last executing test programs: 10.305671524s ago: executing program 1 (id=739): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000280)='L', 0x1) write$char_usb(r0, &(0x7f00000003c0)='0', 0x1) 7.731220278s ago: executing program 2 (id=753): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002c40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000002d00)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000002e00)={0x0, 0x0, &(0x7f0000002dc0)={&(0x7f0000002d40)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x2}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 7.63637263s ago: executing program 2 (id=755): timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 6.764574322s ago: executing program 1 (id=757): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sec\x00', &(0x7f00000000c0)='securityfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000840)={[{@workdir={'workdir', 0x3d, './sec/apparmor/policy/namespaces'}}]}) 6.582425886s ago: executing program 1 (id=759): syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x166, &(0x7f0000000380)="$eJzs2j9Lw0AYBvA3KCgdHZ0KlSpokzTRuuoobu4Opeba4MWWRJB20U2cBIVz8EsIfgI/gWR006WDXyJyzaFpVAj+aRp4fksfeNvrm7v2prfmd706C2pEa72rveGC3/XKDXuzxeqsSbEdIirLEEbRjU6fPL/Xw4j0L96Qr6XX+LWy0ha7F8zljpV3SwAAAAAAAAAAAAAAAAAAAAAAkFG1pEKpI7xz5nKnnqgG/cFhk3PHD4jmc+owX9WymuEiJvit3B97bCtWZd6SyRXbvqyb45+/VmG5I/hLen+NY69nBP1BzfWabaftHFmW3TDXTXPDMkZrGekVq3eqJwqjezMxTqY/7tuynpg3e8oyb6bOf3bRFZcn6W/7OP+ihtPpaOOPgkb/sLJGdCYPe+KPo03JrhYvaES/+yVEM/Ef/MdtZLs9C2B0/w2JaM6uPMj7T291+YEqTuIw8318APjOWwAAAP//14QzQA==") r0 = open(&(0x7f0000000200)='.\x00', 0x20000, 0x0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, 0x0, 0x0) 6.582127726s ago: executing program 2 (id=760): timer_create(0xfffffff9, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) capget(0x0, &(0x7f00000000c0)={0x9, 0x7, 0x8000, 0xa9c, 0x13, 0x101}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) socket$inet6(0xa, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r3, 0x7, &(0x7f0000000040)={0x1, 0x1, 0x80, 0x3}) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x200000000}) 6.555154217s ago: executing program 4 (id=761): socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2004010, &(0x7f0000000340)=ANY=[], 0x1, 0x1f5, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) listen(0xffffffffffffffff, 0x0) getsockopt$MRT(0xffffffffffffffff, 0x0, 0xce, &(0x7f0000000140), 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) msgsnd(0x0, &(0x7f0000000000)={0x1}, 0x2000, 0x0) 5.536983402s ago: executing program 3 (id=762): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x3, 0x0, 0x0, 0x0, 0x14}, @ipv4=@generic={{0x6, 0x4, 0x1, 0x2b, 0x2c, 0x68, 0x0, 0x60, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, {[@timestamp={0x44, 0x4, 0xf0, 0x0, 0x1}]}}, "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"}}, 0xfce) 5.462450664s ago: executing program 1 (id=763): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x189002, 0x40) write$cgroup_devices(r0, &(0x7f0000000540)=ANY=[@ANYBLOB='c *:', @ANYRESOCT=0x0], 0x11) 4.710378953s ago: executing program 4 (id=764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xff}}, @echo={0x8, 0x0, 0x0, 0x6}}}}}, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x0, 0x0, 0x0, 0x80000002, 0x57, 0x0, 0x0, 0x0, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x1000, 0x0, 0xde0}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) listen(0xffffffffffffffff, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) 4.677278684s ago: executing program 2 (id=765): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000006600)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES16], 0x1, 0x6246, &(0x7f0000000280)="$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") rename(&(0x7f0000000000)='./file0/file1\x00', &(0x7f0000000080)='./file1\x00') 4.0101433s ago: executing program 0 (id=766): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000000c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008404, &(0x7f0000000b80)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYBLOB="999c07c03c5bc6a3d07b90faae21d196274f93a6593a9830472d5633665f2f51cfb24aaad481c74e142cd734ec6fd04935a94af71c756dbd6f5e2f39b2c4c30725d103d40d7e65129bb928ef73849dae618e438695e0a9078605ba418298145bf2fec11b0d16763288e7ecfe663aa5ff450d1e46d251160109c0378e04fe2629890c28366a6489e706ecf23195dc7f19e03fad", @ANYRESHEX, @ANYRESDEC, @ANYBLOB="c5ce1b9733c91520022860834995bd440de70a56f9b17205184d3be668bd36e2d9b2c62fb43e3a2a12e69d2eea113cf5ab1f668b2855d9a2bb426304b9bbf1debf4d593fe5"], 0x41, 0x2bd, &(0x7f00000007c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file7\x00', 0x1ac) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x1a820f4, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], 0x0, 0x0, &(0x7f0000000280)) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) 3.678157678s ago: executing program 1 (id=767): syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000280)='L', 0x1) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x120, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 3.557069212s ago: executing program 3 (id=768): syz_mount_image$minix(&(0x7f0000000000), &(0x7f0000000540)='./file1\x00', 0x1810002, &(0x7f000000c680)=ANY=[], 0x1, 0x1e2, &(0x7f0000000580)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x58) 3.438349594s ago: executing program 4 (id=769): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000042"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4002}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{r2}, &(0x7f0000001a40), &(0x7f0000001a80)='%+9llu \x00'}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x1e, &(0x7f0000000740)={@remote, @link_local={0x17, 0x80, 0xc2, 0x6, 0x5}, @val={@val={0x88a8, 0x0, 0x0, 0x1}, {0x8100, 0x2, 0x0, 0x3}}, {@llc_tr={0x11, {@snap={0xfe, 0xa9, 'X', "5c9014", 0x89e4}}}}}, 0x0) 3.283486998s ago: executing program 3 (id=770): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendto(r3, &(0x7f0000000180)='%', 0x300000, 0x840, 0x0, 0x60) 3.278129018s ago: executing program 0 (id=771): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vim2m(0x0, 0x3, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, 0x0) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r2, &(0x7f0000000180)='10000', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) r5 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, &(0x7f0000000040)={'\x00', 0x0, 0x5, 0x2, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "00d703500200"]}) ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r6, &(0x7f0000000280)='0', 0x1) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={&(0x7f0000000100), 0x10, &(0x7f0000000200)={&(0x7f0000000300)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'devgroup\x00'}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x18, 0x3, "0400"/20}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xfc}}, 0x0) 3.166410871s ago: executing program 4 (id=772): syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x20042, 0x40) fallocate(r0, 0x0, 0x4, 0x88ffff) pwrite64(r0, &(0x7f00000001c0)="df", 0x1, 0x8000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) truncate(&(0x7f0000000300)='./file1\x00', 0x591) 2.969017866s ago: executing program 0 (id=773): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r0, 0x1, 0x53, 0x0, &(0x7f0000000180)) 2.732446562s ago: executing program 0 (id=774): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) arch_prctl$ARCH_SHSTK_UNLOCK(0x5004, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 2.073777258s ago: executing program 3 (id=775): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000340)={0xfffffffe, 0x4, 0x1, 0x8002, '\x00', '\x00', '\x00', 0x4, 0xfffffffe, 0x100, 0x1, "abd206a1ebd7cedfd17ebd65400ed41b"}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES64=r0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f000000}, 0x94) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000034c0)={{{@in6=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={""/10, ""/2, @local}}}, &(0x7f00000035c0)=0xe8) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000003600)={{0x1, 0x1, 0x18, r0, {0x0, 0xee00}}, './file0\x00'}) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000003640)={0xa0, 0x0, 0x0, {{0x2, 0x2, 0x6, 0x4, 0xfff, 0x6, {0x4, 0x400, 0x7, 0xffffffffffff0000, 0xffffffff, 0x6, 0x40, 0xffffffff, 0x61, 0xc000, 0x8, r1, r2, 0xfff, 0x78}}, {0x0, 0x10}}}, 0xa0) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000040), 0x9eda651801ee77b9, 0x0) 1.97365298s ago: executing program 3 (id=776): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00') r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/locks\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[], 0xa) timerfd_create(0x9, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x40010) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x59ea, 0xaf, &(0x7f0000000180)=""/175, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) pread64(r2, 0x0, 0x0, 0x7) preadv(r1, &(0x7f0000001180)=[{&(0x7f00000000c0)=""/48, 0x30}], 0x25, 0x100, 0x400) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r3 = fsopen(&(0x7f0000000040)='cifs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) creat(0x0, 0x1c2) socket$nl_generic(0x10, 0x3, 0x10) 1.750302726s ago: executing program 0 (id=777): syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5d9, &(0x7f00000010c0)="$eJzs3U9rHOcdB/DvrNZrrQuOktiJ2wYqUvqHitqS1m2TgqlaTNEhlIBfgajlWHitBGlTlByKXfxCUoLeQC+55OCDz+1LEPRYKPRURC8uMzu72tiyLCWWdhV/Pvaz8zx6Zn7zm9/OjHZXAgV4aS3PpfkwRZbn3tsqxzvbne7OdufuoJ/kbJJG9T/NsvvPZOpBMpt+y3eTFHW44ln7ufbF5818ef9Gf9SoW7X+1EHbHc69umWpTnLpBcZ79I3jFcMjLINeHwSfBI+f7z/HuPupY4zNYbT6i+IZz8VMci7JdH0fGJy4jRPM8FhMzAUIAAAAx+iV3exmK+fHnQcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcJvXf/y/q1hj0Z1MM/v5/q/5a6v6p9nDcCQAAAAAAAADAC/CD3exmK+cH48dF9TP/t6vBherxO/k4m1nNRi5nKyvppZeNLCSZGQnU2lrp9TYWDrHl4r5bLp7M8QIAAAAAAADAt9Rfsrz3838AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgERTLVX1TtwqA/k0YzyXSSVrneveQfg/5p9nDcCQAAAMAJeGU3u9nK+cH4cVG953+jet8/nY+znl7W0ks3q7lZfRbQf9ff2NnudHe2O3fL9nTc3/77SGlUEdP/7GH/PV+q1mjn1p1mvc0f82G6uZlGtWXp0iCf/fO6X+ZU/KZ2yMxu1ssiKb5ffxoyGWaqipzJraxVNZqvcyur8erBlTjis/PknhbSGH7yc+EYan6uXpY1n57omi+OnH1vHFyJ5EfX/rt+u7t+5/atzbnJOaSv6clKdEYq8eZLVYn5qhIXh+Pl/D43MpfZvJ+NrOVPWUkvq5nN9aq3Up/P5ePMwZVa+sro/edl0qqfl/5d9Gg5vV1tez5r+UM+zM2s5pdZzNW8k4X8qvp3deQZvniIq75xtKv+hz+tO68lRbu/nBBlXV8dqevoPXemmhv9yl6VXnvx98bm9+rOVFI0hzlNgicrsTBSidcPrsRfH5ePm931Oxu3Vz465P5+Ui/L7xJnn/td4iTr1KrP3v4rla+eHeXc6/vOLVRzF4ZzjafmLg7nnnelturXcE9HWqzm3tx3rlPNXRqZaw/nLg9fbwEw8c797Fyr/a/239uftR+0b7ffm/7d2XfOvtXKmUdnft2cn/px463ib/ksf957/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHx9m598emel213d0NHR0Rl2xn1n4iRc6d396MrmJ5/+fO3uygerH6yud+Z/sfhuZ2Hx3atXbq11V+f7j+NOk2Oyd9GPOxMAAAAAAAAAAACO4iR+nXTcxwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDpsTyX5sMUWZi/PF+Od7Y73bIN+ntrNpI0y+X/kqkHyWz6LTMj4Ypn7efaF5838+X9G3uxGoP1pw7a7nDu1S1LdZJLLzDeo28crxgeYRn0+iA4jNv/AwAA///YHBzc") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) stat(&(0x7f0000000040)='./file0\x00', 0x0) quotactl_fd$Q_QUOTAOFF(r2, 0xffffffff80000301, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x80) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000280)) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) inotify_add_watch(0xffffffffffffffff, 0x0, 0x813) 1.694528117s ago: executing program 4 (id=778): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000500)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x2) ftruncate(r3, 0xffff) fcntl$addseals(r3, 0x409, 0x7) socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xd, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r3, 0x0, 0x0, 0x8000}) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r5}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r6, 0xffffffffffffffff, 0x0) 1.694412107s ago: executing program 2 (id=779): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mydev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./mydev\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mydev/v4l-touch0\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000002c0)='.\x00', &(0x7f0000000040), 0x8000, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/166, 0x1f8}], 0x1, 0xfffffff7, 0xc84d) 778.4492ms ago: executing program 3 (id=780): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe={'stripe', 0x3d, 0x40}}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x8004587d, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x8000200000200000, 0x4, 0x2, 0x6}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x58) 89.412777ms ago: executing program 0 (id=781): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) r1 = open(&(0x7f00000003c0)='.\x00', 0x0, 0x166) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1ff, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0xa9525000) chmod(&(0x7f0000000040)='.\x00', 0x35e) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x1) 20.922949ms ago: executing program 1 (id=782): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x30c0e, &(0x7f0000000480)=ANY=[@ANYRES64], 0x0, 0x360, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e23, 0x1, @mcast1, 0x6}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0xfdff) 20.740819ms ago: executing program 4 (id=783): r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) writev(r0, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) 0s ago: executing program 2 (id=784): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={[{}, {@part={'part', 0x3d, 0x7}}, {@nls={'nls', 0x3d, 'default'}}]}, 0x1, 0x5fe, &(0x7f00000011c0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000000400)=""/208, 0xd0) kernel console output (not intermixed with test programs): 0158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.670060][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.681194][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.692076][ T4185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.703173][ T4185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.716333][ T4185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.734605][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.744363][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.754214][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.768023][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.779298][ T4193] device veth0_vlan entered promiscuous mode [ 76.800265][ T4193] device veth1_vlan entered promiscuous mode [ 76.823348][ T4185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.840268][ T4185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.851940][ T4185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.869198][ T4185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.920371][ T4194] device veth0_macvtap entered promiscuous mode [ 76.949789][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.966735][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.987450][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.995334][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.012390][ T4194] device veth1_macvtap entered promiscuous mode [ 77.024928][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.041131][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.055023][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 77.084141][ T4193] device veth0_macvtap entered promiscuous mode [ 77.128599][ T4193] device veth1_macvtap entered promiscuous mode [ 77.142547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.153828][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.170707][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.219920][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.252495][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.275299][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.302238][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.321508][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.347644][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.359012][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.377793][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.390760][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.401357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.413556][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.429859][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.440122][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.457102][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.471759][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.484565][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.500786][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.511994][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.530578][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.547531][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.562700][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.574370][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.586127][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.597127][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.608148][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.620679][ T4194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.624154][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.647516][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.654108][ T4194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.673929][ T4194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.685136][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.701783][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.712031][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.712303][ T23] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.732097][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.743000][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.756019][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.768391][ T4193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.782728][ T4193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.796282][ T4193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.814027][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.822576][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.835306][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.844882][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.853918][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.866941][ T4194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.876680][ T4194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.887576][ T4194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.897062][ T4194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.926637][ T4193] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.935723][ T4193] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.944712][ T4193] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.954129][ T4193] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.975979][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 77.993178][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.012114][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.022750][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.133775][ T23] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 78.154745][ T23] usb 2-1: config 0 has no interface number 0 [ 78.261053][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.272087][ T4236] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.292955][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.300628][ T4236] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.350948][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.358661][ T23] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 78.369678][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 78.377790][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.414246][ T23] usb 2-1: Product: syz [ 78.428510][ T23] usb 2-1: Manufacturer: syz [ 78.445198][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.462756][ T23] usb 2-1: SerialNumber: syz [ 78.472214][ T4236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.480498][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.480865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.491233][ T4236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.508619][ T4231] Bluetooth: hci4: command 0x0419 tx timeout [ 78.514771][ T4231] Bluetooth: hci3: command 0x0419 tx timeout [ 78.526536][ T23] usb 2-1: config 0 descriptor?? [ 78.532960][ T4231] Bluetooth: hci2: command 0x0419 tx timeout [ 78.540308][ T4231] Bluetooth: hci0: command 0x0419 tx timeout [ 78.549699][ T4231] Bluetooth: hci1: command 0x0419 tx timeout [ 78.558049][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 78.568459][ T23] hub 2-1:0.132: bad descriptor, ignoring hub [ 78.574741][ T23] hub: probe of 2-1:0.132 failed with error -5 [ 78.597065][ T23] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input5 [ 78.718478][ T4286] netlink: 'syz.3.8': attribute type 1 has an invalid length. [ 78.873530][ T4274] udc-core: couldn't find an available UDC or it's busy [ 78.883583][ T4274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 79.212246][ T4302] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 79.257667][ T4265] usb 2-1: USB disconnect, device number 2 [ 79.342616][ T23] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 79.405218][ T23] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 79.508617][ T4311] fido_id[4311]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 83.145279][ T4328] process 'syz.1.16' launched './file1' with NULL argv: empty string added [ 83.145641][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 83.271883][ T4340] tipc: Started in network mode [ 83.280958][ T4340] tipc: Node identity 8ab02ea7668, cluster identity 4711 [ 83.290840][ T4340] tipc: Enabled bearer , priority 0 [ 83.299880][ T4340] device syzkaller0 entered promiscuous mode [ 83.316766][ T4340] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 83.441613][ T4340] tipc: Resetting bearer [ 83.546305][ T4339] tipc: Resetting bearer [ 83.663534][ T4339] tipc: Disabling bearer [ 83.676163][ T4278] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 83.938226][ T4278] usb 1-1: Using ep0 maxpacket: 16 [ 84.055952][ T4278] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 84.074512][ T4278] usb 1-1: config 0 has no interface number 0 [ 84.255977][ T4278] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 84.277508][ T4278] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 84.319205][ T4278] usb 1-1: Product: syz [ 84.323487][ T4278] usb 1-1: Manufacturer: syz [ 84.345713][ T4278] usb 1-1: SerialNumber: syz [ 84.383482][ T4278] usb 1-1: config 0 descriptor?? [ 84.466946][ T4278] hub 1-1:0.132: bad descriptor, ignoring hub [ 84.473202][ T4278] hub: probe of 1-1:0.132 failed with error -5 [ 84.530211][ T4278] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input6 [ 84.598138][ T4370] xt_nfacct: accounting object `syz0' does not exist [ 84.750033][ T4342] udc-core: couldn't find an available UDC or it's busy [ 84.780428][ T4342] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 86.870297][ T21] cfg80211: failed to load regulatory.db [ 89.611239][ T4233] usb 1-1: USB disconnect, device number 2 [ 89.966073][ T4278] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 90.195668][ T4265] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.287440][ T4278] usb 3-1: Using ep0 maxpacket: 16 [ 90.425908][ T4278] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 90.465597][ T4278] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 90.541361][ T4278] usb 3-1: config 0 interface 0 has no altsetting 0 [ 90.565663][ T4278] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 90.606910][ T4278] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.653105][ T4430] tipc: Started in network mode [ 90.662245][ T4278] usb 3-1: config 0 descriptor?? [ 90.704817][ T4430] tipc: Node identity d62be58abc85, cluster identity 4711 [ 90.766707][ T4430] tipc: Enabled bearer , priority 0 [ 90.785997][ T4278] usb 3-1: can't set config #0, error -71 [ 90.793381][ T4433] device syzkaller0 entered promiscuous mode [ 90.808420][ T4278] usb 3-1: USB disconnect, device number 2 [ 90.935810][ T4434] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 91.133897][ T4434] tipc: Resetting bearer [ 91.243233][ T4434] tipc: Disabling bearer [ 92.577767][ T4461] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 92.685162][ T4461] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 93.247030][ T4477] device syzkaller0 entered promiscuous mode [ 93.305829][ T4470] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.585669][ T4470] usb 2-1: Using ep0 maxpacket: 8 [ 93.765883][ T4470] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 95.891634][ T4470] usb 2-1: config 0 has no interface number 0 [ 95.902463][ T4470] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 95.914879][ T4470] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 95.924498][ T4470] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.946717][ T4470] usb 2-1: config 0 descriptor?? [ 96.031540][ T4470] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 96.062983][ T4470] usb 2-1: USB disconnect, device number 4 [ 97.075734][ T4470] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 97.325795][ T4470] usb 1-1: Using ep0 maxpacket: 16 [ 97.446033][ T4470] usb 1-1: config 0 has an invalid interface number: 132 but max is 0 [ 97.468015][ T4470] usb 1-1: config 0 has no interface number 0 [ 97.655850][ T4470] usb 1-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 97.684778][ T4470] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.734623][ T4470] usb 1-1: Product: syz [ 97.779639][ T4470] usb 1-1: Manufacturer: syz [ 97.784307][ T4470] usb 1-1: SerialNumber: syz [ 97.821763][ T4470] usb 1-1: config 0 descriptor?? [ 97.886587][ T4470] hub 1-1:0.132: bad descriptor, ignoring hub [ 97.894826][ T4470] hub: probe of 1-1:0.132 failed with error -5 [ 97.935727][ T4470] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.132/input/input7 [ 98.305926][ T4531] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 98.361004][ T4531] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 99.283661][ T4230] usb 1-1: USB disconnect, device number 3 [ 100.236174][ T4552] tipc: Enabling of bearer rejected, failed to enable media [ 104.495743][ T4471] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 104.735670][ T4471] usb 5-1: Using ep0 maxpacket: 16 [ 104.855884][ T4471] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 104.884368][ T4471] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 104.928240][ T4471] usb 5-1: config 0 interface 0 has no altsetting 0 [ 104.935037][ T4471] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 104.983485][ T4471] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.024193][ T4471] usb 5-1: config 0 descriptor?? [ 105.375882][ T4471] usbhid 5-1:0.0: can't add hid device: -71 [ 105.383555][ T4471] usbhid: probe of 5-1:0.0 failed with error -71 [ 105.411288][ T4471] usb 5-1: USB disconnect, device number 2 [ 105.699121][ T4615] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 105.718137][ T4615] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 106.165657][ T4466] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 106.415718][ T4466] usb 5-1: Using ep0 maxpacket: 32 [ 106.536245][ T4466] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 106.575503][ T4466] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.603236][ T4466] usb 5-1: config 0 descriptor?? [ 106.865775][ T4466] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 106.902882][ T4466] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 106.936735][ T4466] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 106.962649][ T4466] usb 5-1: media controller created [ 107.017264][ T4466] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 107.095932][ T4466] az6027: usb out operation failed. (-71) [ 107.125715][ T4466] az6027: usb out operation failed. (-71) [ 107.133137][ T4466] stb0899_attach: Driver disabled by Kconfig [ 107.152466][ T4466] az6027: no front-end attached [ 107.152466][ T4466] [ 107.185833][ T4466] az6027: usb out operation failed. (-71) [ 107.197500][ T4466] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 107.223229][ T4466] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 107.263765][ T4466] dvb-usb: schedule remote query interval to 400 msecs. [ 107.293030][ T4466] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 107.379057][ T4466] usb 5-1: USB disconnect, device number 3 [ 107.454186][ T4466] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 107.574012][ T4642] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 107.605438][ T4642] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 107.942842][ T4662] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 107.972539][ T4662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 110.343617][ T4702] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 110.445593][ T4702] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 112.511122][ T4278] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.795703][ T4278] usb 3-1: Using ep0 maxpacket: 16 [ 112.953103][ T4278] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 112.971607][ T4278] usb 3-1: config 0 has no interface number 0 [ 113.191865][ T4278] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 113.208666][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.234601][ T4278] usb 3-1: Product: syz [ 113.252430][ T4278] usb 3-1: Manufacturer: syz [ 113.265485][ T4278] usb 3-1: SerialNumber: syz [ 113.306645][ T4278] usb 3-1: config 0 descriptor?? [ 113.372270][ T4278] hub 3-1:0.132: bad descriptor, ignoring hub [ 113.382792][ T4278] hub: probe of 3-1:0.132 failed with error -5 [ 113.412983][ T4278] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input9 [ 113.827199][ T4278] usb 3-1: USB disconnect, device number 3 [ 114.001219][ T4746] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 114.020229][ T4746] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 114.508337][ T4753] vivid-001: ================= START STATUS ================= [ 114.550974][ T4753] vivid-001: Radio HW Seek Mode: Bounded [ 114.581320][ T4753] vivid-001: Radio Programmable HW Seek: false [ 114.632436][ T4753] vivid-001: RDS Rx I/O Mode: Block I/O [ 114.705128][ T4761] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 114.718943][ T4753] vivid-001: Generate RBDS Instead of RDS: false [ 114.731372][ T4761] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 114.761563][ T4753] vivid-001: RDS Reception: true [ 114.809341][ T4753] vivid-001: RDS Program Type: 0 inactive [ 114.845719][ T4753] vivid-001: RDS PS Name: inactive [ 114.859218][ T4753] vivid-001: RDS Radio Text: inactive [ 114.882504][ T4753] vivid-001: RDS Traffic Announcement: false inactive [ 114.931139][ T4767] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 114.940844][ T4753] vivid-001: RDS Traffic Program: false inactive [ 114.977890][ T4767] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 115.001680][ T4753] vivid-001: RDS Music: false inactive [ 115.043128][ T4753] vivid-001: ================== END STATUS ================== [ 115.932784][ T4783] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 115.972375][ T4783] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 116.357510][ T4790] device syzkaller0 entered promiscuous mode [ 116.412724][ T4791] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 116.708316][ T4795] tipc: Started in network mode [ 116.713434][ T4795] tipc: Node identity 66e5d9a9c63e, cluster identity 4711 [ 116.776367][ T4795] tipc: Enabled bearer , priority 0 [ 116.838100][ T4802] device syzkaller0 entered promiscuous mode [ 116.868617][ T4795] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 116.915729][ T4230] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 116.928192][ T4795] tipc: Resetting bearer [ 117.006505][ T4794] tipc: Resetting bearer [ 117.053740][ T4794] tipc: Disabling bearer [ 117.185737][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 117.280327][ T4809] loop1: detected capacity change from 0 to 256 [ 117.309157][ T4230] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 117.330581][ T4230] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 117.359601][ T4809] FAT-fs (loop1): Unrecognized mount option "./file2" or missing value [ 117.369343][ T4278] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.377097][ T4230] usb 4-1: config 0 interface 0 has no altsetting 0 [ 117.394237][ T4230] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 117.525709][ T4471] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 117.597941][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.608443][ T4230] usb 4-1: config 0 descriptor?? [ 118.415671][ T4278] usb 3-1: Using ep0 maxpacket: 16 [ 118.466119][ T4230] usbhid 4-1:0.0: can't add hid device: -71 [ 118.472288][ T4230] usbhid: probe of 4-1:0.0 failed with error -71 [ 118.495780][ T4471] usb 1-1: Using ep0 maxpacket: 32 [ 118.527333][ T4230] usb 4-1: USB disconnect, device number 2 [ 118.576250][ T4278] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 118.608810][ T4278] usb 3-1: config 0 has no interface number 0 [ 118.768760][ T4471] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 118.771555][ T4278] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 118.779028][ T4471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.798382][ T4471] usb 1-1: config 0 descriptor?? [ 118.824204][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.853422][ T4278] usb 3-1: Product: syz [ 118.863583][ T4278] usb 3-1: Manufacturer: syz [ 118.878776][ T4278] usb 3-1: SerialNumber: syz [ 118.895874][ T4278] usb 3-1: config 0 descriptor?? [ 118.953249][ T4278] hub 3-1:0.132: bad descriptor, ignoring hub [ 118.962580][ T4278] hub: probe of 3-1:0.132 failed with error -5 [ 118.972688][ T4819] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 118.994417][ T4278] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input10 [ 119.056782][ T4278] usb 3-1: USB disconnect, device number 4 [ 119.064747][ T4471] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 119.137198][ T4471] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 119.170544][ T4825] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 119.200524][ T4471] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 119.275646][ T4278] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 119.840958][ T4838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (9353363104 ns). Using initial count to start timer. [ 120.148614][ T4846] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 120.203306][ T4846] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 121.314245][ T4857] socket: no more sockets [ 123.305653][ T4278] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 123.565586][ T4278] usb 3-1: Using ep0 maxpacket: 16 [ 123.725878][ T4278] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 123.745659][ T4278] usb 3-1: config 0 has no interface number 0 [ 123.882921][ T4897] vivid-003: ================= START STATUS ================= [ 123.924404][ T4897] vivid-003: Radio HW Seek Mode: Bounded [ 123.949176][ T4897] vivid-003: Radio Programmable HW Seek: false [ 123.956034][ T4278] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 123.976086][ T4278] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.005944][ T4278] usb 3-1: Product: syz [ 124.015871][ T4278] usb 3-1: Manufacturer: syz [ 124.020549][ T4278] usb 3-1: SerialNumber: syz [ 124.027174][ T4897] vivid-003: RDS Rx I/O Mode: Block I/O [ 124.032926][ T4897] vivid-003: Generate RBDS Instead of RDS: false [ 124.050601][ T4278] usb 3-1: config 0 descriptor?? [ 124.097306][ T4278] hub 3-1:0.132: bad descriptor, ignoring hub [ 124.103453][ T4278] hub: probe of 3-1:0.132 failed with error -5 [ 124.122929][ T4897] vivid-003: RDS Reception: true [ 124.143432][ T4278] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input11 [ 124.170486][ T4897] vivid-003: RDS Program Type: 0 inactive [ 124.218297][ T4897] vivid-003: RDS PS Name: inactive [ 124.263033][ T4897] vivid-003: RDS Radio Text: inactive [ 124.303818][ T4897] vivid-003: RDS Traffic Announcement: false inactive [ 124.370482][ T4897] vivid-003: RDS Traffic Program: false inactive [ 124.415715][ T4897] vivid-003: RDS Music: false inactive [ 124.446233][ T4897] vivid-003: ================== END STATUS ================== [ 125.113224][ T7] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 125.306573][ T4916] loop0: detected capacity change from 0 to 4095 [ 125.407132][ T4916] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 125.441902][ T4916] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 125.452748][ T4470] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 125.472805][ T4916] ldm_validate_privheads(): Cannot find PRIVHEAD 2. [ 125.485801][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 125.500798][ T4916] loop0: [ 125.515631][ T7] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 125.545494][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.695763][ T4470] usb 2-1: Using ep0 maxpacket: 16 [ 125.716033][ T4922] vivid-004: ================= START STATUS ================= [ 125.723734][ T4922] vivid-004: Radio HW Seek Mode: Bounded [ 125.758064][ T4922] vivid-004: Radio Programmable HW Seek: false [ 125.764427][ T4922] vivid-004: RDS Rx I/O Mode: Block I/O [ 125.789006][ T4922] vivid-004: Generate RBDS Instead of RDS: false [ 125.825816][ T4470] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 125.849993][ T4470] usb 2-1: config 0 has no interface number 0 [ 125.870904][ T4926] netlink: 4 bytes leftover after parsing attributes in process `syz.3.164'. [ 125.882517][ T4922] vivid-004: RDS Reception: true [ 125.899255][ T4922] vivid-004: RDS Program Type: 0 inactive [ 125.922876][ T7] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 125.937755][ T4922] vivid-004: RDS PS Name: inactive [ 125.965964][ T4922] vivid-004: RDS Radio Text: inactive [ 126.001257][ T4922] vivid-004: RDS Traffic Announcement: false inactive [ 126.025952][ T4470] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 126.040666][ T4922] vivid-004: RDS Traffic Program: false inactive [ 126.048074][ T4470] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.060467][ T4922] vivid-004: RDS Music: false inactive [ 126.070677][ T4470] usb 2-1: Product: syz [ 126.075320][ T4470] usb 2-1: Manufacturer: syz [ 126.095750][ T4922] vivid-004: ================== END STATUS ================== [ 126.101131][ T4470] usb 2-1: SerialNumber: syz [ 126.142597][ T4470] usb 2-1: config 0 descriptor?? [ 126.167784][ T7] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, de:2b:09:ad:e2:4b [ 126.206507][ T4470] hub 2-1:0.132: bad descriptor, ignoring hub [ 126.217464][ T4470] hub: probe of 2-1:0.132 failed with error -5 [ 126.226098][ T7] usb 4-1: USB disconnect, device number 3 [ 126.251204][ T7] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 126.267601][ T4470] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input12 [ 127.329471][ T4278] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 127.587772][ T4278] usb 4-1: Using ep0 maxpacket: 32 [ 127.746890][ T4278] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.764641][ T4278] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.795372][ T4278] usb 4-1: config 0 descriptor?? [ 128.064354][ T4278] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 128.405923][ T4230] usb 2-1: USB disconnect, device number 5 [ 129.097866][ T4466] usb 3-1: USB disconnect, device number 6 [ 129.331615][ T4986] vivid-004: ================= START STATUS ================= [ 129.377937][ T4986] vivid-004: Radio HW Seek Mode: Bounded [ 129.415950][ T4986] vivid-004: Radio Programmable HW Seek: false [ 129.422526][ T4986] vivid-004: RDS Rx I/O Mode: Block I/O [ 129.471729][ T4986] vivid-004: Generate RBDS Instead of RDS: false [ 129.555849][ T4986] vivid-004: RDS Reception: true [ 129.574105][ T4986] vivid-004: RDS Program Type: 0 inactive [ 129.650389][ T4986] vivid-004: RDS PS Name: inactive [ 129.731255][ T4986] vivid-004: RDS Radio Text: inactive [ 129.793941][ T4986] vivid-004: RDS Traffic Announcement: false inactive [ 129.851643][ T4986] vivid-004: RDS Traffic Program: false inactive [ 129.922350][ T4986] vivid-004: RDS Music: false inactive [ 129.973434][ T4994] device syzkaller0 entered promiscuous mode [ 129.985717][ T4986] vivid-004: ================== END STATUS ================== [ 130.024422][ T4995] Zero length message leads to an empty skb [ 130.130761][ T4999] vivid-003: ================= START STATUS ================= [ 130.185136][ T4999] vivid-003: Radio HW Seek Mode: Bounded [ 130.246343][ T4999] vivid-003: Radio Programmable HW Seek: false [ 130.295494][ T5005] vivid-001: ================= START STATUS ================= [ 130.304340][ T5005] vivid-001: Radio HW Seek Mode: Bounded [ 130.310539][ T4999] vivid-003: RDS Rx I/O Mode: Block I/O [ 130.351645][ T4999] vivid-003: Generate RBDS Instead of RDS: false [ 130.380742][ T5005] vivid-001: Radio Programmable HW Seek: false [ 130.415282][ T4999] vivid-003: RDS Reception: true [ 130.433022][ T5005] vivid-001: RDS Rx I/O Mode: Block I/O [ 130.444166][ T4999] vivid-003: RDS Program Type: 0 inactive [ 130.461606][ T4999] vivid-003: RDS PS Name: inactive [ 130.473532][ T5005] vivid-001: Generate RBDS Instead of RDS: false [ 130.484706][ T4999] vivid-003: RDS Radio Text: inactive [ 130.507539][ T5005] vivid-001: RDS Reception: true [ 130.518798][ T4999] vivid-003: RDS Traffic Announcement: false inactive [ 130.529786][ T5005] vivid-001: RDS Program Type: 0 inactive [ 130.549915][ T5005] vivid-001: RDS PS Name: inactive [ 130.553405][ T4999] vivid-003: RDS Traffic Program: false inactive [ 130.582296][ T4999] vivid-003: RDS Music: false inactive [ 130.588171][ T5005] vivid-001: RDS Radio Text: inactive [ 130.595368][ T5005] vivid-001: RDS Traffic Announcement: false inactive [ 130.612840][ T4999] vivid-003: ================== END STATUS ================== [ 130.632972][ T5005] vivid-001: RDS Traffic Program: false inactive [ 130.657239][ T5005] vivid-001: RDS Music: false inactive [ 130.691977][ T5005] vivid-001: ================== END STATUS ================== [ 130.816626][ T5011] loop0: detected capacity change from 0 to 4095 [ 130.901289][ T4530] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 130.924768][ T4530] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 130.952477][ T4530] loop0: [ 130.967054][ T5012] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 131.005787][ T5012] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 131.016826][ T5012] loop0: [ 131.311277][ T5023] jffs2: notice: (5023) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 131.811754][ T5033] device syzkaller0 entered promiscuous mode [ 133.418040][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.425377][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.878271][ T5057] vivid-002: ================= START STATUS ================= [ 133.957375][ T5058] device syzkaller0 entered promiscuous mode [ 133.966374][ T5057] vivid-002: Radio HW Seek Mode: Bounded [ 133.972088][ T5057] vivid-002: Radio Programmable HW Seek: false [ 134.035477][ T5058] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 134.053766][ T5057] vivid-002: RDS Rx I/O Mode: Block I/O [ 134.109823][ T5057] vivid-002: Generate RBDS Instead of RDS: false [ 134.164581][ T5057] vivid-002: RDS Reception: true [ 134.205326][ T5057] vivid-002: RDS Program Type: 0 inactive [ 134.245728][ T5057] vivid-002: RDS PS Name: inactive [ 134.313662][ T5057] vivid-002: RDS Radio Text: inactive [ 134.335651][ T5057] vivid-002: RDS Traffic Announcement: false inactive [ 134.364550][ T5057] vivid-002: RDS Traffic Program: false inactive [ 134.392946][ T5057] vivid-002: RDS Music: false inactive [ 134.405619][ T5057] vivid-002: ================== END STATUS ================== [ 136.186838][ T5105] vivid-001: ================= START STATUS ================= [ 136.209777][ T5105] vivid-001: Radio HW Seek Mode: Bounded [ 136.247402][ T5105] vivid-001: Radio Programmable HW Seek: false [ 136.269525][ T5105] vivid-001: RDS Rx I/O Mode: Block I/O [ 136.275169][ T5105] vivid-001: Generate RBDS Instead of RDS: false [ 136.303018][ T5105] vivid-001: RDS Reception: true [ 136.324687][ T5105] vivid-001: RDS Program Type: 0 inactive [ 136.333193][ T5105] vivid-001: RDS PS Name: inactive [ 136.350899][ T5105] vivid-001: RDS Radio Text: inactive [ 136.364029][ T5105] vivid-001: RDS Traffic Announcement: false inactive [ 136.384064][ T5105] vivid-001: RDS Traffic Program: false inactive [ 136.404314][ T5105] vivid-001: RDS Music: false inactive [ 136.428840][ T5105] vivid-001: ================== END STATUS ================== [ 137.284687][ T5122] tipc: Enabled bearer , priority 0 [ 137.329582][ T26] audit: type=1326 audit(1787276952.214:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5119 comm="syz.3.217" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb8d9ad20d9 code=0x0 [ 137.331132][ T5122] device syzkaller0 entered promiscuous mode [ 137.473157][ T5122] tipc: Resetting bearer [ 137.502898][ T5121] tipc: Resetting bearer [ 137.565408][ T5121] tipc: Disabling bearer [ 139.435361][ T5152] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 139.529818][ T1107] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 140.125809][ T1107] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 140.135867][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.144991][ T1107] usb 3-1: Product: syz [ 140.149940][ T1107] usb 3-1: Manufacturer: syz [ 140.154679][ T1107] usb 3-1: SerialNumber: syz [ 140.175031][ T1107] usb 3-1: config 0 descriptor?? [ 140.239585][ T5166] jffs2: notice: (5166) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.512209][ T1107] usb 3-1: atusb_control_msg: req 0x10 val 0x0 idx 0x0, error -71 [ 140.530753][ T1107] usb 3-1: Firmware version (0.0) predates our first public release. [ 140.555998][ T1107] usb 3-1: Please update to version 0.2 or newer [ 140.585719][ T1107] usb 3-1: atusb_probe: initialization failed, error = -71 [ 140.599071][ T5177] tipc: Enabled bearer , priority 0 [ 140.611178][ T1107] atusb: probe of 3-1:0.0 failed with error -71 [ 141.039763][ T1107] usb 3-1: USB disconnect, device number 7 [ 141.119395][ T5177] device syzkaller0 entered promiscuous mode [ 141.325826][ T4230] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 142.021018][ T5185] tipc: Resetting bearer [ 142.071298][ T5185] tipc: Disabling bearer [ 142.090596][ T21] tipc: Node number set to 1789846922 [ 142.156043][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 142.177103][ T4230] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x47, skipping [ 142.201792][ T4230] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 142.431750][ T4230] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.451355][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.480251][ T4230] usb 2-1: Product: syz [ 142.492267][ T4230] usb 2-1: Manufacturer: syz [ 142.508074][ T5203] vivid-004: ================= START STATUS ================= [ 142.515894][ T4230] usb 2-1: SerialNumber: syz [ 142.566257][ T5203] vivid-004: Radio HW Seek Mode: Bounded [ 142.588802][ T5207] jffs2: notice: (5207) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 142.624490][ T5203] vivid-004: Radio Programmable HW Seek: false [ 142.643294][ T5203] vivid-004: RDS Rx I/O Mode: Block I/O [ 142.656553][ T5203] vivid-004: Generate RBDS Instead of RDS: false [ 142.677597][ T5203] vivid-004: RDS Reception: true [ 142.704445][ T5203] vivid-004: RDS Program Type: 0 inactive [ 142.719525][ T5203] vivid-004: RDS PS Name: inactive [ 142.752483][ T5203] vivid-004: RDS Radio Text: inactive [ 142.788469][ T5203] vivid-004: RDS Traffic Announcement: false inactive [ 142.814637][ T5203] vivid-004: RDS Traffic Program: false inactive [ 142.831615][ T5203] vivid-004: RDS Music: false inactive [ 142.855161][ T5203] vivid-004: ================== END STATUS ================== [ 143.812488][ T5175] udc-core: couldn't find an available UDC or it's busy [ 143.843185][ T5175] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 144.477154][ T4230] cdc_ncm 2-1:1.0: bind() failure [ 144.626819][ T4230] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 144.675803][ T4230] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 144.716517][ T4230] usbtest: probe of 2-1:1.1 failed with error -71 [ 144.737344][ T4230] usb 2-1: USB disconnect, device number 6 [ 145.277173][ T21] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 145.555767][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 145.587450][ T5244] jffs2: notice: (5244) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 145.688767][ T21] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 145.704318][ T21] usb 5-1: config 0 has no interface number 0 [ 145.723016][ T21] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 145.762247][ T21] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 145.777455][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.796434][ T21] usb 5-1: config 0 descriptor?? [ 145.854209][ T21] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 146.077278][ T5236] udc-core: couldn't find an available UDC or it's busy [ 146.095068][ T5236] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 146.130070][ T21] usb 5-1: USB disconnect, device number 4 [ 146.522319][ T5261] device syzkaller0 entered promiscuous mode [ 146.794587][ T5267] loop2: detected capacity change from 0 to 256 [ 146.844300][ T5272] vivid-000: ================= START STATUS ================= [ 146.887285][ T5267] FAT-fs (loop2): Unrecognized mount option "./file2" or missing value [ 146.904234][ T5272] vivid-000: Radio HW Seek Mode: Bounded [ 146.951823][ T5272] vivid-000: Radio Programmable HW Seek: false [ 147.115756][ T5272] vivid-000: RDS Rx I/O Mode: Block I/O [ 147.121735][ T5272] vivid-000: Generate RBDS Instead of RDS: false [ 147.146824][ T5272] vivid-000: RDS Reception: true [ 148.141561][ T5272] vivid-000: RDS Program Type: 0 inactive [ 148.163657][ T5272] vivid-000: RDS PS Name: inactive [ 148.170418][ T5272] vivid-000: RDS Radio Text: inactive [ 148.198414][ T5282] jffs2: notice: (5282) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 148.233977][ T5272] vivid-000: RDS Traffic Announcement: false inactive [ 148.280722][ T5272] vivid-000: RDS Traffic Program: false inactive [ 148.288431][ T5272] vivid-000: RDS Music: false inactive [ 148.313283][ T5272] vivid-000: ================== END STATUS ================== [ 148.513565][ T5293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.267'. [ 148.551791][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz.0.267'. [ 149.473265][ T5307] syz.2.272 uses obsolete (PF_INET,SOCK_PACKET) [ 149.495971][ T5309] tipc: Started in network mode [ 149.558693][ T5309] tipc: Node identity 1e4baa1a0318, cluster identity 4711 [ 149.605916][ T5309] tipc: Enabled bearer , priority 0 [ 149.646703][ T5307] device syzkaller0 entered promiscuous mode [ 149.662264][ T5313] device syzkaller0 entered promiscuous mode [ 149.726171][ T5309] sch_tbf: peakrate 11 is lower than or equals to rate 2048 ! [ 149.738245][ T5320] jffs2: notice: (5320) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.016974][ T5325] tipc: Resetting bearer [ 150.065786][ T5308] tipc: Resetting bearer [ 150.136462][ T5308] tipc: Disabling bearer [ 150.394381][ T5338] netlink: 8 bytes leftover after parsing attributes in process `syz.3.280'. [ 150.429798][ T5338] netlink: 16 bytes leftover after parsing attributes in process `syz.3.280'. [ 150.456327][ T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 150.586016][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.283'. [ 150.830147][ T5353] loop0: detected capacity change from 0 to 3904 [ 150.837086][ T7] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 150.853825][ T7] usb 3-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 150.877330][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.911937][ T5353] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 150.925730][ T5353] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 150.945204][ T5353] loop0: [ 151.236058][ T5363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 151.299191][ T7] qmi_wwan 3-1:1.0: cdc-wdm0: USB WDM device [ 151.541311][ T7] qmi_wwan 3-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.2-1, WWAN/QMI device, 8a:dc:63:66:6c:18 [ 151.742679][ T26] audit: type=1326 audit(1787276966.624:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 151.781071][ T5381] netlink: 8 bytes leftover after parsing attributes in process `syz.4.291'. [ 151.796609][ T23] usb 3-1: USB disconnect, device number 8 [ 151.818204][ T23] qmi_wwan 3-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.2-1, WWAN/QMI device [ 151.821292][ T5381] netlink: 16 bytes leftover after parsing attributes in process `syz.4.291'. [ 151.865729][ T26] audit: type=1326 audit(1787276966.624:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 151.883663][ T5374] netlink: 'syz.0.290': attribute type 4 has an invalid length. [ 151.992523][ T26] audit: type=1326 audit(1787276966.664:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 152.114482][ T26] audit: type=1326 audit(1787276966.664:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 152.211425][ T26] audit: type=1326 audit(1787276966.664:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 152.263267][ T5374] syz.0.290 (5374) used greatest stack depth: 20976 bytes left [ 152.444658][ T26] audit: type=1326 audit(1787276966.734:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 152.594001][ T5409] loop0: detected capacity change from 0 to 3904 [ 152.606747][ T26] audit: type=1326 audit(1787276966.744:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 152.680088][ T26] audit: type=1326 audit(1787276966.744:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=32 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 152.727861][ T4530] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 152.772253][ T26] audit: type=1326 audit(1787276966.744:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 152.782863][ T4530] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 152.847053][ T4530] loop0: [ 152.866159][ T5409] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 152.895630][ T5409] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 152.899391][ T26] audit: type=1326 audit(1787276966.744:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5373 comm="syz.0.290" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e0274a0d9 code=0x7ffc0000 [ 152.917088][ T5409] loop0: [ 152.945715][ T7] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 153.305977][ T7] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.339367][ T7] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 153.392975][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.760685][ T5445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 153.822531][ T7] qmi_wwan 2-1:1.0: cdc-wdm0: USB WDM device [ 154.893278][ T7] qmi_wwan 2-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.1-1, WWAN/QMI device, 7a:ad:af:3a:8e:af [ 155.140573][ T7] usb 2-1: USB disconnect, device number 7 [ 155.157937][ T7] qmi_wwan 2-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.1-1, WWAN/QMI device [ 156.161836][ T5480] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (39424 ns). Using initial count to start timer. [ 156.525047][ T5490] netlink: 156 bytes leftover after parsing attributes in process `syz.0.312'. [ 158.840816][ T5502] jffs2: notice: (5502) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 159.424596][ T5517] netlink: 80 bytes leftover after parsing attributes in process `syz.2.320'. [ 159.445805][ T7] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 159.855827][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.896057][ T7] usb 2-1: not running at top speed; connect to a high speed hub [ 159.976112][ T7] usb 2-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 159.988566][ T7] usb 2-1: config 5 interface 0 has no altsetting 1 [ 160.071140][ T5530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 160.895199][ T5538] netlink: 156 bytes leftover after parsing attributes in process `syz.4.326'. [ 161.412138][ T5539] jffs2: notice: (5539) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 161.436653][ T7] usb 2-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 161.457538][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.467636][ T7] usb 2-1: Product: syz [ 161.471861][ T7] usb 2-1: Manufacturer: syz [ 161.545503][ T7] usb 2-1: SerialNumber: syz [ 161.800293][ T5508] udc-core: couldn't find an available UDC or it's busy [ 161.816452][ T5508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 161.956072][ T5556] fuse: Bad value for 'fd' [ 162.072120][ T26] kauditd_printk_skb: 47 callbacks suppressed [ 162.072136][ T26] audit: type=1326 audit(1787276976.954:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 162.212890][ T26] audit: type=1326 audit(1787276976.954:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 162.298181][ T7] usb 2-1: USB disconnect, device number 8 [ 162.310893][ T26] audit: type=1326 audit(1787276976.954:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 162.427647][ T26] audit: type=1326 audit(1787276976.954:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 162.555649][ T26] audit: type=1326 audit(1787276976.954:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 162.582529][ T4530] udevd[4530]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:5.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 162.717258][ T26] audit: type=1326 audit(1787276976.954:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 162.870735][ T26] audit: type=1326 audit(1787276976.954:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 163.013052][ T26] audit: type=1326 audit(1787276976.954:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 163.121651][ T26] audit: type=1326 audit(1787276976.954:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 163.260984][ T26] audit: type=1326 audit(1787276976.954:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5507 comm="syz.1.317" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f94b1c9f0d9 code=0x7ffc0000 [ 163.392260][ T5584] jffs2: notice: (5584) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.799100][ T5594] loop0: detected capacity change from 0 to 3904 [ 163.846329][ T7] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 163.869450][ T4530] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 163.880176][ T4530] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 163.887613][ T4530] loop0: [ 163.896587][ T5594] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 163.913653][ T5594] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 163.921229][ T5594] loop0: [ 164.275843][ T7] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.060410][ T7] usb 3-1: not running at top speed; connect to a high speed hub [ 165.145867][ T7] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 165.155820][ T7] usb 3-1: config 5 interface 0 has no altsetting 1 [ 165.321569][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 165.336815][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.345114][ T7] usb 3-1: Product: syz [ 165.349847][ T7] usb 3-1: Manufacturer: syz [ 165.358082][ T7] usb 3-1: SerialNumber: syz [ 165.611375][ T5590] udc-core: couldn't find an available UDC or it's busy [ 165.631777][ T5590] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 165.688773][ T5590] fuse: Bad value for 'fd' [ 165.850630][ T7] usb 3-1: USB disconnect, device number 9 [ 166.067301][ T4530] udevd[4530]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 166.100948][ T5633] jffs2: notice: (5633) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 166.398847][ T5643] loop2: detected capacity change from 0 to 256 [ 166.458273][ T5643] FAT-fs (loop2): Unrecognized mount option "./file2" or missing value [ 167.880619][ T5663] device syzkaller0 entered promiscuous mode [ 168.073310][ T5669] jffs2: notice: (5669) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 168.319353][ T5677] netlink: 88 bytes leftover after parsing attributes in process `syz.0.368'. [ 168.441788][ T5683] syz.4.367 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 168.600257][ T5681] loop2: detected capacity change from 0 to 256 [ 168.867293][ T5681] FAT-fs (loop2): Unrecognized mount option "./file2" or missing value [ 170.525006][ T5695] device syzkaller0 entered promiscuous mode [ 170.984324][ T5718] device syzkaller0 entered promiscuous mode [ 170.988793][ T5715] jffs2: notice: (5715) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 171.293945][ T5727] netlink: 52 bytes leftover after parsing attributes in process `syz.2.380'. [ 171.635729][ T23] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 171.986195][ T23] usb 5-1: Using ep0 maxpacket: 8 [ 172.165930][ T23] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 172.179058][ T23] usb 5-1: config 0 has no interface number 0 [ 172.190331][ T23] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 172.202860][ T23] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 172.284279][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.326975][ T23] usb 5-1: config 0 descriptor?? [ 172.391410][ T23] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 172.484655][ T5744] netlink: 44 bytes leftover after parsing attributes in process `syz.2.387'. [ 172.594491][ T5724] udc-core: couldn't find an available UDC or it's busy [ 172.607885][ T5724] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 172.662058][ T7] usb 5-1: USB disconnect, device number 5 [ 172.890276][ T5758] jffs2: notice: (5758) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 174.220494][ T5770] netlink: 52 bytes leftover after parsing attributes in process `syz.4.395'. [ 175.721550][ T5796] capability: warning: `syz.4.401' uses deprecated v2 capabilities in a way that may be insecure [ 176.837319][ T5814] netlink: 52 bytes leftover after parsing attributes in process `syz.0.408'. [ 177.485056][ T5825] netlink: 64 bytes leftover after parsing attributes in process `syz.1.412'. [ 177.751218][ T5831] loop0: detected capacity change from 0 to 2049 [ 177.859406][ T5832] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 177.925365][ T5832] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 177.965602][ T5832] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 177.972313][ T5832] loop0: [ 178.507185][ T5844] loop0: detected capacity change from 0 to 3904 [ 178.538224][ T4530] loop0: [ 178.697089][ T5844] loop0: [ 179.523880][ T5853] netlink: 44 bytes leftover after parsing attributes in process `syz.1.421'. [ 179.597039][ T5855] xt_nfacct: accounting object `' does not exist [ 179.765632][ T4334] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 180.185887][ T4334] usb 3-1: unable to get BOS descriptor or descriptor too short [ 180.239255][ T5861] jffs2: notice: (5861) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 180.256021][ T4334] usb 3-1: not running at top speed; connect to a high speed hub [ 180.340296][ T4334] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 180.351573][ T5864] device syzkaller0 entered promiscuous mode [ 180.363070][ T4334] usb 3-1: config 5 interface 0 has no altsetting 1 [ 180.551739][ T4334] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 180.564460][ T4334] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.583061][ T4334] usb 3-1: Product: syz [ 180.589575][ T4334] usb 3-1: Manufacturer: syz [ 180.601892][ T4334] usb 3-1: SerialNumber: syz [ 180.853266][ T5851] udc-core: couldn't find an available UDC or it's busy [ 180.863935][ T5851] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 180.968191][ T5851] fuse: Bad value for 'fd' [ 180.999555][ T26] kauditd_printk_skb: 36 callbacks suppressed [ 180.999570][ T26] audit: type=1326 audit(1787276995.884:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.2.420" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89b9560d9 code=0x7ffc0000 [ 181.036516][ T26] audit: type=1326 audit(1787276995.924:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5850 comm="syz.2.420" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89b9560d9 code=0x7ffc0000 [ 181.174583][ T4334] usb 3-1: USB disconnect, device number 10 [ 181.469610][ T4530] udevd[4530]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 183.828653][ T5904] jffs2: notice: (5904) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.916462][ T5918] netlink: 64 bytes leftover after parsing attributes in process `syz.1.440'. [ 184.075719][ T4466] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 184.136593][ T4278] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -2). You can use /scripts/get_dvb_firmware to get the firmware [ 184.141134][ T4471] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 184.159125][ T4278] dvb_usb_az6027: probe of 4-1:0.0 failed with error -2 [ 184.179006][ T4278] usb 4-1: USB disconnect, device number 4 [ 184.187417][ T4471] dvb_usb_az6027: probe of 1-1:0.0 failed with error -110 [ 184.200567][ T4471] usb 1-1: USB disconnect, device number 4 [ 184.436439][ T4466] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.447572][ T4466] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 184.565736][ T4471] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 184.615823][ T4466] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.625826][ T4466] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.634037][ T4466] usb 5-1: Product: syz [ 184.635740][ T4278] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 184.639528][ T4466] usb 5-1: Manufacturer: syz [ 184.651149][ T4466] usb 5-1: SerialNumber: syz [ 184.707237][ T4466] cdc_mbim 5-1:1.0: skipping garbage [ 184.919093][ T5907] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.065712][ T4278] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 185.107003][ T4471] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 185.133511][ T4471] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.222560][ T4471] usb 1-1: Product: syz [ 185.253281][ T4471] usb 1-1: Manufacturer: syz [ 185.276869][ T4471] usb 1-1: SerialNumber: syz [ 185.353214][ T4471] usb 1-1: config 0 descriptor?? [ 185.633263][ T5907] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 185.746042][ T4466] cdc_mbim 5-1:1.0: setting tx_max = 16384 [ 185.762444][ T4278] usb 4-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x47, skipping [ 185.773094][ T4278] usb 4-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 185.796829][ T4466] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device [ 185.847324][ T4230] usb 1-1: USB disconnect, device number 5 [ 185.881209][ T4466] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 52:2f:b4:f6:7a:29 [ 185.986037][ T4278] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.996883][ T4278] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.004988][ T4278] usb 4-1: Product: syz [ 186.009639][ T4278] usb 4-1: Manufacturer: syz [ 186.014290][ T4278] usb 4-1: SerialNumber: syz [ 186.047102][ T5939] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 186.075796][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 186.083176][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 186.095559][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 186.102306][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 186.115557][ C0] cdc_mbim 5-1:1.0: nonzero urb status received: -71 [ 186.122310][ C0] cdc_mbim 5-1:1.0: wdm_int_callback - 0 bytes [ 186.144689][ T4230] usb 5-1: USB disconnect, device number 6 [ 186.151554][ T4230] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM [ 186.187418][ T1107] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 186.615990][ T1107] usb 3-1: Using ep0 maxpacket: 16 [ 186.786651][ T1107] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 186.846898][ T1107] usb 3-1: config 0 has no interface number 0 [ 187.235924][ T1107] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 187.292900][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.302045][ T1107] usb 3-1: Product: syz [ 187.312463][ T1107] usb 3-1: Manufacturer: syz [ 187.365783][ T1107] usb 3-1: SerialNumber: syz [ 187.377162][ T5926] udc-core: couldn't find an available UDC or it's busy [ 187.405176][ T1107] usb 3-1: config 0 descriptor?? [ 187.414228][ T5926] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 187.482899][ T1107] hub 3-1:0.132: bad descriptor, ignoring hub [ 187.496904][ T1107] hub: probe of 3-1:0.132 failed with error -5 [ 187.536220][ T4278] cdc_ncm 4-1:1.0: bind() failure [ 187.560786][ T1107] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input13 [ 187.574889][ T4278] cdc_ncm: probe of 4-1:1.1 failed with error -71 [ 187.615804][ T4278] cdc_mbim: probe of 4-1:1.1 failed with error -71 [ 187.663420][ T4278] usbtest: probe of 4-1:1.1 failed with error -71 [ 187.718337][ T4278] usb 4-1: USB disconnect, device number 5 [ 187.995985][ T4466] usb 3-1: USB disconnect, device number 11 [ 189.816624][ T6001] xt_nfacct: accounting object `sy' does not exist [ 190.115657][ T4466] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 190.206649][ T6012] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 190.229462][ T6012] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 190.395801][ T4278] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 190.496602][ T4466] usb 3-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 190.525210][ T4466] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.543313][ T4466] usb 3-1: config 0 interface 0 has no altsetting 0 [ 190.551881][ T4466] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 190.552813][ T6022] xt_nfacct: accounting object `syz' does not exist [ 190.561377][ T4466] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.601661][ T4466] usb 3-1: config 0 descriptor?? [ 190.625848][ T5998] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 190.685632][ T4278] usb 5-1: Using ep0 maxpacket: 16 [ 190.690967][ T4230] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 190.836244][ T4278] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 190.853045][ T4278] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 190.880890][ T5998] udc-core: couldn't find an available UDC or it's busy [ 190.894225][ T5998] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 190.901992][ T4278] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.913361][ T4278] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 190.915991][ T4471] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 190.930325][ T4278] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.955295][ T4278] usb 5-1: config 0 descriptor?? [ 191.119314][ T4230] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 191.133800][ T4230] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 191.154044][ T4230] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.188947][ T4471] usb 2-1: Using ep0 maxpacket: 16 [ 191.197804][ T4466] kye 0003:0458:501A.0002: unknown main item tag 0x7 [ 191.226548][ T4466] kye 0003:0458:501A.0002: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0 [ 191.245746][ T4466] kye 0003:0458:501A.0002: tablet-enabling feature report not found [ 191.265826][ T4466] kye 0003:0458:501A.0002: tablet enabling failed [ 191.305784][ T4471] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 191.314020][ T4471] usb 2-1: config 0 has no interface number 0 [ 191.325748][ T4278] usbhid 5-1:0.0: can't add hid device: -71 [ 191.331743][ T4278] usbhid: probe of 5-1:0.0 failed with error -71 [ 191.366682][ T4278] usb 5-1: USB disconnect, device number 7 [ 191.472288][ T4230] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 191.486143][ T4466] usb 3-1: USB disconnect, device number 12 [ 191.525878][ T4471] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 191.542983][ T6025] fido_id[6025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 191.555964][ T4471] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.565222][ T4471] usb 2-1: Product: syz [ 191.585818][ T4471] usb 2-1: Manufacturer: syz [ 191.595823][ T4471] usb 2-1: SerialNumber: syz [ 191.612234][ T4471] usb 2-1: config 0 descriptor?? [ 191.656576][ T4471] hub 2-1:0.132: bad descriptor, ignoring hub [ 191.675624][ T4471] hub: probe of 2-1:0.132 failed with error -5 [ 191.689215][ T4230] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 56:78:7e:0e:65:d2 [ 191.711149][ T4471] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input14 [ 191.923031][ T4230] usb 1-1: USB disconnect, device number 6 [ 192.001490][ T4230] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 192.116130][ T4470] usb 2-1: USB disconnect, device number 9 [ 193.270905][ T6039] jffs2: notice: (6039) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 193.546301][ T4230] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 193.945888][ T4230] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 193.985761][ T7] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 193.997612][ T4230] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x47, skipping [ 194.059748][ T4230] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 194.215546][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 194.382303][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.388968][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.465900][ T4470] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 194.525662][ T4230] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 194.980542][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.988676][ T4230] usb 2-1: Product: syz [ 194.992898][ T4230] usb 2-1: Manufacturer: syz [ 194.996153][ T7] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 194.997812][ T4230] usb 2-1: SerialNumber: syz [ 195.081731][ T7] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 195.141215][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.355746][ T4278] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 195.395696][ T4470] usb 5-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 195.410725][ T4470] usb 5-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 195.424577][ T4470] usb 5-1: config 0 interface 0 has no altsetting 0 [ 195.434401][ T7] qmi_wwan 1-1:1.0: cdc-wdm0: USB WDM device [ 195.442958][ T4470] usb 5-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 195.459208][ T4470] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.472208][ T4470] usb 5-1: config 0 descriptor?? [ 195.498194][ T6078] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 195.635726][ T4278] usb 3-1: Using ep0 maxpacket: 32 [ 195.646784][ T7] qmi_wwan 1-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.0-1, WWAN/QMI device, 76:d6:42:1c:c4:56 [ 195.655787][ T23] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 195.701729][ T4278] usb 3-1: no configurations [ 195.706685][ T4278] usb 3-1: can't read configurations, error -22 [ 195.731392][ T6078] udc-core: couldn't find an available UDC or it's busy [ 195.738949][ T6078] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 195.865692][ T4278] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 195.871528][ T7] usb 1-1: USB disconnect, device number 7 [ 195.887733][ T7] qmi_wwan 1-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.0-1, WWAN/QMI device [ 195.956747][ T6051] udc-core: couldn't find an available UDC or it's busy [ 195.979049][ T6051] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.001147][ T4470] kye 0003:0458:501A.0003: unknown main item tag 0x7 [ 196.027983][ T4470] kye 0003:0458:501A.0003: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.4-1/input0 [ 196.036452][ T4230] cdc_ncm 2-1:1.0: bind() failure [ 196.041948][ T4470] kye 0003:0458:501A.0003: tablet-enabling feature report not found [ 196.052586][ T4470] kye 0003:0458:501A.0003: tablet enabling failed [ 196.057490][ T23] usb 4-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 196.087627][ T4230] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 196.094574][ T4230] cdc_ncm 2-1:1.1: bind() failure [ 196.108898][ T23] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.128110][ T23] usb 4-1: config 0 interface 0 has no altsetting 0 [ 196.134807][ T23] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 196.155175][ T4230] usb 2-1: USB disconnect, device number 10 [ 196.182166][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.195548][ T4278] usb 3-1: Using ep0 maxpacket: 32 [ 196.232737][ T23] usb 4-1: config 0 descriptor?? [ 196.265999][ T6092] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 196.266067][ T4278] usb 3-1: no configurations [ 196.296450][ T4278] usb 3-1: can't read configurations, error -22 [ 196.306374][ T4278] usb usb3-port1: attempt power cycle [ 196.321783][ T21] usb 5-1: USB disconnect, device number 8 [ 196.456151][ T4230] Bluetooth: hci4: command 0x0406 tx timeout [ 196.462251][ T4230] Bluetooth: hci3: command 0x0406 tx timeout [ 196.477246][ T4230] Bluetooth: hci1: command 0x0406 tx timeout [ 196.483593][ T4230] Bluetooth: hci2: command 0x0406 tx timeout [ 196.501092][ T6092] udc-core: couldn't find an available UDC or it's busy [ 196.510745][ T4230] Bluetooth: hci0: command 0x0406 tx timeout [ 196.521724][ T6092] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 196.767763][ T23] kye 0003:0458:501A.0004: unknown main item tag 0x7 [ 196.785655][ T4278] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 196.802883][ T23] kye 0003:0458:501A.0004: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.3-1/input0 [ 196.851339][ T23] kye 0003:0458:501A.0004: tablet-enabling feature report not found [ 196.876143][ T23] kye 0003:0458:501A.0004: tablet enabling failed [ 196.885296][ T6139] loop0: detected capacity change from 0 to 4095 [ 196.905819][ T4278] usb 3-1: Using ep0 maxpacket: 32 [ 196.946148][ T4278] usb 3-1: no configurations [ 196.985731][ T4278] usb 3-1: can't read configurations, error -22 [ 197.013864][ T6143] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 197.027425][ T23] usb 4-1: USB disconnect, device number 6 [ 197.067124][ T6143] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 197.095610][ T6143] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 197.103872][ T6143] loop0: [ 197.173217][ T6144] fido_id[6144]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 197.196030][ T4278] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 197.305906][ T4278] usb 3-1: Using ep0 maxpacket: 32 [ 197.345793][ T4278] usb 3-1: no configurations [ 197.350433][ T4278] usb 3-1: can't read configurations, error -22 [ 197.374462][ T4278] usb usb3-port1: unable to enumerate USB device [ 198.875655][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 199.185951][ T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 199.245711][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 199.269235][ T23] usb 4-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 199.293510][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.302842][ T4278] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 199.325814][ T4230] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 199.361015][ T23] as10x_usb: device has been detected [ 199.388589][ T23] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 199.441472][ T23] usb 4-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 199.518555][ T23] as10x_usb: error during firmware upload part1 [ 199.528244][ T23] Registered device Abilis Systems DVB-Titan [ 199.545671][ T4278] usb 2-1: Using ep0 maxpacket: 16 [ 199.560465][ T6154] udc-core: couldn't find an available UDC or it's busy [ 199.570325][ T6154] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 199.616516][ T7] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 199.640061][ T7] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x47, skipping [ 199.662924][ T7] usb 5-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 199.696183][ T4278] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 199.711977][ T4278] usb 2-1: config 0 has no interface number 0 [ 199.725794][ T4230] usb 3-1: unable to get BOS descriptor or descriptor too short [ 199.775943][ T4230] usb 3-1: not running at top speed; connect to a high speed hub [ 199.820402][ T6154] block device autoloading is deprecated and will be removed. [ 199.885825][ T4230] usb 3-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 199.885871][ T7] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 199.905846][ T4278] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 199.923201][ T4230] usb 3-1: config 5 interface 0 has no altsetting 1 [ 199.923200][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.923230][ T7] usb 5-1: Product: syz [ 199.952452][ T4278] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.961448][ T7] usb 5-1: Manufacturer: syz [ 199.968970][ T7] usb 5-1: SerialNumber: syz [ 199.983608][ T4278] usb 2-1: Product: syz [ 199.988002][ T4278] usb 2-1: Manufacturer: syz [ 199.992819][ T4278] usb 2-1: SerialNumber: syz [ 200.008928][ T4278] usb 2-1: config 0 descriptor?? [ 200.087148][ T4278] hub 2-1:0.132: bad descriptor, ignoring hub [ 200.136011][ T4230] usb 3-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 200.145188][ T4230] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.155707][ T4278] hub: probe of 2-1:0.132 failed with error -5 [ 200.173099][ T4230] usb 3-1: Product: syz [ 200.177481][ T4230] usb 3-1: Manufacturer: syz [ 200.182114][ T4230] usb 3-1: SerialNumber: syz [ 200.187116][ T4278] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input15 [ 200.364384][ T6179] loop0: detected capacity change from 0 to 4095 [ 200.407669][ T4656] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 200.417265][ T4656] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 200.429388][ T4656] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 200.440970][ T4656] loop0: [ 200.447503][ T6179] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 200.459556][ T6179] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 200.468189][ T6179] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 200.474022][ T6166] udc-core: couldn't find an available UDC or it's busy [ 200.477191][ T6179] loop0: [ 200.493958][ T6166] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.551531][ T4466] usb 2-1: USB disconnect, device number 11 [ 200.678723][ T6162] udc-core: couldn't find an available UDC or it's busy [ 200.701103][ T7] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 200.713517][ T7] cdc_ncm 5-1:1.0: bind() failure [ 200.732699][ T6162] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 200.769637][ T7] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 200.777667][ T7] cdc_ncm 5-1:1.1: bind() failure [ 200.793983][ T7] usb 5-1: USB disconnect, device number 9 [ 200.962067][ T4230] usb 3-1: USB disconnect, device number 18 [ 201.297990][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:5.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 201.555653][ T4466] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 201.605936][ T21] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 201.666246][ T7] usb 4-1: USB disconnect, device number 7 [ 201.720976][ T7] Unregistered device Abilis Systems DVB-Titan [ 201.724593][ T7] as10x_usb: device has been disconnected [ 201.805905][ T4466] usb 2-1: Using ep0 maxpacket: 32 [ 201.845831][ T4466] usb 2-1: no configurations [ 201.850610][ T4466] usb 2-1: can't read configurations, error -22 [ 201.855855][ T21] usb 3-1: Using ep0 maxpacket: 16 [ 201.958597][ T6200] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 201.958597][ T6200] The task syz.4.511 (6200) triggered the difference, watch for misbehavior. [ 201.977172][ T21] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 201.987090][ T21] usb 3-1: config 0 has no interface number 0 [ 202.005621][ T4466] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 202.145717][ T7] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 202.150767][ T21] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 202.162804][ T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.171332][ T21] usb 3-1: Product: syz [ 202.175868][ T21] usb 3-1: Manufacturer: syz [ 202.180710][ T21] usb 3-1: SerialNumber: syz [ 202.188459][ T21] usb 3-1: config 0 descriptor?? [ 202.227637][ T21] hub 3-1:0.132: bad descriptor, ignoring hub [ 202.234158][ T21] hub: probe of 3-1:0.132 failed with error -5 [ 202.243978][ T21] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input16 [ 202.255777][ T4466] usb 2-1: Using ep0 maxpacket: 32 [ 202.315827][ T4466] usb 2-1: no configurations [ 202.320737][ T4466] usb 2-1: can't read configurations, error -22 [ 202.331785][ T4466] usb usb2-port1: attempt power cycle [ 202.546016][ T7] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 202.557215][ T7] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 202.745885][ T7] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 202.755029][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.763298][ T4466] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 202.775453][ T7] usb 4-1: Product: syz [ 202.779762][ T7] usb 4-1: Manufacturer: syz [ 202.784388][ T7] usb 4-1: SerialNumber: syz [ 202.849456][ T7] cdc_mbim 4-1:1.0: skipping garbage [ 202.866012][ T4466] usb 2-1: Using ep0 maxpacket: 32 [ 202.905961][ T4466] usb 2-1: no configurations [ 202.907028][ T4230] usb 3-1: USB disconnect, device number 19 [ 202.910616][ T4466] usb 2-1: can't read configurations, error -22 [ 203.050987][ T6198] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 203.065673][ T4466] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 203.155826][ T4466] usb 2-1: Using ep0 maxpacket: 32 [ 203.195927][ T4466] usb 2-1: no configurations [ 203.200578][ T4466] usb 2-1: can't read configurations, error -22 [ 203.207250][ T4466] usb usb2-port1: unable to enumerate USB device [ 203.737073][ T6198] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 204.153034][ T7] cdc_mbim 4-1:1.0: setting tx_max = 16384 [ 204.166671][ T7] cdc_mbim 4-1:1.0: cdc-wdm0: USB WDM device [ 204.181806][ T7] cdc_mbim 4-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.3-1, CDC MBIM, fe:32:cc:a5:7b:33 [ 204.199433][ T7] usb 4-1: USB disconnect, device number 8 [ 204.209368][ T7] cdc_mbim 4-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.3-1, CDC MBIM [ 207.240453][ T6261] loop0: detected capacity change from 0 to 2049 [ 207.321034][ T6261] loop0: [ 207.383835][ T3558] loop0: [ 207.717513][ T6265] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 207.777808][ T6265] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 207.882442][ T6258] loop1: detected capacity change from 0 to 32768 [ 208.318155][ T6258] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.529 (6258) [ 208.485512][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #38a!!! [ 208.582366][ T6258] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 208.595820][ T6283] loop4: detected capacity change from 0 to 256 [ 208.602569][ T6258] BTRFS info (device loop1): setting nodatasum [ 208.608972][ T6258] BTRFS info (device loop1): force zlib compression, level 3 [ 208.617463][ T6258] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 208.627216][ T6258] BTRFS info (device loop1): use lzo compression, level 0 [ 208.634384][ T6258] BTRFS info (device loop1): turning on flush-on-commit [ 208.641528][ T6258] BTRFS info (device loop1): enabling auto defrag [ 208.648089][ T6258] BTRFS info (device loop1): max_inline at 4096 [ 208.656057][ T6258] BTRFS info (device loop1): using free space tree [ 208.662701][ T6258] BTRFS info (device loop1): has skinny extents [ 208.670138][ T6283] FAT-fs (loop4): Unrecognized mount option "./file2" or missing value [ 209.074533][ T6258] BTRFS info (device loop1): enabling ssd optimizations [ 209.225589][ T7] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 209.505593][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 209.655835][ T7] usb 4-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 209.697911][ T7] usb 4-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 209.777165][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 209.824976][ T7] usb 4-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 209.876651][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 209.943740][ T7] usb 4-1: config 0 descriptor?? [ 210.345959][ T7] usbhid 4-1:0.0: can't add hid device: -71 [ 210.353883][ T7] usbhid: probe of 4-1:0.0 failed with error -71 [ 210.375098][ T7] usb 4-1: USB disconnect, device number 9 [ 213.765832][ T4266] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (4266) [ 213.820366][ T6331] loop2: detected capacity change from 0 to 32768 [ 214.063482][ T6353] jffs2: notice: (6353) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.695881][ T4471] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 215.065884][ T4471] usb 1-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid maxpacket 1056, setting to 64 [ 215.079339][ T4471] usb 1-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.107345][ T4471] usb 1-1: config 0 interface 0 has no altsetting 0 [ 215.122324][ T4471] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00 [ 215.145751][ T7] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 215.160334][ T4471] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.201321][ T4471] usb 1-1: config 0 descriptor?? [ 215.251083][ T6362] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 215.379113][ T6371] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 215.403976][ T6371] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 215.415656][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 215.556606][ T7] usb 5-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 215.592332][ T7] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 215.617847][ T7] usb 5-1: config 0 interface 0 has no altsetting 0 [ 215.634686][ T7] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 215.661490][ T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.701050][ T7] usb 5-1: config 0 descriptor?? [ 215.709198][ T4471] kye 0003:0458:501A.0005: unknown main item tag 0x7 [ 215.735102][ T4471] kye 0003:0458:501A.0005: hidraw0: USB HID v0.0c Device [HID 0458:501a] on usb-dummy_hcd.0-1/input0 [ 215.762793][ T4471] kye 0003:0458:501A.0005: tablet-enabling feature report not found [ 215.789124][ T4471] kye 0003:0458:501A.0005: tablet enabling failed [ 215.954617][ T4471] usb 1-1: USB disconnect, device number 8 [ 215.973913][ T6376] fido_id[6376]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 216.089170][ T7] usbhid 5-1:0.0: can't add hid device: -71 [ 216.099088][ T7] usbhid: probe of 5-1:0.0 failed with error -71 [ 216.127542][ T7] usb 5-1: USB disconnect, device number 10 [ 216.326285][ T6375] loop2: detected capacity change from 0 to 32768 [ 216.633296][ T6383] loop0: detected capacity change from 0 to 2049 [ 216.738566][ T6383] loop0: [ 216.825599][ T6339] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 217.209670][ T6339] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.233098][ T6339] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 217.415959][ T6339] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 217.462894][ T6339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.489221][ T6339] usb 1-1: Product: syz [ 217.507278][ T6339] usb 1-1: Manufacturer: syz [ 217.519742][ T6339] usb 1-1: SerialNumber: syz [ 217.587078][ T6339] cdc_mbim 1-1:1.0: skipping garbage [ 217.791044][ T6381] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 217.855283][ T6397] jffs2: notice: (6397) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 218.237031][ T6395] loop1: detected capacity change from 0 to 32768 [ 218.265772][ T6339] cdc_mbim 1-1:1.0: failed GET_NTB_PARAMETERS [ 218.279395][ T6339] cdc_mbim 1-1:1.0: bind() failure [ 218.326146][ T6339] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 218.356137][ T6339] cdc_ncm 1-1:1.1: bind() failure [ 218.399671][ T6339] usb 1-1: USB disconnect, device number 9 [ 218.449412][ T6395] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 218.485029][ T6395] BTRFS info (device loop1): setting nodatasum [ 218.504484][ T6395] BTRFS info (device loop1): force zlib compression, level 3 [ 218.523446][ T6395] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 218.575750][ T6395] BTRFS info (device loop1): use lzo compression, level 0 [ 218.620366][ T6395] BTRFS info (device loop1): turning on flush-on-commit [ 218.658492][ T6395] BTRFS info (device loop1): enabling auto defrag [ 218.665004][ T6395] BTRFS info (device loop1): max_inline at 4096 [ 218.731829][ T6395] BTRFS info (device loop1): using free space tree [ 218.765316][ T6395] BTRFS info (device loop1): has skinny extents [ 219.893457][ T6395] BTRFS info (device loop1): enabling ssd optimizations [ 220.165849][ T6338] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 220.692219][ T6338] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 220.798400][ T6442] netlink: 100 bytes leftover after parsing attributes in process `syz.3.570'. [ 221.461761][ T6338] usb 1-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x47, skipping [ 221.472427][ T6338] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 221.695919][ T6338] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 221.704994][ T6338] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.785587][ T6338] usb 1-1: Product: syz [ 221.815096][ T6338] usb 1-1: Manufacturer: syz [ 221.830643][ T6338] usb 1-1: SerialNumber: syz [ 222.225745][ T4334] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 222.559469][ T6437] udc-core: couldn't find an available UDC or it's busy [ 222.566626][ T6338] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 222.577489][ T6338] cdc_ncm 1-1:1.0: bind() failure [ 222.601848][ T6437] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.621232][ T6338] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 222.635820][ T4334] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.664711][ T6338] cdc_ncm 1-1:1.1: bind() failure [ 222.705951][ T4334] usb 5-1: not running at top speed; connect to a high speed hub [ 222.725945][ T6338] usb 1-1: USB disconnect, device number 10 [ 222.785789][ T4334] usb 5-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 222.809140][ T4334] usb 5-1: config 5 interface 0 has no altsetting 1 [ 222.995843][ T4334] usb 5-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice=2a.70 [ 223.014242][ T4334] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.032047][ T4334] usb 5-1: Product: syz [ 223.045449][ T4334] usb 5-1: Manufacturer: syz [ 223.059875][ T4334] usb 5-1: SerialNumber: syz [ 223.226975][ T6338] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 223.776042][ T4334] usb 5-1: USB disconnect, device number 11 [ 224.282531][ T4266] udevd[4266]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:5.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 224.475822][ T6338] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 248, changing to 11 [ 224.502275][ T6338] usb 2-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x47, skipping [ 224.513537][ T6338] usb 2-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 224.681647][ T6337] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 224.719113][ T6338] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 224.744418][ T6338] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.770137][ T6338] usb 2-1: Product: syz [ 224.778057][ T6338] usb 2-1: Manufacturer: syz [ 224.794021][ T6338] usb 2-1: SerialNumber: syz [ 224.836375][ T26] audit: type=1326 audit(1787277039.724:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6494 comm="syz.0.587" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3e0274a0d9 code=0x0 [ 225.451073][ T6337] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 225.472177][ T6337] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 225.500341][ T6337] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.617635][ T6337] option 5-1:1.0: GSM modem (1-port) converter detected [ 225.642199][ T6337] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 225.734182][ T6464] udc-core: couldn't find an available UDC or it's busy [ 225.745608][ T6464] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.756157][ T6338] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 225.762270][ T6338] cdc_ncm 2-1:1.0: bind() failure [ 225.816750][ T6338] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 225.823616][ T6338] cdc_ncm 2-1:1.1: bind() failure [ 225.841409][ T6338] usb 2-1: USB disconnect, device number 16 [ 225.885681][ T4470] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 226.245650][ T4470] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 226.265600][ T4470] usb 1-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 226.274793][ T4470] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.330033][ T4470] as10x_usb: device has been detected [ 226.342194][ T4470] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 226.380383][ T4470] usb 1-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 226.417650][ T4470] as10x_usb: error during firmware upload part1 [ 226.432388][ T4470] Registered device Abilis Systems DVB-Titan [ 226.591452][ T6507] udc-core: couldn't find an available UDC or it's busy [ 226.604672][ T6507] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 227.617250][ T6338] usb 5-1: USB disconnect, device number 12 [ 227.654574][ T6530] kvm: vcpu 0: requested 39424 ns lapic timer period limited to 200000 ns [ 227.688329][ T6530] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 227.694467][ T6338] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 227.742512][ T6532] netlink: 200 bytes leftover after parsing attributes in process `syz.1.597'. [ 227.761237][ T6338] option 5-1:1.0: device disconnected [ 227.981992][ T26] audit: type=1326 audit(1787277042.834:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6538 comm="syz.1.599" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f94b1c9f0d9 code=0x0 [ 228.219549][ T6545] netlink: 100 bytes leftover after parsing attributes in process `syz.4.598'. [ 228.841714][ T6438] usb 1-1: USB disconnect, device number 11 [ 228.998385][ T6438] Unregistered device Abilis Systems DVB-Titan [ 229.034052][ T6438] as10x_usb: device has been disconnected [ 229.455753][ T6335] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 229.763469][ T6335] usb 2-1: Using ep0 maxpacket: 16 [ 230.085952][ T6335] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 230.118265][ T6335] usb 2-1: config 0 has no interface number 0 [ 230.336990][ T6335] usb 2-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 230.447728][ T6335] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.591313][ T6335] usb 2-1: Product: syz [ 230.715035][ T6335] usb 2-1: Manufacturer: syz [ 230.731162][ T6335] usb 2-1: SerialNumber: syz [ 230.760387][ T6335] usb 2-1: config 0 descriptor?? [ 230.826681][ T6335] hub 2-1:0.132: bad descriptor, ignoring hub [ 230.845640][ T6335] hub: probe of 2-1:0.132 failed with error -5 [ 230.901718][ T6335] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.132/input/input17 [ 231.212634][ T6554] loop4: detected capacity change from 0 to 32768 [ 231.274051][ T6554] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.603 (6554) [ 231.316535][ T6554] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 231.333652][ T6554] BTRFS info (device loop4): setting nodatasum [ 231.350527][ T6554] BTRFS info (device loop4): force zlib compression, level 3 [ 231.366095][ T6554] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 231.406589][ T6554] BTRFS info (device loop4): use lzo compression, level 0 [ 231.425727][ T6554] BTRFS info (device loop4): turning on flush-on-commit [ 231.454018][ T6554] BTRFS info (device loop4): enabling auto defrag [ 231.474395][ T6554] BTRFS info (device loop4): max_inline at 4096 [ 231.485764][ T4334] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 231.504759][ T6554] BTRFS info (device loop4): using free space tree [ 231.514884][ T6554] BTRFS info (device loop4): has skinny extents [ 231.619134][ T6554] BTRFS info (device loop4): enabling ssd optimizations [ 231.705570][ T6335] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 231.719027][ T6571] loop0: detected capacity change from 0 to 32768 [ 231.725697][ T4334] usb 3-1: Using ep0 maxpacket: 16 [ 231.809239][ T6571] BTRFS warning: duplicate device /dev/loop0 devid 1 generation 8 scanned by syz.0.608 (6571) [ 231.850345][ T4334] usb 3-1: too many endpoints for config 0 interface 0 altsetting 16: 254, using maximum allowed: 30 [ 231.863200][ T4334] usb 3-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 231.878498][ T4334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 231.885182][ T4334] usb 3-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 231.913528][ T4334] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.962118][ T4334] usb 3-1: config 0 descriptor?? [ 232.015718][ T6335] usb 4-1: Using ep0 maxpacket: 16 [ 232.074708][ T4530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4530) [ 232.146191][ T6335] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 232.164034][ T6335] usb 4-1: config 0 has no interface number 0 [ 232.388183][ T6610] netlink: 100 bytes leftover after parsing attributes in process `syz.0.614'. [ 233.055830][ T6335] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 233.063870][ T4334] usbhid 3-1:0.0: can't add hid device: -71 [ 233.106620][ T4334] usbhid: probe of 3-1:0.0 failed with error -71 [ 233.132011][ T6335] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.140297][ T6335] usb 4-1: Product: syz [ 233.144514][ T6335] usb 4-1: Manufacturer: syz [ 233.149215][ T6335] usb 4-1: SerialNumber: syz [ 233.165869][ T6335] usb 4-1: config 0 descriptor?? [ 233.172955][ T4334] usb 3-1: USB disconnect, device number 20 [ 233.232490][ T6335] hub 4-1:0.132: bad descriptor, ignoring hub [ 233.249440][ T6335] hub: probe of 4-1:0.132 failed with error -5 [ 233.258330][ T6335] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.132/input/input18 [ 235.335961][ T6619] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 237.076176][ T6338] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 237.084519][ T6337] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 237.355933][ T6337] usb 3-1: Using ep0 maxpacket: 32 [ 237.449756][ T6336] usb 2-1: USB disconnect, device number 17 [ 237.496739][ T6337] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.528083][ T6338] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 237.549233][ T6337] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 237.582493][ T6338] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 237.635991][ T6337] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 237.684012][ T6338] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 237.714516][ T6337] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.743136][ T6338] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.763197][ T6337] usb 3-1: config 0 descriptor?? [ 238.035829][ T6338] qmi_wwan: probe of 5-1:1.0 failed with error -22 [ 238.508311][ T6678] device syzkaller0 entered promiscuous mode [ 239.078050][ T3543] usb 4-1: reset high-speed USB device number 10 using dummy_hcd [ 239.145783][ T3543] usb 4-1: device reset changed ep0 maxpacket size! [ 239.176382][ T6438] usb 4-1: USB disconnect, device number 10 [ 239.375615][ T6438] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 239.673366][ T6693] netlink: 12 bytes leftover after parsing attributes in process `syz.1.636'. [ 239.779345][ T6438] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.827811][ T6438] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 239.854452][ T6438] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 240.023668][ T6338] usb 5-1: USB disconnect, device number 13 [ 240.030356][ T6335] usb 3-1: USB disconnect, device number 21 [ 241.085484][ C0] sched: RT throttling activated [ 241.645790][ T6438] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 241.665589][ T6438] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.673662][ T6438] usb 4-1: Product: syz [ 242.073290][ T6438] usb 4-1: Manufacturer: syz [ 242.078323][ T6438] usb 4-1: SerialNumber: syz [ 242.303283][ T6438] usb 4-1: can't set config #1, error -71 [ 242.314818][ T6438] usb 4-1: USB disconnect, device number 11 [ 244.023371][ T6336] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 244.426396][ T6336] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 244.489728][ T6336] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 244.496003][ T6620] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 244.513358][ T6336] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 244.528429][ T6336] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.830074][ T6743] netlink: 100 bytes leftover after parsing attributes in process `syz.3.648'. [ 245.096165][ T6336] qmi_wwan: probe of 1-1:1.0 failed with error -22 [ 245.399576][ T6619] usb 1-1: USB disconnect, device number 12 [ 245.616197][ T6620] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 245.635551][ T6620] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 245.653631][ T6620] usb 2-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice= 0.00 [ 245.674249][ T6620] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.955607][ T4334] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 246.165860][ T6620] qmi_wwan: probe of 2-1:1.0 failed with error -22 [ 246.315914][ T4334] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.354701][ T4334] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 246.470280][ T6619] usb 2-1: USB disconnect, device number 18 [ 247.366221][ T4334] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 247.400381][ T4334] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 247.434059][ T4334] usb 4-1: Product: syz [ 247.449159][ T4334] usb 4-1: Manufacturer: syz [ 247.471572][ T4334] usb 4-1: SerialNumber: syz [ 248.466878][ T6438] usb 4-1: USB disconnect, device number 12 [ 248.771746][ T6781] netlink: 84 bytes leftover after parsing attributes in process `syz.1.659'. [ 250.336447][ T26] audit: type=1326 audit(1787277065.214:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.2.663" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff89b9560d9 code=0x0 [ 250.496658][ T6798] loop0: detected capacity change from 0 to 2049 [ 250.546973][ T6798] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 251.070991][ T6798] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 251.285036][ T6798] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 251.292001][ T6798] loop0: [ 251.722290][ T6335] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 252.645686][ T6335] usb 3-1: Using ep0 maxpacket: 8 [ 253.687525][ T6335] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.712340][ T6335] usb 3-1: config 0 has no interface number 0 [ 253.722531][ T6335] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.733932][ T6335] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.743511][ T6335] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.759283][ T6335] usb 3-1: config 0 descriptor?? [ 253.805744][ T6335] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 253.995628][ T4334] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 254.010668][ T6804] udc-core: couldn't find an available UDC or it's busy [ 254.019207][ T6804] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 254.046754][ T6335] usb 3-1: USB disconnect, device number 22 [ 254.235612][ T4334] usb 5-1: Using ep0 maxpacket: 32 [ 254.355721][ T4334] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 254.370627][ T4334] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 254.380574][ T4334] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.395184][ T4334] usb 5-1: config 0 descriptor?? [ 254.816997][ T6833] loop0: detected capacity change from 0 to 32768 [ 255.179804][ T6852] loop0: detected capacity change from 0 to 16 [ 255.207606][ T6852] erofs: (device loop0): erofs_superblock_csum_verify: invalid checksum 0x9a4ba4e0, 0x11e5897d expected [ 255.636799][ T6850] loop3: detected capacity change from 0 to 2048 [ 255.654506][ T6847] loop2: detected capacity change from 0 to 4096 [ 255.818025][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.824376][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.847515][ T6847] ntfs3: Unknown parameter 'windows_names' [ 256.030801][ T6855] ip_tables: iptables: counters copy to user failed while replacing table [ 256.064467][ T26] audit: type=1800 audit(1787277070.944:111): pid=6850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.685" name="file1" dev="loop3" ino=1367 res=0 errno=0 [ 256.199492][ T6859] loop0: detected capacity change from 0 to 256 [ 256.419406][ T6866] user requested TSC rate below hardware speed [ 257.163556][ T6618] usb 5-1: USB disconnect, device number 14 [ 257.188785][ T6870] UBIFS error (pid: 6870): cannot open "ubi0_0", error -19 [ 257.354072][ T6875] loop4: detected capacity change from 0 to 64 [ 257.428315][ T6884] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 257.446468][ T6884] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 257.453772][ T6884] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 257.460809][ T6884] comedi comedi3: 8255: I/O port conflict (0xc,4) [ 257.467900][ T6884] comedi comedi3: 8255: I/O port conflict (0xffffffff80000001,4) [ 257.476284][ T6884] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 257.569018][ T6888] loop0: detected capacity change from 0 to 256 [ 258.344491][ T6888] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 258.380833][ T26] audit: type=1800 audit(1787277073.264:112): pid=6887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.695" name="file1" dev="loop0" ino=1048590 res=0 errno=0 [ 258.867675][ T6900] loop1: detected capacity change from 0 to 4096 [ 258.928847][ T6908] loop3: detected capacity change from 0 to 512 [ 258.936253][ T6900] ======================================================= [ 258.936253][ T6900] WARNING: The mand mount option has been deprecated and [ 258.936253][ T6900] and is ignored by this kernel. Remove the mand [ 258.936253][ T6900] option from the mount to silence this warning. [ 258.936253][ T6900] ======================================================= [ 259.036226][ T6900] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 259.049072][ T6908] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 259.158711][ T6908] EXT4-fs (loop3): mounted filesystem without journal. Opts: mblk_io_submit,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 259.174098][ T6908] ext4 filesystem being mounted at /137/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 259.202363][ T6900] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 259.298262][ T6900] ntfs3: loop1: Inode r=b is not in use! [ 259.372388][ T6900] ntfs3: loop1: Failed to load $Extend. [ 259.379286][ T6908] EXT4-fs error (device loop3): ext4_empty_dir:3136: inode #12: comm syz.3.703: invalid size [ 259.473375][ T6905] loop0: detected capacity change from 0 to 32768 [ 259.667143][ T6905] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 259.947474][ T6918] binder: 6916:6918 ioctl c0306201 2000000009c0 returned -14 [ 260.543723][ T6905] syz.0.702 (6905) used greatest stack depth: 18304 bytes left [ 261.483423][ T4186] ocfs2: Unmounting device (7,0) on (node local) [ 261.582783][ T6952] block device autoloading is deprecated and will be removed. [ 261.906651][ T6960] loop3: detected capacity change from 0 to 512 [ 262.564294][ T6966] loop0: detected capacity change from 0 to 256 [ 263.481394][ T6966] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 263.507088][ T26] audit: type=1800 audit(1787277078.394:113): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.715" name="file1" dev="loop0" ino=1048591 res=0 errno=0 [ 264.004904][ T6970] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 264.079238][ T6970] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 264.232321][ T6975] loop0: detected capacity change from 0 to 64 [ 264.365507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 264.375505][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 264.385500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!! [ 264.503421][ T6981] loop3: detected capacity change from 0 to 1024 [ 265.021394][ T6993] loop4: detected capacity change from 0 to 40427 [ 265.378465][ T6993] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 265.387533][ T6993] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 265.588621][ T6993] F2FS-fs (loop4): Found nat_bits in checkpoint [ 265.684068][ T6993] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 265.692736][ T6993] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 265.833857][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.731'. [ 266.004405][ T6993] attempt to access beyond end of device [ 266.004405][ T6993] loop4: rw=2049, want=79872, limit=40427 [ 266.031887][ T6993] attempt to access beyond end of device [ 266.031887][ T6993] loop4: rw=2049, want=81920, limit=40427 [ 266.057650][ T6993] attempt to access beyond end of device [ 266.057650][ T6993] loop4: rw=2049, want=51200, limit=40427 [ 266.084411][ T6993] attempt to access beyond end of device [ 266.084411][ T6993] loop4: rw=2049, want=53248, limit=40427 [ 266.113649][ T6993] attempt to access beyond end of device [ 266.113649][ T6993] loop4: rw=2049, want=59392, limit=40427 [ 266.171539][ T6993] attempt to access beyond end of device [ 266.171539][ T6993] loop4: rw=2049, want=66448, limit=40427 [ 266.212166][ T6993] attempt to access beyond end of device [ 266.212166][ T6993] loop4: rw=2049, want=69632, limit=40427 [ 266.230054][ T6993] attempt to access beyond end of device [ 266.230054][ T6993] loop4: rw=2049, want=69640, limit=40427 [ 266.241977][ T6993] attempt to access beyond end of device [ 266.241977][ T6993] loop4: rw=2049, want=69648, limit=40427 [ 266.253524][ T6993] attempt to access beyond end of device [ 266.253524][ T6993] loop4: rw=2049, want=69656, limit=40427 [ 267.560913][ T7035] loop2: detected capacity change from 0 to 256 [ 267.565357][ T7034] capability: warning: `syz.0.740' uses 32-bit capabilities (legacy support in use) [ 267.840857][ T7039] loop0: detected capacity change from 0 to 1024 [ 268.197494][ T7045] ubi0: attaching mtd0 [ 268.530297][ T7045] ubi0: scanning is finished [ 268.662948][ T7045] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 268.973514][ T7051] loop4: detected capacity change from 0 to 256 [ 268.975237][ T7045] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 269.012405][ T7051] exfat: Unknown parameter 'zero_size_dir' [ 269.325820][ T6335] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 269.530880][ T7074] ubi0: attaching mtd0 [ 269.544441][ T7074] ubi0: scanning is finished [ 269.549387][ T7074] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 269.622780][ T7074] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 269.766631][ T6335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.824415][ T6335] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.926026][ T6335] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 270.036066][ T6335] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.074314][ T6335] usb 1-1: config 0 descriptor?? [ 270.184929][ T7078] overlayfs: option "workdir=./sec/apparmor/policy/namespaces" is useless in a non-upper mount, ignore [ 270.213846][ T7078] overlayfs: missing 'lowerdir' [ 270.289759][ T7082] loop1: detected capacity change from 0 to 24 [ 270.312873][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.758'. [ 270.351757][ T7086] loop4: detected capacity change from 0 to 16 [ 270.354782][ T7083] netlink: 108 bytes leftover after parsing attributes in process `syz.3.758'. [ 270.495677][ T7082] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 270.516522][ T7086] erofs: (device loop4): erofs_read_superblock: blkszbits 9 isn't supported on this platform [ 270.529306][ T7082] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 271.348495][ T6335] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 271.369867][ T6335] cm6533_jd 0003:0D8C:0022.0006: unknown main item tag 0x0 [ 271.388349][ T6335] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0006/input/input19 [ 271.594868][ T6335] cm6533_jd 0003:0D8C:0022.0006: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 271.618396][ T6335] usb 1-1: USB disconnect, device number 13 [ 272.340578][ T7100] loop4: detected capacity change from 0 to 256 [ 273.186211][ T7104] loop0: detected capacity change from 0 to 128 [ 273.209062][ T7100] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 273.234772][ T26] audit: type=1800 audit(1787277088.114:114): pid=7099 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.764" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 273.282465][ T7104] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 273.323068][ T7104] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.414403][ T7108] loop3: detected capacity change from 0 to 64 [ 273.429150][ T9] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 273.765745][ T7116] loop4: detected capacity change from 0 to 1024 [ 273.895778][ T7098] loop2: detected capacity change from 0 to 32768 [ 274.166051][ T7116] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 274.182441][ T7098] [ 274.182441][ T7098] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 274.182441][ T7098] [ 274.361813][ T7116] ext4 filesystem being mounted at /146/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.410601][ T7124] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 274.769476][ T7098] ERROR: (device loop2): xtTruncate_pmap: XT_GETPAGE: xtree page corrupt [ 274.769476][ T7098] [ 274.926407][ T7098] ERROR: (device loop2): jfs_rename: [ 274.926407][ T7098] [ 275.216529][ T4193] ERROR: (device loop2): xtTruncate: XT_GETPAGE: xtree page corrupt [ 275.216529][ T4193] [ 275.239562][ T7136] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 275.560997][ T4399] ERROR: (device loop2): diWrite: ixpxd invalid [ 275.560997][ T4399] [ 275.737725][ T4399] ERROR: (device loop2): txCommit: [ 275.737725][ T4399] [ 275.867452][ T4399] jfs_write_inode: jfs_commit_inode failed! [ 275.875222][ T4193] [ 275.875222][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.875222][ T4193] [ 275.877067][ T7137] loop0: detected capacity change from 0 to 1024 [ 275.921466][ T4193] [ 275.921466][ T4193] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 275.921466][ T4193] [ 276.136532][ T4334] kernel read not supported for file /v4l-touch0 (pid: 4334 comm: kworker/0:6) [ 276.555500][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #20a!!! [ 276.575497][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 276.595507][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 276.605497][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #28a!!! [ 276.851358][ T7148] loop3: detected capacity change from 0 to 512 [ 276.987070][ T7154] loop1: detected capacity change from 0 to 256 [ 277.029187][ T7152] [ 277.031578][ T7152] ====================================================== [ 277.038640][ T7152] WARNING: possible circular locking dependency detected [ 277.045697][ T7152] syzkaller #0 Not tainted [ 277.050138][ T7152] ------------------------------------------------------ [ 277.057268][ T7152] syz.4.783/7152 is trying to acquire lock: [ 277.063185][ T7152] ffff888078080120 (sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_sk_diag_fill+0xe40/0x19d0 [ 277.072895][ T7152] [ 277.072895][ T7152] but task is already holding lock: [ 277.080283][ T7152] ffffc900017f2168 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x8f4/0x12a0 [ 277.089902][ T7152] [ 277.089902][ T7152] which lock already depends on the new lock. [ 277.089902][ T7152] [ 277.100330][ T7152] [ 277.100330][ T7152] the existing dependency chain (in reverse order) is: [ 277.109486][ T7152] [ 277.109486][ T7152] -> #1 (&h->lhash2[i].lock){+.+.}-{2:2}: [ 277.117570][ T7152] _raw_spin_lock+0x2a/0x40 [ 277.122645][ T7152] __inet_hash+0xdd/0x950 [ 277.127531][ T7152] inet_csk_listen_start+0x21d/0x300 [ 277.133367][ T7152] inet_listen+0x2cd/0x580 [ 277.138337][ T7152] __sys_listen+0x19d/0x220 [ 277.143590][ T7152] __x64_sys_listen+0x56/0x60 [ 277.148882][ T7152] do_syscall_64+0x4c/0xa0 [ 277.153871][ T7152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.160356][ T7152] [ 277.160356][ T7152] -> #0 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 277.168178][ T7152] __lock_acquire+0x2c66/0x7b50 [ 277.173641][ T7152] lock_acquire+0x19e/0x400 [ 277.178749][ T7152] mptcp_diag_get_info+0x1f2/0x9e0 [ 277.184551][ T7152] inet_sk_diag_fill+0xe40/0x19d0 [ 277.190223][ T7152] mptcp_diag_dump+0xcc2/0x12a0 [ 277.195635][ T7152] __inet_diag_dump+0x1f6/0x380 [ 277.201055][ T7152] netlink_dump+0x6d2/0xdd0 [ 277.206117][ T7152] __netlink_dump_start+0x4e4/0x720 [ 277.211883][ T7152] inet_diag_handler_cmd+0x1d2/0x2b0 [ 277.217773][ T7152] sock_diag_rcv_msg+0x15c/0x3e0 [ 277.223268][ T7152] netlink_rcv_skb+0x1e9/0x430 [ 277.228597][ T7152] sock_diag_rcv+0x26/0x40 [ 277.233696][ T7152] netlink_unicast+0x78f/0x940 [ 277.239023][ T7152] netlink_sendmsg+0x8ba/0xbe0 [ 277.244348][ T7152] sock_write_iter+0x2a6/0x3a0 [ 277.249682][ T7152] do_iter_readv_writev+0x47d/0x5f0 [ 277.255531][ T7152] do_iter_write+0x1f8/0x7a0 [ 277.260679][ T7152] do_writev+0x281/0x480 [ 277.265478][ T7152] do_syscall_64+0x4c/0xa0 [ 277.270451][ T7152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.276907][ T7152] [ 277.276907][ T7152] other info that might help us debug this: [ 277.276907][ T7152] [ 277.287157][ T7152] Possible unsafe locking scenario: [ 277.287157][ T7152] [ 277.294668][ T7152] CPU0 CPU1 [ 277.300062][ T7152] ---- ---- [ 277.305483][ T7152] lock(&h->lhash2[i].lock); [ 277.310192][ T7152] lock(sk_lock-AF_INET6); [ 277.317248][ T7152] lock(&h->lhash2[i].lock); [ 277.324476][ T7152] lock(sk_lock-AF_INET6); [ 277.329099][ T7152] [ 277.329099][ T7152] *** DEADLOCK *** [ 277.329099][ T7152] [ 277.337276][ T7152] 6 locks held by syz.4.783/7152: [ 277.342347][ T7152] #0: ffffffff8d4574e8 (sock_diag_mutex){+.+.}-{3:3}, at: sock_diag_rcv+0x17/0x40 [ 277.351716][ T7152] #1: ffffffff8d4573a8 (sock_diag_table_mutex){+.+.}-{3:3}, at: sock_diag_rcv_msg+0x20e/0x3e0 [ 277.362135][ T7152] #2: ffff88807a317690 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{3:3}, at: __netlink_dump_start+0xf5/0x720 [ 277.372851][ T7152] #3: ffffffff8d530f68 (inet_diag_table_mutex){+.+.}-{3:3}, at: __inet_diag_dump+0x181/0x380 [ 277.383180][ T7152] #4: ffffffff8c31ef60 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 277.392550][ T7152] #5: ffffc900017f2168 (&h->lhash2[i].lock){+.+.}-{2:2}, at: mptcp_diag_dump+0x8f4/0x12a0 [ 277.402620][ T7152] [ 277.402620][ T7152] stack backtrace: [ 277.408561][ T7152] CPU: 0 PID: 7152 Comm: syz.4.783 Not tainted syzkaller #0 [ 277.415878][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.425971][ T7152] Call Trace: [ 277.429995][ T7152] [ 277.432969][ T7152] dump_stack_lvl+0x188/0x250 [ 277.437713][ T7152] ? load_image+0x410/0x410 [ 277.442306][ T7152] ? show_regs_print_info+0x20/0x20 [ 277.447570][ T7152] ? print_circular_bug+0x12b/0x1a0 [ 277.452833][ T7152] check_noncircular+0x296/0x330 [ 277.457854][ T7152] ? add_chain_block+0x9b0/0x9b0 [ 277.462843][ T7152] ? lockdep_lock+0xf1/0x1f0 [ 277.467493][ T7152] ? mark_lock+0x94/0x320 [ 277.471877][ T7152] ? _find_first_zero_bit+0xd1/0xf0 [ 277.477127][ T7152] __lock_acquire+0x2c66/0x7b50 [ 277.482046][ T7152] ? verify_lock_unused+0x140/0x140 [ 277.487305][ T7152] ? lockdep_hardirqs_on_prepare+0x7c0/0x7c0 [ 277.493344][ T7152] ? verify_lock_unused+0x140/0x140 [ 277.498598][ T7152] ? __local_bh_enable_ip+0xd7/0x1c0 [ 277.503948][ T7152] ? __local_bh_enable_ip+0x136/0x1c0 [ 277.509372][ T7152] ? lockdep_hardirqs_on+0x94/0x140 [ 277.514641][ T7152] ? __local_bh_enable_ip+0x136/0x1c0 [ 277.520065][ T7152] ? _local_bh_enable+0xa0/0xa0 [ 277.524968][ T7152] ? from_kuid_munged+0x18f/0x6e0 [ 277.530048][ T7152] ? nla_put+0x130/0x1e0 [ 277.534372][ T7152] lock_acquire+0x19e/0x400 [ 277.538929][ T7152] ? inet_sk_diag_fill+0xe40/0x19d0 [ 277.544183][ T7152] ? read_lock_is_recursive+0x10/0x10 [ 277.549673][ T7152] ? rcu_lock_release+0x5/0x20 [ 277.554494][ T7152] ? __lock_acquire+0x7b50/0x7b50 [ 277.559571][ T7152] ? inet_sk_diag_fill+0xe40/0x19d0 [ 277.564824][ T7152] mptcp_diag_get_info+0x1f2/0x9e0 [ 277.569986][ T7152] ? inet_sk_diag_fill+0xe40/0x19d0 [ 277.575290][ T7152] inet_sk_diag_fill+0xe40/0x19d0 [ 277.580372][ T7152] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 277.586145][ T7152] ? do_raw_spin_lock+0x128/0x2f0 [ 277.591220][ T7152] ? __rwlock_init+0x140/0x140 [ 277.596026][ T7152] ? inet_diag_bc_sk+0x18b/0x10c0 [ 277.601102][ T7152] mptcp_diag_dump+0xcc2/0x12a0 [ 277.606012][ T7152] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 277.612654][ T7152] __inet_diag_dump+0x1f6/0x380 [ 277.617578][ T7152] netlink_dump+0x6d2/0xdd0 [ 277.622147][ T7152] ? netlink_lookup+0x1d0/0x1d0 [ 277.627044][ T7152] ? __inet_diag_dump_start+0x805/0x970 [ 277.632645][ T7152] __netlink_dump_start+0x4e4/0x720 [ 277.637892][ T7152] inet_diag_handler_cmd+0x1d2/0x2b0 [ 277.643231][ T7152] ? rcu_lock_release+0x20/0x20 [ 277.648125][ T7152] ? inet_diag_handler_get_info+0xb70/0xb70 [ 277.654064][ T7152] ? inet_diag_dump_start+0x20/0x20 [ 277.659306][ T7152] ? inet_diag_dump+0x50/0x50 [ 277.664059][ T7152] ? __mutex_lock_common+0x435/0x2400 [ 277.669483][ T7152] ? rcu_lock_release+0x20/0x20 [ 277.674385][ T7152] sock_diag_rcv_msg+0x15c/0x3e0 [ 277.679377][ T7152] netlink_rcv_skb+0x1e9/0x430 [ 277.684191][ T7152] ? sock_diag_bind+0xa0/0xa0 [ 277.688913][ T7152] ? netlink_ack+0xb10/0xb10 [ 277.693568][ T7152] sock_diag_rcv+0x26/0x40 [ 277.698041][ T7152] netlink_unicast+0x78f/0x940 [ 277.702863][ T7152] netlink_sendmsg+0x8ba/0xbe0 [ 277.707684][ T7152] ? netlink_getsockopt+0x570/0x570 [ 277.713449][ T7152] ? aa_sock_msg_perm+0x94/0x150 [ 277.718436][ T7152] ? apparmor_socket_sendmsg+0x88/0x230 [ 277.724031][ T7152] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 277.729368][ T7152] ? security_socket_sendmsg+0x7c/0xa0 [ 277.734873][ T7152] sock_write_iter+0x2a6/0x3a0 [ 277.739693][ T7152] ? sock_read_iter+0x380/0x380 [ 277.744618][ T7152] do_iter_readv_writev+0x47d/0x5f0 [ 277.749863][ T7152] ? aa_path_link+0x8a0/0x8a0 [ 277.754594][ T7152] ? generic_file_rw_checks+0x280/0x280 [ 277.760199][ T7152] ? common_file_perm+0x171/0x1c0 [ 277.765378][ T7152] ? fsnotify_perm+0x5d/0x560 [ 277.770098][ T7152] ? security_file_permission+0x75/0xa0 [ 277.775732][ T7152] do_iter_write+0x1f8/0x7a0 [ 277.780374][ T7152] ? import_iovec+0x6f/0xa0 [ 277.785011][ T7152] do_writev+0x281/0x480 [ 277.789306][ T7152] ? do_readv+0x460/0x460 [ 277.793726][ T7152] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 277.799880][ T7152] ? lock_chain_count+0x20/0x20 [ 277.804796][ T7152] ? lockdep_hardirqs_on+0x94/0x140 [ 277.810046][ T7152] do_syscall_64+0x4c/0xa0 [ 277.814556][ T7152] ? clear_bhb_loop+0x30/0x80 [ 277.819297][ T7152] ? clear_bhb_loop+0x30/0x80 [ 277.824128][ T7152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 277.830091][ T7152] RIP: 0033:0x7f6b4a2c50d9 [ 277.834556][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.854322][ T7152] RSP: 002b:00007f6b4851d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 277.862808][ T7152] RAX: ffffffffffffffda RBX: 00007f6b4a54cfa0 RCX: 00007f6b4a2c50d9 [ 277.870833][ T7152] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 277.878952][ T7152] RBP: 00007f6b4a35c024 R08: 0000000000000000 R09: 0000000000000000 [ 277.886978][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 277.895004][ T7152] R13: 00007f6b4a54d038 R14: 00007f6b4a54cfa0 R15: 00007ffc1e1f6828 [ 277.903044][ T7152] [ 277.907774][ T7152] BUG: sleeping function called from invalid context at net/core/sock.c:3290 [ 277.917491][ T7152] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 7152, name: syz.4.783 [ 277.926544][ T7152] INFO: lockdep is turned off. [ 277.931349][ T7152] Preemption disabled at: [ 277.931363][ T7152] [<0000000000000000>] 0x0 [ 277.940204][ T7152] CPU: 0 PID: 7152 Comm: syz.4.783 Not tainted syzkaller #0 [ 277.947533][ T7152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 277.957645][ T7152] Call Trace: [ 277.960970][ T7152] [ 277.964070][ T7152] dump_stack_lvl+0x188/0x250 [ 277.969505][ T7152] ? show_regs_print_info+0x20/0x20 [ 277.974751][ T7152] ? load_image+0x410/0x410 [ 277.979307][ T7152] ___might_sleep+0x493/0x610 [ 277.984025][ T7152] ? __might_sleep+0xf0/0xf0 [ 277.988760][ T7152] ? read_lock_is_recursive+0x10/0x10 [ 277.994180][ T7152] ? rcu_lock_release+0x5/0x20 [ 277.999009][ T7152] __lock_sock_fast+0x2f/0xe0 [ 278.003741][ T7152] ? inet_sk_diag_fill+0xe40/0x19d0 [ 278.009171][ T7152] mptcp_diag_get_info+0x1fe/0x9e0 [ 278.014357][ T7152] inet_sk_diag_fill+0xe40/0x19d0 [ 278.019446][ T7152] ? inet_diag_msg_attrs_fill+0x930/0x930 [ 278.025326][ T7152] ? do_raw_spin_lock+0x128/0x2f0 [ 278.030412][ T7152] ? __rwlock_init+0x140/0x140 [ 278.035244][ T7152] ? inet_diag_bc_sk+0x18b/0x10c0 [ 278.040346][ T7152] mptcp_diag_dump+0xcc2/0x12a0 [ 278.045251][ T7152] ? mptcp_token_join_cookie_init_state+0x460/0x460 [ 278.051901][ T7152] __inet_diag_dump+0x1f6/0x380 [ 278.056812][ T7152] netlink_dump+0x6d2/0xdd0 [ 278.061371][ T7152] ? netlink_lookup+0x1d0/0x1d0 [ 278.066383][ T7152] ? __inet_diag_dump_start+0x805/0x970 [ 278.071977][ T7152] __netlink_dump_start+0x4e4/0x720 [ 278.077227][ T7152] inet_diag_handler_cmd+0x1d2/0x2b0 [ 278.082592][ T7152] ? rcu_lock_release+0x20/0x20 [ 278.087494][ T7152] ? inet_diag_handler_get_info+0xb70/0xb70 [ 278.093443][ T7152] ? inet_diag_dump_start+0x20/0x20 [ 278.098691][ T7152] ? inet_diag_dump+0x50/0x50 [ 278.103415][ T7152] ? __mutex_lock_common+0x435/0x2400 [ 278.108842][ T7152] ? rcu_lock_release+0x20/0x20 [ 278.113732][ T7152] sock_diag_rcv_msg+0x15c/0x3e0 [ 278.118721][ T7152] netlink_rcv_skb+0x1e9/0x430 [ 278.123584][ T7152] ? sock_diag_bind+0xa0/0xa0 [ 278.128306][ T7152] ? netlink_ack+0xb10/0xb10 [ 278.133032][ T7152] sock_diag_rcv+0x26/0x40 [ 278.137496][ T7152] netlink_unicast+0x78f/0x940 [ 278.142321][ T7152] netlink_sendmsg+0x8ba/0xbe0 [ 278.147135][ T7152] ? netlink_getsockopt+0x570/0x570 [ 278.152378][ T7152] ? aa_sock_msg_perm+0x94/0x150 [ 278.157359][ T7152] ? apparmor_socket_sendmsg+0x88/0x230 [ 278.162948][ T7152] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 278.168404][ T7152] ? security_socket_sendmsg+0x7c/0xa0 [ 278.173914][ T7152] sock_write_iter+0x2a6/0x3a0 [ 278.178727][ T7152] ? sock_read_iter+0x380/0x380 [ 278.183635][ T7152] do_iter_readv_writev+0x47d/0x5f0 [ 278.188882][ T7152] ? aa_path_link+0x8a0/0x8a0 [ 278.193601][ T7152] ? generic_file_rw_checks+0x280/0x280 [ 278.199191][ T7152] ? common_file_perm+0x171/0x1c0 [ 278.204254][ T7152] ? fsnotify_perm+0x5d/0x560 [ 278.208971][ T7152] ? security_file_permission+0x75/0xa0 [ 278.214564][ T7152] do_iter_write+0x1f8/0x7a0 [ 278.219202][ T7152] ? import_iovec+0x6f/0xa0 [ 278.223746][ T7152] do_writev+0x281/0x480 [ 278.228074][ T7152] ? do_readv+0x460/0x460 [ 278.232451][ T7152] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 278.238479][ T7152] ? lock_chain_count+0x20/0x20 [ 278.243374][ T7152] ? lockdep_hardirqs_on+0x94/0x140 [ 278.248619][ T7152] do_syscall_64+0x4c/0xa0 [ 278.253076][ T7152] ? clear_bhb_loop+0x30/0x80 [ 278.257788][ T7152] ? clear_bhb_loop+0x30/0x80 [ 278.262499][ T7152] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 278.268428][ T7152] RIP: 0033:0x7f6b4a2c50d9 [ 278.272872][ T7152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 278.292600][ T7152] RSP: 002b:00007f6b4851d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 278.301179][ T7152] RAX: ffffffffffffffda RBX: 00007f6b4a54cfa0 RCX: 00007f6b4a2c50d9 [ 278.309279][ T7152] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 278.317296][ T7152] RBP: 00007f6b4a35c024 R08: 0000000000000000 R09: 0000000000000000 [ 278.325315][ T7152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.333325][ T7152] R13: 00007f6b4a54d038 R14: 00007f6b4a54cfa0 R15: 00007ffc1e1f6828 [ 278.341342][ T7152] [ 278.347184][ T7148] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 278.360304][ T7148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 278.380020][ T7148] EXT4-fs (loop3): 1 truncate cleaned up [ 278.401014][ T7148] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000040,,errors=continue. Quota mode: none. [ 278.406747][ T7156] loop2: detected capacity change from 0 to 1024 [ 278.444835][ T7148] EXT4-fs (loop3): shut down requested (0) [ 278.614855][ T7156] hfsplus: invalid length 1280 has been corrected to 255 [ 278.908024][ T7162] ODEBUG: Out of memory. ODEBUG disabled