last executing test programs: 9m53.051853001s ago: executing program 4 (id=550): connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4ea7, 0x0, @local, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 9m52.947539664s ago: executing program 4 (id=552): sendmsg$key(0xffffffffffffffff, 0x0, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x40824) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 9m51.648120486s ago: executing program 4 (id=553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16, @ANYRESHEX=r0, @ANYRES32, @ANYRESHEX], 0x81, 0x14f5, &(0x7f0000001580)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000600)={[{@errors_remount}, {@nombcache}, {@block_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@barrier}], [{@flag='ro'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@audit}, {@smackfsfloor}]}, 0x1, 0x44f, &(0x7f0000000e80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000380)=""/204, 0xcc}, {0x0}, {&(0x7f0000000c80)=""/25, 0x19}], 0x3}, 0x20) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount$nfs4(0x0, 0x0, 0x0, 0x10080, 0x0) request_key(0x0, &(0x7f0000000100)={'syz', 0x1}, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x524, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x3, &(0x7f00000000c0)=[{0xc, 0x0, 0x0, 0x80000}, {0x5c, 0xd, 0x9}, {0x6, 0x0, 0x4, 0x7ffffe39}]}) 9m48.167348038s ago: executing program 4 (id=559): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x10, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50a32, 0x823}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4044064}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf42, 0x4) socket$packet(0x11, 0xa, 0x300) 9m45.762056215s ago: executing program 4 (id=562): connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4ea7, 0x0, @local, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xfff2}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 9m44.574249283s ago: executing program 4 (id=566): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r3, 0x0, 0x0, 0x33, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffffffffffff, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) 9m29.453733828s ago: executing program 32 (id=566): syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a}, 0x28) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0x7005, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ip_tables_targets\x00') preadv(r3, 0x0, 0x0, 0x33, 0x0) syz_open_dev$mouse(&(0x7f0000000040), 0x7fffffffffffffff, 0x14000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) select(0x40, &(0x7f0000000580)={0xf, 0x6, 0x6, 0x8, 0x3ff, 0x1, 0xfff, 0xac}, 0x0, 0x0, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x5608, 0x0) 2.945876165s ago: executing program 3 (id=2527): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000080)=0x8, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) 2.065763323s ago: executing program 0 (id=2541): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xe, 0x7}, {0x2, 0xfff1}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 2.049618923s ago: executing program 3 (id=2542): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x5}, {}, {0xe, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xf, 0x4}}]}}]}, 0x3c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.971586246s ago: executing program 3 (id=2543): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0x11}], 0x400000000000172, 0x4001c00) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @multicast, 'gretap0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.818226041s ago: executing program 3 (id=2545): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="61124c00000000006113300000000000bf300000000000002500050007ffffffbd0201000000000095002000000000006916320000000000bf6700000000000004070000b964b01a4607feff00200000540700000ee60090bf050000000000000c5700000000000065070000d23700002c030000000000001f75000000000000bf54000000000000070000000400f9ffad430100000000007c000000000000000500000000000000950000000000000032ed3c5be95e5db67754bb12dc8c4ed68ecf264e0f84f9f17d3c30e3c7bdd2d17f2f175455000078af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd390700000500000000f18c30907d7bee45a0100000fe9de56c9d05000000c6c60bef0d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cac3f055af65727546e7c955ccefa1f6ab689ffffff7f63ede202fa4e0a2127b8b83c71a51445dc8dfd13ff15f852a39e5b2ab7bcb8f512036a5ba6d04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6901fcecc8158f0200000000c8fb735fd552bdc268694aeb0763f65e439ec1120843e326c819b6cf5c8ac86f8a297dff0445a13d0045fb3cda30a673a6037ed8c85f21ec2c081bdce431e56723888fb126a19bc1172b84b3ebe174aba210d739a018f9bbec63222d20cecac4d03723f1c921b5bbf7949632cacfdd32b3a6aa57f1ad2e99e0e67a993716dbf580469f0f53acbb400001e3abd5dedd3f7d2cf5834f2af97787f696649a46e17e090000000000000045eac1720e83b7838e3eede14308d582685e1becd6f35154bcb400000000000000000000008129277dc467148670ad3e2b26539cebca8f4ddc211bc3ccf0bd9d42ca019dd5d022cf74686e9fbe2562979eaed840a7afaab43176e65ec1118d46d1e827f3472f4445d353887a5ad103649afa1769080584f800031e03a651bb04000000ab04871bc47287cd31cc43ea0ffb567b4040c1458d0320ce7d0000413a0000000000000000005f37983f84e98a523d80bd56a57fa82b82f639601ae899a559944cb9a62a29ab028acfc1cb26a0f6a5480a55d624a0c544ba0dc828c22fe30000aa391598000000437d57fcf8295f63a70837f5cd4e5e77964522dc7ca3aa3476b7f2d851d27fd4de6eabb43e0799dc8d9fb7dc6c523ffbd74a6a40e4acb1ac872ade9d1f2ab779b8dbe843aeeda0426c767c00327b8c95b2bb6ddb55117669d9598c0f3598073f3a921c76beceff7e4fbfea5011db9020823b83abe54346c7af0a99fa077ffe7000feb9e44023a1749eb1d0d572b77d6e0d0fcd74031c8ef2629f5ecff4626746d6abe98a255e92c3c4f79bfcd0d91741380000cfeb73dec68ed56b5d3dfdf0cb8b71ad79000000000000000000000000000000dd434a25e95d0ec29d3adaccf89d0888031ecdfdb4dfbe444673be099ece7e4009c76c7108ef0a7e59fd6d906fbc3c9b412e0478cfee4485f423c63f49db43833c92eeeb647cebd4d7a93a17bcbb6bae5ff876375d4fe39cc2d292691672cc18ca372104ceb83a35ecedd97fc191d8f64d2b1d60c6d12911aada66c26aa4802c3514c3d92ec905000000b13f14c3f2ed6c64ec90000022d600000000000000000000028026b80c3899543223a6079ee96198b9a326db3be3a48af415ca28ca51c502550044ed8e29af8d763ef9b1f31befcad2ce5394601c7cdc233ba3d4ce26ed703dcb9fb3ad650f77e339768924dfdbeead13b88371154d743544a6091ec93e0d3fd5b4dc42911c17d51f964727bfd5cc5ba15370f6e1141d2271eded0b15e4316a1e4623272beb249a0928c417720be14c898f397411c88a7bcf3df46ab3efe7cd5e160c2afd3cc945f75011a102d952c7ad17a58d9be6910023a26faea764fae160cc2260bd028162917807ce89e11b5f261052ee0dde18efa1d802af2b7beecaaa61e7a726571df5cf6f8af41933cea0d0343261bccf64ca1c81045153eafbefdb91fbdff9ee3307d4a1837963b2dc2a3698d90e7915b098f19392e792adaea86052f4e948184001b6494e906925a092483adc7e9c8f7a29d226763c100aecae7f00619c36bceb9fb6dd7e55487d8485e498fdfc377fd3d266d21d46ab2f6b2ce22cd0aebba9b0ffbfe8ec3143c3734967c90b16ebbeeae1ce2baaae05aed6bf0f40c8a323f9235dc99698bd0b800067a901a79daada03cc77e74feb98b1586946b452764ff917a8ecc10e529c5bea49cad70e22df522c2803b6ef65df70223c6e22c3433e322d8dbd6e9b040065a9d6b3d5ae276cffe935d559bea88e1aa36b4e6c19e78457904297e77370e013b705a96548d47c609a93c45f4d1382b39c05dcc07d5b49ad75ddb3ce5b5b9416e03995da046c7aa5e6fc1a6f5d663380967ccef9de49a90ced031335e3219ebd9d06c257a50497ec523f5ff7361261ccfe239d603364a42e2e81fc068fcbb9792b673827fe7018a988fbce55bb74cdb327ce27e134548032a307871cea4c89d4b77b8743fb3cb72cc280b9f62e4f92f46a19600b802cba88b7d0a938d9e0e6cfe5d66b8748d004179e5b6025c0e1050faec7ecd9de190a975db2f8c06a551236278c4766d7e22e3b85168c9851de6266c791252f919b4f8b25055e786734e5142e4666c67aef5b7b2f88c6640995434aa8636993089c73f196c54ae829ad4307132655b075ae534fa7f1ea9a17e62357b0bd2bd1d62d34bfc136464025013665b1cf26a863a5cb3e8acc806611792add8254e705fefd2a44d5b15e3b36f6b75c97c9c04c511d8cf9e24c61c8284a913a381cb1a56c4f3f265a09628878040000000000000017b68afd95d4abd79286692439ee7acca2adc3d83d72b1b778e30c2bf2efbbcd054cf51f5705eb0faa8a0d9f18135cb1d8d567c3436fa697b72c5035d98b9e4f7f3379c0b3339debc78352b2e65299223d7ef2bd540e78167a3ac92a4c4f826f6d0e5c4ebf4f7a70c03e2f5ddbebf168586331eb5995d2288a167b7c6b20b32116b0c528dab6d0c4fe2ee402348104bc5d4012babedee898c6d3e1017be2e9bc759d3ab4d615f5000000000000000000000000000000000000000000007fff0000000000e693e314adf7dc9f517d04f1e6ca367d30d31d3647c6059db6e1e9529eb1623ef99e2d9ac2ab4872f8e784b07a31110bef6d000000a6f9e89e6d50ee06ce716f94da60f1f22db669560d296287c13c92070000ee7553eb2df17a39542fa88d09f000e88a90cf4406b9000000000000000000000000f441d6a6f516c235c6f5863e7f454ee0e16b9aa2593eb31fa3836703e7765aaeb77a8770e518efaa6d3dd85e03b3b133eb749057cea9af75a0e6f633532f2891b8e263cb6eecea691842827bc7c887081c8d320642389f5f0c42dba0ff75a257310f2d92cb1d1e16468949f5675262ee6609cf26ae4a8f5eac0ebf318e735930b01d8f586e34537bcff7d6196f494cdcf3a712078d745db0f5687a78ee6d000b3d171a0f08299b52d207f32e9da311ca090000003a42732808515eec574f892622c5be497fc3d9ca122d7c18b9e54637812c8debc61f0e42d838e44a819b74bce1a56108bb0f72c4a02475920532309c55b2c9ae9f281391ec5cc72a5e94cca1cbf1a706ec201eedfa5fbdb537a0c52bd45a9f966c25616cec30c3ea3246cb8e6aac7cf273638e6656a3e4ccadc348f0172028c99cc5f6d5c6d09ed65aa54549e73c28b7c8ad06ad3c5e3c27eec0eff1a6c84f1189919eefcee8072d1f88cb781e4cdb04af00ac92f1080211c4bee74381a0e31021918f27863fdbafb50f70857d52a1f7df51935a80b1980a4778d35f183ea517f55a98c5a471f3521956f8da6a4ccf2071095305701ab3f3ae43f06e91bc7d85e3800b46926944fba9805a985e63e53a62232fcd3f01dbe1728f300e247a7ebe344f9749818ff3961b2a42664ccd680a90bbb6ab400e286acc8f9febef64594777f848ed1cf980a3da2f0f7745760a05887d0c28060d613dd6539d392fc21fee0b5131609664b821d7a994e6c5965a4fa1ec1790c54e54586907dcc5a071ba22251e2de8bac16e79da9c2444d52facb7ab49420900000000000000f888a94365b99b72796fde1b922fc9ae09b526efca65faf1546c17cbb1d2d2fd12cb1a49cad501a3ca218c595b667b634606c57987ebfb0783a4948e4561d5cda158fe74453ff4a837be14d6a483842c57d6005b544b4f80003386edfd3d4a88a667bd41eefe0d808abed08a29e6bc370a80cc0366fb4080bfbaaa946fd47ab662c79c846e403910bbc3a48bb276cbb08a8eab145c06221ef16a238e3d50ad18aea9a2cec97d3c2d0569caabe2bffe02506bc9cb7294c5d020536dd5e7a6351642112df3b55d0215aaec7e45598995e79699e47567e353e68b03f82be860b188554b734e1192f9c1a867b815ef52cdc3307c0cc9be0000fdde69c350e59f11f1d26a4d04d8c8b2c4a4d23ee931d14bc7807db773a614b670acf46f83f7c65a0f8d43c5f647e1f0d27c46d4b686e867e9b0be76a7978a8f962bb5a070df97f2bf7612115cfe5ebdc7ad0bc5a5f3ace25347d0e5c347279d55aa67a967380000000000000000000000000000000000000000000000ed0942d980c754c6c69ef65c375ad018824f78b260d5f51bc3feba504408a8c8141d84f3f417603b5081680faa8cf38dbe4ae19e936511966965ce268b6345a0001c0f26a32e0a999fc869292e939dcf89b9bfd794f9c12d41959a00688cca43015a9eec58f647796adea520cd2abeb0b55c22949d10e5a05fee4543fdc1e02554a55b5fef2427a6e5708edc38fac53c2f961945a3f83cdf01979939b49bc6b1aef8c733401bbe473de8d64efbe0d123739f387d1c0d9e74f2175c174ada1678c7db79492e8dd0f34e2ccf419cf7f14ffa408b50a52685b36aed14aa22ad928191d5a2697646edc52a1c0c5d720ae690add2b34aed161f51cc1cb424f76098e1e1921e5a405f9d298a8461f2da30e47b7c6ed7c95c84c745f58723e4cddffae3b53b5b947f9435e589f9ae55b30ecd3827b2de5df31976870823da8058c2538c04e397f3d0ef90c11c74da984fa558697ecb57224ce8fa6f79aadbd7dbf3678e74d790bc2ee72769a3ada1dd504f8e4133ce1effd446bc9a2f139e65cc4bd83912af3122352506c7c2191b3705113a5ce1c99193886d6008d3565b00000000000000000000000000000000001c260fc175785ca04e31790f542c0f17b6599e93134792eae9878638b299e1d2b38d367be0d5c99d179c6bde265caebbae48bae74338f9d4f12f"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe50}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f0000002940)=ANY=[@ANYBLOB="180200000009000000000000000000001800000001000000000000000a00000095"], &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x400000000000235, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r3, 0x21, 0x85, 0xcf, &(0x7f0000000000)="fae68670fef1c45ff0634fe72a6253b4357c978887379648e34b8e43761f35000437ab851cde4821ce97abc68f6a1c3593e2a7a267f78fff0e9e1743899a7dc5c1d2ecae353bd4bcdb61c053b1d7b1223331d664596d93a54d408700062455bf71027a99387a4c190aa0098ed6ed8951ff86c092399a8d11b76c5e00"/133, &(0x7f00000008c0)=""/206, 0x1000, 0x0, 0x1a, 0x64, 0xfffffffffffffffe, &(0x7f00000000c0)="d5231f25b5f85be12036902ce1a29123e3c1d41aa6d9c06ff230c473bf3c", 0x0, 0x8000}, 0x48) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44dfaa00"}}, 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x8000) sendmsg$can_bcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x6, 0x0, 0x0, {}, {0x77359400}, {}, 0x1, @can={{}, 0x3, 0x2}}, 0x48}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000300)='rose0\x00', 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f00000027c0)=[{{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000000800)=""/243, 0xf3}], 0x1}, 0x5}], 0x1, 0x0, 0x0) 1.807933411s ago: executing program 0 (id=2547): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000058000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000409500000000000000b7020000000000007b9af8ff00000000b5090000010000007baaf0ff00000000bf2700000000000007080000fffdffffbfa400000000000007040000f0ffffff740200000800010018090000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000007ea0f0ff0000000056080000000000008500000081000000b70000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.706070285s ago: executing program 0 (id=2550): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r2, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r2, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) 1.51553874s ago: executing program 2 (id=2554): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0xb, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e22, @remote}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0xc, 0x1}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x58}, 0x1, 0x7}, 0x0) 1.51492586s ago: executing program 0 (id=2555): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20000c40) r4 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x90, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xc, 0x7}, {}, {0x8, 0x2}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x0, 0x9, 0x4}, 0x401}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x1}}]}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x8080) 1.411087484s ago: executing program 2 (id=2557): socket$kcm(0x2d, 0x2, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) 1.321218047s ago: executing program 0 (id=2560): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f0000000140)={r1}, &(0x7f0000000180)=0x8) 1.24046788s ago: executing program 0 (id=2561): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) accept4(r0, 0x0, 0x0, 0x80000) 1.118400354s ago: executing program 2 (id=2563): socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x200000000000002, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[], 0x0) 993.020388ms ago: executing program 1 (id=2565): unshare(0x60600) r0 = socket(0x15, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x8, 0x0, &(0x7f0000000180)=0xfffffffffffffc18) 910.372931ms ago: executing program 3 (id=2567): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f0000000400)=0x100, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a00001bbbbbbbbbbbbbaaaaaaaaaa2986dd6d002008001811ff20010000000000000000000000000001ff0200000000000000000000000000014f194e20"], 0x52) 814.423954ms ago: executing program 1 (id=2568): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000340)="ee", &(0x7f0000000000)=""/6, 0x2}, 0x20) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000500)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb25026a747e0114370595e4bb0b0489b1dc73229c52bbea23870200000079d3c7a519afc7d2dff1cc9fe1b9bd41c5d0b4f2d04979d68cc3471637e69740313dd0f31448193bd26131968d5f790e1429b24ba01f24670353dc73659f4a40f9972fa07c53e4c92d84f3394d5ead33881c01ec616a", 0x8f}], 0x1}, 0x20048020) 704.052837ms ago: executing program 3 (id=2569): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, 0x0, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x80}, 0x0) connect$unix(r4, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) 702.283277ms ago: executing program 5 (id=2570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x80) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, 0x0) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) epoll_create1(0x0) 606.61475ms ago: executing program 2 (id=2571): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x22, 0x3, "89"}]}}}}}}}, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$packet(r0, &(0x7f00000000c0)="37fe0187610488b3d05d92015ee9ad38d34e1b37234adcd7a271dcd87da03ea3c1b0eb949065c29156446f75a0f3128825ba4f61f4b702bf489c5737aa6121dd0090d0729c829124ccc2197c0af536a4bf1add8929dddebf", 0x58, 0x100000000000000, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @private=0xa010100}, 0x10) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, 0x0, 0xfffffdfa}}], 0x40000cf, 0x0) close(0x4) syz_open_procfs$namespace(0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r5 = accept(r3, 0x0, 0x0) getsockname$packet(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40000) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[], 0xfffffdef}, 0x1, 0x0, 0x0, 0x800}, 0x4010) recvfrom(r4, &(0x7f0000000080)=""/60, 0xfffffffffffffeeb, 0x101, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x10149000) 522.446493ms ago: executing program 5 (id=2572): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x68, 0x0, 0x0) socket$kcm(0x2, 0xa, 0x2) write$tun(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, 0x0) shutdown(r3, 0x0) 421.824586ms ago: executing program 5 (id=2573): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/cgroup\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x890) 371.983928ms ago: executing program 1 (id=2574): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 270.453161ms ago: executing program 5 (id=2575): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fbdedcff0000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 244.483292ms ago: executing program 1 (id=2576): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000005900)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000200)=""/4096, 0x1000}, {&(0x7f0000001200)=""/114, 0x72}], 0x2}, 0x562a}, {{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x7fff}, {{0x0, 0x0, 0x0}, 0x7f}], 0x4, 0x1a000, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4004088}, 0x0) 212.667293ms ago: executing program 2 (id=2577): r0 = socket(0x2b, 0x1, 0x1) bind$rds(r0, &(0x7f0000000500)={0x2, 0x4e23, @multicast1}, 0x10) 166.493804ms ago: executing program 5 (id=2578): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f0000000040)) 127.442076ms ago: executing program 2 (id=2579): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newtfilter={0xb0, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x3, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x80, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29f}, @TCA_FLOW_ACT={0x6c, 0x9, 0x0, 0x1, [@m_csum={0x68, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x40, 0x0, 0xd08d30e5b7583250, 0x10001, 0x8}, 0x48}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0xc5, 0x5, 0x9, 0xfffffff9}, 0x63}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x884}, 0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000300)="27030200dc0f14000e00073c001400004000ff8800000066c1532cc10200000003125ce882cbf490d90812533f00", 0x2e}], 0x1}, 0x4005) 108.677296ms ago: executing program 5 (id=2580): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f757465000000080005400000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) 30.390159ms ago: executing program 1 (id=2581): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x9005}, 0x4) 0s ago: executing program 1 (id=2582): unshare(0x22020600) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xd2}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r3, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) kernel console output (not intermixed with test programs): 385.964390][ T7339] 9pnet: Insufficient options for proto=fd [ 386.825516][ T7343] loop0: detected capacity change from 0 to 2048 [ 387.205135][ T7358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.790'. [ 390.410001][ T7391] loop2: detected capacity change from 0 to 256 [ 390.585586][ T7393] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 390.594229][ T7393] overlayfs: failed to look up (file2) for ino (-5) [ 393.130861][ T7416] netlink: 16 bytes leftover after parsing attributes in process `syz.3.803'. [ 394.274867][ T4265] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 394.549052][ T4265] usb 1-1: Using ep0 maxpacket: 32 [ 394.705111][ T4265] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 394.728648][ T4265] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 394.753241][ T4265] usb 1-1: config 0 descriptor?? [ 394.790824][ T4265] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 394.861404][ T7432] loop3: detected capacity change from 0 to 256 [ 395.744077][ T4265] gspca_vc032x: reg_w err -110 [ 395.748926][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.755509][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.789754][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.805410][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.811091][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.825340][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.838320][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.845295][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.859743][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.865169][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.875326][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.883281][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.893394][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.901169][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.906670][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.916582][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.925293][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.935290][ T4265] gspca_vc032x: I2c Bus Busy Wait 00 [ 395.942966][ T4265] gspca_vc032x: Unknown sensor... [ 395.948276][ T4265] vc032x: probe of 1-1:0.0 failed with error -22 [ 396.101582][ T7454] loop3: detected capacity change from 0 to 2048 [ 396.169006][ T7457] loop1: detected capacity change from 0 to 1024 [ 397.514131][ T7470] loop2: detected capacity change from 0 to 256 [ 397.606698][ T21] usb 1-1: USB disconnect, device number 5 [ 397.910648][ T7488] 9pnet: Insufficient options for proto=fd [ 398.802821][ T7501] loop3: detected capacity change from 0 to 256 [ 399.993318][ T7531] xt_SECMARK: invalid mode: 2 [ 400.828891][ T4233] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 400.955675][ T7546] loop0: detected capacity change from 0 to 2048 [ 402.352435][ T7559] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 402.360791][ T7559] overlayfs: failed to look up (file2) for ino (-5) [ 402.928630][ T4233] usb 6-1: Using ep0 maxpacket: 32 [ 402.998724][ T4233] usb 6-1: device descriptor read/all, error -71 [ 403.150637][ T7570] xt_SECMARK: invalid mode: 2 [ 405.487414][ T4233] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 406.349360][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 406.368390][ T7615] loop0: detected capacity change from 0 to 256 [ 406.396309][ T7615] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 406.434634][ T7615] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 406.520889][ T4233] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 406.541717][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.555754][ T4233] usb 2-1: config 0 descriptor?? [ 406.694301][ T7622] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 406.703955][ T7622] overlayfs: failed to look up (file2) for ino (-5) [ 407.400598][ T4233] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 407.897266][ T7640] netlink: 'syz.3.859': attribute type 72 has an invalid length. [ 407.905223][ T7640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.859'. [ 410.403570][ T4233] gspca_vc032x: reg_w err -71 [ 410.408291][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.413921][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.419418][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.424710][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.433363][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.438835][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.444122][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.449609][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.458232][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.566519][ T7668] loop1: detected capacity change from 0 to 2048 [ 410.654879][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.660594][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.665884][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.683524][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 410.693844][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 411.240988][ T7675] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 411.249407][ T7675] overlayfs: failed to look up (file2) for ino (-5) [ 411.266570][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 413.417233][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 413.422845][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 413.428140][ T4233] gspca_vc032x: I2c Bus Busy Wait 00 [ 413.539268][ T4233] gspca_vc032x: Unknown sensor... [ 413.544365][ T4233] vc032x: probe of 2-1:0.0 failed with error -22 [ 413.571350][ T4233] usb 2-1: USB disconnect, device number 6 [ 413.665360][ T7695] loop2: detected capacity change from 0 to 256 [ 414.978668][ T4233] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 415.006587][ T7710] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 415.015035][ T7710] overlayfs: failed to look up (file2) for ino (-5) [ 415.079641][ T7713] 9pnet: Insufficient options for proto=fd [ 415.228711][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 415.378749][ T4233] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 415.408107][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.429994][ T4233] usb 2-1: config 0 descriptor?? [ 415.480656][ T4233] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 416.379234][ T7723] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 416.387887][ T7723] overlayfs: failed to look up (file2) for ino (-5) [ 416.966525][ T7727] loop3: detected capacity change from 0 to 256 [ 417.966020][ T7733] Process accounting resumed [ 418.398747][ T7745] xt_SECMARK: invalid mode: 2 [ 418.619708][ T7748] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 418.628071][ T7748] overlayfs: failed to look up (file2) for ino (-5) [ 419.388710][ T4233] gspca_vc032x: reg_w err -71 [ 424.958838][ T2239] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 425.248817][ T2239] usb 1-1: Using ep0 maxpacket: 32 [ 425.379605][ T2239] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 425.519575][ T2239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.688321][ T2239] usb 1-1: config 0 descriptor?? [ 425.766140][ T2239] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 426.828733][ T2239] gspca_vc032x: reg_w err -110 [ 426.833546][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.867901][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.888974][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.889497][ T7831] No such timeout policy "syz1" [ 426.898878][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.912852][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.925170][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.938597][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.950226][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.958796][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.964122][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.989143][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 426.994597][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.004458][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.017748][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.033494][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.039093][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.045483][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.051757][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 427.057221][ T2239] gspca_vc032x: Unknown sensor... [ 427.062650][ T2239] vc032x: probe of 1-1:0.0 failed with error -22 [ 427.967657][ T21] usb 1-1: USB disconnect, device number 6 [ 428.622196][ T7860] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 428.630896][ T7860] overlayfs: failed to look up (file2) for ino (-5) [ 429.915800][ T7879] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 429.924464][ T7879] overlayfs: failed to look up (file2) for ino (-5) [ 432.408726][ T21] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 432.668854][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 432.789596][ T21] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 432.829158][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.316203][ T21] usb 3-1: config 0 descriptor?? [ 433.345637][ T7909] Process accounting resumed [ 433.361031][ T21] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 434.398947][ T21] gspca_vc032x: reg_w err -110 [ 434.411251][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.647581][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.689244][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.694556][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.888796][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.894193][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.904662][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.911372][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.918197][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.928645][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.933938][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.945053][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 434.965759][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.114003][ T7938] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 435.122678][ T7938] overlayfs: failed to look up (file2) for ino (-5) [ 435.186992][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.218884][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.245008][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.280304][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.314730][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 435.350668][ T21] gspca_vc032x: Unknown sensor... [ 435.385631][ T21] vc032x: probe of 3-1:0.0 failed with error -22 [ 435.778170][ T4309] usb 3-1: USB disconnect, device number 3 [ 437.646273][ T7954] loop2: detected capacity change from 0 to 256 [ 437.827081][ T21] Bluetooth: hci5: command 0x0406 tx timeout [ 438.189803][ T7966] 9pnet: Insufficient options for proto=fd [ 439.889311][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.897966][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.782248][ T8000] xt_SECMARK: invalid mode: 2 [ 441.430483][ T2239] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 442.875726][ T8013] Process accounting resumed [ 442.919921][ T2239] usb 6-1: Using ep0 maxpacket: 32 [ 444.285649][ T2239] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 444.308673][ T2239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.337381][ T2239] usb 6-1: config 0 descriptor?? [ 444.379720][ T2239] usb 6-1: can't set config #0, error -71 [ 444.387909][ T2239] usb 6-1: USB disconnect, device number 5 [ 444.735599][ T8041] overlayfs: failed to resolve './bus': -2 [ 452.789228][ T4265] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 452.885789][ T1107] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 453.289009][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 453.357379][ T1107] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 453.481781][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.679872][ T1107] usb 1-1: config 0 descriptor?? [ 453.720944][ T1107] pwc: Askey VC010 type 2 USB webcam detected. [ 453.735922][ T4265] usb 4-1: Using ep0 maxpacket: 16 [ 453.901768][ T4265] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 453.912070][ T4265] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 453.913010][ T8141] xt_SECMARK: invalid mode: 2 [ 454.218983][ T1107] pwc: send_video_command error -71 [ 454.233989][ T1107] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 454.310218][ T1107] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 454.410298][ T1107] usb 1-1: USB disconnect, device number 7 [ 454.478785][ T21] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 454.738963][ T21] usb 3-1: Using ep0 maxpacket: 32 [ 454.869582][ T21] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 454.927283][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.958829][ T1107] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 455.107368][ T21] usb 3-1: config 0 descriptor?? [ 455.230786][ T21] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 455.421939][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.447400][ T1107] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 455.474676][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.516915][ T1107] usb 1-1: config 0 descriptor?? [ 455.570843][ T1107] pwc: Askey VC010 type 2 USB webcam detected. [ 455.648777][ T1107] pwc: send_video_command error -71 [ 455.654145][ T1107] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 455.712132][ T1107] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 455.763130][ T1107] usb 1-1: USB disconnect, device number 8 [ 455.968882][ T4265] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 455.978632][ T4265] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.029986][ T4265] usb 4-1: Product: syz [ 456.054160][ T4265] usb 4-1: Manufacturer: syz [ 456.698838][ T4265] usb 4-1: can't set config #1, error -71 [ 456.766786][ T4265] usb 4-1: USB disconnect, device number 5 [ 459.328720][ T21] gspca_vc032x: reg_r err -71 [ 459.348737][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.361865][ T8192] loop0: detected capacity change from 0 to 256 [ 459.368222][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.388910][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.394584][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.401234][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.406774][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.418669][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.423993][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.429454][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.434745][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.441236][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.446813][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.459092][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.464798][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.471331][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.477299][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.484246][ T21] gspca_vc032x: I2c Bus Busy Wait 00 [ 459.489599][ T21] gspca_vc032x: Unknown sensor... [ 459.639139][ T21] vc032x: probe of 3-1:0.0 failed with error -22 [ 459.649783][ T21] usb 3-1: USB disconnect, device number 4 [ 460.432862][ T8214] xt_SECMARK: invalid mode: 2 [ 465.297162][ T8240] device syzkaller0 entered promiscuous mode [ 465.349333][ T8249] kvm: pic: single mode not supported [ 465.363862][ T8249] kvm: pic: single mode not supported [ 465.383996][ T8249] kvm: pic: level sensitive irq not supported [ 465.408237][ T8249] kvm: pic: single mode not supported [ 465.414412][ T8249] kvm: pic: level sensitive irq not supported [ 465.426588][ T8249] kvm: pic: single mode not supported [ 465.432933][ T8249] kvm: pic: level sensitive irq not supported [ 465.446926][ T8249] kvm: pic: single mode not supported [ 465.453113][ T8249] kvm: pic: level sensitive irq not supported [ 465.464853][ T8249] kvm: pic: level sensitive irq not supported [ 465.471317][ T8249] kvm: pic: level sensitive irq not supported [ 465.508787][ T8249] kvm: pic: single mode not supported [ 465.515415][ T8249] kvm: pic: single mode not supported [ 465.520962][ T8249] kvm: pic: level sensitive irq not supported [ 465.555135][ T8249] kvm: pic: level sensitive irq not supported [ 465.574882][ T8249] kvm: pic: level sensitive irq not supported [ 465.595238][ T8249] kvm: pic: level sensitive irq not supported [ 465.616115][ T8249] kvm: pic: single mode not supported [ 465.635448][ T8249] kvm: pic: single mode not supported [ 465.857384][ T8249] kvm: pic: single mode not supported [ 466.306230][ T8258] loop3: detected capacity change from 0 to 2048 [ 466.518252][ T8258] EXT4-fs (loop3): mounted filesystem without journal. Opts: init_itable=0x0000000000000001,errors=remount-ro,resgid=0x0000000000000000,barrier,quota,delalloc,. Quota mode: writeback. [ 466.559889][ T8258] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 467.430035][ T8273] Process accounting resumed [ 470.908792][ T1107] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 471.328824][ T1107] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 471.414954][ T1107] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 471.542592][ T1107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.753981][ T1107] usb 1-1: config 0 descriptor?? [ 471.860797][ T1107] pwc: Askey VC010 type 2 USB webcam detected. [ 471.981165][ T2239] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 472.068729][ T1107] pwc: send_video_command error -71 [ 472.074080][ T1107] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 472.081889][ T1107] Philips webcam: probe of 1-1:0.0 failed with error -71 [ 472.101304][ T1107] usb 1-1: USB disconnect, device number 9 [ 472.894998][ T2239] usb 4-1: Using ep0 maxpacket: 32 [ 473.104710][ T1107] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 473.132043][ T8361] xt_SECMARK: invalid mode: 2 [ 473.820093][ T2239] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 473.838745][ T2239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.999315][ T2239] usb 4-1: config 0 descriptor?? [ 474.128789][ T2239] usb 4-1: can't set config #0, error -71 [ 474.148402][ T2239] usb 4-1: USB disconnect, device number 6 [ 474.478183][ T8385] overlayfs: missing 'lowerdir' [ 477.281169][ T2239] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 477.488843][ T4282] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 477.668862][ T2239] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 477.694253][ T2239] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 477.726033][ T2239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 477.748653][ T4282] usb 3-1: Using ep0 maxpacket: 32 [ 477.770796][ T2239] usb 6-1: config 0 descriptor?? [ 477.869975][ T4282] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 477.904819][ T4282] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.607426][ T2239] ath6kl: Failed to submit usb control message: -71 [ 478.625363][ T2239] ath6kl: unable to send the bmi data to the device: -71 [ 478.689693][ T4282] usb 3-1: config 0 descriptor?? [ 478.720762][ T2239] ath6kl: Unable to send get target info: -71 [ 478.736329][ T2239] ath6kl: Failed to init ath6kl core: -71 [ 478.785935][ T4282] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 478.809534][ T2239] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 478.822016][ T2239] usb 6-1: USB disconnect, device number 6 [ 479.428660][ T4309] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 479.678638][ T4309] usb 6-1: Using ep0 maxpacket: 16 [ 479.798955][ T4309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.836011][ T4309] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 480.368724][ T4309] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 480.384207][ T4309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 480.529032][ T4309] usb 6-1: Product: syz [ 480.578177][ T4309] usb 6-1: Manufacturer: syz [ 480.633137][ T4309] usb 6-1: SerialNumber: syz [ 481.168934][ T4309] usb 6-1: 0:2 : does not exist [ 481.581648][ T8477] overlayfs: missing 'workdir' [ 481.878908][ T4282] gspca_vc032x: reg_w err -110 [ 482.095485][ T4309] usb 6-1: USB disconnect, device number 7 [ 482.540583][ T8493] syz.0.1082 sent an empty control message without MSG_MORE. [ 487.899156][ T8531] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 487.907500][ T8531] overlayfs: failed to look up (file2) for ino (-5) [ 488.429970][ T8509] Process accounting resumed [ 488.509927][ T4309] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 488.608936][ T4309] Bluetooth: hci1: Injecting HCI hardware error event [ 488.616100][ T4204] Bluetooth: hci1: hardware error 0x00 [ 488.968652][ T4309] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 489.288620][ T4309] usb 6-1: Using ep0 maxpacket: 16 [ 489.629156][ T4309] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 489.881436][ T4309] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 490.299147][ T4309] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 490.312848][ T4309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 490.321220][ T4309] usb 6-1: Product: syz [ 490.325392][ T4309] usb 6-1: Manufacturer: syz [ 490.330315][ T4309] usb 6-1: SerialNumber: syz [ 490.849173][ T4309] usb 6-1: 0:2 : does not exist [ 491.022818][ T8572] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 491.031201][ T8572] overlayfs: failed to look up (file2) for ino (-5) [ 492.925733][ T4309] usb 6-1: USB disconnect, device number 8 [ 493.880961][ T4196] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 494.355430][ T4309] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 494.439770][ T4201] Bluetooth: hci1: unexpected event for opcode 0x007f [ 494.508096][ T8584] Process accounting resumed [ 494.778845][ T4196] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 494.804299][ T4196] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 494.818600][ T4196] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.839478][ T4196] usb 4-1: config 0 descriptor?? [ 495.028809][ T4309] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.045687][ T4309] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 495.074150][ T4309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.094486][ T4196] ath6kl: Failed to submit usb control message: -71 [ 495.115653][ T4196] ath6kl: unable to send the bmi data to the device: -71 [ 495.128452][ T4309] usb 6-1: config 0 descriptor?? [ 495.148603][ T4196] ath6kl: Unable to send get target info: -71 [ 495.176878][ T4196] ath6kl: Failed to init ath6kl core: -71 [ 495.190826][ T4309] pwc: Askey VC010 type 2 USB webcam detected. [ 495.213459][ T4196] ath6kl_usb: probe of 4-1:0.0 failed with error -71 [ 495.537819][ T4309] pwc: send_video_command error -71 [ 495.543183][ T4309] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 495.554519][ T4196] usb 4-1: USB disconnect, device number 7 [ 495.560620][ T4309] Philips webcam: probe of 6-1:0.0 failed with error -71 [ 495.569845][ T4309] usb 6-1: USB disconnect, device number 9 [ 495.583862][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 496.959462][ T4309] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 500.405020][ T4196] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 501.339676][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.345995][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.518772][ T4196] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 501.549821][ T4196] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 501.562520][ T4196] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.579343][ T4196] usb 1-1: config 0 descriptor?? [ 501.646211][ T8645] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 502.465125][ T4196] ath6kl: Failed to submit usb control message: -71 [ 502.472198][ T4196] ath6kl: unable to send the bmi data to the device: -71 [ 502.479302][ T4196] ath6kl: Unable to send get target info: -71 [ 502.529760][ T4196] ath6kl: Failed to init ath6kl core: -71 [ 502.609484][ T4196] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 502.618418][ T8656] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 502.626874][ T8656] overlayfs: failed to look up (file2) for ino (-5) [ 502.643368][ T4196] usb 1-1: USB disconnect, device number 11 [ 502.848130][ T8681] device syzkaller0 entered promiscuous mode [ 503.383007][ T8697] xt_SECMARK: invalid mode: 2 [ 505.811165][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1140'. [ 505.830335][ T8724] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1140'. [ 505.868671][ T4196] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 505.883645][ T4196] Bluetooth: hci5: Injecting HCI hardware error event [ 505.908265][ T4204] Bluetooth: hci5: hardware error 0x00 [ 507.533213][ T8751] device syzkaller0 entered promiscuous mode [ 508.801322][ T8771] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 508.810019][ T8771] overlayfs: failed to look up (file2) for ino (-5) [ 509.581130][ T2239] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 509.956391][ T8786] loop2: detected capacity change from 0 to 64 [ 510.022919][ T2239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 510.038200][ T2239] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 510.068125][ T2239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.120463][ T2239] usb 6-1: config 0 descriptor?? [ 510.173297][ T8765] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 510.488906][ T2239] ath6kl: Failed to submit usb control message: -71 [ 510.591481][ T2239] ath6kl: unable to send the bmi data to the device: -71 [ 510.722425][ T2239] ath6kl: Unable to send get target info: -71 [ 510.923586][ T2239] ath6kl: Failed to init ath6kl core: -71 [ 510.994352][ T2239] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 511.015759][ T2239] usb 6-1: USB disconnect, device number 11 [ 512.205941][ T8808] kvm: pic: single mode not supported [ 513.581955][ T8821] loop0: detected capacity change from 0 to 32768 [ 513.690547][ T8821] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.1171 (8821) [ 513.762486][ T8821] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 513.796674][ T8821] BTRFS info (device loop0): setting nodatasum [ 513.818889][ T8821] BTRFS info (device loop0): force zlib compression, level 3 [ 513.832163][ T8828] loop5: detected capacity change from 0 to 32768 [ 513.834238][ T8822] loop2: detected capacity change from 0 to 32768 [ 513.850721][ T8821] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 513.874033][ T8828] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by syz.5.1174 (8828) [ 513.903126][ T8821] BTRFS info (device loop0): use lzo compression, level 0 [ 513.926960][ T8821] BTRFS info (device loop0): turning on flush-on-commit [ 513.967394][ T8821] BTRFS info (device loop0): enabling auto defrag [ 513.968716][ T8822] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz.2.1172 (8822) [ 513.992301][ T8821] BTRFS info (device loop0): max_inline at 4096 [ 514.028811][ T8821] BTRFS info (device loop0): using free space tree [ 514.035355][ T8821] BTRFS info (device loop0): has skinny extents [ 514.060598][ T7276] BTRFS warning: duplicate device /dev/loop5 devid 1 generation 8 scanned by udevd (7276) [ 514.209548][ T4927] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by udevd (4927) [ 514.555174][ T8821] BTRFS info (device loop0): enabling ssd optimizations [ 514.828492][ T8872] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 514.836938][ T8872] overlayfs: failed to look up (file2) for ino (-5) [ 516.242728][ T8890] device syzkaller0 entered promiscuous mode [ 516.548737][ T2239] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 516.818736][ T2239] usb 4-1: Using ep0 maxpacket: 32 [ 516.974749][ T2239] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 516.989579][ T2239] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.032831][ T2239] usb 4-1: config 0 descriptor?? [ 517.098019][ T2239] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 517.137311][ T8912] loop5: detected capacity change from 0 to 32768 [ 517.193111][ T8912] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1190 (8912) [ 517.280604][ T8912] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 517.303533][ T8912] BTRFS info (device loop5): setting nodatasum [ 517.342571][ T8912] BTRFS info (device loop5): force zlib compression, level 3 [ 517.378620][ T8912] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8) [ 517.387860][ T8912] BTRFS info (device loop5): use lzo compression, level 0 [ 517.463603][ T8912] BTRFS info (device loop5): turning on flush-on-commit [ 517.494440][ T8912] BTRFS info (device loop5): enabling auto defrag [ 517.519770][ T8912] BTRFS info (device loop5): max_inline at 4096 [ 517.541328][ T8912] BTRFS info (device loop5): using free space tree [ 517.547903][ T8912] BTRFS info (device loop5): has skinny extents [ 518.107196][ T8912] BTRFS info (device loop5): enabling ssd optimizations [ 518.343496][ T8951] loop1: detected capacity change from 0 to 64 [ 518.432475][ T8953] loop2: detected capacity change from 0 to 64 [ 520.378682][ T2239] gspca_vc032x: reg_r err -110 [ 520.383490][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.467064][ T8973] device syzkaller0 entered promiscuous mode [ 520.487108][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.494082][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.499483][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.504772][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.510271][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.515837][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.525050][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.530427][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.535715][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.541182][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.546474][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.551813][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.557103][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.562437][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.567744][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.573126][ T2239] gspca_vc032x: I2c Bus Busy Wait 00 [ 520.580236][ T2239] gspca_vc032x: Unknown sensor... [ 520.585323][ T2239] vc032x: probe of 4-1:0.0 failed with error -22 [ 521.018615][ T4234] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 521.163594][ T8896] usb 4-1: USB disconnect, device number 8 [ 521.388804][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 521.416876][ T4234] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 521.437040][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.469382][ T4234] usb 6-1: config 0 descriptor?? [ 521.488899][ T8984] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 521.683082][ T8995] loop2: detected capacity change from 0 to 64 [ 521.728668][ T4234] ath6kl: Failed to submit usb control message: -71 [ 521.738278][ T4234] ath6kl: unable to send the bmi data to the device: -71 [ 521.745874][ T4234] ath6kl: Unable to send get target info: -71 [ 521.755214][ T4234] ath6kl: Failed to init ath6kl core: -71 [ 521.778060][ T4234] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 521.788595][ T8896] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 521.803318][ T4234] usb 6-1: USB disconnect, device number 12 [ 522.028719][ T8896] usb 4-1: Using ep0 maxpacket: 16 [ 522.661029][ T8896] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 522.696325][ T8896] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 522.758278][ T9006] loop0: detected capacity change from 0 to 64 [ 522.869909][ T8896] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 522.898592][ T8896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.906613][ T8896] usb 4-1: Product: syz [ 522.937305][ T8896] usb 4-1: Manufacturer: syz [ 522.956752][ T8896] usb 4-1: SerialNumber: syz [ 523.768821][ T8896] usb 4-1: 0:2 : does not exist [ 523.800554][ T8896] usb 4-1: USB disconnect, device number 9 [ 523.857663][ T8998] Process accounting resumed [ 524.071392][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.298600][ T4234] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 524.669104][ T4234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.679864][ T4234] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 524.704511][ T4234] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 524.724946][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.754241][ T4234] usb 1-1: config 0 descriptor?? [ 525.057110][ T4234] usb 1-1: USB disconnect, device number 12 [ 525.554312][ T4234] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 525.608692][ T2239] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 526.085182][ T4234] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 526.115910][ T4234] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 526.130297][ T2239] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 526.141464][ T2239] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 526.151205][ T2239] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.164837][ T4234] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 526.169840][ T2239] usb 6-1: config 0 descriptor?? [ 526.196015][ T4234] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.208854][ T9035] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 526.229118][ T4234] usb 1-1: config 0 descriptor?? [ 526.333753][ T9051] loop1: detected capacity change from 0 to 32768 [ 526.378733][ T9051] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1223 (9051) [ 526.441146][ T9051] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 526.458714][ T2239] ath6kl: Failed to submit usb control message: -71 [ 526.465367][ T2239] ath6kl: unable to send the bmi data to the device: -71 [ 526.481664][ T2239] ath6kl: Unable to send get target info: -71 [ 526.493586][ T9051] BTRFS info (device loop1): setting nodatasum [ 526.497420][ T2239] ath6kl: Failed to init ath6kl core: -71 [ 526.515007][ T9051] BTRFS info (device loop1): force zlib compression, level 3 [ 526.545282][ T2239] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 526.552940][ T9051] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 526.577911][ T9051] BTRFS info (device loop1): use lzo compression, level 0 [ 526.587912][ T2239] usb 6-1: USB disconnect, device number 13 [ 526.614781][ T9051] BTRFS info (device loop1): turning on flush-on-commit [ 526.641877][ T9051] BTRFS info (device loop1): enabling auto defrag [ 526.663007][ T9051] BTRFS info (device loop1): max_inline at 4096 [ 526.686577][ T9051] BTRFS info (device loop1): using free space tree [ 526.707295][ T9051] BTRFS info (device loop1): has skinny extents [ 526.894632][ T9051] BTRFS info (device loop1): enabling ssd optimizations [ 527.551544][ T4231] usb 1-1: USB disconnect, device number 13 [ 527.611406][ T9054] Process accounting resumed [ 529.961754][ T9149] kvm: pic: single mode not supported [ 529.962656][ T9149] pic_ioport_write: 8 callbacks suppressed [ 529.962689][ T9149] kvm: pic: level sensitive irq not supported [ 530.032366][ T9149] kvm: pic: single mode not supported [ 530.063201][ T9149] kvm: pic: single mode not supported [ 530.068669][ T9149] kvm: pic: level sensitive irq not supported [ 530.089872][ T9149] kvm: pic: single mode not supported [ 530.095993][ T9149] kvm: pic: level sensitive irq not supported [ 530.133180][ T9149] kvm: pic: level sensitive irq not supported [ 530.142830][ T9149] kvm: pic: single mode not supported [ 530.290584][ T4233] gspca_vc032x: Unknown sensor... [ 530.318637][ T4233] vc032x: probe of 2-1:0.0 failed with error -22 [ 530.348728][ T4233] usb 2-1: USB disconnect, device number 7 [ 531.957487][ T9195] loop3: detected capacity change from 0 to 64 [ 533.317586][ T9218] loop0: detected capacity change from 0 to 64 [ 534.104595][ T9206] loop3: detected capacity change from 0 to 32768 [ 534.188088][ T9206] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1256 (9206) [ 534.293171][ T9206] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 534.323719][ T9206] BTRFS info (device loop3): setting nodatasum [ 534.363663][ T9206] BTRFS info (device loop3): force zlib compression, level 3 [ 534.440898][ T9206] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 534.505482][ T9206] BTRFS info (device loop3): use lzo compression, level 0 [ 534.647771][ T9206] BTRFS info (device loop3): turning on flush-on-commit [ 534.674900][ T9206] BTRFS info (device loop3): enabling auto defrag [ 534.718667][ T9206] BTRFS info (device loop3): max_inline at 4096 [ 534.758942][ T9206] BTRFS info (device loop3): using free space tree [ 534.778557][ T9206] BTRFS info (device loop3): has skinny extents [ 535.905765][ T9206] BTRFS info (device loop3): enabling ssd optimizations [ 537.485744][ T9096] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 537.792323][ T9300] kvm: pic: single mode not supported [ 537.793288][ T9300] kvm: pic: level sensitive irq not supported [ 537.833120][ T9300] kvm: pic: single mode not supported [ 537.858819][ T9300] kvm: pic: single mode not supported [ 537.864236][ T9300] kvm: pic: level sensitive irq not supported [ 537.897627][ T9300] kvm: pic: single mode not supported [ 537.903982][ T9300] kvm: pic: level sensitive irq not supported [ 537.913896][ T9096] usb 6-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 537.936967][ T9096] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 537.950226][ T9300] kvm: pic: level sensitive irq not supported [ 537.950300][ T9300] kvm: pic: single mode not supported [ 537.958828][ T9096] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 537.976709][ T9096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.007186][ T9096] usb 6-1: config 0 descriptor?? [ 538.278723][ T9096] ath6kl: Failed to submit usb control message: -71 [ 538.286406][ T9096] ath6kl: unable to send the bmi data to the device: -71 [ 538.298011][ T9096] ath6kl: Unable to send get target info: -71 [ 538.312189][ T9096] ath6kl: Failed to init ath6kl core: -71 [ 538.355069][ T9096] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 538.380074][ T9096] usb 6-1: USB disconnect, device number 14 [ 538.461871][ T9309] loop2: detected capacity change from 0 to 4096 [ 538.791481][ T9313] Process accounting resumed [ 539.140761][ T9326] loop0: detected capacity change from 0 to 64 [ 542.989931][ T9374] Process accounting resumed [ 545.798750][ T4234] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 545.968620][ T9283] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 546.162818][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.192495][ T4234] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 546.218365][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.257659][ T4234] usb 2-1: config 0 descriptor?? [ 546.315913][ T4234] pwc: Askey VC010 type 2 USB webcam detected. [ 546.378863][ T9283] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 546.438619][ T9283] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 546.468076][ T9283] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 546.518698][ T4234] pwc: send_video_command error -71 [ 546.523960][ T4234] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 546.540400][ T9283] usb 6-1: config 0 descriptor?? [ 546.562646][ T4234] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 546.568913][ T9412] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 546.586034][ T4234] usb 2-1: USB disconnect, device number 8 [ 546.931300][ T9283] ath6kl: Failed to submit usb control message: -71 [ 546.937950][ T9283] ath6kl: unable to send the bmi data to the device: -71 [ 546.946434][ T9283] ath6kl: Unable to send get target info: -71 [ 546.954695][ T9283] ath6kl: Failed to init ath6kl core: -71 [ 546.971489][ T9283] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 547.298741][ T4234] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 547.625017][ T9283] usb 6-1: USB disconnect, device number 15 [ 547.959747][ T4234] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.434482][ T4234] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 548.457209][ T4234] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 548.899493][ T4234] usb 2-1: config 0 descriptor?? [ 548.918740][ T4234] usb 2-1: can't set config #0, error -71 [ 549.603064][ T4234] usb 2-1: USB disconnect, device number 9 [ 551.478588][ T9096] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 551.908825][ T9096] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 95, setting to 64 [ 551.931762][ T9096] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 551.956797][ T9096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.983767][ T9096] usb 2-1: config 0 descriptor?? [ 552.009678][ T9474] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 552.249423][ T9096] ath6kl: Failed to submit usb control message: -71 [ 552.256088][ T9096] ath6kl: unable to send the bmi data to the device: -71 [ 552.299715][ T9096] ath6kl: Unable to send get target info: -71 [ 552.312908][ T9096] ath6kl: Failed to init ath6kl core: -71 [ 552.356929][ T9096] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 552.377519][ T9096] usb 2-1: USB disconnect, device number 10 [ 555.705712][ T9560] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 555.717609][ T9560] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 556.390814][ T9563] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 556.399565][ T9563] overlayfs: failed to look up (file2) for ino (-5) [ 558.978688][ T4234] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 560.278732][ T4234] usb 2-1: string descriptor 0 read error: -71 [ 560.285005][ T4234] usb 2-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 560.315853][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.356192][ T4234] usb 2-1: config 0 descriptor?? [ 560.518330][ T4234] usb 2-1: can't set config #0, error -71 [ 560.534476][ T4234] usb 2-1: USB disconnect, device number 11 [ 560.764828][ T9614] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 560.773576][ T9614] overlayfs: failed to look up (file2) for ino (-5) [ 561.381211][ T9621] loop3: detected capacity change from 0 to 256 [ 561.817341][ T9628] kvm: pic: single mode not supported [ 561.825568][ T9628] kvm: pic: single mode not supported [ 561.831920][ T9628] kvm: pic: single mode not supported [ 561.837594][ T9628] kvm: pic: single mode not supported [ 561.845456][ T9628] kvm: pic: level sensitive irq not supported [ 561.854804][ T9628] kvm: pic: single mode not supported [ 561.860953][ T9628] kvm: pic: level sensitive irq not supported [ 561.866563][ T9628] kvm: pic: single mode not supported [ 561.872723][ T9628] kvm: pic: level sensitive irq not supported [ 561.878203][ T9628] kvm: pic: single mode not supported [ 561.884424][ T9628] kvm: pic: level sensitive irq not supported [ 561.890512][ T9628] kvm: pic: single mode not supported [ 561.896595][ T9628] kvm: pic: level sensitive irq not supported [ 561.940202][ T9628] kvm: pic: single mode not supported [ 561.946368][ T9628] kvm: pic: level sensitive irq not supported [ 561.964191][ T9635] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 562.071316][ T9628] kvm: pic: single mode not supported [ 562.071335][ T9628] kvm: pic: level sensitive irq not supported [ 562.090042][ T9628] kvm: pic: level sensitive irq not supported [ 562.152106][ T9628] kvm: pic: level sensitive irq not supported [ 562.181480][ T9628] kvm: pic: level sensitive irq not supported [ 562.391565][ T9633] Process accounting resumed [ 562.729531][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.735891][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.088633][ T8896] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 563.669314][ T8896] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 563.743746][ T8896] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 563.877476][ T8896] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 564.009670][ T8896] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.019462][ T8896] usb 4-1: config 0 descriptor?? [ 564.279955][ T8896] usb 4-1: USB disconnect, device number 10 [ 564.448585][ T9096] usb 6-1: new full-speed USB device number 16 using dummy_hcd [ 564.768598][ T4234] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 564.864982][ T9096] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 564.879366][ T9096] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 564.903407][ T9096] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.946645][ T9096] usb 6-1: config 0 descriptor?? [ 565.138826][ T4234] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.158625][ T4234] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 565.177971][ T4234] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 565.187447][ T4234] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.213235][ T4234] usb 4-1: config 0 descriptor?? [ 565.298664][ T9096] ath6kl: Failed to submit usb control message: -71 [ 565.305329][ T9096] ath6kl: unable to send the bmi data to the device: -71 [ 565.319539][ T9096] ath6kl: Unable to send get target info: -71 [ 565.327685][ T9096] ath6kl: Failed to init ath6kl core: -71 [ 565.347686][ T9096] ath6kl_usb: probe of 6-1:0.0 failed with error -71 [ 565.369869][ T9096] usb 6-1: USB disconnect, device number 16 [ 565.909702][ T9675] xt_SECMARK: invalid mode: 2 [ 567.197087][ T4234] usb 4-1: USB disconnect, device number 11 [ 567.899976][ T9698] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 567.908732][ T9698] overlayfs: failed to look up (file2) for ino (-5) [ 568.288344][ T9687] Process accounting resumed [ 568.587324][ T9708] xt_SECMARK: invalid mode: 2 [ 569.272264][ T9720] device syzkaller0 entered promiscuous mode [ 571.243502][ T9747] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 571.252198][ T9747] overlayfs: failed to look up (file2) for ino (-5) [ 572.785648][ T4231] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 573.370475][ T9767] loop1: detected capacity change from 0 to 256 [ 573.419509][ T4231] usb 6-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 573.431316][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.591609][ T4231] usb 6-1: Product: syz [ 573.629946][ T4231] usb 6-1: Manufacturer: syz [ 573.634805][ T4231] usb 6-1: SerialNumber: syz [ 573.643036][ T4231] usb 6-1: config 0 descriptor?? [ 573.701542][ T4231] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 573.867427][ T4231] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 573.889114][ T4231] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 573.898477][ T4231] usb 6-1: media controller created [ 573.939211][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 574.096807][ T9777] overlayfs: metacopy with no lower data found - abort lookup (/file2) [ 574.105495][ T9777] overlayfs: failed to look up (file2) for ino (-5) [ 575.020317][ T4231] DVB: Unable to find symbol mt352_attach() [ 575.101100][ T9788] overlayfs: failed to resolve './file0': -2 [ 575.574290][ T4231] DVB: Unable to find symbol nxt6000_attach() [ 575.582637][ T4231] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 575.670917][ T4231] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input95 [ 575.907242][ T4231] dvb-usb: schedule remote query interval to 1000 msecs. [ 575.989857][ T4231] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 576.094610][ T4231] dvb-usb: bulk message failed: -22 (7/0) [ 576.159090][ T4231] dvb-usb: bulk message failed: -22 (7/0) [ 576.188613][ T4282] gspca_vc032x: Unknown sensor... [ 576.322061][ T4231] usb 6-1: USB disconnect, device number 17 [ 576.477268][ T4282] vc032x: probe of 3-1:0.0 failed with error -22 [ 576.505562][ T4282] usb 3-1: USB disconnect, device number 5 [ 576.904563][ T4231] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 578.733823][ T9813] pic_ioport_write: 5 callbacks suppressed [ 578.733840][ T9813] kvm: pic: single mode not supported [ 578.787547][ T9813] kvm: pic: single mode not supported [ 578.810873][ T9813] kvm: pic: single mode not supported [ 578.816441][ T9813] kvm: pic: single mode not supported [ 578.830412][ T9813] kvm: pic: single mode not supported [ 578.850777][ T9813] kvm: pic: single mode not supported [ 578.856189][ T9813] pic_ioport_write: 11 callbacks suppressed [ 578.856202][ T9813] kvm: pic: level sensitive irq not supported [ 578.867774][ T9813] kvm: pic: single mode not supported [ 578.873897][ T9813] kvm: pic: level sensitive irq not supported [ 578.945210][ T9828] loop3: detected capacity change from 0 to 64 [ 581.068761][ T9855] xt_SECMARK: invalid mode: 2 [ 581.593416][ T9853] device syzkaller0 entered promiscuous mode [ 582.938692][ T4282] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 583.940750][ T9877] xt_SECMARK: invalid mode: 2 [ 584.839159][ T9889] xt_SECMARK: invalid mode: 2 [ 585.511119][ T4282] usb 2-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 585.525125][ T4282] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 585.538294][ T4282] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 585.547432][ T4282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 585.722209][ T4282] usb 2-1: config 0 descriptor?? [ 585.748663][ T4282] usb 2-1: can't set config #0, error -71 [ 585.853432][ T4282] usb 2-1: USB disconnect, device number 12 [ 587.384608][ T9932] xt_SECMARK: invalid mode: 2 [ 587.918561][ T4282] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 588.359200][ T4282] usb 1-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config [ 588.448228][ T4282] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.654307][ T4282] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 588.745491][ T4282] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.758032][ T9939] Process accounting resumed [ 588.782991][ T4282] usb 1-1: config 0 descriptor?? [ 589.058653][ T4282] usb 1-1: string descriptor 0 read error: -71 [ 589.108592][ T4282] ath6kl: Failed to submit usb control message: -71 [ 589.115257][ T4282] ath6kl: unable to send the bmi data to the device: -71 [ 589.123442][ T4282] ath6kl: Unable to send get target info: -71 [ 589.139301][ T4282] ath6kl: Failed to init ath6kl core: -71 [ 589.170146][ T4282] ath6kl_usb: probe of 1-1:0.0 failed with error -71 [ 589.193688][ T4282] usb 1-1: USB disconnect, device number 14 [ 590.402962][ T9974] xt_SECMARK: invalid mode: 2 [ 591.169092][ T9986] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 592.055420][ T9991] device syzkaller0 entered promiscuous mode [ 592.104754][ T9991] tc action pedit offset 4096 out of bounds [ 592.403290][T10001] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 593.737235][T10021] xt_SECMARK: invalid mode: 2 [ 595.514884][T10045] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 597.399849][T10051] device syzkaller0 entered promiscuous mode [ 604.888869][T10189] xt_SECMARK: invalid mode: 2 [ 609.418712][T10251] device syzkaller0 entered promiscuous mode [ 610.534384][T10272] kvm: pic: single mode not supported [ 610.540280][T10272] kvm: pic: single mode not supported [ 610.550507][T10272] kvm: pic: level sensitive irq not supported [ 610.556065][T10272] kvm: pic: single mode not supported [ 610.562268][T10272] kvm: pic: level sensitive irq not supported [ 610.568979][T10272] kvm: pic: single mode not supported [ 610.575084][T10272] kvm: pic: level sensitive irq not supported [ 610.583163][T10272] kvm: pic: single mode not supported [ 610.589638][T10272] kvm: pic: level sensitive irq not supported [ 610.599886][T10272] kvm: pic: single mode not supported [ 610.606057][T10272] kvm: pic: level sensitive irq not supported [ 610.613175][T10272] kvm: pic: single mode not supported [ 610.619398][T10272] kvm: pic: level sensitive irq not supported [ 610.652542][T10272] kvm: pic: single mode not supported [ 610.658766][T10272] kvm: pic: level sensitive irq not supported [ 610.673686][T10272] kvm: pic: level sensitive irq not supported [ 610.680059][T10272] kvm: pic: level sensitive irq not supported [ 611.301021][T10272] kvm: pic: single mode not supported [ 611.308920][T10272] kvm: pic: single mode not supported [ 611.314333][T10272] kvm: pic: level sensitive irq not supported [ 613.016082][T10294] loop5: detected capacity change from 0 to 4096 [ 613.095796][T10303] loop0: detected capacity change from 0 to 4096 [ 613.153540][T10303] EXT4-fs (loop0): inline encryption not supported [ 613.196174][T10303] EXT4-fs (loop0): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 613.383059][T10294] EXT4-fs (loop5): inline encryption not supported [ 614.267710][T10294] EXT4-fs (loop5): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 615.982680][T10335] device syzkaller0 entered promiscuous mode [ 616.390878][T10344] pic_ioport_write: 2 callbacks suppressed [ 616.390897][T10344] kvm: pic: single mode not supported [ 616.479755][T10344] kvm: pic: single mode not supported [ 616.524936][T10344] pic_ioport_write: 9 callbacks suppressed [ 616.524953][T10344] kvm: pic: level sensitive irq not supported [ 616.611142][T10344] kvm: pic: single mode not supported [ 616.617284][T10344] kvm: pic: level sensitive irq not supported [ 616.677130][T10344] kvm: pic: single mode not supported [ 616.683443][T10344] kvm: pic: level sensitive irq not supported [ 616.721726][T10344] kvm: pic: single mode not supported [ 616.727817][T10344] kvm: pic: level sensitive irq not supported [ 616.783653][T10344] kvm: pic: single mode not supported [ 616.789894][T10344] kvm: pic: level sensitive irq not supported [ 616.849646][T10344] kvm: pic: single mode not supported [ 616.855746][T10344] kvm: pic: level sensitive irq not supported [ 616.861558][T10344] kvm: pic: single mode not supported [ 616.867635][T10344] kvm: pic: level sensitive irq not supported [ 616.873146][T10344] kvm: pic: level sensitive irq not supported [ 616.879402][T10344] kvm: pic: level sensitive irq not supported [ 616.885856][T10344] kvm: pic: single mode not supported [ 616.892558][T10344] kvm: pic: single mode not supported [ 616.897915][T10344] kvm: pic: level sensitive irq not supported [ 617.000491][T10354] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 617.925761][T10361] netlink: 'syz.0.1554': attribute type 12 has an invalid length. [ 618.744128][T10373] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 618.846964][T10368] Process accounting resumed [ 619.066668][T10378] device syzkaller0 entered promiscuous mode [ 620.868173][T10401] loop1: detected capacity change from 0 to 4096 [ 620.918347][T10401] EXT4-fs (loop1): inline encryption not supported [ 620.949464][T10401] EXT4-fs (loop1): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 622.773242][T10419] xt_SECMARK: invalid mode: 2 [ 623.705492][T10431] device syzkaller0 entered promiscuous mode [ 624.438140][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.444497][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.525106][T10515] Process accounting resumed [ 631.693132][T10521] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 633.919278][T10570] Process accounting resumed [ 635.292295][T10590] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 637.223407][T10602] device syzkaller0 entered promiscuous mode [ 637.840835][T10626] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 641.233185][T10661] loop2: detected capacity change from 0 to 4096 [ 641.384233][T10661] EXT4-fs (loop2): inline encryption not supported [ 641.418641][T10661] EXT4-fs (loop2): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 642.402432][T10674] Process accounting resumed [ 644.216567][T10699] device syzkaller0 entered promiscuous mode [ 647.432728][T10720] Process accounting resumed [ 647.737334][T10736] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1660'. [ 649.770969][T10757] device syzkaller0 entered promiscuous mode [ 653.598388][T10813] Process accounting resumed [ 655.299450][T10844] device syzkaller0 entered promiscuous mode [ 657.083509][T10871] Process accounting resumed [ 667.565635][T10923] device syzkaller0 entered promiscuous mode [ 671.277889][T10984] loop1: detected capacity change from 0 to 40427 [ 671.398949][T10984] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 671.407022][T10984] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 671.440611][T10984] F2FS-fs (loop1): invalid crc value [ 671.495835][T10984] F2FS-fs (loop1): Found nat_bits in checkpoint [ 671.561163][T10984] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 671.568753][T10984] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 673.034845][ T25] audit: type=1800 audit(1779446326.939:2): pid=11000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1727" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 674.334363][T11019] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 675.049461][ T4188] attempt to access beyond end of device [ 675.049461][ T4188] loop1: rw=2049, want=40968, limit=40427 [ 675.450394][T11033] device geneve2 entered promiscuous mode [ 675.773736][T11036] loop3: detected capacity change from 0 to 40427 [ 675.838631][T11036] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 675.846458][T11036] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 675.858248][T11036] F2FS-fs (loop3): invalid crc value [ 675.896740][T11036] F2FS-fs (loop3): Found nat_bits in checkpoint [ 675.944707][T11036] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 675.951918][T11036] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 676.326326][ T25] audit: type=1800 audit(1779446330.929:3): pid=11045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1741" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 677.365437][ T4194] attempt to access beyond end of device [ 677.365437][ T4194] loop3: rw=2049, want=40968, limit=40427 [ 679.375501][T11084] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 680.261212][T11086] loop3: detected capacity change from 0 to 40427 [ 680.373341][T11086] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 680.381247][T11086] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 680.390971][T11086] F2FS-fs (loop3): invalid crc value [ 680.428728][T11065] loop0: detected capacity change from 0 to 65536 [ 680.448633][T11086] F2FS-fs (loop3): Found nat_bits in checkpoint [ 680.529026][T11086] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 680.536094][T11086] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 680.560347][T11101] device syzkaller0 entered promiscuous mode [ 682.207520][ T25] audit: type=1800 audit(1779446336.319:4): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1745" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 682.661998][ T4194] attempt to access beyond end of device [ 682.661998][ T4194] loop3: rw=2049, want=40968, limit=40427 [ 683.158461][T11119] futex_wake_op: syz.5.1760 tries to shift op by 32; fix this program [ 683.208625][T11119] loop5: detected capacity change from 0 to 8 [ 685.768678][T11135] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 685.894440][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.918626][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.384988][T11145] loop5: detected capacity change from 0 to 256 [ 686.966252][T11145] FAT-fs (loop5): Directory bread(block 64) failed [ 687.385503][T11145] FAT-fs (loop5): Directory bread(block 65) failed [ 687.392910][T11145] FAT-fs (loop5): Directory bread(block 66) failed [ 687.399497][T11145] FAT-fs (loop5): Directory bread(block 67) failed [ 687.406050][T11145] FAT-fs (loop5): Directory bread(block 68) failed [ 687.428594][T11145] FAT-fs (loop5): Directory bread(block 69) failed [ 687.435471][T11145] FAT-fs (loop5): Directory bread(block 70) failed [ 687.459356][T11145] FAT-fs (loop5): Directory bread(block 71) failed [ 687.477340][T11145] FAT-fs (loop5): Directory bread(block 72) failed [ 687.566762][T11145] FAT-fs (loop5): Directory bread(block 73) failed [ 688.178504][T11165] attempt to access beyond end of device [ 688.178504][T11165] loop5: rw=0, want=1196, limit=256 [ 688.854338][T11140] loop2: detected capacity change from 0 to 65536 [ 689.042114][T11140] XFS (loop2): Mounting V5 Filesystem [ 689.137985][T11140] XFS (loop2): Ending clean mount [ 689.407092][T11140] XFS (loop2): Quotacheck needed: Please wait. [ 690.030068][T11140] XFS (loop2): Quotacheck: Done. [ 690.171087][ T4197] XFS (loop2): Unmounting Filesystem [ 690.459267][T11193] futex_wake_op: syz.5.1776 tries to shift op by 32; fix this program [ 690.488875][T11193] loop5: detected capacity change from 0 to 8 [ 691.369214][T11170] loop3: detected capacity change from 0 to 65536 [ 691.477849][T11170] XFS (loop3): Mounting V5 Filesystem [ 691.559625][T11170] XFS (loop3): Ending clean mount [ 691.598855][T11170] XFS (loop3): Quotacheck needed: Please wait. [ 691.685520][T11170] XFS (loop3): Quotacheck: Done. [ 691.755230][ T4194] XFS (loop3): Unmounting Filesystem [ 693.632278][T11228] futex_wake_op: syz.3.1779 tries to shift op by 32; fix this program [ 693.668083][T11228] loop3: detected capacity change from 0 to 8 [ 699.248023][T11259] loop0: detected capacity change from 0 to 40427 [ 699.365974][T11259] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 699.388656][T11259] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 699.417878][T11259] F2FS-fs (loop0): invalid crc value [ 699.474497][T11259] F2FS-fs (loop0): Found nat_bits in checkpoint [ 699.637027][T11259] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 699.658532][T11259] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 700.866451][T11276] loop1: detected capacity change from 0 to 65536 [ 701.067975][T11276] XFS (loop1): Mounting V5 Filesystem [ 701.233928][T11276] XFS (loop1): Ending clean mount [ 701.259736][T11276] XFS (loop1): Quotacheck needed: Please wait. [ 701.366962][T11276] XFS (loop1): Quotacheck: Done. [ 702.064920][T11325] futex_wake_op: syz.3.1805 tries to shift op by 32; fix this program [ 702.096136][T11325] loop3: detected capacity change from 0 to 8 [ 703.167456][T11302] loop5: detected capacity change from 0 to 65536 [ 703.435529][T11302] XFS (loop5): Mounting V5 Filesystem [ 703.519835][T11302] XFS (loop5): Ending clean mount [ 703.539635][T11302] XFS (loop5): Quotacheck needed: Please wait. [ 703.660454][T11302] XFS (loop5): Quotacheck: Done. [ 704.736808][ T6584] XFS (loop5): Unmounting Filesystem [ 704.918058][ T4188] XFS (loop1): Unmounting Filesystem [ 705.858532][T11350] loop5: detected capacity change from 0 to 40427 [ 705.912825][T11350] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 705.920702][T11350] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 705.931299][T11350] F2FS-fs (loop5): invalid crc value [ 705.951312][T11356] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 705.995031][T11350] F2FS-fs (loop5): Found nat_bits in checkpoint [ 706.201319][T11350] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 706.208380][T11350] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 707.608570][ T25] audit: type=1800 audit(1779446361.469:5): pid=11369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1808" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 707.809828][ T6584] attempt to access beyond end of device [ 707.809828][ T6584] loop5: rw=2049, want=40968, limit=40427 [ 708.085009][T11379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1819'. [ 708.138544][T11379] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 708.146285][T11379] IPv6: NLM_F_CREATE should be set when creating new route [ 708.543210][T11383] futex_wake_op: syz.3.1820 tries to shift op by 32; fix this program [ 708.572659][T11383] loop3: detected capacity change from 0 to 8 [ 715.932689][T11444] loop2: detected capacity change from 0 to 65536 [ 716.185809][T11485] loop0: detected capacity change from 0 to 40427 [ 716.407713][T11485] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 716.415577][T11485] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 716.486236][T11485] F2FS-fs (loop0): invalid crc value [ 716.828628][T11485] F2FS-fs (loop0): Found nat_bits in checkpoint [ 716.898324][T11485] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 716.905621][T11485] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 717.803158][ T25] audit: type=1800 audit(1779446372.109:6): pid=11514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1846" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 718.366979][ T4189] attempt to access beyond end of device [ 718.366979][ T4189] loop0: rw=2049, want=40968, limit=40427 [ 719.340766][T11531] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 719.585196][T11518] loop5: detected capacity change from 0 to 65536 [ 720.078164][T11518] XFS (loop5): Mounting V5 Filesystem [ 720.570256][T11518] XFS (loop5): Ending clean mount [ 720.609810][T11518] XFS (loop5): Quotacheck needed: Please wait. [ 720.708047][T11518] XFS (loop5): Quotacheck: Done. [ 720.868596][ T4282] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 721.777823][ T6584] XFS (loop5): Unmounting Filesystem [ 721.788905][ T4282] usb 2-1: Using ep0 maxpacket: 8 [ 721.908691][ T4282] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 721.918840][ T4282] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.938525][ T4282] usb 2-1: config 0 has no interface number 0 [ 721.954153][ T4282] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 721.980149][ T4282] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 722.002980][ T4282] usb 2-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 722.025261][ T4282] usb 2-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 722.046597][ T4282] usb 2-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 722.228700][ T4282] usb 2-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 722.248070][ T4282] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.278501][ T4282] usb 2-1: Product: syz [ 722.282780][ T4282] usb 2-1: Manufacturer: syz [ 722.287433][ T4282] usb 2-1: SerialNumber: syz [ 722.310468][ T4282] usb 2-1: config 0 descriptor?? [ 722.338906][T11558] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 722.367840][T11562] loop0: detected capacity change from 0 to 65536 [ 722.550581][T11562] XFS (loop0): Mounting V5 Filesystem [ 722.570660][T11558] udc-core: couldn't find an available UDC or it's busy [ 722.577690][T11558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 722.659655][T11558] udc-core: couldn't find an available UDC or it's busy [ 722.666627][T11558] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 722.748952][T11562] XFS (loop0): Ending clean mount [ 722.802621][T11562] XFS (loop0): Quotacheck needed: Please wait. [ 722.819289][ T4282] usb 2-1: NFC: intf ffff88806090f000 id ffffffff8cb52f00 [ 722.905703][T11591] futex_wake_op: syz.5.1865 tries to shift op by 32; fix this program [ 722.936139][T11591] loop5: detected capacity change from 0 to 8 [ 723.293989][ T4282] nfcmrvl 2-1:0.122: NFC: registered with nci successfully [ 723.836112][ T4282] usb 2-1: USB disconnect, device number 13 [ 723.907436][ T4282] usb 2-1: NFC: intf ffff88806090f000 [ 724.008901][T11562] XFS (loop0): Quotacheck: Done. [ 724.176356][ T4189] XFS (loop0): Unmounting Filesystem [ 725.528531][ T4236] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 725.768631][ T4236] usb 1-1: Using ep0 maxpacket: 8 [ 725.888884][ T4236] usb 1-1: config 0 has an invalid interface number: 122 but max is 0 [ 725.904962][ T4236] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 725.933671][ T4236] usb 1-1: config 0 has no interface number 0 [ 725.958092][ T4236] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 725.993397][ T4236] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 726.014622][ T4236] usb 1-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 726.035864][ T4236] usb 1-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 726.058249][ T4236] usb 1-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 726.258721][ T4236] usb 1-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 726.275705][ T4236] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.308555][ T4236] usb 1-1: Product: syz [ 726.312758][ T4236] usb 1-1: Manufacturer: syz [ 726.337769][ T4236] usb 1-1: SerialNumber: syz [ 726.350082][ T4236] usb 1-1: config 0 descriptor?? [ 726.368864][T11608] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 726.595666][T11608] udc-core: couldn't find an available UDC or it's busy [ 726.643352][T11608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.680842][T11608] udc-core: couldn't find an available UDC or it's busy [ 726.695760][T11608] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 726.760295][ T4236] usb 1-1: NFC: intf ffff888078548000 id ffffffff8cb52f00 [ 726.804128][ T4236] nfcmrvl 1-1:0.122: NFC: registered with nci successfully [ 727.013108][ T8896] usb 1-1: USB disconnect, device number 15 [ 727.031357][ T8896] usb 1-1: NFC: intf ffff888078548000 [ 729.446598][T11657] loop3: detected capacity change from 0 to 65536 [ 729.638878][T11657] XFS (loop3): Mounting V5 Filesystem [ 729.799112][T11657] XFS (loop3): Ending clean mount [ 729.815409][T11657] XFS (loop3): Quotacheck needed: Please wait. [ 730.139268][T11657] XFS (loop3): Quotacheck: Done. [ 731.220928][ T4194] XFS (loop3): Unmounting Filesystem [ 731.782676][T11735] loop2: detected capacity change from 0 to 40427 [ 731.941377][T11735] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 731.949283][T11735] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 731.958979][T11735] F2FS-fs (loop2): invalid crc value [ 732.000059][T11735] F2FS-fs (loop2): Found nat_bits in checkpoint [ 732.051001][T11735] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 732.058093][T11735] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 733.041943][ T25] audit: type=1800 audit(1779446387.019:7): pid=11746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1905" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 733.287342][ T4197] attempt to access beyond end of device [ 733.287342][ T4197] loop2: rw=2049, want=40968, limit=40427 [ 733.994556][T11764] syz.3.1911 (11764) used greatest stack depth: 20432 bytes left [ 737.183529][T11828] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 740.217954][T11893] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 743.818584][T11943] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 744.695050][T11952] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 745.622333][T11931] loop0: detected capacity change from 0 to 65536 [ 745.836892][T11931] XFS (loop0): Mounting V5 Filesystem [ 745.939891][T11931] XFS (loop0): log mount failed [ 746.990531][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.997089][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.412200][T11994] loop0: detected capacity change from 0 to 256 [ 747.652097][T11994] FAT-fs (loop0): Directory bread(block 64) failed [ 747.686821][T11994] FAT-fs (loop0): Directory bread(block 65) failed [ 747.714991][T11994] FAT-fs (loop0): Directory bread(block 66) failed [ 747.731235][T11994] FAT-fs (loop0): Directory bread(block 67) failed [ 747.745779][T11994] FAT-fs (loop0): Directory bread(block 68) failed [ 747.795263][T11994] FAT-fs (loop0): Directory bread(block 69) failed [ 747.827480][T11994] FAT-fs (loop0): Directory bread(block 70) failed [ 747.863611][T11994] FAT-fs (loop0): Directory bread(block 71) failed [ 747.890887][T11994] FAT-fs (loop0): Directory bread(block 72) failed [ 747.924792][T11994] FAT-fs (loop0): Directory bread(block 73) failed [ 749.843279][T12040] futex_wake_op: syz.0.1979 tries to shift op by 32; fix this program [ 751.327384][T12065] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 751.378184][T12065] kvm: pic: non byte read [ 751.393320][T12065] pic_ioport_write: 9 callbacks suppressed [ 751.393337][T12065] kvm: pic: level sensitive irq not supported [ 751.413011][T12065] kvm: pic: non byte read [ 751.446466][T12065] kvm: pic: level sensitive irq not supported [ 751.446564][T12065] kvm: pic: non byte read [ 751.481879][T12065] kvm: pic: level sensitive irq not supported [ 751.481971][T12065] kvm: pic: non byte read [ 751.520672][T12065] kvm: pic: level sensitive irq not supported [ 751.520785][T12065] kvm: pic: non byte read [ 751.556242][T12065] kvm: pic: level sensitive irq not supported [ 751.556332][T12065] kvm: pic: non byte read [ 751.586018][T12055] loop5: detected capacity change from 0 to 65536 [ 751.605363][T12065] kvm: pic: level sensitive irq not supported [ 751.605430][T12065] kvm: pic: non byte read [ 751.643238][T12065] kvm: pic: level sensitive irq not supported [ 751.643330][T12065] kvm: pic: non byte read [ 751.734845][T12055] XFS (loop5): Mounting V5 Filesystem [ 751.752995][T12065] kvm: pic: level sensitive irq not supported [ 751.753791][T12065] kvm: pic: non byte read [ 751.797096][T12065] kvm: pic: level sensitive irq not supported [ 751.799448][T12065] kvm: pic: non byte read [ 751.858091][T12065] kvm: pic: level sensitive irq not supported [ 751.868795][T12055] XFS (loop5): Ending clean mount [ 751.937099][T12055] XFS (loop5): Quotacheck needed: Please wait. [ 752.062963][T12055] XFS (loop5): Quotacheck: Done. [ 753.066323][ T6584] XFS (loop5): Unmounting Filesystem [ 755.438574][ T8909] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 755.728595][ T8909] usb 4-1: Using ep0 maxpacket: 8 [ 755.864936][ T8909] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 755.882987][ T8909] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 755.905052][ T8909] usb 4-1: config 0 has no interface number 0 [ 755.918713][ T8909] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 755.936750][ T8909] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 755.947066][ T8909] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 755.966080][ T8909] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 755.980333][ T8909] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 756.184718][ T8909] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 756.198571][ T8909] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 756.225122][ T8909] usb 4-1: Product: syz [ 756.239118][ T8909] usb 4-1: Manufacturer: syz [ 756.247221][ T8909] usb 4-1: SerialNumber: syz [ 756.279455][ T8909] usb 4-1: config 0 descriptor?? [ 756.299034][T12127] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 756.311991][T12141] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 756.960171][T12127] udc-core: couldn't find an available UDC or it's busy [ 757.144262][T12127] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 757.216235][T12127] udc-core: couldn't find an available UDC or it's busy [ 757.280908][T12127] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 757.319250][ T8909] usb 4-1: NFC: intf ffff888078e8e000 id ffffffff8cb52f00 [ 757.430113][ T8909] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 757.545871][ T8909] usb 4-1: USB disconnect, device number 12 [ 757.590562][ T8909] usb 4-1: NFC: intf ffff888078e8e000 [ 758.266482][T12154] loop0: detected capacity change from 0 to 65536 [ 759.093663][T12154] XFS (loop0): Mounting V5 Filesystem [ 759.168690][T12154] XFS (loop0): Ending clean mount [ 759.289140][T12154] XFS (loop0): Quotacheck needed: Please wait. [ 759.544262][T12154] XFS (loop0): Quotacheck: Done. [ 760.820418][ T4189] XFS (loop0): Unmounting Filesystem [ 762.405291][T12254] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 762.449161][T12254] picdev_read: 18 callbacks suppressed [ 762.449194][T12254] kvm: pic: non byte read [ 762.518754][T12254] pic_ioport_write: 16 callbacks suppressed [ 762.518790][T12254] kvm: pic: level sensitive irq not supported [ 762.588547][T12254] kvm: pic: non byte read [ 762.637326][T12254] kvm: pic: level sensitive irq not supported [ 762.638061][T12254] kvm: pic: non byte read [ 762.709516][T12254] kvm: pic: level sensitive irq not supported [ 762.710432][T12254] kvm: pic: non byte read [ 762.788900][T12254] kvm: pic: level sensitive irq not supported [ 762.788993][T12254] kvm: pic: non byte read [ 762.808831][T12254] kvm: pic: level sensitive irq not supported [ 762.808894][T12254] kvm: pic: non byte read [ 762.831857][T12254] kvm: pic: level sensitive irq not supported [ 762.831920][T12254] kvm: pic: non byte read [ 762.869313][T12254] kvm: pic: level sensitive irq not supported [ 762.869618][T12254] kvm: pic: non byte read [ 762.918912][T12254] kvm: pic: level sensitive irq not supported [ 762.919253][T12254] kvm: pic: non byte read [ 762.962312][T12254] kvm: pic: level sensitive irq not supported [ 762.962619][T12254] kvm: pic: non byte read [ 763.020929][T12254] kvm: pic: level sensitive irq not supported [ 763.636460][ T4236] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 763.908630][ T4236] usb 2-1: Using ep0 maxpacket: 8 [ 764.028697][ T4236] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 764.036915][ T4236] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 764.079490][ T4236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 764.115097][ T4236] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 764.125996][T12267] loop2: detected capacity change from 0 to 65536 [ 764.132522][ T4236] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 764.147835][ T4236] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 764.596689][T12267] XFS (loop2): Mounting V5 Filesystem [ 764.826986][ T4236] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.860737][T12267] XFS (loop2): Ending clean mount [ 764.867572][T12267] XFS (loop2): Quotacheck needed: Please wait. [ 765.025613][T12267] XFS (loop2): Quotacheck: Done. [ 765.063357][T12301] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 765.098704][ T4236] usb 2-1: usb_control_msg returned -32 [ 765.104311][ T4236] usbtmc 2-1:16.0: can't read capabilities [ 765.333664][T12274] usbtmc 2-1:16.0: send_request_dev_dep_msg_in returned -90 [ 765.371489][ T4236] usb 2-1: USB disconnect, device number 14 [ 765.814709][ T4197] XFS (loop2): Unmounting Filesystem [ 772.079414][T12373] loop5: detected capacity change from 0 to 65536 [ 773.554353][T12453] futex_wake_op: syz.0.2084 tries to shift op by 32; fix this program [ 773.586350][T12453] loop0: detected capacity change from 0 to 8 [ 777.208643][ T1107] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 777.710063][ T1107] usb 4-1: unable to get BOS descriptor or descriptor too short [ 777.839527][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.939801][ T1107] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.057916][ T1107] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.208252][ T1107] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 778.355531][ T1107] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 778.468704][ T1107] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 778.600985][T12488] loop0: detected capacity change from 0 to 65536 [ 778.992794][ T1107] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 779.058044][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.213651][ T1107] usb 4-1: Product: syz [ 779.294390][ T1107] usb 4-1: SerialNumber: syz [ 779.439330][T12488] XFS (loop0): Mounting V5 Filesystem [ 779.518972][T12488] XFS (loop0): Ending clean mount [ 779.529085][T12488] XFS (loop0): Quotacheck needed: Please wait. [ 779.638785][T12488] XFS (loop0): Quotacheck: Done. [ 779.841156][T12535] loop5: detected capacity change from 0 to 40427 [ 779.859396][ T4189] XFS (loop0): Unmounting Filesystem [ 779.922974][T12535] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 779.930792][T12535] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 779.935733][T12539] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 779.947848][ T1107] cdc_ncm 4-1:1.0: bind() failure [ 779.966541][T12535] F2FS-fs (loop5): invalid crc value [ 779.970201][ T1107] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 779.995810][ T1107] cdc_ncm 4-1:1.1: bind() failure [ 779.998198][T12535] F2FS-fs (loop5): Found nat_bits in checkpoint [ 780.026264][ T1107] usb 4-1: USB disconnect, device number 13 [ 780.047013][T12535] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 780.054425][T12535] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 780.994692][ T25] audit: type=1800 audit(1779446435.029:8): pid=12550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2108" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 781.240311][ T6584] attempt to access beyond end of device [ 781.240311][ T6584] loop5: rw=2049, want=40968, limit=40427 [ 783.118042][T12574] loop3: detected capacity change from 0 to 256 [ 783.340597][T12574] FAT-fs (loop3): Directory bread(block 64) failed [ 783.347246][T12574] FAT-fs (loop3): Directory bread(block 65) failed [ 783.411522][T12574] FAT-fs (loop3): Directory bread(block 66) failed [ 783.419662][T12574] FAT-fs (loop3): Directory bread(block 67) failed [ 783.428705][T12574] FAT-fs (loop3): Directory bread(block 68) failed [ 783.435258][T12574] FAT-fs (loop3): Directory bread(block 69) failed [ 783.545400][T12574] FAT-fs (loop3): Directory bread(block 70) failed [ 783.589585][T12574] FAT-fs (loop3): Directory bread(block 71) failed [ 783.609983][T12574] FAT-fs (loop3): Directory bread(block 72) failed [ 783.637298][T12574] FAT-fs (loop3): Directory bread(block 73) failed [ 783.668753][T12590] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 785.438466][T12633] futex_wake_op: syz.0.2127 tries to shift op by 32; fix this program [ 790.115874][T12703] loop5: detected capacity change from 0 to 40427 [ 790.223896][T12703] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 790.231895][T12703] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 790.241571][T12703] F2FS-fs (loop5): invalid crc value [ 790.286849][T12703] F2FS-fs (loop5): Found nat_bits in checkpoint [ 790.350847][T12703] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 790.357975][T12703] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 791.378611][ T25] audit: type=1800 audit(1779446445.329:9): pid=12713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2150" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 791.620990][ T6584] attempt to access beyond end of device [ 791.620990][ T6584] loop5: rw=2049, want=40968, limit=40427 [ 791.766385][ T1107] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 792.369485][ T1107] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 792.455872][ T1107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.621805][ T1107] usb 4-1: Product: syz [ 792.626213][ T1107] usb 4-1: Manufacturer: syz [ 792.631288][ T1107] usb 4-1: SerialNumber: syz [ 793.028609][ T4231] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 793.050170][T12734] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 793.118881][ T1107] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 793.309063][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 793.440003][ T4231] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 793.448236][ T4231] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 793.474289][ T4231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 793.494168][ T4231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 793.514177][ T4231] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 793.539470][ T4231] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 793.557618][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.749794][T12731] loop0: detected capacity change from 0 to 65536 [ 793.804925][T12731] XFS (loop0): Mounting V5 Filesystem [ 793.843155][T12731] XFS (loop0): Ending clean mount [ 793.849854][ T4231] usb 3-1: usb_control_msg returned -32 [ 793.855927][ T4231] usbtmc 3-1:16.0: can't read capabilities [ 793.857549][T12731] XFS (loop0): Quotacheck needed: Please wait. [ 793.940693][T12731] XFS (loop0): Quotacheck: Done. [ 793.978494][ T8909] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 794.062563][T12729] usbtmc 3-1:16.0: send_request_dev_dep_msg_in returned -90 [ 794.079580][ T4231] usb 3-1: USB disconnect, device number 6 [ 794.368567][ T8909] usb 2-1: Using ep0 maxpacket: 8 [ 794.452896][T12761] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 794.538929][ T8909] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 794.631031][ T8909] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 794.758182][ T8909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 794.779322][ T1107] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 794.926118][ T1107] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 794.998736][ T8909] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 795.040752][ T1107] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 795.125080][ T8909] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.140118][ T1107] lan78xx: probe of 4-1:1.0 failed with error -71 [ 795.149002][ T8909] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 795.158055][ T8909] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.169030][ T1107] usb 4-1: USB disconnect, device number 14 [ 795.448674][ T8909] usb 2-1: usb_control_msg returned -71 [ 795.455502][ T8909] usbtmc 2-1:16.0: can't read capabilities [ 795.495730][ T8909] usb 2-1: USB disconnect, device number 15 [ 795.797384][ T4189] XFS (loop0): Unmounting Filesystem [ 800.083240][T12860] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2187'. [ 800.118542][T12860] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 800.125828][T12860] IPv6: NLM_F_CREATE should be set when creating new route [ 800.186133][T12865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2187'. [ 800.236223][T12865] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 801.986296][T12902] futex_wake_op: syz.5.2193 tries to shift op by 32; fix this program [ 801.993498][T12903] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2199'. [ 802.055031][T12903] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 802.062335][T12903] IPv6: NLM_F_CREATE should be set when creating new route [ 802.082148][T12906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2199'. [ 802.114865][T12906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 803.147640][T12892] loop1: detected capacity change from 0 to 65536 [ 803.265441][T12892] XFS (loop1): Mounting V5 Filesystem [ 803.367400][T12892] XFS (loop1): Ending clean mount [ 803.386313][T12892] XFS (loop1): Quotacheck needed: Please wait. [ 803.517896][T12892] XFS (loop1): Quotacheck: Done. [ 803.981387][T12951] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 804.274992][T12959] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 806.646809][ T4188] XFS (loop1): Unmounting Filesystem [ 807.810210][T12980] loop2: detected capacity change from 0 to 65536 [ 807.947087][T12987] loop0: detected capacity change from 0 to 40427 [ 808.004366][T12980] XFS (loop2): Mounting V5 Filesystem [ 808.027702][T12987] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 808.055356][T12987] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 808.099907][T12980] XFS (loop2): Ending clean mount [ 808.147302][T12987] F2FS-fs (loop0): invalid crc value [ 808.149473][T12980] XFS (loop2): Quotacheck needed: Please wait. [ 808.259314][T12980] XFS (loop2): Quotacheck: Done. [ 808.286753][T12987] F2FS-fs (loop0): Found nat_bits in checkpoint [ 808.426869][T12987] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 808.436156][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.436227][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.525998][T12987] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 808.534765][ T9096] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 808.788503][ T9096] usb 2-1: Using ep0 maxpacket: 8 [ 808.928521][ T9096] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 808.937690][ T9096] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 808.958509][ T9096] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 808.971306][ T9096] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 809.036069][ T9096] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 809.094357][ T9096] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 809.196669][ T9096] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.399162][ T25] audit: type=1800 audit(1779446463.959:10): pid=13029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2221" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 809.441507][ T4197] XFS (loop2): Unmounting Filesystem [ 809.731822][T13033] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2230'. [ 809.848647][ T9096] usb 2-1: usb_control_msg returned -71 [ 809.854252][ T9096] usbtmc 2-1:16.0: can't read capabilities [ 809.921943][ T9096] usb 2-1: USB disconnect, device number 16 [ 811.007189][T13053] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 811.032674][T13053] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 811.039972][T13053] IPv6: NLM_F_CREATE should be set when creating new route [ 811.092896][T13054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2236'. [ 811.119844][T13054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 811.302976][ T7448] attempt to access beyond end of device [ 811.302976][ T7448] loop0: rw=1, want=80816, limit=40427 [ 811.377810][ T7448] attempt to access beyond end of device [ 811.377810][ T7448] loop0: rw=1, want=81920, limit=40427 [ 811.484561][ T7448] attempt to access beyond end of device [ 811.484561][ T7448] loop0: rw=1, want=52928, limit=40427 [ 811.559766][ T7448] attempt to access beyond end of device [ 811.559766][ T7448] loop0: rw=1, want=53248, limit=40427 [ 811.626508][ T7448] attempt to access beyond end of device [ 811.626508][ T7448] loop0: rw=1, want=59008, limit=40427 [ 812.049613][ T8909] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 812.338618][ T8909] usb 6-1: Using ep0 maxpacket: 8 [ 812.474795][ T8909] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 812.490298][ T8909] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 812.533491][ T8909] usb 6-1: config 0 has no interface number 0 [ 812.553738][ T8909] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 812.584325][ T8909] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 812.622092][ T8909] usb 6-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 812.667773][T13058] loop2: detected capacity change from 0 to 65536 [ 812.854123][T13058] XFS (loop2): Mounting V5 Filesystem [ 812.860432][ T8909] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 812.885434][ T8909] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.929070][ T8909] usb 6-1: Product: syz [ 812.938638][ T8909] usb 6-1: Manufacturer: syz [ 812.943332][ T8909] usb 6-1: SerialNumber: syz [ 812.962485][ T8909] usb 6-1: config 0 descriptor?? [ 812.978843][T13061] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 813.013496][T13058] XFS (loop2): Ending clean mount [ 813.020290][T13058] XFS (loop2): Quotacheck needed: Please wait. [ 813.084122][T13058] XFS (loop2): Quotacheck: Done. [ 813.206360][T13061] udc-core: couldn't find an available UDC or it's busy [ 813.220781][T13061] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 813.239368][ T8909] usb 6-1: NFC: intf ffff888060540000 id ffffffff8cb52f00 [ 813.248479][ T9096] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 813.498522][ T9096] usb 1-1: Using ep0 maxpacket: 8 [ 813.509118][ T8909] usb 6-1: USB disconnect, device number 18 [ 813.618604][ T9096] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 813.628527][ T9096] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 813.638774][ T9096] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 813.664083][ T9096] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 813.684321][ T9096] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 813.710741][ T9096] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 813.729186][ T9096] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 814.218585][ T9096] usb 1-1: usb_control_msg returned -71 [ 814.224386][ T9096] usbtmc 1-1:16.0: can't read capabilities [ 814.299501][ T9096] usb 1-1: USB disconnect, device number 16 [ 814.561373][T13102] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 815.350455][ T4197] XFS (loop2): Unmounting Filesystem [ 816.510367][T13116] loop1: detected capacity change from 0 to 65536 [ 816.663364][T13116] XFS (loop1): Mounting V5 Filesystem [ 816.721123][T13116] XFS (loop1): Ending clean mount [ 816.741786][T13116] XFS (loop1): Quotacheck needed: Please wait. [ 816.830292][T13116] XFS (loop1): Quotacheck: Done. [ 818.032796][T13164] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 818.057203][T13164] pit: kvm: requested 171809 ns i8254 timer period limited to 200000 ns [ 818.078950][T13164] pit: kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 818.154465][T13171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2264'. [ 818.170906][ T4188] XFS (loop1): Unmounting Filesystem [ 819.246580][T13168] loop3: detected capacity change from 0 to 65536 [ 819.414433][T13168] XFS (loop3): Mounting V5 Filesystem [ 819.593737][T13168] XFS (loop3): Ending clean mount [ 819.680268][T13168] XFS (loop3): Quotacheck needed: Please wait. [ 819.806089][T13206] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 819.809414][T13168] XFS (loop3): Quotacheck: Done. [ 820.815426][ T4194] XFS (loop3): Unmounting Filesystem [ 822.655799][T13208] loop2: detected capacity change from 0 to 65536 [ 823.181265][T13248] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 824.265809][T13244] loop0: detected capacity change from 0 to 65536 [ 824.461679][T13244] XFS (loop0): Mounting V5 Filesystem [ 824.603112][T13244] XFS (loop0): Ending clean mount [ 824.609784][T13244] XFS (loop0): Quotacheck needed: Please wait. [ 824.697631][T13244] XFS (loop0): Quotacheck: Done. [ 825.210904][T13288] loop3: detected capacity change from 0 to 40427 [ 825.246781][T13290] loop5: detected capacity change from 0 to 256 [ 825.315144][T13288] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 825.322931][T13288] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 825.339118][T13288] F2FS-fs (loop3): invalid crc value [ 825.373156][T13288] F2FS-fs (loop3): Found nat_bits in checkpoint [ 825.412150][T13290] FAT-fs (loop5): Directory bread(block 64) failed [ 825.419664][T13288] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 825.427003][T13288] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 825.470781][T13290] FAT-fs (loop5): Directory bread(block 65) failed [ 825.486218][T13290] FAT-fs (loop5): Directory bread(block 66) failed [ 825.521627][T13290] FAT-fs (loop5): Directory bread(block 67) failed [ 825.578577][T13290] FAT-fs (loop5): Directory bread(block 68) failed [ 825.585138][T13290] FAT-fs (loop5): Directory bread(block 69) failed [ 825.718576][T13290] FAT-fs (loop5): Directory bread(block 70) failed [ 825.725489][T13290] FAT-fs (loop5): Directory bread(block 71) failed [ 825.732896][T13290] FAT-fs (loop5): Directory bread(block 72) failed [ 825.739825][T13290] FAT-fs (loop5): Directory bread(block 73) failed [ 825.918696][ T25] audit: type=1800 audit(1779446480.569:11): pid=13307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2294" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 826.525002][T13313] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 827.348221][ T4189] XFS (loop0): Unmounting Filesystem [ 827.524441][ T4282] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 827.692590][ T4410] attempt to access beyond end of device [ 827.692590][ T4410] loop3: rw=1, want=80768, limit=40427 [ 827.781373][ T4282] usb 2-1: Using ep0 maxpacket: 32 [ 827.898843][ T4282] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 827.914481][ T4282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 827.947856][ T4282] usb 2-1: config 0 descriptor?? [ 828.020097][ T4282] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 828.729839][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2307'. [ 828.739873][T13340] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2307'. [ 829.024300][T13342] loop5: detected capacity change from 0 to 40427 [ 829.120824][T13342] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 829.128790][T13342] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 829.138756][T13342] F2FS-fs (loop5): invalid crc value [ 829.179323][T13342] F2FS-fs (loop5): Found nat_bits in checkpoint [ 829.205084][T13342] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 829.212448][T13342] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 829.835577][T13359] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 829.855683][ T25] audit: type=1800 audit(1779446484.499:12): pid=13364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2308" name="file1" dev="loop5" ino=10 res=0 errno=0 [ 830.068539][ T4282] gspca_vc032x: reg_r err -32 [ 830.073248][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.089791][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.096978][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.148570][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.154377][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.174410][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.185138][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.214496][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.223611][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.254354][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.265043][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.294391][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.299994][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.305290][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.326805][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.346652][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.364833][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.381527][ T4282] gspca_vc032x: I2c Bus Busy Wait 00 [ 830.397027][ T4282] gspca_vc032x: Unknown sensor... [ 830.414659][ T4282] vc032x: probe of 2-1:0.0 failed with error -22 [ 831.221831][ T1107] usb 2-1: USB disconnect, device number 17 [ 831.330487][T13380] loop3: detected capacity change from 0 to 8 [ 832.453760][ T7448] attempt to access beyond end of device [ 832.453760][ T7448] loop5: rw=1, want=79936, limit=40427 [ 832.625466][ T7448] attempt to access beyond end of device [ 832.625466][ T7448] loop5: rw=1, want=81648, limit=40427 [ 833.548586][ T4231] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 833.798538][ T4231] usb 4-1: Using ep0 maxpacket: 32 [ 833.954977][ T4231] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 833.964395][ T4231] usb 4-1: config 0 has no interface number 0 [ 834.158823][ T4231] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 834.183216][ T4231] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.218640][ T4231] usb 4-1: Product: syz [ 834.226856][ T4231] usb 4-1: Manufacturer: syz [ 834.266838][ T4231] usb 4-1: SerialNumber: syz [ 834.354346][ T4231] usb 4-1: config 0 descriptor?? [ 834.460747][T13423] loop5: detected capacity change from 0 to 8 [ 836.060074][ T4231] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 836.069020][ T4231] usb 4-1: selecting invalid altsetting 1 [ 836.075118][ T4231] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 836.086222][ T4231] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 836.096758][ T4231] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 836.332643][ T4231] usb 4-1: media controller created [ 836.359906][ T4231] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 836.418494][ T4231] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 836.425520][ T4231] zl10353_read_register: readreg error (reg=127, ret==-71) [ 836.468493][ T4231] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 836.640136][ T4231] usb 4-1: USB disconnect, device number 15 [ 837.681392][T13432] loop3: detected capacity change from 0 to 65536 [ 837.738633][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 837.756233][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2337'. [ 837.939880][T13432] XFS (loop3): Mounting V5 Filesystem [ 838.034494][T13432] XFS (loop3): Ending clean mount [ 838.047539][T13432] XFS (loop3): Quotacheck needed: Please wait. [ 838.107701][T13432] XFS (loop3): Quotacheck: Done. [ 838.228561][ T9094] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 838.488416][ T9094] usb 1-1: Using ep0 maxpacket: 32 [ 839.268488][ T9094] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 839.276512][ T9094] usb 1-1: config 0 has no interface number 0 [ 839.284923][ T4194] XFS (loop3): Unmounting Filesystem [ 839.449166][ T9094] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 839.465360][ T9094] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.493188][ T9094] usb 1-1: Product: syz [ 839.497642][ T9094] usb 1-1: Manufacturer: syz [ 839.503646][ T9094] usb 1-1: SerialNumber: syz [ 839.566516][ T9094] usb 1-1: config 0 descriptor?? [ 839.645522][ T9094] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 839.667735][ T9094] usb 1-1: selecting invalid altsetting 1 [ 839.707523][ T9094] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 839.754163][ T9094] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 839.810217][ T9094] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 839.819614][ T9094] usb 1-1: media controller created [ 839.846336][ T9094] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 839.968499][ T9094] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 839.975492][ T9094] zl10353_read_register: readreg error (reg=127, ret==-71) [ 840.018497][ T9094] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 840.155746][ T9094] usb 1-1: USB disconnect, device number 17 [ 841.178518][ T4231] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 841.438520][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 841.558811][ T4231] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 841.577017][ T4231] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 841.628698][ T4231] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 841.684605][ T4231] usb 3-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 841.742499][ T4231] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 841.784336][ T4231] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 841.820361][ T4231] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.892182][ T4231] usbtmc 3-1:16.0: bulk endpoints not found [ 842.105862][T13514] loop1: detected capacity change from 0 to 65536 [ 842.278184][T13530] loop0: detected capacity change from 0 to 65536 [ 842.376355][T13514] XFS (loop1): Mounting V5 Filesystem [ 842.378298][T13526] loop3: detected capacity change from 0 to 65536 [ 842.427696][T13530] XFS (loop0): Mounting V5 Filesystem [ 842.442913][T13514] XFS (loop1): Ending clean mount [ 842.453969][T13514] XFS (loop1): Quotacheck needed: Please wait. [ 842.486968][T13514] XFS (loop1): Quotacheck: Done. [ 842.532179][T13530] XFS (loop0): Ending clean mount [ 842.540135][T13530] XFS (loop0): Quotacheck needed: Please wait. [ 842.563284][T13526] XFS (loop3): Mounting V5 Filesystem [ 842.620514][T13530] XFS (loop0): Quotacheck: Done. [ 842.757158][T13526] XFS (loop3): Ending clean mount [ 842.763995][T13526] XFS (loop3): Quotacheck needed: Please wait. [ 845.877255][T13526] XFS (loop3): Quotacheck: Done. [ 845.878263][ T4282] usb 3-1: USB disconnect, device number 7 [ 845.981734][ T4188] XFS (loop1): Unmounting Filesystem [ 846.001129][ T4194] XFS (loop3): Unmounting Filesystem [ 846.008129][ T4189] XFS (loop0): Unmounting Filesystem [ 846.838636][ T4282] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 847.358517][ T4282] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 847.388603][ T4282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.396630][ T4282] usb 6-1: Product: syz [ 847.408417][ T4282] usb 6-1: Manufacturer: syz [ 847.413046][ T4282] usb 6-1: SerialNumber: syz [ 847.918666][ T4282] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 848.066869][T13610] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 849.318584][ T4282] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000404. ret = -71 [ 849.340602][ T4282] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 849.356193][ T4282] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 849.373830][ T4282] lan78xx: probe of 6-1:1.0 failed with error -71 [ 849.413126][ T4282] usb 6-1: USB disconnect, device number 19 [ 849.870521][T13659] loop1: detected capacity change from 0 to 256 [ 849.984925][T13659] FAT-fs (loop1): Directory bread(block 64) failed [ 850.000933][T13659] FAT-fs (loop1): Directory bread(block 65) failed [ 850.015643][T13659] FAT-fs (loop1): Directory bread(block 66) failed [ 850.035687][T13659] FAT-fs (loop1): Directory bread(block 67) failed [ 850.050365][T13659] FAT-fs (loop1): Directory bread(block 68) failed [ 850.063869][T13659] FAT-fs (loop1): Directory bread(block 69) failed [ 850.079727][T13659] FAT-fs (loop1): Directory bread(block 70) failed [ 850.095430][T13659] FAT-fs (loop1): Directory bread(block 71) failed [ 850.112071][T13659] FAT-fs (loop1): Directory bread(block 72) failed [ 850.125565][T13659] FAT-fs (loop1): Directory bread(block 73) failed [ 851.985518][T13713] loop5: detected capacity change from 0 to 8 [ 854.220257][ T4282] Bluetooth: hci4: command 0x0405 tx timeout [ 855.618599][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 855.645394][T13748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2414'. [ 856.151494][T13760] loop1: detected capacity change from 0 to 256 [ 856.258926][T13760] FAT-fs (loop1): Directory bread(block 64) failed [ 856.279712][T13760] FAT-fs (loop1): Directory bread(block 65) failed [ 856.296553][T13760] FAT-fs (loop1): Directory bread(block 66) failed [ 856.324607][T13760] FAT-fs (loop1): Directory bread(block 67) failed [ 856.346963][T13760] FAT-fs (loop1): Directory bread(block 68) failed [ 856.375100][T13760] FAT-fs (loop1): Directory bread(block 69) failed [ 856.403584][T13760] FAT-fs (loop1): Directory bread(block 70) failed [ 856.431572][T13760] FAT-fs (loop1): Directory bread(block 71) failed [ 856.460047][T13760] FAT-fs (loop1): Directory bread(block 72) failed [ 856.485721][T13760] FAT-fs (loop1): Directory bread(block 73) failed [ 857.020771][T13775] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 857.266469][T13780] pit: kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 857.347962][T13780] pit: kvm: requested 174323 ns i8254 timer period limited to 200000 ns [ 857.389659][T13780] pit: kvm: requested 178514 ns i8254 timer period limited to 200000 ns [ 857.398198][T13780] pit: kvm: requested 82133 ns i8254 timer period limited to 200000 ns [ 857.502892][T13780] pit: kvm: requested 66209 ns i8254 timer period limited to 200000 ns [ 857.536738][T13780] pit: kvm: requested 63695 ns i8254 timer period limited to 200000 ns [ 857.584051][T13780] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 858.891667][T13823] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 858.958758][ T9096] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 859.348545][ T1107] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 859.410326][T13839] overlayfs: failed to resolve './bus': -2 [ 859.853363][ T4282] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 859.988538][ T1107] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 859.997603][ T1107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.006055][ T1107] usb 3-1: Product: syz [ 860.010485][ T1107] usb 3-1: Manufacturer: syz [ 860.015230][ T1107] usb 3-1: SerialNumber: syz [ 860.028845][ T9096] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 860.037914][ T9096] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.058515][ T9096] usb 2-1: Product: syz [ 860.062696][ T9096] usb 2-1: Manufacturer: syz [ 860.067362][ T9096] usb 2-1: SerialNumber: syz [ 860.133000][ T4282] usb 6-1: Using ep0 maxpacket: 8 [ 860.278552][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 860.278619][ T4282] usb 6-1: config 0 has an invalid interface number: 122 but max is 0 [ 860.305295][ T4282] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 860.315751][ T4282] usb 6-1: config 0 has no interface number 0 [ 860.328308][ T4282] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 860.328718][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 860.353029][ T4282] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 860.363596][ T9096] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 860.381598][ T4282] usb 6-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 860.395296][ T4282] usb 6-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 860.408590][ T4282] usb 6-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 860.438662][ T9096] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 860.598712][ T4282] usb 6-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 860.613484][ T4282] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.638182][ T4282] usb 6-1: Product: syz [ 860.652486][ T4282] usb 6-1: Manufacturer: syz [ 860.662969][ T4282] usb 6-1: SerialNumber: syz [ 860.680142][ T4282] usb 6-1: config 0 descriptor?? [ 860.709526][T13836] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 860.935181][T13836] udc-core: couldn't find an available UDC or it's busy [ 860.942352][ T9096] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 860.968426][ T9096] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 860.977844][T13836] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 860.996223][ T9096] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 861.011468][ T9096] lan78xx: probe of 2-1:1.0 failed with error -32 [ 861.039139][ T4282] usb 6-1: NFC: intf ffff8880624c2000 id ffffffff8cb52f00 [ 861.064590][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 861.108569][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 861.118054][ T1107] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 861.120545][ T4282] nfcmrvl 6-1:0.122: NFC: registered with nci successfully [ 861.136614][ T1107] lan78xx: probe of 3-1:1.0 failed with error -32 [ 861.147134][ T4282] usb 6-1: USB disconnect, device number 20 [ 861.155174][ T4282] usb 6-1: NFC: intf ffff8880624c2000 [ 861.674292][T13878] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 861.688604][ T4282] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 861.948620][ T4282] usb 4-1: Using ep0 maxpacket: 8 [ 861.961293][T13883] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 861.979391][ T1107] usb 2-1: USB disconnect, device number 18 [ 862.099651][ T4282] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 862.134983][ T4282] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 862.175792][ T4282] usb 4-1: config 0 has no interface number 0 [ 862.203393][ T4282] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 862.259951][ T4282] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 862.279291][ T4282] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 862.360070][T13894] overlayfs: failed to resolve './bus': -2 [ 863.025261][ T4282] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0 [ 863.035572][ T4282] usb 4-1: config 0 interface 122 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 8 [ 863.147140][ T4236] usb 3-1: USB disconnect, device number 8 [ 863.228835][ T4282] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 863.237910][ T4282] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.261752][ T4282] usb 4-1: Product: syz [ 863.265945][ T4282] usb 4-1: Manufacturer: syz [ 863.281121][ T4282] usb 4-1: SerialNumber: syz [ 863.306283][ T4282] usb 4-1: config 0 descriptor?? [ 863.348975][T13875] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 863.584726][T13875] udc-core: couldn't find an available UDC or it's busy [ 863.602999][T13875] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 863.649177][ T4282] usb 4-1: NFC: intf ffff8880784f4000 id ffffffff8cb52f00 [ 863.705831][ T4282] nfcmrvl 4-1:0.122: NFC: registered with nci successfully [ 863.734550][ T4282] usb 4-1: USB disconnect, device number 16 [ 863.762505][ T4282] usb 4-1: NFC: intf ffff8880784f4000 [ 864.348489][ T4282] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 864.988916][ T4282] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 865.008201][ T4282] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.031763][ T4282] usb 1-1: Product: syz [ 865.035981][ T4282] usb 1-1: Manufacturer: syz [ 865.058427][ T4282] usb 1-1: SerialNumber: syz [ 865.338587][ T4282] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 865.460377][T13940] overlayfs: failed to resolve './bus': -2 [ 865.906627][ T4282] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 866.329914][T13933] loop5: detected capacity change from 0 to 65536 [ 866.438837][ T4282] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -32 [ 866.558557][T13933] XFS (loop5): Mounting V5 Filesystem [ 866.562834][ T4282] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 866.610888][ T4282] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 866.643748][ T4282] lan78xx: probe of 1-1:1.0 failed with error -32 [ 866.684627][T13933] XFS (loop5): Ending clean mount [ 866.700360][T13933] XFS (loop5): Quotacheck needed: Please wait. [ 866.755957][T13933] XFS (loop5): Quotacheck: Done. [ 868.275452][ T4231] usb 1-1: USB disconnect, device number 18 [ 869.870373][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.876688][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.311473][ T6584] XFS (loop5): Unmounting Filesystem [ 871.904604][T14073] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2499'. [ 871.950552][T14073] IPv6: NLM_F_CREATE should be specified when creating new route [ 872.064940][T14078] loop3: detected capacity change from 0 to 256 [ 872.148643][T14078] FAT-fs (loop3): Directory bread(block 64) failed [ 872.155196][T14078] FAT-fs (loop3): Directory bread(block 65) failed [ 872.182246][T14078] FAT-fs (loop3): Directory bread(block 66) failed [ 872.207493][T14078] FAT-fs (loop3): Directory bread(block 67) failed [ 872.228512][T14078] FAT-fs (loop3): Directory bread(block 68) failed [ 872.235093][T14078] FAT-fs (loop3): Directory bread(block 69) failed [ 872.261924][T14078] FAT-fs (loop3): Directory bread(block 70) failed [ 872.278429][T14078] FAT-fs (loop3): Directory bread(block 71) failed [ 872.307605][T14078] FAT-fs (loop3): Directory bread(block 72) failed [ 872.325628][T14078] FAT-fs (loop3): Directory bread(block 73) failed [ 874.608283][T14115] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2513'. [ 874.825321][T14130] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 874.974340][T14136] device batadv_slave_0 entered promiscuous mode [ 874.984176][T14136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 875.005292][T14136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.070599][T14136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.101846][T14131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.143177][T14135] device batadv_slave_0 left promiscuous mode [ 875.659460][T14156] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2532'. [ 875.699400][T14156] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 875.801622][T14164] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2535'. [ 875.985708][T14173] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2538'. [ 876.105323][T14179] device ip6gre1 entered promiscuous mode [ 877.001903][T14232] device syzkaller0 entered promiscuous mode [ 877.400349][T14254] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2568'. [ 878.155002][T14284] device syzkaller0 entered promiscuous mode [ 878.274538][T14288] [ 878.276897][T14288] ============================= [ 878.288480][T14288] WARNING: suspicious RCU usage [ 878.299017][T14288] syzkaller #0 Not tainted [ 878.303438][T14288] ----------------------------- [ 878.319862][T14288] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 878.338541][T14288] [ 878.338541][T14288] other info that might help us debug this: [ 878.338541][T14288] [ 878.358469][T14288] [ 878.358469][T14288] rcu_scheduler_active = 2, debug_locks = 1 [ 878.387696][T14288] 1 lock held by syz.1.2582/14288: [ 878.398588][T14288] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 878.429158][T14288] [ 878.429158][T14288] stack backtrace: [ 878.439429][T14288] CPU: 0 PID: 14288 Comm: syz.1.2582 Not tainted syzkaller #0 [ 878.446907][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 878.456972][T14288] Call Trace: [ 878.460318][T14288] [ 878.463343][T14288] dump_stack_lvl+0x188/0x250 [ 878.468093][T14288] ? load_image+0x400/0x400 [ 878.472623][T14288] ? show_regs_print_info+0x20/0x20 [ 878.477839][T14288] ? lockdep_rcu_suspicious+0x110/0x180 [ 878.483389][T14288] ? local_bh_enable+0x20/0x20 [ 878.488164][T14288] rhltable_lookup+0x7a9/0x7c0 [ 878.492937][T14288] ? local_bh_enable+0x20/0x20 [ 878.497713][T14288] ? mr_mfc_find_parent+0x190/0x190 [ 878.502916][T14288] ? mark_lock+0x94/0x320 [ 878.507281][T14288] ? local_bh_enable+0x20/0x20 [ 878.512057][T14288] ? mark_lock+0x94/0x320 [ 878.516395][T14288] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 878.522447][T14288] ? lock_chain_count+0x20/0x20 [ 878.527309][T14288] mr_mfc_find_any_parent+0xb6/0x1e0 [ 878.532619][T14288] ? local_bh_enable+0x20/0x20 [ 878.537401][T14288] ip_mr_forward+0x24c/0xf90 [ 878.542015][T14288] ipmr_mfc_add+0x23cc/0x2d40 [ 878.546716][T14288] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 878.551667][T14288] ? __lock_acquire+0x7d10/0x7d10 [ 878.556709][T14288] ? mark_lock+0x94/0x320 [ 878.561060][T14288] ip_mroute_setsockopt+0xeaf/0x1250 [ 878.566365][T14288] ? ipmr_rule_default+0x70/0x70 [ 878.571323][T14288] ? do_futex+0xd73/0x12b0 [ 878.575828][T14288] ? __might_sleep+0xf0/0xf0 [ 878.580468][T14288] ip_setsockopt+0x568/0x3130 [ 878.585179][T14288] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 878.590554][T14288] ? aa_sk_perm+0x7dc/0x910 [ 878.595118][T14288] ? aa_af_perm+0x340/0x340 [ 878.599631][T14288] ? aa_sock_opt_perm+0x74/0x100 [ 878.604624][T14288] ? sock_common_setsockopt+0x32/0xb0 [ 878.610048][T14288] ? raw_setsockopt+0xc5/0x180 [ 878.614841][T14288] ? sock_common_recvmsg+0x1c0/0x1c0 [ 878.620134][T14288] __sys_setsockopt+0x2bf/0x3d0 [ 878.625053][T14288] __x64_sys_setsockopt+0xb1/0xc0 [ 878.630090][T14288] do_syscall_64+0x4c/0xa0 [ 878.634529][T14288] ? clear_bhb_loop+0x30/0x80 [ 878.639281][T14288] ? clear_bhb_loop+0x30/0x80 [ 878.643966][T14288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 878.649872][T14288] RIP: 0033:0x7fa9844afe59 [ 878.654335][T14288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 878.673983][T14288] RSP: 002b:00007fa982709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 878.682455][T14288] RAX: ffffffffffffffda RBX: 00007fa984728fa0 RCX: 00007fa9844afe59 [ 878.690434][T14288] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 878.698408][T14288] RBP: 00007fa984545d6f R08: 000000000000003c R09: 0000000000000000 [ 878.706381][T14288] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 878.714352][T14288] R13: 00007fa984729038 R14: 00007fa984728fa0 R15: 00007ffc47fa8168 [ 878.722343][T14288] [ 879.014893][T14288] [ 879.017353][T14288] ============================= [ 879.022690][T14288] WARNING: suspicious RCU usage [ 879.027651][T14288] syzkaller #0 Not tainted [ 879.032485][T14288] ----------------------------- [ 879.037516][T14288] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 879.046369][T14288] [ 879.046369][T14288] other info that might help us debug this: [ 879.046369][T14288] [ 879.058105][T14288] [ 879.058105][T14288] rcu_scheduler_active = 2, debug_locks = 1 [ 879.073363][T14288] 1 lock held by syz.1.2582/14288: [ 879.079120][T14288] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 879.090766][T14288] [ 879.090766][T14288] stack backtrace: [ 879.096735][T14288] CPU: 1 PID: 14288 Comm: syz.1.2582 Not tainted syzkaller #0 [ 879.104194][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 879.114247][T14288] Call Trace: [ 879.117531][T14288] [ 879.120462][T14288] dump_stack_lvl+0x188/0x250 [ 879.125148][T14288] ? load_image+0x400/0x400 [ 879.129651][T14288] ? show_regs_print_info+0x20/0x20 [ 879.134862][T14288] ? lockdep_rcu_suspicious+0x110/0x180 [ 879.140407][T14288] ? local_bh_enable+0x20/0x20 [ 879.145190][T14288] rhltable_lookup+0x52a/0x7c0 [ 879.149964][T14288] ? local_bh_enable+0x20/0x20 [ 879.154740][T14288] ? mr_mfc_find_parent+0x190/0x190 [ 879.159954][T14288] ? mark_lock+0x94/0x320 [ 879.164301][T14288] ? local_bh_enable+0x20/0x20 [ 879.169071][T14288] ? mark_lock+0x94/0x320 [ 879.173408][T14288] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 879.179397][T14288] ? lock_chain_count+0x20/0x20 [ 879.184256][T14288] mr_mfc_find_any_parent+0xb6/0x1e0 [ 879.189576][T14288] ? local_bh_enable+0x20/0x20 [ 879.194353][T14288] ip_mr_forward+0x24c/0xf90 [ 879.198971][T14288] ipmr_mfc_add+0x23cc/0x2d40 [ 879.203674][T14288] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 879.208619][T14288] ? __lock_acquire+0x7d10/0x7d10 [ 879.213653][T14288] ? mark_lock+0x94/0x320 [ 879.218001][T14288] ip_mroute_setsockopt+0xeaf/0x1250 [ 879.223301][T14288] ? ipmr_rule_default+0x70/0x70 [ 879.228253][T14288] ? do_futex+0xd73/0x12b0 [ 879.232677][T14288] ? __might_sleep+0xf0/0xf0 [ 879.237272][T14288] ip_setsockopt+0x568/0x3130 [ 879.241965][T14288] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 879.247342][T14288] ? aa_sk_perm+0x7dc/0x910 [ 879.251856][T14288] ? aa_af_perm+0x340/0x340 [ 879.256371][T14288] ? aa_sock_opt_perm+0x74/0x100 [ 879.261316][T14288] ? sock_common_setsockopt+0x32/0xb0 [ 879.266696][T14288] ? raw_setsockopt+0xc5/0x180 [ 879.271465][T14288] ? sock_common_recvmsg+0x1c0/0x1c0 [ 879.276762][T14288] __sys_setsockopt+0x2bf/0x3d0 [ 879.281622][T14288] __x64_sys_setsockopt+0xb1/0xc0 [ 879.286658][T14288] do_syscall_64+0x4c/0xa0 [ 879.291079][T14288] ? clear_bhb_loop+0x30/0x80 [ 879.295758][T14288] ? clear_bhb_loop+0x30/0x80 [ 879.300442][T14288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 879.306345][T14288] RIP: 0033:0x7fa9844afe59 [ 879.310763][T14288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.330372][T14288] RSP: 002b:00007fa982709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 879.338798][T14288] RAX: ffffffffffffffda RBX: 00007fa984728fa0 RCX: 00007fa9844afe59 [ 879.346770][T14288] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 879.354742][T14288] RBP: 00007fa984545d6f R08: 000000000000003c R09: 0000000000000000 [ 879.362724][T14288] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 879.370697][T14288] R13: 00007fa984729038 R14: 00007fa984728fa0 R15: 00007ffc47fa8168 [ 879.378684][T14288] [ 879.401182][T14288] [ 879.405297][T14288] ============================= [ 879.410521][T14288] WARNING: suspicious RCU usage [ 879.415541][T14288] syzkaller #0 Not tainted [ 879.420357][T14288] ----------------------------- [ 879.425280][T14288] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 879.434278][T14288] [ 879.434278][T14288] other info that might help us debug this: [ 879.434278][T14288] [ 879.445048][T14288] [ 879.445048][T14288] rcu_scheduler_active = 2, debug_locks = 1 [ 879.453503][T14288] 1 lock held by syz.1.2582/14288: [ 879.459022][T14288] #0: ffffffff8d43dbc8 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 879.469350][T14288] [ 879.469350][T14288] stack backtrace: [ 879.475329][T14288] CPU: 1 PID: 14288 Comm: syz.1.2582 Not tainted syzkaller #0 [ 879.482793][T14288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 879.492848][T14288] Call Trace: [ 879.496126][T14288] [ 879.499052][T14288] dump_stack_lvl+0x188/0x250 [ 879.503732][T14288] ? load_image+0x400/0x400 [ 879.508240][T14288] ? show_regs_print_info+0x20/0x20 [ 879.513449][T14288] ? lockdep_rcu_suspicious+0x110/0x180 [ 879.518998][T14288] ? local_bh_enable+0x20/0x20 [ 879.523771][T14288] rhltable_lookup+0x61e/0x7c0 [ 879.528543][T14288] ? local_bh_enable+0x20/0x20 [ 879.533318][T14288] ? mr_mfc_find_parent+0x190/0x190 [ 879.538520][T14288] ? mark_lock+0x94/0x320 [ 879.542853][T14288] ? local_bh_enable+0x20/0x20 [ 879.547619][T14288] ? mark_lock+0x94/0x320 [ 879.551953][T14288] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 879.557947][T14288] ? lock_chain_count+0x20/0x20 [ 879.562820][T14288] mr_mfc_find_any_parent+0xb6/0x1e0 [ 879.568123][T14288] ? local_bh_enable+0x20/0x20 [ 879.572898][T14288] ip_mr_forward+0x24c/0xf90 [ 879.577505][T14288] ipmr_mfc_add+0x23cc/0x2d40 [ 879.582204][T14288] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 879.587153][T14288] ? __lock_acquire+0x7d10/0x7d10 [ 879.592187][T14288] ? mark_lock+0x94/0x320 [ 879.596535][T14288] ip_mroute_setsockopt+0xeaf/0x1250 [ 879.601837][T14288] ? ipmr_rule_default+0x70/0x70 [ 879.606787][T14288] ? do_futex+0xd73/0x12b0 [ 879.611211][T14288] ? __might_sleep+0xf0/0xf0 [ 879.615808][T14288] ip_setsockopt+0x568/0x3130 [ 879.620496][T14288] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 879.625870][T14288] ? aa_sk_perm+0x7dc/0x910 [ 879.630380][T14288] ? aa_af_perm+0x340/0x340 [ 879.634897][T14288] ? aa_sock_opt_perm+0x74/0x100 [ 879.639843][T14288] ? sock_common_setsockopt+0x32/0xb0 [ 879.645224][T14288] ? raw_setsockopt+0xc5/0x180 [ 879.649993][T14288] ? sock_common_recvmsg+0x1c0/0x1c0 [ 879.655284][T14288] __sys_setsockopt+0x2bf/0x3d0 [ 879.660169][T14288] __x64_sys_setsockopt+0xb1/0xc0 [ 879.665201][T14288] do_syscall_64+0x4c/0xa0 [ 879.669617][T14288] ? clear_bhb_loop+0x30/0x80 [ 879.674295][T14288] ? clear_bhb_loop+0x30/0x80 [ 879.678974][T14288] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 879.684872][T14288] RIP: 0033:0x7fa9844afe59 [ 879.689287][T14288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 879.708891][T14288] RSP: 002b:00007fa982709028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 879.717310][T14288] RAX: ffffffffffffffda RBX: 00007fa984728fa0 RCX: 00007fa9844afe59 [ 879.725282][T14288] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000007 [ 879.733256][T14288] RBP: 00007fa984545d6f R08: 000000000000003c R09: 0000000000000000 [ 879.741230][T14288] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 879.749203][T14288] R13: 00007fa984729038 R14: 00007fa984728fa0 R15: 00007ffc47fa8168 [ 879.757190][T14288]