781][ T5233] team0: Port device vxlan0 added [ 155.590076][ T4275] usb 4-1: USB disconnect, device number 5 [ 155.660815][ T1110] usb 3-1: unable to get BOS descriptor or descriptor too short [ 155.713704][ T5248] kvm: pic: single mode not supported [ 155.713765][ T5248] kvm: pic: non byte read [ 155.724008][ T1110] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 155.732224][ T5248] kvm: pic: non byte read [ 155.732483][ T1110] usb 3-1: can't read configurations, error -71 [ 158.752590][ T4240] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 158.826131][ T4240] usb 5-1: USB disconnect, device number 5 [ 158.838938][ T5273] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 158.979860][ T5280] netlink: 56 bytes leftover after parsing attributes in process `syz.0.290'. [ 160.490909][ T5301] binder: 5299:5301 ioctl 4018620d 0 returned -22 [ 160.566865][ T5304] loop0: detected capacity change from 0 to 256 [ 160.626742][ T5304] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 161.430713][ T4240] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 161.830858][ T4240] usb 3-1: config 0 has no interfaces? [ 161.836462][ T4240] usb 3-1: New USB device found, idVendor=0408, idProduct=ea42, bcdDevice=3a.da [ 161.890773][ T4312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 162.357768][ T4240] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.367433][ T4240] usb 3-1: config 0 descriptor?? [ 162.649646][ T5295] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.658961][ T5295] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.667844][ T5295] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.676622][ T5295] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 162.702523][ T5295] team0: Port device vxlan0 added [ 162.726664][ T4240] usb 3-1: USB disconnect, device number 9 [ 162.876286][ T4312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 162.898096][ T4312] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 163.094423][ T4312] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 163.109410][ T4312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.151647][ T4312] usb 4-1: config 0 descriptor?? [ 163.974322][ T4312] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 164.026293][ T13] usb 4-1: USB disconnect, device number 6 [ 165.314432][ T5331] syz.2.306 (5331): drop_caches: 1 [ 165.520744][ T1110] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 165.542619][ T5333] syz.2.306 (5333): drop_caches: 1 [ 166.130979][ T1110] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 166.162415][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.170561][ T1110] usb 4-1: Product: syz [ 166.175480][ T1110] usb 4-1: Manufacturer: syz [ 166.180198][ T1110] usb 4-1: SerialNumber: syz [ 166.197848][ T1110] usb 4-1: config 0 descriptor?? [ 166.502541][ T1110] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 167.409340][ T5353] binder: 5352:5353 ioctl 4018620d 0 returned -22 [ 167.486407][ T5357] loop2: detected capacity change from 0 to 256 [ 167.640847][ T5357] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 168.900823][ T4275] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 169.095588][ T5378] syz.2.319 (5378): drop_caches: 1 [ 169.153131][ T4275] usb 2-1: Using ep0 maxpacket: 8 [ 169.267930][ T5379] syz.2.319 (5379): drop_caches: 1 [ 169.273794][ T4275] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 169.291052][ T4275] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 169.310866][ T4275] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 169.327138][ T5378] syz.2.319 (5378): drop_caches: 1 [ 169.333078][ T4275] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.346856][ T4275] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 169.357586][ T4275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.671019][ T1110] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 169.691228][ T1110] usb 4-1: USB disconnect, device number 7 [ 169.710784][ T4275] usb 2-1: GET_CAPABILITIES returned 0 [ 169.716831][ T4275] usbtmc 2-1:16.0: can't read capabilities [ 169.931829][ T4275] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 169.940527][ T4196] usb 2-1: USB disconnect, device number 4 [ 170.171579][ T4275] usb 1-1: Using ep0 maxpacket: 16 [ 170.413980][ T5383] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.470944][ T4248] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 170.694062][ T4275] usb 1-1: unable to get BOS descriptor or descriptor too short [ 170.720744][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 170.728523][ T5404] binder: 5403:5404 ioctl 4018620d 0 returned -22 [ 170.793470][ T4275] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 170.802311][ T5406] usb usb8: usbfs: process 5406 (syz.1.328) did not claim interface 0 before use [ 170.810380][ T4275] usb 1-1: can't read configurations, error -71 [ 170.840927][ T4248] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 170.849856][ T4248] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 170.865975][ T4248] usb 4-1: config 0 has no interface number 0 [ 170.872500][ T4248] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 170.910677][ T4248] usb 4-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 170.956634][ T5409] loop1: detected capacity change from 0 to 256 [ 170.980080][ T5409] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 171.090848][ T4248] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 171.784686][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.800776][ T4248] usb 4-1: Product: syz [ 171.805570][ T4248] usb 4-1: Manufacturer: syz [ 171.810207][ T4248] usb 4-1: SerialNumber: syz [ 171.816856][ T4248] usb 4-1: config 0 descriptor?? [ 171.850945][ T5394] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 172.220691][ T4298] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 172.290464][ T5414] syz.0.330 (5414): drop_caches: 1 [ 172.300848][ T4248] usb 4-1: probing VID:PID(0424:012C) [ 172.310373][ T4248] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 172.330787][ T4248] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 172.362021][ T4248] vub300: probe of 4-1:0.133 failed with error -22 [ 172.389375][ T4248] usb 4-1: USB disconnect, device number 8 [ 172.461983][ T4298] usb 2-1: Using ep0 maxpacket: 32 [ 172.467737][ T5418] syz.0.330 (5418): drop_caches: 1 [ 172.582033][ T4298] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 172.597304][ T4298] usb 2-1: config 0 has no interface number 0 [ 172.682498][ T5414] syz.0.330 (5414): drop_caches: 1 [ 172.775934][ T4298] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 172.775967][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.775989][ T4298] usb 2-1: Product: syz [ 172.776004][ T4298] usb 2-1: Manufacturer: syz [ 172.776020][ T4298] usb 2-1: SerialNumber: syz [ 172.783560][ T4298] usb 2-1: config 0 descriptor?? [ 172.831972][ T4298] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 173.059110][ T4298] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 173.083777][ T4298] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 173.430704][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 91 [ 173.686010][ T5415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.331'. [ 174.267177][ T4298] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.820684][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 174.847616][ T4312] usb 2-1: USB disconnect, device number 5 [ 174.891798][ T4312] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 174.903303][ T5453] netlink: 20 bytes leftover after parsing attributes in process `syz.3.341'. [ 174.928196][ T5455] loop2: detected capacity change from 0 to 256 [ 174.953124][ T4312] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 174.989307][ T4312] quatech2 2-1:0.51: device disconnected [ 175.053382][ T5455] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 175.211001][ T4298] usb 1-1: config 0 has no interfaces? [ 175.371103][ T4298] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 175.458601][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.586781][ T4298] usb 1-1: Product: syz [ 175.656702][ T4298] usb 1-1: Manufacturer: syz [ 175.728505][ T4298] usb 1-1: SerialNumber: syz [ 175.791720][ T4298] usb 1-1: config 0 descriptor?? [ 175.858187][ T5364] Set syz1 is full, maxelem 65536 reached [ 176.283169][ T4248] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 176.560886][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 177.249647][ T4241] usb 1-1: USB disconnect, device number 7 [ 177.311011][ T4248] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 177.339655][ T4248] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.385510][ T5465] syz.2.345 (5465): drop_caches: 1 [ 177.431107][ T4248] usb 4-1: config 0 has no interface number 0 [ 177.461229][ T4248] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 177.500794][ T4248] usb 4-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 177.592920][ T5468] syz.2.345 (5468): drop_caches: 1 [ 177.740771][ T4241] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 177.750956][ T4248] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 177.796635][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.883409][ T4248] usb 4-1: Product: syz [ 177.887639][ T4248] usb 4-1: Manufacturer: syz [ 177.938097][ T4248] usb 4-1: SerialNumber: syz [ 177.959165][ T4248] usb 4-1: config 0 descriptor?? [ 177.991061][ T5460] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 178.000775][ T4241] usb 1-1: Using ep0 maxpacket: 8 [ 178.058541][ T5489] netlink: 20 bytes leftover after parsing attributes in process `syz.2.354'. [ 178.281916][ T4241] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 178.310831][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.327283][ T4241] usb 1-1: Product: syz [ 178.355407][ T4241] usb 1-1: Manufacturer: syz [ 178.369876][ T4241] usb 1-1: SerialNumber: syz [ 178.401113][ T4241] usb 1-1: config 0 descriptor?? [ 178.450828][ T4248] usb 4-1: probing VID:PID(0424:012C) [ 178.454044][ T4241] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 178.459127][ T4248] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 178.477124][ T4241] usb 1-1: setting power ON [ 178.486309][ T4241] dvb-usb: bulk message failed: -22 (2/0) [ 178.510765][ T4248] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 178.515775][ T4241] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 178.550243][ T4248] vub300: probe of 4-1:0.133 failed with error -22 [ 178.560973][ T4241] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 178.582951][ T4248] usb 4-1: USB disconnect, device number 9 [ 178.592247][ T4241] usb 1-1: media controller created [ 178.647497][ T4241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.712574][ T4241] usb 1-1: selecting invalid altsetting 6 [ 178.718373][ T4241] usb 1-1: digital interface selection failed (-22) [ 178.764832][ T4241] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 178.844967][ T4241] usb 1-1: setting power OFF [ 178.849640][ T4241] dvb-usb: bulk message failed: -22 (2/0) [ 178.860664][ T4241] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 178.870217][ T4241] (NULL device *): no alternate interface [ 178.922378][ T4241] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 178.926935][ T5499] loop3: detected capacity change from 0 to 256 [ 178.961959][ T4241] usb 1-1: USB disconnect, device number 8 [ 179.021927][ T5499] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 181.551589][ T5520] loop3: detected capacity change from 0 to 40427 [ 181.653706][ T5520] F2FS-fs (loop3): invalid crc value [ 181.723149][ T5520] F2FS-fs (loop3): Found nat_bits in checkpoint [ 181.753867][ T5520] F2FS-fs (loop3): Start checkpoint disabled! [ 181.833121][ T5520] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 181.995737][ T5523] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.362'. [ 182.595888][ T4781] attempt to access beyond end of device [ 182.595888][ T4781] loop3: rw=2049, want=40984, limit=40427 [ 182.711527][ T5528] netlink: 12 bytes leftover after parsing attributes in process `syz.2.365'. [ 183.153535][ T5536] loop1: detected capacity change from 0 to 256 [ 183.252694][ T5536] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 185.446659][ T5559] loop1: detected capacity change from 0 to 40427 [ 185.560044][ T5559] F2FS-fs (loop1): invalid crc value [ 185.623973][ T5559] F2FS-fs (loop1): Found nat_bits in checkpoint [ 185.667848][ T5559] F2FS-fs (loop1): Start checkpoint disabled! [ 185.691925][ T5559] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 186.398623][ T5571] netlink: 12 bytes leftover after parsing attributes in process `syz.4.378'. [ 186.479927][ T5573] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.374'. [ 186.776309][ T5456] attempt to access beyond end of device [ 186.776309][ T5456] loop1: rw=2049, want=40984, limit=40427 [ 187.153589][ T5588] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.384'. [ 188.122613][ T5605] loop2: detected capacity change from 0 to 40427 [ 188.747718][ T5605] F2FS-fs (loop2): invalid crc value [ 188.783561][ T5605] F2FS-fs (loop2): Found nat_bits in checkpoint [ 188.818995][ T5605] F2FS-fs (loop2): Start checkpoint disabled! [ 188.907890][ T5605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 189.011415][ T5611] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.389'. [ 189.169035][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.0.391'. [ 189.367510][ T5618] netlink: 'syz.1.392': attribute type 21 has an invalid length. [ 189.431070][ T5618] netlink: 132 bytes leftover after parsing attributes in process `syz.1.392'. [ 189.577191][ T155] attempt to access beyond end of device [ 189.577191][ T155] loop2: rw=2049, want=40984, limit=40427 [ 189.920927][ T4241] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 190.290909][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.335766][ T4241] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.362638][ T4241] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.379179][ T4241] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.402500][ T4241] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.458139][ T4241] usb 1-1: config 0 descriptor?? [ 191.532208][ T13] Bluetooth: hci0: command 0x0406 tx timeout [ 191.541328][ T4241] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x6 [ 191.549204][ T4241] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 191.735024][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 191.752131][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 191.768826][ T13] Bluetooth: hci3: command 0x0406 tx timeout [ 191.776394][ T4241] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 192.027120][ T5654] loop2: detected capacity change from 0 to 40427 [ 192.124580][ T5654] F2FS-fs (loop2): invalid crc value [ 192.160464][ T5654] F2FS-fs (loop2): Found nat_bits in checkpoint [ 192.203434][ T5654] F2FS-fs (loop2): Start checkpoint disabled! [ 192.227980][ T5654] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 192.243062][ T4196] usb 1-1: USB disconnect, device number 9 [ 192.376668][ T5670] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.405'. [ 192.577337][ T4248] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 192.859207][ T144] attempt to access beyond end of device [ 192.859207][ T144] loop2: rw=2049, want=40976, limit=40427 [ 193.129253][ T5672] syz.4.410 (5672): drop_caches: 1 [ 193.182750][ T4248] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 193.207834][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.233150][ T4248] usb 4-1: Product: syz [ 193.243257][ T4248] usb 4-1: Manufacturer: syz [ 193.259221][ T4248] usb 4-1: SerialNumber: syz [ 193.317808][ T4248] usb 4-1: config 0 descriptor?? [ 194.150822][ T4248] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 194.444768][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.451237][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.663843][ T5706] loop0: detected capacity change from 0 to 40427 [ 194.708717][ T5706] F2FS-fs (loop0): invalid crc value [ 194.726265][ T5706] F2FS-fs (loop0): Found nat_bits in checkpoint [ 194.767772][ T5706] F2FS-fs (loop0): Start checkpoint disabled! [ 194.807158][ T5706] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 194.922992][ T5720] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.421'. [ 195.423466][ T4502] attempt to access beyond end of device [ 195.423466][ T4502] loop0: rw=2049, want=40976, limit=40427 [ 195.818711][ T5714] syz.4.426 (5714): drop_caches: 1 [ 196.331179][ T4248] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 196.359118][ T4248] usb 4-1: USB disconnect, device number 10 [ 196.491153][ T4312] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 197.608410][ T5744] netlink: 8 bytes leftover after parsing attributes in process `syz.3.435'. [ 197.610986][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.630317][ T4312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.657463][ T4312] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 197.704688][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.745687][ T4312] usb 1-1: config 0 descriptor?? [ 197.773511][ T5746] kvm: pic: non byte read [ 197.778435][ T5746] kvm: pic: level sensitive irq not supported [ 197.778518][ T5746] kvm: pic: non byte read [ 197.839803][ T5746] kvm: pic: level sensitive irq not supported [ 197.839872][ T5746] kvm: pic: non byte read [ 197.858829][ T5746] kvm: pic: level sensitive irq not supported [ 197.858897][ T5746] kvm: pic: non byte read [ 198.015139][ T5760] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 198.163412][ T5756] syz.3.439 (5756): drop_caches: 1 [ 198.550789][ T4312] usbhid 1-1:0.0: can't add hid device: -32 [ 198.561625][ T4312] usbhid: probe of 1-1:0.0 failed with error -32 [ 198.583277][ T5768] binder: BINDER_SET_CONTEXT_MGR already set [ 198.625249][ T5768] binder: 5767:5768 ioctl 4018620d 200000004a80 returned -16 [ 198.633508][ T4312] usb 1-1: USB disconnect, device number 10 [ 198.985123][ T5771] device syzkaller1 entered promiscuous mode [ 200.525119][ T5798] loop2: detected capacity change from 0 to 40427 [ 200.600484][ T5798] F2FS-fs (loop2): invalid crc value [ 200.643557][ T5798] F2FS-fs (loop2): Found nat_bits in checkpoint [ 200.673423][ T5798] F2FS-fs (loop2): Start checkpoint disabled! [ 200.699823][ T5798] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 200.927763][ T5805] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.455'. [ 201.212624][ T5783] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.256874][ T5788] syz.0.453 (5788): drop_caches: 1 [ 201.640425][ T4781] attempt to access beyond end of device [ 201.640425][ T4781] loop2: rw=2049, want=40968, limit=40427 [ 202.051816][ T5816] binder: 5815:5816 ioctl c0306201 0 returned -14 [ 202.649993][ T5819] netlink: 28 bytes leftover after parsing attributes in process `syz.3.462'. [ 202.678855][ T5823] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 202.699952][ T5819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.462'. [ 202.985515][ T5830] loop0: detected capacity change from 0 to 256 [ 203.182207][ T5830] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 204.354155][ T5840] loop3: detected capacity change from 0 to 40427 [ 204.393393][ T5840] F2FS-fs (loop3): invalid crc value [ 204.435590][ T5840] F2FS-fs (loop3): Found nat_bits in checkpoint [ 204.468342][ T5840] F2FS-fs (loop3): Start checkpoint disabled! [ 204.492253][ T5840] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 204.707395][ T5854] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.468'. [ 205.227975][ T5861] binder: BINDER_SET_CONTEXT_MGR already set [ 205.313351][ T5861] binder: 5860:5861 ioctl 4018620d 200000004a80 returned -16 [ 205.338430][ T5864] binder: 5860:5864 ioctl c0306201 0 returned -14 [ 205.468418][ T5456] attempt to access beyond end of device [ 205.468418][ T5456] loop3: rw=2049, want=40968, limit=40427 [ 209.206381][ T5913] binder: 5912:5913 ioctl c0306201 0 returned -14 [ 209.591104][ T4298] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 210.515196][ T5931] loop2: detected capacity change from 0 to 256 [ 210.582970][ T5931] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 210.670805][ T4298] usb 2-1: config 0 has no interfaces? [ 211.525772][ T4298] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 211.560630][ T4298] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.599397][ T4298] usb 2-1: Product: syz [ 211.613188][ T4298] usb 2-1: Manufacturer: syz [ 211.634080][ T4298] usb 2-1: SerialNumber: syz [ 211.673904][ T4298] usb 2-1: config 0 descriptor?? [ 212.075872][ T5950] syz.2.502 (5950): drop_caches: 1 [ 212.884599][ T4275] usb 2-1: USB disconnect, device number 6 [ 214.155148][ T5975] loop2: detected capacity change from 0 to 256 [ 214.261702][ T5975] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 215.358504][ T5989] syz.3.513 (5989): drop_caches: 1 [ 216.372452][ T6020] netlink: 'syz.2.523': attribute type 25 has an invalid length. [ 216.853368][ T6030] loop3: detected capacity change from 0 to 40427 [ 216.897918][ T6030] F2FS-fs (loop3): invalid crc value [ 216.943413][ T6030] F2FS-fs (loop3): Found nat_bits in checkpoint [ 216.985620][ T6030] F2FS-fs (loop3): Start checkpoint disabled! [ 217.010264][ T6030] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 217.080878][ T4294] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 217.158194][ T6043] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.528'. [ 217.380716][ T4294] usb 5-1: Using ep0 maxpacket: 16 [ 217.574513][ T4294] usb 5-1: unable to get BOS descriptor or descriptor too short [ 217.664511][ T4294] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 217.685431][ T4294] usb 5-1: can't read configurations, error -71 [ 217.999857][ T4502] attempt to access beyond end of device [ 217.999857][ T4502] loop3: rw=2049, want=40968, limit=40427 [ 218.967444][ T6036] syz.2.531 (6036): drop_caches: 1 [ 218.992103][ T6053] netlink: 'syz.4.537': attribute type 29 has an invalid length. [ 219.028842][ T6053] netlink: 'syz.4.537': attribute type 29 has an invalid length. [ 219.029187][ T6055] netlink: 'syz.4.537': attribute type 29 has an invalid length. [ 219.753311][ T6081] loop3: detected capacity change from 0 to 256 [ 219.812666][ T6081] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 221.188252][ T4196] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 221.781610][ T4196] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 221.805275][ T4196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.950297][ T4196] usb 5-1: Product: syz [ 221.954747][ T4196] usb 5-1: Manufacturer: syz [ 221.959362][ T4196] usb 5-1: SerialNumber: syz [ 222.101780][ T4196] usb 5-1: config 0 descriptor?? [ 222.195163][ T6113] loop2: detected capacity change from 0 to 256 [ 222.223863][ T6113] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 222.400793][ T4196] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.407864][ T6121] netlink: 132 bytes leftover after parsing attributes in process `syz.1.562'. [ 224.525336][ T6154] loop1: detected capacity change from 0 to 256 [ 224.553839][ T6158] netlink: 132 bytes leftover after parsing attributes in process `syz.3.577'. [ 224.572909][ T6154] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value [ 225.440921][ T4196] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 225.471674][ T4196] usb 5-1: USB disconnect, device number 8 [ 225.803566][ T4294] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 226.688409][ T6189] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.590'. [ 226.720704][ T6189] openvswitch: netlink: Key type 4112 is out of range max 29 [ 226.880638][ T4294] usb 3-1: Using ep0 maxpacket: 16 [ 227.050695][ T13] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 227.210775][ T4196] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 227.410753][ T4294] usb 3-1: unable to get BOS descriptor or descriptor too short [ 227.763227][ T4196] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 227.805178][ T4196] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.850874][ T4294] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 227.858532][ T4294] usb 3-1: can't read configurations, error -71 [ 227.873719][ T4196] usb 2-1: Product: syz [ 227.884116][ T4196] usb 2-1: Manufacturer: syz [ 227.888915][ T4196] usb 2-1: SerialNumber: syz [ 227.936455][ T4196] usb 2-1: config 0 descriptor?? [ 228.140662][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 228.230882][ T4196] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 228.560778][ T13] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 228.569039][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.580189][ T13] usb 4-1: config 0 has no interface number 0 [ 228.586553][ T13] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 228.597001][ T13] usb 4-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 228.860048][ T13] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 228.869995][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.880488][ T13] usb 4-1: Product: syz [ 228.885024][ T13] usb 4-1: Manufacturer: syz [ 228.889661][ T13] usb 4-1: SerialNumber: syz [ 228.902990][ T13] usb 4-1: config 0 descriptor?? [ 228.924329][ T6231] netlink: 'syz.4.605': attribute type 29 has an invalid length. [ 228.932582][ T6196] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 228.947826][ T6231] netlink: 'syz.4.605': attribute type 29 has an invalid length. [ 228.961451][ T6231] netlink: 'syz.4.605': attribute type 29 has an invalid length. [ 229.895198][ T13] usb 4-1: probing VID:PID(0424:012C) [ 229.916542][ T13] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 229.923473][ T13] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 229.943535][ T13] vub300: probe of 4-1:0.133 failed with error -22 [ 229.958963][ T13] usb 4-1: USB disconnect, device number 11 [ 229.993711][ T6251] netlink: 'syz.4.612': attribute type 10 has an invalid length. [ 230.021741][ T6251] device hsr_slave_0 left promiscuous mode [ 230.041418][ T6251] device hsr_slave_1 left promiscuous mode [ 230.231050][ T4196] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 230.251146][ T4196] usb 2-1: USB disconnect, device number 7 [ 231.930648][ T4196] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 231.976396][ T6303] netlink: 132 bytes leftover after parsing attributes in process `syz.0.634'. [ 232.170725][ T4196] usb 5-1: Using ep0 maxpacket: 32 [ 232.290910][ T4196] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 232.303738][ T4196] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.320330][ T4196] usb 5-1: config 0 has no interface number 0 [ 232.334988][ T4196] usb 5-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 232.347982][ T4196] usb 5-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 232.368002][ T4248] Bluetooth: hci4: command 0x0406 tx timeout [ 232.521430][ T4196] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 232.538330][ T4196] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.549717][ T4196] usb 5-1: Product: syz [ 232.558803][ T4196] usb 5-1: Manufacturer: syz [ 232.566644][ T4196] usb 5-1: SerialNumber: syz [ 232.608469][ T4196] usb 5-1: config 0 descriptor?? [ 232.641247][ T6283] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 233.043188][ T4196] usb 5-1: probing VID:PID(0424:012C) [ 233.143874][ T4196] usb 5-1: vub300 testing BULK OUT EndPoint(0) 0B [ 233.860869][ T4196] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 233.887956][ T4196] vub300: probe of 5-1:0.133 failed with error -22 [ 233.903017][ T4196] usb 5-1: USB disconnect, device number 9 [ 235.020301][ T6348] loop2: detected capacity change from 0 to 40427 [ 235.087364][ T6348] F2FS-fs (loop2): invalid crc value [ 235.112837][ T6348] F2FS-fs (loop2): Found nat_bits in checkpoint [ 235.155999][ T6348] F2FS-fs (loop2): Start checkpoint disabled! [ 235.821616][ T6348] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 236.650060][ T6377] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.646'. [ 237.185890][ T6394] binder: 6393:6394 ioctl c0306201 0 returned -14 [ 237.735462][ T6407] loop4: detected capacity change from 0 to 256 [ 238.272419][ T6407] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 239.997278][ T154] attempt to access beyond end of device [ 239.997278][ T154] loop2: rw=2049, want=40968, limit=40427 [ 241.112053][ T6448] loop4: detected capacity change from 0 to 256 [ 241.285656][ T6448] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 242.669808][ T26] audit: type=1326 audit(1753945900.333:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6474 comm="syz.1.697" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c19b2c9a9 code=0x0 [ 245.158003][ T6516] binder: 6515:6516 ioctl c0306201 0 returned -14 [ 245.250653][ T4240] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 245.700693][ T4240] usb 4-1: Using ep0 maxpacket: 32 [ 245.881051][ T4240] usb 4-1: config 0 has an invalid interface number: 133 but max is 0 [ 246.033736][ T4240] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 246.238497][ T4240] usb 4-1: config 0 has no interface number 0 [ 246.277735][ T4240] usb 4-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 246.364862][ T6533] loop2: detected capacity change from 0 to 256 [ 246.381025][ T4240] usb 4-1: config 0 interface 133 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 246.487118][ T6533] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 246.661684][ T4240] usb 4-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 246.726410][ T4240] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 246.892557][ T4240] usb 4-1: Product: syz [ 246.980156][ T4240] usb 4-1: Manufacturer: syz [ 247.078494][ T4240] usb 4-1: SerialNumber: syz [ 247.269801][ T4240] usb 4-1: config 0 descriptor?? [ 247.402194][ T6513] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 248.050817][ T4240] usb 4-1: probing VID:PID(0424:012C) [ 248.057580][ T4240] usb 4-1: vub300 testing BULK OUT EndPoint(0) 0B [ 248.085882][ T4240] usb 4-1: Could not find two sets of bulk-in/out endpoint pairs [ 248.098355][ T4240] vub300: probe of 4-1:0.133 failed with error -22 [ 248.107813][ T4240] usb 4-1: USB disconnect, device number 12 [ 249.544359][ T6562] binder: 6560:6562 ioctl c0306201 0 returned -14 [ 250.330473][ T6591] loop4: detected capacity change from 0 to 256 [ 250.510145][ T6591] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 253.157431][ T6631] kvm: pic: non byte read [ 253.162255][ T6631] kvm: pic: level sensitive irq not supported [ 253.162327][ T6631] kvm: pic: non byte read [ 253.200972][ T6631] kvm: pic: level sensitive irq not supported [ 253.201081][ T6631] kvm: pic: non byte read [ 253.220967][ T6631] kvm: pic: level sensitive irq not supported [ 253.221034][ T6631] kvm: pic: non byte read [ 254.523731][ T6663] netlink: 'syz.4.765': attribute type 21 has an invalid length. [ 254.559193][ T6663] netlink: 'syz.4.765': attribute type 6 has an invalid length. [ 254.577796][ T6663] netlink: 132 bytes leftover after parsing attributes in process `syz.4.765'. [ 254.740681][ T4294] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 255.630732][ T4294] usb 1-1: Using ep0 maxpacket: 16 [ 255.883068][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.889786][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.590764][ T4294] usb 1-1: unable to get BOS descriptor or descriptor too short [ 256.650695][ T4294] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 256.658356][ T4294] usb 1-1: can't read configurations, error -71 [ 257.182258][ T6704] netlink: 'syz.3.783': attribute type 10 has an invalid length. [ 257.241754][ T6704] netlink: 55 bytes leftover after parsing attributes in process `syz.3.783'. [ 258.784749][ T6731] netlink: 'syz.0.794': attribute type 27 has an invalid length. [ 258.842559][ T6731] netlink: 164 bytes leftover after parsing attributes in process `syz.0.794'. [ 258.940762][ T4240] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 259.210713][ T4240] usb 2-1: Using ep0 maxpacket: 16 [ 259.860712][ T4240] usb 2-1: unable to get BOS descriptor or descriptor too short [ 259.920935][ T4240] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 259.928682][ T4240] usb 2-1: can't read configurations, error -71 [ 260.239512][ T6675] syz.4.770 (6675): drop_caches: 1 [ 262.370875][ T13] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 262.650715][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 263.084021][ T6836] syz.1.815 (6836): drop_caches: 1 [ 263.219470][ T6858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.823'. [ 263.291808][ T6858] netlink: 60 bytes leftover after parsing attributes in process `syz.1.823'. [ 263.317672][ T6853] netlink: 60 bytes leftover after parsing attributes in process `syz.1.823'. [ 263.341233][ T6861] netlink: 60 bytes leftover after parsing attributes in process `syz.1.823'. [ 263.360820][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 263.440841][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 263.451237][ T13] usb 3-1: can't read configurations, error -71 [ 264.534459][ T6888] netlink: 'syz.4.837': attribute type 10 has an invalid length. [ 264.585452][ T6888] team0: Port device dummy0 added [ 264.678851][ T6894] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 264.685882][ T6894] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 266.895235][ T6919] IPv6: NLM_F_CREATE should be specified when creating new route [ 267.989369][ T6939] netlink: 'syz.0.854': attribute type 10 has an invalid length. [ 268.023276][ T6939] netlink: 2 bytes leftover after parsing attributes in process `syz.0.854'. [ 268.057094][ T6939] device batadv_slave_1 entered promiscuous mode [ 268.081938][ T6939] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.107695][ T6939] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.133672][ T6939] bridge0: port 3(batadv_slave_1) entered blocking state [ 268.220808][ T6939] bridge0: port 3(batadv_slave_1) entered disabled state [ 268.246771][ T6939] bridge0: port 3(batadv_slave_1) entered blocking state [ 268.254108][ T6939] bridge0: port 3(batadv_slave_1) entered forwarding state [ 269.687941][ T6994] netlink: 10 bytes leftover after parsing attributes in process `syz.3.879'. [ 270.999476][ T7002] loop0: detected capacity change from 0 to 256 [ 271.057514][ T7002] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 273.437587][ T7065] netlink: 'syz.1.907': attribute type 10 has an invalid length. [ 273.480805][ T7065] netlink: 210880 bytes leftover after parsing attributes in process `syz.1.907'. [ 274.755267][ T7077] loop2: detected capacity change from 0 to 40427 [ 279.240551][ C0] sched: RT throttling activated [ 280.350715][ T1110] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 281.761940][ T7171] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 281.771319][ T7171] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 281.781023][ T7171] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 281.913982][ T26] audit: type=1800 audit(1753945939.423:3): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.943" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 281.951165][ T1110] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 282.131284][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.268263][ T1110] usb 1-1: Product: syz [ 282.353434][ T1110] usb 1-1: Manufacturer: syz [ 282.499928][ T1110] usb 1-1: SerialNumber: syz [ 282.674156][ T1110] usb 1-1: config 0 descriptor?? [ 282.728278][ T7188] syz.1.949[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 282.728567][ T7188] syz.1.949[7188] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 283.730936][ T1110] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 283.750914][ T1110] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 283.819072][ T4298] usb 1-1: USB disconnect, device number 13 [ 286.140950][ T4294] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 286.792536][ T7232] loop1: detected capacity change from 0 to 1024 [ 286.999758][ T7232] EXT4-fs (loop1): Ignoring removed bh option [ 287.033469][ T7232] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 287.081803][ T4294] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 287.104265][ T4294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.128709][ T7232] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bh,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 287.144731][ T4294] usb 1-1: Product: syz [ 287.149135][ T4294] usb 1-1: Manufacturer: syz [ 287.178579][ T4294] usb 1-1: SerialNumber: syz [ 287.215247][ T4294] usb 1-1: config 0 descriptor?? [ 289.080817][ T4294] dvb_usb_rtl28xxu 1-1:0.0: chip type detection failed -110 [ 289.130795][ T4294] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -110 [ 290.817106][ T4312] usb 1-1: USB disconnect, device number 14 [ 291.174837][ T7285] loop1: detected capacity change from 0 to 512 [ 291.251263][ T7285] ======================================================= [ 291.251263][ T7285] WARNING: The mand mount option has been deprecated and [ 291.251263][ T7285] and is ignored by this kernel. Remove the mand [ 291.251263][ T7285] option from the mount to silence this warning. [ 291.251263][ T7285] ======================================================= [ 291.573695][ T7285] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsdgroups,nogrpid,,errors=continue. Quota mode: writeback. [ 291.585062][ T7294] loop0: detected capacity change from 0 to 40427 [ 291.620817][ T7285] ext4 filesystem being mounted at /200/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 291.635718][ T7292] syz.4.985 (7292): drop_caches: 1 [ 291.655752][ T7294] F2FS-fs (loop0): invalid crc value [ 291.677443][ T7294] F2FS-fs (loop0): Found nat_bits in checkpoint [ 291.742976][ T7294] F2FS-fs (loop0): Start checkpoint disabled! [ 291.787147][ T7294] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 292.153976][ T7308] loop4: detected capacity change from 0 to 256 [ 292.259840][ T4186] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 292.291131][ T4186] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0) [ 292.313741][ T7308] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 292.459762][ T6802] attempt to access beyond end of device [ 292.459762][ T6802] loop0: rw=2049, want=40968, limit=40427 [ 293.401038][ T4312] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 293.449298][ T7298] loop3: detected capacity change from 0 to 40427 [ 293.480233][ T7298] F2FS-fs (loop3): invalid crc value [ 293.856549][ T7298] F2FS-fs (loop3): Found nat_bits in checkpoint [ 294.392795][ T7298] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 294.432100][ T4312] usb 3-1: Using ep0 maxpacket: 16 [ 294.570839][ T4312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 294.660717][ T4312] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 295.420675][ T4312] usb 3-1: can't read configurations, error -71 [ 295.662044][ T7353] loop0: detected capacity change from 0 to 256 [ 295.712768][ T7353] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 297.110859][ T4240] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 297.122311][ T4312] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 297.267101][ T7355] chnl_net:caif_netlink_parms(): no params data found [ 297.300805][ T4240] usb 4-1: device descriptor read/64, error -71 [ 297.449221][ T7375] syz.0.1012 (7375): drop_caches: 1 [ 297.703280][ T7355] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.808527][ T7355] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.841541][ T4312] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 297.880052][ T4312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.941961][ T7355] device bridge_slave_0 entered promiscuous mode [ 297.977701][ T4312] usb 3-1: Product: syz [ 298.024153][ T4312] usb 3-1: Manufacturer: syz [ 298.156787][ T7355] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.176310][ T4312] usb 3-1: SerialNumber: syz [ 298.186516][ T7355] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.218174][ T4312] usb 3-1: config 0 descriptor?? [ 298.250360][ T7355] device bridge_slave_1 entered promiscuous mode [ 298.330248][ T7355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.342810][ T7355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 298.360837][ T4240] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 298.540809][ T4312] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 298.560938][ T4240] usb 4-1: device descriptor read/64, error -71 [ 298.682198][ T4240] usb usb4-port1: attempt power cycle [ 298.842092][ T1110] Bluetooth: hci1: command 0x0409 tx timeout [ 299.090935][ T4240] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 299.200711][ T4240] usb 4-1: device descriptor read/8, error -71 [ 299.273327][ T7355] team0: Port device team_slave_0 added [ 299.309874][ T7355] team0: Port device team_slave_1 added [ 299.406073][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.413641][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.440717][ T7355] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.467204][ T7355] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.475063][ T7355] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.513860][ T7355] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.681012][ T4294] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 299.971129][ T4294] usb 1-1: Using ep0 maxpacket: 16 [ 300.165516][ T7355] device hsr_slave_0 entered promiscuous mode [ 300.190781][ T4294] usb 1-1: unable to get BOS descriptor or descriptor too short [ 300.212205][ T7355] device hsr_slave_1 entered promiscuous mode [ 300.235693][ T7355] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.248898][ T4240] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 300.258015][ T7355] Cannot create hsr debugfs directory [ 300.270864][ T4294] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 300.283020][ T7401] loop3: detected capacity change from 0 to 256 [ 300.286512][ T4294] usb 1-1: can't read configurations, error -71 [ 300.332142][ T7401] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 300.490738][ T4240] usb 4-1: device not accepting address 16, error -71 [ 301.085515][ T4240] usb usb4-port1: unable to enumerate USB device [ 301.093589][ T1110] Bluetooth: hci1: command 0x041b tx timeout [ 301.186316][ T7355] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 301.203542][ T7355] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 301.225586][ T7355] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 301.250278][ T7355] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 301.291004][ T4312] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 301.326722][ T4312] usb 3-1: USB disconnect, device number 15 [ 301.451888][ T7355] 8021q: adding VLAN 0 to HW filter on device bond0 [ 301.467516][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 301.497255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 301.510429][ T7355] 8021q: adding VLAN 0 to HW filter on device team0 [ 301.534428][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 301.572672][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 301.594378][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.601604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 301.664151][ T7355] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 301.713143][ T7355] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 301.773892][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 301.790385][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 302.023615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 302.289404][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.296635][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.601069][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 302.669608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 302.694562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 302.822247][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 302.926109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 303.029561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 303.143071][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 303.153370][ T7421] syz.3.1025 (7421): drop_caches: 1 [ 303.160741][ T4240] Bluetooth: hci1: command 0x040f tx timeout [ 303.247675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 303.355261][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 303.463171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 303.489769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 303.499454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 303.760139][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 303.769886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 303.829049][ T7355] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.980923][ T4294] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 304.200709][ T4294] usb 4-1: device descriptor read/64, error -71 [ 304.526184][ T4294] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 304.735784][ T7455] loop0: detected capacity change from 0 to 256 [ 304.740882][ T4196] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 304.760963][ T4294] usb 4-1: device descriptor read/64, error -71 [ 304.762532][ T7455] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 304.891636][ T4294] usb usb4-port1: attempt power cycle [ 304.990683][ T4196] usb 3-1: Using ep0 maxpacket: 16 [ 305.300825][ T4294] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 305.411454][ T4294] usb 4-1: device descriptor read/8, error -71 [ 305.569236][ T4248] Bluetooth: hci1: command 0x0419 tx timeout [ 305.652109][ T4196] usb 3-1: unable to get BOS descriptor or descriptor too short [ 305.690700][ T4294] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 305.728330][ T4196] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 305.739944][ T4196] usb 3-1: can't read configurations, error -71 [ 305.783595][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 305.792623][ T4294] usb 4-1: device descriptor read/8, error -71 [ 305.822944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 305.883322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 305.899161][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 305.911800][ T7355] device veth0_vlan entered promiscuous mode [ 305.921282][ T4294] usb usb4-port1: unable to enumerate USB device [ 305.935874][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 305.956377][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 305.974772][ T7355] device veth1_vlan entered promiscuous mode [ 306.018786][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 306.027813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 306.036253][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 306.045386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 306.058991][ T7355] device veth0_macvtap entered promiscuous mode [ 306.099545][ T7355] device veth1_macvtap entered promiscuous mode [ 306.152006][ T4248] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 306.319331][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.429529][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.535757][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.785471][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.852918][ T4248] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 306.862832][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.870431][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.889084][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.899317][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.902739][ T4248] usb 1-1: Product: syz [ 306.910325][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.922962][ T4248] usb 1-1: Manufacturer: syz [ 306.928629][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.938287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 306.965386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 306.973719][ T4248] usb 1-1: SerialNumber: syz [ 306.998348][ T4248] usb 1-1: config 0 descriptor?? [ 307.115983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 307.201222][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 307.249773][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.308055][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.326867][ T7481] syz.4.1040 (7481): drop_caches: 1 [ 307.333204][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.343760][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.353669][ T7355] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.360902][ T4248] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 307.368292][ T7355] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.389028][ T7355] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.407423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 307.421839][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 307.442341][ T7355] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.460265][ T7355] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.470972][ T7355] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.480047][ T7355] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.530045][ T7490] loop2: detected capacity change from 0 to 256 [ 307.612477][ T7490] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 308.165344][ T4414] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.237007][ T4414] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.402620][ T6802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 308.447153][ T4414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.461980][ T4414] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.528611][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 308.971626][ T7502] loop5: detected capacity change from 0 to 40427 [ 309.028777][ T7502] F2FS-fs (loop5): invalid crc value [ 309.047304][ T7502] F2FS-fs (loop5): Found nat_bits in checkpoint [ 309.089567][ T7502] F2FS-fs (loop5): Start checkpoint disabled! [ 309.112788][ T7502] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 309.140795][ T4240] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 309.412067][ T4240] usb 3-1: Using ep0 maxpacket: 16 [ 309.701113][ T6802] attempt to access beyond end of device [ 309.701113][ T6802] loop5: rw=2049, want=40968, limit=40427 [ 309.821614][ T4240] usb 3-1: unable to get BOS descriptor or descriptor too short [ 309.891118][ T4240] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 309.899624][ T4248] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 309.920741][ T1110] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 309.937213][ T4240] usb 3-1: can't read configurations, error -71 [ 310.038412][ T4248] usb 1-1: USB disconnect, device number 17 [ 310.151884][ T1110] usb 4-1: device descriptor read/64, error -71 [ 310.430898][ T1110] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 310.670764][ T1110] usb 4-1: device descriptor read/64, error -71 [ 310.791114][ T1110] usb usb4-port1: attempt power cycle [ 311.880738][ T1110] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 311.910061][ T7524] syz.4.1054 (7524): drop_caches: 1 [ 311.932091][ T7533] loop5: detected capacity change from 0 to 256 [ 311.991484][ T1110] usb 4-1: device descriptor read/8, error -71 [ 312.094859][ T7533] FAT-fs (loop5): Unrecognized mount option "nnonumtail=1" or missing value [ 312.266871][ T7539] loop4: detected capacity change from 0 to 40427 [ 312.420769][ T1110] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 312.538689][ T7539] F2FS-fs (loop4): invalid crc value [ 312.561412][ T1110] usb 4-1: device descriptor read/8, error -71 [ 312.602723][ T7539] F2FS-fs (loop4): Found nat_bits in checkpoint [ 312.723262][ T7539] F2FS-fs (loop4): Start checkpoint disabled! [ 312.783986][ T7539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 313.083251][ T1110] usb usb4-port1: unable to enumerate USB device [ 313.334384][ T155] attempt to access beyond end of device [ 313.334384][ T155] loop4: rw=2049, want=40968, limit=40427 [ 313.527143][ T4248] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 313.561194][ T1110] usb 3-1: new full-speed USB device number 20 using dummy_hcd [ 313.770638][ T4248] usb 6-1: Using ep0 maxpacket: 16 [ 314.151519][ T1110] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 314.588767][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.597366][ T1110] usb 3-1: Product: syz [ 314.611317][ T1110] usb 3-1: Manufacturer: syz [ 314.615994][ T1110] usb 3-1: SerialNumber: syz [ 314.641660][ T1110] usb 3-1: config 0 descriptor?? [ 315.060975][ T7567] binder: BINDER_SET_CONTEXT_MGR already set [ 315.179378][ T7567] binder: 7566:7567 ioctl 4018620d 200000004a80 returned -16 [ 315.664606][ T1110] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 315.720760][ T4248] usb 6-1: unable to get BOS descriptor or descriptor too short [ 315.790968][ T4248] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 315.798605][ T4248] usb 6-1: can't read configurations, error -71 [ 316.090693][ T13] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 316.122994][ T7577] syz.3.1071 (7577): drop_caches: 1 [ 316.164692][ T7585] loop0: detected capacity change from 0 to 256 [ 316.206620][ T7585] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 316.233563][ T7583] loop5: detected capacity change from 0 to 40427 [ 316.309420][ T13] usb 5-1: device descriptor read/64, error -71 [ 316.337110][ T7583] F2FS-fs (loop5): invalid crc value [ 316.387247][ T7583] F2FS-fs (loop5): Found nat_bits in checkpoint [ 316.495368][ T7583] F2FS-fs (loop5): Start checkpoint disabled! [ 316.535810][ T7583] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 316.630935][ T13] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 316.860866][ T13] usb 5-1: device descriptor read/64, error -71 [ 316.991658][ T13] usb usb5-port1: attempt power cycle [ 317.323058][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.329394][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.546143][ T6809] attempt to access beyond end of device [ 317.546143][ T6809] loop5: rw=2049, want=40968, limit=40427 [ 317.600666][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 317.700807][ T13] usb 5-1: device descriptor read/8, error -71 [ 317.720782][ T1110] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 317.744447][ T1110] usb 3-1: USB disconnect, device number 20 [ 317.980663][ T13] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 318.771026][ T13] usb 5-1: device descriptor read/8, error -71 [ 318.892354][ T13] usb usb5-port1: unable to enumerate USB device [ 319.928139][ T7628] loop2: detected capacity change from 0 to 256 [ 319.934702][ T1108] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 320.052171][ T7628] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value [ 320.210101][ T7630] loop0: detected capacity change from 0 to 40427 [ 320.243531][ T7624] syz.5.1086 (7624): drop_caches: 1 [ 320.810165][ T7630] F2FS-fs (loop0): invalid crc value [ 321.027997][ T7630] F2FS-fs (loop0): Found nat_bits in checkpoint [ 321.058227][ T7630] F2FS-fs (loop0): Start checkpoint disabled! [ 321.069639][ T7630] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 321.126557][ T1108] usb 4-1: Using ep0 maxpacket: 16 [ 321.514235][ T1110] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 321.621002][ T1108] usb 4-1: unable to get BOS descriptor or descriptor too short [ 322.171005][ T1108] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 322.467580][ T1108] usb 4-1: can't read configurations, error -71 [ 322.645532][ T4414] attempt to access beyond end of device [ 322.645532][ T4414] loop0: rw=2049, want=40968, limit=40427 [ 322.890776][ T1110] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 322.910852][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.921185][ T1110] usb 6-1: Product: syz [ 322.925469][ T1110] usb 6-1: Manufacturer: syz [ 322.930159][ T1110] usb 6-1: SerialNumber: syz [ 323.020002][ T1110] usb 6-1: config 0 descriptor?? [ 323.371447][ T1110] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 323.741506][ T7668] loop3: detected capacity change from 0 to 256 [ 323.781846][ T7668] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 324.854482][ T7664] syz.4.1101 (7664): drop_caches: 1 [ 324.940820][ T1108] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 325.126839][ T7678] loop3: detected capacity change from 0 to 40427 [ 325.160891][ T1108] usb 1-1: device descriptor read/64, error -71 [ 325.199066][ T7678] F2FS-fs (loop3): invalid crc value [ 325.265941][ T7678] F2FS-fs (loop3): Found nat_bits in checkpoint [ 325.299065][ T7678] F2FS-fs (loop3): Start checkpoint disabled! [ 325.450910][ T1108] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 325.660864][ T1108] usb 1-1: device descriptor read/64, error -71 [ 325.791207][ T1108] usb usb1-port1: attempt power cycle [ 326.000683][ T7678] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 326.030875][ T1110] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 326.210752][ T1108] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 326.334991][ T1110] usb 6-1: USB disconnect, device number 4 [ 326.450865][ T1108] usb 1-1: device descriptor read/8, error -71 [ 326.544643][ T9] attempt to access beyond end of device [ 326.544643][ T9] loop3: rw=2049, want=40968, limit=40427 [ 326.730601][ T1108] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 326.830865][ T1108] usb 1-1: device descriptor read/8, error -71 [ 327.732893][ T1108] usb usb1-port1: unable to enumerate USB device [ 327.834009][ T7706] loop4: detected capacity change from 0 to 256 [ 327.882325][ T7706] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value [ 328.930884][ T1110] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 329.217979][ T7712] syz.5.1117 (7712): drop_caches: 1 [ 329.226801][ T7730] binder: BINDER_SET_CONTEXT_MGR already set [ 329.265784][ T7730] binder: 7728:7730 ioctl 4018620d 200000004a80 returned -16 [ 329.290800][ T7725] loop0: detected capacity change from 0 to 40427 [ 329.346405][ T7725] F2FS-fs (loop0): invalid crc value [ 329.364124][ T7725] F2FS-fs (loop0): Found nat_bits in checkpoint [ 329.405307][ T7725] F2FS-fs (loop0): Start checkpoint disabled! [ 329.430740][ T7725] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 329.451197][ T1110] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 329.467107][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.516778][ T1110] usb 3-1: Product: syz [ 329.540840][ T1110] usb 3-1: Manufacturer: syz [ 329.606529][ T1110] usb 3-1: SerialNumber: syz [ 329.731803][ T1110] usb 3-1: config 0 descriptor?? [ 329.940745][ T4240] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 330.140744][ T1110] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 330.650858][ T4240] usb 5-1: device descriptor read/64, error -71 [ 330.942911][ T4240] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 331.151697][ T4240] usb 5-1: device descriptor read/64, error -71 [ 331.272136][ T4240] usb usb5-port1: attempt power cycle [ 331.323718][ T9] attempt to access beyond end of device [ 331.323718][ T9] loop0: rw=2049, want=40968, limit=40427 [ 331.687440][ T4240] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 331.790772][ T4240] usb 5-1: device descriptor read/8, error -71 [ 331.904067][ T7759] loop3: detected capacity change from 0 to 256 [ 331.952670][ T7759] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 332.090662][ T4240] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 332.710740][ T1110] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 332.766201][ T1110] usb 3-1: USB disconnect, device number 21 [ 333.280692][ T4240] usb 5-1: device descriptor read/8, error -71 [ 333.411166][ T4240] usb usb5-port1: unable to enumerate USB device [ 333.639073][ T7770] syz.3.1134 (7770): drop_caches: 1 [ 334.014905][ T7783] loop5: detected capacity change from 0 to 40427 [ 334.164390][ T7783] F2FS-fs (loop5): invalid crc value [ 334.215126][ T7783] F2FS-fs (loop5): Found nat_bits in checkpoint [ 334.266567][ T7783] F2FS-fs (loop5): Start checkpoint disabled! [ 334.536670][ T7783] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 335.075576][ T7799] loop3: detected capacity change from 0 to 256 [ 335.182003][ T7799] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 335.290946][ T1110] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 335.560766][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 335.701313][ T1110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 335.756871][ T1110] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 336.071044][ T1110] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 336.090452][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.118050][ T1110] usb 1-1: Product: syz [ 336.122864][ T6809] attempt to access beyond end of device [ 336.122864][ T6809] loop5: rw=2049, want=40968, limit=40427 [ 336.140583][ T1110] usb 1-1: Manufacturer: syz [ 336.149201][ T1110] usb 1-1: SerialNumber: syz [ 336.169723][ T1110] usb 1-1: config 0 descriptor?? [ 336.444378][ T4240] usb 1-1: USB disconnect, device number 22 [ 336.670617][ T1110] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 337.637647][ T7825] syz.5.1153 (7825): drop_caches: 1 [ 337.690694][ T13] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 338.037019][ T7832] loop2: detected capacity change from 0 to 40427 [ 338.044235][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 338.183191][ T7832] F2FS-fs (loop2): invalid crc value [ 338.285376][ T7832] F2FS-fs (loop2): Found nat_bits in checkpoint [ 338.340332][ T7832] F2FS-fs (loop2): Start checkpoint disabled! [ 338.438470][ T7832] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 338.710875][ T13] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 338.791851][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.908808][ T13] usb 4-1: Product: syz [ 338.960717][ T13] usb 4-1: Manufacturer: syz [ 338.972919][ T7843] loop0: detected capacity change from 0 to 256 [ 338.979202][ T13] usb 4-1: SerialNumber: syz [ 338.992945][ T7843] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 339.017968][ T13] usb 4-1: config 0 descriptor?? [ 339.050692][ T1110] usb 5-1: unable to get BOS descriptor or descriptor too short [ 339.360926][ T13] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 339.820740][ T1110] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 339.828388][ T1110] usb 5-1: can't read configurations, error -71 [ 339.975094][ T155] attempt to access beyond end of device [ 339.975094][ T155] loop2: rw=2049, want=40968, limit=40427 [ 340.134829][ T7857] binder: 7853:7857 ioctl c0306201 0 returned -14 [ 341.199118][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1166'. [ 341.691078][ T4248] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 342.010776][ T4248] usb 3-1: Using ep0 maxpacket: 32 [ 342.224956][ T4248] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.243097][ T4248] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 342.307405][ T7880] loop3: detected capacity change from 0 to 256 [ 342.330791][ T13] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 342.359673][ T7880] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 342.369157][ T13] usb 4-1: USB disconnect, device number 27 [ 342.481795][ T4248] usb 3-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 342.551771][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.620612][ T4312] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 342.675133][ T4248] usb 3-1: Product: syz [ 342.726295][ T4248] usb 3-1: Manufacturer: syz [ 342.784712][ T4248] usb 3-1: SerialNumber: syz [ 343.206531][ T7878] syz.0.1170 (7878): drop_caches: 1 [ 343.350658][ T7886] loop5: detected capacity change from 0 to 40427 [ 343.385691][ T4248] usb 3-1: config 0 descriptor?? [ 343.399079][ T7886] F2FS-fs (loop5): invalid crc value [ 343.410807][ T4312] usb 5-1: Using ep0 maxpacket: 16 [ 343.431871][ T7886] F2FS-fs (loop5): Found nat_bits in checkpoint [ 343.527512][ T7886] F2FS-fs (loop5): Start checkpoint disabled! [ 343.558239][ T7886] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 343.569054][ T7894] binder: BINDER_SET_CONTEXT_MGR already set [ 343.585144][ T7894] binder: 7893:7894 ioctl 4018620d 200000004a80 returned -16 [ 343.690830][ T4312] usb 5-1: unable to get BOS descriptor or descriptor too short [ 343.702015][ T7897] binder: 7893:7897 ioctl c0306201 0 returned -14 [ 343.799248][ T1108] usb 3-1: USB disconnect, device number 22 [ 343.805867][ T4312] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 343.892100][ T4312] usb 5-1: can't read configurations, error -71 [ 345.190496][ T6809] attempt to access beyond end of device [ 345.190496][ T6809] loop5: rw=2049, want=40968, limit=40427 [ 345.767625][ T4248] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 345.825824][ T7927] loop0: detected capacity change from 0 to 256 [ 345.836016][ T7925] syz.4.1185 (7925): drop_caches: 1 [ 345.884184][ T7927] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 346.360761][ T4248] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 346.369897][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.622442][ T4248] usb 3-1: Product: syz [ 346.626686][ T4248] usb 3-1: Manufacturer: syz [ 346.631367][ T4248] usb 3-1: SerialNumber: syz [ 346.642552][ T4248] usb 3-1: config 0 descriptor?? [ 346.921261][ T4248] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.974140][ T7943] binder: 7940:7943 ioctl c0306201 0 returned -14 [ 347.267837][ T7944] loop5: detected capacity change from 0 to 40427 [ 347.298125][ T7944] F2FS-fs (loop5): invalid crc value [ 347.310363][ T7944] F2FS-fs (loop5): Found nat_bits in checkpoint [ 347.350345][ T7944] F2FS-fs (loop5): Start checkpoint disabled! [ 347.389107][ T1110] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 347.420808][ T4312] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 347.700903][ T4312] usb 4-1: Using ep0 maxpacket: 16 [ 347.961497][ T7944] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 348.211223][ T1110] usb 1-1: Using ep0 maxpacket: 32 [ 348.341382][ T1110] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.383756][ T1110] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 348.480730][ T4312] usb 4-1: unable to get BOS descriptor or descriptor too short [ 348.540712][ T4312] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 348.542719][ T6802] attempt to access beyond end of device [ 348.542719][ T6802] loop5: rw=2049, want=40968, limit=40427 [ 348.548731][ T4312] usb 4-1: can't read configurations, error -71 [ 348.620873][ T1110] usb 1-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 348.635816][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.644235][ T1110] usb 1-1: Product: syz [ 348.648428][ T1110] usb 1-1: Manufacturer: syz [ 348.653654][ T1110] usb 1-1: SerialNumber: syz [ 348.666776][ T1110] usb 1-1: config 0 descriptor?? [ 348.917062][ T7965] syz.5.1197 (7965): drop_caches: 1 [ 348.926975][ T4240] usb 1-1: USB disconnect, device number 23 [ 349.136190][ T7971] loop3: detected capacity change from 0 to 256 [ 349.166204][ T7971] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 349.341202][ T4248] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 350.092330][ T4248] usb 3-1: USB disconnect, device number 23 [ 351.045375][ T7993] loop5: detected capacity change from 0 to 40427 [ 351.111979][ T7993] F2FS-fs (loop5): invalid crc value [ 351.140584][ T7993] F2FS-fs (loop5): Found nat_bits in checkpoint [ 351.184359][ T7993] F2FS-fs (loop5): Start checkpoint disabled! [ 351.440685][ T1110] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 351.505284][ T7993] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 351.741129][ T1110] usb 5-1: Using ep0 maxpacket: 16 [ 351.944782][ T7996] syz.3.1209 (7996): drop_caches: 1 [ 352.157934][ T155] attempt to access beyond end of device [ 352.157934][ T155] loop5: rw=2049, want=40968, limit=40427 [ 352.200811][ T1110] usb 5-1: unable to get BOS descriptor or descriptor too short [ 352.270763][ T1110] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 352.281042][ T1110] usb 5-1: can't read configurations, error -71 [ 352.340799][ T4312] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 353.386399][ T8026] loop0: detected capacity change from 0 to 256 [ 353.442020][ T8026] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 353.730694][ T1110] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 353.730855][ T4312] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 354.011015][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 354.253442][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.261600][ T4312] usb 4-1: Product: syz [ 354.265842][ T4312] usb 4-1: Manufacturer: syz [ 354.270474][ T4312] usb 4-1: SerialNumber: syz [ 354.390770][ T1110] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 354.399555][ T1110] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.417358][ T1110] usb 5-1: config 0 has no interface number 0 [ 354.418636][ T4312] usb 4-1: config 0 descriptor?? [ 354.424293][ T1110] usb 5-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 354.760916][ T4312] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 354.881643][ T1110] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 354.895476][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.915815][ T1110] usb 5-1: Product: syz [ 354.960757][ T1110] usb 5-1: Manufacturer: syz [ 354.999960][ T1110] usb 5-1: SerialNumber: syz [ 355.223082][ T8043] loop0: detected capacity change from 0 to 40427 [ 355.277811][ T8043] F2FS-fs (loop0): invalid crc value [ 355.310096][ T1110] usb 5-1: config 0 descriptor?? [ 355.319693][ T8043] F2FS-fs (loop0): Found nat_bits in checkpoint [ 355.359643][ T8043] F2FS-fs (loop0): Start checkpoint disabled! [ 355.391637][ T8043] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 355.866732][ T1110] usb 5-1: probing VID:PID(0424:012C) [ 355.986357][ T1110] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 355.998067][ T1110] vub300: probe of 5-1:0.133 failed with error -22 [ 356.035164][ T1110] usb 5-1: USB disconnect, device number 24 [ 356.237057][ T8045] syz.5.1223 (8045): drop_caches: 1 [ 356.380706][ T13] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 356.448835][ T154] attempt to access beyond end of device [ 356.448835][ T154] loop0: rw=2049, want=40968, limit=40427 [ 356.651920][ T13] usb 3-1: Using ep0 maxpacket: 16 [ 357.191219][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 357.247654][ T4312] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 357.360137][ T13] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 357.415830][ T4312] usb 4-1: USB disconnect, device number 30 [ 357.477159][ T13] usb 3-1: can't read configurations, error -71 [ 357.925448][ T8077] loop3: detected capacity change from 0 to 256 [ 358.042148][ T8077] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value [ 358.340636][ T4240] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 359.150679][ T4240] usb 5-1: Using ep0 maxpacket: 32 [ 359.428610][ T8093] loop5: detected capacity change from 0 to 40427 [ 359.502256][ T8093] F2FS-fs (loop5): invalid crc value [ 359.510749][ T4240] usb 5-1: config 0 has an invalid interface number: 133 but max is 0 [ 359.519071][ T4240] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.545245][ T4240] usb 5-1: config 0 has no interface number 0 [ 359.553241][ T8093] F2FS-fs (loop5): Found nat_bits in checkpoint [ 359.595547][ T4240] usb 5-1: config 0 interface 133 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 359.622002][ T8093] F2FS-fs (loop5): Start checkpoint disabled! [ 359.647873][ T8093] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 359.790760][ T4240] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 359.800142][ T4240] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.142767][ T4240] usb 5-1: Product: syz [ 360.147105][ T4240] usb 5-1: Manufacturer: syz [ 360.151822][ T4240] usb 5-1: SerialNumber: syz [ 360.159727][ T4240] usb 5-1: config 0 descriptor?? [ 360.295010][ T8096] syz.0.1239 (8096): drop_caches: 1 [ 360.365453][ T155] attempt to access beyond end of device [ 360.365453][ T155] loop5: rw=2049, want=40968, limit=40427 [ 360.527642][ T4240] usb 5-1: probing VID:PID(0424:012C) [ 360.535262][ T4240] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 360.544254][ T4240] vub300: probe of 5-1:0.133 failed with error -22 [ 360.559475][ T4240] usb 5-1: USB disconnect, device number 25 [ 360.660785][ T13] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 361.251737][ T13] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 361.275529][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.400571][ T13] usb 4-1: Product: syz [ 361.415483][ T13] usb 4-1: Manufacturer: syz [ 361.420180][ T13] usb 4-1: SerialNumber: syz [ 361.544216][ T4275] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 361.551213][ T13] usb 4-1: config 0 descriptor?? [ 361.800650][ T4275] usb 3-1: Using ep0 maxpacket: 16 [ 361.960769][ T13] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 362.690685][ C0] [ 362.693703][ C0] ============================= [ 362.698627][ C0] WARNING: suspicious RCU usage [ 362.703583][ C0] 5.15.189-syzkaller #0 Not tainted [ 362.708944][ C0] ----------------------------- [ 362.713930][ C0] net/sched/sch_api.c:304 suspicious rcu_dereference_protected() usage! [ 362.722370][ C0] [ 362.722370][ C0] other info that might help us debug this: [ 362.722370][ C0] [ 362.730809][ T4275] usb 3-1: unable to get BOS descriptor or descriptor too short [ 362.732816][ C0] [ 362.732816][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 362.748774][ C0] 6 locks held by udevd/4178: [ 362.753590][ C0] #0: ffffffff8c6ac1b8 (tomoyo_ss){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30 [ 362.758754][ T8140] loop0: detected capacity change from 0 to 256 [ 362.762777][ C0] #1: ffffc90000007be0 ((&n->timer)){+.-.}-{0:0}, at: call_timer_fn+0xbb/0x530 [ 362.762855][ C0] #2: ffffffff8c11c360 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 362.762946][ C0] #3: ffffffff8c11c3c0 (rcu_read_lock_bh){....}-{1:2}, at: rcu_lock_acquire+0x9/0x30 [ 362.763025][ C0] #4: ffff888075f39108 (&sch->q.lock){+.-.}-{2:2}, at: __dev_queue_xmit+0xb8a/0x2ed0 [ 362.763084][ C0] #5: ffffffff8c11c360 (rcu_read_lock){....}-{1:2} [ 362.795363][ T8140] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value [ 362.797846][ C0] , at: rcu_lock_acquire+0x5/0x30 [ 362.810746][ T4275] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 362.814096][ C0] [ 362.814096][ C0] stack backtrace: [ 362.841578][ C0] CPU: 0 PID: 4178 Comm: udevd Not tainted 5.15.189-syzkaller #0 [ 362.849339][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 362.858452][ T4275] usb 3-1: can't read configurations, error -71 [ 362.859539][ C0] Call Trace: [ 362.859557][ C0] [ 362.872128][ C0] dump_stack_lvl+0x168/0x230 [ 362.876858][ C0] ? show_regs_print_info+0x20/0x20 [ 362.882121][ C0] ? lockdep_rcu_suspicious+0x110/0x180 [ 362.887476][ T8142] binder: BINDER_SET_CONTEXT_MGR already set [ 362.887715][ C0] qdisc_lookup+0xa6/0x650 [ 362.898161][ C0] qdisc_tree_reduce_backlog+0x190/0x430 [ 362.903861][ C0] fq_codel_enqueue+0x103c/0x1590 [ 362.909007][ C0] ? INET_ECN_set_ce+0x950/0x950 [ 362.914010][ C0] tbf_enqueue+0x224/0x6e0 [ 362.918477][ C0] ? __rwlock_init+0x140/0x140 [ 362.923429][ C0] dev_qdisc_enqueue+0x48/0x210 [ 362.925916][ T8142] binder: 8141:8142 ioctl 4018620d 200000004a80 returned -16 [ 362.928333][ C0] __dev_queue_xmit+0xd7e/0x2ed0 [ 362.928384][ C0] ? dev_queue_xmit+0x20/0x20 [ 362.945701][ C0] ? arpt_alloc_initial_table+0xce0/0xce0 [ 362.951468][ C0] ? rcu_lock_release+0x5/0x20 [ 362.956281][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 362.961361][ C0] ? nf_hook_slow+0x1b0/0x200 [ 362.966091][ C0] NF_HOOK+0x2d4/0x360 [ 362.970322][ C0] ? memcpy+0x3c/0x60 [ 362.974349][ C0] ? NF_HOOK+0x360/0x360 [ 362.978635][ C0] ? arp_xmit+0x230/0x230 [ 362.983437][ C0] ? NF_HOOK+0x360/0x360 [ 362.987737][ C0] arp_xmit+0x142/0x230 [ 362.991935][ C0] arp_solicit+0xc1b/0xe60 [ 362.996406][ C0] ? arp_ifdown+0x20/0x20 [ 363.000777][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 363.005858][ C0] ? arp_ifdown+0x20/0x20 [ 363.010224][ C0] neigh_timer_handler+0xaa9/0xfe0 [ 363.015384][ C0] ? neigh_release+0x80/0x80 [ 363.020034][ C0] call_timer_fn+0x16c/0x530 [ 363.024671][ C0] ? neigh_release+0x80/0x80 [ 363.029306][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.035336][ C0] ? __run_timers+0x7c0/0x7c0 [ 363.040078][ C0] ? rcu_is_watching+0x11/0xa0 [ 363.044884][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 363.050127][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 363.055364][ C0] ? neigh_release+0x80/0x80 [ 363.059995][ C0] __run_timers+0x525/0x7c0 [ 363.064593][ C0] ? detach_timer+0x2b0/0x2b0 [ 363.069309][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 363.075343][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 363.080236][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 363.085580][ C0] run_timer_softirq+0x63/0xf0 [ 363.090397][ C0] handle_softirqs+0x328/0x820 [ 363.095211][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 363.100107][ C0] ? do_softirq+0x200/0x200 [ 363.104651][ C0] ? irqtime_account_irq+0xb2/0x1b0 [ 363.109900][ C0] __irq_exit_rcu+0x12f/0x220 [ 363.114618][ C0] ? irq_exit_rcu+0x20/0x20 [ 363.119172][ C0] irq_exit_rcu+0x5/0x20 [ 363.123451][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 363.129152][ C0] [ 363.132297][ C0] [ 363.135257][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 363.141287][ C0] RIP: 0010:memset_erms+0xb/0x10 [ 363.146822][ C0] Code: 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 f3 aa <4c> 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 01 01 [ 363.170282][ C0] RSP: 0018:ffffc90002e6f400 EFLAGS: 00000202 [ 363.179200][ C0] RAX: 0000000000000000 RBX: ffffc90002e6f4c8 RCX: 0000000000000000 [ 363.190633][ C0] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffffc90002e6f528 [ 363.199025][ C0] RBP: ffffc90002e6f510 R08: dffffc0000000000 R09: ffffc90002e6f518 [ 363.207310][ C0] R10: fffff520005cdea5 R11: 1ffff920005cdea3 R12: 1ffffffff1bdbd05 [ 363.215495][ C0] R13: dffffc0000000000 R14: ffffc90002e6f518 R15: ffffc90002e6f4fd [ 363.223896][ C0] unwind_next_frame+0xa3d/0x1d90 [ 363.229114][ C0] ? kasan_set_track+0x4b/0x70 [ 363.234400][ C0] ? stack_trace_save+0xe0/0xe0 [ 363.239585][ C0] arch_stack_walk+0x10c/0x140 [ 363.244421][ C0] ? kasan_set_free_info+0x1f/0x40 [ 363.249588][ C0] ? kfree+0xef/0x2a0 [ 363.253619][ C0] stack_trace_save+0x98/0xe0 [ 363.258338][ C0] ? stack_trace_snprint+0xf0/0xf0 [ 363.263765][ C0] kasan_set_track+0x4b/0x70 [ 363.268680][ C0] ? kasan_set_track+0x4b/0x70 [ 363.273736][ C0] kasan_set_free_info+0x1f/0x40 [ 363.278745][ C0] ____kasan_slab_free+0xd5/0x110 [ 363.284583][ C0] slab_free_freelist_hook+0xea/0x170 [ 363.290008][ C0] ? tomoyo_realpath_from_path+0x5d8/0x610 [ 363.295858][ C0] kfree+0xef/0x2a0 [ 363.299722][ C0] tomoyo_realpath_from_path+0x5d8/0x610 [ 363.305603][ C0] tomoyo_path_perm+0x1cd/0x510 [ 363.310599][ C0] ? tomoyo_path_permission+0x380/0x380 [ 363.316366][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 363.321629][ C0] ? rcu_is_watching+0x11/0xa0 [ 363.326452][ C0] security_inode_getattr+0xcf/0x120 [ 363.331785][ C0] vfs_getattr+0x26/0x3a0 [ 363.336161][ C0] ? user_path_at_empty+0x13e/0x190 [ 363.341506][ C0] vfs_statx+0x149/0x4d0 [ 363.345883][ C0] ? __might_fault+0xb7/0x110 [ 363.350600][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 363.355661][ C0] ? vfs_fstatat+0x40/0x40 [ 363.360131][ C0] __x64_sys_newfstatat+0x12c/0x1b0 [ 363.365374][ C0] ? __ia32_sys_newlstat+0x160/0x160 [ 363.370845][ C0] ? lock_chain_count+0x20/0x20 [ 363.375900][ C0] ? vtime_user_exit+0x2dc/0x400 [ 363.380895][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 363.386147][ C0] do_syscall_64+0x4c/0xa0 [ 363.390713][ C0] ? clear_bhb_loop+0x30/0x80 [ 363.395435][ C0] ? clear_bhb_loop+0x30/0x80 [ 363.400262][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 363.406213][ C0] RIP: 0033:0x7fac9162db0a [ 363.410906][ C0] Code: 48 8b 15 f1 f2 0d 00 f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 41 89 ca b8 06 01 00 00 0f 05 <3d> 00 f0 ff ff 77 07 31 c0 c3 0f 1f 40 00 48 8b 15 b9 f2 0d 00 f7 [ 363.430550][ C0] RSP: 002b:00007ffd8a4dfd48 EFLAGS: 00000206 ORIG_RAX: 0000000000000106 [ 363.439016][ C0] RAX: ffffffffffffffda RBX: 0000563bae327090 RCX: 00007fac9162db0a [ 363.447027][ C0] RDX: 00007ffd8a4dfd70 RSI: 0000563bae327090 RDI: 00000000ffffff9c [ 363.455035][ C0] RBP: 0000563bae3270a9 R08: 0000000000001940 R09: 0000000000000000 [ 363.463439][ C0] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd8a4e0e95 [ 363.471544][ C0] R13: 00007ffd8a4dfe00 R14: 0000563b8c0566d7 R15: 00007ffd8a4e0e90 [ 363.480011][ C0] [ 363.483355][ C0] vkms_vblank_simulate: vblank timer overrun [ 363.829348][ T13] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 363.857046][ T13] usb 4-1: USB disconnect, device number 31 Stopping sshd: stopped /usr/sbin/sshd (pid 3941) OK Stopping crond: stopped /usr/sbin/crond (pid 3930) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 3855) Stopping network: OK Stopping iptables: OK Stopping system message bus: done killall: can't kill pid 7305: No such process Stopping klogd: OK Stopping acpid: OK Stopping syslogd: stopped /sbin/syslogd (pid 3545) OK umount: can't remount debugfs read-only [ 368.447554][ T8204] ODEBUG: Out of memory. ODEBUG disabled umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.88 closed by remote host. Sent SIGTERM to all processes [ 369.809252][ T155] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.911776][ T155] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.001191][ T155] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.067090][ T155] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Sent SIGKILL to all processes Requesting system poweroff [ 370.860076][ T155] device hsr_slave_0 left promiscuous mode [ 370.869324][ T155] device hsr_slave_1 left promiscuous mode [ 370.877209][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.885984][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.895079][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.902957][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.911101][ T155] device bridge_slave_1 left promiscuous mode [ 370.919223][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.934411][ T155] device bridge_slave_0 left promiscuous mode [ 370.940996][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.957145][ T155] device veth1_macvtap left promiscuous mode [ 370.963905][ T155] device veth0_macvtap left promiscuous mode [ 370.970279][ T155] device veth1_vlan left promiscuous mode [ 370.977054][ T155] device veth0_vlan left promiscuous mode [ 371.161253][ T155] team0 (unregistering): Port device team_slave_1 removed [ 371.177097][ T155] team0 (unregistering): Port device team_slave_0 removed [ 371.194539][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.210135][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.277183][ T155] bond0 (unregistering): Released all slaves [ 372.442133][ T8205] kvm: exiting hardware virtualization [ 372.463696][ T8205] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 372.475442][ T8205] ACPI: PM: Preparing to enter system sleep state S5 [ 372.488018][ T8205] reboot: Power down serialport: VM disconnected.