last executing test programs: 24.137983525s ago: executing program 0 (id=513): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) syz_usb_disconnect(r4) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r3, 0x9dffffff}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) 16.13335341s ago: executing program 3 (id=532): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 16.091531693s ago: executing program 0 (id=533): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004040) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x200006}}], 0x30}}], 0x1, 0x4000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000300)={{r6}, 0x4, &(0x7f00000001c0)=[0x0, 0x8, 0x80000000, 0x5], 0x0, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "380086ddffffffff"}}}}}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r8, 0x8004550f, 0x0) 14.929651217s ago: executing program 0 (id=534): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e", 0x23}], 0x1}, 0x0) 14.723992324s ago: executing program 0 (id=536): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$eJzs3c9vG1kdAPDvOHG2adJNFjjASuwu7KK0gtrJRrsb9VCKhOBUCSj3EhIniuLEVey0TVTRVPwBSAgBEie4cEHiD0BClbhwREiV4AwCBELQwgEk6CDb4zR17CS0rp0mn480nffDM9/33M543sx0JoBT60o2PU7T9EJETGTluWz6ZD2zE/FWRDx6eGehPiWRptf+lkSSlbXWlTa8EmPNRRor+MoXI76e7I9b3dpenS+XSxtZvlhbu1Gsbm1fXFmbXy4tl9ZnZ2fen/tg7r256efp3tJYljgXEZc//6fvfuvHX7j888/c+v31v5z/RtJs8932fvx/hg+sbX6f+TjTtsjGswU7lob3JkaPtsy97J8IAAD9VT8u/VB2nH8hJmLokONZAAAA4OWTfnY8/pO0rt3tM9KlHAAAAHiJ5CJiPJJcIbvfdzxyuUIhGvfwfiTO5sqVau3TS5XN9cV6XcRk5HNLK+XSdHZv62Tkk3p+ppF+kn+3LT8bEa9FxHcmRhv5wkKlvDjokx8AAABwSoy1jf//OdEc/wMAAAAnzOSgGwAAAAC8cMb/AAAAcPIZ/wMAAMCJ9qWrV+tT2nr/9eLNrc3Vys2Li6XqamFtc6GwUNm4UViuVJYbz+xbO3Blu68OXN+8XayVqrVidWv7+lplc712feXpV2ADAAAA/fPam/d/m0TEzqXRGL002igb2VP/7+w9AQNrIPDC7J6yiySbj+z/0O9ebc7/2KdGAX0xNOgGAAMzPOgGAAOTH3QDgIFLDqnvevPOr7L5J3rbHgAAoPemPvbk+v9O2/X/3IFL7hxcDRx7NmI4vVz/h9Orcf2/wy1/HTlYgBMl7wgATr3nvv5/KP+HCAAABm28MSW5QnZ6bzxyuUIh4lzjtQD5ZGmlXJqOiFcj4jcT+Vfq+ZnGksmhYwYAAAAAAAAAAAAAAAAAAAAAAAAAoClNk0gBAACAEy0i9+fkF81n+U9NvDPefn5gJPnXRGSvCL31g2vfuz1fq23M1Mv/vlte+35W/u4gzmAAAAAA7Vrj9NY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66dHDOwutqZ9x//q5iJjsFH84zjTmZyIfEWf/kcTwnuWSiBjqQfydexHx0U7xk3qzdkN2ij/64uPHZPYtdIo/1oP4cJrdr+9/rnTa/nLxVmPeefsbjngq/6y67/9id/831GX7P3fEGK8/+Gmxa/x7Ea8Pd97/tOInXeK/fcT4X/vq9na3uvSHEVMdf3+Sp2IVa2s3itWt7Ysra/PLpeXS+uzszPtzH8y9NzddXFopl7I/O8b49sd/9vig/p/tEn/ykP6/c8T+//fB7YcfbibzneKff7tD/F/+KPvE/vi57LfvU1m6Xj/VSu8003u98ZNfv3FQ/xe79P+wv//zR+z/hS9/8w9H/CgA0AfVre3V+XK5tHFiE/VR+jFohsQxTNzdX/VmdF0qSQ5eYZqmaX2beo6GJd2j9yeR7JYMes8EAAD02pOj/0G3BAAAAAAAAAAAAAAAAAAAAE6vfjxXrD3mzm4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuJ/AQAA//8fp+fv") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="26a757208dfd7c2e695f05eca27904afc7789197712465003a9621f6ef13b022ac2cd77c5e5ae8a304de170b9e54bf62003c0580ae9e27c53b91f70a23096a516e804dcf9b48074f4b45cab58e76826558b1df48a374ea092f13c7cfdd1c26387be3cb085135c5638d29063a0bebee88088cb70b5450c5bb265dcc2595a238ed5183fdba75006ca53c5ecf0bb12b24294d144f580c3848b3abf78718c64d6b918d17ace6c4dd09fc22e489062a2a0561cd86b9b192a963caa53ef444b5efb693a13053a25e0759ea4e6c9585f550e004e770b6a3f5e396f2412fc556c54c3d4a4282872b18b8041a", 0xe8, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x49, 0x0, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @private=0xa010102, {[@rr={0x7, 0x3, 0xff}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0x1, [{@broadcast, 0x80}, {@remote, 0xa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x2}, {@local, 0xfffffffb}]}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0xd, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) 12.481576814s ago: executing program 2 (id=539): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3f, 0x2000000000000033, &(0x7f0000000440)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000646c6c2500000000002008207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000a35000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) 12.480388094s ago: executing program 3 (id=540): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x75, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 12.158804801s ago: executing program 2 (id=542): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200), 0x0) sendfile(r5, r4, 0x0, 0x3ffff) 12.060888098s ago: executing program 1 (id=543): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.003929773s ago: executing program 4 (id=544): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004040) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x200006}}], 0x30}}], 0x1, 0x4000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000300)={{r6}, 0x4, &(0x7f00000001c0)=[0x0, 0x8, 0x80000000, 0x5], 0x0, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "380086ddffffffff"}}}}}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r8, 0x8004550f, 0x0) 10.809484369s ago: executing program 4 (id=545): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r5, 0xc0145b0e, &(0x7f0000000040)) syz_usb_disconnect(r4) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}, r3}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r3, 0x9dffffff}}, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x7e, 0xe1c07, 0x6, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, 0x1}) syz_pidfd_open(0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f00000002c0)) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x40000014}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000040)=ANY=[@ANYBLOB="01f20000bbbb8a5cbbbb"]) ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000078000000030a01010000000000000000010000000900030073797a310000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a300000000008000a4000000002"], 0xc0}}, 0x0) 10.696632109s ago: executing program 2 (id=546): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e370248018000", 0x29}], 0x1}, 0x0) 10.641649703s ago: executing program 3 (id=547): fanotify_init(0x200, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_dev$ndb(0x0, 0x0, 0x115440) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000005c0)={{0x3, 0x5, 0x0, 0x2, 'syz1\x00', 0x9}, 0x1, 0x4, 0x6, 0x0, 0x3, 0xe, 'syz1\x00', &(0x7f0000000200)=['\x00', '\x00', '\x00'], 0x3}) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040)="52784a0e000071000000c83b", 0xff92, 0x0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) connect$unix(0xffffffffffffffff, 0x0, 0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0x3, 0x5) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 10.488661915s ago: executing program 2 (id=548): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) creat(&(0x7f0000000200)='./file2\x00', 0x102) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) 10.438943319s ago: executing program 1 (id=549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.958406179s ago: executing program 0 (id=550): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.660835054s ago: executing program 2 (id=551): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) connect$can_j1939(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$uac1(0x0, 0xac, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$sequencer2(0xffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r2, 0x5404) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x3c63, &(0x7f0000000140)={0x0, 0xfffffffe, 0x10100, 0x2, 0x4000000}, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = syz_open_dev$video(&(0x7f0000000b40), 0x7, 0x28000) ioctl$VIDIOC_LOG_STATUS(r3, 0x5646, 0x0) 6.620328727s ago: executing program 1 (id=552): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x3) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000100)=0x400, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0xff, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '@\x00', 0x14, 0x6, 0x1, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x7, 0x0, 0x0, 0xf}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6.602771969s ago: executing program 3 (id=553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x440142, 0x0) 6.262233296s ago: executing program 0 (id=554): socket$can_bcm(0x1d, 0x2, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="020500020e00000000000000072e9eca7bd039bd7a41d0d999000e000a004e24fffffffdfc01000000000200000098"], 0x70}, 0x1, 0x400000000000000}, 0x0) r4 = syz_io_uring_setup(0x1e1e, &(0x7f0000000200)={0x0, 0x86f7, 0x10100, 0x3}, &(0x7f0000002000)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x22}) syz_emit_ethernet(0x2a, &(0x7f0000000280)=ANY=[@ANYBLOB="9b4307000001aaaaaaaaaa000800bc41d14286078bff0001907800000000ffffffffe0009078fffd000062c272fabd74b471b3729d9d2a4566fa8989f867af6040394faffadbfee521aae0cc03c057b95534675c"], 0x0) io_uring_enter(r4, 0x48e9, 0x0, 0x2, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000480)={0xa, 0xfffe, 0x3, @mcast1, 0x5}, 0x1c) syz_open_dev$vivid(&(0x7f0000000080), 0x3, 0x2) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, &(0x7f00000004c0)="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") r7 = dup2(r2, r2) r8 = socket(0x2b, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000000, 0x0, 0xff, 0x1}, 0x20) futex(&(0x7f00000000c0)=0x1, 0x5, 0x2, &(0x7f0000000100)={0x0, 0x3938700}, &(0x7f0000000140)=0x2, 0x1) r10 = socket(0x2b, 0x1, 0x1) bind$inet6(r10, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @mcast1, 0xb}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000000, 0x0, 0xff, 0x0, 0x4}, 0x20) sendmmsg$unix(r7, &(0x7f0000008380), 0x0, 0x4048801) r11 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r12 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r12, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) close_range(r11, 0xffffffffffffffff, 0x0) 5.553630793s ago: executing program 3 (id=555): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$dlm_control(0xffffffffffffff9c, 0x0, 0xad82, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x64, 0x1, 0x1, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) listen(0xffffffffffffffff, 0x802) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f0000000180)=0x7a, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r3, &(0x7f0000001200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001280)="bb2d839f3bf337ccd0d8f3513ab30aba4b00b6f0ef506a60f4082ace5a8a10d80d8d595071f2ff529ff6996481ffc7e4de448343b85079722c4f1a1ce360836392283201a1a5ac0b6e24ccf9f075c64fe58b7a37d37019a49908876bc37c9f304eeefed8a6d8cae3ca0f81e900c8735b8b3063967b68a1567e30726f2c0edb6c85e78619700b0645b728a0c88b22d18366a6db2e391401feb630396bf42b987b102eb2d0a804e188648df6c8ddd79e0fde3893930e06e91c39cc01d239a1c20cb0cee84da924212382163c6638e798d66660c356195a56523456052c42aca7c8404e259561dfea5cbdc21a31b7e7eb73a710b68ba2ae2eff86d3d4fbda8b72014f5de839d48acbc9d217f7ac0b3362a66f3a7d04277cc4b918687ed082170f98dc54bd56f28ea3fecc4e86e1820ed811919dac4d09c18e27c4d839c7ac015d34522c7d87ae968dc872d97db81da9a4b6f631535348d9d44ca3fe846f6706fd3d3bd2f62f2d046a2973c9e8c6ccbf96fd0060d532433732627bf213a35870cea250f79ac773b8adba386e0ae960801b073646dcfe7c89f0cb410d22146cb3109bb9a12649e943104875c0272dfdfac5998854c0f62438909522fba45a4ac83b917a6d9a45704fefe035986b7ae676dd6b8094d2ce7ed64f0aaf138cc827553d74b2c04488d849df41fb98a6c966c07cbb1a9fe3ee5e41c3082c51b37f9df811461cf123830ee606c7b5816b6b86b21860177bfc3fd9aeb689dbb39963a55cee2afe7352200f719a3c0fe44e059446bd7226d9e814d2358c2524c0103c48f7516cc69eb04815bbef84a5bd840a5131f45c335ef8939d6100cf89160f5f1c5aec60e479d18f4680a5a525964fbf2371c1493df2c3e67f98645f329d984250dc98a48a5ab14624438ad259145794a22055ace7d33b5218ed2bda0a528bee49e4e4ae3068477da429945eef0e06128a3202f62634d8", 0x2b3}], 0x1}}], 0x1, 0x40000d0) sendto$inet(r3, &(0x7f0000000300)="0906c422e0243219ff7b440e76a1b51b82ba23599f81b52c9d4db4486cec105e4b9f0f859f8a43eef6352f1e46e3145089b6a22f618ca14e288029b613a329c422481c6b7aff6806bce699cea461ecf591d9018b2a1d84e389a8d3127fd35913fe69754435c2", 0xffffffffffffffbb, 0x40040011, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/fscaps', 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0x20000000, 0x80, 0x0, 0x11}) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000bdb000/0x3000)=nil, 0x3000, &(0x7f0000000000)='permhat ') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 4.016004197s ago: executing program 4 (id=556): socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0xc044) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./bus\x00', 0x20240, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r5, &(0x7f0000004200), 0x0) sendfile(r5, r4, 0x0, 0x3ffff) 3.026821136s ago: executing program 4 (id=557): syz_open_dev$vcsa(&(0x7f0000000000), 0x1, 0x40002) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x18) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r3, &(0x7f0000000240)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004040) r5 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet6(r5, &(0x7f0000001c40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}, @hoplimit={{0x14, 0x29, 0x34, 0x200006}}], 0x30}}], 0x1, 0x4000000) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$BTRFS_IOC_SEND(r5, 0x40489426, &(0x7f0000000300)={{r6}, 0x4, &(0x7f00000001c0)=[0x0, 0x8, 0x80000000, 0x5], 0x0, 0x7}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000008000000010001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b708000002001e007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @local}, "380086ddffffffff"}}}}}, 0x0) ioctl$USBDEVFS_CLAIMINTERFACE(r8, 0x8004550f, 0x0) 1.871952269s ago: executing program 4 (id=558): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x75, 0x5}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='signal_generate\x00', r1}, 0x18) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 1.827096043s ago: executing program 1 (id=559): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000240)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02002c000b35d25a806f8c6394f91124fc602f1b06000a740100053582c137153e370248018000", 0x29}], 0x1}, 0x0) 1.633857088s ago: executing program 4 (id=560): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1008413, &(0x7f0000000000)={[{@noblock_validity}, {@barrier}]}, 0x0, 0x517, &(0x7f00000000c0)="$eJzs3c9vG1kdAPDvOHG2adJNFjjASuwu7KK0gtrJRrsb9VCKhOBUCSj3EhIniuLEVey0TVTRVPwBSAgBEie4cEHiD0BClbhwREiV4AwCBELQwgEk6CDb4zR17CS0rp0mn480nffDM9/33M543sx0JoBT60o2PU7T9EJETGTluWz6ZD2zE/FWRDx6eGehPiWRptf+lkSSlbXWlTa8EmPNRRor+MoXI76e7I9b3dpenS+XSxtZvlhbu1Gsbm1fXFmbXy4tl9ZnZ2fen/tg7r256efp3tJYljgXEZc//6fvfuvHX7j888/c+v31v5z/RtJs8932fvx/hg+sbX6f+TjTtsjGswU7lob3JkaPtsy97J8IAAD9VT8u/VB2nH8hJmLokONZAAAA4OWTfnY8/pO0rt3tM9KlHAAAAHiJ5CJiPJJcIbvfdzxyuUIhGvfwfiTO5sqVau3TS5XN9cV6XcRk5HNLK+XSdHZv62Tkk3p+ppF+kn+3LT8bEa9FxHcmRhv5wkKlvDjokx8AAABwSoy1jf//OdEc/wMAAAAnzOSgGwAAAAC8cMb/AAAAcPIZ/wMAAMCJ9qWrV+tT2nr/9eLNrc3Vys2Li6XqamFtc6GwUNm4UViuVJYbz+xbO3Blu68OXN+8XayVqrVidWv7+lplc712feXpV2ADAAAA/fPam/d/m0TEzqXRGL002igb2VP/7+w9AQNrIPDC7J6yiySbj+z/0O9ebc7/2KdGAX0xNOgGAAMzPOgGAAOTH3QDgIFLDqnvevPOr7L5J3rbHgAAoPemPvbk+v9O2/X/3IFL7hxcDRx7NmI4vVz/h9Orcf2/wy1/HTlYgBMl7wgATr3nvv5/KP+HCAAABm28MSW5QnZ6bzxyuUIh4lzjtQD5ZGmlXJqOiFcj4jcT+Vfq+ZnGksmhYwYAAAAAAAAAAAAAAAAAAAAAAAAAoClNk0gBAACAEy0i9+fkF81n+U9NvDPefn5gJPnXRGSvCL31g2vfuz1fq23M1Mv/vlte+35W/u4gzmAAAAAA7Vrj9NY4HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB66dHDOwutqZ9x//q5iJjsFH84zjTmZyIfEWf/kcTwnuWSiBjqQfydexHx0U7xk3qzdkN2ij/64uPHZPYtdIo/1oP4cJrdr+9/rnTa/nLxVmPeefsbjngq/6y67/9id/831GX7P3fEGK8/+Gmxa/x7Ea8Pd97/tOInXeK/fcT4X/vq9na3uvSHEVMdf3+Sp2IVa2s3itWt7Ysra/PLpeXS+uzszPtzH8y9NzddXFopl7I/O8b49sd/9vig/p/tEn/ykP6/c8T+//fB7YcfbibzneKff7tD/F/+KPvE/vi57LfvU1m6Xj/VSu8003u98ZNfv3FQ/xe79P+wv//zR+z/hS9/8w9H/CgA0AfVre3V+XK5tHFiE/VR+jFohsQxTNzdX/VmdF0qSQ5eYZqmaX2beo6GJd2j9yeR7JYMes8EAAD02pOj/0G3BAAAAAAAAAAAAAAAAAAAAE6vfjxXrD3mzm4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuJ/AQAA//8fp+fv") r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) lseek(r0, 0xfffffffffffffffe, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0xc) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000080)=0x1b, 0x4) sendto$inet6(r2, &(0x7f00000000c0)="26a757208dfd7c2e695f05eca27904afc7789197712465003a9621f6ef13b022ac2cd77c5e5ae8a304de170b9e54bf62003c0580ae9e27c53b91f70a23096a516e804dcf9b48074f4b45cab58e76826558b1df48a374ea092f13c7cfdd1c26387be3cb085135c5638d29063a0bebee88088cb70b5450c5bb265dcc2595a238ed5183fdba75006ca53c5ecf0bb12b24294d144f580c3848b3abf78718c64d6b918d17ace6c4dd09fc22e489062a2a0561cd86b9b192a963caa53ef444b5efb693a13053a25e0759ea4e6c9585f550e004e770b6a3f5e396f2412fc556c54c3d4a4282872b18b8041a", 0xe8, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x49, 0x0, {{0x14, 0x4, 0x1, 0x0, 0x50, 0x65, 0x0, 0x1, 0x4, 0x0, @local, @private=0xa010102, {[@rr={0x7, 0x3, 0xff}, @timestamp_prespec={0x44, 0x24, 0x36, 0x3, 0x1, [{@broadcast, 0x80}, {@remote, 0xa}, {@dev={0xac, 0x14, 0x14, 0x40}, 0x2}, {@local, 0xfffffffb}]}, @timestamp_addr={0x44, 0x14, 0x82, 0x1, 0xd, [{@rand_addr=0x64010100, 0x7}, {@local, 0x7}]}]}}}}}) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010005081000418e00000004fcff", 0x58}], 0x1) 1.504683599s ago: executing program 1 (id=561): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 585.930423ms ago: executing program 1 (id=562): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) creat(&(0x7f0000000200)='./file2\x00', 0x102) r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x88b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = gettid() process_vm_writev(r6, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x229, 0x0) 443.562915ms ago: executing program 2 (id=563): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000870000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r3}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=564): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000057"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 138.129955][ T4816] vivid-000: HSV Encoding: Hue 0-179 [ 138.138989][ T4816] vivid-000: Quantization: Default [ 138.144606][ T4816] vivid-000: Apply Alpha To Red Only: false [ 138.156962][ T4816] vivid-000: Standard Aspect Ratio: 4x3 [ 138.169311][ T4816] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 138.181687][ T4816] vivid-000: DV Timings: 640x480p59 inactive [ 138.193928][ T4816] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 138.208942][ T4816] vivid-000: Maximum EDID Blocks: 2 [ 138.218399][ T4816] vivid-000: Limited RGB Range (16-235): false [ 138.225546][ T4816] vivid-000: Rx RGB Quantization Range: Automatic [ 138.249602][ T4816] vivid-000: Power Present: 0x00000001 [ 138.263074][ T4816] tpg source WxH: 640x360 (Y'CbCr) [ 138.270383][ T4816] tpg field: 1 [ 138.273911][ T4816] tpg crop: 640x360@0x0 [ 138.284200][ T4816] tpg compose: 640x360@0x0 [ 138.290954][ T4816] tpg colorspace: 8 [ 138.296530][ T4816] tpg transfer function: 0/0 [ 138.304365][ T4816] tpg Y'CbCr encoding: 0/0 [ 138.312721][ T4816] tpg quantization: 0/0 [ 138.318669][ T4816] tpg RGB range: 0/2 [ 138.323098][ T4816] vivid-000: ================== END STATUS ================== [ 142.642350][ T4459] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.827453][ T4459] usb 3-1: Using ep0 maxpacket: 8 [ 142.847897][ T4459] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 142.944614][ T4459] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 143.056888][ T4459] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 143.130446][ T4459] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 143.203821][ T4459] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 143.244238][ T4459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.489439][ T4459] usb 3-1: GET_CAPABILITIES returned 0 [ 143.496416][ T4459] usbtmc 3-1:16.0: can't read capabilities [ 143.731674][ T4857] vivid-000: ================= START STATUS ================= [ 143.747507][ T4857] vivid-000: Test Pattern: 75% Colorbar [ 143.785169][ T4857] vivid-000: Fill Percentage of Frame: 100 [ 143.803472][ T4857] vivid-000: Horizontal Movement: No Movement [ 143.810590][ T4857] vivid-000: Vertical Movement: No Movement [ 143.817086][ T4857] vivid-000: OSD Text Mode: All [ 143.825715][ T4857] vivid-000: Show Border: false [ 143.831977][ T4857] vivid-000: Show Square: false [ 143.837082][ T4857] vivid-000: Sensor Flipped Horizontally: false [ 143.848847][ T4857] vivid-000: Sensor Flipped Vertically: false [ 143.855252][ T4857] vivid-000: Insert SAV Code in Image: false [ 143.868306][ T4459] usb 3-1: USB disconnect, device number 5 [ 143.872258][ T4857] vivid-000: Insert EAV Code in Image: false [ 143.947787][ T4857] vivid-000: Insert Video Guard Band: false [ 143.985326][ T4857] vivid-000: Reduced Framerate: false [ 144.024328][ T4857] vivid-000: Enable Capture Cropping: true [ 144.033193][ T4857] vivid-000: Enable Capture Composing: true [ 144.042205][ T4857] vivid-000: Enable Capture Scaler: true [ 144.058701][ T4857] vivid-000: Timestamp Source: End of Frame [ 144.069819][ T4857] vivid-000: Colorspace: sRGB [ 144.078751][ T4857] vivid-000: Transfer Function: Default [ 144.096736][ T4857] vivid-000: Y'CbCr Encoding: Default [ 144.110050][ T4857] vivid-000: HSV Encoding: Hue 0-179 [ 144.116779][ T4857] vivid-000: Quantization: Default [ 144.122315][ T4857] vivid-000: Apply Alpha To Red Only: false [ 144.136824][ T4857] vivid-000: Standard Aspect Ratio: 4x3 [ 144.154941][ T4857] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 144.173232][ T4857] vivid-000: DV Timings: 640x480p59 inactive [ 144.189507][ T4857] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 144.220693][ T4857] vivid-000: Maximum EDID Blocks: 2 [ 144.244667][ T4857] vivid-000: Limited RGB Range (16-235): false [ 144.253543][ T4857] vivid-000: Rx RGB Quantization Range: Automatic [ 144.263272][ T4857] vivid-000: Power Present: 0x00000001 [ 144.281763][ T4857] tpg source WxH: 640x360 (Y'CbCr) [ 144.288407][ T4857] tpg field: 1 [ 144.298467][ T4857] tpg crop: 640x360@0x0 [ 144.302968][ T4857] tpg compose: 640x360@0x0 [ 144.401527][ T4857] tpg colorspace: 8 [ 144.405694][ T4857] tpg transfer function: 0/0 [ 144.415589][ T4857] tpg Y'CbCr encoding: 0/0 [ 144.429232][ T4857] tpg quantization: 0/0 [ 144.459458][ T4857] tpg RGB range: 0/2 [ 144.464748][ T4857] vivid-000: ================== END STATUS ================== [ 145.432952][ T4869] netdevsim netdevsim4: Direct firmware load for . [ 145.432952][ T4869] failed with error -2 [ 145.447074][ T4869] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 145.447074][ T4869] [ 147.859712][ T4319] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 147.950423][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 148.107325][ T4319] usb 3-1: device descriptor read/64, error -32 [ 148.421329][ T4319] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 148.627310][ T4319] usb 3-1: Using ep0 maxpacket: 8 [ 149.214501][ T4319] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 149.238517][ T4319] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 149.307264][ T4319] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 149.366126][ T4319] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.481966][ T4319] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 149.547804][ T4319] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.843028][ T4922] netlink: 4 bytes leftover after parsing attributes in process `syz.4.142'. [ 151.902012][ T4926] netlink: 12 bytes leftover after parsing attributes in process `syz.4.142'. [ 152.411371][ T4319] usb 3-1: usb_control_msg returned -71 [ 152.417164][ T4319] usbtmc 3-1:16.0: can't read capabilities [ 152.463876][ T4319] usb 3-1: USB disconnect, device number 7 [ 152.663085][ T4946] vivid-000: ================= START STATUS ================= [ 152.672130][ T4946] vivid-000: Test Pattern: 75% Colorbar [ 152.679119][ T4946] vivid-000: Fill Percentage of Frame: 100 [ 152.705497][ T4946] vivid-000: Horizontal Movement: No Movement [ 152.713757][ T4946] vivid-000: Vertical Movement: No Movement [ 152.725161][ T4946] vivid-000: OSD Text Mode: All [ 152.733110][ T4946] vivid-000: Show Border: false [ 152.742658][ T4946] vivid-000: Show Square: false [ 152.753007][ T4946] vivid-000: Sensor Flipped Horizontally: false [ 152.765972][ T4946] vivid-000: Sensor Flipped Vertically: false [ 152.904074][ T4946] vivid-000: Insert SAV Code in Image: false [ 153.394958][ T4961] netlink: 4 bytes leftover after parsing attributes in process `syz.0.149'. [ 153.447460][ T4341] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.707389][ T4341] usb 2-1: Using ep0 maxpacket: 8 [ 153.721711][ T4341] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 153.765764][ T4341] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 153.796254][ T4341] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 153.816791][ T4341] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.841437][ T4341] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.850956][ T4341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.980760][ T4974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 154.097096][ T4341] usb 2-1: GET_CAPABILITIES returned 0 [ 154.102886][ T4341] usbtmc 2-1:16.0: can't read capabilities [ 154.150229][ T4946] vivid-000: Insert EAV Code in Image: false [ 154.171957][ T4946] vivid-000: Insert Video Guard Band: false [ 154.189712][ T4974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.155'. [ 154.199529][ T4946] vivid-000: Reduced Framerate: false [ 154.215147][ T4946] vivid-000: Enable Capture Cropping: true [ 154.240745][ T4946] vivid-000: Enable Capture Composing: true [ 154.250737][ T4946] vivid-000: Enable Capture Scaler: true [ 154.261123][ T4946] vivid-000: Timestamp Source: End of Frame [ 154.271217][ T4946] vivid-000: Colorspace: sRGB [ 154.279118][ T4946] vivid-000: Transfer Function: Default [ 154.289809][ T4946] vivid-000: Y'CbCr Encoding: Default [ 154.295423][ T4946] vivid-000: HSV Encoding: Hue 0-179 [ 154.309083][ T4946] vivid-000: Quantization: Default [ 154.319356][ T4946] vivid-000: Apply Alpha To Red Only: false [ 154.328490][ T3741] usb 2-1: USB disconnect, device number 3 [ 154.337479][ T4946] vivid-000: Standard Aspect Ratio: 4x3 [ 154.349395][ T4946] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 154.362051][ T4946] vivid-000: DV Timings: 640x480p59 inactive [ 154.371157][ T4946] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 154.389630][ T4946] vivid-000: Maximum EDID Blocks: 2 [ 154.395255][ T4946] vivid-000: Limited RGB Range (16-235): false [ 154.403890][ T4946] vivid-000: Rx RGB Quantization Range: Automatic [ 154.415979][ T4946] vivid-000: Power Present: 0x00000001 [ 154.423486][ T4946] tpg source WxH: 640x360 (Y'CbCr) [ 154.429800][ T4946] tpg field: 1 [ 154.435438][ T4946] tpg crop: 640x360@0x0 [ 154.441103][ T4946] tpg compose: 640x360@0x0 [ 154.447793][ T4946] tpg colorspace: 8 [ 154.452183][ T4946] tpg transfer function: 0/0 [ 154.459395][ T4946] tpg Y'CbCr encoding: 0/0 [ 154.466561][ T4946] tpg quantization: 0/0 [ 154.471108][ T4946] tpg RGB range: 0/2 [ 154.475612][ T4946] vivid-000: ================== END STATUS ================== [ 156.007325][ T4319] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.207320][ T4319] usb 5-1: Using ep0 maxpacket: 8 [ 156.237839][ T4319] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 156.272443][ T4319] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 156.317426][ T4319] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 156.378486][ T4319] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 156.437326][ T4319] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 156.466781][ T4319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.451356][ T4319] usb 5-1: GET_CAPABILITIES returned 0 [ 157.456954][ T4319] usbtmc 5-1:16.0: can't read capabilities [ 158.568356][ T4319] usb 5-1: USB disconnect, device number 4 [ 160.167674][ T4341] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 160.672667][ T4341] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 160.717336][ T4341] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 160.731783][ T4341] usb 2-1: config 0 has no interface number 0 [ 160.820885][ T4341] usb 2-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 160.837607][ T4341] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 160.846829][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.928650][ T4341] usb 2-1: Product: syz [ 160.932951][ T4341] usb 2-1: Manufacturer: syz [ 160.938224][ T4341] usb 2-1: SerialNumber: syz [ 160.956669][ T4341] usb 2-1: config 0 descriptor?? [ 161.268295][ T5046] vivid-000: ================= START STATUS ================= [ 161.275993][ T5046] vivid-000: Test Pattern: 75% Colorbar [ 161.588804][ T5046] vivid-000: Fill Percentage of Frame: 100 [ 161.690220][ T5046] vivid-000: Horizontal Movement: No Movement [ 161.696569][ T5046] vivid-000: Vertical Movement: No Movement [ 161.720689][ T4341] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 161.790546][ T5046] vivid-000: OSD Text Mode: All [ 161.889011][ T5046] vivid-000: Show Border: false [ 162.014232][ T5046] vivid-000: Show Square: false [ 162.019891][ T5046] vivid-000: Sensor Flipped Horizontally: false [ 162.047404][ T5046] vivid-000: Sensor Flipped Vertically: false [ 162.109697][ T5046] vivid-000: Insert SAV Code in Image: false [ 162.132109][ T5046] vivid-000: Insert EAV Code in Image: false [ 162.287359][ T5046] vivid-000: Insert Video Guard Band: false [ 162.307953][ T5046] vivid-000: Reduced Framerate: false [ 162.313579][ T5046] vivid-000: Enable Capture Cropping: true [ 162.324163][ T5046] vivid-000: Enable Capture Composing: true [ 162.357484][ T5046] vivid-000: Enable Capture Scaler: true [ 162.557132][ T5046] vivid-000: Timestamp Source: End of Frame [ 162.641284][ T5046] vivid-000: Colorspace: sRGB [ 162.670018][ T5046] vivid-000: Transfer Function: Default [ 162.737624][ T4532] usb 2-1: Failed to submit usb control message: -110 [ 162.744918][ T4532] usb 2-1: unable to send the bmi data to the device: -110 [ 162.766279][ T5046] vivid-000: Y'CbCr Encoding: Default [ 162.776505][ T5046] vivid-000: HSV Encoding: Hue 0-179 [ 162.788666][ T5046] vivid-000: Quantization: [ 162.813494][ T4532] usb 2-1: unable to get target info from device [ 162.824835][ T5046] Default [ 162.827978][ T4532] usb 2-1: could not get target info (-110) [ 162.833933][ T4532] usb 2-1: could not probe fw (-110) [ 162.849660][ T5046] vivid-000: Apply Alpha To Red Only: false [ 162.855635][ T5046] vivid-000: Standard Aspect Ratio: 4x3 [ 162.869590][ T5046] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 162.882230][ T5046] vivid-000: DV Timings: 640x480p59 inactive [ 162.891215][ T5046] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 162.902604][ T5046] vivid-000: Maximum EDID Blocks: 2 [ 162.914576][ T5046] vivid-000: Limited RGB Range (16-235): false [ 162.921436][ T5046] vivid-000: Rx RGB Quantization Range: Automatic [ 162.939827][ T5046] vivid-000: Power Present: 0x00000001 [ 162.947514][ T5046] tpg source WxH: 640x360 (Y'CbCr) [ 162.952899][ T4319] usb 2-1: USB disconnect, device number 4 [ 162.960013][ T5046] tpg field: 1 [ 162.968388][ T5046] tpg crop: 640x360@0x0 [ 162.979194][ T5046] tpg compose: 640x360@0x0 [ 162.984117][ T5046] tpg colorspace: 8 [ 163.058652][ T5046] tpg transfer function: 0/0 [ 163.532760][ T5046] tpg Y'CbCr encoding: 0/0 [ 163.545047][ T5046] tpg quantization: 0/0 [ 163.552606][ T5046] tpg RGB range: 0/2 [ 163.575659][ T5046] vivid-000: ================== END STATUS ================== [ 164.053181][ T5071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.172'. [ 166.647416][ T4341] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 166.880915][ T4341] usb 2-1: Using ep0 maxpacket: 32 [ 166.894240][ T4341] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.917105][ T4341] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 166.951187][ T5126] vivid-000: ================= START STATUS ================= [ 166.984299][ T4341] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 167.007685][ T5126] vivid-000: Test Pattern: 75% Colorbar [ 167.019452][ T5126] vivid-000: Fill Percentage of Frame: 100 [ 167.026169][ T4341] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 167.042416][ T4341] usb 2-1: Product: syz [ 167.047938][ T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 167.276122][ T4341] usb 2-1: Manufacturer: syz [ 167.287458][ T5126] vivid-000: Horizontal Movement: No Movement [ 167.297868][ T5126] vivid-000: Vertical Movement: No Movement [ 167.304771][ T5126] vivid-000: OSD Text Mode: All [ 167.310476][ T5126] vivid-000: Show Border: false [ 167.316028][ T5126] vivid-000: Show Square: false [ 167.333149][ T4341] usb 2-1: SerialNumber: syz [ 167.342021][ T5126] vivid-000: Sensor Flipped Horizontally: false [ 167.363248][ T5126] vivid-000: Sensor Flipped Vertically: false [ 167.375227][ T4341] usb 2-1: config 0 descriptor?? [ 167.541650][ T5126] vivid-000: Insert SAV Code in Image: false [ 167.547844][ T126] usb 1-1: Using ep0 maxpacket: 8 [ 167.613545][ T126] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 167.628192][ T5126] vivid-000: Insert EAV Code in Image: false [ 167.643226][ T126] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 167.664706][ T5126] vivid-000: Insert Video Guard Band: false [ 167.671495][ T126] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 167.697544][ T5126] vivid-000: Reduced Framerate: false [ 167.703150][ T126] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 167.726991][ T5126] vivid-000: Enable Capture Cropping: true [ 167.733383][ T5126] vivid-000: Enable Capture Composing: true [ 167.739717][ T126] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 167.783129][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.844283][ T4340] usb 2-1: USB disconnect, device number 5 [ 167.964776][ T5126] vivid-000: Enable Capture Scaler: true [ 167.992163][ T5126] vivid-000: Timestamp Source: End of Frame [ 168.049838][ T5126] vivid-000: Colorspace: sRGB [ 168.057353][ T4341] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 168.067442][ T5126] vivid-000: Transfer Function: Default [ 168.181815][ T5126] vivid-000: Y'CbCr Encoding: Default [ 168.202701][ T5126] vivid-000: HSV Encoding: Hue 0-179 [ 168.267684][ T5126] vivid-000: Quantization: Default [ 168.310436][ T4341] usb 4-1: unable to get BOS descriptor or descriptor too short [ 168.325234][ T4341] usb 4-1: not running at top speed; connect to a high speed hub [ 168.330825][ T126] usb 1-1: GET_CAPABILITIES returned 0 [ 168.339609][ T126] usbtmc 1-1:16.0: can't read capabilities [ 168.348334][ T4341] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 168.393150][ T4341] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 168.426740][ T5126] vivid-000: Apply Alpha To Red Only: false [ 168.446393][ T5126] vivid-000: Standard Aspect Ratio: 4x3 [ 168.468830][ T5126] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 168.513128][ T5126] vivid-000: DV Timings: 640x480p59 inactive [ 168.524622][ T5126] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 168.532044][ T4341] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 168.536128][ T4341] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 168.544362][ T5126] vivid-000: Maximum EDID Blocks: 2 [ 168.586136][ T4341] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.594900][ T5126] vivid-000: Limited RGB Range (16-235): false [ 168.617402][ T4341] usb 4-1: Product: syz [ 168.621677][ T4341] usb 4-1: Manufacturer: syz [ 168.643699][ T5126] vivid-000: Rx RGB Quantization Range: Automatic [ 168.657107][ T4341] usb 4-1: SerialNumber: syz [ 168.691562][ T126] usb 1-1: USB disconnect, device number 3 [ 168.765412][ T5126] vivid-000: Power Present: 0x00000001 [ 168.806140][ T5126] tpg source WxH: 640x360 (Y'CbCr) [ 168.812223][ T5126] tpg field: 1 [ 168.816040][ T5126] tpg crop: 640x360@0x0 [ 168.823353][ T5126] tpg compose: 640x360@0x0 [ 168.830812][ T5126] tpg colorspace: 8 [ 168.835029][ T5126] tpg transfer function: 0/0 [ 168.843295][ T5126] tpg Y'CbCr encoding: 0/0 [ 168.853096][ T5126] tpg quantization: 0/0 [ 168.859857][ T5126] tpg RGB range: 0/2 [ 168.864158][ T5126] vivid-000: ================== END STATUS ================== [ 168.937846][ T4341] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 168.968936][ T4341] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 168.984999][ T4341] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 169.102751][ T4341] usb 4-1: USB disconnect, device number 6 [ 169.737286][ T126] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 169.931668][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 169.987764][ T126] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 170.024967][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.069958][ T126] usb 2-1: config 0 descriptor?? [ 170.121381][ T126] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 170.317746][ T126] usb 2-1: USB disconnect, device number 6 [ 170.897339][ T126] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.097465][ T126] usb 2-1: Using ep0 maxpacket: 32 [ 171.105173][ T126] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 171.160560][ T126] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 171.202812][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.245021][ T126] usb 2-1: config 0 descriptor?? [ 171.279529][ T126] ldusb 2-1:0.0: Interrupt in endpoint not found [ 171.296554][ T126] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 171.544101][ T4341] usb 2-1: USB disconnect, device number 7 [ 172.097322][ T14] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 172.514539][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 173.609928][ T14] usb 1-1: not running at top speed; connect to a high speed hub [ 173.676347][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.733734][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 173.846221][ T14] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 173.861733][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 173.877297][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.891972][ T14] usb 1-1: Product: syz [ 174.553252][ T14] usb 1-1: Manufacturer: syz [ 174.558338][ T14] usb 1-1: SerialNumber: syz [ 174.608910][ T14] usb 1-1: can't set config #1, error -71 [ 174.631235][ T14] usb 1-1: USB disconnect, device number 4 [ 174.676814][ T5181] device bridge4 entered promiscuous mode [ 175.442400][ T5201] vivid-000: ================= START STATUS ================= [ 175.494269][ T5201] vivid-000: Test Pattern: 75% Colorbar [ 175.541175][ T5201] vivid-000: Fill Percentage of Frame: 100 [ 176.163757][ T5201] vivid-000: Horizontal Movement: No Movement [ 176.170415][ T5201] vivid-000: Vertical Movement: No Movement [ 176.176679][ T5201] vivid-000: OSD Text Mode: All [ 176.182238][ T5201] vivid-000: Show Border: false [ 176.187594][ T5201] vivid-000: Show Square: false [ 176.192694][ T5201] vivid-000: Sensor Flipped Horizontally: false [ 176.199995][ T5201] vivid-000: Sensor Flipped Vertically: false [ 176.206309][ T5201] vivid-000: Insert SAV Code in Image: false [ 176.212961][ T5201] vivid-000: Insert EAV Code in Image: false [ 176.219770][ T5201] vivid-000: Insert Video Guard Band: false [ 176.226003][ T5201] vivid-000: Reduced Framerate: false [ 176.258310][ T5201] vivid-000: Enable Capture Cropping: true [ 176.270909][ T5201] vivid-000: Enable Capture Composing: true [ 176.378520][ T5201] vivid-000: Enable Capture Scaler: true [ 176.446395][ T5201] vivid-000: Timestamp Source: End of Frame [ 176.526273][ T5201] vivid-000: Colorspace: sRGB [ 176.570770][ T5201] vivid-000: Transfer Function: Default [ 176.657545][ T5201] vivid-000: Y'CbCr Encoding: Default [ 176.711527][ T5201] vivid-000: HSV Encoding: Hue 0-179 [ 176.748384][ T5201] vivid-000: Quantization: Default [ 176.842457][ T5201] vivid-000: Apply Alpha To Red Only: false [ 176.899627][ T5201] vivid-000: Standard Aspect Ratio: 4x3 [ 176.926373][ T5201] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 177.165141][ T5201] vivid-000: DV Timings: 640x480p59 inactive [ 177.223583][ T5201] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 177.242529][ T5201] vivid-000: Maximum EDID Blocks: 2 [ 177.262699][ T5201] vivid-000: Limited RGB Range (16-235): false [ 177.281829][ T5201] vivid-000: Rx RGB Quantization Range: Automatic [ 177.315320][ T5201] vivid-000: Power Present: 0x00000001 [ 177.325015][ T5201] tpg source WxH: 640x360 (Y'CbCr) [ 177.333216][ T5201] tpg field: 1 [ 177.344133][ T5201] tpg crop: 640x360@0x0 [ 177.356827][ T5201] tpg compose: 640x360@0x0 [ 177.363097][ T5201] tpg colorspace: 8 [ 177.396441][ T5201] tpg transfer function: 0/0 [ 177.412801][ T5201] tpg Y'CbCr encoding: 0/0 [ 177.426640][ T5201] tpg quantization: 0/0 [ 177.439046][ T5201] tpg RGB range: 0/2 [ 177.446485][ T5201] vivid-000: ================== END STATUS ================== [ 177.647385][ T126] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 177.867357][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 177.934408][ T126] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 177.954675][ T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 177.980361][ T126] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 178.004332][ T126] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.034964][ T126] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.096594][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.452323][ T126] usb 5-1: GET_CAPABILITIES returned 0 [ 178.458642][ T126] usbtmc 5-1:16.0: can't read capabilities [ 178.692729][ T126] usb 5-1: USB disconnect, device number 5 [ 178.899933][ T26] audit: type=1804 audit(1755139510.297:2): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.208" name="file0" dev="ramfs" ino=37397 res=1 errno=0 [ 180.632802][ T26] audit: type=1326 audit(1755139512.037:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 181.979369][ T26] audit: type=1326 audit(1755139512.057:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 182.001700][ T26] audit: type=1326 audit(1755139512.057:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 182.024028][ T26] audit: type=1326 audit(1755139512.057:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 182.053021][ T26] audit: type=1326 audit(1755139512.057:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 182.877447][ T26] audit: type=1326 audit(1755139512.057:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 182.900318][ T26] audit: type=1326 audit(1755139512.057:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 182.937339][ T26] audit: type=1326 audit(1755139512.057:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 182.977390][ T26] audit: type=1326 audit(1755139512.057:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5216 comm="syz.1.207" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 187.423526][ T5143] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 187.448028][ T5264] vivid-000: ================= START STATUS ================= [ 187.592543][ T5264] vivid-000: Test Pattern: 75% Colorbar [ 187.648982][ T5143] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 187.754333][ T5143] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.764863][ T5143] usb 4-1: config 0 has no interface number 0 [ 187.771106][ T5143] usb 4-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 187.806569][ T5264] vivid-000: Fill Percentage of Frame: 100 [ 187.840237][ T5143] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 187.906226][ T5264] vivid-000: Horizontal Movement: No Movement [ 187.948186][ T5143] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.956452][ T5143] usb 4-1: Product: syz [ 187.961098][ T5143] usb 4-1: Manufacturer: syz [ 187.965803][ T5143] usb 4-1: SerialNumber: syz [ 187.972823][ T5143] usb 4-1: config 0 descriptor?? [ 187.999028][ T5264] vivid-000: Vertical Movement: No Movement [ 188.184462][ T5264] vivid-000: OSD Text Mode: All [ 188.239040][ T5264] vivid-000: Show Border: false [ 188.250877][ T5143] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 188.261730][ T4532] usb 4-1: Failed to submit usb control message: -71 [ 188.297385][ T5264] vivid-000: Show Square: false [ 188.302893][ T5264] vivid-000: Sensor Flipped Horizontally: false [ 188.311116][ T4532] usb 4-1: unable to send the bmi data to the device: -71 [ 188.315415][ T5264] vivid-000: Sensor Flipped Vertically: false [ 188.369891][ T5143] usb 4-1: USB disconnect, device number 7 [ 188.459246][ T5264] vivid-000: Insert SAV Code in Image: false [ 188.465442][ T5264] vivid-000: Insert EAV Code in Image: false [ 188.475423][ T5264] vivid-000: Insert Video Guard Band: false [ 188.491904][ T4532] usb 4-1: unable to get target info from device [ 188.498662][ T4532] usb 4-1: could not get target info (-71) [ 188.505329][ T4532] usb 4-1: could not probe fw (-71) [ 188.530445][ T5264] vivid-000: Reduced Framerate: false [ 188.626873][ T5264] vivid-000: Enable Capture Cropping: true [ 188.633995][ T5264] vivid-000: Enable Capture Composing: true [ 188.651167][ T5264] vivid-000: Enable Capture Scaler: true [ 188.657005][ T5264] vivid-000: Timestamp Source: End of Frame [ 188.663897][ T5264] vivid-000: Colorspace: sRGB [ 188.669134][ T5264] vivid-000: Transfer Function: Default [ 188.675079][ T5264] vivid-000: Y'CbCr Encoding: Default [ 188.681029][ T5264] vivid-000: HSV Encoding: Hue 0-179 [ 188.686775][ T5264] vivid-000: Quantization: Default [ 188.692343][ T5264] vivid-000: Apply Alpha To Red Only: false [ 188.698812][ T5264] vivid-000: Standard Aspect Ratio: 4x3 [ 188.704624][ T5264] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 188.714778][ T5264] vivid-000: DV Timings: 640x480p59 inactive [ 188.721146][ T5264] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 188.729089][ T5264] vivid-000: Maximum EDID Blocks: 2 [ 188.734503][ T5264] vivid-000: Limited RGB Range (16-235): false [ 188.744415][ T5264] vivid-000: Rx RGB Quantization Range: Automatic [ 188.882131][ T5264] vivid-000: Power Present: 0x00000001 [ 188.930853][ T5264] tpg source WxH: 640x360 (Y'CbCr) [ 189.365961][ T5264] tpg field: 1 [ 189.371296][ T5264] tpg crop: 640x360@0x0 [ 189.377720][ T5264] tpg compose: 640x360@0x0 [ 189.382408][ T5264] tpg colorspace: 8 [ 189.398183][ T5264] tpg transfer function: 0/0 [ 189.403027][ T5264] tpg Y'CbCr encoding: 0/0 [ 189.426980][ T5264] tpg quantization: 0/0 [ 189.442374][ T5264] tpg RGB range: 0/2 [ 189.446538][ T5264] vivid-000: ================== END STATUS ================== [ 191.293595][ T5291] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.005242][ T5291] device batadv_slave_0 entered promiscuous mode [ 192.040688][ T5291] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 192.057424][ T5293] netlink: 'syz.4.223': attribute type 8 has an invalid length. [ 193.197355][ T22] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 193.917397][ T22] usb 3-1: Using ep0 maxpacket: 8 [ 194.262467][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.268972][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 194.276513][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.468877][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 194.836831][ T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 194.857047][ T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 194.867336][ T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 194.877722][ T22] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 194.891469][ T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 194.902765][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.933874][ T7] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 195.009131][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 195.046898][ T7] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 195.222145][ T22] usb 3-1: GET_CAPABILITIES returned 0 [ 195.227797][ T22] usbtmc 3-1:16.0: can't read capabilities [ 195.305181][ T7] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 195.477372][ T7] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 195.502390][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.541081][ T14] usb 3-1: USB disconnect, device number 8 [ 195.802805][ T7] usb 4-1: GET_CAPABILITIES returned 0 [ 195.808528][ T7] usbtmc 4-1:16.0: can't read capabilities [ 196.146686][ T14] usb 4-1: USB disconnect, device number 8 [ 196.337304][ T4278] Bluetooth: hci4: command 0x0406 tx timeout [ 196.337675][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 196.343451][ T4278] Bluetooth: hci3: command 0x0406 tx timeout [ 196.343484][ T4278] Bluetooth: hci1: command 0x0406 tx timeout [ 196.349554][ T4282] Bluetooth: hci0: command 0x0406 tx timeout [ 196.367768][ T7] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 196.577397][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 196.675036][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.690997][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.712757][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.785184][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.813401][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.833534][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.167909][ T7] usb 2-1: GET_CAPABILITIES returned 0 [ 197.173538][ T7] usbtmc 2-1:16.0: can't read capabilities [ 197.730286][ T22] usb 2-1: USB disconnect, device number 8 [ 199.498754][ T5351] vivid-000: ================= START STATUS ================= [ 199.591473][ T5351] vivid-000: Test Pattern: 75% Colorbar [ 199.687127][ T5351] vivid-000: Fill Percentage of Frame: 100 [ 199.698718][ T5351] vivid-000: Horizontal Movement: No Movement [ 199.715615][ T5351] vivid-000: Vertical Movement: No Movement [ 199.722066][ T5351] vivid-000: OSD Text Mode: All [ 199.729374][ T5351] vivid-000: Show Border: false [ 199.739031][ T5351] vivid-000: Show Square: false [ 199.745704][ T5351] vivid-000: Sensor Flipped Horizontally: false [ 199.759378][ T5351] vivid-000: Sensor Flipped Vertically: false [ 199.767258][ T5351] vivid-000: Insert SAV Code in Image: false [ 199.774013][ T5351] vivid-000: Insert EAV Code in Image: false [ 199.780864][ T5351] vivid-000: Insert Video Guard Band: false [ 199.794098][ T5351] vivid-000: Reduced Framerate: false [ 199.804060][ T5351] vivid-000: Enable Capture Cropping: true [ 199.813493][ T5351] vivid-000: Enable Capture Composing: true [ 199.820263][ T5351] vivid-000: Enable Capture Scaler: true [ 199.833558][ T5351] vivid-000: Timestamp Source: End of Frame [ 199.845758][ T5351] vivid-000: Colorspace: sRGB [ 199.862101][ T5351] vivid-000: Transfer Function: Default [ 199.871329][ T5351] vivid-000: Y'CbCr Encoding: Default [ 199.876868][ T5351] vivid-000: HSV Encoding: Hue 0-179 [ 199.882348][ T5351] vivid-000: Quantization: Default [ 199.893635][ T5351] vivid-000: Apply Alpha To Red Only: false [ 199.905268][ T5351] vivid-000: Standard Aspect Ratio: 4x3 [ 199.916372][ T5351] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 199.930168][ T5351] vivid-000: DV Timings: 640x480p59 inactive [ 199.936851][ T5351] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 199.946035][ T5351] vivid-000: Maximum EDID Blocks: 2 [ 199.957279][ T5351] vivid-000: Limited RGB Range (16-235): false [ 199.963834][ T5351] vivid-000: Rx RGB Quantization Range: Automatic [ 199.971785][ T5351] vivid-000: Power Present: 0x00000001 [ 199.980905][ T5351] tpg source WxH: 640x360 (Y'CbCr) [ 199.986514][ T5351] tpg field: 1 [ 199.992804][ T5351] tpg crop: 640x360@0x0 [ 199.998463][ T5351] tpg compose: 640x360@0x0 [ 200.005152][ T5351] tpg colorspace: 8 [ 200.010096][ T5351] tpg transfer function: 0/0 [ 200.016797][ T5351] tpg Y'CbCr encoding: 0/0 [ 200.023577][ T5351] tpg quantization: 0/0 [ 200.028118][ T5351] tpg RGB range: 0/2 [ 200.032641][ T5351] vivid-000: ================== END STATUS ================== [ 200.201039][ T5356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.238'. [ 200.477449][ T5360] tipc: Started in network mode [ 200.483925][ T5360] tipc: Node identity 1e67cb070b81, cluster identity 4711 [ 200.494748][ T5360] tipc: Enabled bearer , priority 0 [ 200.505180][ T5360] device syzkaller0 entered promiscuous mode [ 200.572798][ T5359] tipc: Resetting bearer [ 200.623735][ T5359] tipc: Disabling bearer [ 200.691693][ T7] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 201.903421][ T7] usb 4-1: device descriptor read/all, error -71 [ 204.222982][ T5376] Zero length message leads to an empty skb [ 205.122832][ T5392] device bridge1 entered promiscuous mode [ 205.537288][ T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 205.737350][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 205.753019][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.770795][ T5399] vivid-000: ================= START STATUS ================= [ 205.777809][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.812692][ T5399] vivid-000: Test Pattern: 75% Colorbar [ 205.830288][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.895310][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.955313][ T5399] vivid-000: Fill Percentage of Frame: 100 [ 205.962947][ T5399] vivid-000: Horizontal Movement: No Movement [ 205.974159][ T5399] vivid-000: Vertical Movement: No Movement [ 205.977372][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.993122][ T5399] [ 206.007594][ T5399] vivid-000: OSD Text Mode: All [ 206.016891][ T5399] vivid-000: Show Border: false [ 206.025288][ T5399] vivid-000: Show Square: false [ 206.036335][ T5399] vivid-000: Sensor Flipped Horizontally: false [ 206.053019][ T5399] vivid-000: Sensor Flipped Vertically: false [ 206.060511][ T5399] vivid-000: Insert SAV Code in Image: false [ 206.067957][ T5399] vivid-000: Insert EAV Code in Image: false [ 206.074681][ T5399] vivid-000: Insert Video Guard Band: false [ 206.083566][ T5399] vivid-000: Reduced Framerate: false [ 206.090383][ T5399] vivid-000: Enable Capture Cropping: true [ 206.097120][ T5399] vivid-000: Enable Capture Composing: true [ 206.105279][ T5399] vivid-000: Enable Capture Scaler: true [ 206.107840][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.122053][ T5399] [ 206.126780][ T5399] vivid-000: Timestamp Source: End of Frame [ 206.135166][ T5399] vivid-000: Colorspace: sRGB [ 206.147292][ T5399] vivid-000: Transfer Function: Default [ 206.152988][ T5399] vivid-000: Y'CbCr Encoding: Default [ 206.377374][ T5399] vivid-000: HSV Encoding: Hue 0-179 [ 206.382754][ T5399] vivid-000: Quantization: Default [ 208.008043][ T5399] vivid-000: Apply Alpha To Red Only: false [ 210.378111][ T5399] vivid-000: Standard Aspect Ratio: 4x3 [ 210.383784][ T5399] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 210.482137][ T5399] vivid-000: DV Timings: 640x480p59 inactive [ 210.513176][ T5399] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 210.677881][ T5399] vivid-000: Maximum EDID Blocks: 2 [ 210.683256][ T5399] vivid-000: Limited RGB Range (16-235): false [ 210.826292][ T5399] vivid-000: Rx RGB Quantization Range: Automatic [ 211.846924][ T7] usb 3-1: can't set config #16, error -110 [ 212.004647][ T5416] tipc: Enabled bearer , priority 0 [ 212.031628][ T5416] device syzkaller0 entered promiscuous mode [ 212.147781][ T5415] tipc: Resetting bearer [ 212.244462][ T5415] tipc: Disabling bearer [ 213.444443][ T5399] vivid-000: Power Present: 0x00000001 [ 213.450643][ T5399] tpg source WxH: 640x360 (Y'CbCr) [ 213.455840][ T5399] tpg field: 1 [ 213.467347][ T5399] tpg crop: 640x360@0x0 [ 213.472781][ T5399] tpg compose: 640x360@0x0 [ 213.482394][ T7] usb 3-1: USB disconnect, device number 9 [ 213.528140][ T5399] tpg colorspace: 8 [ 213.532029][ T5399] tpg transfer function: 0/0 [ 213.536663][ T5399] tpg Y'CbCr encoding: 0/0 [ 213.586757][ T5399] tpg quantization: 0/0 [ 213.612038][ T5399] tpg RGB range: 0/2 [ 213.629588][ T5399] vivid-000: ================== END STATUS ================== [ 213.863863][ T5422] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 216.418221][ T5452] tipc: Started in network mode [ 216.444752][ T5452] tipc: Node identity d6f0d1dd2fa9, cluster identity 4711 [ 216.479985][ T5452] tipc: Enabled bearer , priority 0 [ 216.526234][ T5454] device syzkaller0 entered promiscuous mode [ 216.600383][ T5452] tipc: Resetting bearer [ 216.620775][ T5451] tipc: Resetting bearer [ 216.686740][ T5451] tipc: Disabling bearer [ 218.104889][ T5466] device bridge1 entered promiscuous mode [ 218.192709][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 218.192726][ T26] audit: type=1326 audit(1755139549.587:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5443 comm="syz.0.264" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff3cef8ebe9 code=0x7fc00000 [ 218.518196][ T951] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 218.707409][ T951] usb 2-1: Using ep0 maxpacket: 8 [ 218.777326][ T951] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 218.810994][ T951] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 218.825029][ T5475] vivid-000: ================= START STATUS ================= [ 218.834252][ T951] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.860606][ T5475] vivid-000: Test Pattern: 75% Colorbar [ 218.875877][ T951] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.902841][ T5475] vivid-000: Fill Percentage of Frame: 100 [ 218.920888][ T951] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.940879][ T5475] vivid-000: Horizontal Movement: No Movement [ 218.954958][ T5475] vivid-000: Vertical Movement: No Movement [ 218.962732][ T5475] vivid-000: OSD Text Mode: All [ 218.972846][ T5475] vivid-000: Show Border: false [ 218.981882][ T5475] vivid-000: Show Square: false [ 218.992261][ T5475] vivid-000: Sensor Flipped Horizontally: false [ 219.000079][ T5475] vivid-000: Sensor Flipped Vertically: false [ 219.065665][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.106431][ T5480] 8021q: adding VLAN 0 to HW filter on device bond1 [ 219.129099][ T5475] vivid-000: Insert SAV Code in Image: false [ 219.137808][ T5475] vivid-000: Insert EAV Code in Image: false [ 219.151290][ T5475] vivid-000: Insert Video Guard Band: false [ 219.162615][ T5475] vivid-000: Reduced Framerate: false [ 219.170920][ T5475] vivid-000: Enable Capture Cropping: true [ 219.186855][ T5475] vivid-000: Enable Capture Composing: true [ 219.194333][ T5475] vivid-000: Enable Capture Scaler: true [ 219.232983][ T5475] vivid-000: Timestamp Source: End of Frame [ 219.249104][ T5475] vivid-000: Colorspace: sRGB [ 219.260045][ T5475] vivid-000: Transfer Function: Default [ 219.272377][ T5475] vivid-000: Y'CbCr Encoding: Default [ 219.284806][ T5475] vivid-000: HSV Encoding: Hue 0-179 [ 219.296596][ T5475] vivid-000: Quantization: Default [ 219.303865][ T5475] vivid-000: Apply Alpha To Red Only: false [ 219.311787][ T5475] vivid-000: Standard Aspect Ratio: 4x3 [ 219.321095][ T5475] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 219.334263][ T5475] vivid-000: DV Timings: 640x480p59 inactive [ 219.353291][ T5475] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 219.367000][ T951] usb 2-1: GET_CAPABILITIES returned 0 [ 219.372597][ T951] usbtmc 2-1:16.0: can't read capabilities [ 219.377315][ T5475] vivid-000: Maximum EDID Blocks: 2 [ 219.392062][ T5475] vivid-000: Limited RGB Range (16-235): false [ 219.399926][ T5475] vivid-000: Rx RGB Quantization Range: Automatic [ 219.410053][ T5475] vivid-000: Power Present: 0x00000001 [ 219.419407][ T5475] tpg source WxH: 640x360 (Y'CbCr) [ 219.425026][ T5475] tpg field: 1 [ 219.430670][ T5475] tpg crop: 640x360@0x0 [ 219.436274][ T5475] tpg compose: 640x360@0x0 [ 219.446543][ T5475] tpg colorspace: 8 [ 219.452123][ T5475] tpg transfer function: 0/0 [ 219.458829][ T5475] tpg Y'CbCr encoding: 0/0 [ 219.464367][ T5475] tpg quantization: 0/0 [ 219.472810][ T5475] tpg RGB range: 0/2 [ 219.480603][ T5475] vivid-000: ================== END STATUS ================== [ 219.616525][ T7] usb 2-1: USB disconnect, device number 9 [ 220.169970][ T5501] tipc: Started in network mode [ 220.185596][ T5501] tipc: Node identity 5e27332eb439, cluster identity 4711 [ 220.210413][ T5501] tipc: Enabled bearer , priority 0 [ 220.251399][ T5502] device syzkaller0 entered promiscuous mode [ 220.351607][ T5501] tipc: Resetting bearer [ 220.376690][ T5500] tipc: Resetting bearer [ 220.422583][ T5500] tipc: Disabling bearer [ 221.610071][ T5510] netdevsim netdevsim0: Direct firmware load for . [ 221.610071][ T5510] failed with error -2 [ 221.669998][ T5510] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 221.669998][ T5510] [ 227.724510][ T5538] vivid-000: ================= START STATUS ================= [ 227.927316][ T5538] vivid-000: Test Pattern: 75% Colorbar [ 227.939247][ T5538] vivid-000: Fill Percentage of Frame: 100 [ 227.950789][ T5538] vivid-000: Horizontal Movement: No Movement [ 227.957509][ T5538] vivid-000: Vertical Movement: No Movement [ 227.967474][ T5538] vivid-000: OSD Text Mode: All [ 227.977777][ T5538] vivid-000: Show Border: false [ 227.988579][ T5538] vivid-000: Show Square: false [ 228.002088][ T5538] vivid-000: Sensor Flipped Horizontally: false [ 228.011321][ T5538] vivid-000: Sensor Flipped Vertically: false [ 228.019216][ T5538] vivid-000: Insert SAV Code in Image: false [ 228.028847][ T5538] vivid-000: Insert EAV Code in Image: false [ 228.035613][ T5538] vivid-000: Insert Video Guard Band: false [ 228.048438][ T5538] vivid-000: Reduced Framerate: false [ 228.083110][ T5538] vivid-000: Enable Capture Cropping: true [ 228.092107][ T5538] vivid-000: Enable Capture Composing: true [ 228.104232][ T5538] vivid-000: Enable Capture Scaler: true [ 228.113178][ T5538] vivid-000: Timestamp Source: End of Frame [ 228.121651][ T5538] vivid-000: Colorspace: sRGB [ 228.127562][ T5538] vivid-000: Transfer Function: Default [ 229.437182][ C0] sched: RT throttling activated [ 229.684954][ T5538] vivid-000: Y'CbCr Encoding: Default [ 229.727367][ T5538] vivid-000: HSV Encoding: Hue 0-179 [ 229.738452][ T5549] netlink: 'syz.4.290': attribute type 1 has an invalid length. [ 229.747081][ T5538] vivid-000: Quantization: Default [ 229.778211][ T5538] vivid-000: Apply Alpha To Red Only: false [ 229.794580][ T5538] vivid-000: Standard Aspect Ratio: 4x3 [ 229.834159][ T5549] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.842261][ T5538] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 229.852920][ T5538] vivid-000: DV Timings: 640x480p59 inactive [ 230.200512][ T5538] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 231.407414][ T5538] vivid-000: Maximum EDID Blocks: 2 [ 231.560156][ T5538] vivid-000: Limited RGB Range (16-235): false [ 231.707578][ T5538] vivid-000: Rx RGB Quantization Range: Automatic [ 231.900480][ T5538] vivid-000: Power Present: 0x00000001 [ 231.908487][ T5538] tpg source WxH: 640x360 (Y'CbCr) [ 231.917667][ T5538] tpg field: 1 [ 232.018096][ T5538] tpg crop: 640x360@0x0 [ 232.022371][ T5538] tpg compose: 640x360@0x0 [ 232.026896][ T5538] tpg colorspace: 8 [ 232.042166][ T5538] tpg transfer function: 0/0 [ 232.063399][ T5538] tpg Y'CbCr encoding: 0/0 [ 232.130742][ T5538] tpg quantization: 0/0 [ 232.134993][ T5538] tpg RGB range: 0/2 [ 232.227972][ T5538] vivid-000: ================== END STATUS ================== [ 232.406697][ T5571] netlink: 'syz.3.297': attribute type 1 has an invalid length. [ 232.494077][ T5571] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.526485][ T5573] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 232.597496][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 232.757431][ T951] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 232.833674][ T5582] loop2: detected capacity change from 0 to 512 [ 232.893349][ T5582] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 232.934187][ T5582] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 232.966249][ T5582] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 232.988092][ T951] usb 1-1: Using ep0 maxpacket: 8 [ 233.016839][ T5582] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 233.025872][ T951] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 233.042609][ T951] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 233.068362][ T5582] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 233.089636][ T5582] EXT4-fs (loop2): orphan cleanup on readonly fs [ 233.104763][ T951] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 233.113904][ T5582] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.301: bg 0: block 34: padding at end of block bitmap is not set [ 233.137906][ T5582] Quota error (device loop2): write_blk: dquota write failed [ 233.147006][ T5582] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota [ 233.157601][ T5582] EXT4-fs error (device loop2): ext4_acquire_dquot:6814: comm syz.2.301: Failed to acquire dquot type 1 [ 233.202020][ T951] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 233.220678][ T5582] EXT4-fs (loop2): 1 truncate cleaned up [ 233.282337][ T951] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 233.317412][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.341292][ T5582] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 233.756728][ T951] usb 1-1: GET_CAPABILITIES returned 0 [ 233.762329][ T951] usbtmc 1-1:16.0: can't read capabilities [ 234.662200][ T126] usb 1-1: USB disconnect, device number 5 [ 238.803551][ T5613] vivid-000: ================= START STATUS ================= [ 238.835426][ T5613] vivid-000: Test Pattern: 75% Colorbar [ 238.876001][ T5613] vivid-000: Fill Percentage of Frame: 100 [ 238.882237][ T5613] vivid-000: Horizontal Movement: No Movement [ 238.893539][ T5613] vivid-000: Vertical Movement: No Movement [ 238.908960][ T5613] vivid-000: OSD Text Mode: All [ 238.922585][ T5613] vivid-000: Show Border: false [ 238.933783][ T5613] vivid-000: Show Square: false [ 238.947919][ T5613] vivid-000: Sensor Flipped Horizontally: false [ 238.954465][ T5613] vivid-000: Sensor Flipped Vertically: false [ 238.961629][ T5613] vivid-000: Insert SAV Code in Image: false [ 238.974476][ T5613] vivid-000: Insert EAV Code in Image: false [ 238.983088][ T5613] vivid-000: Insert Video Guard Band: [ 238.984988][ T5615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.309'. [ 238.999704][ T5613] false [ 239.004119][ T5613] vivid-000: Reduced Framerate: false [ 239.013161][ T5613] vivid-000: Enable Capture Cropping: true [ 239.026375][ T5613] vivid-000: Enable Capture Composing: true [ 239.059034][ T5613] vivid-000: Enable Capture Scaler: true [ 239.074220][ T5613] vivid-000: Timestamp Source: End of Frame [ 239.091192][ T5613] vivid-000: Colorspace: sRGB [ 239.098019][ T5613] vivid-000: Transfer Function: Default [ 239.110565][ T5613] vivid-000: Y'CbCr Encoding: Default [ 239.117445][ T5613] vivid-000: HSV Encoding: Hue 0-179 [ 239.124185][ T5613] vivid-000: Quantization: Default [ 239.136376][ T5613] vivid-000: Apply Alpha To Red Only: false [ 239.144815][ T5613] vivid-000: Standard Aspect Ratio: 4x3 [ 239.157241][ T5613] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 239.173036][ T5613] vivid-000: DV Timings: 640x480p59 inactive [ 239.182515][ T5613] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 239.190352][ T5613] vivid-000: Maximum EDID Blocks: 2 [ 239.228416][ T5613] vivid-000: Limited RGB Range (16-235): false [ 239.244115][ T5613] vivid-000: Rx RGB Quantization Range: Automatic [ 239.256352][ T5613] vivid-000: Power Present: 0x00000001 [ 239.263082][ T5613] tpg source WxH: 640x360 (Y'CbCr) [ 239.271990][ T5613] tpg field: 1 [ 239.278667][ T5613] tpg crop: 640x360@0x0 [ 239.285316][ T5613] tpg compose: 640x360@0x0 [ 239.292303][ T5613] tpg colorspace: 8 [ 239.300968][ T5613] tpg transfer function: 0/0 [ 239.308816][ T5613] tpg Y'CbCr encoding: 0/0 [ 239.314400][ T5613] tpg quantization: 0/0 [ 239.321089][ T5613] tpg RGB range: 0/2 [ 239.326642][ T5613] vivid-000: ================== END STATUS ================== [ 239.560718][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.310'. [ 239.574218][ T4266] EXT4-fs (loop2): unmounting filesystem. [ 239.589571][ T5622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.310'. [ 241.902557][ T5643] netlink: 'syz.0.315': attribute type 1 has an invalid length. [ 242.073750][ T5643] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.104575][ T5648] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 242.189545][ T26] audit: type=1804 audit(1755139573.597:71): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.312" name="file0" dev="ramfs" ino=38133 res=1 errno=0 [ 242.247624][ T4365] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 242.569733][ T5665] loop4: detected capacity change from 0 to 512 [ 242.737542][ T5665] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 242.747788][ T5665] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 242.957499][ T7] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 243.371932][ T5665] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 243.490573][ T5665] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 243.535289][ T5665] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 243.588350][ T5665] EXT4-fs (loop4): orphan cleanup on readonly fs [ 243.600589][ T5665] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.322: bg 0: block 34: padding at end of block bitmap is not set [ 243.627388][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 243.667561][ T5665] Quota error (device loop4): write_blk: dquota write failed [ 243.675140][ T5665] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 243.693795][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 243.722859][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 243.776431][ T5665] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.322: Failed to acquire dquot type 1 [ 243.796996][ T7] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 245.007558][ T5665] EXT4-fs (loop4): 1 truncate cleaned up [ 245.043615][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 245.110607][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 245.150354][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.240450][ T5665] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 246.180275][ T7] usb 2-1: can't set config #16, error -71 [ 246.250976][ T7] usb 2-1: USB disconnect, device number 10 [ 246.457288][ T126] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 247.707422][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 247.723977][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 247.868211][ T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.888958][ T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.899266][ T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.998253][ T126] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.757368][ T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 248.809500][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.924793][ T5696] device bridge6 entered promiscuous mode [ 248.974280][ T5702] vivid-000: ================= START STATUS ================= [ 249.016680][ T5702] vivid-000: Test Pattern: 75% Colorbar [ 249.074605][ T5702] vivid-000: Fill Percentage of Frame: 100 [ 249.081282][ T5702] vivid-000: Horizontal Movement: No Movement [ 249.097259][ T5702] vivid-000: Vertical Movement: No Movement [ 249.107584][ T5702] vivid-000: OSD Text Mode: All [ 249.113693][ T5702] vivid-000: Show Border: false [ 249.122456][ T5702] vivid-000: Show Square: false [ 249.127935][ T5702] vivid-000: Sensor Flipped Horizontally: false [ 249.144238][ T5702] vivid-000: Sensor Flipped Vertically: false [ 249.153177][ T5702] vivid-000: Insert SAV Code in Image: false [ 249.160690][ T5702] vivid-000: Insert EAV Code in Image: false [ 249.172677][ T5702] vivid-000: Insert Video Guard Band: false [ 249.179383][ T5702] vivid-000: Reduced Framerate: false [ 249.186084][ T5702] vivid-000: Enable Capture Cropping: true [ 249.193056][ T5702] vivid-000: Enable Capture Composing: true [ 249.207004][ T5702] vivid-000: Enable Capture Scaler: true [ 249.215864][ T5702] vivid-000: Timestamp Source: End of Frame [ 249.227089][ T5702] vivid-000: Colorspace: sRGB [ 249.233884][ T5702] vivid-000: Transfer Function: Default [ 249.240887][ T5702] vivid-000: Y'CbCr Encoding: Default [ 249.248689][ T5702] vivid-000: HSV Encoding: Hue 0-179 [ 249.255536][ T5702] vivid-000: Quantization: Default [ 249.266666][ T5702] vivid-000: Apply Alpha To Red Only: false [ 249.275528][ T5702] vivid-000: Standard Aspect Ratio: 4x3 [ 249.288902][ T5702] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 249.301472][ T5702] vivid-000: DV Timings: 640x480p59 inactive [ 249.312823][ T5702] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 249.327567][ T5702] vivid-000: Maximum EDID Blocks: 2 [ 249.334725][ T5702] vivid-000: Limited RGB Range (16-235): false [ 249.342789][ T5702] vivid-000: Rx RGB Quantization Range: Automatic [ 249.350887][ T5702] vivid-000: Power Present: 0x00000001 [ 249.357754][ T5702] tpg source WxH: 640x360 (Y'CbCr) [ 249.363414][ T5702] tpg field: 1 [ 249.368116][ T5702] tpg crop: 640x360@0x0 [ 249.373736][ T5702] tpg compose: 640x360@0x0 [ 249.379338][ T5702] tpg colorspace: 8 [ 249.383822][ T5702] tpg transfer function: 0/0 [ 249.390041][ T5702] tpg Y'CbCr encoding: 0/0 [ 249.394654][ T5702] tpg quantization: 0/0 [ 249.401232][ T5702] tpg RGB range: 0/2 [ 249.405511][ T5702] vivid-000: ================== END STATUS ================== [ 251.447262][ T41] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 252.409494][ T41] usb 5-1: unable to get BOS descriptor or descriptor too short [ 252.433959][ T41] usb 5-1: not running at top speed; connect to a high speed hub [ 252.489138][ T41] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.557298][ T41] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 252.580140][ T41] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 252.649736][ T126] usb 3-1: can't set config #16, error -71 [ 252.655752][ T41] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 252.668192][ T126] usb 3-1: USB disconnect, device number 10 [ 252.693779][ T5736] loop0: detected capacity change from 0 to 512 [ 252.716496][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.746890][ T41] usb 5-1: Product: syz [ 252.751467][ T41] usb 5-1: Manufacturer: syz [ 252.756110][ T41] usb 5-1: SerialNumber: syz [ 252.761838][ T5736] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 252.792696][ T5736] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 252.987386][ T5736] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 253.985268][ T5736] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 254.038224][ T5736] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 254.047037][ T5736] EXT4-fs (loop0): orphan cleanup on readonly fs [ 254.346150][ T5736] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.339: bg 0: block 34: padding at end of block bitmap is not set [ 255.472552][ T5736] Quota error (device loop0): write_blk: dquota write failed [ 255.480589][ T5736] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 255.491016][ T5736] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.339: Failed to acquire dquot type 1 [ 255.503927][ T5736] EXT4-fs (loop0): 1 truncate cleaned up [ 255.512982][ T5736] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.700638][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.707023][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.960538][ T41] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 256.007698][ T41] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor [ 256.028572][ T41] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 256.073902][ T41] usb 5-1: USB disconnect, device number 6 [ 256.081293][ T5755] netlink: 196 bytes leftover after parsing attributes in process `syz.2.344'. [ 256.134639][ T5755] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 256.226427][ T5755] netlink: 32 bytes leftover after parsing attributes in process `syz.2.344'. [ 256.387958][ T5268] udevd[5268]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.735584][ T5763] vivid-000: ================= START STATUS ================= [ 256.811728][ T5763] vivid-000: Test Pattern: 75% Colorbar [ 256.825367][ T5763] vivid-000: Fill Percentage of Frame: 100 [ 256.868485][ T5763] vivid-000: Horizontal Movement: No Movement [ 256.883782][ T5763] vivid-000: Vertical Movement: No Movement [ 256.893546][ T5763] vivid-000: OSD Text Mode: All [ 256.899111][ T5763] vivid-000: Show Border: false [ 256.909143][ T5763] vivid-000: Show Square: false [ 256.919283][ T5763] vivid-000: Sensor Flipped Horizontally: false [ 256.926073][ T5763] vivid-000: Sensor Flipped Vertically: false [ 256.937629][ T5763] vivid-000: Insert SAV Code in Image: false [ 256.954541][ T5763] vivid-000: Insert EAV Code in Image: false [ 256.960862][ T5763] vivid-000: Insert Video Guard Band: false [ 256.966904][ T5763] vivid-000: Reduced Framerate: false [ 256.973648][ T5763] vivid-000: Enable Capture Cropping: true [ 256.984753][ T5763] vivid-000: Enable Capture Composing: true [ 256.995954][ T5763] vivid-000: Enable Capture Scaler: true [ 257.005981][ T5763] vivid-000: Timestamp Source: End of Frame [ 257.017149][ T5763] vivid-000: Colorspace: sRGB [ 257.191688][ T5763] vivid-000: Transfer Function: Default [ 257.200939][ T5763] vivid-000: Y'CbCr Encoding: Default [ 257.208171][ T5763] vivid-000: HSV Encoding: Hue 0-179 [ 257.217513][ T5763] vivid-000: Quantization: Default [ 257.225959][ T5763] vivid-000: Apply Alpha To Red Only: false [ 257.235985][ T5763] vivid-000: Standard Aspect Ratio: 4x3 [ 258.024153][ T5763] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 258.037250][ T5763] vivid-000: DV Timings: 640x480p59 inactive [ 258.063539][ T5763] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 258.074630][ T5763] vivid-000: Maximum EDID Blocks: 2 [ 258.084694][ T5763] vivid-000: Limited RGB Range (16-235): false [ 258.094797][ T5763] vivid-000: Rx RGB Quantization Range: Automatic [ 258.102803][ T5763] vivid-000: Power Present: 0x00000001 [ 258.114145][ T5763] tpg source WxH: 640x360 (Y'CbCr) [ 258.120765][ T5763] tpg field: 1 [ 258.124282][ T5763] tpg crop: 640x360@0x0 [ 258.130708][ T5763] tpg compose: 640x360@0x0 [ 258.136417][ T5763] tpg colorspace: 8 [ 258.144277][ T5763] tpg transfer function: 0/0 [ 258.150353][ T5763] tpg Y'CbCr encoding: 0/0 [ 258.154906][ T5763] tpg quantization: 0/0 [ 258.159469][ T5763] tpg RGB range: 0/2 [ 258.166201][ T5763] vivid-000: ================== END STATUS ================== [ 259.630523][ T126] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 259.775218][ T5788] netdevsim netdevsim4: Direct firmware load for . [ 259.775218][ T5788] failed with error -2 [ 259.947499][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 260.998423][ T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 261.010419][ T5788] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 261.010419][ T5788] [ 261.040005][ T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 261.090279][ T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 261.187266][ T126] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 261.258048][ T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 261.389149][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.607826][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 262.818305][ T126] usb 3-1: can't set config #16, error -71 [ 262.834782][ T126] usb 3-1: USB disconnect, device number 11 [ 268.750895][ T5837] vivid-000: ================= START STATUS ================= [ 268.767324][ T5837] vivid-000: Test Pattern: 75% Colorbar [ 268.773070][ T5837] vivid-000: Fill Percentage of Frame: 100 [ 268.782614][ T5837] vivid-000: Horizontal Movement: No Movement [ 268.789142][ T5837] vivid-000: Vertical Movement: No Movement [ 268.795342][ T5837] vivid-000: OSD Text Mode: All [ 268.805414][ T5837] vivid-000: Show Border: false [ 268.810952][ T5837] vivid-000: Show Square: false [ 268.816830][ T5837] vivid-000: Sensor Flipped Horizontally: false [ 268.827263][ T5837] vivid-000: Sensor Flipped Vertically: false [ 268.833472][ T5837] vivid-000: Insert SAV Code in Image: false [ 268.840556][ T5837] vivid-000: Insert EAV Code in Image: false [ 268.846689][ T5837] vivid-000: Insert Video Guard Band: false [ 268.867337][ T5837] vivid-000: Reduced Framerate: false [ 268.872793][ T5837] vivid-000: Enable Capture Cropping: true [ 268.883143][ T5837] vivid-000: Enable Capture Composing: true [ 268.989307][ T5843] loop1: detected capacity change from 0 to 512 [ 269.002335][ T5837] vivid-000: Enable Capture Scaler: true [ 269.023600][ T5837] vivid-000: Timestamp Source: End of Frame [ 269.081981][ T5837] vivid-000: Colorspace: sRGB [ 269.087975][ T5843] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 269.142397][ T5843] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 269.169437][ T5843] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 269.183183][ T5837] vivid-000: Transfer Function: Default [ 269.203478][ T5837] vivid-000: Y'CbCr Encoding: Default [ 269.210159][ T5843] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 269.234775][ T5837] vivid-000: HSV Encoding: [ 269.241393][ T5843] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 269.243911][ T5837] Hue 0-179 [ 269.257366][ T5837] vivid-000: Quantization: Default [ 269.262657][ T5837] vivid-000: Apply Alpha To Red Only: false [ 269.272756][ T5837] vivid-000: Standard Aspect Ratio: 4x3 [ 269.278996][ T5837] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 269.291006][ T5837] vivid-000: DV Timings: 640x480p59 inactive [ 269.297865][ T5837] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 269.314658][ T5837] vivid-000: Maximum EDID Blocks: [ 269.315510][ T5843] EXT4-fs (loop1): orphan cleanup on readonly fs [ 269.356251][ T5843] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.367: bg 0: block 34: padding at end of block bitmap is not set [ 269.411265][ T5843] Quota error (device loop1): write_blk: dquota write failed [ 269.419935][ T5837] 2 [ 269.435328][ T5843] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 269.475740][ T5837] vivid-000: Limited RGB Range (16-235): false [ 269.491788][ T5843] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.367: Failed to acquire dquot type 1 [ 269.521283][ T5837] [ 269.546366][ T5843] EXT4-fs (loop1): 1 truncate cleaned up [ 269.548478][ T5837] vivid-000: Rx RGB Quantization Range: Automatic [ 269.587631][ T5843] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 269.623074][ T5837] vivid-000: Power Present: 0x00000001 [ 269.649638][ T5837] tpg source WxH: 640x360 (Y'CbCr) [ 269.656081][ T5837] tpg field: 1 [ 269.662867][ T5837] tpg crop: 640x360@0x0 [ 269.689533][ T5837] tpg compose: 640x360@0x0 [ 269.694101][ T5837] tpg colorspace: 8 [ 269.715000][ T5837] tpg transfer function: 0/0 [ 269.756317][ T5837] tpg Y'CbCr encoding: 0/0 [ 269.792962][ T5837] tpg quantization: 0/0 [ 269.833632][ T5837] tpg RGB range: 0/2 [ 269.837906][ T5837] vivid-000: ================== END STATUS ================== [ 270.397350][ T4312] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 270.617316][ T126] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 270.627424][ T4312] usb 4-1: Using ep0 maxpacket: 32 [ 270.640467][ T4312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.683915][ T4312] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.745886][ T4312] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 270.793089][ T4312] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 270.804898][ T4312] usb 4-1: Product: syz [ 270.822857][ T4312] usb 4-1: Manufacturer: syz [ 270.837276][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 270.847625][ T126] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 270.850708][ T4312] usb 4-1: SerialNumber: syz [ 270.873713][ T4312] usb 4-1: config 0 descriptor?? [ 271.043036][ T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 271.117342][ T126] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.241258][ T126] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.315501][ T126] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.361763][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.452135][ T41] usb 4-1: USB disconnect, device number 11 [ 271.722900][ T126] usb 3-1: GET_CAPABILITIES returned 0 [ 271.728626][ T126] usbtmc 3-1:16.0: can't read capabilities [ 271.827452][ T4312] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 272.003371][ T3741] usb 3-1: USB disconnect, device number 12 [ 272.029180][ T4312] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 272.850321][ T4312] usb 1-1: config 0 has no interface number 0 [ 272.888039][ T4312] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 272.941773][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.976419][ T4312] usb 1-1: Product: syz [ 272.987675][ T4312] usb 1-1: Manufacturer: syz [ 273.008506][ T4312] usb 1-1: SerialNumber: syz [ 273.049732][ T4312] usb 1-1: config 0 descriptor?? [ 273.292129][ T4312] dvb_usb_ec168: probe of 1-1:0.1 failed with error -32 [ 273.303794][ T4312] usb 1-1: USB disconnect, device number 6 [ 275.664670][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 275.847281][ T4341] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 276.001722][ T5893] netdevsim netdevsim0: Direct firmware load for . [ 276.001722][ T5893] failed with error -2 [ 276.037342][ T4341] usb 4-1: Using ep0 maxpacket: 8 [ 276.052759][ T4341] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 276.052789][ T4341] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 276.052807][ T4341] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 276.052824][ T4341] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 276.052852][ T4341] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 276.052869][ T4341] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.129445][ T5893] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 276.129445][ T5893] [ 276.302563][ T4341] usb 4-1: GET_CAPABILITIES returned 0 [ 276.302590][ T4341] usbtmc 4-1:16.0: can't read capabilities [ 276.657332][ T41] usb 4-1: USB disconnect, device number 12 [ 277.163861][ T5909] vivid-000: ================= START STATUS ================= [ 277.191413][ T5909] vivid-000: Test Pattern: 75% Colorbar [ 277.241617][ T5909] vivid-000: Fill Percentage of Frame: 100 [ 277.263100][ T5909] vivid-000: Horizontal Movement: No Movement [ 277.294345][ T5909] vivid-000: Vertical Movement: No Movement [ 277.322515][ T5909] vivid-000: OSD Text Mode: All [ 277.332908][ T5909] vivid-000: Show Border: false [ 277.342696][ T5909] vivid-000: Show Square: false [ 277.359647][ T5909] vivid-000: Sensor Flipped Horizontally: false [ 277.375294][ T5909] vivid-000: Sensor Flipped Vertically: false [ 277.403278][ T5909] vivid-000: Insert SAV Code in Image: false [ 277.423508][ T5909] vivid-000: Insert EAV Code in Image: false [ 277.440787][ T5909] vivid-000: Insert Video Guard Band: false [ 277.480195][ T5909] vivid-000: Reduced Framerate: false [ 277.498945][ T5909] vivid-000: Enable Capture Cropping: true [ 277.530231][ T5909] vivid-000: Enable Capture Composing: true [ 277.562179][ T5909] vivid-000: Enable Capture Scaler: true [ 277.575902][ T26] audit: type=1326 audit(1755139608.977:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 277.607496][ T5909] vivid-000: Timestamp Source: End of Frame [ 277.641097][ T5909] vivid-000: Colorspace: sRGB [ 277.663665][ T5909] vivid-000: Transfer Function: Default [ 277.683859][ T5909] vivid-000: Y'CbCr Encoding: Default [ 277.689472][ T26] audit: type=1326 audit(1755139609.007:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 277.717481][ T5909] vivid-000: HSV Encoding: Hue 0-179 [ 277.723017][ T5909] vivid-000: Quantization: Default [ 277.733290][ T5909] vivid-000: Apply Alpha To Red Only: false [ 277.739334][ T26] audit: type=1326 audit(1755139609.007:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 277.747280][ T5909] vivid-000: Standard Aspect Ratio: [ 277.826819][ T26] audit: type=1326 audit(1755139609.007:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 277.893260][ T5909] 4x3 [ 277.903368][ T5909] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 277.913513][ T5909] vivid-000: DV Timings: 640x480p59 inactive [ 277.924372][ T5909] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 277.938130][ T5909] vivid-000: Maximum EDID Blocks: 2 [ 277.943557][ T5909] vivid-000: Limited RGB Range (16-235): false [ 277.949832][ T26] audit: type=1326 audit(1755139609.007:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 277.949880][ T26] audit: type=1326 audit(1755139609.007:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 278.171159][ T5909] vivid-000: Rx RGB Quantization Range: Automatic [ 278.202890][ T5909] vivid-000: Power Present: 0x00000001 [ 278.295493][ T5909] tpg source WxH: 640x360 (Y'CbCr) [ 278.304657][ T26] audit: type=1326 audit(1755139609.007:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 278.433079][ T26] audit: type=1326 audit(1755139609.007:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 278.455881][ T5909] tpg field: 1 [ 278.466662][ T5909] tpg crop: 640x360@0x0 [ 278.486379][ T5909] tpg compose: 640x360@0x0 [ 278.516805][ T5909] tpg colorspace: 8 [ 278.529791][ T26] audit: type=1326 audit(1755139609.007:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 278.563139][ T5909] tpg transfer function: 0/0 [ 278.605704][ T5909] tpg Y'CbCr encoding: 0/0 [ 278.610905][ T5909] tpg quantization: 0/0 [ 278.615180][ T5909] tpg RGB range: 0/2 [ 278.619778][ T5909] vivid-000: ================== END STATUS ================== [ 278.657243][ T26] audit: type=1326 audit(1755139609.007:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5900 comm="syz.1.381" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee9498ebe9 code=0x7fc00000 [ 281.664051][ T5937] loop3: detected capacity change from 0 to 512 [ 281.745818][ T5937] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 281.824747][ T5937] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 281.901114][ T5937] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 282.001266][ T5937] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 282.065935][ T5937] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 282.089106][ T5937] EXT4-fs (loop3): orphan cleanup on readonly fs [ 282.150960][ T5937] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.390: bg 0: block 34: padding at end of block bitmap is not set [ 282.181864][ T5937] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.390: Failed to acquire dquot type 1 [ 282.213458][ T5937] EXT4-fs (loop3): 1 truncate cleaned up [ 282.222978][ T5937] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 282.917293][ T4312] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 283.128001][ T4312] usb 1-1: Using ep0 maxpacket: 8 [ 283.233449][ T4312] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 283.256557][ T4312] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 283.294876][ T4312] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 283.335650][ T4312] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 283.384641][ T4312] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 283.464945][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.006312][ T4312] usb 1-1: GET_CAPABILITIES returned 0 [ 284.012064][ T4312] usbtmc 1-1:16.0: can't read capabilities [ 284.255962][ T41] usb 1-1: USB disconnect, device number 7 [ 284.794431][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 286.948152][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.400'. [ 287.087641][ T5980] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'. [ 290.305401][ T6008] loop0: detected capacity change from 0 to 512 [ 291.579538][ T6008] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 291.579876][ T6008] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 291.580249][ T6008] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 291.599244][ T6008] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 291.599262][ T6008] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 291.600029][ T6008] EXT4-fs (loop0): orphan cleanup on readonly fs [ 291.689397][ T6008] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.408: bg 0: block 34: padding at end of block bitmap is not set [ 291.752073][ T6008] __quota_error: 59 callbacks suppressed [ 291.752087][ T6008] Quota error (device loop0): write_blk: dquota write failed [ 291.797396][ T6008] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 291.817282][ T6008] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.408: Failed to acquire dquot type 1 [ 291.846833][ T6008] EXT4-fs (loop0): 1 truncate cleaned up [ 291.853436][ T6008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 293.549476][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 293.707408][ T5143] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 293.967266][ T5143] usb 5-1: Using ep0 maxpacket: 16 [ 294.426585][ T5143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 294.588627][ T5143] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 294.607271][ T6024] netlink: 196 bytes leftover after parsing attributes in process `syz.2.410'. [ 295.802017][ T5143] usb 5-1: config 0 interface 0 has no altsetting 0 [ 295.811664][ T5143] usb 5-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 295.821378][ T6024] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 295.833655][ T5143] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.848119][ T5143] usb 5-1: config 0 descriptor?? [ 295.991908][ T6031] netlink: 'syz.2.410': attribute type 8 has an invalid length. [ 296.150992][ T6024] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.316918][ T5143] usbhid 5-1:0.0: can't add hid device: -71 [ 296.325407][ T6024] device batadv_slave_0 entered promiscuous mode [ 296.332900][ T5143] usbhid: probe of 5-1:0.0 failed with error -71 [ 296.401538][ T6024] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 296.415066][ T5143] usb 5-1: USB disconnect, device number 7 [ 296.689562][ T6040] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan0, syncid = 0, id = 0 [ 297.674126][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz.3.416'. [ 297.697376][ T6051] netlink: 32 bytes leftover after parsing attributes in process `syz.3.416'. [ 298.420762][ T22] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 298.627315][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 298.705208][ T22] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 298.723761][ T22] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 298.837255][ T22] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 298.851053][ T22] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 298.874600][ T22] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 298.884174][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.973029][ T22] usb 2-1: GET_CAPABILITIES returned 0 [ 299.978969][ T22] usbtmc 2-1:16.0: can't read capabilities [ 300.150851][ T6073] loop0: detected capacity change from 0 to 512 [ 300.193061][ T14] usb 2-1: USB disconnect, device number 11 [ 300.220782][ T6073] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 300.267471][ T6073] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 300.301102][ T6073] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 300.335583][ T6073] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 300.354485][ T6073] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 300.386419][ T6073] EXT4-fs (loop0): orphan cleanup on readonly fs [ 300.412916][ T6073] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.423: bg 0: block 34: padding at end of block bitmap is not set [ 300.436966][ T6073] Quota error (device loop0): write_blk: dquota write failed [ 300.457380][ T6073] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 300.502571][ T6073] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.423: Failed to acquire dquot type 1 [ 300.523022][ T6073] EXT4-fs (loop0): 1 truncate cleaned up [ 300.530288][ T6073] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 301.096376][ T6083] netlink: 196 bytes leftover after parsing attributes in process `syz.3.424'. [ 301.096454][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.156317][ T6083] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 301.326425][ T6085] device batadv_slave_0 entered promiscuous mode [ 301.548131][ T6085] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 301.687657][ T22] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 302.429787][ T22] usb 3-1: unable to get BOS descriptor or descriptor too short [ 302.454079][ T22] usb 3-1: not running at top speed; connect to a high speed hub [ 302.477319][ T22] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 302.539833][ T22] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 302.581456][ T22] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 302.610481][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.644816][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.653375][ T6086] netlink: 'syz.3.424': attribute type 8 has an invalid length. [ 302.671525][ T22] usb 3-1: Product: syz [ 302.685954][ T22] usb 3-1: Manufacturer: syz [ 302.716733][ T22] usb 3-1: SerialNumber: syz [ 302.979017][ T22] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 303.001486][ T22] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 303.032552][ T22] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 303.090487][ T22] usb 3-1: USB disconnect, device number 13 [ 303.401226][ T5268] udevd[5268]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.641193][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 304.489712][ T6117] device bridge3 entered promiscuous mode [ 307.679743][ T14] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 307.890231][ T14] usb 1-1: Using ep0 maxpacket: 8 [ 307.901427][ T14] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 307.920501][ T6135] vivid-000: ================= START STATUS ================= [ 307.932410][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 307.950921][ T14] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 307.967460][ T6135] vivid-000: Test Pattern: 75% Colorbar [ 307.973874][ T6135] vivid-000: Fill Percentage of Frame: 100 [ 307.975402][ T14] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 307.999232][ T6135] [ 308.001707][ T6135] vivid-000: Horizontal Movement: No Movement [ 308.008661][ T6135] vivid-000: Vertical Movement: No Movement [ 308.016496][ T6135] vivid-000: OSD Text Mode: All [ 308.027486][ T6135] vivid-000: Show Border: false [ 308.033122][ T6135] vivid-000: Show Square: false [ 308.046216][ T6135] vivid-000: Sensor Flipped Horizontally: false [ 308.046247][ T6135] vivid-000: Sensor Flipped Vertically: false [ 308.046283][ T6135] vivid-000: Insert SAV Code in Image: false [ 308.046305][ T6135] vivid-000: Insert EAV Code in Image: false [ 308.046329][ T6135] vivid-000: Insert Video Guard Band: false [ 308.047771][ T6135] vivid-000: Reduced Framerate: false [ 308.048924][ T6135] vivid-000: Enable Capture Cropping: true [ 308.054504][ T6135] vivid-000: Enable Capture Composing: true [ 308.057470][ T6135] vivid-000: Enable Capture Scaler: true [ 308.057499][ T6135] vivid-000: Timestamp Source: End of Frame [ 308.057517][ T6135] vivid-000: Colorspace: sRGB [ 308.057533][ T6135] vivid-000: Transfer Function: Default [ 308.057549][ T6135] vivid-000: Y'CbCr Encoding: Default [ 308.057564][ T6135] vivid-000: HSV Encoding: Hue 0-179 [ 308.057580][ T6135] vivid-000: Quantization: Default [ 308.057595][ T6135] vivid-000: Apply Alpha To Red Only: false [ 308.057620][ T6135] vivid-000: Standard Aspect Ratio: 4x3 [ 308.057637][ T6135] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 308.057658][ T6135] vivid-000: DV Timings: 640x480p59 inactive [ 308.057678][ T6135] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 308.057695][ T6135] vivid-000: Maximum EDID Blocks: 2 [ 308.057711][ T6135] vivid-000: Limited RGB Range (16-235): false [ 308.057727][ T6135] vivid-000: Rx RGB Quantization Range: Automatic [ 308.057744][ T6135] vivid-000: Power Present: 0x00000001 [ 308.057762][ T6135] tpg source WxH: 640x360 (Y'CbCr) [ 308.061126][ T6135] tpg field: 1 [ 308.064395][ T14] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 308.227661][ T6135] tpg crop: 640x360@0x0 [ 309.096143][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.107680][ T6135] tpg compose: 640x360@0x0 [ 309.113760][ T6135] tpg colorspace: 8 [ 309.121069][ T6135] tpg transfer function: 0/0 [ 309.126764][ T6135] tpg Y'CbCr encoding: 0/0 [ 309.134757][ T6135] tpg quantization: 0/0 [ 309.140336][ T6135] tpg RGB range: 0/2 [ 309.148042][ T6135] vivid-000: ================== END STATUS ================== [ 309.415054][ T14] usb 1-1: GET_CAPABILITIES returned 0 [ 309.420640][ T14] usbtmc 1-1:16.0: can't read capabilities [ 309.561599][ T6146] loop3: detected capacity change from 0 to 512 [ 309.593514][ T6146] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 309.621507][ T6146] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 309.652009][ T6146] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 309.717971][ T6146] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 309.751002][ T6146] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 309.811535][ T6146] EXT4-fs (loop3): orphan cleanup on readonly fs [ 309.850162][ T4459] usb 1-1: USB disconnect, device number 8 [ 309.883263][ T6146] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.440: bg 0: block 34: padding at end of block bitmap is not set [ 309.936448][ T6146] Quota error (device loop3): write_blk: dquota write failed [ 309.947419][ T6146] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 309.971948][ T6146] EXT4-fs error (device loop3): ext4_acquire_dquot:6814: comm syz.3.440: Failed to acquire dquot type 1 [ 310.033020][ T6146] EXT4-fs (loop3): 1 truncate cleaned up [ 310.049290][ T6146] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 310.987399][ T4459] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 311.150792][ T6162] netdevsim netdevsim0: Direct firmware load for . [ 311.150792][ T6162] failed with error -2 [ 311.173059][ T6162] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 311.173059][ T6162] [ 311.210755][ T4459] usb 3-1: Using ep0 maxpacket: 8 [ 311.372231][ T4459] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 311.393980][ T4459] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 311.444970][ T4459] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 311.483640][ T4459] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.524777][ T4459] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 311.554651][ T4459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.863180][ T4459] usb 3-1: GET_CAPABILITIES returned 0 [ 312.872306][ T4459] usbtmc 3-1:16.0: can't read capabilities [ 315.049842][ T4270] EXT4-fs (loop3): unmounting filesystem. [ 315.607257][ T14] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 315.889686][ T14] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 315.897924][ T14] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.908641][ T14] usb 4-1: config 0 has no interface number 0 [ 315.922782][ T14] usb 4-1: config 0 interface 68 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 315.978842][ T14] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 316.061383][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.229041][ T14] usb 4-1: Product: syz [ 316.262222][ T14] usb 4-1: Manufacturer: syz [ 316.316874][ T14] usb 4-1: SerialNumber: syz [ 316.334487][ T14] usb 4-1: config 0 descriptor?? [ 316.359128][ T14] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 316.667820][ T4556] usb 4-1: Failed to submit usb control message: -71 [ 316.675115][ T14] usb 4-1: USB disconnect, device number 13 [ 316.710858][ T4556] usb 4-1: unable to send the bmi data to the device: -71 [ 316.751078][ T4459] usb 3-1: USB disconnect, device number 14 [ 316.931485][ T4556] usb 4-1: unable to get target info from device [ 317.318083][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.671099][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.767684][ T4556] usb 4-1: could not get target info (-71) [ 317.773572][ T4556] usb 4-1: could not probe fw (-71) [ 320.220967][ T6210] vivid-000: ================= START STATUS ================= [ 320.261633][ T6220] loop4: detected capacity change from 0 to 512 [ 320.287855][ T6220] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 320.341854][ T6210] vivid-000: Test Pattern: 75% Colorbar [ 320.354157][ T6210] vivid-000: Fill Percentage of Frame: 100 [ 320.364534][ T6210] vivid-000: Horizontal Movement: No Movement [ 320.385287][ T6210] vivid-000: Vertical Movement: No Movement [ 320.385376][ T6220] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 320.391345][ T6210] vivid-000: OSD Text Mode: All [ 320.391375][ T6210] vivid-000: Show Border: false [ 320.391396][ T6210] vivid-000: Show Square: false [ 320.391418][ T6210] vivid-000: Sensor Flipped Horizontally: false [ 320.425077][ T6210] vivid-000: Sensor Flipped Vertically: false [ 320.437489][ T6210] vivid-000: Insert SAV Code in Image: false [ 320.446808][ T6220] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 320.465148][ T6210] vivid-000: Insert EAV Code in Image: false [ 320.482659][ T6210] vivid-000: Insert Video Guard Band: false [ 320.493239][ T6210] vivid-000: Reduced Framerate: false [ 320.503327][ T6210] vivid-000: Enable Capture Cropping: true [ 320.512481][ T6210] vivid-000: Enable Capture Composing: true [ 320.521453][ T6210] vivid-000: Enable Capture Scaler: true [ 320.532765][ T6210] vivid-000: Timestamp Source: End of Frame [ 320.542975][ T6210] vivid-000: Colorspace: sRGB [ 320.550810][ T6210] vivid-000: Transfer Function: Default [ 320.560885][ T6210] vivid-000: Y'CbCr Encoding: Default [ 320.568941][ T6210] vivid-000: HSV Encoding: Hue 0-179 [ 320.574553][ T6210] vivid-000: Quantization: Default [ 320.583496][ T6210] vivid-000: Apply Alpha To Red Only: false [ 320.593511][ T6210] vivid-000: Standard Aspect Ratio: 4x3 [ 320.601437][ T6210] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 320.612968][ T6210] vivid-000: DV Timings: 640x480p59 inactive [ 320.621012][ T6210] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 320.629220][ T6210] vivid-000: Maximum EDID Blocks: 2 [ 320.635926][ T6210] vivid-000: Limited RGB Range (16-235): false [ 320.646002][ T6210] vivid-000: Rx RGB Quantization Range: Automatic [ 320.656132][ T6210] vivid-000: Power Present: 0x00000001 [ 320.665144][ T6210] tpg source WxH: 640x360 (Y'CbCr) [ 320.671861][ T6210] tpg field: 1 [ 320.677726][ T6210] tpg crop: 640x360@0x0 [ 320.682249][ T6210] tpg compose: 640x360@0x0 [ 320.688986][ T6210] tpg colorspace: 8 [ 320.693494][ T6210] tpg transfer function: 0/0 [ 320.701129][ T6210] tpg Y'CbCr encoding: 0/0 [ 320.705600][ T6210] tpg quantization: 0/0 [ 320.710041][ T6210] tpg RGB range: 0/2 [ 320.714468][ T6210] vivid-000: ================== END STATUS ================== [ 320.714610][ T6220] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 320.757543][ T6212] netlink: 196 bytes leftover after parsing attributes in process `syz.1.456'. [ 320.771807][ T6220] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 320.780435][ T6212] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 320.837808][ T6220] EXT4-fs (loop4): orphan cleanup on readonly fs [ 320.868062][ T6220] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.458: bg 0: block 34: padding at end of block bitmap is not set [ 320.888670][ T6220] Quota error (device loop4): write_blk: dquota write failed [ 320.898351][ T6212] netlink: 'syz.1.456': attribute type 8 has an invalid length. [ 320.911843][ T6220] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 320.936170][ T6220] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.458: Failed to acquire dquot type 1 [ 320.952903][ T6220] EXT4-fs (loop4): 1 truncate cleaned up [ 320.962057][ T6220] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 321.817250][ T4459] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 322.027266][ T4459] usb 1-1: Using ep0 maxpacket: 8 [ 322.050822][ T4459] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 322.124193][ T4459] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 322.184592][ T4459] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 322.245398][ T4459] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 322.414821][ T4459] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 322.424166][ T4459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.067841][ T4459] usb 1-1: GET_CAPABILITIES returned 0 [ 323.077328][ T4459] usbtmc 1-1:16.0: can't read capabilities [ 326.328214][ T4272] EXT4-fs (loop4): unmounting filesystem. [ 326.793809][ T7] usb 1-1: USB disconnect, device number 9 [ 327.041996][ T6269] device bridge9 entered promiscuous mode [ 327.317509][ T7] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 327.947269][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 329.141705][ T6275] netlink: 196 bytes leftover after parsing attributes in process `syz.0.470'. [ 329.157969][ T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 329.170556][ T6275] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 329.193374][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 329.247347][ T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 329.277251][ T951] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 329.295214][ T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 329.351207][ T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 329.392089][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.472910][ T951] usb 4-1: unable to get BOS descriptor or descriptor too short [ 329.489938][ T951] usb 4-1: not running at top speed; connect to a high speed hub [ 329.534206][ T951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.559224][ T951] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 329.584376][ T951] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 329.614397][ T951] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.630507][ T6275] netlink: 'syz.0.470': attribute type 8 has an invalid length. [ 329.651814][ T951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.682936][ T951] usb 4-1: Product: syz [ 329.700774][ T951] usb 4-1: Manufacturer: syz [ 329.716073][ T6285] vivid-000: ================= START STATUS ================= [ 329.734070][ T951] usb 4-1: SerialNumber: syz [ 329.780940][ T6285] vivid-000: Test Pattern: 75% Colorbar [ 329.794154][ T6285] vivid-000: Fill Percentage of Frame: 100 [ 329.837265][ T6285] vivid-000: Horizontal Movement: No Movement [ 329.850457][ T6285] vivid-000: Vertical Movement: No Movement [ 329.860320][ T6285] vivid-000: OSD Text Mode: All [ 329.870424][ T6285] vivid-000: Show Border: false [ 329.879201][ T6285] vivid-000: Show Square: false [ 329.890301][ T6285] vivid-000: Sensor Flipped Horizontally: false [ 329.910315][ T6285] vivid-000: Sensor Flipped Vertically: false [ 329.919253][ T6285] vivid-000: Insert SAV Code in Image: false [ 329.931468][ T6285] vivid-000: Insert EAV Code in Image: false [ 329.941611][ T6285] vivid-000: Insert Video Guard Band: false [ 329.951196][ T6285] vivid-000: Reduced Framerate: false [ 329.956796][ T6285] vivid-000: Enable Capture Cropping: true [ 329.964653][ T6285] vivid-000: Enable Capture Composing: true [ 329.979920][ T6285] vivid-000: Enable Capture Scaler: [ 329.982576][ T951] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 329.994915][ T6285] true [ 330.003875][ T6285] vivid-000: Timestamp Source: End of Frame [ 330.015166][ T6285] vivid-000: Colorspace: sRGB [ 330.030761][ T951] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 330.039070][ T6285] vivid-000: Transfer Function: Default [ 330.047746][ T6285] vivid-000: Y'CbCr Encoding: Default [ 330.056644][ T6285] vivid-000: HSV Encoding: Hue 0-179 [ 330.064443][ T6285] vivid-000: Quantization: Default [ 330.071088][ T6285] vivid-000: Apply Alpha To Red Only: false [ 330.079096][ T6285] vivid-000: Standard Aspect Ratio: 4x3 [ 330.090805][ T6285] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 330.101349][ T6285] vivid-000: DV Timings: 640x480p59 inactive [ 330.111066][ T6285] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 330.118935][ T6285] vivid-000: Maximum EDID Blocks: 2 [ 330.125547][ T6285] vivid-000: Limited RGB Range (16-235): false [ 330.137810][ T6285] vivid-000: Rx RGB Quantization Range: Automatic [ 330.146614][ T951] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 330.219567][ T6285] vivid-000: Power Present: 0x00000001 [ 330.235987][ T6285] tpg source WxH: 640x360 (Y'CbCr) [ 330.243749][ T6285] tpg field: 1 [ 330.248200][ T6285] tpg crop: 640x360@0x0 [ 330.253771][ T6285] tpg compose: 640x360@0x0 [ 330.262694][ T6285] tpg colorspace: 8 [ 330.268059][ T6285] tpg transfer function: 0/0 [ 330.275658][ T6285] tpg Y'CbCr encoding: 0/0 [ 330.282304][ T6285] tpg quantization: 0/0 [ 330.287893][ T6285] tpg RGB range: 0/2 [ 330.295316][ T6285] vivid-000: ================== END STATUS ================== [ 330.329394][ T951] usb 4-1: USB disconnect, device number 14 [ 332.275481][ T7] usb 5-1: usb_control_msg returned -71 [ 332.281224][ T7] usbtmc 5-1:16.0: can't read capabilities [ 332.301277][ T7] usb 5-1: USB disconnect, device number 8 [ 332.958239][ T6302] loop0: detected capacity change from 0 to 512 [ 333.000277][ T6302] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 333.045492][ T6302] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 333.089409][ T6302] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 333.131943][ T6302] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 333.147434][ T6302] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 333.256933][ T6302] EXT4-fs (loop0): orphan cleanup on readonly fs [ 333.323108][ T6302] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.476: bg 0: block 34: padding at end of block bitmap is not set [ 333.368133][ T6302] Quota error (device loop0): write_blk: dquota write failed [ 333.456641][ T6302] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 333.562358][ T6302] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.476: Failed to acquire dquot type 1 [ 333.588872][ T6315] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 333.621001][ T6302] EXT4-fs (loop0): 1 truncate cleaned up [ 333.642189][ T6315] netlink: 16 bytes leftover after parsing attributes in process `syz.1.479'. [ 333.644087][ T6302] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 335.417239][ T22] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 340.657380][ T22] usb 3-1: device descriptor read/64, error -110 [ 340.927237][ T22] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 342.290684][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 342.909202][ T6345] netdevsim netdevsim4: Direct firmware load for . [ 342.909202][ T6345] failed with error -2 [ 342.919979][ T6345] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 342.919979][ T6345] [ 343.138950][ T6355] netlink: 196 bytes leftover after parsing attributes in process `syz.3.488'. [ 343.151495][ T6355] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 343.185337][ T6356] device bridge3 entered promiscuous mode [ 343.431905][ T6355] netlink: 'syz.3.488': attribute type 8 has an invalid length. [ 343.601673][ T6362] tipc: Enabled bearer , priority 0 [ 343.623665][ T6362] device syzkaller0 entered promiscuous mode [ 343.705271][ T6362] tipc: Resetting bearer [ 343.747762][ T6361] tipc: Resetting bearer [ 343.820040][ T6361] tipc: Disabling bearer [ 348.543481][ T6388] loop1: detected capacity change from 0 to 512 [ 348.551760][ T6388] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 348.561706][ T6388] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 348.571604][ T6388] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 348.614541][ T6388] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 348.682997][ T6388] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 348.693500][ T6388] EXT4-fs (loop1): orphan cleanup on readonly fs [ 348.709495][ T6388] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.497: bg 0: block 34: padding at end of block bitmap is not set [ 348.828101][ T6388] Quota error (device loop1): write_blk: dquota write failed [ 348.957318][ T6388] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 349.077176][ T6388] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.497: Failed to acquire dquot type 1 [ 349.333933][ T6388] EXT4-fs (loop1): 1 truncate cleaned up [ 349.427430][ T6388] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 351.483655][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 351.786876][ T26] audit: type=1804 audit(1755139683.177:139): pid=6409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.504" name="/newroot/105/bus/bus" dev="overlay" ino=564 res=1 errno=0 [ 352.469905][ T6411] tipc: Enabled bearer , priority 0 [ 352.532570][ T6412] vivid-000: ================= START STATUS ================= [ 352.552527][ T6415] device syzkaller0 entered promiscuous mode [ 352.565656][ T6412] vivid-000: Test Pattern: 75% Colorbar [ 352.720185][ T6415] tipc: Resetting bearer [ 352.727614][ T6412] vivid-000: Fill Percentage of Frame: 100 [ 352.746505][ T6412] vivid-000: Horizontal Movement: No Movement [ 352.755182][ T6412] vivid-000: Vertical Movement: No Movement [ 352.758003][ T6407] tipc: Resetting bearer [ 353.730279][ T41] tipc: Node number set to 367446791 [ 353.736040][ T6412] [ 353.790073][ T6412] vivid-000: OSD Text Mode: All [ 353.807554][ T6412] vivid-000: Show Border: false [ 353.822558][ T6412] vivid-000: Show Square: false [ 353.834855][ T6412] vivid-000: Sensor Flipped Horizontally: [ 353.838271][ T6407] tipc: Disabling bearer [ 353.850528][ T6412] false [ 353.856151][ T6412] vivid-000: Sensor Flipped Vertically: false [ 353.871112][ T6412] vivid-000: Insert SAV Code in Image: false [ 353.885751][ T6412] vivid-000: Insert EAV Code in Image: false [ 353.896995][ T6412] vivid-000: Insert Video Guard Band: false [ 353.911640][ T6412] vivid-000: Reduced Framerate: false [ 353.920087][ T6412] vivid-000: Enable Capture Cropping: true [ 354.327524][ T6412] vivid-000: Enable Capture Composing: true [ 354.333520][ T6412] vivid-000: Enable Capture Scaler: true [ 354.908054][ T6412] vivid-000: Timestamp Source: End of Frame [ 355.187490][ T6412] vivid-000: Colorspace: sRGB [ 355.192373][ T6412] vivid-000: Transfer Function: Default [ 355.261584][ T6412] vivid-000: Y'CbCr Encoding: Default [ 355.322399][ T6412] vivid-000: HSV Encoding: Hue 0-179 [ 355.387200][ T6412] vivid-000: Quantization: Default [ 355.392504][ T6412] vivid-000: Apply Alpha To Red Only: false [ 355.432356][ T6412] vivid-000: Standard Aspect Ratio: 4x3 [ 355.452385][ T6412] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 355.512416][ T6412] vivid-000: DV Timings: 640x480p59 inactive [ 355.524252][ T6412] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 355.557217][ T6412] vivid-000: Maximum EDID Blocks: 2 [ 355.562609][ T6412] vivid-000: Limited RGB Range (16-235): false [ 355.597431][ T6412] vivid-000: Rx RGB Quantization Range: Automatic [ 355.604076][ T6412] vivid-000: Power Present: 0x00000001 [ 355.702403][ T6412] tpg source WxH: 640x360 (Y'CbCr) [ 355.727220][ T6412] tpg field: 1 [ 355.730724][ T6412] tpg crop: 640x360@0x0 [ 355.735004][ T6412] tpg compose: 640x360@0x0 [ 355.772348][ T6412] tpg colorspace: 8 [ 355.776294][ T6412] tpg transfer function: 0/0 [ 355.832704][ T6412] tpg Y'CbCr encoding: 0/0 [ 355.847337][ T6412] tpg quantization: 0/0 [ 355.923822][ T6412] tpg RGB range: 0/2 [ 356.012242][ T6412] vivid-000: ================== END STATUS ================== [ 356.300168][ T6443] loop1: detected capacity change from 0 to 512 [ 356.371346][ T6443] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 356.567271][ T6443] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 356.587258][ T6443] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 357.207745][ T6443] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 357.245782][ T6443] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 357.308860][ T6443] EXT4-fs (loop1): orphan cleanup on readonly fs [ 357.567328][ T5143] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 358.234379][ T6443] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.515: bg 0: block 34: padding at end of block bitmap is not set [ 358.367976][ T6443] Quota error (device loop1): write_blk: dquota write failed [ 358.425133][ T6443] Quota error (device loop1): qtree_write_dquot: Error -28 occurred while creating quota [ 358.459333][ T6443] EXT4-fs error (device loop1): ext4_acquire_dquot:6814: comm syz.1.515: Failed to acquire dquot type 1 [ 358.503953][ T6443] EXT4-fs (loop1): 1 truncate cleaned up [ 358.517295][ T5143] usb 1-1: Using ep0 maxpacket: 8 [ 358.562106][ T6443] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 358.564715][ T5143] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.697431][ T5143] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.797860][ T26] audit: type=1804 audit(1755139690.197:140): pid=6455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.518" name="/newroot/96/bus/bus" dev="overlay" ino=516 res=1 errno=0 [ 358.798382][ T5143] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.888647][ T5143] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.926686][ T5143] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 359.139512][ T5143] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.120300][ T4265] EXT4-fs (loop1): unmounting filesystem. [ 362.279787][ T6469] tipc: Enabling of bearer rejected, failed to enable media [ 363.224113][ T26] audit: type=1804 audit(1755139694.627:141): pid=6498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.529" name="/newroot/121/bus/bus" dev="overlay" ino=641 res=1 errno=0 [ 364.041340][ T5143] usb 1-1: can't set config #16, error -71 [ 364.098654][ T5143] usb 1-1: USB disconnect, device number 10 [ 364.234609][ T6493] vivid-000: ================= START STATUS ================= [ 364.333450][ T6493] vivid-000: Test Pattern: 75% Colorbar [ 364.497281][ T6493] vivid-000: Fill Percentage of Frame: 100 [ 365.297511][ T6493] vivid-000: Horizontal Movement: No Movement [ 365.310282][ T6493] vivid-000: Vertical Movement: No Movement [ 365.356041][ T6493] vivid-000: OSD Text Mode: All [ 365.427957][ T6493] vivid-000: Show Border: false [ 365.446929][ T6493] vivid-000: Show Square: false [ 365.687746][ T6516] loop0: detected capacity change from 0 to 512 [ 365.743224][ T6493] vivid-000: Sensor Flipped Horizontally: false [ 365.758447][ T6516] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 365.798346][ T6493] vivid-000: Sensor Flipped Vertically: false [ 365.807664][ T6493] vivid-000: Insert SAV Code in Image: false [ 365.817000][ T6493] vivid-000: Insert EAV Code in Image: false [ 365.824727][ T6493] vivid-000: Insert Video Guard Band: false [ 365.834766][ T6493] vivid-000: Reduced Framerate: false [ 365.841735][ T6493] vivid-000: Enable Capture Cropping: true [ 365.856445][ T6516] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 365.862610][ T6493] vivid-000: Enable Capture Composing: true [ 365.877941][ T6493] vivid-000: Enable Capture Scaler: true [ 365.883820][ T6493] vivid-000: Timestamp Source: End of Frame [ 365.891142][ T6493] vivid-000: Colorspace: sRGB [ 365.896153][ T6493] vivid-000: Transfer Function: Default [ 365.903765][ T6493] vivid-000: Y'CbCr Encoding: Default [ 365.911484][ T6493] vivid-000: HSV Encoding: Hue 0-179 [ 365.919619][ T6493] vivid-000: Quantization: Default [ 365.925853][ T6493] vivid-000: Apply Alpha To Red Only: false [ 365.934843][ T6516] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 365.935173][ T6493] vivid-000: Standard Aspect Ratio: 4x3 [ 365.961660][ T6493] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 365.969918][ T6493] vivid-000: DV Timings: 640x480p59 inactive [ 365.976099][ T6493] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 365.983980][ T6493] vivid-000: Maximum EDID Blocks: 2 [ 365.989592][ T6493] vivid-000: Limited RGB Range (16-235): false [ 365.996017][ T6493] vivid-000: Rx RGB Quantization Range: Automatic [ 366.002988][ T6493] vivid-000: Power Present: 0x00000001 [ 366.008948][ T6493] tpg source WxH: 640x360 (Y'CbCr) [ 366.014218][ T6493] tpg field: 1 [ 366.018047][ T6493] tpg crop: 640x360@0x0 [ 366.022470][ T6493] tpg compose: 640x360@0x0 [ 366.027068][ T6493] tpg colorspace: 8 [ 366.031377][ T6493] tpg transfer function: 0/0 [ 366.036200][ T6493] tpg Y'CbCr encoding: 0/0 [ 366.041085][ T6493] tpg quantization: 0/0 [ 366.045416][ T6493] tpg RGB range: 0/2 [ 366.049829][ T6493] vivid-000: ================== END STATUS ================== [ 366.061384][ T6516] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 366.069938][ T6516] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 366.080337][ T6516] EXT4-fs (loop0): orphan cleanup on readonly fs [ 366.095781][ T6516] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.536: bg 0: block 34: padding at end of block bitmap is not set [ 366.193707][ T6516] Quota error (device loop0): write_blk: dquota write failed [ 366.293381][ T6516] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota [ 366.327300][ T6516] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.536: Failed to acquire dquot type 1 [ 366.404911][ T6516] EXT4-fs (loop0): 1 truncate cleaned up [ 366.418106][ T6516] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 368.193278][ T6534] tipc: Enabled bearer , priority 0 [ 368.212907][ T6534] device syzkaller0 entered promiscuous mode [ 369.314745][ T26] audit: type=1804 audit(1755139699.847:142): pid=6538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.542" name="/newroot/104/bus/bus" dev="overlay" ino=566 res=1 errno=0 [ 369.503768][ T6533] tipc: Resetting bearer [ 369.586952][ T6533] tipc: Disabling bearer [ 371.337323][ T4376] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 373.171319][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 374.431818][ T6572] vivid-000: ================= START STATUS ================= [ 374.440063][ T6572] vivid-000: Test Pattern: 75% Colorbar [ 374.457477][ T6572] vivid-000: Fill Percentage of Frame: 100 [ 374.463501][ T6572] vivid-000: Horizontal Movement: No Movement [ 374.521859][ T6572] vivid-000: Vertical Movement: No Movement [ 374.529672][ T6572] vivid-000: OSD Text Mode: All [ 374.540939][ T6572] vivid-000: Show Border: false [ 374.563002][ T6572] vivid-000: Show Square: false [ 374.574265][ T6572] vivid-000: Sensor Flipped Horizontally: false [ 374.590436][ T6572] vivid-000: Sensor Flipped Vertically: false [ 374.596951][ T6572] vivid-000: Insert SAV Code in Image: false [ 374.610614][ T6572] vivid-000: Insert EAV Code in Image: false [ 374.628169][ T6572] vivid-000: Insert Video Guard Band: false [ 374.638733][ T6572] vivid-000: Reduced Framerate: false [ 374.659127][ T6572] vivid-000: Enable Capture Cropping: true [ 374.670311][ T6572] vivid-000: Enable Capture Composing: true [ 375.476147][ T6572] vivid-000: Enable Capture Scaler: true [ 375.505481][ T6572] vivid-000: Timestamp Source: End of Frame [ 375.527691][ T6572] vivid-000: Colorspace: sRGB [ 375.532886][ T6572] vivid-000: Transfer Function: Default [ 375.539918][ T6572] vivid-000: Y'CbCr Encoding: Default [ 375.545480][ T6572] vivid-000: HSV Encoding: Hue 0-179 [ 375.579941][ T6572] vivid-000: Quantization: Default [ 375.594424][ T6572] vivid-000: Apply Alpha To Red Only: false [ 375.603671][ T6572] vivid-000: Standard Aspect Ratio: 4x3 [ 375.623265][ T6572] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 375.635146][ T6572] vivid-000: DV Timings: 640x480p59 inactive [ 375.653625][ T6572] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 375.664857][ T6572] vivid-000: Maximum EDID Blocks: 2 [ 375.674970][ T6572] vivid-000: Limited RGB Range (16-235): false [ 375.685189][ T6572] vivid-000: Rx RGB Quantization Range: Automatic [ 375.691942][ T6572] vivid-000: Power Present: 0x00000001 [ 375.698689][ T6572] tpg source WxH: 640x360 (Y'CbCr) [ 375.705220][ T6572] tpg field: 1 [ 375.711057][ T6572] tpg crop: 640x360@0x0 [ 375.725896][ T6572] tpg compose: 640x360@0x0 [ 375.731859][ T6572] tpg colorspace: 8 [ 375.933939][ T6572] tpg transfer function: 0/0 [ 375.944622][ T6572] tpg Y'CbCr encoding: 0/0 [ 375.952986][ T6572] tpg quantization: 0/0 [ 375.961752][ T6572] tpg RGB range: 0/2 [ 375.973153][ T6572] vivid-000: ================== END STATUS ================== [ 376.407639][ T26] audit: type=1804 audit(1755139707.777:143): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.556" name="/newroot/114/bus/bus" dev="overlay" ino=618 res=1 errno=0 [ 378.580716][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.587158][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.789896][ T6599] loop4: detected capacity change from 0 to 512 [ 378.838190][ T6600] tipc: Enabled bearer , priority 0 [ 378.870589][ T6599] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 378.921221][ T6599] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 378.921971][ T6601] device syzkaller0 entered promiscuous mode [ 378.977194][ T6599] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 379.161406][ T6599] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 379.177194][ T6599] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c042e01c, mo2=0000] [ 379.197027][ T6603] tipc: Resetting bearer [ 379.273989][ T6599] EXT4-fs (loop4): orphan cleanup on readonly fs [ 379.311296][ T6597] tipc: Resetting bearer [ 379.337465][ T6599] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.560: bg 0: block 34: padding at end of block bitmap is not set [ 379.393590][ T6597] tipc: Disabling bearer [ 379.555540][ T6599] Quota error (device loop4): write_blk: dquota write failed [ 379.637299][ T6599] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 379.683922][ T6599] EXT4-fs error (device loop4): ext4_acquire_dquot:6814: comm syz.4.560: Failed to acquire dquot type 1 [ 379.760979][ T6599] EXT4-fs (loop4): 1 truncate cleaned up [ 379.807631][ T6599] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 485.187085][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 485.194121][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3637/1:b..l P6474/1:b..l P4451/1:b..l [ 485.205043][ C0] (detected by 0, t=10503 jiffies, g=33533, q=63 ncpus=2) [ 485.212279][ C0] task:kworker/u4:8 state:R running task stack:20688 pid:4451 ppid:2 flags:0x00004000 [ 485.224155][ C0] Workqueue: bat_events batadv_nc_worker [ 485.230054][ C0] Call Trace: [ 485.233361][ C0] [ 485.236409][ C0] __schedule+0x10ec/0x40b0 [ 485.240973][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 485.246909][ C0] ? lock_chain_count+0x20/0x20 [ 485.251805][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 485.257129][ C0] preempt_schedule_irq+0xb1/0x150 [ 485.262275][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 485.268073][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 485.274013][ C0] irqentry_exit+0x63/0x70 [ 485.278474][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 485.283972][ C0] RIP: 0010:lock_acquire+0x20f/0x490 [ 485.289294][ C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f5 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b [ 485.309126][ C0] RSP: 0000:ffffc90004b5fac0 EFLAGS: 00000206 [ 485.315224][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 09e357781b24ba00 [ 485.323230][ C0] RDX: 0000000000000000 RSI: ffffffff8a8c15e0 RDI: ffffffff8adef320 [ 485.331232][ C0] RBP: ffffc90004b5fbc8 R08: dffffc0000000000 R09: fffffbfff215ba49 [ 485.339238][ C0] R10: fffffbfff215ba49 R11: 1ffffffff215ba48 R12: 0000000000000001 [ 485.347251][ C0] R13: 1ffff9200096bf64 R14: 0000000000000246 R15: dffffc0000000000 [ 485.355295][ C0] ? read_lock_is_recursive+0x10/0x10 [ 485.360727][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 485.366756][ C0] ? batadv_nc_worker+0xce/0x600 [ 485.371777][ C0] batadv_nc_worker+0xeb/0x600 [ 485.376586][ C0] ? batadv_nc_worker+0xce/0x600 [ 485.381584][ C0] ? process_one_work+0x7a1/0x1160 [ 485.386734][ C0] process_one_work+0x898/0x1160 [ 485.391728][ C0] ? worker_detach_from_pool+0x240/0x240 [ 485.397464][ C0] ? _raw_spin_lock_irq+0xab/0xe0 [ 485.402624][ C0] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 485.408050][ C0] ? kthread_data+0x4b/0xc0 [ 485.412604][ C0] worker_thread+0xaa2/0x1250 [ 485.417345][ C0] kthread+0x29d/0x330 [ 485.421451][ C0] ? worker_clr_flags+0x1a0/0x1a0 [ 485.426509][ C0] ? kthread_blkcg+0xd0/0xd0 [ 485.431151][ C0] ret_from_fork+0x1f/0x30 [ 485.435620][ C0] [ 485.438668][ C0] task:udevd state:R running task stack:24928 pid:6474 ppid:3637 flags:0x00004002 [ 485.449488][ C0] Call Trace: [ 485.452790][ C0] [ 485.455755][ C0] __schedule+0x10ec/0x40b0 [ 485.460332][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 485.466270][ C0] ? lock_chain_count+0x20/0x20 [ 485.471184][ C0] ? is_bpf_text_address+0x22/0x2a0 [ 485.476451][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 485.481802][ C0] preempt_schedule_irq+0xb1/0x150 [ 485.486965][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 485.492744][ C0] ? rcu_is_watching+0x11/0xa0 [ 485.497560][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 485.503514][ C0] irqentry_exit+0x63/0x70 [ 485.507975][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 485.513993][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 485.520098][ C0] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 00 87 9e 0c 48 89 de 5b e9 87 53 4f 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 54 a8 81 7e 65 8b 15 55 a8 81 7e 81 e2 00 01 ff 00 74 [ 485.540185][ C0] RSP: 0018:ffffc9000c567718 EFLAGS: 00000246 [ 485.546305][ C0] RAX: ffffffff8a03ceb8 RBX: ffff888072738c00 RCX: ffff88802bb09dc0 [ 485.554320][ C0] RDX: 0000000000000000 RSI: ffff888072738c00 RDI: ffff888072738c00 [ 485.562336][ C0] RBP: ffffc9000c5678f0 R08: ffff88802bb09dc0 R09: 0000000000000003 [ 485.570362][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffff888072738c00 [ 485.578386][ C0] R13: ffffffff8bb137a3 R14: 0000000000000004 R15: ffff88801e335600 [ 485.586406][ C0] ? mt_validate+0x1628/0x4c90 [ 485.591229][ C0] mt_validate+0x1628/0x4c90 [ 485.595878][ C0] ? mt_validate+0xf2/0x4c90 [ 485.600612][ C0] ? mt_cache_shrink+0x20/0x20 [ 485.605455][ C0] ? kasan_set_track+0x60/0x70 [ 485.610266][ C0] ? kasan_set_track+0x4b/0x70 [ 485.615070][ C0] ? kasan_save_free_info+0x2d/0x50 [ 485.620328][ C0] ? ____kasan_slab_free+0x126/0x1e0 [ 485.625652][ C0] ? slab_free_freelist_hook+0x131/0x1a0 [ 485.631408][ C0] ? kmem_cache_free+0xf7/0x290 [ 485.636293][ C0] ? do_mas_align_munmap+0xf00/0x1220 [ 485.641702][ C0] ? do_mas_munmap+0x240/0x2b0 [ 485.646515][ C0] ? __vm_munmap+0x18d/0x290 [ 485.651155][ C0] validate_mm_mt+0xcd/0x420 [ 485.655799][ C0] ? __split_vma+0x500/0x500 [ 485.660427][ C0] ? mas_next_node+0x3f3/0xb70 [ 485.665244][ C0] validate_mm+0xcc/0x2b0 [ 485.669615][ C0] ? vma_expand+0x880/0x880 [ 485.674159][ C0] ? percpu_counter_add_batch+0x13b/0x160 [ 485.679928][ C0] do_mas_align_munmap+0xf98/0x1220 [ 485.685161][ C0] ? verify_lock_unused+0x140/0x140 [ 485.690417][ C0] ? do_mas_align_munmap+0x6ee/0x1220 [ 485.695837][ C0] ? do_mas_munmap+0x2b0/0x2b0 [ 485.700646][ C0] ? mtree_range_walk+0x672/0x7b0 [ 485.705724][ C0] ? mas_walk+0x15f/0x180 [ 485.710097][ C0] ? mas_find+0x1e8/0x230 [ 485.714479][ C0] do_mas_munmap+0x240/0x2b0 [ 485.719206][ C0] __vm_munmap+0x18d/0x290 [ 485.723663][ C0] ? vm_munmap+0x20/0x20 [ 485.727974][ C0] ? bpf_trace_run1+0x3b0/0x3b0 [ 485.732950][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 485.738979][ C0] ? rcu_is_watching+0x11/0xa0 [ 485.743789][ C0] __x64_sys_munmap+0x5c/0x70 [ 485.748766][ C0] do_syscall_64+0x4c/0xa0 [ 485.753210][ C0] ? clear_bhb_loop+0x60/0xb0 [ 485.758095][ C0] ? clear_bhb_loop+0x60/0xb0 [ 485.762833][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 485.768786][ C0] RIP: 0033:0x7f43c2b1e097 [ 485.773266][ C0] RSP: 002b:00007fffa959c418 EFLAGS: 00000246 ORIG_RAX: 000000000000000b [ 485.781731][ C0] RAX: ffffffffffffffda RBX: 00005558ddf9b1a0 RCX: 00007f43c2b1e097 [ 485.789770][ C0] RDX: 00005558ddf98418 RSI: 0000000000000200 RDI: 00007f43c3185000 [ 485.797910][ C0] RBP: 0000000000000001 R08: 00005558ddfaf9b0 R09: 00005558ddf9d630 [ 485.805917][ C0] R10: 0000000000000010 R11: 0000000000000246 R12: 00005558ddf970c0 [ 485.813948][ C0] R13: 00007f43c32ad39c R14: 0000000000000200 R15: 0000000000000009 [ 485.821983][ C0] [ 485.825031][ C0] task:udevd state:R running task stack:22624 pid:3637 ppid:1 flags:0x00004002 [ 485.835847][ C0] Call Trace: [ 485.839148][ C0] [ 485.842109][ C0] __schedule+0x10ec/0x40b0 [ 485.846668][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 485.852605][ C0] ? lock_chain_count+0x20/0x20 [ 485.857497][ C0] ? __stack_depot_save+0x35/0x460 [ 485.862686][ C0] ? __lock_acquire+0x12e5/0x7c50 [ 485.867756][ C0] ? preempt_schedule_irq+0xa6/0x150 [ 485.873061][ C0] preempt_schedule_irq+0xb1/0x150 [ 485.878184][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 485.883916][ C0] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 485.889735][ C0] irqentry_exit+0x63/0x70 [ 485.894178][ C0] asm_sysvec_reschedule_ipi+0x16/0x20 [ 485.899657][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 485.905748][ C0] Code: 00 00 00 00 00 90 53 48 89 fb e8 17 00 00 00 48 8b 3d 00 87 9e 0c 48 89 de 5b e9 87 53 4f 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d 54 a8 81 7e 65 8b 15 55 a8 81 7e 81 e2 00 01 ff 00 74 [ 485.925464][ C0] RSP: 0018:ffffc90003317908 EFLAGS: 00000202 [ 485.931563][ C0] RAX: ffffffff81ec8928 RBX: 0000000000000001 RCX: 26559abbc34bc100 [ 485.939544][ C0] RDX: ffff88807c63bb80 RSI: ffffffff8adef300 RDI: ffffffff8adef2c0 [ 485.947527][ C0] RBP: 0000000000000ffd R08: dffffc0000000000 R09: fffffbfff215ba49 [ 485.955519][ C0] R10: fffffbfff215ba49 R11: 1ffffffff215ba48 R12: dffffc0000000000 [ 485.963516][ C0] R13: ffff88806ff50540 R14: ffff88807351cffd R15: 0000000000000ffe [ 485.971504][ C0] ? prepend_path+0x78/0xc20 [ 485.976143][ C0] prepend_path+0x78/0xc20 [ 485.980592][ C0] ? prepend_path+0x31/0xc20 [ 485.985229][ C0] ? __kmem_cache_alloc_node+0x140/0x260 [ 485.990875][ C0] d_absolute_path+0x9e/0x140 [ 485.995577][ C0] tomoyo_realpath_from_path+0x2d5/0x5d0 [ 486.001248][ C0] ? tomoyo_path_perm+0x1d4/0x550 [ 486.006312][ C0] tomoyo_path_perm+0x1fd/0x550 [ 486.011179][ C0] ? tomoyo_path_permission+0x380/0x380 [ 486.016758][ C0] ? lock_chain_count+0x20/0x20 [ 486.021643][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 486.026993][ C0] security_inode_getattr+0xcf/0x120 [ 486.032297][ C0] vfs_getattr+0x26/0x3a0 [ 486.036753][ C0] ? __fdget_raw+0xca/0x1b0 [ 486.041280][ C0] __x64_sys_newfstat+0x102/0x1c0 [ 486.046315][ C0] ? __ia32_sys_newfstatat+0x1e0/0x1e0 [ 486.051792][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 486.057014][ C0] do_syscall_64+0x4c/0xa0 [ 486.061435][ C0] ? clear_bhb_loop+0x60/0xb0 [ 486.066111][ C0] ? clear_bhb_loop+0x60/0xb0 [ 486.070878][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 486.076781][ C0] RIP: 0033:0x7f43c2b11ad7 [ 486.081284][ C0] RSP: 002b:00007fffa95a1848 EFLAGS: 00000206 ORIG_RAX: 0000000000000005 [ 486.089697][ C0] RAX: ffffffffffffffda RBX: 000000000000000d RCX: 00007f43c2b11ad7 [ 486.097672][ C0] RDX: 0000000000090800 RSI: 00007fffa95a1850 RDI: 000000000000000d [ 486.105654][ C0] RBP: 00007fffa95a1850 R08: 0000000000000000 R09: 0000000000000001 [ 486.113626][ C0] R10: 0000000000000000 R11: 0000000000000206 R12: 00005558ddfa47c0 [ 486.121599][ C0] R13: 00000000000000ff R14: 00005558d90b7be0 R15: 00007fffa95a1b70 [ 486.129581][ C0] [ 486.132610][ C0] rcu: rcu_preempt kthread starved for 10570 jiffies! g33533 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 486.143835][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 486.153865][ C0] rcu: RCU grace-period kthread stack dump: [ 486.159772][ C0] task:rcu_preempt state:R running task stack:27840 pid:16 ppid:2 flags:0x00004000 [ 486.170559][ C0] Call Trace: [ 486.173850][ C0] [ 486.176792][ C0] __schedule+0x10ec/0x40b0 [ 486.181330][ C0] ? release_firmware_map_entry+0x18a/0x18a [ 486.187244][ C0] schedule+0xb9/0x180 [ 486.191320][ C0] schedule_timeout+0x15c/0x280 [ 486.196184][ C0] ? console_conditional_schedule+0x40/0x40 [ 486.202094][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 486.208087][ C0] ? update_process_times+0x1b0/0x1b0 [ 486.213481][ C0] ? prepare_to_swait_event+0x335/0x350 [ 486.219061][ C0] rcu_gp_fqs_loop+0x2f2/0x1310 [ 486.223927][ C0] ? rcu_gp_kthread+0x380/0x380 [ 486.228793][ C0] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 486.234794][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 486.240009][ C0] ? rcu_gp_init+0x14b0/0x14b0 [ 486.244865][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 486.250779][ C0] ? finish_swait+0xc3/0x1d0 [ 486.255385][ C0] rcu_gp_kthread+0x95/0x380 [ 486.259987][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 486.265111][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 486.271021][ C0] ? __kthread_parkme+0x162/0x1c0 [ 486.276065][ C0] kthread+0x29d/0x330 [ 486.280148][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 486.285272][ C0] ? kthread_blkcg+0xd0/0xd0 [ 486.289880][ C0] ret_from_fork+0x1f/0x30 [ 486.299093][ C0] [ 486.302120][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 486.308444][ C0] Sending NMI from CPU 0 to CPUs 1: [ 486.313668][ C1] NMI backtrace for cpu 1 [ 486.313690][ C1] CPU: 1 PID: 4356 Comm: kworker/u4:6 Not tainted 6.1.147-syzkaller #0 [ 486.313706][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 486.313717][ C1] Workqueue: events_unbound toggle_allocation_gate [ 486.313738][ C1] RIP: 0010:smp_call_function_many_cond+0xe7b/0x1270 [ 486.313764][ C1] Code: 00 00 00 41 8b 1f 89 de 83 e6 01 31 ff e8 5d d9 0a 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 e9 d5 0a 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 ce d5 0a [ 486.313778][ C1] RSP: 0018:ffffc90004797800 EFLAGS: 00000293 [ 486.313791][ C1] RAX: ffffffff8175f112 RBX: dffffc0000000000 RCX: ffff888024ac1dc0 [ 486.313804][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 486.313814][ C1] RBP: ffffc90004797960 R08: dffffc0000000000 R09: fffffbfff215ba49 [ 486.313826][ C1] R10: fffffbfff215ba49 R11: 1ffffffff215ba48 R12: 1ffff110171c85ad [ 486.313838][ C1] R13: ffff8880b8f3bb40 R14: 0000000000000000 R15: ffff8880b8e42d68 [ 486.313850][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 486.313864][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 486.313875][ C1] CR2: 000000110c2dc62b CR3: 000000000c88e000 CR4: 00000000003506e0 [ 486.313890][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 486.313899][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 486.313909][ C1] Call Trace: [ 486.313916][ C1] [ 486.313927][ C1] ? text_poke_sync+0x20/0x20 [ 486.313951][ C1] ? smp_call_function_many+0x30/0x30 [ 486.313966][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 486.313983][ C1] ? text_poke+0x90/0x90 [ 486.314002][ C1] ? trace_raw_output_contention_end+0xd0/0xd0 [ 486.314021][ C1] ? text_poke_loc_init+0xd6/0x570 [ 486.314045][ C1] ? text_poke_sync+0x20/0x20 [ 486.314064][ C1] on_each_cpu_cond_mask+0x3b/0x80 [ 486.314080][ C1] ? kmem_cache_alloc_bulk+0x11a/0x4e0 [ 486.314097][ C1] text_poke_bp_batch+0x2b0/0x7d0 [ 486.314120][ C1] ? arch_jump_label_transform_apply+0xe/0x20 [ 486.314139][ C1] ? text_poke_loc_init+0x570/0x570 [ 486.314161][ C1] ? arch_jump_label_transform_queue+0x76/0xd0 [ 486.314183][ C1] text_poke_finish+0x16/0x30 [ 486.314203][ C1] arch_jump_label_transform_apply+0x13/0x20 [ 486.314220][ C1] static_key_enable_cpuslocked+0x11f/0x240 [ 486.314249][ C1] static_key_enable+0x16/0x20 [ 486.314273][ C1] toggle_allocation_gate+0xb4/0x430 [ 486.314290][ C1] ? show_object+0xa0/0xa0 [ 486.314306][ C1] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 486.314329][ C1] ? read_lock_is_recursive+0x10/0x10 [ 486.314354][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 486.314379][ C1] ? process_one_work+0x7a1/0x1160 [ 486.314396][ C1] process_one_work+0x898/0x1160 [ 486.314420][ C1] ? worker_detach_from_pool+0x240/0x240 [ 486.314440][ C1] ? _raw_spin_lock_irq+0xab/0xe0 [ 486.314462][ C1] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 486.314484][ C1] ? kthread_data+0x4b/0xc0 [ 486.314510][ C1] worker_thread+0xaa2/0x1250 [ 486.314542][ C1] kthread+0x29d/0x330 [ 486.314564][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 486.314581][ C1] ? kthread_blkcg+0xd0/0xd0 [ 486.314605][ C1] ret_from_fork+0x1f/0x30 [ 486.314634][ C1]