last executing test programs: 37m42.750248824s ago: executing program 0 (id=2514): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000009c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000080000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)={[], [{@fsmagic={'fsmagic', 0x3d, 0xe4a3}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@subj_role={'subj_role', 0x3d, '@\\!/./.\xc5:'}}, {@fsname={'fsname', 0x3d, 'nogrpid'}}, {@subj_type={'subj_type', 0x3d, 'discard'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@uid_lt}, {@dont_appraise}, {@smackfsdef={'smackfsdef', 0x3d, 'iso8859-1'}}, {@obj_role={'obj_role', 0x3d, '$!\xf4'}}, {@dont_hash}]}, 0x0, 0x14f5, &(0x7f0000001580)="$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") r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x1d0, 0x11, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1d0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x88000000, 0x3, 0x7}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xffffff00, 0xff, 0xffffff00], @ipv6=@dev={0xfe, 0x80, '\x00', 0xe}, [0x0, 0xffffff00], @ipv4=@private=0xa010100, [0xffffff00, 0x0, 0xffffff00], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xff000000, 0xff000000, 0xff], 0x8, 0x6, 0x5e, 0x4e21, 0x4e23, 0x4e24, 0x4e21}, 0x40, 0x8e0}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0xffffffff, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x242, 0x75f65a4e97d6873f, 0x1}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x3, 0x6, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@local, 0x800, 0x0, 0x2, 0x1, 0x3}, 0x20) syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000001b40)='./file0\x00', 0x208108dc, &(0x7f0000002a80)=ANY=[], 0x1, 0x1503, &(0x7f0000000580)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) 37m41.032750973s ago: executing program 0 (id=2516): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x8, &(0x7f0000000080)={[{@sb={'sb', 0x3d, 0x1}}, {@quota}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040341a020800000000000109022400010000000009040000020300000009210000"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x45) 37m35.929987986s ago: executing program 0 (id=2531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xfffffffffffff8f7, 0x40000, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2200}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rpc_request\x00', r5}, 0x18) setns(0xffffffffffffffff, 0x24020000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd28, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8040) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) 37m33.989174873s ago: executing program 0 (id=2540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff097b0000080039503230"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x10000, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}}) statx(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20, 0x0) 37m33.876599142s ago: executing program 0 (id=2542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_newroute={0x1c, 0x18, 0xfffffffffffff8f7, 0x40000, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x2200}}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x18) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rpc_request\x00', r3}, 0x18) setns(0xffffffffffffffff, 0x24020000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd28, 0x0, {0x3}}, 0x14}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x8040) r5 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000800)={'syz_tun\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x40, [0x6, 0x3, 0xfffffffd, 0x0, 0x8]}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$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") socket$inet6(0xa, 0x2, 0x0) 37m31.514656974s ago: executing program 0 (id=2546): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rpc_request\x00', r4}, 0x18) setns(0xffffffffffffffff, 0x24020000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd28, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000800)={'syz_tun\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x40, [0x6, 0x3, 0xfffffffd, 0x0, 0x8]}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 37m14.777367938s ago: executing program 32 (id=2546): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b70300000000002085000000720000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='rpc_request\x00', r4}, 0x18) setns(0xffffffffffffffff, 0x24020000) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x0, 0x1, 0x70bd28, 0x0, {0x3}}, 0x14}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000800)={'syz_tun\x00', &(0x7f00000005c0)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x40, [0x6, 0x3, 0xfffffffd, 0x0, 0x8]}}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000200)={[{@usrquota}, {@noblock_validity}, {@bh}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@nodelalloc}, {@inlinecrypt}]}, 0x6, 0x5fc, &(0x7f0000000600)="$eJzs3c9rHGUfAPDvzCZ5kzavaUXEFsWAhxakaVKLVS+29WAPBQv2IOKhoUlq6PYHTQq2FkzBg4KCiFeRXvwHvEvv3kRQb56FKlJRUOnK7M62m2Q3XdPsTpr5fGCzz/PM7D7PdydP5pmZPDsBlNZ49iON2BVx51QSMdaybDQaC8fz9W7/du109kiiVnv91ySSvKy5fpI/b88zwxHx7dGIRyur6124cvXsdLXW8F7E/sVzF/cvXLm6b/7c9JnZM7Pnpw68cPDQ5ItTB6c2JM7t+fOx4689+fH7bz8/9111XxKH4+TguzOxIo6NMh7jcScPsbV8ICIOZYk2n8vDZguEUGqV/PdxMCIej7Go1HMNYzH/UaGNA3qqVomoASWV6P9QUs1xQPPYvrvj4JM9HpX0z60jjQOg1fEPNM6NxHD92Gjb7aTlyKhxbmPHBtSf1fHPtd2fZ49Ydh7iz7tbZ2AD6ulk6XpEPNEu/qTeth31SLP402XtSCJiMiKG8va98gBtSFrSvTgPs5b1xp9GxOH8OSs/us76x1fk+x0/AOV080i+I1/Kcvf2f9nYozn+iTbjn9E2+671KHr/13n819zfD9fPkacrxmHZmOVE+7ccXFnw04fHPu1Uf+v4L3tk9TfHgv1w63rE7hXxf5AFm49/sviTNts/W+XU4e7qePX7X451WlZ0/LUbEXvaHv/cG5VmqTWuT+6fm6/OTjZ+tq3j62/e+rJT/UXHn23/bR3ib9n+6crXZZ/JxS7r+OrEjXOdlo3eN/7056Gkcbw5lJe8M724eGkqYig5nq/SUn5g7bY012m+Rxb/3mfa9/9lv//Xl7/PSPNPZhcuvnH2dqdl69n+LReT79S6bEMnWfwz99/+q/p/VvZJl3X88eblpzotWyv+kQcJDAAAAAAAAEoorV+DTdKJu+k0nZhozJd9LLal1QsLi8/OXbh8fiZib/3/IQfT5pXusUY+yfJT+f/DNvMHVuSfi4idEfFZZaSenzh9oTpTdPAAAAAAAAAAAAAAAAAAAACwSWzP5/8371P9e6Ux/x8oiV7eYA7Y3PR/KK96/191iyegDOz/obz0fygv/R/KS/+H8tL/obz0fygv/R/KS/8HAAAAgC1p59M3f0wiYumlkfojM5QvMyMItrbBohsAFKZSdAOAwty99G+wD6XT1fj/r/zLAXvfHKAASbvC+uCgtnbnv9n2lQAAAAAAAAAAAABAD+zZ1Xn+v7nBsLWZ9gfl9QDz/311ADzkfPU/lJdjfOB+s/iHOy0w/x8AAAAAAAAAAAAA+ma0/kjSiXwu8Gik6cRExP8jYkcMJnPz1dnJiHgkIn6oDP4vy08V3WgAAAAAAAAAAAAAAAAAAADYYhauXD07Xa3OXmpN/L2qZGsnmndB7UNdL8d/fFUk/f9YRiKi8I3Ss8RAS0kSsZRt+U3RsEsLsTmaUU8U/IcJAAAAAAAAAAAAAAAAAABKqGXucXu7v+hziwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg/+7d/793iaJjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeTv8GAAD//7V5QCw=") 9.187849541s ago: executing program 2 (id=10366): r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000199c4f20c9070e004f5d010203010902240001000010000904d60202ffff00000905020200020200"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000700)=ANY=[@ANYBLOB="200d80000000e8"], 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 8.342889879s ago: executing program 3 (id=10377): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 7.809151051s ago: executing program 3 (id=10379): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r0) 7.33475637s ago: executing program 3 (id=10383): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f00f0000000000f9ffff2000000050d987b93bda"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f0000000500)) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) kcmp(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 6.241702228s ago: executing program 1 (id=10389): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000100)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000000c0)='tlb_flush\x00', r1}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) 6.235904968s ago: executing program 1 (id=10390): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r0, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000300)='qdisc_dequeue\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x1e) 6.218079689s ago: executing program 1 (id=10392): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r1, 0x0, 0x6f4000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000100039042abd7000eafefffff7ff02e4", @ANYRES32, @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$netlink(r0, 0x0, 0x0) 5.234764198s ago: executing program 5 (id=10398): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 5.234215599s ago: executing program 3 (id=10399): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x16, 0x4, "94c161ee"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000a00)={0x0, 0xf, 0x4, "f1345115"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 5.233988418s ago: executing program 5 (id=10400): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)='%+9llu \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000a00)='fib_table_lookup\x00', r2}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000632f77fbac14fe16e000030a07080403fe80000020006558845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x24, 0x60000000}, 0x2c) 5.233246198s ago: executing program 4 (id=10401): bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 5.232917748s ago: executing program 5 (id=10402): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) 5.232446578s ago: executing program 1 (id=10403): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 5.2194789s ago: executing program 5 (id=10404): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f00f0000000000f9ffff2000000050d987b93bda"], 0x50) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f0000000500)) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 4.921084794s ago: executing program 1 (id=10405): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f00f0000000000f9ffff2000000050d987b93bda"], 0x50) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f0000000500)) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) 4.867296398s ago: executing program 4 (id=10406): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x30, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) 4.776698105s ago: executing program 2 (id=10407): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000880), 0x12) 3.85230323s ago: executing program 2 (id=10408): openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) 3.164008065s ago: executing program 5 (id=10409): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) 3.013110347s ago: executing program 4 (id=10410): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f0000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r2}, 0x18) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) 2.989886789s ago: executing program 5 (id=10411): ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f000067d000/0x2000)=nil, &(0x7f000053d000/0x1000)=nil, 0x2000}) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.882393958s ago: executing program 4 (id=10412): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00"/11], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x50) 2.826252522s ago: executing program 2 (id=10413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x40021, 0x800000000004, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x43}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) 2.805018984s ago: executing program 4 (id=10414): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000001740)=0x7ffffffd, 0x4) write$binfmt_script(r1, 0x0, 0x6f4000) r2 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r7}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000880)=ANY=[@ANYBLOB="80000000100039042abd7000eafefffff7ff02e4", @ANYRES32, @ANYRES32], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4008040) sendmsg$netlink(r0, 0x0, 0x0) 1.964360262s ago: executing program 1 (id=10415): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.964196292s ago: executing program 3 (id=10416): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c3000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.963707131s ago: executing program 3 (id=10417): sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000000000000) bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000780)='./bus\x00', 0x41, &(0x7f0000000c00)={[{@bsdgroups}, {@resgid}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@resuid}, {@auto_da_alloc}, {@noload}, {@jqfmt_vfsv1}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") socket(0x80000000000000a, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc00000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000f00f0000000000f9ffff2000000050d987b93bda"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x18) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000500)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d4, &(0x7f0000000500)) prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) kcmp(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) 1.260663558s ago: executing program 2 (id=10418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.162872046s ago: executing program 2 (id=10419): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r2}, 0x10) close(r0) 0s ago: executing program 4 (id=10420): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) kernel console output (not intermixed with test programs): ifferent from the descriptor's value: 3 [ 3301.120681][ T2191] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3301.129956][ T2191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3301.138214][ T2191] usb 2-1: Product: syz [ 3301.139076][T13363] usb 5-1: 0:2 : does not exist [ 3301.142398][ T2191] usb 2-1: Manufacturer: syz [ 3301.142415][ T2191] usb 2-1: SerialNumber: syz [ 3301.157729][T13363] usb 5-1: unit 5 not found! [ 3301.165317][T13363] usb 5-1: USB disconnect, device number 37 [ 3301.223433][T18396] samsung 0003:0419:0001.0067: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.2-1/input0 [ 3301.352425][ T2191] usb 2-1: 0:2 : does not exist [ 3301.359792][ T2191] usb 2-1: USB disconnect, device number 30 [ 3301.426875][ T522] usb 3-1: USB disconnect, device number 57 [ 3301.494290][T17262] usb 6-1: new full-speed USB device number 114 using dummy_hcd [ 3301.574973][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3301.675770][T17262] usb 6-1: unable to get BOS descriptor or descriptor too short [ 3301.677388][ T3300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9417'. [ 3301.683849][T17262] usb 6-1: not running at top speed; connect to a high speed hub [ 3301.701268][T17262] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3301.714016][T17262] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3301.723395][T17262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3301.733012][T17262] usb 6-1: Product: syz [ 3301.737216][T17262] usb 6-1: Manufacturer: syz [ 3301.742306][T17262] usb 6-1: SerialNumber: syz [ 3301.748048][ T3293] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3301.824050][ T3304] hub 8-0:1.0: USB hub found [ 3301.829435][ T3304] hub 8-0:1.0: 1 port detected [ 3301.904333][ T2191] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 3302.007061][ T3307] loop1: detected capacity change from 0 to 512 [ 3302.017526][ T3307] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3302.102516][ T3307] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3302.109964][ T2191] usb 4-1: device descriptor read/64, error -71 [ 3302.118944][ T3307] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9419: bg 0: block 248: padding at end of block bitmap is not set [ 3302.134703][ T3307] Quota error (device loop1): write_blk: dquota write failed [ 3302.142239][ T3307] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3302.152285][ T3307] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.9419: Failed to acquire dquot type 1 [ 3302.166411][ T3307] EXT4-fs (loop1): 1 truncate cleaned up [ 3302.196644][ T3307] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3302.504280][ T2191] usb 4-1: device descriptor read/64, error -71 [ 3302.903788][ T3235] EXT4-fs (loop1): unmounting filesystem. [ 3302.968460][T17262] usb 6-1: USB disconnect, device number 114 [ 3303.044314][ T2191] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 3303.204296][ T2191] usb 4-1: device descriptor read/64, error -71 [ 3303.474308][ T2191] usb 4-1: device descriptor read/64, error -71 [ 3303.594453][ T2191] usb usb4-port1: attempt power cycle [ 3303.764270][T17262] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 3303.965316][T17262] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3303.980476][T17262] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3303.990833][T17262] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3304.000014][T17262] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3304.008402][T17262] usb 6-1: SerialNumber: syz [ 3304.014310][ T2191] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 3304.055284][ T2191] usb 4-1: device descriptor read/8, error -71 [ 3304.205418][ T2191] usb 4-1: device descriptor read/8, error -71 [ 3304.224473][T17262] usb 6-1: 0:2 : does not exist [ 3304.232382][T17262] usb 6-1: USB disconnect, device number 115 [ 3304.244286][ T713] usb 5-1: new full-speed USB device number 38 using dummy_hcd [ 3304.394278][ T713] usb 5-1: device descriptor read/64, error -71 [ 3304.414349][T18396] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 3304.484344][ T2191] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 3304.515479][ T2191] usb 4-1: device descriptor read/8, error -71 [ 3304.605625][T18396] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3304.615906][T18396] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3304.625569][T18396] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3304.634752][T18396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3304.642805][T18396] usb 2-1: SerialNumber: syz [ 3304.664827][ T2191] usb 4-1: device descriptor read/8, error -71 [ 3304.674310][ T713] usb 5-1: device descriptor read/64, error -71 [ 3304.678560][ T3370] device pim6reg1 entered promiscuous mode [ 3304.794470][ T2191] usb usb4-port1: unable to enumerate USB device [ 3304.851779][T18396] usb 2-1: 0:2 : does not exist [ 3304.857765][T18396] usb 2-1: unit 5 not found! [ 3304.864123][T18396] usb 2-1: USB disconnect, device number 31 [ 3304.874576][ T3385] device pim6reg1 entered promiscuous mode [ 3304.944395][ T713] usb 5-1: new full-speed USB device number 39 using dummy_hcd [ 3305.064741][ T2355] udevd[2355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3305.114297][ T713] usb 5-1: device descriptor read/64, error -71 [ 3305.197621][ T3393] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9452'. [ 3305.829854][T17262] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 3306.374273][T17262] usb 2-1: device descriptor read/64, error -71 [ 3306.524292][ T713] usb 5-1: device descriptor read/64, error -71 [ 3306.644335][T17262] usb 2-1: device descriptor read/64, error -71 [ 3306.644442][ T713] usb usb5-port1: attempt power cycle [ 3306.694319][T18396] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 3306.854326][ T522] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 3306.874267][T18396] usb 6-1: Using ep0 maxpacket: 16 [ 3306.880690][T18396] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3306.889560][T18396] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3306.899673][T18396] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3306.909992][T18396] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3306.914295][T17262] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 3306.919044][T18396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3306.934831][T18396] usb 6-1: Product: syz [ 3306.938987][T18396] usb 6-1: Manufacturer: syz [ 3306.944006][T18396] usb 6-1: SerialNumber: syz [ 3307.036504][ T522] usb 3-1: unable to get BOS descriptor or descriptor too short [ 3307.045284][ T522] usb 3-1: not running at top speed; connect to a high speed hub [ 3307.054709][ T522] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3307.068587][ T522] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3307.605952][ T522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3307.648026][ T522] usb 3-1: Product: syz [ 3307.669920][ T522] usb 3-1: Manufacturer: syz [ 3307.683926][T18396] usb 6-1: 0:2 : does not exist [ 3307.739329][T18396] usb 6-1: USB disconnect, device number 116 [ 3307.771137][ T522] usb 3-1: SerialNumber: syz [ 3308.089919][T17262] usb 2-1: device descriptor read/64, error -71 [ 3308.113388][ T3414] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3308.374272][T17262] usb 2-1: device descriptor read/64, error -71 [ 3308.494323][T17262] usb usb2-port1: attempt power cycle [ 3308.539758][ T522] usb 3-1: USB disconnect, device number 58 [ 3308.590084][ T3436] device syzkaller0 entered promiscuous mode [ 3309.134266][T18396] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 3309.474061][T18396] usb 5-1: Using ep0 maxpacket: 32 [ 3309.480714][T18396] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3309.491082][T18396] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3309.502144][T18396] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3309.511378][T18396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3309.545805][T18396] usb 5-1: Product: syz [ 3309.550089][T18396] usb 5-1: Manufacturer: syz [ 3309.554885][T18396] usb 5-1: SerialNumber: syz [ 3309.563375][T18396] usb 5-1: config 0 descriptor?? [ 3309.624322][ T522] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 3309.805360][ T522] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 47462, setting to 1024 [ 3309.816520][ T522] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 3309.827918][ T522] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3309.837040][ T522] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3309.845181][ T522] usb 3-1: Product: syz [ 3309.849412][ T522] usb 3-1: Manufacturer: syz [ 3309.854076][ T522] usb 3-1: SerialNumber: syz [ 3309.859349][ T522] usb 3-1: config 0 descriptor?? [ 3309.864974][ T3452] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 3309.872860][ T522] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 3309.879364][ T522] usb 3-1: No valid video chain found. [ 3309.984306][T17262] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 3310.080616][T17396] usb 3-1: USB disconnect, device number 59 [ 3310.215804][T17262] usb 2-1: Using ep0 maxpacket: 32 [ 3310.394330][T18396] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 3310.544333][T18396] usb 6-1: device descriptor read/64, error -71 [ 3310.814352][T18396] usb 6-1: device descriptor read/64, error -71 [ 3311.134387][T18396] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 3311.284385][T18396] usb 6-1: device descriptor read/64, error -71 [ 3311.386624][T17262] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 3311.394939][T17262] usb 2-1: config 0 has no interface number 0 [ 3311.402926][T17262] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3311.412246][T17262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3311.420350][T17262] usb 2-1: Product: syz [ 3311.620689][T18396] usb 6-1: device descriptor read/64, error -71 [ 3311.695537][T29756] usb 5-1: USB disconnect, device number 41 [ 3311.958680][T17262] usb 2-1: Manufacturer: syz [ 3311.963499][T17262] usb 2-1: SerialNumber: syz [ 3311.979242][T18396] usb usb6-port1: attempt power cycle [ 3311.985648][T17262] usb 2-1: config 0 descriptor?? [ 3311.996114][T17262] smsc95xx v2.0.0 [ 3312.264291][ T522] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 3312.394280][T18396] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 3312.402306][T17262] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3312.413106][T17262] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3312.425397][T18396] usb 6-1: device descriptor read/8, error -71 [ 3312.444270][ T522] usb 4-1: Using ep0 maxpacket: 16 [ 3312.450621][ T522] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3312.457425][ T522] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3312.466610][ T522] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3312.475567][ T522] usb 4-1: config 0 descriptor?? [ 3312.507275][ T3490] binder: 3489:3490 ioctl 4018620d 0 returned -22 [ 3312.575410][T18396] usb 6-1: device descriptor read/8, error -71 [ 3312.784276][ T1528] usb 3-1: new full-speed USB device number 60 using dummy_hcd [ 3312.844304][T18396] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 3312.875414][T18396] usb 6-1: device descriptor read/8, error -71 [ 3312.965399][ T1528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3312.976504][ T1528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3312.986344][ T1528] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 3312.995594][ T1528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3313.004700][ T1528] usb 3-1: config 0 descriptor?? [ 3313.035325][T18396] usb 6-1: device descriptor read/8, error -71 [ 3313.108060][ T522] usb 4-1: USB disconnect, device number 49 [ 3313.154333][T18396] usb usb6-port1: unable to enumerate USB device [ 3313.413855][ T1528] usbhid 3-1:0.0: can't add hid device: -71 [ 3313.419853][ T1528] usbhid: probe of 3-1:0.0 failed with error -71 [ 3313.427362][ T1528] usb 3-1: USB disconnect, device number 60 [ 3313.641571][T17262] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 3313.656466][T17262] smsc95xx: probe of 2-1:0.67 failed with error -32 [ 3313.663921][T17262] usb 2-1: USB disconnect, device number 35 [ 3313.784300][T18396] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 3313.914278][ T2191] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 3313.965465][T18396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 47462, setting to 1024 [ 3313.976921][T18396] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 3313.989071][T18396] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3313.998392][T18396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.006469][T18396] usb 6-1: Product: syz [ 3314.010680][T18396] usb 6-1: Manufacturer: syz [ 3314.015335][T18396] usb 6-1: SerialNumber: syz [ 3314.020711][T18396] usb 6-1: config 0 descriptor?? [ 3314.028921][ T3496] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3314.037649][T18396] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 3314.044101][T18396] usb 6-1: No valid video chain found. [ 3314.047544][ T3506] device syzkaller0 entered promiscuous mode [ 3314.094291][ T2191] usb 4-1: Using ep0 maxpacket: 32 [ 3314.100624][ T2191] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3314.111900][ T2191] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 3314.121059][ T2191] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3314.135751][ T2191] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3314.145022][ T2191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3314.153037][ T2191] usb 4-1: Product: syz [ 3314.157245][ T2191] usb 4-1: Manufacturer: syz [ 3314.166087][ T2191] usb 4-1: SerialNumber: syz [ 3314.179297][ T2191] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 3314.186488][ T2191] cdc_ncm 4-1:1.0: bind() failure [ 3316.706035][ T2191] usb 6-1: USB disconnect, device number 121 [ 3316.716461][ T3522] binder: 3521:3522 ioctl 4018620d 0 returned -22 [ 3317.037134][ T3535] hub 8-0:1.0: USB hub found [ 3317.042613][ T3535] hub 8-0:1.0: 1 port detected [ 3317.343342][T17262] usb 2-1: new full-speed USB device number 36 using dummy_hcd [ 3317.626054][ T3542] device syzkaller0 entered promiscuous mode [ 3317.738800][T17262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3317.948556][T17262] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3317.953260][T18396] usb 4-1: USB disconnect, device number 50 [ 3317.958484][T17262] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 3317.973451][T17262] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3317.999175][T17262] usb 2-1: config 0 descriptor?? [ 3318.116385][ T3564] hub 8-0:1.0: USB hub found [ 3318.121587][ T3564] hub 8-0:1.0: 1 port detected [ 3318.374363][T18396] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 3318.626063][T18396] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3318.641282][T18396] usb 4-1: not running at top speed; connect to a high speed hub [ 3318.682507][T18396] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3318.739728][T18396] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3318.774364][ T2191] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 3318.809547][T18396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3319.046251][T17262] usbhid 2-1:0.0: can't add hid device: -71 [ 3319.050594][T18396] usb 4-1: Product: syz [ 3319.052250][T17262] usbhid: probe of 2-1:0.0 failed with error -71 [ 3319.056578][T18396] usb 4-1: Manufacturer: syz [ 3319.067737][T18396] usb 4-1: SerialNumber: syz [ 3319.074194][T17262] usb 2-1: USB disconnect, device number 36 [ 3319.092584][ T3550] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3319.154278][ T2191] usb 6-1: Using ep0 maxpacket: 16 [ 3319.160534][ T2191] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3319.180491][ T2191] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3319.196014][ T2191] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3319.212990][ T2191] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3319.222387][ T2191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3319.230710][ T2191] usb 6-1: Product: syz [ 3319.235228][ T2191] usb 6-1: Manufacturer: syz [ 3319.239862][ T2191] usb 6-1: SerialNumber: syz [ 3319.364322][T13363] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 3319.457407][ T2191] usb 6-1: 0:2 : does not exist [ 3319.469188][ T2191] usb 6-1: USB disconnect, device number 122 [ 3319.514969][T18396] usb 4-1: USB disconnect, device number 51 [ 3319.554298][T13363] usb 3-1: Using ep0 maxpacket: 16 [ 3319.567314][T13363] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3319.574094][T13363] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3319.583637][T13363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3319.592578][T13363] usb 3-1: config 0 descriptor?? [ 3319.884294][T29756] usb 2-1: new full-speed USB device number 37 using dummy_hcd [ 3320.066088][T29756] usb 2-1: unable to get BOS descriptor or descriptor too short [ 3320.131276][T29756] usb 2-1: not running at top speed; connect to a high speed hub [ 3320.140629][T29756] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3320.153968][T29756] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3320.163740][T29756] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3320.172006][T29756] usb 2-1: Product: syz [ 3320.176727][T29756] usb 2-1: Manufacturer: syz [ 3320.181514][T29756] usb 2-1: SerialNumber: syz [ 3320.262638][ T3577] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 3320.319567][ T522] usb 3-1: USB disconnect, device number 61 [ 3320.534323][T18396] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 3320.741181][ T3577] loop1: detected capacity change from 0 to 512 [ 3320.747771][T18396] usb 4-1: Using ep0 maxpacket: 32 [ 3320.763448][T18396] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 3320.795911][ T3577] FAT-fs (loop1): Unrecognized mount option "allow_utime=0000000000000000000000!" or missing value [ 3320.892145][T18396] usb 4-1: config 0 has no interface number 0 [ 3320.908458][T29756] usb 2-1: USB disconnect, device number 37 [ 3320.917898][T18396] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3320.928434][T18396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3320.936945][T18396] usb 4-1: Product: syz [ 3320.941113][T18396] usb 4-1: Manufacturer: syz [ 3320.945937][T18396] usb 4-1: SerialNumber: syz [ 3320.951013][T18396] usb 4-1: config 0 descriptor?? [ 3320.956903][T18396] smsc95xx v2.0.0 [ 3321.038620][ T3590] hub 8-0:1.0: USB hub found [ 3321.043689][ T3590] hub 8-0:1.0: 1 port detected [ 3321.248339][ T3592] device syzkaller0 entered promiscuous mode [ 3321.363471][T18396] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3321.489468][T18396] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3322.044437][T29756] usb 6-1: new full-speed USB device number 123 using dummy_hcd [ 3322.113085][ T3614] hub 8-0:1.0: USB hub found [ 3322.118156][ T3614] hub 8-0:1.0: 1 port detected [ 3322.266003][T29756] usb 6-1: config 0 has an invalid interface number: 214 but max is 0 [ 3322.294947][T29756] usb 6-1: config 0 has no interface number 0 [ 3322.357483][T29756] usb 6-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 3322.414261][T29756] usb 6-1: config 0 interface 214 has no altsetting 0 [ 3322.460106][T29756] usb 6-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 3322.506117][T29756] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3322.549102][T29756] usb 6-1: Product: syz [ 3322.565572][T29756] usb 6-1: Manufacturer: syz [ 3322.597117][T18396] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 3322.624484][T29756] usb 6-1: SerialNumber: syz [ 3322.630345][T18396] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 3322.655113][T29756] usb 6-1: config 0 descriptor?? [ 3322.661055][ T3595] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3322.726636][T18396] usb 4-1: USB disconnect, device number 52 [ 3322.946472][ T3595] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 3323.521342][ T3636] device pim6reg1 entered promiscuous mode [ 3323.564295][T13363] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 3323.745669][T13363] usb 5-1: Using ep0 maxpacket: 32 [ 3323.757443][T13363] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3323.768237][T13363] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 3323.841196][T13363] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3323.850494][T13363] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3323.858583][T13363] usb 5-1: Product: syz [ 3323.862924][T13363] usb 5-1: Manufacturer: syz [ 3323.867702][T13363] usb 5-1: SerialNumber: syz [ 3323.884498][T13363] usb 5-1: config 0 descriptor?? [ 3324.403455][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 3324.414517][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 3324.450550][ T3659] loop1: detected capacity change from 0 to 512 [ 3324.457792][ T3659] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3324.467827][ T3659] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3324.474954][ T3659] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9544: bg 0: block 248: padding at end of block bitmap is not set [ 3324.489861][ T3659] Quota error (device loop1): write_blk: dquota write failed [ 3324.497616][ T3659] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3324.507735][ T3659] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.9544: Failed to acquire dquot type 1 [ 3324.519750][ T3659] EXT4-fs (loop1): 1 truncate cleaned up [ 3324.526219][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 3324.526751][ T3659] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3324.539439][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 3324.558901][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3324.570151][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3324.581421][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3324.593769][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3324.605819][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3324.635341][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3324.646771][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3324.658401][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3324.669690][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3324.681966][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3324.693057][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3324.704312][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 3324.715699][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3324.726906][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3324.738224][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3324.749433][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3324.760537][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 3324.771613][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3324.782810][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3324.794144][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3324.805676][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3324.817033][T29756] ax88179_178a 6-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3324.845389][T29756] ax88179_178a 6-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, be:09:a4:b2:18:d9 [ 3324.884318][T29756] usb 6-1: USB disconnect, device number 123 [ 3324.890447][ T3670] device pim6reg1 entered promiscuous mode [ 3324.890691][T29756] ax88179_178a 6-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.5-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 3324.904280][T17262] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 3325.094253][T17262] usb 4-1: Using ep0 maxpacket: 32 [ 3325.100693][T17262] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 3325.109128][T17262] usb 4-1: config 0 has no interface number 0 [ 3325.116663][T17262] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3325.126023][T17262] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3325.134175][T17262] usb 4-1: Product: syz [ 3325.383827][ T3710] hub 8-0:1.0: USB hub found [ 3325.389325][ T3710] hub 8-0:1.0: 1 port detected [ 3325.772599][T17262] usb 4-1: Manufacturer: syz [ 3325.779632][ T3235] EXT4-fs (loop1): unmounting filesystem. [ 3326.015958][T17262] usb 4-1: SerialNumber: syz [ 3326.032923][T17262] usb 4-1: config 0 descriptor?? [ 3326.119410][T17262] smsc95xx v2.0.0 [ 3326.188747][ T3728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9560'. [ 3326.192676][ T713] usb 5-1: USB disconnect, device number 42 [ 3326.542816][ T3745] hub 8-0:1.0: USB hub found [ 3326.548073][ T3745] hub 8-0:1.0: 1 port detected [ 3326.584020][T17262] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3326.623892][T17262] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3326.787083][T29695] usb 6-1: new high-speed USB device number 124 using dummy_hcd [ 3327.264305][ T713] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 3327.405897][T29695] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 47462, setting to 1024 [ 3327.417444][T29695] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3327.445550][ T713] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 3327.453912][ T713] usb 2-1: config 0 has no interface number 0 [ 3327.460295][ T713] usb 2-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 3327.469096][T29695] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3327.480494][T29695] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3327.488752][T29695] usb 6-1: Product: syz [ 3327.492947][T29695] usb 6-1: Manufacturer: syz [ 3327.497743][T29695] usb 6-1: SerialNumber: syz [ 3327.502351][ T713] usb 2-1: config 0 interface 214 has no altsetting 0 [ 3327.506797][T29695] usb 6-1: config 0 descriptor?? [ 3327.511121][ T713] usb 2-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 3327.514749][ T3736] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 3327.523686][ T713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3327.531536][T17262] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 3327.539357][ T713] usb 2-1: Product: syz [ 3327.552089][T17262] smsc95xx: probe of 4-1:0.67 failed with error -32 [ 3327.554349][ T713] usb 2-1: Manufacturer: syz [ 3327.561371][T29695] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 3327.571694][ T713] usb 2-1: SerialNumber: syz [ 3327.571725][T29695] usb 6-1: No valid video chain found. [ 3327.580391][ T713] usb 2-1: config 0 descriptor?? [ 3327.584032][T17262] usb 4-1: USB disconnect, device number 53 [ 3327.664818][ T1528] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 3327.824333][ T3747] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3327.850228][T29756] usb 6-1: USB disconnect, device number 124 [ 3327.885605][ T1528] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 47462, setting to 1024 [ 3327.897122][ T1528] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3327.908742][ T1528] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3327.917848][ T1528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3327.926070][ T1528] usb 3-1: Product: syz [ 3327.930267][ T1528] usb 3-1: Manufacturer: syz [ 3327.935623][ T1528] usb 3-1: SerialNumber: syz [ 3327.941073][ T1528] usb 3-1: config 0 descriptor?? [ 3327.946343][ T3751] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 3327.954443][ T1528] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 3327.960864][ T1528] usb 3-1: No valid video chain found. [ 3328.033761][ T3747] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 3328.160564][T29756] usb 3-1: USB disconnect, device number 62 [ 3328.176609][ T3759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9573'. [ 3328.704301][T17262] usb 6-1: new high-speed USB device number 125 using dummy_hcd [ 3328.773341][ T1528] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 3328.775593][ T3787] hub 8-0:1.0: USB hub found [ 3328.788524][ T3787] hub 8-0:1.0: 1 port detected [ 3329.346925][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 3329.376581][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 3329.442365][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 3329.493617][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 3329.633137][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3329.644792][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3329.656317][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3329.658320][T17262] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3329.669379][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3329.690206][T17262] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3329.701380][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3329.712478][T17262] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3329.724282][T17262] usb 6-1: Product: syz [ 3329.725662][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3329.728502][T17262] usb 6-1: Manufacturer: syz [ 3329.744475][T17262] usb 6-1: SerialNumber: syz [ 3329.754681][ T1528] usb 4-1: unable to get BOS descriptor or descriptor too short [ 3329.763559][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3329.765400][T17262] usb 6-1: config 0 descriptor?? [ 3329.780231][ T1528] usb 4-1: not running at top speed; connect to a high speed hub [ 3329.781444][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3329.788971][T17262] usb 6-1: Found UVC 0.00 device syz (18ec:3288) [ 3329.804626][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3329.805605][T17262] usb 6-1: No valid video chain found. [ 3329.822869][ T1528] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 3329.824345][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3329.845852][ T1528] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 3329.855031][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3329.855282][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 3329.865962][ T1528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3329.877547][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3329.885040][ T1528] usb 4-1: Product: syz [ 3329.900359][ T1528] usb 4-1: Manufacturer: syz [ 3329.905180][ T1528] usb 4-1: SerialNumber: syz [ 3329.908723][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3329.916748][ T3783] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 3329.921058][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3329.939126][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3329.951105][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 3329.962545][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3329.973701][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3329.992509][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3330.017263][T18396] usb 6-1: USB disconnect, device number 125 [ 3330.025701][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3330.039369][ T713] ax88179_178a 2-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3330.052843][ T713] ax88179_178a 2-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 8a:cc:7a:c1:57:5a [ 3330.071970][ T713] usb 2-1: USB disconnect, device number 38 [ 3330.082752][ T713] ax88179_178a 2-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.1-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 3330.999157][ T3820] loop1: detected capacity change from 0 to 512 [ 3331.568105][ T3820] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3331.926168][ T3820] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3331.935630][ T3820] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9594: bg 0: block 248: padding at end of block bitmap is not set [ 3331.951057][ T3820] Quota error (device loop1): write_blk: dquota write failed [ 3331.958682][ T3820] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3331.968682][ T3820] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.9594: Failed to acquire dquot type 1 [ 3331.982549][ T3820] EXT4-fs (loop1): 1 truncate cleaned up [ 3331.989001][ T3820] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3332.518391][ T1528] usb 4-1: USB disconnect, device number 54 [ 3333.202410][ T3235] EXT4-fs (loop1): unmounting filesystem. [ 3334.074253][ T1528] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 3334.224261][T18396] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 3334.234329][T17396] usb 6-1: new high-speed USB device number 126 using dummy_hcd [ 3334.265340][ T1528] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3334.279162][ T1528] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3334.298728][ T1528] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3334.308492][ T1528] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3334.318846][ T1528] usb 4-1: SerialNumber: syz [ 3334.405717][T18396] usb 5-1: config 8 has an invalid interface number: 223 but max is 0 [ 3334.422317][T18396] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 3334.459572][T18396] usb 5-1: config 8 has no interface number 0 [ 3334.466469][T18396] usb 5-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 3334.477711][T18396] usb 5-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3334.513475][T18396] usb 5-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 3334.559128][T18396] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3334.609618][T18396] usb 5-1: Product: syz [ 3334.633218][T18396] usb 5-1: Manufacturer: syz [ 3334.659317][T18396] usb 5-1: SerialNumber: syz [ 3334.921813][T18396] usb 5-1: USB disconnect, device number 43 [ 3335.231385][T17396] usb 6-1: Using ep0 maxpacket: 16 [ 3335.420490][ T1528] usb 4-1: 0:2 : does not exist [ 3336.006289][ T1528] usb 4-1: unit 5 not found! [ 3336.011606][T17396] usb 6-1: config 0 interface 0 has no altsetting 0 [ 3336.051818][T17396] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3336.063649][ T1528] usb 4-1: USB disconnect, device number 55 [ 3336.070069][T17396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3336.087058][T17396] usb 6-1: config 0 descriptor?? [ 3336.294285][ T713] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 3336.473347][T28066] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 3336.574320][ T713] usb 2-1: Using ep0 maxpacket: 16 [ 3336.580971][ T713] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 3336.590344][ T713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3336.601909][ T713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3336.614618][ T713] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 3336.624534][ T713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3336.633034][ T713] usb 2-1: Product: syz [ 3336.637509][ T713] usb 2-1: Manufacturer: syz [ 3336.642297][ T713] usb 2-1: SerialNumber: syz [ 3336.654321][ T1528] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 3336.655535][T28066] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3336.673194][T28066] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3336.683094][T28066] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3336.692370][T28066] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3336.700564][T28066] usb 3-1: SerialNumber: syz [ 3336.702423][T17396] usb 6-1: USB disconnect, device number 126 [ 3336.835640][ T1528] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 47462, setting to 1024 [ 3336.847674][ T1528] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 3336.859631][ T1528] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3336.860730][ T713] usb 2-1: 0:2 : does not exist [ 3336.869725][ T1528] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3336.882348][ T1528] usb 4-1: Product: syz [ 3336.886932][ T1528] usb 4-1: Manufacturer: syz [ 3336.887387][ T713] usb 2-1: USB disconnect, device number 39 [ 3336.891645][ T1528] usb 4-1: SerialNumber: syz [ 3336.903523][ T1528] usb 4-1: config 0 descriptor?? [ 3336.909267][ T3933] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 3336.915612][T28066] usb 3-1: 0:2 : does not exist [ 3336.919078][ T1528] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 3336.923248][T28066] usb 3-1: unit 5 not found! [ 3336.928387][ T1528] usb 4-1: No valid video chain found. [ 3336.943858][T28066] usb 3-1: USB disconnect, device number 63 [ 3337.154700][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3337.187850][T28066] usb 4-1: USB disconnect, device number 56 [ 3340.917717][ T4003] binder: 4002:4003 ioctl 4018620d 0 returned -22 [ 3341.204315][T11275] usb 3-1: new full-speed USB device number 64 using dummy_hcd [ 3341.328462][T29695] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 3341.425672][T11275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3341.437550][T11275] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3341.449479][T11275] usb 3-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 3341.475722][ T4015] hub 8-0:1.0: USB hub found [ 3341.480949][ T4015] hub 8-0:1.0: 1 port detected [ 3341.509799][T11275] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3341.537716][T11275] usb 3-1: config 0 descriptor?? [ 3342.010495][T11275] usbhid 3-1:0.0: can't add hid device: -71 [ 3342.094168][T11275] usbhid: probe of 3-1:0.0 failed with error -71 [ 3342.178713][T11275] usb 3-1: USB disconnect, device number 64 [ 3342.456333][T29695] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 3342.465522][T29695] usb 4-1: config 0 has no interface number 0 [ 3342.471731][T29695] usb 4-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 3342.482773][T29695] usb 4-1: config 0 interface 214 has no altsetting 0 [ 3342.496226][T29695] usb 4-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 3342.506479][T29695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3342.514972][T29695] usb 4-1: Product: syz [ 3342.519233][T29695] usb 4-1: Manufacturer: syz [ 3342.523846][T29695] usb 4-1: SerialNumber: syz [ 3342.532602][T29695] usb 4-1: config 0 descriptor?? [ 3342.538228][ T3968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3342.714175][ T4045] hub 8-0:1.0: USB hub found [ 3342.719428][ T4045] hub 8-0:1.0: 1 port detected [ 3342.755610][ T3968] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 3342.764381][T18396] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 3342.946310][T18396] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3342.976156][T18396] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3342.988121][T18396] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3342.998608][T18396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3343.007834][T18396] usb 2-1: SerialNumber: syz [ 3343.253937][T18396] usb 2-1: cannot find UAC_HEADER [ 3343.270047][T18396] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 3343.311002][T18396] usb 2-1: USB disconnect, device number 40 [ 3343.994834][ T2355] udevd[2355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3344.155049][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 3344.390103][ T4082] loop1: detected capacity change from 0 to 512 [ 3344.405201][ T4082] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3344.662795][ T4082] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3344.682611][ T4082] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9684: bg 0: block 248: padding at end of block bitmap is not set [ 3344.698052][ T4082] Quota error (device loop1): write_blk: dquota write failed [ 3344.705737][ T4082] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3344.715957][ T4082] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.9684: Failed to acquire dquot type 1 [ 3344.729742][ T4082] EXT4-fs (loop1): 1 truncate cleaned up [ 3344.737457][ T4082] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3344.975971][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 3345.034946][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3346.042289][ T3235] EXT4-fs (loop1): unmounting filesystem. [ 3346.042736][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3346.060285][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3346.079947][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3346.095192][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3346.106948][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3346.119745][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3346.136313][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3346.152221][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3346.155763][T18396] usb 3-1: new full-speed USB device number 65 using dummy_hcd [ 3346.165301][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3346.220562][ T4125] hub 8-0:1.0: USB hub found [ 3346.225982][ T4125] hub 8-0:1.0: 1 port detected [ 3346.355927][T18396] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 3346.397974][T18396] usb 3-1: config 0 has no interface number 0 [ 3346.468082][T18396] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 3346.516280][T18396] usb 3-1: config 0 interface 214 has no altsetting 0 [ 3346.550362][T18396] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 3346.575481][T18396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3346.585245][T18396] usb 3-1: Product: syz [ 3346.590347][T18396] usb 3-1: Manufacturer: syz [ 3346.617768][T18396] usb 3-1: SerialNumber: syz [ 3346.701833][T18396] usb 3-1: config 0 descriptor?? [ 3346.745669][ T4104] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3347.139100][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3347.150423][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 3347.168576][ T4104] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3347.180655][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3347.212575][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3347.234170][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3347.258899][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3347.280367][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 3347.294297][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3347.314312][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3347.332723][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3347.354481][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3347.377176][T29695] ax88179_178a 4-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3347.393751][T29695] ax88179_178a 4-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, e8:00:00:00:00:00 [ 3347.420213][T29695] usb 4-1: USB disconnect, device number 57 [ 3347.426603][T29695] ax88179_178a 4-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.3-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 3347.657684][ T4176] loop1: detected capacity change from 0 to 512 [ 3347.672274][ T4176] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3347.802320][ T4176] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3347.811491][ T4176] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.9713: bg 0: block 248: padding at end of block bitmap is not set [ 3347.827422][ T4176] Quota error (device loop1): write_blk: dquota write failed [ 3347.835125][ T4176] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3347.845436][ T4176] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.9713: Failed to acquire dquot type 1 [ 3347.859480][ T4176] EXT4-fs (loop1): 1 truncate cleaned up [ 3347.867283][ T4176] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3348.670985][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 3348.682425][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 3348.846519][ T4202] hub 8-0:1.0: USB hub found [ 3348.851714][ T4202] hub 8-0:1.0: 1 port detected [ 3349.075159][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 3349.156893][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 3349.192600][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3349.204707][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3349.218061][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3349.467941][ T3235] EXT4-fs (loop1): unmounting filesystem. [ 3349.475794][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3349.774875][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3349.788625][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3349.807102][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3349.818655][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3349.830516][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3349.845261][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3349.858161][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3349.872391][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 3349.884631][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3349.895818][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3349.907207][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3349.920584][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3349.932081][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 3349.944857][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3349.956465][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3349.968042][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3349.979657][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3349.990987][T18396] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3350.004510][T18396] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, c2:12:70:aa:1b:75 [ 3350.034299][T18396] usb 3-1: USB disconnect, device number 65 [ 3350.047224][T18396] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 3351.605555][ T4277] device syzkaller0 entered promiscuous mode [ 3352.117662][ T4313] device syzkaller0 entered promiscuous mode [ 3352.189603][ T4328] device pim6reg1 entered promiscuous mode [ 3352.394333][T17396] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 3352.585706][T17396] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3352.598479][T17396] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3352.608118][T17396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3352.616574][T17396] usb 3-1: Product: syz [ 3352.620915][T17396] usb 3-1: Manufacturer: syz [ 3352.626151][T17396] usb 3-1: SerialNumber: syz [ 3352.643315][T17396] usb 3-1: config 0 descriptor?? [ 3352.655377][T17396] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 3352.662504][T17396] usb 3-1: No valid video chain found. [ 3352.856267][T28066] usb 3-1: USB disconnect, device number 66 [ 3353.644650][ T4363] device syzkaller0 entered promiscuous mode [ 3353.713125][ T4370] device pim6reg1 entered promiscuous mode [ 3353.853159][ T4381] hub 8-0:1.0: USB hub found [ 3353.858803][ T4381] hub 8-0:1.0: 1 port detected [ 3354.863774][T18396] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 3355.254857][ T4427] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9806'. [ 3355.640835][T18396] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 3355.685793][T18396] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 3355.703282][T18396] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3355.712709][T18396] usb 2-1: Product: syz [ 3355.719000][T18396] usb 2-1: Manufacturer: syz [ 3355.723970][T18396] usb 2-1: SerialNumber: syz [ 3356.720390][T18396] usb 2-1: config 0 descriptor?? [ 3356.875607][T18396] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 3356.964667][T18396] usb 2-1: No valid video chain found. [ 3357.081337][T18396] usb 2-1: USB disconnect, device number 41 [ 3357.390160][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9816'. [ 3357.574256][ T335] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 3357.774321][ T335] usb 5-1: Using ep0 maxpacket: 32 [ 3357.781630][ T335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3357.918494][ T335] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3357.960764][ T335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3357.978158][ T4485] binder: 4484:4485 ioctl 4018620d 0 returned -22 [ 3357.981564][ T335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3357.992914][ T335] usb 5-1: Product: syz [ 3357.997646][ T335] usb 5-1: Manufacturer: syz [ 3358.002484][ T335] usb 5-1: SerialNumber: syz [ 3358.010967][ T335] usb 5-1: selecting invalid altsetting 1 [ 3358.203818][ T4493] hub 8-0:1.0: USB hub found [ 3358.208986][ T4493] hub 8-0:1.0: 1 port detected [ 3358.224327][T29756] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 3358.254324][T18396] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 3358.406107][T29756] usb 3-1: config 8 has an invalid interface number: 223 but max is 0 [ 3358.417803][T29756] usb 3-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 3358.427822][T29756] usb 3-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 3358.439293][T29756] usb 3-1: config 8 has no interface number 0 [ 3358.446199][T29756] usb 3-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 3358.493124][T18396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 3358.543039][T29756] usb 3-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 3358.568406][T18396] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3358.610042][T18396] usb 2-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 3358.620331][T18396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3358.631006][T29756] usb 3-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 3358.659556][T18396] usb 2-1: config 0 descriptor?? [ 3358.668839][T29756] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3358.678563][T29756] usb 3-1: Product: syz [ 3358.683170][T29756] usb 3-1: Manufacturer: syz [ 3358.693949][T29756] usb 3-1: SerialNumber: syz [ 3359.001709][ T335] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 3359.008125][ T335] cdc_ncm 5-1:1.0: bind() failure [ 3359.053927][T29756] usb 3-1: USB disconnect, device number 67 [ 3359.089950][T18396] samsung 0003:0419:0001.006B: hidraw0: USB HID v0.00 Device [HID 0419:0001] on usb-dummy_hcd.1-1/input0 [ 3359.294700][T29756] usb 2-1: USB disconnect, device number 42 [ 3359.612725][ T4518] netlink: 96 bytes leftover after parsing attributes in process `syz.3.9841'. [ 3359.693858][ T4520] device pim6reg1 entered promiscuous mode [ 3360.799493][T18396] usb 5-1: USB disconnect, device number 44 [ 3360.889156][ T4533] device pim6reg1 entered promiscuous mode [ 3361.244325][T32002] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 3361.695428][ T4560] hub 8-0:1.0: USB hub found [ 3361.700652][ T4560] hub 8-0:1.0: 1 port detected [ 3361.744303][T32002] usb 4-1: Using ep0 maxpacket: 16 [ 3361.780614][T32002] usb 4-1: config 0 interface 0 has no altsetting 0 [ 3361.854923][T32002] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3361.937709][T32002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3362.076022][T32002] usb 4-1: config 0 descriptor?? [ 3362.535054][ T4565] fuse: Invalid rootmode [ 3362.748400][ T4569] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9861'. [ 3363.198321][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.233068][ T4571] bridge0: port 1(bridge_slave_0) entered disabled state [ 3363.273866][ T4571] device bridge_slave_0 entered promiscuous mode [ 3363.312097][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.347839][ T4571] bridge0: port 2(bridge_slave_1) entered disabled state [ 3363.388331][ T4571] device bridge_slave_1 entered promiscuous mode [ 3363.561994][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.569590][ T4575] bridge0: port 1(bridge_slave_0) entered disabled state [ 3363.577326][ T4575] device bridge_slave_0 entered promiscuous mode [ 3363.588400][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.595585][ T4575] bridge0: port 2(bridge_slave_1) entered disabled state [ 3363.603071][ T4575] device bridge_slave_1 entered promiscuous mode [ 3363.620754][T32002] usb 4-1: USB disconnect, device number 58 [ 3363.646042][ T4571] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.653305][ T4571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3363.660693][ T4571] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.667770][ T4571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3363.725759][ T4575] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.732878][ T4575] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3363.740221][ T4575] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.747459][ T4575] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3363.771686][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3363.779340][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3363.788611][ T669] bridge0: port 2(bridge_slave_1) entered disabled state [ 3363.796232][ T669] bridge0: port 1(bridge_slave_0) entered disabled state [ 3363.803564][ T669] bridge0: port 2(bridge_slave_1) entered disabled state [ 3363.820934][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3363.829374][ T669] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.836938][ T669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3363.844853][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3363.867973][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3363.877796][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3363.886018][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3363.894848][ T669] bridge0: port 1(bridge_slave_0) entered blocking state [ 3363.902072][ T669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3363.909860][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3363.918435][ T669] bridge0: port 2(bridge_slave_1) entered blocking state [ 3363.925503][ T669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3363.986736][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3363.995255][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3364.013249][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3364.022529][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3364.030969][T32002] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3364.039857][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3364.048594][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3364.086214][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3364.094898][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3364.103256][ T4571] device veth0_vlan entered promiscuous mode [ 3364.121558][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3364.130061][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3364.150504][ T4575] device veth0_vlan entered promiscuous mode [ 3364.159028][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3364.167757][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3364.177253][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3364.185781][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3364.203176][ T4571] device veth1_macvtap entered promiscuous mode [ 3364.209986][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3364.218024][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3364.226859][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3364.236154][T32002] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3364.247177][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3364.255416][T32002] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3364.264909][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3364.272695][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3364.281815][T32002] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3364.291154][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3364.299197][T32002] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3364.307548][T32002] usb 4-1: SerialNumber: syz [ 3364.308841][ T4575] device veth1_macvtap entered promiscuous mode [ 3364.330521][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3364.338567][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3364.347731][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3364.373507][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3364.396271][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3364.405203][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3364.414864][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3364.423812][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3364.433574][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3364.542754][ T4611] device syzkaller0 entered promiscuous mode [ 3364.566099][T32002] usb 4-1: 0:2 : does not exist [ 3364.591124][T32002] usb 4-1: USB disconnect, device number 59 [ 3364.738582][ T10] device bridge_slave_1 left promiscuous mode [ 3364.745938][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 3364.755470][ T10] device bridge_slave_0 left promiscuous mode [ 3364.762409][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 3366.773912][ T4629] hub 8-0:1.0: USB hub found [ 3366.778733][ T4629] hub 8-0:1.0: 1 port detected [ 3366.785973][ T10] device bridge_slave_1 left promiscuous mode [ 3366.792207][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 3366.829590][ T10] device bridge_slave_0 left promiscuous mode [ 3366.849712][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 3366.867565][ T10] device veth1_macvtap left promiscuous mode [ 3366.882320][ T10] device veth0_vlan left promiscuous mode [ 3366.889805][ T10] device veth1_macvtap left promiscuous mode [ 3366.896455][ T10] device veth0_vlan left promiscuous mode [ 3367.140008][ T4626] netlink: 96 bytes leftover after parsing attributes in process `syz.4.9874'. [ 3367.208086][ T4651] device syzkaller0 entered promiscuous mode [ 3367.507968][ T4666] hub 8-0:1.0: USB hub found [ 3367.513035][ T4666] hub 8-0:1.0: 1 port detected [ 3368.924397][ T4688] device pim6reg1 entered promiscuous mode [ 3368.982579][ T4704] device pim6reg1 entered promiscuous mode [ 3368.989314][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 3368.996790][ T4694] bridge0: port 1(bridge_slave_0) entered disabled state [ 3369.005254][ T4694] device bridge_slave_0 entered promiscuous mode [ 3369.014974][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 3369.022135][ T4694] bridge0: port 2(bridge_slave_1) entered disabled state [ 3369.030057][ T4694] device bridge_slave_1 entered promiscuous mode [ 3369.067516][ T4708] device pim6reg1 entered promiscuous mode [ 3369.109868][ T4694] bridge0: port 2(bridge_slave_1) entered blocking state [ 3369.116984][ T4694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3369.124397][ T4694] bridge0: port 1(bridge_slave_0) entered blocking state [ 3369.131627][ T4694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3369.151670][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3369.159496][ T669] bridge0: port 1(bridge_slave_0) entered disabled state [ 3369.167735][ T669] bridge0: port 2(bridge_slave_1) entered disabled state [ 3369.182838][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3369.191513][ T669] bridge0: port 1(bridge_slave_0) entered blocking state [ 3369.198597][ T669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3369.206198][T28066] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 3369.275257][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3369.283578][ T669] bridge0: port 2(bridge_slave_1) entered blocking state [ 3369.290704][ T669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3369.303415][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3369.322948][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3369.334348][T17396] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 3369.372910][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3369.386539][ T4694] device veth0_vlan entered promiscuous mode [ 3369.394244][T28066] usb 5-1: Using ep0 maxpacket: 16 [ 3369.402775][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3369.411380][T28066] usb 5-1: config 0 interface 0 has no altsetting 0 [ 3369.426108][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3369.433388][T28066] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3369.451438][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3369.460113][T28066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3369.477992][ T4694] device veth1_macvtap entered promiscuous mode [ 3369.487826][T28066] usb 5-1: config 0 descriptor?? [ 3369.493538][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3369.511052][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3369.532205][ T669] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3369.545283][T17396] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3369.561586][T17396] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3369.645154][T17396] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3369.669372][T17396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3369.677537][T17396] usb 2-1: SerialNumber: syz [ 3369.752725][ T4733] netlink: 96 bytes leftover after parsing attributes in process `syz.5.9893'. [ 3369.913842][T17396] usb 2-1: invalid UAC_HEADER (v1) [ 3369.932742][ T10] device bridge_slave_1 left promiscuous mode [ 3369.970144][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 3369.979409][T17396] snd-usb-audio: probe of 2-1:1.0 failed with error -22 [ 3370.072111][T17396] usb 2-1: USB disconnect, device number 43 [ 3370.198899][ T10] device bridge_slave_0 left promiscuous mode [ 3370.215808][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 3370.323458][ T10] device veth1_macvtap left promiscuous mode [ 3370.379214][ T10] device veth0_vlan left promiscuous mode [ 3370.458239][ T2355] udevd[2355]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3370.553855][T28066] hid (null): unknown global tag 0xe [ 3370.764282][T32002] usb 5-1: USB disconnect, device number 45 [ 3372.074312][ T1528] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 3372.314249][ T1528] usb 2-1: Using ep0 maxpacket: 32 [ 3372.340471][ T1528] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3372.369177][ T1528] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3372.409849][ T4800] device syzkaller0 entered promiscuous mode [ 3372.447303][ T1528] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3372.456760][ T1528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3372.468308][ T1528] usb 2-1: config 0 descriptor?? [ 3372.474936][ T1528] hub 2-1:0.0: bad descriptor, ignoring hub [ 3372.480947][ T1528] hub: probe of 2-1:0.0 failed with error -5 [ 3372.487404][ T1528] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3372.951777][ T4833] device syzkaller0 entered promiscuous mode [ 3373.114290][T13363] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 3373.304380][T13363] usb 3-1: Using ep0 maxpacket: 16 [ 3373.311148][T13363] usb 3-1: config 0 interface 0 has no altsetting 0 [ 3373.317917][T13363] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 3373.327120][T13363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3374.054514][T18396] usb 2-1: USB disconnect, device number 44 [ 3374.250711][T13363] usb 3-1: config 0 descriptor?? [ 3374.295187][ T4863] device pim6reg1 entered promiscuous mode [ 3374.661961][T13363] hid (null): unknown global tag 0xe [ 3374.668493][T13363] hid (null): global environment stack underflow [ 3374.694267][T18396] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 3374.895748][T18396] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3374.951521][T18396] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3375.000796][T32002] usb 3-1: USB disconnect, device number 68 [ 3375.008649][T18396] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3375.053407][T18396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3375.078434][T18396] usb 2-1: SerialNumber: syz [ 3375.321952][T18396] usb 2-1: 0:2 : does not exist [ 3375.381701][T18396] usb 2-1: USB disconnect, device number 45 [ 3375.995658][ T4902] device pim6reg1 entered promiscuous mode [ 3376.965200][ T4944] device pim6reg1 entered promiscuous mode [ 3377.399580][T13363] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 3377.994526][T18396] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 3378.186239][T18396] usb 2-1: device descriptor read/64, error -71 [ 3378.454435][T18396] usb 2-1: device descriptor read/64, error -71 [ 3378.655450][T13363] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3378.666771][T13363] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3378.676535][T13363] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3378.685644][T13363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3378.707403][T13363] usb 3-1: SerialNumber: syz [ 3378.734307][T18396] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 3378.889574][T18396] usb 2-1: device descriptor read/64, error -71 [ 3379.204369][T18396] usb 2-1: device descriptor read/64, error -71 [ 3379.274515][ T2191] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3379.324469][T18396] usb usb2-port1: attempt power cycle [ 3379.464510][ T2191] usb 4-1: Using ep0 maxpacket: 32 [ 3379.472040][ T2191] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 3379.481486][ T2191] usb 4-1: config 0 has no interface number 0 [ 3379.509373][ T2191] usb 4-1: config 0 interface 67 altsetting 0 has a duplicate endpoint with address 0x82, skipping [ 3379.626079][T13363] usb 3-1: invalid UAC_HEADER (v1) [ 3379.633656][T13363] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 3379.641840][T13363] usb 3-1: USB disconnect, device number 69 [ 3379.656413][ T2355] udevd[2355]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3379.664478][ T2191] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3379.682245][ T2191] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3379.690624][ T2191] usb 4-1: Product: syz [ 3379.694286][ T335] usb 6-1: new high-speed USB device number 127 using dummy_hcd [ 3379.695032][ T2191] usb 4-1: Manufacturer: syz [ 3379.707366][ T2191] usb 4-1: SerialNumber: syz [ 3379.712531][ T2191] usb 4-1: config 0 descriptor?? [ 3379.718272][ T2191] smsc95xx v2.0.0 [ 3379.722006][ T2191] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 3379.732381][ T2191] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 3379.764248][T18396] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 3379.795789][T18396] usb 2-1: device descriptor read/8, error -71 [ 3379.876125][ T335] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3379.886648][ T335] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3379.896894][ T335] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3379.906101][ T335] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3379.914164][ T335] usb 6-1: SerialNumber: syz [ 3379.955315][T18396] usb 2-1: device descriptor read/8, error -71 [ 3380.126780][ T335] usb 6-1: invalid UAC_HEADER (v1) [ 3380.134074][ T335] snd-usb-audio: probe of 6-1:1.0 failed with error -22 [ 3380.145041][ T335] usb 6-1: USB disconnect, device number 127 [ 3380.156827][ T2355] udevd[2355]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3380.224277][T18396] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 3380.255819][T18396] usb 2-1: device descriptor read/8, error -71 [ 3380.445426][T18396] usb 2-1: device descriptor read/8, error -71 [ 3380.594473][T18396] usb usb2-port1: unable to enumerate USB device [ 3381.304298][T18396] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 3381.505260][T18396] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3381.515477][T18396] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3381.528505][T18396] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3381.537914][T18396] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3381.538496][ T5029] bridge0: port 1(bridge_slave_0) entered blocking state [ 3381.550151][T18396] usb 2-1: SerialNumber: syz [ 3381.554087][ T5029] bridge0: port 1(bridge_slave_0) entered disabled state [ 3381.567886][ T5029] device bridge_slave_0 entered promiscuous mode [ 3381.580527][ T5029] bridge0: port 2(bridge_slave_1) entered blocking state [ 3381.588911][ T5029] bridge0: port 2(bridge_slave_1) entered disabled state [ 3381.599740][ T5029] device bridge_slave_1 entered promiscuous mode [ 3381.620141][ T5038] hub 8-0:1.0: USB hub found [ 3381.625348][ T5038] hub 8-0:1.0: 1 port detected [ 3381.896567][T18396] usb 2-1: 0:2 : does not exist [ 3381.976739][T18396] usb 2-1: USB disconnect, device number 50 [ 3382.104420][ T2191] usb 4-1: USB disconnect, device number 60 [ 3382.651140][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3382.659059][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3382.676290][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3382.687418][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3382.696729][T25154] bridge0: port 1(bridge_slave_0) entered blocking state [ 3382.703801][T25154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3382.711755][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3382.720453][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3382.728937][T25154] bridge0: port 2(bridge_slave_1) entered blocking state [ 3382.736109][T25154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3382.746148][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 3382.758657][ T669] device bridge_slave_1 left promiscuous mode [ 3382.765141][ T669] bridge0: port 2(bridge_slave_1) entered disabled state [ 3382.772933][ T669] device bridge_slave_0 left promiscuous mode [ 3382.779625][ T669] bridge0: port 1(bridge_slave_0) entered disabled state [ 3382.788114][ T669] device veth1_macvtap left promiscuous mode [ 3382.795286][ T669] device veth0_vlan left promiscuous mode [ 3382.859941][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3382.868103][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3382.879072][ T5079] device pim6reg1 entered promiscuous mode [ 3382.901334][T25154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3382.932350][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3382.940678][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3382.948523][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3382.958522][ T5029] device veth0_vlan entered promiscuous mode [ 3382.964348][T28066] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 3382.986369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3383.000789][ T5029] device veth1_macvtap entered promiscuous mode [ 3383.012179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3383.025402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3383.075549][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3383.086860][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3383.183490][ T5107] netlink: 96 bytes leftover after parsing attributes in process `syz.3.10052'. [ 3383.374428][T13363] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 3383.474354][T17262] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 3383.546194][T13363] usb 6-1: device descriptor read/64, error -71 [ 3383.694324][T17262] usb 2-1: Using ep0 maxpacket: 32 [ 3383.701684][T17262] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3383.713397][T17262] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3383.726335][T17262] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 3383.738652][T17262] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3383.749245][T17262] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3383.758308][T17262] usb 2-1: Product: syz [ 3383.763006][T17262] usb 2-1: Manufacturer: syz [ 3383.768491][T17262] usb 2-1: SerialNumber: syz [ 3383.828166][T28066] usb 5-1: config 1 has an invalid interface number: 5 but max is 2 [ 3383.828330][T13363] usb 6-1: device descriptor read/64, error -71 [ 3383.836357][T28066] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3383.848125][T17262] usb 2-1: selecting invalid altsetting 1 [ 3383.853955][T28066] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3383.868675][T28066] usb 5-1: config 1 has no interface number 1 [ 3383.875239][T28066] usb 5-1: config 1 interface 5 has no altsetting 0 [ 3383.890123][T28066] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3383.899468][T28066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3383.912218][T28066] usb 5-1: SerialNumber: syz [ 3383.930162][ T5113] device pim6reg1 entered promiscuous mode [ 3383.947650][ T5117] device pim6reg1 entered promiscuous mode [ 3384.114283][T13363] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 3384.123430][T28066] usb 5-1: 0:2 : does not exist [ 3384.132160][T28066] usb 5-1: USB disconnect, device number 46 [ 3384.248939][T17262] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS [ 3384.255111][T17262] cdc_ncm 2-1:1.0: bind() failure [ 3384.261319][T17262] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 3384.268274][T13363] usb 6-1: device descriptor read/64, error -71 [ 3384.274750][ T1528] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3384.282368][T17262] cdc_ncm 2-1:1.1: bind() failure [ 3384.354612][ T2355] udevd[2355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3384.475351][ T1528] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3384.485619][ T1528] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3384.495252][ T1528] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3384.504428][ T1528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3384.512435][ T1528] usb 3-1: SerialNumber: syz [ 3384.554321][T13363] usb 6-1: device descriptor read/64, error -71 [ 3384.675475][T13363] usb usb6-port1: attempt power cycle [ 3384.722492][ T1528] usb 3-1: 0:2 : does not exist [ 3384.734673][ T5132] device pim6reg1 entered promiscuous mode [ 3384.739171][ T1528] usb 3-1: USB disconnect, device number 70 [ 3385.124316][T13363] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 3385.175822][T13363] usb 6-1: device descriptor read/8, error -71 [ 3385.325702][T13363] usb 6-1: device descriptor read/8, error -71 [ 3385.786329][T13363] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 3385.825360][T13363] usb 6-1: device descriptor read/8, error -71 [ 3385.868814][ T5139] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10068'. [ 3385.880173][ T5145] device pim6reg1 entered promiscuous mode [ 3385.918704][ T5153] device pim6reg1 entered promiscuous mode [ 3385.998003][T13363] usb 6-1: device descriptor read/8, error -71 [ 3386.124319][T13363] usb usb6-port1: unable to enumerate USB device [ 3386.169666][ T5176] device wg2 entered promiscuous mode [ 3386.200610][T28066] usb 2-1: USB disconnect, device number 51 [ 3386.238916][ T5184] device pim6reg1 entered promiscuous mode [ 3386.304797][ T5189] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10083'. [ 3386.957244][ T5193] device pim6reg1 entered promiscuous mode [ 3387.614648][ T5213] device wg2 entered promiscuous mode [ 3387.824332][ T2191] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 3387.879680][ T5232] device pim6reg1 entered promiscuous mode [ 3388.004361][ T2191] usb 6-1: Using ep0 maxpacket: 32 [ 3388.013319][ T2191] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 3388.026665][ T2191] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3388.035967][ T2191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3388.047159][ T2191] usb 6-1: config 0 descriptor?? [ 3388.053704][ T2191] hub 6-1:0.0: bad descriptor, ignoring hub [ 3388.059880][ T2191] hub: probe of 6-1:0.0 failed with error -5 [ 3388.066302][ T2191] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3388.204285][ T5260] device pim6reg1 entered promiscuous mode [ 3388.405479][ T1528] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 3388.604249][ T1528] usb 5-1: Using ep0 maxpacket: 32 [ 3388.610803][ T1528] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3388.634265][ T1528] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3388.654256][ T1528] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 3388.686615][ T1528] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 3388.704212][ T1528] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3388.712309][ T1528] usb 5-1: Product: syz [ 3388.725450][ T1528] usb 5-1: Manufacturer: syz [ 3388.730088][ T1528] usb 5-1: SerialNumber: syz [ 3388.772599][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 3388.779991][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state [ 3388.787522][ T5288] device bridge_slave_0 entered promiscuous mode [ 3388.794756][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 3388.801847][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state [ 3388.809442][ T5288] device bridge_slave_1 entered promiscuous mode [ 3388.857927][ T5288] bridge0: port 2(bridge_slave_1) entered blocking state [ 3388.865291][ T5288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3388.872664][ T5288] bridge0: port 1(bridge_slave_0) entered blocking state [ 3388.879837][ T5288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3388.900808][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3388.908730][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 3388.916651][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 3388.929922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3388.938598][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 3388.945814][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3388.953216][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3388.961820][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 3388.969002][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3388.979602][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3388.988502][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3388.998565][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3389.007035][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3389.021659][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3389.030197][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3389.042163][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3389.050254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3389.061941][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3389.069803][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3389.077808][ T5288] device veth0_vlan entered promiscuous mode [ 3389.089015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3389.097360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3389.108161][ T5288] device veth1_macvtap entered promiscuous mode [ 3389.119809][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3389.127733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3389.136231][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3389.148422][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3389.157664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3389.203432][ T5302] device wg2 entered promiscuous mode [ 3389.209874][ T5304] Driver unsupported XDP return value 0 on prog (id 4624) dev N/A, expect packet loss! [ 3389.263318][ T5314] device pim6reg1 entered promiscuous mode [ 3389.310399][ T5317] loop1: detected capacity change from 0 to 512 [ 3389.318921][ T5317] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3389.334788][ T5317] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3389.342050][ T5317] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10137: bg 0: block 248: padding at end of block bitmap is not set [ 3389.358706][ T5317] Quota error (device loop1): write_blk: dquota write failed [ 3389.366354][ T5317] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3389.376557][ T5317] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.10137: Failed to acquire dquot type 1 [ 3389.391084][ T5317] EXT4-fs (loop1): 1 truncate cleaned up [ 3389.397169][ T5317] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3389.598774][ T5349] device pim6reg1 entered promiscuous mode [ 3389.669209][ T5352] device pim6reg1 entered promiscuous mode [ 3389.694908][ T669] device bridge_slave_1 left promiscuous mode [ 3389.701703][ T669] bridge0: port 2(bridge_slave_1) entered disabled state [ 3389.709419][ T669] device bridge_slave_0 left promiscuous mode [ 3389.716212][ T669] bridge0: port 1(bridge_slave_0) entered disabled state [ 3389.724842][ T669] device veth1_macvtap left promiscuous mode [ 3389.731022][ T669] device veth0_vlan left promiscuous mode [ 3389.780218][ T1528] cdc_ncm 5-1:1.0: bind() failure [ 3389.804502][ T1528] usb 5-1: USB disconnect, device number 47 [ 3390.099679][ T4571] EXT4-fs (loop1): unmounting filesystem. [ 3390.535113][ T5428] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10184'. [ 3392.075588][ T5434] device pim6reg1 entered promiscuous mode [ 3392.164328][T18396] usb 6-1: USB disconnect, device number 6 [ 3392.409248][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 3392.416481][ T5446] bridge0: port 1(bridge_slave_0) entered disabled state [ 3392.424552][ T5446] device bridge_slave_0 entered promiscuous mode [ 3392.431714][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 3392.439284][ T5446] bridge0: port 2(bridge_slave_1) entered disabled state [ 3392.452495][ T5446] device bridge_slave_1 entered promiscuous mode [ 3392.524247][T32002] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 3392.532510][T18396] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 3392.559276][ T5446] bridge0: port 2(bridge_slave_1) entered blocking state [ 3392.566515][ T5446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3392.573889][ T5446] bridge0: port 1(bridge_slave_0) entered blocking state [ 3392.580970][ T5446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3392.605873][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3392.613742][T29779] bridge0: port 1(bridge_slave_0) entered disabled state [ 3392.622063][T29779] bridge0: port 2(bridge_slave_1) entered disabled state [ 3392.642280][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3392.650891][T29779] bridge0: port 1(bridge_slave_0) entered blocking state [ 3392.658077][T29779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3392.665750][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3392.674134][T29779] bridge0: port 2(bridge_slave_1) entered blocking state [ 3392.681308][T29779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3392.689303][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3392.708043][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3392.722156][ T5446] device veth0_vlan entered promiscuous mode [ 3392.728489][T18396] usb 6-1: Using ep0 maxpacket: 32 [ 3392.734028][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3392.742813][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3392.742833][T32002] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 3392.751579][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3392.764912][T32002] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 3392.769345][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3392.777775][T32002] usb 2-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 3392.796472][T18396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3392.799338][ T5446] device veth1_macvtap entered promiscuous mode [ 3392.813242][T18396] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3392.813245][T17262] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 3392.813268][T18396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3392.838007][T32002] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 3392.851866][T32002] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3392.852041][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3392.864588][T18396] usb 6-1: config 0 descriptor?? [ 3392.874381][T32002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3392.877968][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3392.882761][T32002] usb 2-1: SerialNumber: syz [ 3392.891939][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3392.896272][T18396] hub 6-1:0.0: bad descriptor, ignoring hub [ 3392.910813][T18396] hub: probe of 6-1:0.0 failed with error -5 [ 3392.917520][T18396] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 3392.994313][T17262] usb 5-1: Using ep0 maxpacket: 32 [ 3393.000968][T17262] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 3393.009488][T17262] usb 5-1: config 0 has no interface number 0 [ 3393.017725][T17262] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3393.027276][T17262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3393.035587][T17262] usb 5-1: Product: syz [ 3393.040022][T17262] usb 5-1: Manufacturer: syz [ 3393.044888][T17262] usb 5-1: SerialNumber: syz [ 3393.054044][T17262] usb 5-1: config 0 descriptor?? [ 3393.061525][T17262] smsc95xx v2.0.0 [ 3393.120282][T32002] usb 2-1: 0:2 : does not exist [ 3393.125513][T32002] usb 2-1: unit 5 not found! [ 3393.157048][T32002] usb 2-1: USB disconnect, device number 52 [ 3393.432647][ T5512] device wg2 entered promiscuous mode [ 3393.458360][ T5514] device wg2 left promiscuous mode [ 3393.461835][T17262] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3393.474425][T17262] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3393.476444][ T5514] device wg2 entered promiscuous mode [ 3393.524872][T25154] device bridge_slave_1 left promiscuous mode [ 3393.531396][T25154] bridge0: port 2(bridge_slave_1) entered disabled state [ 3393.539461][T25154] device bridge_slave_0 left promiscuous mode [ 3393.546618][T25154] bridge0: port 1(bridge_slave_0) entered disabled state [ 3393.557466][T25154] device veth1_macvtap left promiscuous mode [ 3393.563622][T25154] device veth0_vlan left promiscuous mode [ 3393.689349][T17262] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 3393.712744][T17262] smsc95xx: probe of 5-1:0.67 failed with error -32 [ 3394.849955][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 3394.857385][ T5558] bridge0: port 1(bridge_slave_0) entered disabled state [ 3394.865143][ T5558] device bridge_slave_0 entered promiscuous mode [ 3394.873444][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 3394.880808][ T5558] bridge0: port 2(bridge_slave_1) entered disabled state [ 3394.888971][ T5558] device bridge_slave_1 entered promiscuous mode [ 3394.959064][ T5558] bridge0: port 2(bridge_slave_1) entered blocking state [ 3394.966193][ T5558] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3394.973634][ T5558] bridge0: port 1(bridge_slave_0) entered blocking state [ 3394.980807][ T5558] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3394.990931][T29779] bridge0: port 1(bridge_slave_0) entered disabled state [ 3394.999818][T29779] bridge0: port 2(bridge_slave_1) entered disabled state [ 3395.028083][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 3395.036654][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3395.056706][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 3395.066216][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3395.074294][T17262] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3395.074753][T29779] bridge0: port 1(bridge_slave_0) entered blocking state [ 3395.089058][T29779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3395.098866][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 3395.107365][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3395.115661][T29779] bridge0: port 2(bridge_slave_1) entered blocking state [ 3395.122728][T29779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3395.130419][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 3395.139116][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3395.147362][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 3395.155811][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3395.176531][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 3395.185470][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3395.196012][ T5558] device veth0_vlan entered promiscuous mode [ 3395.203861][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 3395.213251][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3395.229344][ T5558] device veth1_macvtap entered promiscuous mode [ 3395.237743][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3395.245549][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3395.254556][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3395.264410][T17262] usb 3-1: Using ep0 maxpacket: 32 [ 3395.270155][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3395.270788][T17262] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 3395.278900][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3395.304307][T17262] usb 3-1: config 0 has no interface number 0 [ 3395.310682][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3395.321377][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3395.329946][ T1528] usb 6-1: USB disconnect, device number 7 [ 3395.336429][T17262] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3395.347536][T17262] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3395.359140][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3395.367455][T17262] usb 3-1: Product: syz [ 3395.372217][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3395.380662][T17262] usb 3-1: Manufacturer: syz [ 3395.387085][T17262] usb 3-1: SerialNumber: syz [ 3395.395919][T17262] usb 3-1: config 0 descriptor?? [ 3395.403737][T17262] smsc95xx v2.0.0 [ 3395.428305][ T5574] device pim6reg1 entered promiscuous mode [ 3395.540866][T17396] usb 5-1: USB disconnect, device number 48 [ 3395.557849][ T5584] device pim6reg1 entered promiscuous mode [ 3395.602603][ T5594] device wg2 entered promiscuous mode [ 3395.724345][T18396] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 3395.751527][ T5611] device pim6reg1 entered promiscuous mode [ 3395.805805][T17262] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3395.820207][T17262] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3395.899582][ T5627] device pim6reg1 entered promiscuous mode [ 3395.918264][T18396] usb 6-1: config 1 has an invalid interface number: 5 but max is 2 [ 3395.926460][T18396] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 3395.936845][T18396] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 3395.946021][T18396] usb 6-1: config 1 has no interface number 1 [ 3395.952142][T18396] usb 6-1: config 1 interface 5 has no altsetting 0 [ 3395.959946][T18396] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 3395.969784][T18396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 3395.978310][T18396] usb 6-1: SerialNumber: syz [ 3396.066077][T25154] device bridge_slave_1 left promiscuous mode [ 3396.072386][T25154] bridge0: port 2(bridge_slave_1) entered disabled state [ 3396.080019][T25154] device bridge_slave_0 left promiscuous mode [ 3396.086475][T25154] bridge0: port 1(bridge_slave_0) entered disabled state [ 3396.094609][T25154] device veth1_macvtap left promiscuous mode [ 3396.100790][T25154] device veth0_vlan left promiscuous mode [ 3396.184410][T13363] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3396.186435][T18396] usb 6-1: 0:2 : does not exist [ 3396.205704][T18396] usb 6-1: USB disconnect, device number 8 [ 3396.220476][ T1813] udevd[1813]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 3396.236587][T17262] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 3396.248744][T17262] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 3396.257446][T17262] usb 3-1: USB disconnect, device number 71 [ 3396.364293][T13363] usb 4-1: Using ep0 maxpacket: 32 [ 3396.370617][T13363] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 3396.378916][T13363] usb 4-1: config 0 has no interface number 0 [ 3396.386876][T13363] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3396.396397][T13363] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3396.404805][T13363] usb 4-1: Product: syz [ 3396.409059][T13363] usb 4-1: Manufacturer: syz [ 3396.413650][T13363] usb 4-1: SerialNumber: syz [ 3396.419322][T13363] usb 4-1: config 0 descriptor?? [ 3396.426420][T13363] smsc95xx v2.0.0 [ 3396.684646][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 3396.691898][ T5643] bridge0: port 1(bridge_slave_0) entered disabled state [ 3396.699638][ T5643] device bridge_slave_0 entered promiscuous mode [ 3396.707252][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 3396.714579][ T5643] bridge0: port 2(bridge_slave_1) entered disabled state [ 3396.722079][ T5643] device bridge_slave_1 entered promiscuous mode [ 3396.786316][ T5643] bridge0: port 2(bridge_slave_1) entered blocking state [ 3396.793445][ T5643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3396.800853][ T5643] bridge0: port 1(bridge_slave_0) entered blocking state [ 3396.807985][ T5643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3396.828032][T13363] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 3396.832652][T28830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 3396.840069][T13363] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 3396.855488][T28830] bridge0: port 1(bridge_slave_0) entered disabled state [ 3396.863019][T28830] bridge0: port 2(bridge_slave_1) entered disabled state [ 3396.878536][T28830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 3396.887315][T28830] bridge0: port 1(bridge_slave_0) entered blocking state [ 3396.894697][T28830] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3396.913200][T28830] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 3396.921749][T28830] bridge0: port 2(bridge_slave_1) entered blocking state [ 3396.928852][T28830] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3396.940074][T28830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 3396.948800][T28830] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 3396.965826][T28830] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 3396.985715][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 3396.996618][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 3397.004979][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 3397.013947][ T5643] device veth0_vlan entered promiscuous mode [ 3397.024286][T17262] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3397.026943][ T5670] device pim6reg1 entered promiscuous mode [ 3397.043296][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 3397.051735][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 3397.061853][ T5643] device veth1_macvtap entered promiscuous mode [ 3397.072378][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 3397.080363][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 3397.088996][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 3397.101454][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 3397.110434][T29779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 3397.259564][T17262] usb 3-1: Using ep0 maxpacket: 32 [ 3397.265032][T13363] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 3397.276430][T13363] smsc95xx: probe of 4-1:0.67 failed with error -71 [ 3397.284950][T13363] usb 4-1: USB disconnect, device number 61 [ 3397.291389][T17262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3397.302919][T17262] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3397.313350][T17262] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3397.322479][T17262] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3397.338969][T17262] usb 3-1: config 0 descriptor?? [ 3397.389032][ T5689] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10278'. [ 3397.465341][T17262] hub 3-1:0.0: USB hub found [ 3397.628529][T17262] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 3397.865189][T17262] usbhid 3-1:0.0: can't add hid device: -71 [ 3397.886643][T17262] usbhid: probe of 3-1:0.0 failed with error -71 [ 3397.965121][T17262] usb 3-1: USB disconnect, device number 72 [ 3398.225086][T25154] device bridge_slave_1 left promiscuous mode [ 3398.231376][T25154] bridge0: port 2(bridge_slave_1) entered disabled state [ 3398.239305][T25154] device bridge_slave_0 left promiscuous mode [ 3398.245693][T25154] bridge0: port 1(bridge_slave_0) entered disabled state [ 3398.254956][T25154] device veth1_macvtap left promiscuous mode [ 3398.264473][T25154] device veth0_vlan left promiscuous mode [ 3398.289139][ T28] audit: type=1400 audit(1755688841.918:841): avc: denied { read } for pid=5713 comm="syz.4.10293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 3398.382314][ T5716] device pim6reg1 entered promiscuous mode [ 3398.760382][ T5744] device wg2 left promiscuous mode [ 3398.767955][ T5744] device wg2 entered promiscuous mode [ 3398.824508][ T2191] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 3398.953013][ T5760] device pim6reg1 entered promiscuous mode [ 3399.004258][ T2191] usb 6-1: Using ep0 maxpacket: 32 [ 3399.010683][ T2191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3399.021699][ T2191] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3399.031571][ T2191] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3399.040909][ T2191] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3399.049556][ T2191] usb 6-1: config 0 descriptor?? [ 3399.055905][ T2191] hub 6-1:0.0: USB hub found [ 3399.257477][ T2191] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 3399.467243][ T2191] usbhid 6-1:0.0: can't add hid device: -71 [ 3399.473491][ T2191] usbhid: probe of 6-1:0.0 failed with error -71 [ 3399.515098][ T2191] usb 6-1: USB disconnect, device number 9 [ 3399.562002][ T5803] loop1: detected capacity change from 0 to 512 [ 3399.571912][ T5803] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3399.584298][T28066] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 3399.703589][ T5803] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3399.713518][ T5803] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10327: bg 0: block 248: padding at end of block bitmap is not set [ 3399.729918][ T5803] Quota error (device loop1): write_blk: dquota write failed [ 3399.737488][ T5803] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3399.747633][ T5803] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.10327: Failed to acquire dquot type 1 [ 3399.762408][ T5803] EXT4-fs (loop1): 1 truncate cleaned up [ 3399.769107][ T5803] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3399.847335][T28066] usb 5-1: config 0 has an invalid interface number: 214 but max is 0 [ 3399.865199][T28066] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3399.883312][T28066] usb 5-1: config 0 has no interface number 0 [ 3399.890894][T28066] usb 5-1: config 0 interface 214 altsetting 2 has an invalid endpoint with address 0x0, skipping [ 3399.903520][T28066] usb 5-1: config 0 interface 214 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3399.918924][T28066] usb 5-1: config 0 interface 214 has no altsetting 0 [ 3399.928915][T28066] usb 5-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 3399.939819][T28066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3399.948526][T28066] usb 5-1: Product: syz [ 3399.953305][T28066] usb 5-1: Manufacturer: syz [ 3399.958988][T28066] usb 5-1: SerialNumber: syz [ 3399.976628][T28066] usb 5-1: config 0 descriptor?? [ 3401.379639][ T5831] netlink: 96 bytes leftover after parsing attributes in process `syz.5.10340'. [ 3401.519331][ T5558] EXT4-fs (loop1): unmounting filesystem. [ 3402.147770][ T5837] device wg2 left promiscuous mode [ 3402.156405][ T5837] device wg2 entered promiscuous mode [ 3402.313434][ T5865] device pim6reg1 entered promiscuous mode [ 3402.465547][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3402.481793][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -71 [ 3402.494834][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 3402.511799][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0006: -71 [ 3402.523124][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0005: -71 [ 3402.534559][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3402.546267][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3402.557642][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3402.569053][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3402.582769][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3402.594337][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3402.606061][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3402.619436][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3402.631383][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3402.642753][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3402.654310][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3402.665800][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 3402.677517][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3402.688825][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3402.699989][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3402.713453][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3402.727309][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 3402.738614][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3402.752659][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3402.763914][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3402.774245][ T1528] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 3402.783074][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3402.794637][T28066] ax88179_178a 5-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3402.807548][T28066] ax88179_178a 5-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 3a:1b:3f:bc:75:72 [ 3402.825504][T28066] usb 5-1: USB disconnect, device number 49 [ 3402.831768][T28066] ax88179_178a 5-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.4-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 3402.955410][ T1528] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 3402.963807][ T1528] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3402.986671][ T5929] device wg2 entered promiscuous mode [ 3402.992472][ T1528] usb 3-1: config 0 has no interface number 0 [ 3403.004275][ T1528] usb 3-1: config 0 interface 214 altsetting 2 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 3403.020263][ T1528] usb 3-1: config 0 interface 214 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 3403.035814][ T1528] usb 3-1: config 0 interface 214 has no altsetting 0 [ 3403.045076][ T1528] usb 3-1: New USB device found, idVendor=07c9, idProduct=000e, bcdDevice=5d.4f [ 3403.054378][ T1528] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3403.062353][ T1528] usb 3-1: Product: syz [ 3403.066561][ T1528] usb 3-1: Manufacturer: syz [ 3403.071169][ T1528] usb 3-1: SerialNumber: syz [ 3403.076351][ T1528] usb 3-1: config 0 descriptor?? [ 3403.081588][ T5893] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 3403.256563][ T5943] loop1: detected capacity change from 0 to 512 [ 3403.405603][ T5943] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3403.467657][ T5943] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3403.476705][ T5943] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10376: bg 0: block 248: padding at end of block bitmap is not set [ 3403.492725][ T5943] Quota error (device loop1): write_blk: dquota write failed [ 3403.500292][ T5943] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3403.510517][ T5943] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.10376: Failed to acquire dquot type 1 [ 3403.524028][ T5943] EXT4-fs (loop1): 1 truncate cleaned up [ 3403.531742][ T5943] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3404.414544][ T5965] device pim6reg1 entered promiscuous mode [ 3404.961452][ T5558] EXT4-fs (loop1): unmounting filesystem. [ 3405.672201][ T5994] netlink: 96 bytes leftover after parsing attributes in process `syz.1.10392'. [ 3405.757051][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -32 [ 3405.788396][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0006: -32 [ 3405.846877][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): invalid MAC address, using random [ 3406.179135][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3406.246985][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3406.383660][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3406.414585][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3406.451829][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3406.484100][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3406.486962][ T6004] device pim6reg1 entered promiscuous mode [ 3406.495732][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0002: -71 [ 3406.515022][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3406.526759][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0001: -71 [ 3406.589547][T17396] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 3407.704788][ T6019] loop1: detected capacity change from 0 to 512 [ 3407.825066][ T6019] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3407.862186][ T6019] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3407.871384][ T6019] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10405: bg 0: block 248: padding at end of block bitmap is not set [ 3407.887778][ T6019] Quota error (device loop1): write_blk: dquota write failed [ 3407.895440][ T6019] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3407.905875][ T6019] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.10405: Failed to acquire dquot type 1 [ 3407.919662][ T6019] EXT4-fs (loop1): 1 truncate cleaned up [ 3407.926295][ T6019] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3408.416093][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0001: -71 [ 3408.812751][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3408.824048][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x0019: -71 [ 3408.835287][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x001f: -71 [ 3408.846724][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3408.858127][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3408.869345][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3408.880655][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x000e: -71 [ 3408.892217][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3408.905182][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3408.947499][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000d: -71 [ 3408.986946][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to write reg index 0x000e: -71 [ 3408.998573][ T1528] ax88179_178a 3-1:0.214 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 3409.014248][T17396] usb 4-1: Using ep0 maxpacket: 32 [ 3409.021176][T17396] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 3409.215988][ T6037] netlink: 96 bytes leftover after parsing attributes in process `syz.4.10414'. [ 3409.237993][ T5558] EXT4-fs (loop1): unmounting filesystem. [ 3409.274794][ T1528] ax88179_178a 3-1:0.214 eth1: register 'ax88179_178a' at usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter, 62:d8:9b:13:4c:33 [ 3409.297832][T17396] usb 4-1: config 0 has no interface number 0 [ 3409.347081][T17396] usb 4-1: string descriptor 0 read error: -71 [ 3409.378975][T17396] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 3409.446933][ T1528] usb 3-1: USB disconnect, device number 73 [ 3409.492972][T17396] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3409.547786][ T1528] ax88179_178a 3-1:0.214 eth1: unregister 'ax88179_178a' usb-dummy_hcd.2-1, AT-UMC2000 USB 3.0/USB 3.1 Gen 1 to Gigabit Ethernet Adapter [ 3409.652620][T17396] usb 4-1: config 0 descriptor?? [ 3409.685069][T17396] usb 4-1: can't set config #0, error -71 [ 3409.825547][T18396] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 3410.334225][T18396] usb 6-1: Using ep0 maxpacket: 32 [ 3410.340903][T18396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3410.391864][T18396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3410.442956][T18396] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 3410.486283][T18396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3411.705700][T18396] usb 6-1: config 0 descriptor?? [ 3411.712060][T17396] usb 4-1: USB disconnect, device number 62 [ 3411.722835][T17262] ================================================================== [ 3411.723708][T18396] hub 6-1:0.0: USB hub found [ 3411.731003][T17262] BUG: KASAN: use-after-free in worker_thread+0x9ff/0x11f0 [ 3411.731057][T17262] Read of size 8 at addr ffff8881323f0ce0 by task kworker/1:4/17262 [ 3411.750849][T17262] [ 3411.753189][T17262] CPU: 1 PID: 17262 Comm: kworker/1:4 Not tainted 6.1.145-syzkaller-00015-g87b9d836c3d8 #0 [ 3411.763254][T17262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 3411.773398][T17262] Workqueue: 0x0 (events) [ 3411.777871][T17262] Call Trace: [ 3411.781157][T17262] [ 3411.784176][T17262] __dump_stack+0x21/0x24 [ 3411.788633][T17262] dump_stack_lvl+0xee/0x150 [ 3411.793354][T17262] ? __cfi_dump_stack_lvl+0x8/0x8 [ 3411.798493][T17262] ? __cfi__printk+0x8/0x8 [ 3411.802986][T17262] ? __schedule+0xb8f/0x14e0 [ 3411.807666][T17262] ? worker_thread+0x9ff/0x11f0 [ 3411.812617][T17262] print_address_description+0x71/0x210 [ 3411.818211][T17262] print_report+0x4a/0x60 [ 3411.822626][T17262] kasan_report+0x122/0x150 [ 3411.827222][T17262] ? worker_thread+0x9ff/0x11f0 [ 3411.832081][T17262] __asan_report_load8_noabort+0x14/0x20 [ 3411.837991][T17262] worker_thread+0x9ff/0x11f0 [ 3411.842671][T17262] kthread+0x281/0x320 [ 3411.846756][T17262] ? __cfi_worker_thread+0x10/0x10 [ 3411.851906][T17262] ? __cfi_kthread+0x10/0x10 [ 3411.856669][T17262] ret_from_fork+0x1f/0x30 [ 3411.861097][T17262] [ 3411.864148][T17262] [ 3411.866472][T17262] Allocated by task 1528: [ 3411.870884][T17262] kasan_set_track+0x4b/0x70 [ 3411.875479][T17262] kasan_save_alloc_info+0x25/0x30 [ 3411.880837][T17262] __kasan_kmalloc+0x95/0xb0 [ 3411.885500][T17262] __kmalloc_node+0xb2/0x1e0 [ 3411.890165][T17262] kvmalloc_node+0x294/0x480 [ 3411.894927][T17262] alloc_netdev_mqs+0x8d/0xf90 [ 3411.900208][T17262] alloc_etherdev_mqs+0x37/0x40 [ 3411.905088][T17262] usbnet_probe+0x20c/0x2780 [ 3411.909746][T17262] usb_probe_interface+0x610/0xaf0 [ 3411.914923][T17262] really_probe+0x2cb/0x960 [ 3411.919668][T17262] __driver_probe_device+0x198/0x280 [ 3411.924956][T17262] driver_probe_device+0x54/0x3e0 [ 3411.929976][T17262] __device_attach_driver+0x2e9/0x4a0 [ 3411.935332][T17262] bus_for_each_drv+0x183/0x210 [ 3411.940175][T17262] __device_attach+0x2a2/0x400 [ 3411.944947][T17262] device_initial_probe+0x1a/0x20 [ 3411.950133][T17262] bus_probe_device+0xc0/0x1f0 [ 3411.954885][T17262] device_add+0xb4d/0xef0 [ 3411.959366][T17262] usb_set_configuration+0x19c2/0x1f10 [ 3411.964816][T17262] usb_generic_driver_probe+0x91/0x150 [ 3411.970305][T17262] usb_probe_device+0x159/0x270 [ 3411.975175][T17262] really_probe+0x2cb/0x960 [ 3411.979681][T17262] __driver_probe_device+0x198/0x280 [ 3411.984961][T17262] driver_probe_device+0x54/0x3e0 [ 3411.989972][T17262] __device_attach_driver+0x2e9/0x4a0 [ 3411.995345][T17262] bus_for_each_drv+0x183/0x210 [ 3412.000399][T17262] __device_attach+0x2a2/0x400 [ 3412.005253][T17262] device_initial_probe+0x1a/0x20 [ 3412.010305][T17262] bus_probe_device+0xc0/0x1f0 [ 3412.015074][T17262] device_add+0xb4d/0xef0 [ 3412.019418][T17262] usb_new_device+0xa70/0x1520 [ 3412.024238][T17262] hub_event+0x2a5d/0x4680 [ 3412.028655][T17262] process_one_work+0x71f/0xc40 [ 3412.033580][T17262] worker_thread+0xa29/0x11f0 [ 3412.038414][T17262] kthread+0x281/0x320 [ 3412.042489][T17262] ret_from_fork+0x1f/0x30 [ 3412.047016][T17262] [ 3412.049335][T17262] Freed by task 1528: [ 3412.053312][T17262] kasan_set_track+0x4b/0x70 [ 3412.057898][T17262] kasan_save_free_info+0x31/0x50 [ 3412.062999][T17262] ____kasan_slab_free+0x132/0x180 [ 3412.068138][T17262] __kasan_slab_free+0x11/0x20 [ 3412.073069][T17262] slab_free_freelist_hook+0xc2/0x190 [ 3412.078548][T17262] __kmem_cache_free+0xb7/0x1b0 [ 3412.083383][T17262] kfree+0x6f/0xf0 [ 3412.087169][T17262] kvfree+0x35/0x40 [ 3412.091309][T17262] netdev_freemem+0x3f/0x60 [ 3412.095900][T17262] netdev_release+0x7f/0xb0 [ 3412.100539][T17262] device_release+0xa4/0x1d0 [ 3412.105148][T17262] kobject_put+0x19d/0x280 [ 3412.110086][T17262] put_device+0x1f/0x30 [ 3412.114330][T17262] free_netdev+0x392/0x490 [ 3412.118857][T17262] usbnet_disconnect+0x25a/0x3b0 [ 3412.124061][T17262] ax88179_disconnect+0x82/0xb0 [ 3412.129127][T17262] usb_unbind_interface+0x223/0x8d0 [ 3412.134587][T17262] device_release_driver_internal+0x508/0x820 [ 3412.140643][T17262] device_release_driver+0x19/0x20 [ 3412.145737][T17262] bus_remove_device+0x2ee/0x350 [ 3412.150675][T17262] device_del+0x6a4/0xeb0 [ 3412.155167][T17262] usb_disable_device+0x3a8/0x750 [ 3412.160196][T17262] usb_disconnect+0x31e/0x860 [ 3412.164878][T17262] hub_event+0x1bd5/0x4680 [ 3412.169295][T17262] process_one_work+0x71f/0xc40 [ 3412.174220][T17262] worker_thread+0xd2e/0x11f0 [ 3412.178876][T17262] kthread+0x281/0x320 [ 3412.182950][T17262] ret_from_fork+0x1f/0x30 [ 3412.187468][T17262] [ 3412.189785][T17262] Last potentially related work creation: [ 3412.195482][T17262] kasan_save_stack+0x3a/0x60 [ 3412.200413][T17262] __kasan_record_aux_stack+0xb6/0xc0 [ 3412.205776][T17262] kasan_record_aux_stack_noalloc+0xb/0x10 [ 3412.211566][T17262] insert_work+0x51/0x300 [ 3412.215883][T17262] __queue_work+0x9b1/0xd30 [ 3412.220357][T17262] queue_work_on+0xd2/0x140 [ 3412.224843][T17262] usbnet_link_change+0x176/0x1a0 [ 3412.229840][T17262] ax88179_reset+0x31c2/0x4c70 [ 3412.234579][T17262] ax88179_bind+0x2c7/0x3a0 [ 3412.239152][T17262] usbnet_probe+0xafa/0x2780 [ 3412.243740][T17262] usb_probe_interface+0x610/0xaf0 [ 3412.248947][T17262] really_probe+0x2cb/0x960 [ 3412.253642][T17262] __driver_probe_device+0x198/0x280 [ 3412.258964][T17262] driver_probe_device+0x54/0x3e0 [ 3412.264000][T17262] __device_attach_driver+0x2e9/0x4a0 [ 3412.269471][T17262] bus_for_each_drv+0x183/0x210 [ 3412.274300][T17262] __device_attach+0x2a2/0x400 [ 3412.279101][T17262] device_initial_probe+0x1a/0x20 [ 3412.284226][T17262] bus_probe_device+0xc0/0x1f0 [ 3412.288986][T17262] device_add+0xb4d/0xef0 [ 3412.293309][T17262] usb_set_configuration+0x19c2/0x1f10 [ 3412.298842][T17262] usb_generic_driver_probe+0x91/0x150 [ 3412.304368][T17262] usb_probe_device+0x159/0x270 [ 3412.309209][T17262] really_probe+0x2cb/0x960 [ 3412.313725][T17262] __driver_probe_device+0x198/0x280 [ 3412.319100][T17262] driver_probe_device+0x54/0x3e0 [ 3412.324116][T17262] __device_attach_driver+0x2e9/0x4a0 [ 3412.329583][T17262] bus_for_each_drv+0x183/0x210 [ 3412.334434][T17262] __device_attach+0x2a2/0x400 [ 3412.339197][T17262] device_initial_probe+0x1a/0x20 [ 3412.344196][T17262] bus_probe_device+0xc0/0x1f0 [ 3412.349034][T17262] device_add+0xb4d/0xef0 [ 3412.353523][T17262] usb_new_device+0xa70/0x1520 [ 3412.358278][T17262] hub_event+0x2a5d/0x4680 [ 3412.362755][T17262] process_one_work+0x71f/0xc40 [ 3412.367583][T17262] worker_thread+0xa29/0x11f0 [ 3412.372416][T17262] kthread+0x281/0x320 [ 3412.376483][T17262] ret_from_fork+0x1f/0x30 [ 3412.381079][T17262] [ 3412.383405][T17262] The buggy address belongs to the object at ffff8881323f0000 [ 3412.383405][T17262] which belongs to the cache kmalloc-4k of size 4096 [ 3412.397627][T17262] The buggy address is located 3296 bytes inside of [ 3412.397627][T17262] 4096-byte region [ffff8881323f0000, ffff8881323f1000) [ 3412.411141][T17262] [ 3412.413459][T17262] The buggy address belongs to the physical page: [ 3412.419849][T17262] page:ffffea0004c8fc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1323f0 [ 3412.430079][T17262] head:ffffea0004c8fc00 order:3 compound_mapcount:0 compound_pincount:0 [ 3412.438378][T17262] flags: 0x4000000000010200(slab|head|zone=1) [ 3412.444436][T17262] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043380 [ 3412.453048][T17262] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 3412.461697][T17262] page dumped because: kasan: bad access detected [ 3412.468172][T17262] page_owner tracks the page as allocated [ 3412.473866][T17262] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 285, tgid 285 (syz-executor), ts 53408111999, free_ts 0 [ 3412.493632][T17262] post_alloc_hook+0x1f5/0x210 [ 3412.498443][T17262] prep_new_page+0x1c/0x110 [ 3412.502918][T17262] get_page_from_freelist+0x2c7b/0x2cf0 [ 3412.508438][T17262] __alloc_pages+0x1c3/0x450 [ 3412.513012][T17262] alloc_slab_page+0x6e/0xf0 [ 3412.517761][T17262] new_slab+0x98/0x3d0 [ 3412.521808][T17262] ___slab_alloc+0x6f6/0xb50 [ 3412.526401][T17262] __slab_alloc+0x5e/0xa0 [ 3412.530898][T17262] __kmem_cache_alloc_node+0x203/0x2c0 [ 3412.536419][T17262] __kmalloc_node_track_caller+0xa0/0x1e0 [ 3412.542123][T17262] __alloc_skb+0x236/0x4b0 [ 3412.546599][T17262] rtmsg_ifinfo_build_skb+0x7c/0x190 [ 3412.551957][T17262] rtmsg_ifinfo+0x7a/0x130 [ 3412.556538][T17262] __dev_notify_flags+0xdb/0x500 [ 3412.561603][T17262] rtnl_newlink+0x1a1c/0x2030 [ 3412.566284][T17262] rtnetlink_rcv_msg+0x9f4/0xcf0 [ 3412.571288][T17262] page_owner free stack trace missing [ 3412.576629][T17262] [ 3412.578929][T17262] Memory state around the buggy address: [ 3412.584534][T17262] ffff8881323f0b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3412.592594][T17262] ffff8881323f0c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3412.600657][T17262] >ffff8881323f0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3412.608692][T17262] ^ [ 3412.616046][T17262] ffff8881323f0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3412.624266][T17262] ffff8881323f0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3412.632500][T17262] ================================================================== [ 3412.640567][T17262] Disabling lock debugging due to kernel taint [ 3412.653753][T18396] hub 6-1:0.0: config failed, can't read hub descriptor (err -22) [ 3412.665206][ T28] audit: type=1400 audit(1755688856.298:842): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 3412.687453][ T28] audit: type=1400 audit(1755688856.298:843): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3412.710319][T18396] usbhid 6-1:0.0: can't add hid device: -71 [ 3412.712696][ T28] audit: type=1400 audit(1755688856.298:844): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3412.718840][T18396] usbhid: probe of 6-1:0.0 failed with error -71 [ 3412.737964][ T28] audit: type=1400 audit(1755688856.298:845): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 3412.767085][ T6072] loop1: detected capacity change from 0 to 512 [ 3412.779266][ T6072] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 3412.779445][T18396] usb 6-1: USB disconnect, device number 10 [ 3412.795795][ T28] audit: type=1400 audit(1755688856.298:846): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3412.816880][ T6072] EXT4-fs (loop1): orphan cleanup on readonly fs [ 3412.823935][ T6072] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.10415: bg 0: block 248: padding at end of block bitmap is not set [ 3412.830764][ T28] audit: type=1400 audit(1755688856.298:847): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3412.861547][ T6072] Quota error (device loop1): write_blk: dquota write failed [ 3412.869931][ T6072] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 3412.871220][ T28] audit: type=1400 audit(1755688856.298:848): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 3412.880575][ T6072] EXT4-fs error (device loop1): ext4_acquire_dquot:6801: comm syz.1.10415: Failed to acquire dquot type 1 [ 3412.920152][ T6072] EXT4-fs (loop1): 1 truncate cleaned up [ 3412.928762][ T6072] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 3413.567443][ T5558] EXT4-fs (loop1): unmounting filesystem.