last executing test programs: 22.990626124s ago: executing program 3 (id=1340): landlock_restrict_self(0xffffffffffffffff, 0x4) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 20.130507144s ago: executing program 3 (id=1348): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = syz_open_dev$evdev(&(0x7f000001fa80), 0x20000000, 0x0) ioctl$EVIOCSCLOCKID(r3, 0x40084504, &(0x7f0000ffcffc)) r4 = open(0x0, 0x0, 0x0) fcntl$notify(r4, 0x402, 0x8000003d) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet_tcp(0x2, 0x1, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0xa1300) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x20042) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000600)={0x0, 0x0, {0x1}, 0x5}) write$sndseq(r6, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c) 17.073354057s ago: executing program 3 (id=1358): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c7902, 0x0) sendfile(r0, r0, 0x0, 0x2000fb) 15.994648817s ago: executing program 3 (id=1360): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xf}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000859}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r10, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 13.96545864s ago: executing program 3 (id=1364): socket(0x10, 0x80805, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x118, 0x6004003f) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) close(0x3) socket$kcm(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xa43d, 0x80, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x0) 13.845076248s ago: executing program 4 (id=1365): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a00", 0xd, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 13.364264889s ago: executing program 4 (id=1367): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000066d900000500000a34008800180a01020000000000000000020000030800038004000330000000000900010073697a3000000000140000001100010000000000000000000300000a000000000000000065fbd585cee0da85947dac8155f3e0aa91d066612ca25c50f8ddd76095c375a82858ec46bf2141510b147b6285e1b70cc9217b8bc4faa6025fef1367fba1c48fa54eb8efc9b8fd69aa0028d8f8a94b98128185449019859c418a7667e6319dbbe6df872e4c4b4b69642b82b621ec1221131e61ad5d158dc0044fbe0605dc889616bfdcd9e52bea5e537b9727555f80b6e6feae7cb0f536408309ea794d2d5fc4a3223ee464474a83c19631e064af8e446b9b269ec5b5d9b3617359cd1798c017057279ddff02a265fece1e18ec5f660fcb275c"], 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002, 0x0, 0x40}]}) unshare(0x2c020400) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2000}) r7 = socket$kcm(0x2, 0xa, 0x2) sendfile(r3, r3, &(0x7f0000000140)=0x2, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) io_uring_setup(0x1393, &(0x7f0000000d40)={0x0, 0xf2fa, 0x40, 0x0, 0x1d9}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff7, 0x4031, 0xffffffffffffffff, 0x34e4a000) close_range(r0, 0xffffffffffffffff, 0x0) 12.0209347s ago: executing program 4 (id=1370): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4, @loopback}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 10.452423889s ago: executing program 4 (id=1373): socket$inet6_sctp(0xa, 0x1, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000001800), 0xc0241, 0x0) socket$inet(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={0x0, 0x265}, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x4}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x20000050) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x88400) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000000180)={0x0, 0x1}) openat$audio(0xffffffffffffff9c, 0x0, 0x40000000040201, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(0xffffffffffffffff, 0xc0884123, &(0x7f0000000300)={0x5, "244689261a3365eb47c14247a532ccbd3bf3b29282987c7cc12acb8ae6d2fbd3428a0df873e1d58af8bf70c05fc6c43edcdaa8e7db0700", {0x2, 0x2}}) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) io_uring_register$IORING_REGISTER_BUFFERS2(0xffffffffffffffff, 0xf, &(0x7f0000002700)={0x2, 0x0, 0x0, &(0x7f0000000200)=[{0x0}, {&(0x7f0000002a00)=""/88, 0x58}], 0x0}, 0x20) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x6, 0x76, 0x0, 0x0) 7.882491212s ago: executing program 2 (id=1376): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) 7.036179055s ago: executing program 0 (id=1380): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) open(&(0x7f0000000280)='.\x00', 0x141080, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xb460}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r8, r7, 0x25, 0x0, @val=@netkit={@void, @value=r8}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0xdb0b, 0x0, 0x5}}}}}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)={0x44, r5, 0x917, 0xa7, 0x1000000, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x3f}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_FD={0x8, 0x17, @udp6}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40810}, 0x20000000) 4.157379401s ago: executing program 0 (id=1381): r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x3, 0x0, &(0x7f0000001080)) openat$audio1(0xffffffffffffff9c, 0x0, 0x129202, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, 0x0, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000d80), 0x36f, 0x20102, 0x0) 4.050219291s ago: executing program 1 (id=1382): sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_aout(r1, &(0x7f0000000940)=ANY=[], 0x120) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000080)={0x1, 0x1, 0x1, 0x7}) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f00000000c0)={0xf, 0x3, 0x7, 0x200}, 0x10) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r3, 0x40047438, &(0x7f0000000040)=0x1) readv(r3, &(0x7f0000000ac0)=[{0x0}, {&(0x7f0000000640)=""/221, 0xdd}], 0x2) close_range(r2, 0xffffffffffffffff, 0x0) 3.068949919s ago: executing program 1 (id=1383): migrate_pages(0x0, 0x6, &(0x7f00000000c0), 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_SREG={0x8}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_LEN={0x8}]}}}]}]}], {0x14}}, 0x94}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000280)={0x4, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6, 0x6, 0x4, 0x80}, 0xe) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000340)={r4, @in6={{0xa, 0x4e23, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}, [0x1200000000000, 0x1, 0x7, 0x3, 0xec, 0x2, 0x5, 0x1578, 0x7, 0x100000001, 0x1, 0x5, 0x9, 0x3, 0x4492]}, &(0x7f0000000440)=0x100) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)={[{0x2d, 'rlimit'}]}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000002840)=ANY=[@ANYRES32=r5, @ANYRES64=r2, @ANYRES8=r2, @ANYRES32=r3, @ANYRESDEC=r3, @ANYBLOB="36ca42b13ea9b4429f14e47f1b444abeb1d3c219f324197adba014f0681543f102164bb81601c84a31d664f46a37bdec490fefe4774086aa629c0d4db8137bbec85211578578b1efa741761ad14b31110246fb99547608bbf5b828ddd751625b8e1e44ef85d2845a5f778bd75a952d636a86b4edd1e003900fe5438d99105bbf7a9db207aea5f5e7f8e0c3c182a7254861108b529805d5a61bd71027956b6e9f98e3b3936f7cd54421b45fd8b9671134e8ca7aef0e70dde59e48d58a37b2d7c1bf55638ecad17ae5eef94f10186b68016eb85f08c75e61435ac2269ff305beeab568fb5942a0a08c80a2e173fa937bd69d732203aacdc0ef85551214ec55b7df41ea1ec1fbabb050a0f329ef6b545b6f1ed7861b673f038b0edce4d1cc97ab1e2975b9eab52dde3577441832f50dc027321355f6546bcc81f5ca3222106a4595546c8d50cd76940188b110e0c75c941068fe48c56439ba253e767d26e01f1f6932cda99844c3c706b009b2d848dc8a3250fbdc9110e72914fd213e024461dabc2d419dce6d487ce1dccc8feb51e8f762e49c2ba14118710d9770da5f38a02c29a2cd94003f3d93c7b156c6355eb9cbdd1444534b47f3250890ae346a21f2492e47caab9af28a26d4abb1751364543d800978a990baffe4c0a005895584bc79ec75e8d31e3209503ff8e0b54ddc4fc5c2542f147506486051b4b34b103a9c4bf6d1ea5dda001298380cfc5fa82174846e44d90a875a9d9ece08fbf5344c5f64476889f16413a5f0dd5ba50f156030d0bbd4d2c6eeac66523d3a05ff1b0bc8c32475ebe3aec3b38479672bf44e64bc816cfd5629932b4dd048207da51b50c39fcadaaab0866f187b593922f5986b2aded03cf5e69cbc5e3ea2a6c5f91aee8cce8c499cb3f292d9325aeb6115a839024e23cc1d25140ff3f2de7eea1a48fecda7bfb4f6f4b119f307194f0e8babaa6ab12f6f9d66e97648f88980da339d87c01559fc5933d81dcc4d84801b858fff4f56b3b5fbb77d7af61a35baee3e0f24c014b81dbb805835afe6dda064c70cfcaa04dafc013a6c2407b06c1609074bb94aef5da607c383f2db8c8106148b05774bd134c04cd96b4adef83680e187965af83643c4a767d559d5828dc7570b0d9fb461d300c792b8c375e84ba08244021b1f1a8624cf2c098e4df2d3e01c79faae869f619898ef8e7b83a20ace7a3fe0a41c9bc2561c17253fdb9d703c4a6d106fac33bda260c617c672a38a351ef4c13016490746f6e09cca9b93b5e7bff8ee28afb301a09f93075d5f5b27251d8426127f97a290596ef38aa4f57b8f8ecae2a493dd0fbdfdbc58ead418458fcc356bcbc9d3e4fc1936abac3d4fa99232b27b7a11f36655d8ea44c047e04aa6be1ec9f0d90b84f553ca25c6f6d8f70249d990f71b22f954495dc170a7bc7e4d7bc3ffac29d4a7a891017aa9b7cf62c2dd3f6604852804a2f9530b7617e31c303a7eadf7c07a18fe6ce6ccf670b3a4e8f6f5ebeb98783fbb6d3722d43d95239350ac90ca18a0d7bbd3e6c5c214b5e12b55d02152e0e26fb538443251ee9fa6862c2db396fa7d714bf672f0a014bcae072d226155288adf9b60a472c2dda9a56c317eb970d4f49b4793c5dabcb750ff30443354f200d21dda0ce48d021dd9cebbe6da03b7ecd428ec834d56bae2d8c253196ce8e294eb95f9b9ec99405bed15f835a91ba6445db7ba6d842b70662d52688565a096aa9a10dae3b6f309ebdff66f8b4da107499d3c0209ca7d1df3a2ccacbc6657cc3efdd8a21b68da19b8d557e11c92d85d9edbd7ef48fa77b578c10c8cd8276d695e5844450f7a77c3a2414f3cf57bc6261ade245dd5d271d7c49c6338b5c97efd4e743014b6e960c311a66d92270519abff5096fb3bc66dd1ba1b36875a5ca93acff39dd8f63f0acd7280cbeb33a0896c413e887679bb360ede70a5bb1231a5ff682e3dbd2462bdcf994a3d8f8ec47c598c6b4e860335fd47456a70fd783f1e6ed1a7f463d94b884fa502f18274464e740c86f6ec061673daf5f0b9eb34e1898a574d6cc0dc11c9da5deca73c93fa11057e5642b110de2b75decc295f664519c7d901001880854a9e14f163705c4695b7dfb1e006ba7f818e9ca1c6b5677a7550ba4a3ddb951128dc781ac7ea30e279d763e18d31100ef37e0e3365e5abff376b3bae99d4aba0e44bcebe51d9c144f2373d43555d7bba27b5124cd382ef70f5d71a8034fc471993b8b80f4222567fba5708d26984dedcaf579b08a8b76cb7fd35cef9a5df59fd37158e3868b14a5a09d30f769c2fda71e9c29dd442a92a99a50e9445e182c984324ef2faa0e039bf296679812da9a3f1592e823d3333847aaf15d2cc27bcbe250a3bdd68fdc1aa080a360fa862c7499f0d9c04862e465296982f567c3c2e31386762799b77e618e8778307c8986332cdb2dd960bf3d45ef45039905ef2a35582a1091f84385bde20b5edbb744894dd5b4202ee1421a8a4b139968afd8bedeb47829e676b5cad8f6b326224e337c129eccc0ab53b6ee15619c50ec2f8db471eaa4f4f6b242c9a8fc7a57bc9f2680759d7114b792026d63e62db9dd24d1d38136fc3139509bb5fd090783f7557823dc7c537865a84bbfe88ae4bf955e17484ecb9f5682cf2e9c54a44159c10a5e8edd9d0b2afd69ac541d8b8c4682b53bbabaa52348b03ed113724f0c0bfedb8a2b6543a5bf6ea553356aab7bc77daaa95e49304b46ad4f0cf5a399e26af6668c763832cf7c55614ef571e5343d92aad815807546c801cd07162e7dc02da6edef2b5ea684645d21f578917bee7e0b24485bdc6f09c4b28d39a8298db4ddca5dfe5f5d952cae6739081b19afc8f8795afd822df65abe704df9696eff325461c80ea91035e22778f2156918e19f58aaf91a313d3f2c729f75c7801db671e446504aaeb264a202e1b948493dfa98e7e7cc90be88ca375263cdd91831dd319bb4eb254d8b894fe5fb45cbe23d945e13389b233184ef0a1afa1226eece10285afdbe3128592e038039c91d895c481af504aa97a948ebd1c806d27738686cbf001ab80b13765d20747d7d66f00a81ac8db4021b5ead0e7f314052d788ad5650fc549432e74c1435b4f727da83c1236d3f4a90b472060ba4185febfc53ab12826534fc6dc5cc9f11709555f7a9bfc8ceb961f4f60bc391cb6384073ff904940246161e0ee29ae1f1e1f895b071ffc48f120a8cd9ba31be38da74e71512bbaa5339f30f77722c1ed02af6e3326e92c88237cc258af1bca6bc09b1306086f7a069dfd5248f4d6e185cf5e34eb31d6f52ca1afa257a7ff6ec7533fb254f062b495974af3c55de844cfa5633a5d8536355669a3b8daa03f203b3366cb11094e8e0ca80516c0745c051afb57eb0f03c505a71047a8b62a3130e22fa328c92b675c6afc7943b2b0d36c9f0895a194feb2e96169c24ec9b9c5a728e59c5093363f9121593d32c35f7daf076e4d98c12c0138205e65a6bec71b2db6ac87415c43f28027d2e49a92f920f1136a1720c3009ef3769052a70b7186aefe7c1bf666969e8cbc4cd94fc206b5f79513a18e74c9aa4806b7fe0cf6c5822d6289f31058b640be22f8588870301ecf12a8e3bb3ec9707ffe7e5e4cb1507f762e6e1f80e0960dc52f62925ab50e9a8411b193ba6a901f2d62e64f42d805bbc67dd1f732cf6dc9b24308478e874d805238adc7cf34068a5f431c2cfacce83d4eefb7aa43d1f374295b9c8624a26ca49e42b3c38821a2986784965797bad4474ecd43f2b36310df2d24eb764c52a1517b50104a38ac5d0b11ebe979424e9b3d77e1c5447332181b86031cb775a2a1725aa58899f80eb610857254e2f065dbad6d51b70f7007ad0e03bdd03948b9445afb65ba491919f2087330781c8e142687de0d93d73f944a866ae3773bd35843d758b54554f266673fb854978cfa05acd69deba919cf06fe9f0f58cb01423a6b86c588b1fc71b895c8769116a163d09191d91198a6a281797b98a651ce24290e1a708e38c37efa7c929ab1c581e2bb7147b63a4af107bafbd96051c347303001b4dae59d5a5339ef6912a463b115292b6964dfe0fc382160c03092e24c2371eeaa2b519f25de69ba1ffd4dd75edfd4be360f5fdec6ca90901c9f0581e9a08c90b5cd1e2b77dde43a060bced38ecdf4511018ce8fc29f280f11a0a836dd3fa037df0c1d4500a2f8684d71efa7d49215e2c1ad8d0c53aa025d451c2d776aa364c2e1c768a8a21f73ccb2b6140578f073ea743c2a09e21344814e7270a9bbcf3ee79327e7a3356c3e4633e8d3a5c6058c1eebff3e5195e728a6f8601291ca4f59835bde0b3941dafb0736bf6ebd72c00a55983c7210f358b4ab15f04976b0335df082a44329b969a3206cf128f8f9da96afbc18eda92f2a1599084fe78a1543e97069dccadcd965d16543df1850cf3ef5b32f1663d9aeb3097aad8b0bfcec214548fb7b0cc39b3b0191dfbeaef02ffe74f165d89a701f067477804e5fdf3213ed6e4248c0f298315ab0bd7e8654c4c1a54757339f165e474aaeed4a141661161b75a348c6955ff6a5b36f54bcd430a927de85cec3c888d1956d92a90d76cb77ffb98004605194744d9bc5c9b3850f2477ac10af0b5b5c063052f9d6a18a52ca91c565c44d75428f7050933a5ce9ec0a6a7c5f74ec2c16678459cc36048b1b68a6fe789087d74aa49e382c6ab4f5822f2b07f0ac951ba949870a0bf48fa7062c046451fef7bb290d4abc1e46686604c55ae4cf8f381a694db42a8b4f6864cc511d6d08715e419b969155525de774851bf0c00d5485e3abe06470759cab1a920aa97c79b8c8604a6648d2f13fa2ac60bcb2d7210c14b3661db47d2986107d15580c8e61f3115def1a8307113214e1c2ed8535257d92b2fa532d34100f42ce85f4c359213cd0fa699836b4c191aec52b8b4184d98328c3ce805766e3023709f8a297d109d76de9a6f18cb56adf816c569f3635c9dfe2271b24056a3aca4b9c259bb52c7a2edb83394140365dc8aa3058471ca2dd345410156b9f81f13b7139298d414a897cb9edce0ed0d2cbbcded91e304b68ab069ddb824c01e3555ae21f98e7f10dcf5955383a1c1539c020fa08977a1678a17b08d9ce6e8f992f8eef243543aded0bb7326d87a794e7125ef52e69586f096c46c3f328c43c8ab564eeb1c4df9e4b9e198dc7bda6e79a30e3591eda9d6042b9ebc8bbb8fe115ec33ab553e0bdad357b6536cd1c093d206e527f0957ab08c8a74f9d408805b48b56f8bc2a25ab5eee11ef596b17cbb97114285f120c7ba8f37084157fae7312e340cc8d9ae771d33d00e646c4fed012362492f366076d93fcaaa3488df01b680d04cabfb380430e787e89d27b5876d5c3e9c11f0f5ecbe20c5f194439ca83ef2d8171de0b4673bcc0eaa4cab407ba1e0ed6ae10a1e3506bc7184c4442bf647c637cd933a9501deacb6c0c573150cfe8c7ad08dff1440f9302bcdab5b13e6a6e0f1062ab4dd3293f7c3deef14a693fbf22d48b78dc2ea0bf0c62f8e348d50b00611e16ea10970f57e899f41e0e98c6fc68f56a5971e1f0e68ef83434361044b1f38fc08b604adf01b141b0a7f2c903ba30a42ca0b9183ba17cc4b47f9f1bd133c870d7b64b5b7519113a059039d6195a06e93e6d4245156b6c4397d3044b7b3c2e0dc042f21cb6f721ab38e560e6f7460322e279ed569a48f54a1599ace1b34d3cbd350f08bf14fcf5f0bb0137a773237a3f19ab81a0057833f5103bccce85aae5d22b8fa404222503b28a197324bd66a7c5bac3094b3c290c3dbeefe6413f930edd75ed", @ANYRES8=r6], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xb, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, 0x0, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, 0x0, 0x441, 0x14a) r10 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x101042, 0x0) ioctl$EXT4_IOC_SETFSUUID(r10, 0x4008662c, &(0x7f0000000040)={0x10, 0x0, "e9aec4948650d5f86e4f17bf4a0c9cc8"}) ioctl$sock_ifreq(r8, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x7}) ioctl$sock_netdev_private(r8, 0x8943, &(0x7f0000000000)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x40, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x61}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'macsec0\x00'}, @IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48800}, 0x0) 2.989501034s ago: executing program 0 (id=1384): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) getsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f00000001c0)=0x6, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000340)="1c0000001d005f0214fffffffffffff8070000000d00000000000700", 0x1c) 2.811010601s ago: executing program 0 (id=1385): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 2.664784094s ago: executing program 0 (id=1386): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x40044}, 0x20008000) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000003c0)={0x2, 0x0, [{0x40000002, 0x0, 0x6}, {0x40000002, 0x0, 0x40}]}) unshare(0x2c020400) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x2000}) r7 = socket$kcm(0x2, 0xa, 0x2) sendfile(r3, r3, &(0x7f0000000140)=0x2, 0x8) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) io_uring_register$IORING_UNREGISTER_NAPI(0xffffffffffffffff, 0x1c, &(0x7f0000001000), 0x1) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000000)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r8, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x4, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff7, 0x4031, 0xffffffffffffffff, 0x34e4a000) close_range(r0, 0xffffffffffffffff, 0x0) 2.463622837s ago: executing program 2 (id=1387): renameat2(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fdinfo/4\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xf, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000040)=""/106, &(0x7f0000000380)=0x6a) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x3, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0xd000, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x5, 0x37, 0xefffffffffffffff, 0x0, 0x0, 0x2000005, 0xfffffffface6e3cd, 0x40000000001c, 0x1, 0xffffffffffffffff, 0xfd]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.411548877s ago: executing program 1 (id=1388): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 2.338488364s ago: executing program 4 (id=1389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x33}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000000)="b8a6", 0x2}], 0x1}, 0x404481c) 2.165645111s ago: executing program 1 (id=1390): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) sendfile(r0, r1, &(0x7f0000000100)=0x1010, 0x10001) 2.079589476s ago: executing program 3 (id=1391): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f00000001c0)=0xffff, 0x4) syz_usbip_server_init(0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x8000, 0x0) acct(&(0x7f0000000180)='./file0/file0\x00') socket$nl_generic(0x10, 0x3, 0x10) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/196, 0xc4}], 0x1, 0xc20b, 0x205) 2.009893463s ago: executing program 2 (id=1392): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="bc", 0x1a000, 0x4, &(0x7f00000000c0)={0xa, 0x4e20, 0x8, @loopback, 0xfffffffe}, 0x1c) 2.009119573s ago: executing program 1 (id=1393): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xff6d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0xb74, 0x4, 0xc, 0x7fff0000}]}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, 0x0, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x13, 0xffffffffffffffff, 0x0) ioctl$BLKROSET(r7, 0x125d, &(0x7f0000000000)=0x1000000010) 1.88992065s ago: executing program 0 (id=1394): socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) 1.884527989s ago: executing program 4 (id=1395): r0 = syz_open_dev$usbmon(&(0x7f0000000300), 0x7, 0x82c0) read$usbmon(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000340), 0xffffffffffffffff, 0x20b82) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r2 = creat(&(0x7f0000000140)='./bus\x00', 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x80801) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) write$cgroup_int(r2, &(0x7f0000000540), 0xfffffdd8) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$incfs(r5, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) ioctl$USBDEVFS_DROP_PRIVILEGES(r1, 0x4004551e, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)={0x34, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x4}, @CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast2}}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x2400c890}, 0x4) ioctl$MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000400)) syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x44680) 571.259905ms ago: executing program 2 (id=1396): sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x40, 0x1410, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x5}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x10002}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}]}, 0x40}}, 0x20040005) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x200, 0x0, 0x25dfdbfb, {{@in=@loopback, @in6=@local, 0xfffc, 0x4, 0x0, 0x0, 0xa, 0x60, 0x20, 0x32}, {0x0, 0x4, 0x5, 0x0, 0x40, 0xfffffffffffffffd, 0x2}, {0xfffffffffffffffe, 0x0, 0x0, 0xcd17}, 0x9, 0x40000000, 0x0, 0x1, 0x2, 0x3}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0) 466.160846ms ago: executing program 2 (id=1397): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xd, 0x1000000000, 0xb, 0x43, 0x9, 0x0, 0x2004cd, 0x0, 0x1000000, 0x7fffffff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x4, 0x2e, 0x80}, {0x5000, 0x2, 0x3, 0x0, 0x1, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3909e40c33606d9c, 0xb, 0xa0, 0xb1, 0x8, 0x1, 0x20, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x4}, 0x80000031, 0x0, 0x0, 0x12024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x6]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 429.77245ms ago: executing program 1 (id=1398): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x20000106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x149a82, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SYNPROXY_WSCALE={0x5, 0x2, 0x6}, @NFTA_SYNPROXY_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x80}}, 0x0) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x3) fsconfig$FSCONFIG_SET_BINARY(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000480)={[{0x2b, 'rdma'}]}, 0x6) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000001b80)='pimreg1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000096c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x18, 0x30, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000480)}) 0s ago: executing program 2 (id=1399): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x40, 0xf, 0x28, "f0803bb547c4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000440)={0x34, &(0x7f00000002c0)={0x40, 0x8, 0x2, "2bec"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000300)={0x40, 0x11, 0x2, "b9d5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000700)={0x40, 0x9, 0x2, "6ef1"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000180)={0x0, 0xe, 0x2, "1972"}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): o interface number 0 [ 150.405307][ T4315] usb 2-1: config 0 interface 184 has no altsetting 0 [ 150.414853][ T4315] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.435831][ T4315] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.447873][ T4315] usb 2-1: Product: syz [ 150.456753][ T4315] usb 2-1: Manufacturer: syz [ 150.461387][ T4315] usb 2-1: SerialNumber: syz [ 150.468317][ T4315] usb 2-1: config 0 descriptor?? [ 150.475384][ T4315] smsc75xx v1.0.0 [ 150.990160][ T5540] usbtmc 5-1:16.0: simple usb_control_msg failed -32 [ 150.998358][ T4323] usb 5-1: USB disconnect, device number 5 [ 151.091959][ T5544] No such timeout policy "syz0" [ 151.185139][ T5544] loop3: detected capacity change from 0 to 1024 [ 151.237135][ T5544] EXT4-fs (loop3): unsupported inode size: 8 [ 151.243458][ T5544] EXT4-fs (loop3): blocksize: 1024 [ 151.631318][ T4315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 151.647245][ T4315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 151.697132][ T4315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 151.751633][ T4315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 151.784927][ T4315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 151.815780][ T4315] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 151.840387][ T4315] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 151.989763][ T5558] fuse: Bad value for 'fd' [ 152.117753][ T5562] device syzkaller0 entered promiscuous mode [ 152.430953][ T5573] siw: device registration error -23 [ 153.133028][ T4315] usb 2-1: USB disconnect, device number 7 [ 153.224884][ T5579] fuse: Invalid rootmode [ 153.526157][ T5595] fuse: Bad value for 'fd' [ 153.702844][ T4315] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 153.847809][ T5600] loop3: detected capacity change from 0 to 512 [ 153.932848][ T4315] usb 1-1: Using ep0 maxpacket: 16 [ 153.940342][ T5610] siw: device registration error -23 [ 154.684845][ T4315] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 154.777434][ T5600] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.364: inode has both inline data and extents flags [ 154.799982][ T5616] device syzkaller0 entered promiscuous mode [ 154.807696][ T4315] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 154.819260][ T5600] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.364: couldn't read orphan inode 15 (err -117) [ 154.889045][ T5600] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 154.906443][ T4315] usb 1-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 154.926148][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.997568][ T4315] usb 1-1: config 0 descriptor?? [ 155.082390][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 155.887434][ T5626] fuse: Invalid rootmode [ 156.381784][ T5632] netlink: 16 bytes leftover after parsing attributes in process `syz.1.374'. [ 156.915339][ T5643] fuse: Bad value for 'fd' [ 157.075191][ T4315] usb 1-1: string descriptor 0 read error: -71 [ 157.112499][ T4315] usb 1-1: USB disconnect, device number 6 [ 157.266253][ T5647] loop3: detected capacity change from 0 to 512 [ 157.322585][ T5650] device syzkaller0 entered promiscuous mode [ 157.370360][ T5647] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.380: inode has both inline data and extents flags [ 157.457405][ T5647] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.380: couldn't read orphan inode 15 (err -117) [ 157.496486][ T5647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 157.664940][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 157.894420][ T5658] fuse: Invalid rootmode [ 158.447205][ T26] audit: type=1326 audit(1773344099.437:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.174773][ T26] audit: type=1326 audit(1773344100.167:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.271835][ T26] audit: type=1326 audit(1773344100.167:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.385467][ T26] audit: type=1326 audit(1773344100.167:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.487757][ T26] audit: type=1326 audit(1773344100.167:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.596601][ T26] audit: type=1326 audit(1773344100.167:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.660789][ T26] audit: type=1326 audit(1773344100.167:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.713187][ T26] audit: type=1326 audit(1773344100.167:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.804278][ T26] audit: type=1326 audit(1773344100.167:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 159.849842][ T26] audit: type=1326 audit(1773344100.167:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5667 comm="syz.0.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 160.115586][ T5706] netlink: 16 bytes leftover after parsing attributes in process `syz.2.400'. [ 160.152828][ T4315] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 160.352955][ T4315] usb 4-1: Using ep0 maxpacket: 32 [ 160.359680][ T4315] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 160.384898][ T4315] usb 4-1: config 0 has no interface number 0 [ 160.396520][ T4315] usb 4-1: config 0 interface 184 has no altsetting 0 [ 160.421738][ T4315] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 160.478528][ T4315] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.596763][ T4315] usb 4-1: Product: syz [ 160.605687][ T4315] usb 4-1: Manufacturer: syz [ 160.618901][ T4315] usb 4-1: SerialNumber: syz [ 160.686214][ T5719] No such timeout policy "syz0" [ 160.972583][ T4315] usb 4-1: config 0 descriptor?? [ 160.991467][ T4315] smsc75xx v1.0.0 [ 161.588732][ T4315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 161.620716][ T4315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 161.650386][ T4315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 161.672320][ T4315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 161.685092][ T4315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 161.697132][ T4315] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 161.708449][ T4315] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 162.128247][ T5744] netlink: 20 bytes leftover after parsing attributes in process `syz.0.410'. [ 162.207873][ T5744] device geneve2 entered promiscuous mode [ 162.444724][ T5752] netlink: 16 bytes leftover after parsing attributes in process `syz.0.413'. [ 162.719180][ T5754] fuse: Unknown parameter ' ' [ 162.778011][ T5763] No such timeout policy "syz0" [ 162.797682][ T5763] loop1: detected capacity change from 0 to 1024 [ 163.357159][ T5763] EXT4-fs (loop1): unsupported inode size: 8 [ 163.364023][ T5763] EXT4-fs (loop1): blocksize: 1024 [ 163.457654][ T4315] usb 4-1: USB disconnect, device number 7 [ 163.820544][ T5775] fuse: Invalid rootmode [ 164.113495][ T5789] netlink: 'syz.3.425': attribute type 1 has an invalid length. [ 164.211150][ T5789] 8021q: adding VLAN 0 to HW filter on device bond3 [ 164.304504][ T5791] bond3: (slave syz_tun): making interface the new active one [ 164.324766][ T5791] bond3: (slave syz_tun): Enslaving as an active interface with an up link [ 164.338593][ T4555] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 164.884146][ T5805] No such timeout policy "syz0" [ 164.904848][ T5805] loop3: detected capacity change from 0 to 1024 [ 165.910430][ T5805] EXT4-fs (loop3): unsupported inode size: 8 [ 165.916826][ T5805] EXT4-fs (loop3): blocksize: 1024 [ 166.090571][ T5807] device syzkaller0 entered promiscuous mode [ 167.390388][ T5802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.428'. [ 167.420447][ T5802] netlink: 12 bytes leftover after parsing attributes in process `syz.2.428'. [ 167.826032][ T5847] fuse: Unknown parameter 'use00000000000000000000' [ 167.835099][ T4323] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 168.050085][ T4323] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 168.116858][ T5855] loop0: detected capacity change from 0 to 16 [ 168.181025][ T4323] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.226343][ T4323] usb 5-1: config 0 has no interface number 0 [ 168.242516][ T4323] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 168.284649][ T4323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.728955][ T4323] usb 5-1: Product: syz [ 168.738019][ T5855] erofs: (device loop0): mounted with root inode @ nid 36. [ 168.753594][ T5854] syz.0.446: attempt to access beyond end of device [ 168.753594][ T5854] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 168.773456][ T5854] syz.0.446: attempt to access beyond end of device [ 168.773456][ T5854] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 168.789317][ T5854] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 168.800522][ T26] kauditd_printk_skb: 58 callbacks suppressed [ 168.800534][ T26] audit: type=1800 audit(1773344109.787:124): pid=5854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.446" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 168.826219][ T4323] usb 5-1: Manufacturer: syz [ 168.830944][ T5854] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 168.841969][ T5854] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 168.853193][ T4323] usb 5-1: SerialNumber: syz [ 168.858383][ T5854] 9pnet_fd: Insufficient options for proto=fd [ 168.883608][ T4323] usb 5-1: config 0 descriptor?? [ 168.889981][ T4323] hub 5-1:0.31: bad descriptor, ignoring hub [ 168.896075][ T4323] hub: probe of 5-1:0.31 failed with error -5 [ 168.903238][ T4323] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 168.909686][ T4323] uvcvideo 5-1:0.31: Entity type for entity Output 6 was not initialized! [ 168.925277][ T4323] usb 5-1: Failed to create links for entity 6 [ 168.944040][ T4323] usb 5-1: Failed to register entities (-22). [ 169.102153][ T5839] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.148327][ T5839] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.323434][ T4315] usb 5-1: USB disconnect, device number 6 [ 169.380809][ T5863] netlink: 16 bytes leftover after parsing attributes in process `syz.0.452'. [ 169.682787][ T4315] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 169.744430][ T5871] overlayfs: missing 'lowerdir' [ 171.292818][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 171.300034][ T4315] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 171.351490][ T4315] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.369349][ T5878] fuse: Unknown parameter 'use00000000000000000000' [ 171.394661][ T4315] usb 1-1: config 0 descriptor?? [ 171.421575][ T5876] fuse: Bad value for 'rootmode' [ 171.603909][ T4315] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 171.684625][ T4315] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 171.710037][ T4315] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 171.728270][ T4315] usb 1-1: media controller created [ 171.781728][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.476756][ T4316] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 172.584612][ T4315] DVB: Unable to find symbol dib7000p_attach() [ 172.591585][ T4315] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 172.687856][ T4316] usb 5-1: Using ep0 maxpacket: 8 [ 172.700819][ T4316] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 172.730331][ T4316] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 172.762372][ T4316] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 172.777594][ T4316] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 172.788168][ T4316] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 172.798819][ T4316] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 172.812467][ T4316] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 172.821983][ T4315] rc_core: IR keymap rc-dib0700-rc5 not found [ 172.891302][ T5909] overlayfs: missing 'lowerdir' [ 173.923469][ T4316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.932448][ T4315] Registered IR keymap rc-empty [ 173.937568][ T4315] dvb-usb: could not initialize remote control. [ 173.945030][ T4315] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 174.464387][ T4316] usbtmc: probe of 5-1:16.0 failed with error -22 [ 174.508241][ T4315] usb 1-1: USB disconnect, device number 7 [ 174.554371][ T4315] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 174.559359][ T5924] fuse: Bad value for 'rootmode' [ 175.412928][ T26] audit: type=1326 audit(1773344116.387:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5929 comm="syz.3.473" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72c4f9c799 code=0x7fc00000 [ 176.137583][ T27] usb 5-1: USB disconnect, device number 7 [ 176.451760][ T5960] loop4: detected capacity change from 0 to 16 [ 177.123637][ T5960] erofs: (device loop4): mounted with root inode @ nid 36. [ 177.136770][ T5957] syz.4.479: attempt to access beyond end of device [ 177.136770][ T5957] loop4: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 177.155967][ T5961] IPv6: NLM_F_CREATE should be specified when creating new route [ 177.165857][ T5957] syz.4.479: attempt to access beyond end of device [ 177.165857][ T5957] loop4: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 177.182099][ T5957] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 177.193631][ T26] audit: type=1800 audit(1773344118.187:126): pid=5957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.479" name="file2" dev="loop4" ino=89 res=0 errno=0 [ 177.215630][ T5957] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 177.227186][ T5957] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 177.246259][ T5957] 9pnet_fd: Insufficient options for proto=fd [ 177.262366][ T5963] overlayfs: missing 'lowerdir' [ 178.519251][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 178.677845][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 178.756439][ T5980] No such timeout policy "syz0" [ 178.833787][ T5981] loop2: detected capacity change from 0 to 1024 [ 179.787794][ T5981] EXT4-fs (loop2): unsupported inode size: 8 [ 179.793882][ T5981] EXT4-fs (loop2): blocksize: 1024 [ 179.908258][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 179.922636][ T5975] loop4: detected capacity change from 0 to 512 [ 180.067017][ T5975] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.487: inode has both inline data and extents flags [ 180.090814][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 180.104704][ T5975] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.487: couldn't read orphan inode 15 (err -117) [ 180.135044][ T5975] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 180.360188][ T127] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 180.410867][ T5972] netlink: 8 bytes leftover after parsing attributes in process `syz.3.485'. [ 180.792848][ T4285] Bluetooth: hci0: command 0x0406 tx timeout [ 180.799057][ T4285] Bluetooth: hci4: command 0x0406 tx timeout [ 180.805229][ T4286] Bluetooth: hci3: command 0x0406 tx timeout [ 180.811250][ T4286] Bluetooth: hci1: command 0x0406 tx timeout [ 180.817341][ T4286] Bluetooth: hci2: command 0x0406 tx timeout [ 181.540921][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 181.582776][ T127] usb 3-1: Using ep0 maxpacket: 8 [ 181.654437][ T127] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 181.662621][ T127] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 181.758475][ T127] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 181.803299][ T127] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 181.834136][ T127] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 181.849794][ T127] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 181.869956][ T127] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 181.871381][ T5997] fuse: Unknown parameter 'use00000000000000000000' [ 181.879957][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.946139][ T127] usbtmc: probe of 3-1:16.0 failed with error -22 [ 184.070133][ T4316] usb 3-1: USB disconnect, device number 8 [ 184.198114][ T6028] loop2: detected capacity change from 0 to 512 [ 184.249040][ T6028] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.502: inode has both inline data and extents flags [ 184.265614][ T6028] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.502: couldn't read orphan inode 15 (err -117) [ 184.278108][ T6028] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 184.341240][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 185.932794][ T4315] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 186.004293][ T6049] fuse: Unknown parameter 'use00000000000000000000' [ 186.150544][ T4315] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.203069][ T4315] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 186.212045][ T4315] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 186.248136][ T4315] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.302606][ T4315] usb 4-1: config 0 descriptor?? [ 186.325479][ T4315] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 186.384348][ T4315] dvb-usb: bulk message failed: -22 (3/0) [ 186.403374][ T4315] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 186.438890][ T4315] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 186.456785][ T4315] usb 4-1: media controller created [ 186.476255][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 186.499914][ T4315] dvb-usb: bulk message failed: -22 (6/0) [ 186.505932][ T4315] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 186.518808][ T4315] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 186.541536][ T6035] dvb-usb: bulk message failed: -22 (2/0) [ 186.561680][ T4315] dvb-usb: schedule remote query interval to 150 msecs. [ 186.597350][ T4315] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 186.630933][ T4315] usb 4-1: USB disconnect, device number 8 [ 186.699644][ T4315] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 186.722860][ T127] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 186.849455][ T6070] loop0: detected capacity change from 0 to 512 [ 186.934065][ T127] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 186.947358][ T6070] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.515: inode has both inline data and extents flags [ 186.988722][ T6070] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.515: couldn't read orphan inode 15 (err -117) [ 186.992027][ T127] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.024213][ T6070] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 187.072355][ T127] usb 3-1: config 0 descriptor?? [ 187.104837][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 189.036151][ T6094] netlink: 'syz.0.520': attribute type 1 has an invalid length. [ 189.351665][ T6094] 8021q: adding VLAN 0 to HW filter on device bond2 [ 190.837525][ T127] usb 3-1: Cannot set autoneg [ 190.844106][ T127] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 190.885384][ T127] usb 3-1: USB disconnect, device number 9 [ 191.778902][ T6130] loop2: detected capacity change from 0 to 512 [ 191.856241][ T6130] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.528: inode has both inline data and extents flags [ 191.905183][ T6130] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.528: couldn't read orphan inode 15 (err -117) [ 191.975980][ T6130] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 193.599254][ T6123] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 193.613799][ T6123] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 193.841500][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 193.948004][ T6146] loop0: detected capacity change from 0 to 16 [ 193.974816][ T6146] erofs: (device loop0): mounted with root inode @ nid 36. [ 193.994386][ T6146] syz.0.532: attempt to access beyond end of device [ 193.994386][ T6146] loop0: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 194.051472][ T6148] 9pnet_fd: Insufficient options for proto=fd [ 194.077808][ T6146] syz.0.532: attempt to access beyond end of device [ 194.077808][ T6146] loop0: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 194.103332][ T6146] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 194.124525][ T26] audit: type=1800 audit(1773344135.117:127): pid=6146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.532" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 194.124808][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.176236][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.615968][ T6143] netlink: 'syz.3.533': attribute type 1 has an invalid length. [ 194.650327][ T6146] syz.0.532 (6146) used greatest stack depth: 19472 bytes left [ 195.016165][ T6158] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 6158 comm: syz.2.531) [ 195.052108][ T26] audit: type=1800 audit(1773344136.037:128): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.531" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=41738 res=0 errno=0 [ 195.232816][ T27] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 195.268311][ T6155] lo speed is unknown, defaulting to 1000 [ 195.454639][ T27] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 195.470302][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.509158][ T27] usb 5-1: config 0 descriptor?? [ 195.914976][ T6183] loop2: detected capacity change from 0 to 512 [ 196.120414][ T6183] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.542: inode has both inline data and extents flags [ 196.203268][ T6183] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.542: couldn't read orphan inode 15 (err -117) [ 196.247097][ T6183] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 196.426144][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 198.108131][ T6217] netlink: 165 bytes leftover after parsing attributes in process `syz.0.553'. [ 198.342275][ T27] usb 5-1: Cannot set autoneg [ 198.351022][ T27] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71 [ 198.413613][ T27] usb 5-1: USB disconnect, device number 8 [ 198.892965][ T6229] No such timeout policy "syz0" [ 198.913290][ T6229] loop1: detected capacity change from 0 to 1024 [ 199.968662][ T6229] EXT4-fs (loop1): unsupported inode size: 8 [ 199.974916][ T6229] EXT4-fs (loop1): blocksize: 1024 [ 200.167160][ T6230] loop0: detected capacity change from 0 to 512 [ 200.472947][ T6230] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.558: inode has both inline data and extents flags [ 200.499763][ T6230] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.558: couldn't read orphan inode 15 (err -117) [ 200.502838][ T6223] mmap: syz.3.556 (6223) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 200.543160][ T6230] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 200.755444][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 202.062923][ T27] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.264283][ T27] usb 2-1: Using ep0 maxpacket: 32 [ 202.273602][ T27] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 202.288217][ T27] usb 2-1: config 0 has no interface number 0 [ 202.296951][ T27] usb 2-1: config 0 interface 184 has no altsetting 0 [ 202.312302][ T27] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 202.321700][ T27] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.335913][ T27] usb 2-1: Product: syz [ 202.360919][ T27] usb 2-1: Manufacturer: syz [ 202.368179][ T27] usb 2-1: SerialNumber: syz [ 202.384172][ T27] usb 2-1: config 0 descriptor?? [ 202.395371][ T27] smsc75xx v1.0.0 [ 202.512570][ T6300] input: syz1 as /devices/virtual/input/input10 [ 202.995388][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 203.010242][ T6310] fuse: Bad value for 'fd' [ 203.017689][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 203.038456][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 203.091359][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 203.111709][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 203.124810][ T27] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 203.144277][ T27] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 203.475774][ T6327] loop2: detected capacity change from 0 to 512 [ 203.527033][ T6327] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.591: inode has both inline data and extents flags [ 203.543518][ T6327] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.591: couldn't read orphan inode 15 (err -117) [ 203.566477][ T6327] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 203.628377][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 203.692891][ T4312] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 203.857275][ T6335] netlink: 165 bytes leftover after parsing attributes in process `syz.2.593'. [ 203.904648][ T4312] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 203.918113][ T4312] usb 1-1: config 0 has no interface number 0 [ 203.930685][ T4312] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 203.940196][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.949211][ T4312] usb 1-1: Product: syz [ 203.951463][ T6338] fuse: Unknown parameter 'user_id00000000000000000000' [ 203.953935][ T4312] usb 1-1: Manufacturer: syz [ 203.966721][ T4312] usb 1-1: SerialNumber: syz [ 203.992300][ T4312] usb 1-1: config 0 descriptor?? [ 204.220315][ T4312] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 204.249919][ T4312] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.282208][ T4312] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 204.307992][ T4312] usb 1-1: media controller created [ 204.335422][ T6348] fuse: Bad value for 'fd' [ 204.356481][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 204.647589][ T6361] loop3: detected capacity change from 0 to 512 [ 204.711964][ T6361] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.602: inode has both inline data and extents flags [ 204.827328][ T6361] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.602: couldn't read orphan inode 15 (err -117) [ 204.840706][ T1169] usb 2-1: USB disconnect, device number 8 [ 204.863479][ T6361] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 204.952618][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 205.010370][ T6371] netlink: 165 bytes leftover after parsing attributes in process `syz.1.606'. [ 205.236638][ T6374] fuse: Bad value for 'fd' [ 205.268395][ T6379] fuse: Bad value for 'fd' [ 205.351277][ T6386] device syzkaller0 entered promiscuous mode [ 205.455351][ T4312] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 205.455366][ T6325] usb 1-1: dvb_usb_ec168: I2C read not implemented [ 205.512150][ T127] usb 1-1: USB disconnect, device number 8 [ 205.893941][ T6408] netlink: 165 bytes leftover after parsing attributes in process `syz.3.619'. [ 205.922886][ T4312] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.158399][ T4312] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 206.177364][ T4312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.200780][ T4312] usb 3-1: config 0 descriptor?? [ 206.345994][ T6422] device syzkaller0 entered promiscuous mode [ 206.437734][ T6423] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 207.156494][ T6452] device syzkaller0 entered promiscuous mode [ 207.232954][ T4315] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 207.449862][ T4315] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 207.469280][ T4315] usb 5-1: config 0 has no interface number 0 [ 207.482246][ T4315] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 207.499308][ T4315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.508735][ T4315] usb 5-1: Product: syz [ 207.516166][ T4315] usb 5-1: Manufacturer: syz [ 207.521011][ T4315] usb 5-1: SerialNumber: syz [ 207.540954][ T4315] usb 5-1: config 0 descriptor?? [ 207.780121][ T4315] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 207.800941][ T4315] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 207.849195][ T4315] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 207.858395][ T4315] usb 5-1: media controller created [ 207.889307][ T4315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 208.031899][ T6470] netlink: 'syz.3.646': attribute type 1 has an invalid length. [ 208.521815][ T6483] fuse: Unknown parameter '0x0000000000000003' [ 208.767243][ T6487] fuse: Bad value for 'fd' [ 209.033309][ T4315] i2c i2c-1: ec100: i2c rd failed=-110 reg=33 [ 209.039460][ T6443] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 209.051061][ T4312] usb 3-1: Cannot set autoneg [ 209.061859][ T4312] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -71 [ 209.105326][ T4312] usb 3-1: USB disconnect, device number 10 [ 209.139420][ T4315] usb 5-1: USB disconnect, device number 9 [ 209.542916][ T6513] netlink: 'syz.1.660': attribute type 1 has an invalid length. [ 210.244026][ T6544] overlayfs: missing 'lowerdir' [ 211.383813][ T6558] netlink: 'syz.2.678': attribute type 1 has an invalid length. [ 211.428677][ T4320] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 211.645534][ T4320] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 211.668312][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.774000][ T4320] usb 4-1: config 0 descriptor?? [ 212.965712][ T6588] fuse: Unknown parameter '0x0000000000000003' [ 213.320622][ T6601] overlayfs: missing 'lowerdir' [ 215.056248][ T4320] usb 4-1: Cannot set autoneg [ 215.083978][ T4320] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -71 [ 215.114033][ T6605] md: superblock version 12389 not known [ 215.120078][ T6605] md: couldn't set array info. -22 [ 215.143231][ T4320] usb 4-1: USB disconnect, device number 9 [ 215.183601][ T6606] md: md2 stopped. [ 216.542098][ T6639] overlayfs: missing 'lowerdir' [ 218.317985][ T4312] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 218.418543][ T6656] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 218.676609][ T6659] device bridge0 entered promiscuous mode [ 218.683095][ T6659] device macsec1 entered promiscuous mode [ 218.954991][ T4312] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 218.981290][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.029315][ T4312] usb 1-1: config 0 descriptor?? [ 219.335169][ T6663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 219.376636][ T6663] netlink: 48 bytes leftover after parsing attributes in process `syz.2.716'. [ 219.441629][ T6649] lo speed is unknown, defaulting to 1000 [ 219.470953][ T6677] overlayfs: missing 'lowerdir' [ 221.091998][ T6685] loop1: detected capacity change from 0 to 512 [ 221.100467][ T4312] usb 1-1: Cannot set autoneg [ 221.100618][ T4312] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 221.105397][ T4312] usb 1-1: USB disconnect, device number 9 [ 221.233803][ T6685] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.722: inode has both inline data and extents flags [ 221.237354][ T6685] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.722: couldn't read orphan inode 15 (err -117) [ 221.237581][ T6685] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 221.527605][ T1169] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 221.818695][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 221.843025][ T4316] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 221.923055][ T1169] usb 4-1: device descriptor read/64, error -71 [ 222.113928][ T6700] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 222.330889][ T4316] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.341740][ T4316] usb 3-1: config 0 has no interface number 0 [ 222.355114][ T4316] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 222.367211][ T1169] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 222.391608][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.415790][ T4316] usb 3-1: Product: syz [ 222.420001][ T4316] usb 3-1: Manufacturer: syz [ 222.425845][ T4316] usb 3-1: SerialNumber: syz [ 222.443834][ T4316] usb 3-1: config 0 descriptor?? [ 222.523104][ T1169] usb 4-1: device descriptor read/64, error -71 [ 222.643079][ T1169] usb usb4-port1: attempt power cycle [ 222.665742][ T4316] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 222.701691][ T6710] overlayfs: missing 'lowerdir' [ 222.765011][ T4316] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 224.088981][ T4316] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 224.113342][ T4316] usb 3-1: media controller created [ 224.130425][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 224.182782][ T1169] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 224.223143][ T1169] usb 4-1: device descriptor read/8, error -71 [ 224.233512][ T4316] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 224.376281][ T4316] usb 3-1: USB disconnect, device number 11 [ 224.479896][ T6729] 9pnet_virtio: no channels available for device syz [ 224.662748][ T127] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 224.880411][ T127] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 224.894210][ T127] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.917639][ T127] usb 5-1: config 0 descriptor?? [ 225.000748][ T26] audit: type=1800 audit(1773344165.987:129): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.739" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 227.157292][ T127] usb 5-1: Cannot set autoneg [ 227.162295][ T127] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 227.760749][ T6756] device syzkaller0 entered promiscuous mode [ 227.999804][ T6766] overlayfs: missing 'lowerdir' [ 229.488748][ T4313] usb 5-1: USB disconnect, device number 10 [ 229.635055][ T6771] loop2: detected capacity change from 0 to 512 [ 229.752796][ T4320] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 229.787095][ T6771] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.746: inode has both inline data and extents flags [ 229.810687][ T6771] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.746: couldn't read orphan inode 15 (err -117) [ 229.835259][ T6771] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 229.941840][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 229.942868][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 229.955237][ T4320] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 230.008908][ T4320] usb 4-1: config 16 has an invalid interface number: 48 but max is 0 [ 230.050902][ T4320] usb 4-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 230.092818][ T4312] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 230.111681][ T4320] usb 4-1: config 16 has no interface number 0 [ 230.222784][ T4320] usb 4-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 230.236462][ T4320] usb 4-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 230.266192][ T4320] usb 4-1: config 16 interface 48 has no altsetting 0 [ 230.289226][ T4312] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 231.150099][ T4312] usb 2-1: config 0 has no interface number 0 [ 231.356838][ T4320] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.366125][ T4320] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.403144][ T4312] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 231.426846][ T4312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.437322][ T4312] usb 2-1: Product: syz [ 231.442559][ T4312] usb 2-1: Manufacturer: syz [ 231.447816][ T4312] usb 2-1: SerialNumber: syz [ 231.473012][ T4312] usb 2-1: config 0 descriptor?? [ 231.588391][ T4320] usb 4-1: string descriptor 0 read error: -71 [ 231.609495][ T4320] usb 4-1: USB disconnect, device number 14 [ 231.687410][ T4312] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 231.692851][ T127] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 231.707714][ T4312] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 231.763003][ T4312] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 231.771073][ T4312] usb 2-1: media controller created [ 231.889327][ T6782] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 232.118776][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 232.132781][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 232.139309][ T127] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 232.168041][ T127] usb 5-1: config 0 has no interface number 0 [ 232.199651][ T127] usb 5-1: config 0 interface 184 has no altsetting 0 [ 232.227188][ T4312] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 232.244721][ T127] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 232.258563][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.313069][ T127] usb 5-1: Product: syz [ 232.317386][ T127] usb 5-1: Manufacturer: syz [ 232.322006][ T127] usb 5-1: SerialNumber: syz [ 232.354584][ T4312] usb 2-1: USB disconnect, device number 9 [ 232.409871][ T127] usb 5-1: config 0 descriptor?? [ 232.445974][ T127] smsc75xx v1.0.0 [ 232.850612][ T6813] loop0: detected capacity change from 0 to 512 [ 232.892118][ T6813] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.760: inode has both inline data and extents flags [ 232.917749][ T6813] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.760: couldn't read orphan inode 15 (err -117) [ 232.932843][ T6813] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.982910][ T4316] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 233.065549][ T127] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 233.080901][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 233.091335][ T127] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.174577][ T4316] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 233.194349][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.210152][ T6819] netlink: 165 bytes leftover after parsing attributes in process `syz.0.761'. [ 233.239495][ T4316] usb 2-1: config 0 descriptor?? [ 233.324183][ T127] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 233.340863][ T127] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 233.368652][ T127] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 233.391601][ T127] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 233.907917][ T127] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 234.102880][ T127] usb 1-1: Using ep0 maxpacket: 8 [ 234.109682][ T127] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 234.118113][ T127] usb 1-1: config 16 has an invalid interface number: 48 but max is 0 [ 234.126572][ T127] usb 1-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 234.137411][ T127] usb 1-1: config 16 has no interface number 0 [ 234.145856][ T127] usb 1-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 234.157777][ T127] usb 1-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 234.171289][ T127] usb 1-1: config 16 interface 48 has no altsetting 0 [ 234.178176][ T127] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 234.187439][ T127] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.342827][ T4320] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 234.377185][ T1169] usb 5-1: USB disconnect, device number 11 [ 234.405489][ T127] usb 1-1: string descriptor 0 read error: -71 [ 234.422602][ T127] usb 1-1: USB disconnect, device number 10 [ 234.525237][ T4320] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 234.536703][ T4320] usb 3-1: config 0 has no interface number 0 [ 234.549123][ T4320] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 234.561717][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.585157][ T4320] usb 3-1: Product: syz [ 234.590047][ T4320] usb 3-1: Manufacturer: syz [ 234.598056][ T4320] usb 3-1: SerialNumber: syz [ 234.607222][ T4320] usb 3-1: config 0 descriptor?? [ 234.821337][ T4320] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 234.841352][ T4320] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 234.865543][ T6842] loop4: detected capacity change from 0 to 512 [ 234.873042][ T4320] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 234.881094][ T4320] usb 3-1: media controller created [ 234.938841][ T4320] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 234.949273][ T6842] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.771: inode has both inline data and extents flags [ 234.963533][ T6842] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.771: couldn't read orphan inode 15 (err -117) [ 234.996181][ T6842] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 235.031436][ T4320] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 235.175515][ T4320] usb 3-1: USB disconnect, device number 12 [ 235.189754][ T6853] fuse: Bad value for 'fd' [ 235.210255][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 235.522778][ T4316] usb 2-1: Cannot set autoneg [ 235.527627][ T4316] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -32 [ 235.623231][ T127] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 235.902876][ T127] usb 4-1: Using ep0 maxpacket: 32 [ 235.909655][ T127] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 235.918919][ T127] usb 4-1: config 0 has no interface number 0 [ 235.925270][ T127] usb 4-1: config 0 interface 184 has no altsetting 0 [ 235.934698][ T127] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 235.943876][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.952560][ T127] usb 4-1: Product: syz [ 235.956844][ T127] usb 4-1: Manufacturer: syz [ 235.961485][ T127] usb 4-1: SerialNumber: syz [ 235.968545][ T127] usb 4-1: config 0 descriptor?? [ 235.975159][ T127] smsc75xx v1.0.0 [ 236.471550][ T6879] loop0: detected capacity change from 0 to 512 [ 236.507402][ T6879] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.786: inode has both inline data and extents flags [ 236.522776][ T4313] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 236.543184][ T6879] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.786: couldn't read orphan inode 15 (err -117) [ 236.566590][ T6879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 236.584353][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 236.589133][ T4316] usb 2-1: USB disconnect, device number 10 [ 236.611511][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 236.731191][ T4313] usb 5-1: Using ep0 maxpacket: 8 [ 236.740087][ T4313] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 236.768364][ T4313] usb 5-1: config 16 has an invalid interface number: 48 but max is 0 [ 236.798065][ T4313] usb 5-1: config 16 has an invalid descriptor of length 102, skipping remainder of the config [ 236.833292][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 236.955837][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 236.967541][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 236.978507][ T4313] usb 5-1: config 16 has no interface number 0 [ 236.984840][ T4313] usb 5-1: too many endpoints for config 16 interface 48 altsetting 120: 102, using maximum allowed: 30 [ 236.996522][ T127] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 237.006174][ T127] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 237.013113][ T4313] usb 5-1: config 16 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 102 [ 237.034644][ T4313] usb 5-1: config 16 interface 48 has no altsetting 0 [ 237.041616][ T4313] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 237.139212][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.648303][ T4313] usb 5-1: string descriptor 0 read error: -71 [ 237.678425][ T4313] usb 5-1: USB disconnect, device number 12 [ 238.065901][ T6910] device syzkaller0 entered promiscuous mode [ 238.082921][ T4316] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 238.240199][ T6914] loop4: detected capacity change from 0 to 512 [ 238.264348][ T4316] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 238.276158][ T6914] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.799: inode has both inline data and extents flags [ 238.282601][ T4316] usb 3-1: config 0 has no interface number 0 [ 238.300018][ T6914] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.799: couldn't read orphan inode 15 (err -117) [ 238.316090][ T6914] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 238.316829][ T4316] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 238.383318][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.396046][ T4320] usb 4-1: USB disconnect, device number 15 [ 238.418611][ T4316] usb 3-1: Product: syz [ 238.436913][ T4316] usb 3-1: Manufacturer: syz [ 238.441538][ T4316] usb 3-1: SerialNumber: syz [ 238.459191][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 238.465988][ T4316] usb 3-1: config 0 descriptor?? [ 238.503273][ T4313] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 238.714397][ T4313] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 238.730370][ T4316] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 238.741126][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.754052][ T4316] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 238.764243][ T4313] usb 2-1: config 0 descriptor?? [ 238.779884][ T4316] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 238.796165][ T4316] usb 3-1: media controller created [ 238.850166][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 238.937689][ T4316] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 238.990844][ T4316] usb 3-1: USB disconnect, device number 13 [ 239.259267][ T6939] device syzkaller0 entered promiscuous mode [ 239.352807][ T14] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 239.444896][ T6943] loop4: detected capacity change from 0 to 512 [ 239.482447][ T6943] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.810: inode has both inline data and extents flags [ 239.506681][ T6943] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.810: couldn't read orphan inode 15 (err -117) [ 239.566348][ T6943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 239.662862][ T127] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 239.770625][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 239.852975][ T127] usb 4-1: Using ep0 maxpacket: 8 [ 239.867477][ T127] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 239.902893][ T4351] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 239.924420][ T127] usb 4-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 239.985991][ T127] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.021082][ T127] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.033846][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.076759][ T127] usbtmc 4-1:16.0: bulk endpoints not found [ 240.098472][ T14] usb 1-1: unable to get BOS descriptor or descriptor too short [ 240.104538][ T4351] usb 3-1: Using ep0 maxpacket: 32 [ 240.109035][ T14] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 240.119496][ T14] usb 1-1: can't read configurations, error -71 [ 240.119568][ T4351] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 240.144509][ T4351] usb 3-1: config 0 has no interface number 0 [ 240.150663][ T4351] usb 3-1: config 0 interface 184 has no altsetting 0 [ 240.161166][ T4351] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 240.170424][ T4351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.178664][ T4351] usb 3-1: Product: syz [ 240.183247][ T4351] usb 3-1: Manufacturer: syz [ 240.188046][ T4351] usb 3-1: SerialNumber: syz [ 240.195574][ T4351] usb 3-1: config 0 descriptor?? [ 240.202238][ T4351] smsc75xx v1.0.0 [ 240.809122][ T4351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 240.822313][ T4351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 241.001692][ T4313] usb 2-1: Cannot set autoneg [ 241.007619][ T4313] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -32 [ 241.039299][ T4351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 241.052434][ T4351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 241.096304][ T4351] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 241.110428][ T4351] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 241.200915][ T6971] netlink: 165 bytes leftover after parsing attributes in process `syz.4.819'. [ 241.299466][ T6973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.309062][ T6973] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.364931][ T6973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 242.050938][ T14] usb 2-1: USB disconnect, device number 11 [ 242.409427][ T1169] usb 4-1: USB disconnect, device number 16 [ 242.522793][ T14] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 242.691943][ T4351] usb 3-1: USB disconnect, device number 14 [ 242.719878][ T14] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 242.738135][ T14] usb 2-1: config 0 has no interface number 0 [ 242.760042][ T14] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 242.784176][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.818063][ T14] usb 2-1: Product: syz [ 242.822286][ T14] usb 2-1: Manufacturer: syz [ 242.837935][ T14] usb 2-1: SerialNumber: syz [ 242.864014][ T14] usb 2-1: config 0 descriptor?? [ 242.999397][ T7003] netlink: 'syz.2.827': attribute type 1 has an invalid length. [ 243.012786][ T1169] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 243.088376][ T14] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 243.104874][ T14] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 243.129637][ T14] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 243.155922][ T14] usb 2-1: media controller created [ 243.192505][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 243.769701][ T1169] usb 1-1: unable to get BOS descriptor or descriptor too short [ 243.781417][ T1169] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 243.789390][ T1169] usb 1-1: can't read configurations, error -71 [ 243.813133][ T14] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 243.890078][ T14] usb 2-1: USB disconnect, device number 12 [ 244.327463][ T4313] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 244.432979][ T14] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 244.537643][ T4313] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 244.549150][ T4313] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.569963][ T4313] usb 5-1: config 0 descriptor?? [ 244.632825][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 244.639877][ T14] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 244.662144][ T14] usb 4-1: config 16 has an invalid descriptor of length 120, skipping remainder of the config [ 244.710389][ T14] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 244.723073][ T4351] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 244.724000][ T14] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 244.752083][ T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.762961][ T7028] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 244.801470][ T14] usbtmc 4-1:16.0: bulk endpoints not found [ 244.808889][ T7028] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 244.925669][ T4351] usb 2-1: Using ep0 maxpacket: 32 [ 244.932482][ T4351] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 244.961725][ T4351] usb 2-1: config 0 has no interface number 0 [ 244.982896][ T4351] usb 2-1: config 0 interface 184 has no altsetting 0 [ 245.020720][ T4351] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 245.050853][ T4351] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.125834][ T4351] usb 2-1: Product: syz [ 245.172284][ T4351] usb 2-1: Manufacturer: syz [ 245.205547][ T4351] usb 2-1: SerialNumber: syz [ 245.268273][ T4351] usb 2-1: config 0 descriptor?? [ 245.331940][ T4351] smsc75xx v1.0.0 [ 245.922802][ T4351] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 245.942335][ T4351] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 246.165050][ T4351] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 246.176276][ T4351] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 246.186852][ T4351] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 246.196752][ T4351] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 246.799896][ T4313] usb 5-1: Cannot set autoneg [ 246.804840][ T4313] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 247.162327][ T127] usb 4-1: USB disconnect, device number 17 [ 247.450610][ T4351] usb 2-1: USB disconnect, device number 13 [ 247.602995][ T127] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 247.825618][ T127] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 247.827704][ T1169] usb 5-1: USB disconnect, device number 13 [ 247.879940][ T127] usb 4-1: config 0 has no interface number 0 [ 247.927569][ T127] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 248.036514][ T127] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.084652][ T127] usb 4-1: Product: syz [ 248.095529][ T127] usb 4-1: Manufacturer: syz [ 248.107197][ T127] usb 4-1: SerialNumber: syz [ 248.129518][ T127] usb 4-1: config 0 descriptor?? [ 248.363577][ T127] dvb_usb_ec168: probe of 4-1:0.1 failed with error -71 [ 248.391013][ T127] usb 4-1: USB disconnect, device number 18 [ 249.472823][ T127] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 249.662866][ T127] usb 1-1: Using ep0 maxpacket: 32 [ 249.672141][ T127] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 249.688428][ T127] usb 1-1: config 0 has no interface number 0 [ 249.695773][ T127] usb 1-1: config 0 interface 184 has no altsetting 0 [ 249.710938][ T127] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 249.720545][ T127] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.734619][ T127] usb 1-1: Product: syz [ 249.738994][ T127] usb 1-1: Manufacturer: syz [ 249.745153][ T127] usb 1-1: SerialNumber: syz [ 249.761055][ T127] usb 1-1: config 0 descriptor?? [ 249.772065][ T127] smsc75xx v1.0.0 [ 249.892817][ T1169] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 250.092410][ T1169] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 250.111854][ T1169] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 250.129992][ T1169] usb 5-1: config 0 descriptor?? [ 250.382045][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 250.407345][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 250.631450][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 250.646623][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 250.657008][ T127] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 250.666666][ T127] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 250.673515][ T14] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 250.864219][ T14] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.872420][ T14] usb 2-1: config 0 has no interface number 0 [ 250.881287][ T14] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 250.894548][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.903563][ T14] usb 2-1: Product: syz [ 250.907948][ T14] usb 2-1: Manufacturer: syz [ 250.912555][ T14] usb 2-1: SerialNumber: syz [ 250.921389][ T14] usb 2-1: config 0 descriptor?? [ 251.141058][ T14] dvb_usb_ec168: probe of 2-1:0.1 failed with error -71 [ 251.168236][ T14] usb 2-1: USB disconnect, device number 14 [ 252.222376][ T4315] usb 1-1: USB disconnect, device number 15 [ 252.378687][ T1169] usb 5-1: Cannot set autoneg [ 252.383796][ T1169] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 253.427114][ T1169] usb 5-1: USB disconnect, device number 14 [ 254.842791][ T4315] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 254.868456][ T7183] netlink: 'syz.1.881': attribute type 1 has an invalid length. [ 255.030056][ T7183] 8021q: adding VLAN 0 to HW filter on device bond2 [ 255.036758][ T4315] usb 1-1: Using ep0 maxpacket: 32 [ 255.043564][ T22] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 255.044206][ T4315] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 255.096578][ T4315] usb 1-1: config 0 has no interface number 0 [ 255.110897][ T4315] usb 1-1: config 0 interface 184 has no altsetting 0 [ 255.129143][ T4315] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 255.151071][ T4315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.168948][ T4315] usb 1-1: Product: syz [ 255.173671][ T4315] usb 1-1: Manufacturer: syz [ 255.178431][ T4315] usb 1-1: SerialNumber: syz [ 255.191169][ T4315] usb 1-1: config 0 descriptor?? [ 255.211179][ T4315] smsc75xx v1.0.0 [ 255.254530][ T22] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 255.279764][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.317352][ T22] usb 4-1: config 0 descriptor?? [ 255.516373][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.523284][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.816905][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 255.840525][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 256.071167][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 256.088847][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 256.121502][ T4315] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 256.143191][ T4315] smsc75xx: probe of 1-1:0.184 failed with error -61 [ 257.558001][ T22] usb 4-1: Cannot set autoneg [ 257.563290][ T22] MOSCHIP usb-ethernet driver: probe of 4-1:0.0 failed with error -32 [ 257.623323][ T22] usb 1-1: USB disconnect, device number 16 [ 258.703744][ T14] usb 4-1: USB disconnect, device number 19 [ 259.837497][ T26] audit: type=1326 audit(1773344200.827:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 260.232988][ T4351] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 260.240871][ T127] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 260.241829][ T7277] netlink: 165 bytes leftover after parsing attributes in process `syz.2.907'. [ 260.463005][ T127] usb 2-1: Using ep0 maxpacket: 32 [ 260.469546][ T4351] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 260.479414][ T127] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 260.497929][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.517158][ T127] usb 2-1: config 0 has no interface number 0 [ 260.543612][ T4351] usb 5-1: config 0 descriptor?? [ 260.550182][ T127] usb 2-1: config 0 interface 184 has no altsetting 0 [ 260.565235][ T26] audit: type=1326 audit(1773344201.557:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 260.587417][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.608534][ T26] audit: type=1326 audit(1773344201.557:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 260.632380][ T26] audit: type=1326 audit(1773344201.557:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 260.654596][ C1] vkms_vblank_simulate: vblank timer overrun [ 260.666994][ T127] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 260.677251][ T7281] netlink: 'syz.2.908': attribute type 1 has an invalid length. [ 260.695833][ T26] audit: type=1326 audit(1773344201.557:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 260.729745][ T127] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.738840][ T127] usb 2-1: Product: syz [ 260.744180][ T127] usb 2-1: Manufacturer: syz [ 260.748842][ T127] usb 2-1: SerialNumber: syz [ 260.754149][ T26] audit: type=1326 audit(1773344201.557:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 260.779073][ T127] usb 2-1: config 0 descriptor?? [ 260.825548][ T127] smsc75xx v1.0.0 [ 260.909932][ T26] audit: type=1326 audit(1773344201.557:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 260.971674][ T7281] 8021q: adding VLAN 0 to HW filter on device bond3 [ 260.998441][ T26] audit: type=1326 audit(1773344201.557:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 261.020655][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.037947][ T26] audit: type=1326 audit(1773344201.557:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 261.066627][ T26] audit: type=1326 audit(1773344201.557:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.0.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e9d99c799 code=0x7fc00000 [ 261.088892][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.439311][ T127] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 261.458081][ T127] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 261.678950][ T127] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 261.699029][ T127] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 261.740951][ T127] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 261.768686][ T127] smsc75xx: probe of 2-1:0.184 failed with error -61 [ 262.857293][ T4351] usb 5-1: Cannot set autoneg [ 262.863137][ T4351] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 262.997170][ T4351] usb 2-1: USB disconnect, device number 15 [ 263.936667][ T14] usb 5-1: USB disconnect, device number 15 [ 265.752841][ T4351] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 265.945455][ T4351] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 265.958237][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.969969][ T4351] usb 5-1: config 0 descriptor?? [ 266.898302][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 266.921355][ T7348] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 267.067405][ T7348] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 267.090110][ T7359] netlink: 'syz.3.930': attribute type 1 has an invalid length. [ 267.217226][ T7365] kvm: emulating exchange as write [ 267.278022][ T7359] 8021q: adding VLAN 0 to HW filter on device bond4 [ 268.231641][ T4351] usb 5-1: Cannot set autoneg [ 268.236579][ T4351] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 269.360181][ T4320] usb 5-1: USB disconnect, device number 16 [ 270.863681][ T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 271.072822][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 271.102770][ T4315] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 272.029590][ T14] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 273.594244][ T14] usb 3-1: config 0 has no interface number 0 [ 273.642943][ T14] usb 3-1: config 0 interface 184 has no altsetting 0 [ 273.695788][ T7440] netlink: 'syz.1.953': attribute type 1 has an invalid length. [ 273.707780][ T14] usb 3-1: string descriptor 0 read error: -71 [ 273.719362][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 273.729181][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.759195][ T4315] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 273.806728][ T14] usb 3-1: config 0 descriptor?? [ 273.816356][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.850647][ T14] usb 3-1: can't set config #0, error -71 [ 273.895183][ T4315] usb 5-1: config 0 descriptor?? [ 273.905802][ T14] usb 3-1: USB disconnect, device number 15 [ 273.937678][ T4315] usb 5-1: can't set config #0, error -71 [ 273.972636][ T4315] usb 5-1: USB disconnect, device number 17 [ 273.997367][ T7440] 8021q: adding VLAN 0 to HW filter on device bond3 [ 274.151157][ T7466] device syzkaller0 entered promiscuous mode [ 275.788270][ T7486] netlink: 165 bytes leftover after parsing attributes in process `syz.3.965'. [ 276.684825][ T4351] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 276.894509][ T4351] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 276.922735][ T4351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.935839][ T4351] usb 1-1: config 0 descriptor?? [ 278.569203][ T4351] usb 1-1: Cannot set autoneg [ 278.574237][ T4351] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -32 [ 278.581464][ T7516] fuse: Bad value for 'group_id' [ 279.125074][ T7528] netlink: 'syz.4.976': attribute type 1 has an invalid length. [ 279.292365][ T7528] 8021q: adding VLAN 0 to HW filter on device bond4 [ 279.617427][ T4351] usb 1-1: USB disconnect, device number 17 [ 280.673234][ T4315] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 282.252849][ T4315] usb 3-1: Using ep0 maxpacket: 8 [ 282.281956][ T4315] usb 3-1: config index 0 descriptor too short (expected 74, got 45) [ 282.421815][ T4315] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 282.528445][ T4315] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 282.632009][ T4315] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 282.650178][ T4315] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 282.659843][ T4315] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.676500][ T4315] usbtmc 3-1:16.0: bulk endpoints not found [ 282.902745][ T4320] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 283.113024][ T4320] usb 5-1: Using ep0 maxpacket: 32 [ 283.121477][ T4320] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 283.131125][ T4320] usb 5-1: config 0 has no interface number 0 [ 283.137805][ T4320] usb 5-1: config 0 interface 184 has no altsetting 0 [ 283.187775][ T4320] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 283.221184][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.251069][ T4320] usb 5-1: Product: syz [ 283.267627][ T4320] usb 5-1: Manufacturer: syz [ 283.286185][ T4320] usb 5-1: SerialNumber: syz [ 283.332228][ T4320] usb 5-1: config 0 descriptor?? [ 283.368868][ T4320] smsc75xx v1.0.0 [ 283.969218][ T4320] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 283.987651][ T4320] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 284.200345][ T4320] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 284.212255][ T4320] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 284.227335][ T4320] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 284.238271][ T4320] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 284.652109][ T4315] usb 3-1: USB disconnect, device number 16 [ 284.680132][ T7612] fuse: Bad value for 'group_id' [ 285.727351][ T4315] usb 5-1: USB disconnect, device number 18 [ 286.743644][ T4315] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 286.932841][ T4315] usb 3-1: device descriptor read/64, error -71 [ 287.086451][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 287.095344][ T7644] kernel read not supported for file / 7âW)s!Qfsl{Tr)rO2:"T+͟v|ղDvc֠6xc: (pid: 7644 comm: syz.1.1010) [ 287.129288][ T26] kauditd_printk_skb: 116 callbacks suppressed [ 287.129301][ T26] audit: type=1800 audit(1773344228.117:256): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1010" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=50840 res=0 errno=0 [ 287.175938][ T7649] loop3: detected capacity change from 0 to 512 [ 287.193622][ T7648] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 287.232780][ T4315] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 287.298873][ T7642] lo speed is unknown, defaulting to 1000 [ 287.357268][ T7649] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1012: inode has both inline data and extents flags [ 287.380703][ T7649] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1012: couldn't read orphan inode 15 (err -117) [ 287.399982][ T7649] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 287.412782][ T4315] usb 3-1: device descriptor read/64, error -71 [ 287.532936][ T4315] usb usb3-port1: attempt power cycle [ 287.679857][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 287.954368][ T4315] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 287.997107][ T4315] usb 3-1: device descriptor read/8, error -71 [ 288.102866][ T4316] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 288.272974][ T4315] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 288.302766][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 288.309514][ T4316] usb 4-1: config index 0 descriptor too short (expected 74, got 45) [ 288.318400][ T4315] usb 3-1: device descriptor read/8, error -71 [ 288.329629][ T4316] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 288.351405][ T4316] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 288.369425][ T4316] usb 4-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 288.385086][ T4316] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 288.395551][ T4316] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.436470][ T7669] overlayfs: missing 'lowerdir' [ 289.754450][ T4315] usb usb3-port1: unable to enumerate USB device [ 289.765180][ T4316] usbtmc 4-1:16.0: bulk endpoints not found [ 290.271976][ T7681] input: syz1 as /devices/virtual/input/input11 [ 290.569728][ T7693] device syzkaller0 entered promiscuous mode [ 290.856795][ T7697] loop1: detected capacity change from 0 to 512 [ 290.923298][ T7697] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1024: inode has both inline data and extents flags [ 291.025844][ T7697] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1024: couldn't read orphan inode 15 (err -117) [ 291.139344][ T7697] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 291.309111][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 291.708971][ T4351] usb 4-1: USB disconnect, device number 20 [ 291.722775][ T127] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 291.929703][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 292.009718][ T127] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 292.047100][ T127] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 292.107991][ T127] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 292.152420][ T127] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.210762][ T127] usb 2-1: config 0 descriptor?? [ 292.451267][ T7726] device syzkaller0 entered promiscuous mode [ 292.654641][ T127] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 292.727802][ T127] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 292.858477][ T4320] usb 2-1: USB disconnect, device number 16 [ 292.943680][ T7736] fido_id[7736]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 293.323043][ T14] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 293.527994][ T14] usb 5-1: Using ep0 maxpacket: 8 [ 293.537048][ T14] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 293.562306][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 293.597420][ T14] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 293.616712][ T14] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 293.672750][ T14] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 293.694982][ T14] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 293.718068][ T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.746582][ T14] usbtmc 5-1:16.0: bulk endpoints not found [ 294.027581][ T7766] device syzkaller0 entered promiscuous mode [ 294.582893][ T14] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 294.772844][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 294.781484][ T14] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 294.805182][ T14] usb 3-1: config 0 has no interface number 0 [ 294.827704][ T14] usb 3-1: config 0 interface 184 has no altsetting 0 [ 294.848639][ T14] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 294.867031][ T14] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.884439][ T14] usb 3-1: Product: syz [ 294.893308][ T14] usb 3-1: Manufacturer: syz [ 294.907530][ T14] usb 3-1: SerialNumber: syz [ 294.930333][ T14] usb 3-1: config 0 descriptor?? [ 294.956659][ T14] smsc75xx v1.0.0 [ 295.568724][ T14] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 295.642174][ T14] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 296.371951][ T14] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 296.440324][ T14] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 296.615730][ T14] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 296.709558][ T14] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 296.929975][ T4312] usb 5-1: USB disconnect, device number 19 [ 297.198367][ T7797] loop3: detected capacity change from 0 to 512 [ 297.210851][ T4271] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 297.310598][ T7797] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1055: inode has both inline data and extents flags [ 297.327091][ T7797] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1055: couldn't read orphan inode 15 (err -117) [ 297.349534][ T7797] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 297.414464][ T4271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.548964][ T4271] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.578145][ T4271] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 297.604884][ T4271] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 297.627624][ T4271] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.646153][ T4271] usb 2-1: config 0 descriptor?? [ 297.654452][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 297.662181][ T4312] usb 3-1: USB disconnect, device number 21 [ 297.740600][ T7810] device syzkaller0 entered promiscuous mode [ 298.052239][ T7820] netlink: 165 bytes leftover after parsing attributes in process `syz.4.1061'. [ 298.081053][ T4271] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 298.121981][ T4271] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 298.312150][ T4271] usb 2-1: USB disconnect, device number 17 [ 298.429987][ T7823] fido_id[7823]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 299.042817][ T4271] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 300.784895][ T4271] usb 5-1: Using ep0 maxpacket: 8 [ 300.791744][ T4271] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 300.802899][ T4271] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 300.814234][ T4271] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 300.824578][ T4271] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 300.840463][ T4271] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 300.855959][ T4271] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 300.867742][ T4271] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.898377][ T4271] usbtmc 5-1:16.0: bulk endpoints not found [ 301.142787][ T1169] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 301.209835][ T7855] overlayfs: missing 'lowerdir' [ 301.232897][ T4320] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 301.393925][ T4320] usb 2-1: device descriptor read/64, error -71 [ 301.673784][ T4320] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 301.863001][ T4320] usb 2-1: device descriptor read/64, error -71 [ 301.994800][ T4320] usb usb2-port1: attempt power cycle [ 302.281622][ T7859] device syzkaller0 entered promiscuous mode [ 302.403515][ T4320] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 302.446418][ T4320] usb 2-1: device descriptor read/8, error -71 [ 302.732720][ T4320] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 302.963039][ T4323] usb 5-1: USB disconnect, device number 20 [ 302.969367][ T4320] usb 2-1: device descriptor read/8, error -71 [ 302.999360][ T1169] usb 1-1: Using ep0 maxpacket: 32 [ 303.007305][ T1169] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 303.035343][ T1169] usb 1-1: config 0 has no interface number 0 [ 303.054803][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.062109][ T1169] usb 1-1: config 0 interface 184 has no altsetting 0 [ 303.069506][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 303.091104][ T1169] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 303.103096][ T4320] usb usb2-port1: unable to enumerate USB device [ 303.110305][ T1169] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.140250][ T1169] usb 1-1: Product: syz [ 303.144903][ T1169] usb 1-1: Manufacturer: syz [ 303.150572][ T1169] usb 1-1: SerialNumber: syz [ 303.161385][ T1169] usb 1-1: config 0 descriptor?? [ 303.168728][ T7863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 303.186290][ T1169] smsc75xx v1.0.0 [ 303.791306][ T1169] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 303.898162][ T1169] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 304.357997][ T7885] binder: 7880:7885 ioctl c0306201 0 returned -14 [ 304.516351][ T1169] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 305.180756][ T1169] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 305.190800][ T1169] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 305.200810][ T1169] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 305.338737][ T7890] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1082'. [ 305.458036][ T7894] device syzkaller0 entered promiscuous mode [ 306.661887][ T1169] usb 1-1: USB disconnect, device number 18 [ 306.813454][ T7906] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1085'. [ 306.888138][ T7906] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1085'. [ 307.326969][ T4271] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 307.492978][ T4271] usb 5-1: device descriptor read/64, error -71 [ 307.762796][ T4271] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 309.062388][ T7937] overlayfs: missing 'lowerdir' [ 309.117888][ T4271] usb 5-1: device descriptor read/64, error -71 [ 310.571465][ T4271] usb usb5-port1: attempt power cycle [ 310.871452][ T7943] loop3: detected capacity change from 0 to 512 [ 310.962806][ T4312] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 312.674872][ T7954] device syzkaller0 entered promiscuous mode [ 312.716699][ T7943] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1095: inode has both inline data and extents flags [ 312.797685][ T7943] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1095: couldn't read orphan inode 15 (err -117) [ 312.824994][ T4312] usb 1-1: Using ep0 maxpacket: 32 [ 312.831873][ T4312] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 312.866472][ T4312] usb 1-1: config 0 has no interface number 0 [ 312.905805][ T4312] usb 1-1: config 0 interface 184 has no altsetting 0 [ 312.922788][ T7943] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 312.947355][ T4312] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 313.004246][ T4312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.033189][ T4312] usb 1-1: Product: syz [ 313.037824][ T4312] usb 1-1: Manufacturer: syz [ 313.042495][ T4312] usb 1-1: SerialNumber: syz [ 313.101483][ T4312] usb 1-1: config 0 descriptor?? [ 313.123882][ T4312] smsc75xx v1.0.0 [ 313.261611][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 313.692713][ T4351] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 313.730968][ T4312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 313.775820][ T4312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 313.894875][ T4351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.912057][ T4351] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 313.934913][ T4351] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 313.983772][ T4351] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.007396][ T4351] usb 5-1: config 0 descriptor?? [ 314.016067][ T4351] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 314.023405][ T4351] dvb-usb: bulk message failed: -22 (3/0) [ 314.038611][ T4351] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 314.048872][ T4351] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 314.056313][ T4351] usb 5-1: media controller created [ 314.063341][ T4351] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 314.077424][ T4351] dvb-usb: bulk message failed: -22 (6/0) [ 314.090304][ T4351] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 314.100412][ T4351] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input12 [ 314.224525][ T7963] dvb-usb: bulk message failed: -22 (2/0) [ 314.245482][ T4351] dvb-usb: schedule remote query interval to 150 msecs. [ 314.252919][ T4351] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 314.285996][ T4351] usb 5-1: USB disconnect, device number 24 [ 314.398602][ T4312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 314.723234][ T7981] siw: device registration error -23 [ 315.290155][ T4312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 315.486700][ T4351] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 315.520586][ T4312] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 315.667658][ T4312] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 315.755002][ T4312] usb 1-1: USB disconnect, device number 19 [ 315.962819][ T127] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 316.145593][ T127] usb 2-1: device descriptor read/64, error -71 [ 316.422756][ T127] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 316.582811][ T127] usb 2-1: device descriptor read/64, error -71 [ 316.724725][ T127] usb usb2-port1: attempt power cycle [ 316.956575][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.964257][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.582816][ T127] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 318.648664][ T127] usb 2-1: device descriptor read/8, error -71 [ 318.921402][ T8019] loop2: detected capacity change from 0 to 512 [ 319.053252][ T8019] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.1113: inode has both inline data and extents flags [ 319.143141][ T8019] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.1113: couldn't read orphan inode 15 (err -117) [ 319.200718][ T8019] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 319.433053][ T27] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 319.450330][ T4269] EXT4-fs (loop2): unmounting filesystem. [ 319.642820][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 319.651671][ T27] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 319.665716][ T27] usb 5-1: config 0 has no interface number 0 [ 319.672053][ T27] usb 5-1: config 0 interface 184 has no altsetting 0 [ 319.689743][ T27] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 319.713949][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.734271][ T27] usb 5-1: Product: syz [ 319.738575][ T27] usb 5-1: Manufacturer: syz [ 319.743708][ T27] usb 5-1: SerialNumber: syz [ 319.767537][ T27] usb 5-1: config 0 descriptor?? [ 319.777363][ T27] smsc75xx v1.0.0 [ 319.882727][ T14] usb 3-1: new full-speed USB device number 22 using dummy_hcd [ 320.003498][ T8051] fuse: Bad value for 'group_id' [ 320.010180][ T8052] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 320.100345][ T14] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 320.119328][ T14] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 320.157009][ T14] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 320.201764][ T8052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 320.232861][ T14] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.249586][ T14] usb 3-1: config 0 descriptor?? [ 320.258158][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 320.282840][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 320.295444][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 320.340599][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 320.352757][ T14] usb 3-1: media controller created [ 320.379525][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 320.388722][ T27] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 320.405038][ T27] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 320.436121][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 320.442431][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 320.457180][ T8043] dvb-usb: bulk message failed: -22 (2/0) [ 320.498785][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13 [ 320.517495][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 320.530701][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 320.552413][ T14] usb 3-1: USB disconnect, device number 22 [ 320.615352][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 321.073008][ T27] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32 [ 321.085738][ T27] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32 [ 321.096664][ T27] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 321.107603][ T27] smsc75xx: probe of 5-1:0.184 failed with error -32 [ 321.252806][ T8070] loop3: detected capacity change from 0 to 512 [ 321.282125][ T8070] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.1132: inode has both inline data and extents flags [ 321.396588][ T8070] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.1132: couldn't read orphan inode 15 (err -117) [ 321.424412][ T8070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 321.603700][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 322.442838][ T8085] siw: device registration error -23 [ 323.317802][ T127] usb 5-1: USB disconnect, device number 25 [ 323.409203][ T8089] fuse: Bad value for 'group_id' [ 324.249486][ T8111] loop4: detected capacity change from 0 to 512 [ 324.301425][ T8111] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1145: inode has both inline data and extents flags [ 324.383844][ T8111] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1145: couldn't read orphan inode 15 (err -117) [ 324.402928][ T4312] usb 1-1: new full-speed USB device number 20 using dummy_hcd [ 324.445341][ T8111] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 324.594964][ T4312] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.615462][ T4312] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 324.636565][ T4312] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 324.655824][ T4312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.689351][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 324.700908][ T4312] usb 1-1: config 0 descriptor?? [ 324.741810][ T4312] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 324.765184][ T4312] dvb-usb: bulk message failed: -22 (3/0) [ 324.902326][ T8125] siw: device registration error -23 [ 325.456387][ T4312] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 325.552576][ T8131] fuse: Bad value for 'group_id' [ 325.554749][ T4312] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 325.564960][ T4312] usb 1-1: media controller created [ 325.571240][ T4312] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 325.582418][ T4312] dvb-usb: bulk message failed: -22 (6/0) [ 325.588280][ T4312] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 325.624127][ T4312] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14 [ 325.660009][ T4312] dvb-usb: schedule remote query interval to 150 msecs. [ 325.674963][ T4312] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 325.833029][ T4312] dvb-usb: bulk message failed: -22 (1/0) [ 325.860810][ T4312] dvb-usb: error while querying for an remote control event. [ 326.000289][ T8137] pit: kvm: requested 81295 ns i8254 timer period limited to 200000 ns [ 326.017499][ T8137] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 326.027897][ T8137] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 326.123389][ T4312] dvb-usb: bulk message failed: -22 (1/0) [ 326.257331][ T8137] pit: kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 327.436588][ T4312] dvb-usb: error while querying for an remote control event. [ 328.452703][ T8137] pit: kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 328.461567][ T8137] pit: kvm: requested 5028 ns i8254 timer period limited to 200000 ns [ 328.475749][ T8137] pit: kvm: requested 176000 ns i8254 timer period limited to 200000 ns [ 328.547292][ T4312] usb 1-1: USB disconnect, device number 20 [ 328.612372][ T4312] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 328.841046][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1160'. [ 329.811961][ T8158] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 331.367559][ T8158] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 331.578740][ T8191] device syzkaller0 entered promiscuous mode [ 332.175308][ T4283] Bluetooth: hci3: hardware error 0x08 [ 333.499862][ T8228] device syzkaller0 entered promiscuous mode [ 333.665351][ T8236] overlayfs: missing 'lowerdir' [ 334.742797][ T4283] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 335.849328][ T8239] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 336.339636][ T8239] 8021q: adding VLAN 0 to HW filter on device bond3 [ 338.282890][ T4257] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 338.545913][ T4257] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 338.562712][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.575099][ T4257] usb 2-1: Product: syz [ 339.728093][ T4257] usb 2-1: Manufacturer: syz [ 339.732906][ T4257] usb 2-1: SerialNumber: syz [ 341.867835][ T8293] binder: 8288:8293 ioctl c0306201 0 returned -14 [ 341.887851][ T8293] binder: 8288:8293 ioctl c0306201 200000001440 returned -11 [ 342.135881][ T4257] rtl8150 2-1:1.0: couldn't reset the device [ 342.142005][ T4257] rtl8150: probe of 2-1:1.0 failed with error -5 [ 342.151546][ T4257] usb 2-1: USB disconnect, device number 26 [ 342.749858][ T8304] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 342.846391][ T8304] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 343.206157][ T8318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1203'. [ 343.353036][ T4312] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 343.478678][ T8323] autofs4:pid:8323:autofs_fill_super: called with bogus options [ 343.553646][ T4312] usb 5-1: no configurations [ 343.558603][ T4312] usb 5-1: can't read configurations, error -22 [ 343.722871][ T4312] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 343.914702][ T4312] usb 5-1: no configurations [ 343.920620][ T4312] usb 5-1: can't read configurations, error -22 [ 343.977563][ T4312] usb usb5-port1: attempt power cycle [ 344.402978][ T4312] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 344.446390][ T4312] usb 5-1: no configurations [ 344.451490][ T4312] usb 5-1: can't read configurations, error -22 [ 344.576012][ T8347] netlink: 'syz.3.1213': attribute type 1 has an invalid length. [ 344.603118][ T4312] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 344.646015][ T4312] usb 5-1: no configurations [ 344.650899][ T4312] usb 5-1: can't read configurations, error -22 [ 344.686301][ T4312] usb usb5-port1: unable to enumerate USB device [ 344.905867][ T8347] 8021q: adding VLAN 0 to HW filter on device bond5 [ 347.012843][ T8370] siw: device registration error -23 [ 348.070318][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1216'. [ 348.159351][ T8377] netlink: 'syz.1.1221': attribute type 1 has an invalid length. [ 348.201277][ T8377] netlink: 'syz.1.1221': attribute type 2 has an invalid length. [ 350.363280][ T4257] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 350.564869][ T4257] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.592673][ T4257] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 350.626238][ T4257] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 350.682732][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.743882][ T4257] usb 1-1: config 0 descriptor?? [ 350.771546][ T4257] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 350.787298][ T4257] dvb-usb: bulk message failed: -22 (3/0) [ 350.822416][ T4257] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 350.871395][ T4257] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 350.887174][ T4257] usb 1-1: media controller created [ 350.892955][ T1169] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 350.914096][ T4257] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 350.937614][ T4257] dvb-usb: bulk message failed: -22 (6/0) [ 350.952428][ T8394] dvb-usb: bulk message failed: -22 (2/0) [ 350.974557][ T4257] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 352.355435][ T1169] usb 5-1: no configurations [ 352.360112][ T1169] usb 5-1: can't read configurations, error -22 [ 352.646592][ T4257] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 352.870850][ T4257] dvb-usb: schedule remote query interval to 150 msecs. [ 352.921141][ T4257] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 352.938041][ T4257] usb 1-1: USB disconnect, device number 21 [ 352.990115][ T4257] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 352.993096][ T1169] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 353.194298][ T1169] usb 5-1: no configurations [ 353.199082][ T1169] usb 5-1: can't read configurations, error -22 [ 353.206082][ T1169] usb usb5-port1: attempt power cycle [ 353.232689][ T14] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 353.276549][ T8420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1234'. [ 353.287620][ T8420] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1234'. [ 353.301198][ T8420] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1234'. [ 353.432849][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 353.439779][ T14] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 353.459007][ T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 353.480544][ T14] usb 2-1: config 0 has no interface number 0 [ 353.487304][ T14] usb 2-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 353.508377][ T14] usb 2-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 353.559852][ T14] usb 2-1: config 0 interface 239 altsetting 4 has an invalid endpoint with address 0xA9, skipping [ 353.605708][ T14] usb 2-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 353.620738][ T1169] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 353.707560][ T14] usb 2-1: config 0 interface 239 has no altsetting 0 [ 353.720120][ T1169] usb 5-1: device descriptor read/8, error -71 [ 353.737439][ T14] usb 2-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 353.773634][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.797705][ T14] usb 2-1: Product: syz [ 353.808337][ T14] usb 2-1: Manufacturer: syz [ 353.813125][ T14] usb 2-1: SerialNumber: syz [ 353.819714][ T14] usb 2-1: config 0 descriptor?? [ 353.844680][ T8410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 353.860754][ T8410] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 354.020590][ T14] usb 2-1: USB disconnect, device number 27 [ 356.973882][ T8456] device syzkaller0 entered promiscuous mode [ 359.475953][ T14] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 359.664499][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.679257][ T14] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 359.698821][ T14] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 359.715777][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.731773][ T14] usb 1-1: Product: syz [ 359.739578][ T14] usb 1-1: Manufacturer: syz [ 359.751044][ T14] usb 1-1: SerialNumber: syz [ 359.772204][ T14] usb 1-1: config 0 descriptor?? [ 362.137503][ T8497] device syzkaller0 entered promiscuous mode [ 362.238447][ T14] usb 1-1: USB disconnect, device number 22 [ 365.866634][ T8525] overlayfs: missing 'lowerdir' [ 367.735769][ T14] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 367.954653][ T14] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 367.982974][ T14] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 368.012847][ T14] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 368.049037][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.093434][ T14] usb 1-1: config 0 descriptor?? [ 368.115864][ T14] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 368.136129][ T14] dvb-usb: bulk message failed: -22 (3/0) [ 368.162909][ T14] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 368.192192][ T14] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 368.209393][ T14] usb 1-1: media controller created [ 368.229703][ T14] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.261436][ T14] dvb-usb: bulk message failed: -22 (6/0) [ 368.279014][ T14] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 368.302502][ T8509] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 368.309497][ T14] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 368.322590][ T8520] dvb-usb: bulk message failed: -22 (2/0) [ 368.390012][ T14] dvb-usb: schedule remote query interval to 150 msecs. [ 368.399645][ T14] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 368.442576][ T14] usb 1-1: USB disconnect, device number 23 [ 368.487976][ T14] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 368.542061][ T8509] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.572922][ T8509] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 368.610624][ T8509] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 368.634191][ T8509] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.650083][ T8539] device syzkaller0 entered promiscuous mode [ 368.655731][ T8509] usb 2-1: Product: syz [ 368.660845][ T8509] usb 2-1: Manufacturer: syz [ 368.675474][ T8509] usb 2-1: SerialNumber: syz [ 368.687702][ T8509] usb 2-1: config 0 descriptor?? [ 369.092438][ T8551] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 369.892723][ T8509] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 371.102930][ T8509] usb 1-1: Using ep0 maxpacket: 32 [ 371.116298][ T127] usb 2-1: USB disconnect, device number 28 [ 371.122335][ T8509] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fb0, bcdDevice= 0.40 [ 371.160286][ T8509] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.187000][ T8509] usb 1-1: Product: syz [ 371.191947][ T8509] usb 1-1: Manufacturer: syz [ 371.197906][ T8509] usb 1-1: SerialNumber: syz [ 371.590721][ T8509] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 371.611721][ T8509] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 371.855525][ T8509] usb 1-1: USB disconnect, device number 24 [ 372.044377][ T8569] overlayfs: missing 'lowerdir' [ 372.462904][ T4323] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 372.603608][ T4262] udevd[4262]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 372.791664][ T4323] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 372.821458][ T4323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.305647][ T4323] usb 2-1: config 0 descriptor?? [ 374.569403][ T4323] usb 2-1: Cannot set autoneg [ 374.574426][ T4323] MOSCHIP usb-ethernet driver: probe of 2-1:0.0 failed with error -32 [ 374.703702][ T8584] device syzkaller0 entered promiscuous mode [ 375.528710][ T26] audit: type=1326 audit(1773344316.517:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8586 comm="syz.3.1282" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f72c4f9c799 code=0x0 [ 375.683826][ T4323] usb 2-1: USB disconnect, device number 29 [ 376.233090][ T4323] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 377.575222][ T4323] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.586630][ T4323] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 377.599531][ T4323] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 377.609115][ T4323] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.617558][ T4323] usb 2-1: Product: syz [ 377.624798][ T4323] usb 2-1: Manufacturer: syz [ 377.718369][ T4323] usb 2-1: SerialNumber: syz [ 377.727333][ T4323] usb 2-1: config 0 descriptor?? [ 377.761511][ T8618] netlink: 'syz.3.1289': attribute type 1 has an invalid length. [ 377.879898][ T8618] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.941680][ T8629] overlayfs: missing 'lowerdir' [ 378.394377][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.401036][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.447506][ T8636] Illegal XDP return value 4294967282 on prog (id 35) dev N/A, expect packet loss! [ 379.476357][ T8635] loop4: detected capacity change from 0 to 512 [ 379.519276][ T8630] netlink: 'syz.0.1291': attribute type 10 has an invalid length. [ 379.551660][ T8635] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1293: inode has both inline data and extents flags [ 379.640372][ T8635] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1293: couldn't read orphan inode 15 (err -117) [ 379.660300][ T8630] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 379.721645][ T8635] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 379.966601][ T4280] EXT4-fs (loop4): unmounting filesystem. [ 380.001889][ T8639] device syzkaller0 entered promiscuous mode [ 381.840007][ T4316] usb 2-1: USB disconnect, device number 30 [ 381.988937][ T8665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 382.208542][ T8667] sp0: Synchronizing with TNC [ 382.241308][ T8667] [U] [ 384.130876][ T8694] loop0: detected capacity change from 0 to 512 [ 384.177322][ T8694] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1306: inode has both inline data and extents flags [ 384.293103][ T8694] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1306: couldn't read orphan inode 15 (err -117) [ 384.343429][ T8694] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 386.802902][ T4316] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 387.004224][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 387.019615][ T4316] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 387.040999][ T4316] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 387.050272][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.060378][ T4316] usb 4-1: Product: syz [ 387.064680][ T4316] usb 4-1: Manufacturer: syz [ 387.069411][ T4316] usb 4-1: SerialNumber: syz [ 387.093921][ T4316] usb 4-1: config 0 descriptor?? [ 387.286753][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 388.496167][ T8738] netlink: 'syz.2.1314': attribute type 1 has an invalid length. [ 388.650130][ T8738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 388.782832][ T4316] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 388.853040][ T14] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 388.974710][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 388.986698][ T4316] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 388.996328][ T4316] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 389.005868][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.025442][ T4316] usb 2-1: config 0 descriptor?? [ 389.036383][ T4316] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 389.045092][ T4316] dvb-usb: bulk message failed: -22 (3/0) [ 389.045293][ T14] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 389.076472][ T4316] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 389.090783][ T14] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 389.101697][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 389.111066][ T4316] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 389.121868][ T4316] usb 2-1: media controller created [ 389.128138][ T4316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 389.138981][ T14] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xF7, skipping [ 389.161552][ T4316] dvb-usb: bulk message failed: -22 (6/0) [ 389.167620][ T4316] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 389.175882][ T14] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 389.185356][ T14] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 389.193977][ T14] usb 1-1: Product: syz [ 389.198486][ T14] usb 1-1: Manufacturer: syz [ 389.206693][ T4316] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 389.227928][ T4316] dvb-usb: schedule remote query interval to 150 msecs. [ 389.236307][ T8741] dvb-usb: bulk message failed: -22 (2/0) [ 389.243826][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 389.257186][ T14] cdc_wdm 1-1:1.0: skipping garbage [ 389.262491][ T4316] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 389.270790][ T14] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 389.294928][ T4316] usb 2-1: USB disconnect, device number 31 [ 389.321597][ T8750] device syzkaller0 entered promiscuous mode [ 389.334492][ T4316] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 389.431141][ T4283] Bluetooth: hci2: Malformed LE Event: 0x1b [ 389.454120][ T4313] usb 1-1: USB disconnect, device number 25 [ 390.481965][ T8755] loop0: detected capacity change from 0 to 512 [ 390.530494][ T8755] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.1323: inode has both inline data and extents flags [ 390.558250][ T14] usb 4-1: USB disconnect, device number 21 [ 390.713099][ T8755] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1323: couldn't read orphan inode 15 (err -117) [ 390.756863][ T8755] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 390.925292][ T4274] EXT4-fs (loop0): unmounting filesystem. [ 391.160731][ T8770] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 393.159663][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1333'. [ 393.322093][ T4283] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 393.672754][ T4316] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 393.894465][ T4316] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.958742][ T4316] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 394.041136][ T4316] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 394.071740][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.102698][ T4316] usb 4-1: Product: syz [ 394.112525][ T4316] usb 4-1: Manufacturer: syz [ 394.129083][ T4316] usb 4-1: SerialNumber: syz [ 394.170884][ T4316] usb 4-1: config 0 descriptor?? [ 396.364928][ T8816] netlink: 'syz.2.1337': attribute type 10 has an invalid length. [ 396.383467][ T8816] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 396.472192][ T4323] usb 4-1: USB disconnect, device number 22 [ 396.962687][ T4313] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 398.479938][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 399.235090][ T4313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 399.289474][ T4313] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 399.352738][ T4313] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 399.431578][ T8847] overlayfs: missing 'lowerdir' [ 399.483476][ T4313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.506594][ T4313] usb 3-1: config 0 descriptor?? [ 401.031887][ T4313] usbhid 3-1:0.0: can't add hid device: -71 [ 401.039308][ T4313] usbhid: probe of 3-1:0.0 failed with error -71 [ 401.094620][ T4313] usb 3-1: USB disconnect, device number 23 [ 401.682737][ T4313] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 401.775019][ T8864] device syzkaller0 entered promiscuous mode [ 401.874541][ T4313] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.895400][ T4313] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 401.922738][ T4313] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 401.936956][ T4313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.945634][ T4313] usb 1-1: Product: syz [ 401.949989][ T4313] usb 1-1: Manufacturer: syz [ 401.954788][ T4313] usb 1-1: SerialNumber: syz [ 401.961843][ T4313] usb 1-1: config 0 descriptor?? [ 402.008758][ T8868] netlink: 'syz.1.1354': attribute type 10 has an invalid length. [ 402.043327][ T8868] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 403.742473][ T8889] overlayfs: missing 'lowerdir' [ 405.285682][ T127] usb 1-1: USB disconnect, device number 26 [ 405.468103][ T8907] device gretap0 entered promiscuous mode [ 405.515925][ T8901] device gretap0 left promiscuous mode [ 405.828669][ T8917] device syzkaller0 entered promiscuous mode [ 409.095255][ T8945] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 411.353541][ T8959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 411.410980][ T8959] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 411.928075][ T8980] device syzkaller0 entered promiscuous mode [ 412.236328][ T8982] overlayfs: conflicting lowerdir path [ 412.582819][ T4316] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 412.802669][ T4316] usb 2-1: Using ep0 maxpacket: 32 [ 412.809789][ T4316] usb 2-1: config 0 has an invalid interface number: 119 but max is 0 [ 414.705712][ T4316] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.403906][ T4316] usb 2-1: config 0 has no interface number 0 [ 415.420066][ T4316] usb 2-1: config 0 interface 119 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 415.488638][ T4316] usb 2-1: string descriptor 0 read error: -71 [ 415.534199][ T4316] usb 2-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 415.585744][ T4316] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.355032][ T4316] usb 2-1: config 0 descriptor?? [ 416.434283][ T4316] usb 2-1: can't set config #0, error -71 [ 416.488562][ T4316] usb 2-1: USB disconnect, device number 32 [ 416.661669][ T8999] loop1: detected capacity change from 0 to 512 [ 416.821895][ T8999] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.1383: inode has both inline data and extents flags [ 416.922477][ T8999] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.1383: couldn't read orphan inode 15 (err -117) [ 416.963492][ T8999] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 417.112237][ T4279] EXT4-fs (loop1): unmounting filesystem. [ 417.350022][ T9018] device syzkaller0 entered promiscuous mode [ 419.829525][ T9061] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 420.149548][ T9040] [ 420.151899][ T9040] ====================================================== [ 420.158913][ T9040] WARNING: possible circular locking dependency detected [ 420.166037][ T9040] syzkaller #0 Not tainted [ 420.170435][ T9040] ------------------------------------------------------ [ 420.177431][ T9040] syz.4.1395/9040 is trying to acquire lock: [ 420.183397][ T9040] ffff88801746cc58 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x60 [ 420.193052][ T9040] [ 420.193052][ T9040] but task is already holding lock: [ 420.200410][ T9040] ffff88807c7e4e50 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 420.211361][ T9040] [ 420.211361][ T9040] which lock already depends on the new lock. [ 420.211361][ T9040] [ 420.221748][ T9040] [ 420.221748][ T9040] the existing dependency chain (in reverse order) is: [ 420.230750][ T9040] [ 420.230750][ T9040] -> #1 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 420.239436][ T9040] down_write+0x36/0x60 [ 420.244119][ T9040] process_measurement+0x3a2/0x1c30 [ 420.249828][ T9040] ima_file_mmap+0x102/0x150 [ 420.254924][ T9040] __se_sys_remap_file_pages+0x559/0x7b0 [ 420.261086][ T9040] do_syscall_64+0x4c/0xa0 [ 420.266021][ T9040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.272429][ T9040] [ 420.272429][ T9040] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 420.279983][ T9040] __lock_acquire+0x2d07/0x7d10 [ 420.285345][ T9040] lock_acquire+0x1bb/0x4a0 [ 420.290361][ T9040] down_read_killable+0x4c/0x340 [ 420.295811][ T9040] mmap_read_lock_killable+0x1d/0x60 [ 420.301596][ T9040] lock_mm_and_find_vma+0x2b1/0x2f0 [ 420.307296][ T9040] do_user_addr_fault+0x2db/0xb10 [ 420.312833][ T9040] exc_page_fault+0x60/0x100 [ 420.317927][ T9040] asm_exc_page_fault+0x22/0x30 [ 420.323283][ T9040] fault_in_readable+0x13e/0x1f0 [ 420.328821][ T9040] fault_in_iov_iter_readable+0xbb/0x2e0 [ 420.334961][ T9040] generic_perform_write+0x1f1/0x5c0 [ 420.340753][ T9040] __generic_file_write_iter+0x148/0x2a0 [ 420.346892][ T9040] generic_file_write_iter+0xab/0x2e0 [ 420.352770][ T9040] vfs_write+0x4b1/0xa30 [ 420.357528][ T9040] ksys_write+0x14c/0x250 [ 420.362451][ T9040] do_syscall_64+0x4c/0xa0 [ 420.367386][ T9040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.373790][ T9040] [ 420.373790][ T9040] other info that might help us debug this: [ 420.373790][ T9040] [ 420.383995][ T9040] Possible unsafe locking scenario: [ 420.383995][ T9040] [ 420.391426][ T9040] CPU0 CPU1 [ 420.396774][ T9040] ---- ---- [ 420.402126][ T9040] lock(&sb->s_type->i_mutex_key#13); [ 420.407569][ T9040] lock(&mm->mmap_lock); [ 420.414397][ T9040] lock(&sb->s_type->i_mutex_key#13); [ 420.422368][ T9040] lock(&mm->mmap_lock); [ 420.426682][ T9040] [ 420.426682][ T9040] *** DEADLOCK *** [ 420.426682][ T9040] [ 420.434811][ T9040] 3 locks held by syz.4.1395/9040: [ 420.439900][ T9040] #0: ffff8880297e6ae8 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2ae/0x360 [ 420.449119][ T9040] #1: ffff8880766ae460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x26b/0xa30 [ 420.457991][ T9040] #2: ffff88807c7e4e50 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: generic_file_write_iter+0x7f/0x2e0 [ 420.469301][ T9040] [ 420.469301][ T9040] stack backtrace: [ 420.475306][ T9040] CPU: 0 PID: 9040 Comm: syz.4.1395 Not tainted syzkaller #0 [ 420.482670][ T9040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 420.492730][ T9040] Call Trace: [ 420.496010][ T9040] [ 420.498929][ T9040] dump_stack_lvl+0x188/0x24e [ 420.503599][ T9040] ? load_image+0x400/0x400 [ 420.508185][ T9040] ? show_regs_print_info+0x12/0x12 [ 420.513374][ T9040] ? print_circular_bug+0x12b/0x1a0 [ 420.518559][ T9040] check_noncircular+0x296/0x330 [ 420.523499][ T9040] ? add_chain_block+0x940/0x940 [ 420.528424][ T9040] ? lockdep_lock+0xf1/0x1f0 [ 420.533004][ T9040] ? _find_first_zero_bit+0xcf/0x100 [ 420.538272][ T9040] __lock_acquire+0x2d07/0x7d10 [ 420.543114][ T9040] ? verify_lock_unused+0x140/0x140 [ 420.548298][ T9040] ? verify_lock_unused+0x140/0x140 [ 420.553481][ T9040] ? memset+0x1e/0x40 [ 420.557478][ T9040] lock_acquire+0x1bb/0x4a0 [ 420.562091][ T9040] ? mmap_read_lock_killable+0x1d/0x60 [ 420.567546][ T9040] ? read_lock_is_recursive+0x10/0x10 [ 420.572904][ T9040] ? cmp_ex_search+0x1a/0x70 [ 420.577482][ T9040] ? bsearch+0x8a/0xb0 [ 420.581544][ T9040] ? fault_in_readable+0x13e/0x1f0 [ 420.586639][ T9040] ? search_extable+0x8c/0xd0 [ 420.591336][ T9040] ? trim_init_extable+0x3b0/0x3b0 [ 420.596435][ T9040] ? mmap_read_lock_killable+0x1d/0x60 [ 420.601875][ T9040] down_read_killable+0x4c/0x340 [ 420.606800][ T9040] ? mmap_read_lock_killable+0x1d/0x60 [ 420.612240][ T9040] mmap_read_lock_killable+0x1d/0x60 [ 420.617508][ T9040] lock_mm_and_find_vma+0x2b1/0x2f0 [ 420.622689][ T9040] do_user_addr_fault+0x2db/0xb10 [ 420.627785][ T9040] ? _raw_spin_unlock_irq+0x1f/0x40 [ 420.632967][ T9040] exc_page_fault+0x60/0x100 [ 420.637539][ T9040] asm_exc_page_fault+0x22/0x30 [ 420.642372][ T9040] RIP: 0010:fault_in_readable+0x13e/0x1f0 [ 420.648075][ T9040] Code: 78 61 c4 ff 4d 89 f4 49 81 cc ff 0f 00 00 4d 89 f7 49 01 dc 49 81 e4 00 f0 ff ff 4d 39 e6 77 44 e8 57 61 c4 ff 4d 39 e7 74 47 <41> 8a 07 88 44 24 07 49 81 c7 00 10 00 00 4d 39 e7 74 07 e8 3a 61 [ 420.667665][ T9040] RSP: 0018:ffffc90003b67ab0 EFLAGS: 00050287 [ 420.673711][ T9040] RAX: ffffffff81be1159 RBX: 0000000000001000 RCX: 0000000000080000 [ 420.681679][ T9040] RDX: ffffc90010d8a000 RSI: 000000000005a10e RDI: 000000000005a10f [ 420.689636][ T9040] RBP: 0000000000000094 R08: ffff888072df3b80 R09: 0000000000000002 [ 420.697588][ T9040] R10: 0000000000000006 R11: 0000000000000002 R12: 0000200000354000 [ 420.705539][ T9040] R13: 0000000000000000 R14: 0000200000352540 R15: 0000200000353000 [ 420.713501][ T9040] ? fault_in_readable+0x139/0x1f0 [ 420.718699][ T9040] fault_in_iov_iter_readable+0xbb/0x2e0 [ 420.724321][ T9040] generic_perform_write+0x1f1/0x5c0 [ 420.729601][ T9040] ? generic_file_direct_write+0x330/0x330 [ 420.735391][ T9040] ? __file_remove_privs+0x5f0/0x5f0 [ 420.740659][ T9040] ? rwsem_write_trylock+0x135/0x1c0 [ 420.745925][ T9040] ? clear_nonspinnable+0x60/0x60 [ 420.750942][ T9040] ? generic_write_checks_count+0x3d9/0x4c0 [ 420.756824][ T9040] __generic_file_write_iter+0x148/0x2a0 [ 420.762451][ T9040] generic_file_write_iter+0xab/0x2e0 [ 420.767813][ T9040] vfs_write+0x4b1/0xa30 [ 420.772044][ T9040] ? file_end_write+0x250/0x250 [ 420.776882][ T9040] ? __fget_files+0x43d/0x4b0 [ 420.781548][ T9040] ? __fdget_pos+0x2ae/0x360 [ 420.786122][ T9040] ? ksys_write+0x71/0x250 [ 420.790521][ T9040] ksys_write+0x14c/0x250 [ 420.794837][ T9040] ? __ia32_sys_read+0x80/0x80 [ 420.799585][ T9040] ? lockdep_hardirqs_on+0x94/0x140 [ 420.804850][ T9040] do_syscall_64+0x4c/0xa0 [ 420.809251][ T9040] ? clear_bhb_loop+0x60/0xb0 [ 420.813909][ T9040] ? clear_bhb_loop+0x60/0xb0 [ 420.818569][ T9040] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 420.824530][ T9040] RIP: 0033:0x7f31d899c799 [ 420.828937][ T9040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 420.848529][ T9040] RSP: 002b:00007f31d9861028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 420.856924][ T9040] RAX: ffffffffffffffda RBX: 00007f31d8c16180 RCX: 00007f31d899c799 [ 420.864885][ T9040] RDX: 00000000fffffdd8 RSI: 0000200000000540 RDI: 0000000000000005 [ 420.872845][ T9040] RBP: 00007f31d8a32c99 R08: 0000000000000000 R09: 0000000000000000 [ 420.880808][ T9040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.888767][ T9040] R13: 00007f31d8c16218 R14: 00007f31d8c16180 R15: 00007ffd063e96c8 [ 420.896730][ T9040]