last executing test programs: 12.830689953s ago: executing program 0 (id=1912): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(0x0, 0x1, 0x2) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f0000000480)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./proc/devices\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f000000d500)={0x2020}, 0x2020) 12.5340649s ago: executing program 2 (id=1913): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) socket(0x8, 0x3, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008000) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f00000000c0)={0xfdfdffff, 0xfffffff7, 0x1, 0x4, 0x15, "518aba4d000000000000000000000000002000"}) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa41d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828eea399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f0e817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) 9.073622018s ago: executing program 3 (id=1916): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 8.966503161s ago: executing program 0 (id=1917): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1b) close(0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 8.946173582s ago: executing program 1 (id=1918): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4010}, 0x400c014) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4001000041000701fefffffffeffffff017c000008004280040008000c00018006000600800a000018010280140117"], 0x140}, 0x1, 0x0, 0x0, 0x4048011}, 0x0) 8.6142986s ago: executing program 1 (id=1919): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) mount(0x0, &(0x7f0000000000)='./pipefs\x00', 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0/../file0\x00', 0x181141, 0x81) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000000071124c000000"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x2c}, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r5, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r6, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) unlinkat(r1, &(0x7f00000000c0)='./file1\x00', 0x200) flistxattr(r0, &(0x7f0000000240)=""/245, 0xf5) 7.739729323s ago: executing program 0 (id=1920): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc0000001c0001"], 0xfc}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) 7.672124534s ago: executing program 1 (id=1921): r0 = socket$rds(0x15, 0x5, 0x0) io_submit(0x0, 0x1, &(0x7f0000000500)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0}]) epoll_create1(0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x22d3, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) removexattr(0x0, &(0x7f0000000000)=@known='security.apparmor\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r2 = open(&(0x7f00009e1000)='./file0\x00', 0x448101, 0x0) fcntl$setlease(r2, 0x400, 0x1) fcntl$getflags(r2, 0x401) read$msr(r1, &(0x7f0000019300)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r6, 0x2000000, 0x4, 0x0, &(0x7f0000000600)="c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$rtc(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)=ANY=[@ANYBLOB="01"]) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x0) 7.365726932s ago: executing program 2 (id=1922): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, 0x0, 0x0) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) 7.109314168s ago: executing program 0 (id=1923): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x114, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0xfffffffc, 0x8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@lifetime_val={0x24, 0x9, {0xf, 0x40000000000081, 0x9, 0x5f}}]}, 0x114}, 0x1, 0x0, 0x0, 0x8801}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000140)={0x40000000, 0x0, 0x0}, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r5, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044090}, 0x40000) socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/dvb/dvb0.frontend0/device/uevent\x00', 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@empty, @in=@private=0xa010101, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x5e}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0x0, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r0, &(0x7f0000000440)={0x900, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x2, 0xa, 0xfc, 0x0, 0x7, 0x0, 0x70bd28, 0x25dfdbfe, [@sadb_x_filter={0x5, 0x1a, @in=@empty, @in=@rand_addr=0x64010100, 0x2c, 0x30}]}, 0x38}}, 0x40408c0) 5.967339608s ago: executing program 0 (id=1924): socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffc, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0xa0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, {0x0, 0x40000000000009, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffff8}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x82520, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 4.28474556s ago: executing program 3 (id=1925): getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7) connect$inet6(r1, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x4) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x0, 0x34}, 0xffffffffffffffa5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000280), 0x200, 0x102) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000100)={0x1, 0x0, 0x3, 0xfffffffc, 0x326, 0x89e, 0x1}) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000002c0)='xfs\x00', 0x2a18005, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x200, 0x807c2, 0x41414770, 0x32314152, 0x425, 0x10004, 0x3, 0x2, 0xfeedcafe, 0x3, 0x2, 0x1}}) 4.238553512s ago: executing program 1 (id=1926): socket$tipc(0x1e, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r2}, 0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r5, &(0x7f0000000100), 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r6, &(0x7f0000000180), 0x1000) 4.185077463s ago: executing program 0 (id=1927): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, 0x94) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') r1 = creat(&(0x7f0000000100)='./file0\x00', 0x59) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000019400)=@newqdisc={0x5c, 0x24, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0xc}, {0xe, 0x8}, {0xe, 0x3}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x1ff, 0x0, 0x406}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0xd7, 0x6}}]}, 0x5c}}, 0x8000) r3 = bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) ioctl$XFS_IOC_GETPARENTS(r3, 0xc028583e, &(0x7f00000004c0)={{[0x7fff, 0x3, 0x6, 0x1ff]}, 0x0, 0x48b442efff85d2dd, 0xb5, 0x0, &(0x7f0000000340)=[{{@align=0x1, {0x3b, 0x8, 0x2, 0x81}}, 0x6, 0x0, '*}\x00'}, {{@_ha_fsid={[0xb, 0x4]}, {0x7, 0x6, 0x4}}, 0x1, 0x0, '%$/\x00'}, {{@_ha_fsid={[0x3, 0x2327a131]}, {0xe, 0x1, 0xb, 0x3}}, 0xb59c}, {{@_ha_fsid={[0x3, 0x3]}, {0x0, 0x6, 0x40, 0xfffffffffffffffc}}, 0x8, 0x0, '-/\x00'}, {{@_ha_fsid={[0x0, 0x6]}, {0x20, 0x4, 0x6, 0x7}}, 0x3, 0x0, '$$\x00'}, {{@_ha_fsid={[0x6, 0x2]}, {0xa5, 0x3, 0x6, 0x8000000000000000}}, 0x6, 0x0, 'tunnel_key\x00'}, {{@align=0x8f6f, {0x4, 0x384e, 0x200, 0x2ef0}}, 0xe, 0x0, '\x00'}, {{@_ha_fsid={[0x636, 0x2]}, {0x6, 0x5, 0xf, 0xe}}, 0x0, 0x0, 'tunnel_key\x00'}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x15) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000980)=0x7e) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000001c0)=0x40) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000)=0x7e) close(r5) userfaultfd(0x801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x0, 0x0, 0x0, 0x1000003, 0x0, 0x0, 0x40f00, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000679000/0x10000)=nil, 0x10000, 0x8, 0x12, r0, 0xb1507000) 2.643113822s ago: executing program 1 (id=1928): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000020) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mq_open(0x0, 0x2, 0x48, 0x0) mq_unlink(&(0x7f0000000000)='eth0\x00') sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x2) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xe) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 2.633361483s ago: executing program 2 (id=1929): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) acct(&(0x7f0000000040)='./file0\x00') open$dir(&(0x7f00000000c0)='./file0\x00', 0x8400, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x282a40, 0x0) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0x1b) close(0xffffffffffffffff) syz_emit_ethernet(0x86, &(0x7f0000000540)={@random="e90c610faca2", @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x5, 0x78, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x1, "c280440876218f4076c9f025d316ae0235103803e8122f7ac1bc5b24d97134ef", "eeb6ad324972d996277be1c7919f46f8", {"430f140c019f1953ffa9e47fadca163a", "3b70439ab82b682a6576c87b9f8bb9ff"}}}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) 2.36657424s ago: executing program 3 (id=1930): openat$sndseq(0xffffff9c, 0x0, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r1 = gettid() timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000007880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r5, 0x73c, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0) 1.878238632s ago: executing program 1 (id=1931): syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202"], 0x0) 1.289162797s ago: executing program 2 (id=1932): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04"], 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$rds(0xffffffffffffffff, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) sendmsg$NFC_CMD_ACTIVATE_TARGET(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x0) ioctl$KDGKBTYPE(r0, 0x4b48, &(0x7f0000000040)) prlimit64(0x0, 0xe, 0x0, 0x0) 1.16258103s ago: executing program 3 (id=1933): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80a4d1, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc044560f, &(0x7f0000000380)=@mmap={0x0, 0x1, 0x4, 0x2, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "37bb54f0"}}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000100)=0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 212.527844ms ago: executing program 3 (id=1934): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtaction={0x44, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4, 0x21}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8040}, 0x4000814) 140.208446ms ago: executing program 2 (id=1935): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x138}], 0x2}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r2, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 10.66903ms ago: executing program 3 (id=1936): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0xc000, 0x0) fadvise64(r2, 0x18, 0x0, 0x4) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 0s ago: executing program 2 (id=1937): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}}, 0xb4}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r2 = socket$inet6(0xa, 0x3, 0x2) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x90) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0xffd8) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, 0x0, 0x0) bind$802154_dgram(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x400c010) kernel console output (not intermixed with test programs): 03:0079:0006.0001: unknown main item tag 0x0 [ 86.939699][ T5810] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 86.970944][ T5810] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 86.983446][ T5810] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 86.997917][ T5810] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 87.005824][ T5810] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 87.013990][ T5810] dragonrise 0003:0079:0006.0001: unknown main item tag 0x0 [ 87.060619][ T5810] dragonrise 0003:0079:0006.0001: hidraw0: USB HID v0.c1 Device [HID 0079:0006] on usb-dummy_hcd.0-1/input0 [ 87.084883][ T5810] dragonrise 0003:0079:0006.0001: no inputs found [ 87.091704][ T5810] dragonrise 0003:0079:0006.0001: force feedback init failed [ 87.201894][ T5810] usb 1-1: USB disconnect, device number 2 [ 87.209944][ T5884] binder: BINDER_SET_CONTEXT_MGR already set [ 87.216180][ T5884] binder: 5883:5884 ioctl 4018620d 200000001000 returned -16 [ 87.345428][ T5885] fido_id[5885]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 89.418616][ T5911] CacheFiles: No cache directory specified [ 90.155105][ T5918] CacheFiles: No cache directory specified [ 92.612273][ T970] cfg80211: failed to load regulatory.db [ 94.139214][ T5953] CacheFiles: No cache directory specified [ 94.500698][ T5782] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 94.901025][ T5971] CacheFiles: No cache directory specified [ 97.697794][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 98.107554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 98.251134][ T5989] CacheFiles: No cache directory specified [ 99.167703][ T175] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.429407][ T175] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 99.511279][ T175] usb 1-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 99.577224][ T175] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 99.639763][ T175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.844071][ T175] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 99.874594][ T175] usb 1-1: invalid MIDI out EP 0 [ 99.932401][ T6011] CacheFiles: No cache directory specified [ 100.092692][ T175] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 100.175972][ T175] usb 1-1: USB disconnect, device number 3 [ 101.125737][ T6025] CacheFiles: No cache directory specified [ 102.817647][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.350624][ T6042] CacheFiles: No cache directory specified [ 106.617812][ T175] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 107.089356][ T175] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 107.125132][ T175] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 107.183076][ T175] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 107.213902][ T175] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 107.245528][ T175] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.286542][ T6054] sched: RT throttling activated [ 108.545855][ T6054] CacheFiles: No cache directory specified [ 108.673102][ T175] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 108.905288][ T5768] udevd[5768]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.923603][ T175] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 108.987499][ T175] usb 4-1: USB disconnect, device number 2 [ 109.641586][ T6075] CacheFiles: No cache directory specified [ 113.155835][ T6090] CacheFiles: No cache directory specified [ 114.047607][ T5829] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 114.256748][ T5829] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 114.269619][ T5829] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 114.280066][ T5829] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 114.292572][ T5829] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 114.302151][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.325109][ T5829] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 115.013310][ T5829] snd-usb-audio: probe of 4-1:27.0 failed with error -12 [ 115.096998][ T5829] usb 4-1: USB disconnect, device number 3 [ 115.531749][ T6116] CacheFiles: No cache directory specified [ 120.292408][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 120.501043][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.518693][ T27] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 120.530162][ T27] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 120.542500][ T27] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.566658][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.589313][ T27] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 120.992256][ T6157] CacheFiles: No cache directory specified [ 121.133892][ T27] snd-usb-audio: probe of 3-1:27.0 failed with error -12 [ 121.425993][ T8] usb 3-1: USB disconnect, device number 2 [ 122.178159][ T6162] loop3: detected capacity change from 0 to 131072 [ 122.186855][ T6162] ======================================================= [ 122.186855][ T6162] WARNING: The mand mount option has been deprecated and [ 122.186855][ T6162] and is ignored by this kernel. Remove the mand [ 122.186855][ T6162] option from the mount to silence this warning. [ 122.186855][ T6162] ======================================================= [ 122.253741][ T6162] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 122.264174][ T6162] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 122.392030][ T6162] F2FS-fs (loop3): invalid crc value [ 122.426501][ T6162] F2FS-fs (loop3): Found nat_bits in checkpoint [ 122.878797][ T6162] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 122.889834][ T6162] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 123.292635][ T6175] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 123.577484][ T6176] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 123.707508][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 124.894752][ T6185] syzkaller0: entered promiscuous mode [ 124.901147][ T6185] syzkaller0: entered allmulticast mode [ 124.910799][ T6185] netlink: 76 bytes leftover after parsing attributes in process `syz.1.108'. [ 125.174455][ T6190] CacheFiles: No cache directory specified [ 125.963775][ T970] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.546387][ T970] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 126.655022][ T970] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 126.666008][ T970] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 126.682889][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.770710][ T6196] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 126.816165][ T970] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 127.038562][ T970] usb 2-1: USB disconnect, device number 2 [ 128.767811][ T6219] loop2: detected capacity change from 0 to 131072 [ 128.797994][ T6219] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 128.809389][ T6219] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 128.829243][ T6219] F2FS-fs (loop2): invalid crc value [ 128.877593][ T6219] F2FS-fs (loop2): Found nat_bits in checkpoint [ 128.951588][ T6219] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 128.959851][ T6219] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 129.568297][ T6219] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 129.589925][ T6219] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 131.729396][ T6241] CacheFiles: No cache directory specified [ 132.319052][ T6229] netlink: 76 bytes leftover after parsing attributes in process `syz.1.120'. [ 132.941661][ T6252] binder_alloc: 6251: binder_alloc_buf, no vma [ 133.394463][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.405159][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.418540][ T6257] binder_alloc: 6251: binder_alloc_buf, no vma [ 133.537789][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c2!!! [ 134.551990][ T6265] loop0: detected capacity change from 0 to 131072 [ 134.579599][ T6265] F2FS-fs (loop0): Segment count (31) mismatch with total segments from devices (0) [ 134.589234][ T6265] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 134.600643][ T6265] F2FS-fs (loop0): invalid crc value [ 134.613754][ T6265] F2FS-fs (loop0): Found nat_bits in checkpoint [ 134.635021][ T5764] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.652808][ T6265] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 134.661002][ T6265] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 134.909742][ T6271] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 134.931208][ T6271] F2FS-fs (loop0): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 135.197374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 135.410956][ T5764] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 135.448988][ T5764] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 135.544833][ T5764] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 135.570812][ T5764] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.624910][ T6259] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 135.640964][ T5764] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 135.873304][ T5764] usb 4-1: USB disconnect, device number 4 [ 137.469308][ T6298] netlink: 12 bytes leftover after parsing attributes in process `syz.2.136'. [ 138.881113][ T6293] netlink: 76 bytes leftover after parsing attributes in process `syz.3.135'. [ 139.158548][ T6303] binder_alloc: 6302: binder_alloc_buf, no vma [ 140.328547][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.1.146'. [ 140.337594][ T5764] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.536862][ T5764] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 141.140182][ T5764] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 141.150442][ T5764] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 141.159854][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.171876][ T6317] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 141.209284][ T5764] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 141.423943][ T5764] usb 3-1: USB disconnect, device number 3 [ 142.279168][ T6333] netlink: 60 bytes leftover after parsing attributes in process `syz.0.149'. [ 144.427462][ T28] audit: type=1800 audit(1785789782.751:2): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.149" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 144.448226][ C1] vkms_vblank_simulate: vblank timer overrun [ 144.456120][ T6334] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 144.515260][ T6334] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 144.567039][ T6334] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 145.022933][ T6361] netlink: 12 bytes leftover after parsing attributes in process `syz.1.156'. [ 147.397435][ T175] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 147.544656][ T28] audit: type=1326 audit(1785789785.871:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.160" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 147.568863][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.596754][ T28] audit: type=1326 audit(1785789785.911:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.160" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 147.602268][ T175] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.673393][ T28] audit: type=1326 audit(1785789785.911:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.160" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 147.698348][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.709793][ T175] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 147.740802][ T175] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 147.750863][ T175] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.773917][ T6367] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 147.790060][ T175] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 147.864596][ T28] audit: type=1326 audit(1785789786.061:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.160" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 147.890138][ T28] audit: type=1326 audit(1785789786.091:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6374 comm="syz.3.160" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 147.914462][ C1] vkms_vblank_simulate: vblank timer overrun [ 148.103919][ T27] usb 1-1: USB disconnect, device number 4 [ 148.887798][ T6409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.167'. [ 154.499088][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 155.018616][ T8] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 155.310334][ T8] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 155.470544][ T8] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 155.480618][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.494033][ T6434] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 155.514855][ T8] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 156.573783][ T6456] netlink: 12 bytes leftover after parsing attributes in process `syz.2.178'. [ 156.684392][ T8] usb 1-1: USB disconnect, device number 5 [ 161.785661][ T6496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.191'. [ 161.867421][ T5764] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.627144][ T6500] netlink: 48 bytes leftover after parsing attributes in process `syz.0.192'. [ 162.724884][ T6503] netlink: 48 bytes leftover after parsing attributes in process `syz.1.193'. [ 163.507552][ T5764] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 163.526888][ T5764] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 163.545944][ T5764] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.571764][ T5764] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.591702][ T6493] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 163.609150][ T5764] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 163.864744][ T175] usb 3-1: USB disconnect, device number 4 [ 169.155445][ T6552] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 170.034101][ T5812] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 170.321269][ T5812] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.335621][ T5812] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 170.347470][ T5812] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.359076][ T5812] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.379902][ T6553] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 170.410655][ T5812] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 170.972878][ T6564] overlay: Unknown parameter '/' [ 171.238463][ T5764] usb 2-1: USB disconnect, device number 3 [ 172.958428][ T28] audit: type=1326 audit(1785789811.291:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6577 comm="syz.1.217" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c3f9e019 code=0x0 [ 174.597506][ T27] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 174.841565][ T27] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 174.853313][ T27] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 174.864604][ T27] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 174.897392][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.925233][ T6603] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 174.964046][ T27] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 179.182252][ T5764] usb 4-1: USB disconnect, device number 5 [ 179.466532][ T28] audit: type=1326 audit(1785789817.791:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 180.203287][ T28] audit: type=1326 audit(1785789817.791:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 180.261830][ T28] audit: type=1326 audit(1785789817.801:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.2.236" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 182.177745][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 182.587395][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 184.700111][ T27] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 184.923184][ T27] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 184.950066][ T27] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 184.972241][ T27] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 184.982080][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.004142][ T6676] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 185.021870][ T27] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 186.084989][ T27] usb 2-1: USB disconnect, device number 4 [ 190.254914][ T6730] usb usb8: usbfs: process 6730 (syz.1.266) did not claim interface 0 before use [ 191.485991][ T6715] lo speed is unknown, defaulting to 1000 [ 191.517568][ T6715] lo speed is unknown, defaulting to 1000 [ 191.518919][ T6728] netlink: 'syz.1.266': attribute type 10 has an invalid length. [ 191.562729][ T6728] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 191.627725][ T6731] netlink: 14 bytes leftover after parsing attributes in process `syz.1.266'. [ 191.938631][ T6731] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.093441][ T6731] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.321312][ T6731] bond0 (unregistering): (slave netdevsim0): Releasing backup interface [ 192.346023][ T6731] bond0 (unregistering): Released all slaves [ 192.354370][ T6734] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.982840][ T6715] lo speed is unknown, defaulting to 1000 [ 193.103724][ T6715] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 193.182369][ T6715] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 193.278046][ T6745] fuse: Bad value for 'fd' [ 193.362031][ T6715] lo speed is unknown, defaulting to 1000 [ 193.407430][ T6715] lo speed is unknown, defaulting to 1000 [ 193.425917][ T6748] CacheFiles: No cache directory specified [ 193.473037][ T6715] lo speed is unknown, defaulting to 1000 [ 193.516526][ T6715] lo speed is unknown, defaulting to 1000 [ 193.556428][ T6715] lo speed is unknown, defaulting to 1000 [ 193.914021][ T28] audit: type=1326 audit(1785789832.241:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 193.947628][ T28] audit: type=1326 audit(1785789832.241:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 193.977635][ T28] audit: type=1326 audit(1785789832.271:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 194.006458][ T28] audit: type=1326 audit(1785789832.271:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 194.038605][ T28] audit: type=1326 audit(1785789832.271:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.2.273" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 194.835232][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.864896][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.966694][ T6765] fuse: Bad value for 'fd' [ 195.547760][ T6774] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.892907][ T28] audit: type=1326 audit(1785789837.221:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 198.967655][ T28] audit: type=1326 audit(1785789837.251:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 199.008968][ T28] audit: type=1326 audit(1785789837.251:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 199.037816][ T28] audit: type=1326 audit(1785789837.251:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6790 comm="syz.3.282" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 199.138137][ T6796] CacheFiles: No cache directory specified [ 200.232833][ T6809] binder: BINDER_SET_CONTEXT_MGR already set [ 200.300384][ T6809] binder: 6805:6809 ioctl 4018620d 200000001000 returned -16 [ 200.958393][ T28] audit: type=1326 audit(1785789839.291:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 201.016334][ T28] audit: type=1326 audit(1785789839.291:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 201.059419][ T28] audit: type=1326 audit(1785789839.321:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 201.089865][ T28] audit: type=1326 audit(1785789839.321:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 201.118362][ T28] audit: type=1326 audit(1785789839.321:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6816 comm="syz.3.291" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 202.017851][ T6806] Bluetooth: hci2: command 0x0406 tx timeout [ 202.024408][ T6806] Bluetooth: hci0: command 0x0406 tx timeout [ 202.066544][ T6806] Bluetooth: hci1: command 0x0406 tx timeout [ 202.194291][ T6807] Bluetooth: hci3: command 0x0406 tx timeout [ 202.884821][ T6840] CacheFiles: No cache directory specified [ 203.703728][ T6842] binder: BINDER_SET_CONTEXT_MGR already set [ 203.711311][ T6842] binder: 6841:6842 ioctl 4018620d 200000001000 returned -16 [ 205.386517][ T6866] syzkaller0: entered promiscuous mode [ 205.396156][ T6866] syzkaller0: entered allmulticast mode [ 205.411607][ T6866] netlink: 76 bytes leftover after parsing attributes in process `syz.0.309'. [ 205.717677][ T5812] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 205.929561][ T5812] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 205.943471][ T5812] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 205.959623][ T5812] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 205.973893][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.989854][ T6868] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 206.006214][ T5812] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 206.258268][ T5812] usb 4-1: USB disconnect, device number 6 [ 214.530457][ T7005] syzkaller0: entered promiscuous mode [ 214.537039][ T7005] syzkaller0: entered allmulticast mode [ 214.550101][ T7005] netlink: 76 bytes leftover after parsing attributes in process `syz.0.344'. [ 216.170361][ T6975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 216.733646][ T7038] CacheFiles: No cache directory specified [ 219.432841][ T7081] netlink: 48 bytes leftover after parsing attributes in process `syz.1.361'. [ 222.277587][ T7069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 225.656804][ T7209] netlink: 60 bytes leftover after parsing attributes in process `syz.2.402'. [ 226.901887][ T7171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 226.976464][ T7243] netlink: 60 bytes leftover after parsing attributes in process `syz.0.411'. [ 231.785648][ T7278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 232.009064][ T7303] Zero length message leads to an empty skb [ 235.135685][ T7346] netlink: 60 bytes leftover after parsing attributes in process `syz.2.439'. [ 236.766361][ T28] audit: type=1326 audit(1785789875.091:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 236.806383][ T28] audit: type=1326 audit(1785789875.091:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 236.846938][ T28] audit: type=1326 audit(1785789875.121:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 236.876433][ T28] audit: type=1326 audit(1785789875.121:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 236.906620][ T28] audit: type=1326 audit(1785789875.121:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7374 comm="syz.0.446" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 238.047642][ T7340] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 239.084943][ T7387] CacheFiles: No cache directory specified [ 243.206168][ T7424] CacheFiles: No cache directory specified [ 243.350868][ T7414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 243.604670][ T7433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.464'. [ 244.746521][ T7458] CacheFiles: No cache directory specified [ 246.010652][ T7491] fuse: Bad value for 'group_id' [ 247.253962][ T7512] syzkaller0: entered promiscuous mode [ 247.259956][ T7512] syzkaller0: entered allmulticast mode [ 247.273176][ T7512] netlink: 76 bytes leftover after parsing attributes in process `syz.3.493'. [ 247.567837][ T7523] fuse: Bad value for 'group_id' [ 248.276834][ T7464] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 248.742563][ T7543] syzkaller0: entered promiscuous mode [ 248.749110][ T7543] syzkaller0: entered allmulticast mode [ 248.764649][ T7543] netlink: 76 bytes leftover after parsing attributes in process `syz.3.505'. [ 250.091225][ T7565] syzkaller0: entered promiscuous mode [ 250.098937][ T7565] syzkaller0: entered allmulticast mode [ 250.108427][ T7565] netlink: 76 bytes leftover after parsing attributes in process `syz.3.514'. [ 251.919268][ T7590] syzkaller0: entered promiscuous mode [ 251.924956][ T7590] syzkaller0: entered allmulticast mode [ 251.941304][ T7590] netlink: 76 bytes leftover after parsing attributes in process `syz.0.523'. [ 252.817479][ T5812] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 252.909720][ T7552] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 253.002014][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 253.018787][ T5812] usb 1-1: no configurations [ 253.028795][ T5812] usb 1-1: can't read configurations, error -22 [ 253.197430][ T5812] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 253.377493][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 253.383826][ T5812] usb 1-1: no configurations [ 253.389230][ T5812] usb 1-1: can't read configurations, error -22 [ 253.395918][ T5812] usb usb1-port1: attempt power cycle [ 253.809876][ T5812] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 253.849027][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 253.860858][ T5812] usb 1-1: no configurations [ 253.865554][ T5812] usb 1-1: can't read configurations, error -22 [ 254.018867][ T5812] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.083202][ T5812] usb 1-1: Using ep0 maxpacket: 32 [ 254.098072][ T5812] usb 1-1: no configurations [ 254.100970][ T7618] syzkaller0: entered promiscuous mode [ 254.102750][ T5812] usb 1-1: can't read configurations, error -22 [ 254.108513][ T7618] syzkaller0: entered allmulticast mode [ 254.126800][ T7618] netlink: 76 bytes leftover after parsing attributes in process `syz.3.534'. [ 254.152012][ T5812] usb usb1-port1: unable to enumerate USB device [ 254.416638][ T7635] CacheFiles: No cache directory specified [ 256.263761][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.270884][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.654975][ T7656] syzkaller0: entered promiscuous mode [ 256.660937][ T7656] syzkaller0: entered allmulticast mode [ 256.671138][ T7656] netlink: 76 bytes leftover after parsing attributes in process `syz.2.548'. [ 256.963146][ T7663] CacheFiles: No cache directory specified [ 257.091141][ T28] audit: type=1326 audit(1785789895.421:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 257.139136][ T28] audit: type=1326 audit(1785789895.421:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 257.188488][ T28] audit: type=1326 audit(1785789895.421:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 257.250392][ T28] audit: type=1326 audit(1785789895.421:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7664 comm="syz.3.551" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 257.286179][ T7626] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 258.327392][ T27] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 258.517519][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 258.530533][ T27] usb 2-1: no configurations [ 258.535742][ T27] usb 2-1: can't read configurations, error -22 [ 258.698639][ T27] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 258.907776][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 258.920577][ T27] usb 2-1: no configurations [ 258.925657][ T27] usb 2-1: can't read configurations, error -22 [ 258.937709][ T27] usb usb2-port1: attempt power cycle [ 259.171901][ T7684] syzkaller0: entered promiscuous mode [ 259.177671][ T7684] syzkaller0: entered allmulticast mode [ 259.188265][ T7684] netlink: 76 bytes leftover after parsing attributes in process `syz.3.558'. [ 259.357588][ T27] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 259.401533][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 259.415297][ T27] usb 2-1: no configurations [ 259.422689][ T27] usb 2-1: can't read configurations, error -22 [ 259.577594][ T28] audit: type=1326 audit(1785789897.911:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.3.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 259.588410][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 259.627457][ T28] audit: type=1326 audit(1785789897.911:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.3.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 259.667992][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 259.674147][ T27] usb 2-1: no configurations [ 259.687768][ T27] usb 2-1: can't read configurations, error -22 [ 259.690164][ T28] audit: type=1326 audit(1785789897.961:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.3.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 259.695309][ T27] usb usb2-port1: unable to enumerate USB device [ 259.728962][ T28] audit: type=1326 audit(1785789897.961:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.3.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 259.770695][ T28] audit: type=1326 audit(1785789897.961:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7688 comm="syz.3.560" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 260.063236][ T7702] CacheFiles: No cache directory specified [ 260.919530][ T7708] syzkaller0: entered promiscuous mode [ 260.926174][ T7708] syzkaller0: entered allmulticast mode [ 260.938878][ T7708] netlink: 76 bytes leftover after parsing attributes in process `syz.3.567'. [ 261.180557][ T28] audit: type=1326 audit(1785789899.501:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7715 comm="syz.1.570" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c3f9e019 code=0x7ffc0000 [ 261.919832][ T7729] CacheFiles: No cache directory specified [ 262.476949][ T7736] syzkaller0: entered promiscuous mode [ 262.484789][ T7736] syzkaller0: entered allmulticast mode [ 262.495512][ T7736] netlink: 76 bytes leftover after parsing attributes in process `syz.2.577'. [ 262.621231][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 262.621244][ T28] audit: type=1326 audit(1785789900.951:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 262.652818][ T28] audit: type=1326 audit(1785789900.951:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 262.657972][ T7691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 262.696878][ T28] audit: type=1326 audit(1785789900.971:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 262.747500][ T28] audit: type=1326 audit(1785789900.971:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 262.807510][ T5764] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 262.817785][ T28] audit: type=1326 audit(1785789900.971:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7739 comm="syz.2.579" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 263.007386][ T5764] usb 2-1: Using ep0 maxpacket: 32 [ 263.014855][ T5764] usb 2-1: no configurations [ 263.020062][ T5764] usb 2-1: can't read configurations, error -22 [ 263.177620][ T5764] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 263.387440][ T5764] usb 2-1: Using ep0 maxpacket: 32 [ 263.393401][ T5764] usb 2-1: no configurations [ 263.399694][ T5764] usb 2-1: can't read configurations, error -22 [ 263.406489][ T5764] usb usb2-port1: attempt power cycle [ 263.865629][ T5764] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 264.139836][ T7761] syzkaller0: entered promiscuous mode [ 264.145780][ T7761] syzkaller0: entered allmulticast mode [ 264.153756][ T7758] CacheFiles: No cache directory specified [ 264.183190][ T5764] usb 2-1: Using ep0 maxpacket: 32 [ 264.184007][ T7761] netlink: 76 bytes leftover after parsing attributes in process `syz.0.587'. [ 264.199369][ T5764] usb 2-1: no configurations [ 264.211277][ T5764] usb 2-1: can't read configurations, error -22 [ 264.367440][ T5764] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 264.398818][ T5764] usb 2-1: Using ep0 maxpacket: 32 [ 264.407152][ T5764] usb 2-1: no configurations [ 264.412155][ T5764] usb 2-1: can't read configurations, error -22 [ 264.425495][ T5764] usb usb2-port1: unable to enumerate USB device [ 264.594619][ T28] audit: type=1326 audit(1785789902.921:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.0.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 264.685208][ T28] audit: type=1326 audit(1785789902.951:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.0.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 264.719271][ T28] audit: type=1326 audit(1785789902.951:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.0.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 264.750958][ T28] audit: type=1326 audit(1785789902.951:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7765 comm="syz.0.589" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 266.737393][ T7800] CacheFiles: No cache directory specified [ 267.718799][ T7769] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.884693][ T7830] CacheFiles: No cache directory specified [ 273.822749][ T7877] fuse: Unknown parameter 'grou00000000000000000000' [ 273.871254][ T7838] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 274.115637][ T7882] CacheFiles: No cache directory specified [ 278.136995][ T7907] fuse: Unknown parameter 'grou00000000000000000000' [ 278.589908][ T28] audit: type=1326 audit(1785789916.921:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.1.640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c3f9e019 code=0x7ffc0000 [ 278.620190][ T28] audit: type=1326 audit(1785789916.921:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.1.640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f93c3f9e019 code=0x7ffc0000 [ 278.697221][ T28] audit: type=1326 audit(1785789917.021:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.1.640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c3f9e019 code=0x7ffc0000 [ 278.734369][ T28] audit: type=1326 audit(1785789917.021:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7921 comm="syz.1.640" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c3f9e019 code=0x7ffc0000 [ 281.279478][ T7908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 281.913296][ T7944] fuse: Unknown parameter 'grou00000000000000000000' [ 282.455522][ T7942] loop2: detected capacity change from 0 to 131072 [ 282.482769][ T7942] F2FS-fs (loop2): Segment count (31) mismatch with total segments from devices (0) [ 282.492840][ T7942] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 282.504152][ T7942] F2FS-fs (loop2): invalid crc value [ 282.518227][ T7942] F2FS-fs (loop2): Found nat_bits in checkpoint [ 282.586556][ T7942] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 282.594099][ T7942] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 283.242388][ T7942] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 283.265743][ T7942] F2FS-fs (loop2): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 288.183136][ T7987] fuse: Unknown parameter 'group_i00000000000000000000' [ 290.520397][ T7975] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 293.938538][ T8018] fuse: Unknown parameter 'group_i00000000000000000000' [ 294.486974][ T8023] fuse: Bad value for 'fd' [ 296.120703][ T28] audit: type=1326 audit(1785789934.451:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 296.171413][ T28] audit: type=1326 audit(1785789934.451:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 296.215365][ T28] audit: type=1326 audit(1785789934.531:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 296.263741][ T28] audit: type=1326 audit(1785789934.531:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8042 comm="syz.3.675" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 297.377689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 297.844351][ T8050] fuse: Unknown parameter 'group_i00000000000000000000' [ 298.746374][ T8036] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.440420][ T8081] fuse: Unknown parameter 'group_id00000000000000000000' [ 307.641835][ T8088] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 315.936762][ T8145] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 317.476830][ T8182] fuse: Bad value for 'fd' [ 317.711027][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.729832][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.636735][ T28] audit: type=1326 audit(1785789957.961:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c3f9e019 code=0x7ffc0000 [ 319.954603][ T28] audit: type=1326 audit(1785789958.001:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93c3f9e019 code=0x7ffc0000 [ 320.336794][ T28] audit: type=1326 audit(1785789958.001:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8188 comm="syz.1.719" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f93c3f9e019 code=0x7ffc0000 [ 321.653578][ T8218] fuse: Bad value for 'fd' [ 322.147709][ T8216] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 324.436019][ T28] audit: type=1326 audit(1785789962.761:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 324.488336][ T28] audit: type=1326 audit(1785789962.761:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 324.522421][ T28] audit: type=1326 audit(1785789962.761:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 324.560101][ T28] audit: type=1326 audit(1785789962.831:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 324.623650][ T28] audit: type=1326 audit(1785789962.831:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8241 comm="syz.0.734" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 325.564999][ T8254] fuse: Bad value for 'user_id' [ 325.581022][ T8255] fuse: Bad value for 'fd' [ 326.234811][ T28] audit: type=1326 audit(1785789964.561:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 326.265556][ T28] audit: type=1326 audit(1785789964.561:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 326.290953][ T28] audit: type=1326 audit(1785789964.561:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 326.316427][ T28] audit: type=1326 audit(1785789964.631:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 326.347498][ T28] audit: type=1326 audit(1785789964.631:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8272 comm="syz.0.744" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7a2419e019 code=0x7ffc0000 [ 327.365826][ T8237] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 328.626294][ T8285] fuse: Bad value for 'fd' [ 328.852173][ T8294] fuse: Bad value for 'user_id' [ 331.159036][ T8317] fuse: Bad value for 'fd' [ 335.249215][ T8338] fuse: Bad value for 'user_id' [ 336.687018][ T8364] CacheFiles: No cache directory specified [ 337.667126][ T8373] fuse: Bad value for 'fd' [ 339.207405][ T5829] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 339.410345][ T5829] usb 2-1: unable to get BOS descriptor or descriptor too short [ 339.432598][ T5829] usb 2-1: config 5 has an invalid interface number: 181 but max is 0 [ 339.454556][ T5829] usb 2-1: config 5 has no interface number 0 [ 339.473935][ T5829] usb 2-1: config 5 interface 181 altsetting 11 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 339.477885][ T8402] fuse: Bad value for 'fd' [ 339.486892][ T5829] usb 2-1: config 5 interface 181 altsetting 11 has a duplicate endpoint with address 0x8F, skipping [ 339.507032][ T5829] usb 2-1: config 5 interface 181 altsetting 11 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 339.522600][ T5829] usb 2-1: config 5 interface 181 altsetting 11 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 339.536081][ T5829] usb 2-1: config 5 interface 181 altsetting 11 endpoint 0x3 has an invalid bInterval 59, changing to 9 [ 339.548161][ T5829] usb 2-1: config 5 interface 181 has no altsetting 0 [ 339.559900][ T5829] usb 2-1: New USB device found, idVendor=eb1a, idProduct=e361, bcdDevice=56.aa [ 339.570687][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.579144][ T5829] usb 2-1: Product: syz [ 339.584804][ T5829] usb 2-1: Manufacturer: syz [ 339.590009][ T5829] usb 2-1: SerialNumber: syz [ 339.826757][ T5829] dvb-usb: found a 'MSI Digivox Mini SL' in warm state. [ 339.836505][ T5829] dvb-usb: bulk message failed: -22 (3/0) [ 339.863578][ T5829] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 339.875819][ T5829] dvbdev: DVB: registering new adapter (MSI Digivox Mini SL) [ 339.887676][ T5829] usb 2-1: media controller created [ 340.023328][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 340.024296][ T8412] CacheFiles: No cache directory specified [ 340.052525][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 340.083670][ T5829] dvb-usb: bulk message failed: -22 (6/0) [ 340.089883][ T5829] dvb-usb: no frontend was attached by 'MSI Digivox Mini SL' [ 340.130028][ T5829] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 340.155509][ T5829] dvb-usb: schedule remote query interval to 150 msecs. [ 340.175955][ T5829] dvb-usb: MSI Digivox Mini SL successfully initialized and connected. [ 340.216882][ T5829] usb 2-1: USB disconnect, device number 13 [ 341.131925][ T5829] dvb-usb: MSI Digivox Mini SL successfully deinitialized and disconnected. [ 344.363484][ T8478] CacheFiles: No cache directory specified [ 346.017577][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 347.697349][ T5832] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 347.887433][ T5832] usb 4-1: Using ep0 maxpacket: 8 [ 347.912976][ T5832] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 347.959636][ T5832] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 347.992286][ T5832] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.128266][ T5832] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.145486][ T5832] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.173064][ T5832] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.807301][ T5832] usb 4-1: GET_CAPABILITIES returned 0 [ 348.813579][ T5832] usbtmc 4-1:16.0: can't read capabilities [ 349.034431][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 349.074979][ T5829] usb 4-1: USB disconnect, device number 7 [ 351.639427][ T8531] netlink: 48 bytes leftover after parsing attributes in process `syz.1.828'. [ 351.997424][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 353.404308][ T8] usb 4-1: config 0 has no interfaces? [ 353.420636][ T8] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 353.457899][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.481001][ T8] usb 4-1: Product: syz [ 353.485974][ T8] usb 4-1: Manufacturer: syz [ 353.517398][ T8] usb 4-1: SerialNumber: syz [ 353.533595][ T8] usb 4-1: config 0 descriptor?? [ 354.231801][ T970] usb 4-1: USB disconnect, device number 8 [ 359.117842][ T970] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 359.341096][ T970] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 359.351144][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.359716][ T970] usb 4-1: Product: syz [ 359.364696][ T970] usb 4-1: Manufacturer: syz [ 359.369823][ T970] usb 4-1: SerialNumber: syz [ 359.424236][ T970] usb 4-1: config 0 descriptor?? [ 359.471912][ T970] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 359.925345][ T8604] capability: warning: `syz.2.857' uses deprecated v2 capabilities in a way that may be insecure [ 359.959251][ T970] gspca_stk1135: reg_w 0x0 err -71 [ 359.972157][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 359.999166][ T970] gspca_stk1135: Sensor write failed [ 360.013016][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 360.027605][ T970] gspca_stk1135: Sensor write failed [ 360.033581][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 360.058109][ T970] gspca_stk1135: Sensor read failed [ 360.063791][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 360.101179][ T970] gspca_stk1135: Sensor read failed [ 360.106622][ T970] gspca_stk1135: Detected sensor type unknown (0x0) [ 360.124608][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 360.128251][ T8612] fuse: Bad value for 'fd' [ 360.143268][ T970] gspca_stk1135: Sensor read failed [ 360.157348][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 360.174495][ T970] gspca_stk1135: Sensor read failed [ 360.187749][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 360.210803][ T970] gspca_stk1135: Sensor write failed [ 360.227014][ T970] gspca_stk1135: serial bus timeout: status=0x00 [ 360.238017][ T970] gspca_stk1135: Sensor write failed [ 360.243631][ T970] stk1135: probe of 4-1:0.0 failed with error -71 [ 360.272504][ T970] usb 4-1: USB disconnect, device number 9 [ 361.493566][ T8621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.499977][ T8641] fuse: Bad value for 'fd' [ 363.681863][ T8645] xt_hashlimit: size too large, truncated to 1048576 [ 365.487401][ T8] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 365.753234][ T8] usb 1-1: unable to get BOS descriptor or descriptor too short [ 365.783817][ T8] usb 1-1: config 63 has an invalid interface number: 66 but max is 0 [ 365.807291][ T8] usb 1-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 365.903691][ T8] usb 1-1: config 63 has no interface number 0 [ 365.937648][ T8] usb 1-1: config 63 interface 66 has no altsetting 0 [ 365.958008][ T8] usb 1-1: language id specifier not provided by device, defaulting to English [ 366.045630][ T8] usb 1-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 366.163112][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.192430][ T8] usb 1-1: Product: ꢶꋛ蛪艮焴๶ꦰ奟唔㾰쁯 [ 366.207553][ T8] usb 1-1: SerialNumber: syz [ 367.300153][ T8] usb 1-1: Found UVC 0.00 device ꢶꋛ蛪艮焴๶ꦰ奟唔㾰쁯 (174f:8acf) [ 367.327510][ T8] usb 1-1: No valid video chain found. [ 367.340403][ T8] usb 1-1: USB disconnect, device number 10 [ 367.378865][ T28] audit: type=1326 audit(1785790004.709:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.2.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 367.430815][ T28] audit: type=1326 audit(1785790004.739:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.2.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 367.458000][ T28] audit: type=1326 audit(1785790004.739:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.2.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 367.612153][ T28] audit: type=1326 audit(1785790004.909:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.2.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 368.073265][ T28] audit: type=1326 audit(1785790004.909:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8734 comm="syz.2.877" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f367a19e019 code=0x7ffc0000 [ 369.600269][ T8748] file system registered [ 369.958223][ T5832] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 370.157315][ T5832] usb 3-1: Using ep0 maxpacket: 8 [ 370.187435][ T5832] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 370.201804][ T5832] usb 3-1: config 0 has no interface number 0 [ 370.213184][ T5832] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 370.241071][ T5832] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 370.264709][ T5832] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 370.306357][ T5832] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 370.334606][ T5832] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 370.354181][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.371697][ T5832] usb 3-1: Product: syz [ 370.391597][ T5832] usb 3-1: Manufacturer: syz [ 370.402054][ T5832] usb 3-1: SerialNumber: syz [ 370.427618][ T5832] usb 3-1: config 0 descriptor?? [ 370.450008][ T8748] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 370.485155][ T5832] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 370.736811][ T28] audit: type=1326 audit(1785790008.059:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.3.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 370.786305][ T28] audit: type=1326 audit(1785790008.089:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.3.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 370.861411][ T28] audit: type=1326 audit(1785790008.099:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.3.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 370.995613][ T28] audit: type=1326 audit(1785790008.319:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.3.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 371.106637][ T28] audit: type=1326 audit(1785790008.319:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.3.890" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa12af9e019 code=0x7ffc0000 [ 371.183464][ T8752] read descriptors [ 371.204099][ T8752] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 372.315565][ T5809] usb 3-1: USB disconnect, device number 5 [ 372.360535][ T5784] ffs_data_put(): freeing [ 375.585332][ T8810] netlink: 48 bytes leftover after parsing attributes in process `syz.3.903'. [ 376.517994][ T8814] fuse: Bad value for 'group_id' [ 377.295848][ T5781] Bluetooth: hci3: unexpected event for opcode 0x202d [ 379.042703][ T8842] netlink: 48 bytes leftover after parsing attributes in process `syz.3.914'. [ 379.168494][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.175214][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.388641][ T8845] fuse: Bad value for 'group_id' [ 381.623646][ T8851] fuse: Bad value for 'rootmode' [ 384.701466][ T8876] netlink: 48 bytes leftover after parsing attributes in process `syz.3.925'. [ 387.314784][ T8888] netlink: 164 bytes leftover after parsing attributes in process `syz.0.927'. [ 388.441362][ T8901] UBIFS error (pid: 8901): cannot open "./file0", error -22 [ 390.299160][ T8927] CacheFiles: No cache directory specified [ 390.877141][ T8931] UBIFS error (pid: 8931): cannot open "", error -22 [ 395.663845][ T8957] fuse: Unknown parameter 'use00000000000000000000' [ 395.972615][ T5781] Bluetooth: hci3: unexpected event for opcode 0x202d [ 396.878272][ T8965] CacheFiles: No cache directory specified [ 399.244087][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 399.270880][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 399.292749][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 399.304649][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 399.315749][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 401.489382][ T8997] fuse: Unknown parameter 'use00000000000000000000' [ 401.589640][ T8998] rt1719: probe of 0-0049 failed with error -5 [ 401.598156][ T8998] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 401.617985][ T8999] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 401.716710][ T8999] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 401.959677][ T9000] bond2: entered promiscuous mode [ 402.689438][ T9009] netlink: 48 bytes leftover after parsing attributes in process `syz.1.963'. [ 406.288241][ T9037] CacheFiles: No cache directory specified [ 406.542498][ T9039] UBIFS error (pid: 9039): cannot open "./file0", error -22 [ 407.166033][ T9049] netlink: 48 bytes leftover after parsing attributes in process `syz.1.977'. [ 409.613875][ T9066] UBIFS error (pid: 9066): cannot open "./file0", error -22 [ 414.316463][ T9121] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 414.331341][ T9121] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.452998][ T9121] vhci_hcd vhci_hcd.0: Device attached [ 414.579689][ T9132] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1001'. [ 414.663150][ T9128] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(11) [ 414.670441][ T9128] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.708282][ T5809] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 414.843432][ T9128] vhci_hcd vhci_hcd.0: Device attached [ 414.940629][ T9133] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(10) [ 414.948106][ T9133] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 415.273913][ T9133] vhci_hcd vhci_hcd.0: Device attached [ 415.298082][ T9121] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(13) [ 415.304906][ T9121] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 415.349464][ T9121] vhci_hcd vhci_hcd.0: Device attached [ 415.834070][ T9148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1006'. [ 416.429155][ T970] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 417.402519][ T970] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 417.501448][ T970] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 417.527159][ T9137] vhci_hcd: connection closed [ 417.534218][ T9131] vhci_hcd: connection closed [ 417.536570][ T970] usb 4-1: string descriptor 0 read error: -71 [ 417.557478][ T9123] vhci_hcd: connection reset by peer [ 417.567358][ T9135] vhci_hcd: connection closed [ 417.583713][ T8702] vhci_hcd: stop threads [ 417.595948][ T8702] vhci_hcd: release socket [ 417.606034][ T8702] vhci_hcd: disconnect device [ 417.611752][ T8702] vhci_hcd: stop threads [ 417.616216][ T8702] vhci_hcd: release socket [ 417.623159][ T8702] vhci_hcd: disconnect device [ 417.629245][ T8702] vhci_hcd: stop threads [ 417.635521][ T8702] vhci_hcd: release socket [ 417.640899][ T8702] vhci_hcd: disconnect device [ 417.648354][ T8702] vhci_hcd: stop threads [ 417.654000][ T8702] vhci_hcd: release socket [ 417.660912][ T8702] vhci_hcd: disconnect device [ 417.663845][ T970] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 417.751695][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.783686][ T970] usb 4-1: config 0 descriptor?? [ 417.987731][ T970] usb 4-1: can't set config #0, error -71 [ 417.996515][ T970] usb 4-1: USB disconnect, device number 10 [ 419.889575][ T9196] process 'syz.2.1023' launched './cgroup.cpu/cgroup.procs' with NULL argv: empty string added [ 420.026484][ T5809] vhci_hcd: vhci_device speed not set [ 420.790317][ T9199] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1023'. [ 421.248117][ T8] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 421.451253][ T8] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.464467][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 421.482435][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 421.720129][ T8] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 421.729766][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 421.741418][ T8] usb 3-1: Product: syz [ 421.746388][ T8] usb 3-1: Manufacturer: syz [ 421.752144][ T8] usb 3-1: SerialNumber: syz [ 421.807424][ T8] usb 3-1: config 0 descriptor?? [ 421.887712][ T8] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 421.897012][ T8] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 421.904717][ T8] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 422.310876][ T5829] usb 3-1: USB disconnect, device number 6 [ 422.989174][ T9214] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 423.298168][ T970] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 423.619522][ T970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 423.640334][ T970] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.675604][ T970] usb 2-1: string descriptor 0 read error: -22 [ 423.692589][ T970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 423.702352][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.721784][ T970] usb 2-1: bad CDC descriptors [ 425.231483][ T9229] binder: BINDER_SET_CONTEXT_MGR already set [ 425.246211][ T9229] binder: 9228:9229 ioctl 4018620d 200000004a80 returned -16 [ 425.477403][ T970] usb 2-1: USB disconnect, device number 14 [ 427.344154][ T9244] CacheFiles: No cache directory specified [ 427.932473][ T9255] netlink: 'syz.3.1042': attribute type 2 has an invalid length. [ 428.696230][ T9260] binder: BINDER_SET_CONTEXT_MGR already set [ 428.723403][ T9260] binder: 9259:9260 ioctl 4018620d 200000004a80 returned -16 [ 431.947145][ T9277] CacheFiles: No cache directory specified [ 432.379346][ T9283] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 432.388365][ T9285] fuse: Unknown parameter 'group_id00000000000000000000' [ 432.426053][ T9283] batman_adv: batadv0: Adding interface: gretap1 [ 432.462832][ T9283] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 432.497814][ T9283] batman_adv: batadv0: Interface activated: gretap1 [ 435.626812][ T9313] CacheFiles: No cache directory specified [ 436.890505][ T9321] fuse: Unknown parameter 'group_id00000000000000000000' [ 437.647108][ T970] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 437.736742][ T9331] overlayfs: missing 'lowerdir' [ 437.822547][ T9330] ubi0: attaching mtd0 [ 437.829101][ T9330] ubi0: scanning is finished [ 437.834079][ T9330] ubi0: empty MTD device detected [ 437.880412][ T9330] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 437.889792][ T9330] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 437.898231][ T9330] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 437.906530][ T9330] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 437.914696][ T9330] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 437.921880][ T9330] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 437.930357][ T9330] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4078948111 [ 437.940755][ T9330] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 437.976044][ T9333] ubi0: background thread "ubi_bgt0d" started, PID 9333 [ 438.137295][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 438.150456][ T970] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 438.168003][ T970] usb 2-1: config 0 has no interface number 0 [ 438.194685][ T970] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 438.224203][ T970] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 438.249975][ T970] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 438.874466][ T970] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.897867][ T970] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 438.907608][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.921943][ T970] usb 2-1: Product: syz [ 438.926289][ T970] usb 2-1: Manufacturer: syz [ 438.932647][ T970] usb 2-1: SerialNumber: syz [ 438.952633][ T970] usb 2-1: config 0 descriptor?? [ 438.974158][ T9327] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 438.989720][ T970] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 439.626749][ T9343] read descriptors [ 439.654115][ T9343] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 440.278143][ T9348] fuse: Unknown parameter 'group_id00000000000000000000' [ 440.292915][ T9349] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1071'. [ 440.420978][ T9354] CacheFiles: No cache directory specified [ 440.593109][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.064981][ T9] usb 2-1: USB disconnect, device number 15 [ 441.184349][ T5779] ffs_data_put(): freeing [ 442.468860][ T9373] pimreg: entered allmulticast mode [ 442.512225][ T9368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.905241][ T9383] tipc: Started in network mode [ 443.926376][ T9383] tipc: Node identity 46b5329c7b7c, cluster identity 4711 [ 443.952560][ T9383] tipc: Enabled bearer , priority 0 [ 444.098165][ T9385] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1080'. [ 444.772025][ T9386] syzkaller0: entered promiscuous mode [ 444.777914][ T9386] syzkaller0: entered allmulticast mode [ 444.841720][ T9383] tipc: Resetting bearer [ 444.878028][ T9382] tipc: Resetting bearer [ 444.959295][ T9382] tipc: Disabling bearer [ 445.034806][ T9393] fuse: Bad value for 'user_id' [ 445.494430][ T9394] CacheFiles: No cache directory specified [ 446.237403][ T8] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 446.427555][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 446.445449][ T8] usb 3-1: config 0 has an invalid interface number: 186 but max is 0 [ 446.455217][ T8] usb 3-1: config 0 has no interface number 0 [ 446.464259][ T8] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 446.481590][ T8] usb 3-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 446.492492][ T8] usb 3-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 446.507752][ T8] usb 3-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 446.531029][ T8] usb 3-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 446.680923][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.713446][ T8] usb 3-1: Product: syz [ 446.722457][ T8] usb 3-1: Manufacturer: syz [ 446.738083][ T8] usb 3-1: SerialNumber: syz [ 446.767751][ T8] usb 3-1: config 0 descriptor?? [ 446.773957][ T9396] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 446.805480][ T8] iowarrior 3-1:0.186: no interrupt-in endpoint found [ 448.053718][ T9401] read descriptors [ 448.089745][ T9401] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 448.736185][ T9414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.194330][ T970] usb 3-1: USB disconnect, device number 7 [ 450.382175][ T5784] ffs_data_put(): freeing [ 451.031513][ T9424] fuse: Bad value for 'user_id' [ 451.103414][ T9427] ubi: mtd0 is already attached to ubi0 [ 452.243501][ T9441] binder: BINDER_SET_CONTEXT_MGR already set [ 452.249710][ T9441] binder: 9439:9441 ioctl 4018620d 200000004a80 returned -16 [ 453.257960][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 453.461430][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 453.481653][ T9] usb 2-1: config 0 has an invalid interface number: 186 but max is 0 [ 453.507547][ T9] usb 2-1: config 0 has no interface number 0 [ 453.527729][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 453.543104][ T9] usb 2-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 453.554316][ T9] usb 2-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 453.570420][ T9] usb 2-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 453.623914][ T9] usb 2-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 453.645929][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.656336][ T9] usb 2-1: Product: syz [ 453.662676][ T9] usb 2-1: Manufacturer: syz [ 453.668452][ T9] usb 2-1: SerialNumber: syz [ 453.679977][ T9] usb 2-1: config 0 descriptor?? [ 453.687614][ T9451] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 453.699944][ T9] iowarrior 2-1:0.186: no interrupt-in endpoint found [ 455.918818][ T9451] read descriptors [ 455.922993][ T9451] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 456.556637][ T9459] fuse: Bad value for 'user_id' [ 457.179856][ T9462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.919493][ T5812] usb 2-1: USB disconnect, device number 16 [ 458.999235][ T5779] ffs_data_put(): freeing [ 459.092009][ T9474] binder: BINDER_SET_CONTEXT_MGR already set [ 459.138749][ T9474] binder: 9473:9474 ioctl 4018620d 200000004a80 returned -16 [ 464.838864][ T9503] fuse: Bad value for 'fd' [ 465.908503][ T9515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.676090][ T9538] overlayfs: missing 'lowerdir' [ 469.947169][ T9541] fuse: Bad value for 'fd' [ 473.372445][ T9562] fuse: Unknown parameter 'group_id00000000000000000000' [ 473.426826][ T9557] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1129'. [ 474.335105][ T9573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 475.154484][ T9577] overlayfs: missing 'lowerdir' [ 475.894910][ T9580] fuse: Bad value for 'fd' [ 476.593005][ T9587] fuse: Unknown parameter 'group_id00000000000000000000' [ 477.437460][ T9593] fuse: Unknown parameter 'fd0x0000000000000004' [ 477.709517][ T9597] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1141'. [ 480.554392][ T5832] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 481.549823][ T5832] usb 2-1: Using ep0 maxpacket: 8 [ 481.620677][ T5832] usb 2-1: device descriptor read/all, error -71 [ 481.773696][ T5779] ffs_data_put(): freeing [ 481.874699][ T9615] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 483.707611][ T9621] fuse: Bad value for 'fd' [ 486.263072][ T9646] binder: 9645:9646 ioctl c0306201 200000000680 returned -14 [ 486.637525][ T5810] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 487.336133][ T5810] usb 4-1: Using ep0 maxpacket: 8 [ 489.373179][ T5810] usb 4-1: device descriptor read/all, error -71 [ 489.420542][ T5777] ffs_data_put(): freeing [ 489.551100][ T9665] fuse: Unknown parameter 'fd0x0000000000000004' [ 489.767290][ T27] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 489.865143][ T9670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 491.363738][ T9677] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1163'. [ 492.018669][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 492.057877][ T27] usb 3-1: New USB device found, idVendor=14f7, idProduct=0500, bcdDevice=44.85 [ 492.067160][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.076665][ T27] usb 3-1: Product: syz [ 492.088377][ T27] usb 3-1: Manufacturer: syz [ 492.093906][ T27] usb 3-1: SerialNumber: syz [ 492.114380][ T27] usb 3-1: config 0 descriptor?? [ 492.129813][ T27] usb 3-1: selecting invalid altsetting 1 [ 492.135602][ T27] technisat-usb2: could not set alternate setting to 0 [ 492.153521][ T9683] binder: 9682:9683 ioctl c0306201 200000000680 returned -14 [ 492.199841][ T9685] fuse: Bad value for 'fd' [ 492.335546][ T27] technisat-usb2: firmware version: 0.0 [ 492.346093][ T27] dvb-usb: found a 'Technisat SkyStar USB HD (DVB-S/S2)' in warm state. [ 493.120504][ T970] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 493.494536][ T9698] technisat-usb2: i2c-error: out failed 00 = -22 [ 494.466633][ T27] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 495.217877][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 495.239020][ T970] usb 1-1: config 0 has an invalid interface number: 186 but max is 0 [ 495.248219][ T27] dvbdev: DVB: registering new adapter (Technisat SkyStar USB HD (DVB-S/S2)) [ 495.260037][ T970] usb 1-1: config 0 has no interface number 0 [ 495.268359][ T27] usb 3-1: media controller created [ 495.273681][ T27] technisat-usb2: i2c-error: out failed 53 = -22 [ 495.286327][ T970] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 495.298313][ T27] dvb-usb: MAC address reading failed. [ 495.303977][ T970] usb 1-1: config 0 interface 186 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 495.327546][ T970] usb 1-1: config 0 interface 186 altsetting 0 has an invalid endpoint with address 0x9A, skipping [ 495.344892][ T27] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 495.353504][ T970] usb 1-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.378081][ T970] usb 1-1: string descriptor 0 read error: -71 [ 495.384517][ T970] usb 1-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 495.395673][ T5774] ffs_data_put(): freeing [ 495.398540][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 495.410973][ T970] usb 1-1: config 0 descriptor?? [ 495.417539][ T970] usb 1-1: can't set config #0, error -71 [ 495.433822][ T970] usb 1-1: USB disconnect, device number 11 [ 496.576098][ T27] DVB: Unable to find symbol stv090x_attach() [ 496.768098][ T27] dvb-usb: no frontend was attached by 'Technisat SkyStar USB HD (DVB-S/S2)' [ 498.076473][ T27] rc_core: IR keymap rc-technisat-usb2 not found [ 498.107341][ T27] Registered IR keymap rc-empty [ 498.114498][ T27] rc rc0: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 498.155253][ T27] input: Technisat SkyStar USB HD (DVB-S/S2) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input6 [ 498.396808][ T27] dvb-usb: schedule remote query interval to 100 msecs. [ 498.405423][ T27] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully initialized and connected. [ 499.493250][ T5832] dvb-usb: error -71 while querying for an remote control event. [ 499.515930][ T27] usb 3-1: USB disconnect, device number 8 [ 499.686900][ T9732] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 499.773068][ T27] dvb-usb: Technisat SkyStar USB HD (DVB-S/S2) successfully deinitialized and disconnected. [ 499.797372][ T970] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 500.022322][ T970] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 500.054154][ T970] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.095611][ T970] usb 1-1: string descriptor 0 read error: -22 [ 500.117995][ T970] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 500.152156][ T970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.177029][ T5781] Bluetooth: hci2: unexpected event for opcode 0x202d [ 500.201275][ T970] usb 1-1: bad CDC descriptors [ 501.442285][ T9754] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1185'. [ 502.055082][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.086517][ T970] usb 1-1: USB disconnect, device number 12 [ 502.411419][ T9758] overlayfs: missing 'lowerdir' [ 502.457639][ T9758] ubi: mtd0 is already attached to ubi0 [ 506.577318][ T970] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 506.801373][ T970] usb 1-1: Using ep0 maxpacket: 32 [ 506.809304][ T970] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 506.820317][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.844753][ T970] usb 1-1: config 0 descriptor?? [ 506.875540][ T970] as10x_usb: device has been detected [ 507.133040][ T970] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 508.279543][ T9798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 508.304815][ T970] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 508.558339][ T5832] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 508.610997][ T970] as10x_usb: error during firmware upload part1 [ 508.628014][ T970] Registered device nBox DVB-T Dongle [ 508.650697][ T970] usb 1-1: USB disconnect, device number 13 [ 508.762923][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 508.808171][ T5832] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.871224][ T970] Unregistered device nBox DVB-T Dongle [ 508.882569][ T970] as10x_usb: device has been disconnected [ 508.899420][ T5832] usb 4-1: string descriptor 0 read error: -22 [ 508.909875][ T5832] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 508.927616][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.961097][ T5832] usb 4-1: bad CDC descriptors [ 510.647355][ T970] usb 4-1: USB disconnect, device number 13 [ 511.593569][ T9811] binder: 9810:9811 ioctl c0306201 0 returned -14 [ 516.059204][ T9847] binder: 9846:9847 ioctl c0306201 0 returned -14 [ 517.680415][ T9864] binder: BINDER_SET_CONTEXT_MGR already set [ 517.686805][ T9864] binder: 9862:9864 ioctl 4018620d 200000004a80 returned -16 [ 519.673630][ T9884] overlayfs: missing 'lowerdir' [ 519.741335][ T9882] ubi: mtd0 is already attached to ubi0 [ 520.144824][ T5832] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 520.966616][ T5832] usb 4-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 521.042655][ T5832] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 521.060427][ T9897] binder: BINDER_SET_CONTEXT_MGR already set [ 521.061999][ T5832] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 521.066691][ T9897] binder: 9896:9897 ioctl 4018620d 200000004a80 returned -16 [ 521.112599][ T5832] usb 4-1: Manufacturer: syz [ 521.142588][ T5832] usb 4-1: SerialNumber: syz [ 522.501255][ T9907] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 522.747628][ T5810] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 522.965087][ T5810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.984955][ T5810] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 523.014104][ T5832] usbhid 4-1:36.0: couldn't find an input interrupt endpoint [ 523.049503][ T5810] usb 3-1: string descriptor 0 read error: -22 [ 523.067927][ T5832] usb 4-1: USB disconnect, device number 14 [ 523.094834][ T5810] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 523.104132][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.121436][ T5810] usb 3-1: bad CDC descriptors [ 524.100714][ T9921] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1233'. [ 524.898069][ T9909] usb 3-1: USB disconnect, device number 9 [ 524.904764][ T5810] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 525.191224][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.363118][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 525.520884][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 525.765767][ T5810] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 525.912768][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 526.042292][ T5810] usb 4-1: Product: syz [ 526.101068][ T5810] usb 4-1: Manufacturer: syz [ 526.173556][ T5810] usb 4-1: SerialNumber: syz [ 526.292856][ T5810] usb 4-1: config 0 descriptor?? [ 526.361271][ T9927] binder: BINDER_SET_CONTEXT_MGR already set [ 526.367637][ T9927] binder: 9926:9927 ioctl 4018620d 200000000100 returned -16 [ 526.409638][ T9927] binder: 9926:9927 ioctl c0306201 0 returned -14 [ 526.624858][ T9927] binder: BINDER_SET_CONTEXT_MGR already set [ 526.703387][ T9927] binder: 9926:9927 ioctl 4018620d 200000004a80 returned -16 [ 526.784412][ T5810] usb 4-1: can't set config #0, error -71 [ 527.146512][ T5810] usb 4-1: USB disconnect, device number 15 [ 528.967721][ T9953] overlayfs: missing 'lowerdir' [ 529.368529][ T9956] ubi: mtd0 is already attached to ubi0 [ 533.069254][ T9969] binder: 9968:9969 ioctl c0306201 0 returned -14 [ 534.174686][ T9982] netlink: 'syz.2.1252': attribute type 2 has an invalid length. [ 535.956583][T10007] binder: 10004:10007 ioctl c0306201 0 returned -14 [ 537.394892][T10000] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1257'. [ 538.015542][T10028] overlayfs: missing 'lowerdir' [ 538.073281][T10028] ubi: mtd0 is already attached to ubi0 [ 544.143657][T10083] fuse: Bad value for 'fd' [ 544.285986][T10086] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.601842][ T5810] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 544.947418][ T5810] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 544.967933][ T5810] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 545.016255][ T5810] usb 3-1: string descriptor 0 read error: -22 [ 545.031340][ T5810] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.046119][ T5810] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.066497][ T5810] usb 3-1: bad CDC descriptors [ 546.522010][T10107] kernel profiling enabled (shift: 9) [ 547.027284][ T23] usb 3-1: USB disconnect, device number 10 [ 548.469895][T10129] overlayfs: missing 'lowerdir' [ 548.486166][T10129] ubi: mtd0 is already attached to ubi0 [ 548.893709][ T5810] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 548.952859][T10142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 549.107262][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 549.119085][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 549.135161][ T5810] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 549.158852][ T5810] usb 4-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 549.180656][ T5810] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 549.215497][ T5810] usb 4-1: config 0 interface 0 has no altsetting 0 [ 549.233860][ T5810] usb 4-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 549.247633][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 549.267372][ T23] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 549.276132][ T5810] usb 4-1: config 0 descriptor?? [ 549.469928][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 549.485657][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 549.510026][ T23] usb 2-1: string descriptor 0 read error: -22 [ 549.516602][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 549.526930][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 549.544202][ T23] usb 2-1: bad CDC descriptors [ 549.751175][ T5810] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 549.810205][ T5810] hid-thrustmaster 0003:044F:B65D.0002: unknown main item tag 0x0 [ 549.878636][ T5810] hid-thrustmaster 0003:044F:B65D.0002: item fetching failed at offset 2/5 [ 549.944107][ T5810] hid-thrustmaster 0003:044F:B65D.0002: parse failed with error -22 [ 550.011333][ T5810] hid-thrustmaster: probe of 0003:044F:B65D.0002 failed with error -22 [ 550.113593][ T5810] usb 4-1: USB disconnect, device number 16 [ 551.944393][ T5811] usb 2-1: USB disconnect, device number 19 [ 552.961171][T10175] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1310'. [ 555.797296][ T23] usb 4-1: new low-speed USB device number 17 using dummy_hcd [ 556.682142][T10196] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 557.136105][ T23] usb 4-1: device not accepting address 17, error -71 [ 557.164363][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 557.164376][ T28] audit: type=1326 audit(1785790194.489:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10199 comm="syz.3.1321" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa12af9e019 code=0x0 [ 558.009184][ T5810] usb 2-1: new low-speed USB device number 20 using dummy_hcd [ 558.279546][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 558.289957][ T5810] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 558.326677][ T5810] usb 2-1: string descriptor 0 read error: -22 [ 558.337011][ T5810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 558.371406][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.408386][ T5810] usb 2-1: bad CDC descriptors [ 558.647400][ T9305] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 558.838076][ T9305] usb 3-1: Using ep0 maxpacket: 32 [ 558.850746][ T9305] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 558.865041][ T9305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.893998][ T9305] usb 3-1: config 0 descriptor?? [ 558.922737][ T9305] as10x_usb: device has been detected [ 558.942501][ T9305] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 559.761871][ T9305] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 559.847370][ T9305] as10x_usb: error during firmware upload part1 [ 559.877576][ T9305] Registered device nBox DVB-T Dongle [ 559.905005][ T9305] usb 3-1: USB disconnect, device number 11 [ 559.981027][ T5832] usb 2-1: USB disconnect, device number 20 [ 560.042449][ T9305] Unregistered device nBox DVB-T Dongle [ 560.058481][ T9305] as10x_usb: device has been disconnected [ 562.237930][T10255] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1335'. [ 562.292221][ T5832] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 562.697249][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 562.707738][ T5832] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 562.719923][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 562.731113][ T5832] usb 3-1: Product: syz [ 562.735863][ T5832] usb 3-1: Manufacturer: syz [ 562.742984][ T5832] usb 3-1: SerialNumber: syz [ 562.801825][ T5832] usb 3-1: config 0 descriptor?? [ 563.472063][ T23] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 563.765538][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.853037][T10249] block device autoloading is deprecated and will be removed. [ 563.915684][ T5832] peak_usb 3-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 563.940051][ T5832] peak_usb 3-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 563.958817][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 563.968491][ T23] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 564.000303][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.043031][ T23] usb 2-1: config 0 descriptor?? [ 564.066041][ T23] as10x_usb: device has been detected [ 564.076735][ T23] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 564.085318][ T5832] peak_usb: probe of 3-1:0.0 failed with error -71 [ 564.118531][ T5832] usb 3-1: USB disconnect, device number 12 [ 564.160506][ T23] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 564.196694][ T23] as10x_usb: error during firmware upload part1 [ 564.226577][ T23] Registered device nBox DVB-T Dongle [ 564.272767][ T23] usb 2-1: USB disconnect, device number 21 [ 564.315782][ T23] Unregistered device nBox DVB-T Dongle [ 564.329845][ T23] as10x_usb: device has been disconnected [ 566.825443][T10301] overlayfs: missing 'lowerdir' [ 566.980618][T10300] ubi: mtd0 is already attached to ubi0 [ 567.967361][T10327] netlink: 'syz.3.1353': attribute type 2 has an invalid length. [ 568.587671][T10336] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1355'. [ 570.905268][T10343] overlayfs: missing 'lowerdir' [ 570.953043][T10343] ubi: mtd0 is already attached to ubi0 [ 577.577719][T10408] fuse: Unknown parameter '0x0000000000000003' [ 584.661064][T10516] fuse: Bad value for 'fd' [ 584.748942][T10518] warning: `syz.2.1412' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 585.514336][T10529] vxcan0: tx address claim with different name [ 586.075112][T10531] overlayfs: missing 'lowerdir' [ 586.113882][T10531] ubi: mtd0 is already attached to ubi0 [ 587.808756][T10553] fuse: Bad value for 'fd' [ 590.161307][T10581] CacheFiles: No cache directory specified [ 591.480894][T10598] fuse: Unknown parameter '0x0000000000000003' [ 592.645634][T10614] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1433'. [ 594.135222][T10622] CacheFiles: No cache directory specified [ 595.669923][T10644] fuse: Unknown parameter '0x0000000000000003' [ 595.862898][T10652] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1442'. [ 598.461937][T10665] CacheFiles: No cache directory specified [ 599.287529][T10670] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1447'. [ 599.750402][T10680] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 600.040301][ T5811] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 600.249630][ T5811] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 600.282679][ T5811] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 600.331366][ T5811] usb 3-1: string descriptor 0 read error: -22 [ 600.549286][ T5811] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 600.652429][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 600.856735][ T5811] usb 3-1: bad CDC descriptors [ 601.325462][T10708] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1454'. [ 602.327081][T10719] CacheFiles: No cache directory specified [ 603.067432][ T5810] usb 3-1: USB disconnect, device number 13 [ 603.776312][T10726] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1459'. [ 605.242357][T10757] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1465'. [ 607.276316][T10770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 607.607583][ T175] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 607.839364][ T175] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.036407][T10781] CacheFiles: No cache directory specified [ 609.253437][ T175] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 609.310514][ T175] usb 1-1: string descriptor 0 read error: -22 [ 609.329474][ T175] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 609.354498][ T175] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.397340][ T175] usb 1-1: bad CDC descriptors [ 610.717502][ T5810] usb 1-1: USB disconnect, device number 14 [ 613.798201][T10815] CacheFiles: No cache directory specified [ 613.840730][ T28] audit: type=1326 audit(1785790251.159:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10819 comm="syz.1.1482" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f93c3f9e019 code=0x0 [ 615.513275][T10834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 615.807308][ T5832] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 615.999653][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 616.013747][ T5832] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.791515][ T5832] usb 1-1: string descriptor 0 read error: -22 [ 616.817314][ T5832] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 616.856766][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.885650][ T5832] usb 1-1: bad CDC descriptors [ 617.114479][ T5832] usb 1-1: USB disconnect, device number 15 [ 618.426875][T10850] CacheFiles: No cache directory specified [ 618.809998][T10855] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1492'. [ 618.962040][T10858] binder: BINDER_SET_CONTEXT_MGR already set [ 619.057464][T10858] binder: 10857:10858 ioctl 4018620d 200000000100 returned -16 [ 619.136366][T10858] binder: BINDER_SET_CONTEXT_MGR already set [ 619.148643][ T28] audit: type=1326 audit(1785790256.479:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10859 comm="syz.0.1496" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7a2419e019 code=0x0 [ 619.172933][ C1] vkms_vblank_simulate: vblank timer overrun [ 619.177413][T10858] binder: 10857:10858 ioctl 4018620d 200000004a80 returned -16 [ 620.782569][T10879] CacheFiles: No cache directory specified [ 622.073835][T10885] binder: BINDER_SET_CONTEXT_MGR already set [ 622.103698][T10885] binder: 10884:10885 ioctl 4018620d 200000000100 returned -16 [ 622.139758][T10885] binder: BINDER_SET_CONTEXT_MGR already set [ 622.147051][T10885] binder: 10884:10885 ioctl 4018620d 200000004a80 returned -16 [ 622.245999][ T28] audit: type=1326 audit(1785790259.569:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10892 comm="syz.3.1507" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa12af9e019 code=0x0 [ 624.348419][T10909] CacheFiles: No cache directory specified [ 624.968073][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.359596][T10917] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1514'. [ 626.154414][T10920] fuse: Unknown parameter 'fd0x0000000000000003' [ 626.379234][ T28] audit: type=1326 audit(1785790263.699:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10928 comm="syz.3.1520" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa12af9e019 code=0x0 [ 629.329779][T10939] CacheFiles: No cache directory specified [ 629.694322][T10945] binder: BINDER_SET_CONTEXT_MGR already set [ 629.719910][T10945] binder: 10944:10945 ioctl 4018620d 200000000100 returned -16 [ 629.739265][T10945] binder: BINDER_SET_CONTEXT_MGR already set [ 629.746381][T10945] binder: 10944:10945 ioctl 4018620d 200000004a80 returned -16 [ 629.765882][T10945] binder: 10944:10945 ioctl c0306201 0 returned -14 [ 633.443613][ T28] audit: type=1326 audit(1785790270.769:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10983 comm="syz.2.1532" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f367a19e019 code=0x0 [ 633.473737][T10976] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd3": -EINTR [ 633.663176][T10994] CacheFiles: No cache directory specified [ 638.452239][T11028] CacheFiles: No cache directory specified [ 639.733023][T11033] vxcan0: tx address claim with different name [ 641.335819][T11045] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1549'. [ 641.712637][T11051] overlayfs: missing 'lowerdir' [ 641.781504][T11048] ubi: mtd0 is already attached to ubi0 [ 642.268904][T11060] CacheFiles: No cache directory specified [ 649.913055][T11106] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 650.391024][ T5810] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 650.632192][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 650.735269][ T5810] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.099083][ T5810] usb 1-1: string descriptor 0 read error: -22 [ 651.105947][ T5810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 651.117631][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.136860][ T5810] usb 1-1: bad CDC descriptors [ 652.333572][ T5810] usb 1-1: USB disconnect, device number 16 [ 653.665913][T11144] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1579'. [ 658.157623][T11160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.447245][ T5810] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 658.783749][ T5811] usb 2-1: new full-speed USB device number 22 using dummy_hcd [ 659.132035][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 659.270059][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 659.410369][ T5811] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 659.543321][ T5811] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 659.618758][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 659.693163][ T5811] usb 2-1: Product: syz [ 659.735254][ T5811] usb 2-1: Manufacturer: syz [ 659.778904][ T5811] usb 2-1: SerialNumber: syz [ 659.916132][ T5811] usb 2-1: config 0 descriptor?? [ 660.584800][ T5811] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 660.773688][ T5811] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 660.932275][ T5811] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 661.825240][ T5811] usb 2-1: USB disconnect, device number 22 [ 663.774725][T11195] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/nbd2": -EINTR [ 664.734657][T11213] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 665.177792][ T5811] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 665.223037][ T5810] usb 2-1: new low-speed USB device number 23 using dummy_hcd [ 665.440614][ T5811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.525492][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 665.545141][ T5811] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 665.566704][ T5811] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 665.656802][ T5811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 665.742440][ T5811] usb 1-1: Product: syz [ 665.785818][ T5811] usb 1-1: Manufacturer: syz [ 665.829851][ T5811] usb 1-1: SerialNumber: syz [ 665.869556][ T5811] usb 1-1: config 0 descriptor?? [ 665.904222][ T5811] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 665.913110][ T5811] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 665.922888][ T5811] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 666.051091][T11223] syz.2.1601: attempt to access beyond end of device [ 666.051091][T11223] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 666.406915][ T5810] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 666.437452][ T5810] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 666.465367][ T5810] usb 2-1: string descriptor 0 read error: -22 [ 666.479475][ T5810] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 666.496122][ T5810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.551581][ T5810] usb 2-1: bad CDC descriptors [ 666.698121][ T5811] usb 1-1: USB disconnect, device number 18 [ 666.749988][ T5832] usb 2-1: USB disconnect, device number 23 [ 666.813986][T11231] vxcan0: tx address claim with different name [ 668.927570][T11251] syz.3.1607: attempt to access beyond end of device [ 668.927570][T11251] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 669.046460][T11261] fuse: Bad value for 'fd' [ 670.056294][T11274] vxcan0: tx address claim with different name [ 671.478381][ T5811] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 671.795902][ T5811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 673.160485][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 673.173711][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 673.251569][ T5811] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 673.444414][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 673.453687][ T5811] usb 4-1: Product: syz [ 673.458625][ T5811] usb 4-1: Manufacturer: syz [ 673.467189][ T5811] usb 4-1: SerialNumber: syz [ 673.476820][ T5811] usb 4-1: config 0 descriptor?? [ 673.489335][ T5811] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 673.497648][ T5811] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 673.505531][ T5811] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 673.973262][ T5811] usb 4-1: USB disconnect, device number 19 [ 674.584694][T11305] Mass Storage Function, version: 2009/09/11 [ 674.592015][T11305] LUN: removable file: (no medium) [ 674.618097][T11305] LUN: removable file: (no medium) [ 675.835974][T11314] vxcan0: tx address claim with different name [ 679.791277][T11360] vxcan0: tx address claim with different name [ 681.304763][T11381] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 681.546198][T11389] vxcan0: tx address claim with different name [ 681.587332][ T5832] usb 1-1: new low-speed USB device number 19 using dummy_hcd [ 681.883129][ T5832] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 682.037452][ T970] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 682.067549][ T5832] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 682.386053][ T970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 682.405863][ T5832] usb 1-1: string descriptor 0 read error: -22 [ 682.499324][ T5832] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 682.543809][ T970] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 682.629165][ T5832] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.713356][ T970] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 683.028511][ T970] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 683.083856][ T5832] usb 1-1: bad CDC descriptors [ 683.203658][ T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 683.351415][ T970] usb 3-1: Product: syz [ 683.415918][ T970] usb 3-1: Manufacturer: syz [ 683.499605][ T970] usb 3-1: SerialNumber: syz [ 683.768687][ T970] usb 3-1: config 0 descriptor?? [ 684.068983][ T970] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 684.164949][ T970] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 684.269188][ T970] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 685.228584][ T970] usb 3-1: USB disconnect, device number 14 [ 685.652554][ T970] usb 1-1: USB disconnect, device number 19 [ 686.344103][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 689.410968][T11445] syz.2.1662: attempt to access beyond end of device [ 689.410968][T11445] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 689.795284][T11459] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 690.127698][ T970] usb 2-1: new low-speed USB device number 24 using dummy_hcd [ 690.527265][ T970] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 690.675437][ T970] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 691.656055][ T970] usb 2-1: string descriptor 0 read error: -22 [ 691.678590][ T970] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 691.707277][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.734744][ T970] usb 2-1: bad CDC descriptors [ 693.968093][ T9] usb 2-1: USB disconnect, device number 24 [ 694.881462][T11495] binder: 11494:11495 ioctl c0306201 0 returned -14 [ 696.778613][T11527] overlayfs: missing 'lowerdir' [ 696.845904][T11526] ubi: mtd0 is already attached to ubi0 [ 697.065984][T11532] binder: 11531:11532 ioctl c0306201 0 returned -14 [ 697.839636][T11539] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 698.168729][ T5810] usb 1-1: new low-speed USB device number 20 using dummy_hcd [ 698.370644][ T5810] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 698.387490][ T5810] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 698.405554][ T5810] usb 1-1: string descriptor 0 read error: -22 [ 698.412313][ T5810] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 698.421998][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 698.439030][ T5810] usb 1-1: bad CDC descriptors [ 700.623992][T11567] binder: 11566:11567 ioctl c0306201 0 returned -14 [ 700.716927][ T23] usb 1-1: USB disconnect, device number 20 [ 701.027799][T11570] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1696'. [ 703.081137][T11598] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1706'. [ 705.587560][T11626] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1715'. [ 711.183085][T11668] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1725'. [ 715.480523][T11701] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1737'. [ 720.438655][T11739] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1749'. [ 724.952823][T11771] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1760'. [ 726.436102][ T28] audit: type=1800 audit(1785790363.759:104): pid=11783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1758" name="bus" dev="ramfs" ino=25433 res=0 errno=0 [ 729.138127][T11805] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1770'. [ 729.867895][T11813] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 730.080424][ T5832] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 730.381371][ T5832] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 730.402041][ T5832] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 730.430011][ T5832] usb 4-1: string descriptor 0 read error: -22 [ 730.436997][ T5832] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 730.468361][ T5832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.529528][ T5832] usb 4-1: bad CDC descriptors [ 731.604164][ T28] audit: type=1800 audit(1785790368.929:105): pid=11823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1773" name="bus" dev="ramfs" ino=25503 res=0 errno=0 [ 732.794216][ T5832] usb 4-1: USB disconnect, device number 20 [ 736.817277][ T23] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 737.827218][ T23] usb 4-1: device descriptor read/64, error -71 [ 738.107318][ T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 738.267149][ T23] usb 4-1: device descriptor read/64, error -71 [ 738.390674][ T23] usb usb4-port1: attempt power cycle [ 738.807210][ T23] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 738.931250][ T23] usb 4-1: device descriptor read/8, error -71 [ 739.217253][ T23] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 739.249987][ T23] usb 4-1: device descriptor read/8, error -71 [ 739.369337][ T23] usb usb4-port1: unable to enumerate USB device [ 742.577249][ T28] audit: type=1800 audit(1785790379.879:106): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1802" name="bus" dev="ramfs" ino=25663 res=0 errno=0 [ 743.997295][ T5810] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 744.247525][ T5810] usb 4-1: device descriptor read/64, error -71 [ 744.517481][ T5810] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 744.707524][ T5810] usb 4-1: device descriptor read/64, error -71 [ 744.886131][ T5810] usb usb4-port1: attempt power cycle [ 745.400701][ T5810] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 745.447996][ T5810] usb 4-1: device descriptor read/8, error -71 [ 745.878058][ T5810] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 745.909291][ T5810] usb 4-1: device descriptor read/8, error -71 [ 746.481130][ T28] audit: type=1800 audit(1785790383.809:107): pid=11954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1813" name="bus" dev="ramfs" ino=25710 res=0 errno=0 [ 746.501790][ C0] vkms_vblank_simulate: vblank timer overrun [ 746.739264][ T5810] usb usb4-port1: unable to enumerate USB device [ 746.917579][T11961] vxcan0: tx address claim with different name [ 747.780169][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.627746][T12016] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd0": -EINTR [ 752.906887][T12025] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1833'. [ 754.952313][ T5810] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 755.169076][ T5810] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 756.267589][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 756.279533][ T5810] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 756.401276][ T5810] usb 1-1: string descriptor 0 read error: -71 [ 756.420587][ T5810] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 756.432391][ T5810] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 756.458543][ T5810] usb 1-1: config 0 descriptor?? [ 756.477255][ T5810] usb 1-1: can't set config #0, error -71 [ 756.530341][ T5810] usb 1-1: USB disconnect, device number 21 [ 756.915287][T12053] syz.3.1842: attempt to access beyond end of device [ 756.915287][T12053] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 759.879251][T12078] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1848'. [ 760.267424][ T5810] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 760.598350][ T5810] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.752007][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 760.880552][ T5810] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 761.069692][ T5810] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 761.182677][ T5810] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 761.300100][ T5810] usb 4-1: Product: syz [ 761.361188][ T5810] usb 4-1: Manufacturer: syz [ 761.435396][ T5810] usb 4-1: SerialNumber: syz [ 761.632352][ T5810] usb 4-1: config 0 descriptor?? [ 761.906463][ T5810] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 762.044976][ T5810] radio-si470x: probe of 4-1:0.0 failed with error -5 [ 762.182439][ T5810] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 763.018538][ T9305] usb 4-1: USB disconnect, device number 29 [ 765.706232][T12099] syz.0.1853: attempt to access beyond end of device [ 765.706232][T12099] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 766.248597][T12108] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1854'. [ 768.422750][T12122] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/nbd3": -EINTR [ 769.566790][T12142] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1864'. [ 771.863908][T12162] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/nbd3": -EINTR [ 772.059542][T12165] syz.1.1869: attempt to access beyond end of device [ 772.059542][T12165] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 775.815717][T12210] overlayfs: missing 'lowerdir' [ 775.840216][T12208] ubi: mtd0 is already attached to ubi0 [ 776.218315][T12216] syz.0.1880: attempt to access beyond end of device [ 776.218315][T12216] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 784.101498][T12277] fuse: Invalid rootmode [ 785.184554][ T5832] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 785.418305][ T5832] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 785.484058][ T5832] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 785.572000][ T5832] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 785.636000][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.291592][ T5832] usb 3-1: GET_CAPABILITIES returned 0 [ 786.311723][ T5832] usbtmc 3-1:16.0: can't read capabilities [ 787.314334][T12294] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1903'. [ 787.834449][T12307] syz.0.1906: attempt to access beyond end of device [ 787.834449][T12307] nbd0: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 787.978937][ T5809] usb 3-1: USB disconnect, device number 15 [ 793.798872][T12341] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1915'. [ 794.243730][T12354] netlink: 'syz.1.1918': attribute type 1 has an invalid length. [ 794.252445][T12354] netlink: 'syz.1.1918': attribute type 2 has an invalid length. [ 795.456656][T12365] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1920'. [ 798.780391][T12379] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1924'. [ 799.113255][T12387] syz.3.1925: attempt to access beyond end of device [ 799.113255][T12387] nbd3: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 802.598459][ T5810] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 802.970671][ T5810] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 802.984740][ T5810] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 802.996362][ T5810] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 803.007751][ T5810] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 803.017787][ T5810] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.055801][T12414] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 803.186902][ T5810] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 803.289554][T12432] [ 803.292228][T12432] ====================================================== [ 803.299922][T12432] WARNING: possible circular locking dependency detected [ 803.307135][T12432] syzkaller #0 Not tainted [ 803.312346][T12432] ------------------------------------------------------ [ 803.320738][T12432] syz.3.1936/12432 is trying to acquire lock: [ 803.327153][T12432] ffffffff8ce648e8 (bdev_lock){+.+.}-{3:3}, at: bd_prepare_to_claim+0x1d9/0x4a0 [ 803.336420][T12432] [ 803.336420][T12432] but task is already holding lock: [ 803.343974][T12432] ffff8880200b2cd0 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 803.354402][T12432] [ 803.354402][T12432] which lock already depends on the new lock. [ 803.354402][T12432] [ 803.365183][T12432] [ 803.365183][T12432] the existing dependency chain (in reverse order) is: [ 803.374219][T12432] [ 803.374219][T12432] -> #4 (mapping.invalidate_lock){++++}-{3:3}: [ 803.382877][T12432] down_write+0x97/0x200 [ 803.387966][T12432] set_blocksize+0x247/0x4b0 [ 803.393090][T12432] sb_min_blocksize+0xbe/0x190 [ 803.398654][T12432] ext4_fill_super+0x6e7/0x6870 [ 803.404359][T12432] get_tree_bdev+0x3e5/0x520 [ 803.410282][T12432] vfs_get_tree+0x8c/0x280 [ 803.416018][T12432] do_new_mount+0x24a/0xa40 [ 803.421187][T12432] init_mount+0xde/0x130 [ 803.426175][T12432] do_mount_root+0x97/0x230 [ 803.431387][T12432] mount_root_generic+0x1a6/0x3e0 [ 803.437557][T12432] prepare_namespace+0xc2/0x100 [ 803.443139][T12432] kernel_init_freeable+0x41a/0x560 [ 803.449803][T12432] kernel_init+0x1d/0x1c0 [ 803.454904][T12432] ret_from_fork+0x48/0x80 [ 803.460032][T12432] ret_from_fork_asm+0x11/0x20 [ 803.466072][T12432] [ 803.466072][T12432] -> #3 (&sb->s_type->i_mutex_key#8){++++}-{3:3}: [ 803.476018][T12432] down_write+0x97/0x200 [ 803.481482][T12432] set_blocksize+0x1ff/0x4b0 [ 803.486921][T12432] sb_min_blocksize+0xbe/0x190 [ 803.492341][T12432] ext4_fill_super+0x6e7/0x6870 [ 803.498267][T12432] get_tree_bdev+0x3e5/0x520 [ 803.503689][T12432] vfs_get_tree+0x8c/0x280 [ 803.509352][T12432] do_new_mount+0x24a/0xa40 [ 803.514560][T12432] init_mount+0xde/0x130 [ 803.520002][T12432] do_mount_root+0x97/0x230 [ 803.525417][T12432] mount_root_generic+0x1a6/0x3e0 [ 803.531510][T12432] prepare_namespace+0xc2/0x100 [ 803.537679][T12432] kernel_init_freeable+0x41a/0x560 [ 803.544235][T12432] kernel_init+0x1d/0x1c0 [ 803.549818][T12432] ret_from_fork+0x48/0x80 [ 803.556279][T12432] ret_from_fork_asm+0x11/0x20 [ 803.561688][T12432] [ 803.561688][T12432] -> #2 (&type->s_umount_key#32){++++}-{3:3}: [ 803.570983][T12432] down_read+0x46/0x2e0 [ 803.576201][T12432] super_lock+0x189/0x390 [ 803.581326][T12432] fs_bdev_sync+0xa4/0x170 [ 803.587331][T12432] blkdev_common_ioctl+0x8a9/0x2580 [ 803.593264][T12432] blkdev_ioctl+0x512/0x730 [ 803.598428][T12432] __se_sys_ioctl+0xfd/0x170 [ 803.603941][T12432] do_syscall_64+0x55/0xb0 [ 803.609180][T12432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.616389][T12432] [ 803.616389][T12432] -> #1 (&bdev->bd_holder_lock){+.+.}-{3:3}: [ 803.625080][T12432] __mutex_lock+0x135/0xc80 [ 803.630463][T12432] bd_finish_claiming+0x229/0x3f0 [ 803.636355][T12432] blkdev_get_by_dev+0x469/0x610 [ 803.643089][T12432] bdev_open_by_dev+0x77/0x100 [ 803.649054][T12432] setup_bdev_super+0x59/0x660 [ 803.654722][T12432] mount_bdev+0x1ce/0x2c0 [ 803.660038][T12432] legacy_get_tree+0xea/0x180 [ 803.665942][T12432] vfs_get_tree+0x8c/0x280 [ 803.672014][T12432] do_new_mount+0x24a/0xa40 [ 803.677244][T12432] init_mount+0xde/0x130 [ 803.682362][T12432] do_mount_root+0x97/0x230 [ 803.687789][T12432] mount_root_generic+0x1a6/0x3e0 [ 803.693450][T12432] prepare_namespace+0xc2/0x100 [ 803.699111][T12432] kernel_init_freeable+0x41a/0x560 [ 803.705290][T12432] kernel_init+0x1d/0x1c0 [ 803.710744][T12432] ret_from_fork+0x48/0x80 [ 803.716557][T12432] ret_from_fork_asm+0x11/0x20 [ 803.722907][T12432] [ 803.722907][T12432] -> #0 (bdev_lock){+.+.}-{3:3}: [ 803.730137][T12432] __lock_acquire+0x37ef/0x7d80 [ 803.735856][T12432] lock_acquire+0x19e/0x420 [ 803.740871][T12432] __mutex_lock+0x135/0xc80 [ 803.746018][T12432] bd_prepare_to_claim+0x1d9/0x4a0 [ 803.751729][T12432] truncate_bdev_range+0x4e/0x260 [ 803.757358][T12432] blkdev_fallocate+0x428/0x6a0 [ 803.762927][T12432] vfs_fallocate+0x585/0x6f0 [ 803.768127][T12432] do_madvise+0x166b/0x3790 [ 803.773532][T12432] __x64_sys_madvise+0xa6/0xc0 [ 803.779011][T12432] do_syscall_64+0x55/0xb0 [ 803.783956][T12432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 803.790623][T12432] [ 803.790623][T12432] other info that might help us debug this: [ 803.790623][T12432] [ 803.802505][T12432] Chain exists of: [ 803.802505][T12432] bdev_lock --> &sb->s_type->i_mutex_key#8 --> mapping.invalidate_lock [ 803.802505][T12432] [ 803.818091][T12432] Possible unsafe locking scenario: [ 803.818091][T12432] [ 803.826007][T12432] CPU0 CPU1 [ 803.831470][T12432] ---- ---- [ 803.837027][T12432] lock(mapping.invalidate_lock); [ 803.842678][T12432] lock(&sb->s_type->i_mutex_key#8); [ 803.851103][T12432] lock(mapping.invalidate_lock); [ 803.858827][T12432] lock(bdev_lock); [ 803.862739][T12432] [ 803.862739][T12432] *** DEADLOCK *** [ 803.862739][T12432] [ 803.870938][T12432] 2 locks held by syz.3.1936/12432: [ 803.876188][T12432] #0: ffff8880200b2b40 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: blkdev_fallocate+0x205/0x6a0 [ 803.887163][T12432] #1: ffff8880200b2cd0 (mapping.invalidate_lock){++++}-{3:3}, at: blkdev_fallocate+0x22b/0x6a0 [ 803.897884][T12432] [ 803.897884][T12432] stack backtrace: [ 803.903884][T12432] CPU: 0 PID: 12432 Comm: syz.3.1936 Not tainted syzkaller #0 [ 803.911864][T12432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 803.922223][T12432] Call Trace: [ 803.925700][T12432] [ 803.928842][T12432] dump_stack_lvl+0x18c/0x250 [ 803.933566][T12432] ? load_image+0x420/0x420 [ 803.938113][T12432] ? show_regs_print_info+0x20/0x20 [ 803.943336][T12432] ? print_circular_bug+0x12b/0x1a0 [ 803.948533][T12432] check_noncircular+0x2fc/0x400 [ 803.953462][T12432] ? print_deadlock_bug+0x5d0/0x5d0 [ 803.958649][T12432] ? lockdep_lock+0xf5/0x230 [ 803.963264][T12432] ? mark_lock+0x94/0x320 [ 803.967590][T12432] ? _find_first_zero_bit+0xd6/0x100 [ 803.972951][T12432] __lock_acquire+0x37ef/0x7d80 [ 803.977821][T12432] ? verify_lock_unused+0x140/0x140 [ 803.983008][T12432] ? finish_task_switch+0x262/0x8f0 [ 803.988203][T12432] ? verify_lock_unused+0x140/0x140 [ 803.993504][T12432] ? finish_task_switch+0x262/0x8f0 [ 803.998893][T12432] ? __schedule+0x15b6/0x4660 [ 804.003922][T12432] lock_acquire+0x19e/0x420 [ 804.008695][T12432] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 804.014026][T12432] ? __might_sleep+0xe0/0xe0 [ 804.018734][T12432] ? mark_lock+0x94/0x320 [ 804.023327][T12432] ? read_lock_is_recursive+0x20/0x20 [ 804.028902][T12432] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 804.034986][T12432] ? __lock_acquire+0x7d80/0x7d80 [ 804.040037][T12432] ? lock_chain_count+0x20/0x20 [ 804.044982][T12432] ? _raw_spin_lock_irq+0xbb/0xf0 [ 804.050007][T12432] __mutex_lock+0x135/0xc80 [ 804.054607][T12432] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 804.060083][T12432] ? rcu_is_watching+0x15/0xb0 [ 804.065043][T12432] ? trace_contention_end+0x3b/0x110 [ 804.070521][T12432] ? rwsem_down_write_slowpath+0xe0f/0x1020 [ 804.076447][T12432] ? bd_prepare_to_claim+0x1d9/0x4a0 [ 804.081878][T12432] ? mutex_lock_nested+0x20/0x20 [ 804.086817][T12432] ? rwsem_down_read_slowpath+0x880/0x880 [ 804.092793][T12432] bd_prepare_to_claim+0x1d9/0x4a0 [ 804.097932][T12432] ? invalidate_bdev+0xc0/0xc0 [ 804.102687][T12432] ? truncate_bdev_range+0x260/0x260 [ 804.107957][T12432] ? down_write+0x16e/0x200 [ 804.112451][T12432] ? down_read_killable+0x340/0x340 [ 804.117972][T12432] truncate_bdev_range+0x4e/0x260 [ 804.123015][T12432] blkdev_fallocate+0x428/0x6a0 [ 804.127863][T12432] vfs_fallocate+0x585/0x6f0 [ 804.132538][T12432] do_madvise+0x166b/0x3790 [ 804.137062][T12432] ? madvise_set_anon_name+0x440/0x440 [ 804.142549][T12432] ? __lock_acquire+0x7d80/0x7d80 [ 804.147671][T12432] ? slab_free_freelist_hook+0x130/0x1a0 [ 804.153411][T12432] ? verify_lock_unused+0x140/0x140 [ 804.158791][T12432] ? tomoyo_path_number_perm+0x4b7/0x5e0 [ 804.164941][T12432] ? __kmem_cache_free+0xba/0x1f0 [ 804.170181][T12432] ? tomoyo_path_number_perm+0x56b/0x5e0 [ 804.176121][T12432] ? tomoyo_path_number_perm+0x217/0x5e0 [ 804.181935][T12432] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 804.187478][T12432] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 804.193648][T12432] ? __lock_acquire+0x7d80/0x7d80 [ 804.198800][T12432] ? lock_chain_count+0x20/0x20 [ 804.203665][T12432] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 804.209656][T12432] ? lockdep_hardirqs_on+0x98/0x150 [ 804.215208][T12432] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 804.221344][T12432] ? rcu_is_watching+0x15/0xb0 [ 804.226164][T12432] ? lock_chain_count+0x20/0x20 [ 804.231131][T12432] __x64_sys_madvise+0xa6/0xc0 [ 804.236098][T12432] do_syscall_64+0x55/0xb0 [ 804.240602][T12432] ? clear_bhb_loop+0x40/0x90 [ 804.245359][T12432] ? clear_bhb_loop+0x40/0x90 [ 804.250244][T12432] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 804.256337][T12432] RIP: 0033:0x7fa12af9e019 [ 804.260754][T12432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 804.280551][T12432] RSP: 002b:00007fa12bf13028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 804.289051][T12432] RAX: ffffffffffffffda RBX: 00007fa12b226180 RCX: 00007fa12af9e019 [ 804.297406][T12432] RDX: 0000000000000009 RSI: 0000000000600002 RDI: 0000200000000000 [ 804.305580][T12432] RBP: 00007fa12b03500c R08: 0000000000000000 R09: 0000000000000000 [ 804.313843][T12432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 804.322099][T12432] R13: 00007fa12b226218 R14: 00007fa12b226180 R15: 00007ffd067612a8 [ 804.330090][T12432] [ 804.377839][ T5810] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 804.491803][ T5810] usb 2-1: USB disconnect, device number 25 [ 804.556090][ T5810] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 804.607786][ T5810] cyberjack 2-1:1.0: device disconnected [ 809.219712][ T1291] ieee802154 phy1 wpan1: encryption failed: -22