last executing test programs: 5m10.408130499s ago: executing program 2 (id=1506): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x82c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_DELAY(r2, 0x80084121, 0x0) 5m8.830189477s ago: executing program 2 (id=1510): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet(0xa, 0x801, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet(0xa, 0x801, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 5m8.726167301s ago: executing program 2 (id=1513): socket$netlink(0x10, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000280), 0x7f, 0x68c02) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x1264, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) 5m7.809079072s ago: executing program 2 (id=1515): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000440)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x10a5840, 0x0) move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r0, 0x0, 0x272) 5m7.703046036s ago: executing program 2 (id=1517): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmmsg(r0, &(0x7f0000002980)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x100, 0x0) write$tun(r1, 0x0, 0xfdef) 5m7.230285116s ago: executing program 2 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r8, 0x607, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, 0x0, 0xa000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 5m6.166976192s ago: executing program 32 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r8, 0x607, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, 0x0, 0xa000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 10.571573325s ago: executing program 5 (id=2518): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000840)={0x0, 0x6, 0x1, '\x00'}, 0x0, 0x0}) 10.396787482s ago: executing program 1 (id=2519): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x591}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 9.346813667s ago: executing program 1 (id=2522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) 9.187330554s ago: executing program 3 (id=2524): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a80000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='pimreg\x00', 0x10) syz_emit_ethernet(0xaf, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x79, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @dev, [{0x0, 0xa, "002b228078c8e10a87cf10a0e37bbe3522e2a0d5812008b645088f2672636368285a5538b713f5ab1d5b71e89a6c3f0890a2bdec87949dbe3e6283e5dee7833bd36cf9eb41d293a9dbc1a8096375d9"}]}}}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x400, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32001200000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r9, 0xffffffffffffffff, 0x17, 0x1, 0xffffffffffffffff, @void, @value, @void, @void, r11}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r12}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r7, r8, 0x34, 0x0, @val=@tcx={@void, @value=r12, @void, @void, r11}}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x2f, 0x2, r0, @void, @value=r0, @void, @void, r11}, 0x20) 8.438713387s ago: executing program 3 (id=2526): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000064000/0x1000)=nil, &(0x7f0000064000/0x2000)=nil], 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) landlock_restrict_self(r0, 0x0) 8.375064609s ago: executing program 4 (id=2527): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000003c0), 0x0) 8.311005272s ago: executing program 3 (id=2529): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) syz_80211_inject_frame(0x0, 0x0, 0x29a) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x1000000}, 0x0) 7.408927601s ago: executing program 4 (id=2530): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) 7.353120383s ago: executing program 5 (id=2531): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000840)={0x0, 0x6}, 0x0, 0x0}) 6.818930616s ago: executing program 3 (id=2532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xfffffffffffffffe}}, 0x18) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_netdev_private(0xffffffffffffffff, 0x8914, &(0x7f0000000000)) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r2, &(0x7f0000000200)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) 6.451097672s ago: executing program 4 (id=2534): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000380)={0x28, 0x0, 0x2710, @hyper}, 0x10) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r4, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) ioctl$USBDEVFS_CLEAR_HALT(r4, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) read$char_usb(r3, &(0x7f0000000000)=""/74, 0x4a) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0x1380, &(0x7f0000003700)=ANY=[]) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 5.453582315s ago: executing program 0 (id=2536): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, 0x0, 0x80) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @local}, 0x10) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x8) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) r2 = open(&(0x7f0000000480)='./file0\x00', 0x0, 0x718bb647156ec3b7) mknodat$loop(r2, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) chdir(&(0x7f0000000140)='./bus\x00') linkat(r2, &(0x7f0000000040)='./file1\x00', r2, &(0x7f0000000180)='./bus\x00', 0x0) link(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)='./file0\x00') open(&(0x7f0000000440)='./file0\x00', 0xe8142, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f00000003c0), 0x0) 4.497374876s ago: executing program 0 (id=2537): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000300)=""/251) 4.285093105s ago: executing program 5 (id=2538): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) timer_create(0x2, &(0x7f0000000100)={0x0, 0x2f}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a) splice(r2, 0x0, r1, 0x0, 0x18, 0x7) 3.362900845s ago: executing program 0 (id=2539): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x28) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0xb) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'batadv_slave_1\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x6, 0x3fd2, 0x8, "26d151361ddc"}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2000c0, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000380)={0x3, 0x0, [{0xb27, 0x0, 0x4e7}, {0x642, 0x0, 0x1}, {0x28c, 0x0, 0x100000000}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 3.175457934s ago: executing program 5 (id=2540): r0 = landlock_create_ruleset(&(0x7f0000000080)={0x8601, 0x2}, 0x18, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) migrate_pages(0x0, 0x4, 0x0, &(0x7f0000000300)=0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages(r2, 0x2, &(0x7f0000000280)=[&(0x7f0000064000/0x1000)=nil, &(0x7f0000064000/0x2000)=nil], 0x0, 0x0, 0x0) syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000540)={{0x3, @bcast, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r3 = memfd_secret(0x0) futimesat(r3, 0x0, 0x0) connect$ax25(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}, 0x48) landlock_restrict_self(r0, 0x0) 3.082121707s ago: executing program 5 (id=2541): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000840)={0x0, 0x6, 0x1, '\x00'}, 0x0, 0x0}) 2.909110355s ago: executing program 1 (id=2542): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xa8}, 0x1, 0x0, 0x0, 0x4040895}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5}, 0x0, &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$can_bcm(0x1d, 0x2, 0x2) syz_80211_inject_frame(0x0, 0x0, 0x29a) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x1000000}, 0x0) 2.067620241s ago: executing program 0 (id=2543): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x4, 0xffffff00, 0x5, 0xc31, 0x7}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e105", 0x13}], 0x1}, 0x4) 1.955587696s ago: executing program 4 (id=2544): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000200)='./file1\x00', 0x2) syz_open_dev$sndpcmc(0x0, 0x1, 0x0) fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='projid_map\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) read$FUSE(r0, &(0x7f0000006280)={0x2020}, 0x2020) 1.186357219s ago: executing program 1 (id=2545): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'rr\x00', 0x3d, 0xff, 0x7}, 0x2c) socket$rds(0x15, 0x5, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x40) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, &(0x7f0000000400)) sendmsg$NFNL_MSG_CTHELPER_DEL(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x4) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="28000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="000000fd0001040008001b"], 0x28}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) accept4$llc(r0, &(0x7f00000000c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast}, &(0x7f0000000100)=0x10, 0x80800) 1.146986481s ago: executing program 3 (id=2546): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=']) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x591}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 1.129245851s ago: executing program 0 (id=2547): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b7040000000000008500000033000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$inet(0xa, 0x801, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$inet(0xa, 0x801, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r4}, &(0x7f0000000240), &(0x7f00000003c0)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r2, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 1.078387713s ago: executing program 0 (id=2548): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe400"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000840)={0x0, 0x6}, 0x0, 0x0}) 954.914609ms ago: executing program 1 (id=2549): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a8000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='pimreg\x00', 0x10) syz_emit_ethernet(0xaf, &(0x7f0000000000)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x79, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @dev, [{0x0, 0xa, "002b228078c8e10a87cf10a0e37bbe3522e2a0d5812008b645088f2672636368285a5538b713f5ab1d5b71e89a6c3f0890a2bdec87949dbe3e6283e5dee7833bd36cf9eb41d293a9dbc1a8096375d9"}]}}}}}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0x206, 0x0, 0x0, 0x2, 0x72, 0x400, 0x3, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000080)="170000000200020000ffbe8c5ee1768814002b000303000afdff02a257fc5ad90200bb6a880000d6c9db0000db00000200df01800a0000ebfc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9000000000000000062068f5ee50ce5af9b1c568302ffff02ff0331dd3bab0840024f0298e9e90539062a80e605007f71174ab498a30b3e5a1b47b63a6323ded2aa084cd36276a3afff", 0xb8) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r9 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32001200000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ba30b28e994c1a08d1ca4eb6b8b4889cdd4e786eb807e04eb88b935d785f3d3201c58033"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000340)={@fallback=r10, 0x0, 0x1, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000013c0)={@map=r9, 0xffffffffffffffff, 0x17, 0x1, 0xffffffffffffffff, @void, @value, @void, @void, r11}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r12}, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r7, r8, 0x34, 0x0, @val=@tcx={@void, @value=r12, @void, @void, r11}}, 0x1c) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@ifindex, r0, 0x2f, 0x2, r0, @void, @value=r0, @void, @void, r11}, 0x20) 954.433239ms ago: executing program 4 (id=2550): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil) shmctl$IPC_INFO(r3, 0x3, &(0x7f0000000300)=""/251) 477.192699ms ago: executing program 1 (id=2551): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) clock_gettime(0x0, &(0x7f0000000080)) timer_create(0x2, &(0x7f0000000100)={0x0, 0x2f}, &(0x7f0000000300)) timer_settime(0x0, 0x1, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) pipe2(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x6a) splice(r2, 0x0, r1, 0x0, 0x18, 0x7) 272.821808ms ago: executing program 4 (id=2552): fcntl$lock(0xffffffffffffffff, 0x25, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) mount(0x0, 0x0, &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0x9362, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x591}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_CONTINUE(r5, 0xc020aa07, &(0x7f00000002c0)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}}) getdents64(r4, &(0x7f0000000580)=""/174, 0xff56) 135.727544ms ago: executing program 3 (id=2553): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x28) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00'}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0xb) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={{}, {0x4}}, 0x24, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'batadv_slave_1\x00', &(0x7f0000000400)=@ethtool_wolinfo={0x6, 0x3fd2, 0x8, "26d151361ddc"}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2000c0, 0x0) ioctl$KVM_GET_MSRS_sys(r3, 0xc008ae88, &(0x7f0000000380)={0x3, 0x0, [{0xb27, 0x0, 0x4e7}, {0x642, 0x0, 0x1}, {0x28c, 0x0, 0x100000000}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="780000001a0001002abd7000000000000a"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r5}, 0x10) syz_clone(0x22023500, 0x0, 0x20010, 0x0, 0x0, 0x0) 0s ago: executing program 5 (id=2554): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$unix(0x1, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r5 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r5, &(0x7f0000000200)={0x1d, r4}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYRES64=r3, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0) kernel console output (not intermixed with test programs): r?? [ 331.003022][ T8701] device syzkaller0 entered promiscuous mode [ 331.036363][ T13] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 331.210135][ T4261] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 331.436207][ T13] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 331.446749][ T13] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 331.455927][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.472365][ T13] usb 1-1: config 0 descriptor?? [ 331.518375][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 332.057588][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 332.167400][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 332.291857][ T13] pwc: recv_control_msg error -32 req 02 val 2c00 [ 332.364668][ T8718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1432'. [ 332.500528][ T13] pwc: recv_control_msg error -32 req 04 val 1000 [ 332.835668][ T13] pwc: recv_control_msg error -32 req 04 val 1300 [ 332.901144][ T13] pwc: recv_control_msg error -32 req 04 val 1400 [ 333.079365][ T13] pwc: recv_control_msg error -32 req 02 val 2000 [ 333.135471][ T13] pwc: recv_control_msg error -32 req 02 val 2100 [ 333.201601][ T8731] 9pnet: Insufficient options for proto=fd [ 333.366277][ T4261] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 333.465514][ T4261] usb 5-1: USB disconnect, device number 4 [ 333.837662][ T13] pwc: recv_control_msg error -32 req 04 val 1500 [ 333.904917][ T13] pwc: recv_control_msg error -32 req 02 val 2500 [ 333.944972][ T13] pwc: recv_control_msg error -32 req 02 val 2400 [ 333.996875][ T13] pwc: recv_control_msg error -71 req 02 val 2600 [ 334.024900][ T13] pwc: recv_control_msg error -71 req 02 val 2900 [ 334.044858][ T13] pwc: recv_control_msg error -71 req 02 val 2800 [ 334.064879][ T13] pwc: recv_control_msg error -71 req 04 val 1100 [ 334.084801][ T13] pwc: recv_control_msg error -71 req 04 val 1200 [ 334.107880][ T13] pwc: Registered as video103. [ 334.114087][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 334.154945][ T13] usb 1-1: USB disconnect, device number 8 [ 334.244282][ T8738] device syzkaller0 entered promiscuous mode [ 334.430328][ T4261] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 334.794633][ T4261] usb 2-1: Using ep0 maxpacket: 32 [ 335.250587][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1445'. [ 335.269949][ T4261] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 335.277820][ T8758] loop6: detected capacity change from 0 to 91 [ 335.285636][ T8755] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.293520][ T8755] IPv6: NLM_F_CREATE should be set when creating new route [ 335.304572][ T4261] usb 2-1: config 0 has no interface number 0 [ 335.335642][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 12 prio class 0 [ 335.354612][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 335.366200][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 335.482715][ T4261] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 335.854403][ T4261] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 336.232178][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.386343][ T4261] usb 2-1: Product: syz [ 336.391123][ T4261] usb 2-1: Manufacturer: syz [ 337.171031][ T4261] usb 2-1: SerialNumber: syz [ 337.179292][ T4261] usb 2-1: config 0 descriptor?? [ 337.213512][ T4261] usb 2-1: can't set config #0, error -71 [ 337.234675][ T8773] device syzkaller0 entered promiscuous mode [ 337.247638][ T4261] usb 2-1: USB disconnect, device number 4 [ 337.402187][ T8777] device syzkaller0 entered promiscuous mode [ 337.743696][ T8796] siw: device registration error -23 [ 337.973065][ T4261] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 338.111168][ T8804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1463'. [ 338.229953][ T8813] device syzkaller0 entered promiscuous mode [ 338.252832][ T4261] usb 5-1: Using ep0 maxpacket: 16 [ 338.413315][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.436243][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.447195][ T4261] usb 5-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 338.457311][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.501286][ T4261] usb 5-1: config 0 descriptor?? [ 338.566354][ T8822] siw: device registration error -23 [ 338.770025][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 338.790620][ T8829] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.803731][ T8829] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.820976][ T8829] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.835514][ T8829] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 338.848616][ T8829] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1474'. [ 338.892514][ T4189] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 338.941537][ T8831] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1475'. [ 339.094652][ T4261] input: HID 041e:3100 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:041E:3100.0001/input/input13 [ 339.191542][ T4261] creative-sb0540 0003:041E:3100.0001: input,hidraw0: USB HID v0.00 Device [HID 041e:3100] on usb-dummy_hcd.4-1/input0 [ 339.282690][ T4189] usb 3-1: Using ep0 maxpacket: 32 [ 339.405947][ T7] usb 5-1: USB disconnect, device number 5 [ 339.432667][ T4189] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 339.454241][ T4189] usb 3-1: config 0 has no interface number 0 [ 339.464393][ T4189] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 339.470594][ T8837] fido_id[8837]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 339.673198][ T4189] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 339.685961][ T4189] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.712591][ T4189] usb 3-1: Product: syz [ 339.727115][ T4189] usb 3-1: Manufacturer: syz [ 339.746017][ T4189] usb 3-1: SerialNumber: syz [ 339.762446][ T4189] usb 3-1: config 0 descriptor?? [ 339.816482][ T4189] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 339.985456][ T4189] em28xx 3-1:0.132: Video interface 132 found: [ 340.162295][ T8844] device syzkaller0 entered promiscuous mode [ 340.240528][ T8845] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 340.972473][ T4189] em28xx 3-1:0.132: chip ID is em2710/2820 [ 341.113358][ T8852] siw: device registration error -23 [ 341.282450][ T4189] em28xx 3-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 341.316700][ T4189] em28xx 3-1:0.132: board has no eeprom [ 341.432164][ T4189] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 341.459911][ T4189] em28xx 3-1:0.132: analog set to bulk mode. [ 341.501135][ T4189] usb 3-1: USB disconnect, device number 5 [ 341.540231][ T4189] em28xx 3-1:0.132: Disconnecting em28xx [ 341.569898][ T4246] em28xx 3-1:0.132: Registering V4L2 extension [ 341.642207][ T4261] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 341.710853][ T4246] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 341.723963][ T4246] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 341.734673][ T4246] em28xx 3-1:0.132: No AC97 audio processor [ 341.749860][ T4246] usb 3-1: Decoder not found [ 341.763225][ T4246] em28xx 3-1:0.132: failed to create media graph [ 341.826432][ T8866] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 341.882321][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 341.885585][ T4246] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 342.163856][ T4261] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 342.192277][ T4261] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.202405][ T4261] usb 1-1: Product: syz [ 342.222388][ T4261] usb 1-1: Manufacturer: syz [ 342.232551][ T4261] usb 1-1: SerialNumber: syz [ 342.345631][ T4261] usb 1-1: config 0 descriptor?? [ 342.383149][ T4246] em28xx 3-1:0.132: Remote control support is not available for this card. [ 342.404050][ T4189] em28xx 3-1:0.132: Closing input extension [ 342.922693][ T4261] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -110 [ 342.980477][ T4189] em28xx 3-1:0.132: Freeing device [ 345.394586][ T8895] device syzkaller0 entered promiscuous mode [ 345.405974][ T4246] usb 1-1: USB disconnect, device number 9 [ 348.346150][ T8941] tipc: Enabled bearer , priority 0 [ 348.373826][ T8941] device syzkaller0 entered promiscuous mode [ 348.438306][ T8945] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 349.155595][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1497'. [ 349.811621][ T8961] tipc: Resetting bearer [ 349.839084][ T8961] tipc: Disabling bearer [ 349.948284][ T8965] hub 9-0:1.0: USB hub found [ 349.957200][ T8965] hub 9-0:1.0: 1 port detected [ 350.062446][ T4189] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 350.795992][ T8968] device syzkaller0 entered promiscuous mode [ 351.741058][ T8980] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1514'. [ 351.882411][ T4189] usb 4-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x93, skipping [ 351.916772][ T4189] usb 4-1: config 0 interface 0 has no altsetting 0 [ 352.092439][ T4189] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 352.119047][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 352.136808][ T4189] usb 4-1: Product: syz [ 352.141997][ T4189] usb 4-1: Manufacturer: syz [ 352.150079][ T4189] usb 4-1: SerialNumber: syz [ 352.156530][ T8986] sd 0:0:1:0: device reset [ 352.169347][ T4189] usb 4-1: config 0 descriptor?? [ 352.192574][ T8952] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 352.264052][ T8989] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 352.285577][ T4189] snd-usb-audio: probe of 4-1:0.0 failed with error -22 [ 352.313908][ T4189] usb 4-1: USB disconnect, device number 6 [ 352.348249][ T8990] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 352.498375][ T4268] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.573421][ T8310] udevd[8310]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 354.367325][ T4268] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.534480][ T4268] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.715913][ T9001] lo speed is unknown, defaulting to 1000 [ 355.595317][ T4268] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.732281][ T4232] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 356.106072][ T9018] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1527'. [ 356.140456][ T9001] chnl_net:caif_netlink_parms(): no params data found [ 356.175810][ T4232] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 356.193112][ T4268] tipc: Left network mode [ 356.240658][ T4232] usb 4-1: config 0 interface 0 has no altsetting 0 [ 356.452850][ T4232] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 356.520394][ T4232] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 356.552276][ T4232] usb 4-1: Product: syz [ 356.564863][ T4232] usb 4-1: Manufacturer: syz [ 356.577803][ T4232] usb 4-1: SerialNumber: syz [ 356.597967][ T1111] Bluetooth: hci1: command 0x0409 tx timeout [ 356.709078][ T4232] usb 4-1: config 0 descriptor?? [ 356.876658][ T4232] usb 4-1: selecting invalid altsetting 0 [ 357.238724][ T9001] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.262521][ T9001] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.293611][ T9001] device bridge_slave_0 entered promiscuous mode [ 357.322589][ T4189] usb 4-1: USB disconnect, device number 7 [ 357.377895][ T9001] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.404350][ T9001] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.426993][ T9001] device bridge_slave_1 entered promiscuous mode [ 357.656314][ T9001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.670009][ T9001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.675883][ T9001] team0: Port device team_slave_0 added [ 358.732785][ T4189] Bluetooth: hci1: command 0x041b tx timeout [ 358.772558][ T9001] team0: Port device team_slave_1 added [ 358.927845][ T4339] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 359.672975][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.738678][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.771369][ T9001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.794109][ T4339] usb 4-1: Using ep0 maxpacket: 32 [ 359.943144][ T4339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.957668][ T9001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.968380][ T9001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.002427][ T4339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.017649][ T4339] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 360.028887][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.038340][ T9001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.071904][ T4339] usb 4-1: config 0 descriptor?? [ 360.228521][ T9001] device hsr_slave_0 entered promiscuous mode [ 360.272043][ T9001] device hsr_slave_1 entered promiscuous mode [ 360.368325][ T9001] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.385606][ T9001] Cannot create hsr debugfs directory [ 360.557492][ T9080] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 361.213254][ T7] Bluetooth: hci1: command 0x040f tx timeout [ 361.336152][ T9084] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 361.903613][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 362.011073][ T4268] device hsr_slave_0 left promiscuous mode [ 362.097792][ T4268] device hsr_slave_1 left promiscuous mode [ 362.163918][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.188957][ T4268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.212217][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 362.271056][ T4268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.322439][ T4268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.333747][ T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 362.374518][ T4268] device bridge_slave_1 left promiscuous mode [ 362.415048][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.475933][ T4268] device bridge_slave_0 left promiscuous mode [ 362.519637][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.533189][ T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 362.582191][ T7] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 362.635845][ T7] usb 2-1: Product: syz [ 362.666981][ T7] usb 2-1: Manufacturer: syz [ 362.692656][ T4268] device veth1_macvtap left promiscuous mode [ 362.694189][ T7] usb 2-1: SerialNumber: syz [ 362.746722][ T7] usb 2-1: config 0 descriptor?? [ 362.756743][ T4268] device veth0_macvtap left promiscuous mode [ 362.784021][ T4268] device veth1_vlan left promiscuous mode [ 362.801030][ T4268] device veth0_vlan left promiscuous mode [ 362.802540][ T9090] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 362.863245][ T7] hub 2-1:0.0: bad descriptor, ignoring hub [ 362.870280][ T7] hub: probe of 2-1:0.0 failed with error -5 [ 363.172810][ T4339] usbhid 4-1:0.0: can't add hid device: -71 [ 363.180304][ T4339] usbhid: probe of 4-1:0.0 failed with error -71 [ 363.315430][ T4339] usb 4-1: USB disconnect, device number 8 [ 363.687023][ T4189] Bluetooth: hci1: command 0x0419 tx timeout [ 363.844734][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1545'. [ 364.064943][ T4268] team0 (unregistering): Port device team_slave_1 removed [ 364.085190][ T4268] team0 (unregistering): Port device team_slave_0 removed [ 364.121227][ T4268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.154655][ T4268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.182207][ T4339] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 364.256119][ T4268] bond0 (unregistering): Released all slaves [ 364.444694][ T4339] usb 4-1: Using ep0 maxpacket: 8 [ 364.449273][ T9001] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 364.505111][ T9001] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 364.522977][ T9001] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 364.539552][ T9001] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.572594][ T4339] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 364.607996][ T4339] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 364.646019][ T4339] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.705576][ T4339] usb 4-1: config 0 descriptor?? [ 364.727721][ T13] usb 2-1: USB disconnect, device number 5 [ 364.830344][ T9001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.856007][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 364.890868][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 364.994990][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.073831][ T4339] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 365.110958][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.135100][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.147795][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.160732][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.229117][ T9140] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 365.627052][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.805850][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.897477][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.907472][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.956356][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 366.052211][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 366.092656][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 366.208789][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 366.406182][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 366.535248][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 366.721860][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 366.753819][ T1108] usb 4-1: USB disconnect, device number 9 [ 366.764442][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 366.799399][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 366.816094][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.917937][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 366.930275][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 367.036762][ T9001] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 367.084170][ T9164] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1555'. [ 367.232343][ T1108] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 368.381608][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.390650][ T1108] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.413650][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.427583][ T9001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.441630][ T1108] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 368.473649][ T1108] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.492283][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 368.525159][ T1108] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 368.816940][ T1108] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.828557][ T1108] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.852240][ T1108] usb 4-1: Product: syz [ 368.857745][ T1108] usb 4-1: Manufacturer: syz [ 368.937091][ T9205] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 369.452663][ T4232] Bluetooth: hci5: command 0x1003 tx timeout [ 369.512348][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 369.664972][ T1108] cdc_wdm 4-1:1.0: skipping garbage [ 369.687847][ T1108] cdc_wdm 4-1:1.0: skipping garbage [ 370.258118][ T1108] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 370.316238][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 370.332198][ T1108] cdc_wdm 4-1:1.0: Unknown control protocol [ 370.358783][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 370.370080][ T1108] usb 4-1: USB disconnect, device number 10 [ 370.390884][ T9001] device veth0_vlan entered promiscuous mode [ 370.418322][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 370.439924][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 370.481032][ T9001] device veth1_vlan entered promiscuous mode [ 370.521071][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 370.536760][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 370.573193][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 370.663141][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 370.695212][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 370.881344][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 371.532227][ T4339] Bluetooth: hci5: command 0x1001 tx timeout [ 371.610055][ T4191] Bluetooth: hci5: sending frame failed (-49) [ 371.617775][ T9001] device veth0_macvtap entered promiscuous mode [ 371.704662][ T9001] device veth1_macvtap entered promiscuous mode [ 371.752401][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 371.763829][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 371.793685][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.846378][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.893424][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.935600][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 371.960460][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 371.991448][ T9240] netlink: 45 bytes leftover after parsing attributes in process `syz.3.1567'. [ 372.038157][ T9001] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 372.102158][ T9001] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 372.168324][ T9001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.304982][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 372.411074][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 372.656829][ T9001] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.815773][ T9001] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.000115][ T9001] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.140307][ T9001] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.692674][ T23] Bluetooth: hci5: command 0x1009 tx timeout [ 374.174293][ T9254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.247795][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.283465][ T9269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1573'. [ 374.296118][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.319718][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 374.320366][ T5224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.405068][ T5224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.464619][ T5230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 374.904150][ T9283] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 375.705957][ T9295] device syzkaller0 entered promiscuous mode [ 376.761743][ T9317] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 377.134013][ T9325] siw: device registration error -23 [ 377.251944][ T9324] lo speed is unknown, defaulting to 1000 [ 378.383837][ T9340] device syzkaller0 entered promiscuous mode [ 379.421659][ T9354] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1594'. [ 380.323130][ T9364] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 380.401052][ T9366] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1597'. [ 380.520300][ T9366] netlink: 'syz.4.1597': attribute type 1 has an invalid length. [ 380.993911][ T9374] binder: 9371:9374 unknown command 1074553619 [ 381.048056][ T9374] binder: 9371:9374 ioctl c0306201 200000000040 returned -22 [ 381.063359][ T9377] binder: 9371:9377 unknown command 1074553620 [ 381.080811][ T9377] binder: 9371:9377 ioctl c0306201 200000000640 returned -22 [ 381.614711][ T9394] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 382.182234][ T9267] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 382.229959][ T9390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1604'. [ 382.311860][ T9400] device syzkaller0 entered promiscuous mode [ 382.992537][ T9267] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 383.052610][ T9267] usb 4-1: config 0 has no interface number 0 [ 383.233417][ T9267] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 383.272308][ T9267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.297886][ T9412] device syzkaller0 entered promiscuous mode [ 383.303731][ T9416] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 383.334124][ T9416] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1611'. [ 383.350161][ T9267] usb 4-1: config 0 descriptor?? [ 383.356772][ T9416] netlink: 'syz.0.1611': attribute type 1 has an invalid length. [ 383.405513][ T9267] usb 4-1: selecting invalid altsetting 1 [ 383.437183][ T9267] dvb_ttusb_budget: ttusb_init_controller: error [ 383.458086][ T9267] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 383.615083][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.621544][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.699262][ T9267] DVB: Unable to find symbol cx22700_attach() [ 383.885730][ T9267] DVB: Unable to find symbol tda10046_attach() [ 384.520302][ T9267] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 384.532283][ T9267] usb 4-1: USB disconnect, device number 11 [ 386.672293][ T4261] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 387.086947][ T9489] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 389.242270][ T4261] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 389.250171][ T4261] usb 2-1: can't read configurations, error -71 [ 394.660283][ T9573] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 394.694802][ T9573] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1644'. [ 394.716990][ T9573] netlink: 'syz.0.1644': attribute type 1 has an invalid length. [ 394.762959][ T4224] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 395.172398][ T4224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 395.229461][ T4224] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 395.460440][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.812336][ T4224] usb 2-1: config 0 descriptor?? [ 395.879405][ T4339] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 395.924208][ T4224] pwc: Askey VC010 type 2 USB webcam detected. [ 396.068376][ T9604] loop3: detected capacity change from 0 to 512 [ 396.372817][ T4224] pwc: recv_control_msg error -32 req 02 val 2b00 [ 396.467423][ T4224] pwc: recv_control_msg error -32 req 02 val 2700 [ 396.620129][ T9604] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1654: inode has both inline data and extents flags [ 396.732374][ T4224] pwc: recv_control_msg error -32 req 02 val 2c00 [ 396.752254][ T9604] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1654: couldn't read orphan inode 15 (err -117) [ 396.821196][ T9604] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 396.872293][ T4224] pwc: recv_control_msg error -32 req 04 val 1000 [ 396.942217][ T4224] pwc: recv_control_msg error -32 req 04 val 1300 [ 396.992335][ T4224] pwc: recv_control_msg error -32 req 04 val 1400 [ 397.050932][ T4224] pwc: recv_control_msg error -32 req 02 val 2000 [ 397.622389][ T4224] pwc: recv_control_msg error -32 req 02 val 2100 [ 397.712655][ T4224] pwc: recv_control_msg error -32 req 04 val 1500 [ 397.752256][ T4224] pwc: recv_control_msg error -32 req 02 val 2500 [ 397.762396][ T4339] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 397.771465][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.850513][ T4339] usb 1-1: Product: syz [ 397.852215][ T4224] pwc: recv_control_msg error -32 req 02 val 2400 [ 397.881498][ T4339] usb 1-1: Manufacturer: syz [ 397.913310][ T4339] usb 1-1: SerialNumber: syz [ 398.085956][ T4339] usb 1-1: config 0 descriptor?? [ 398.109772][ T4339] usb 1-1: can't set config #0, error -71 [ 398.920462][ T4339] usb 1-1: USB disconnect, device number 10 [ 399.102273][ T4224] pwc: recv_control_msg error -71 req 02 val 2900 [ 399.137638][ T4224] pwc: recv_control_msg error -71 req 02 val 2800 [ 399.162268][ T4224] pwc: recv_control_msg error -71 req 04 val 1100 [ 399.272357][ T4224] pwc: recv_control_msg error -71 req 04 val 1200 [ 399.309764][ T4224] pwc: Registered as video103. [ 399.333058][ T9646] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 399.349861][ T9646] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1660'. [ 399.361512][ T4224] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 399.371801][ T9646] netlink: 'syz.1.1660': attribute type 1 has an invalid length. [ 399.895547][ T4224] usb 2-1: USB disconnect, device number 8 [ 400.455842][ T26] audit: type=1804 audit(6055075236.255:4): pid=9683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1667" name="/newroot/372/file1" dev="fuse" ino=1 res=1 errno=0 [ 400.508963][ T9684] IPv6: ADDRCONF(NETDEV_CHANGE): nr16: link becomes ready [ 400.612505][ T4246] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 401.098708][ T4246] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 4 [ 401.120621][ T4246] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 401.130918][ T4246] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 401.362231][ T4246] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 401.602627][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 401.982903][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.026020][ T23] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 402.128823][ T4246] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.139939][ T4246] usb 5-1: Product: syz [ 402.144175][ T4246] usb 5-1: Manufacturer: syz [ 402.148776][ T4246] usb 5-1: SerialNumber: syz [ 402.155179][ T4246] usb 5-1: config 0 descriptor?? [ 402.182407][ T9663] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 402.192236][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.214155][ T4246] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 402.334064][ T4246] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 402.941029][ T23] usb 1-1: config 0 descriptor?? [ 402.971527][ T4339] usb 5-1: USB disconnect, device number 6 [ 403.004018][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 403.021694][ T4339] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 403.037863][ T9708] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 403.048313][ T4339] ti_usb_3410_5052 5-1:0.0: device disconnected [ 403.058678][ T9708] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1677'. [ 403.096209][ T9708] netlink: 'syz.3.1677': attribute type 1 has an invalid length. [ 403.144860][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 403.174661][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.191592][ T9708] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.343097][ T9728] device syzkaller0 entered promiscuous mode [ 403.432873][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 403.492279][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 403.538732][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 403.678104][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 403.742262][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 403.782209][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 403.822265][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 403.872263][ T23] pwc: recv_control_msg error -32 req 02 val 2100 [ 403.923607][ T23] pwc: recv_control_msg error -32 req 04 val 1500 [ 403.972344][ T23] pwc: recv_control_msg error -32 req 02 val 2500 [ 404.112539][ T23] pwc: recv_control_msg error -32 req 02 val 2400 [ 404.893573][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 404.912636][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 404.956619][ T9761] loop1: detected capacity change from 0 to 512 [ 404.992285][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 405.035121][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 405.079421][ T23] pwc: Registered as video103. [ 405.082253][ T9761] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1687: inode has both inline data and extents flags [ 405.106623][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input15 [ 405.145951][ T23] usb 1-1: USB disconnect, device number 11 [ 405.333968][ T9761] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1687: couldn't read orphan inode 15 (err -117) [ 405.473080][ T9761] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 406.507840][ T9789] device syzkaller0 entered promiscuous mode [ 406.698677][ T26] audit: type=1804 audit(6055075242.495:5): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1697" name="/newroot/304/file1" dev="fuse" ino=1 res=1 errno=0 [ 406.732300][ T4246] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 407.657759][ T9810] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1701'. [ 407.732240][ T4246] usb 6-1: Using ep0 maxpacket: 8 [ 407.804343][ T9819] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 407.823018][ T9819] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1702'. [ 407.844296][ T9819] netlink: 'syz.0.1702': attribute type 1 has an invalid length. [ 407.952278][ T4246] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 407.960575][ T4246] usb 6-1: config 179 has no interface number 0 [ 408.096600][ T9826] loop1: detected capacity change from 0 to 512 [ 408.584781][ T4246] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 408.623713][ T4246] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 408.675455][ T4246] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 408.688472][ T4246] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 408.700482][ T4246] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 408.715644][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1705'. [ 408.772202][ T4246] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 408.781277][ T4246] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.786255][ T9826] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1704: inode has both inline data and extents flags [ 408.806600][ T9826] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1704: couldn't read orphan inode 15 (err -117) [ 408.821249][ T9826] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 408.922415][ T9788] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 410.257066][ T9840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.554152][ T23] usb 6-1: USB disconnect, device number 2 [ 411.572127][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 412.944378][ T26] audit: type=1804 audit(6055075248.735:6): pid=9882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1709" name="/newroot/359/file1" dev="fuse" ino=1 res=1 errno=0 [ 413.835385][ T9899] loop3: detected capacity change from 0 to 512 [ 413.972877][ T9899] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1720: inode has both inline data and extents flags [ 414.008777][ T9899] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1720: couldn't read orphan inode 15 (err -117) [ 414.039815][ T9899] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 414.142814][ T4224] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 415.178995][ T9909] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 415.451060][ T4224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 415.466255][ T4224] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 415.475882][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 415.487538][ T4224] usb 2-1: config 0 descriptor?? [ 415.534238][ T4224] pwc: Askey VC010 type 2 USB webcam detected. [ 416.882146][ T4224] pwc: recv_control_msg error -32 req 02 val 2b00 [ 416.999358][ T4224] pwc: recv_control_msg error -32 req 02 val 2700 [ 417.085691][ T4224] pwc: recv_control_msg error -71 req 02 val 2c00 [ 417.112594][ T4224] pwc: recv_control_msg error -71 req 04 val 1000 [ 417.132407][ T4224] pwc: recv_control_msg error -71 req 04 val 1300 [ 417.152387][ T4224] pwc: recv_control_msg error -71 req 04 val 1400 [ 417.182230][ T4224] pwc: recv_control_msg error -71 req 02 val 2000 [ 417.218649][ T4224] pwc: recv_control_msg error -71 req 02 val 2100 [ 417.268160][ T9945] device syzkaller0 entered promiscuous mode [ 417.274326][ T4224] pwc: recv_control_msg error -71 req 04 val 1500 [ 417.303980][ T4224] pwc: recv_control_msg error -71 req 02 val 2500 [ 417.359467][ T4224] pwc: recv_control_msg error -71 req 02 val 2400 [ 417.442431][ T4224] pwc: recv_control_msg error -71 req 02 val 2600 [ 417.462223][ T4224] pwc: recv_control_msg error -71 req 02 val 2900 [ 417.492887][ T4224] pwc: recv_control_msg error -71 req 02 val 2800 [ 417.532395][ T4224] pwc: recv_control_msg error -71 req 04 val 1100 [ 417.532874][ T9957] device syzkaller0 entered promiscuous mode [ 417.702812][ T4224] pwc: recv_control_msg error -71 req 04 val 1200 [ 417.710491][ T4224] pwc: Registered as video103. [ 417.716789][ T4224] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 417.729771][ T4224] usb 2-1: USB disconnect, device number 9 [ 418.772194][ T4246] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 419.606404][ T1108] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 419.698007][ T4246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 419.868894][ T9991] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 419.951026][ T4246] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 419.964984][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.974741][ T4246] usb 4-1: config 0 descriptor?? [ 420.015266][ T4246] pwc: Askey VC010 type 2 USB webcam detected. [ 420.030468][T10001] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1742'. [ 420.040663][T10001] netlink: 'syz.4.1742': attribute type 1 has an invalid length. [ 420.212631][ T1108] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.301705][ T1108] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 420.427085][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.502473][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00 [ 420.572830][ T4246] pwc: recv_control_msg error -32 req 02 val 2700 [ 420.612569][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00 [ 420.654433][ T4246] pwc: recv_control_msg error -32 req 04 val 1000 [ 420.677047][ T1108] usb 1-1: config 0 descriptor?? [ 420.689575][T10007] device syzkaller0 entered promiscuous mode [ 420.727153][ T4246] pwc: recv_control_msg error -32 req 04 val 1300 [ 420.738178][ T1108] pwc: Askey VC010 type 2 USB webcam detected. [ 420.785359][ T4246] pwc: recv_control_msg error -32 req 04 val 1400 [ 420.846513][ T4246] pwc: recv_control_msg error -32 req 02 val 2000 [ 420.866901][T10013] loop2: detected capacity change from 0 to 7 [ 420.912379][ T4246] pwc: recv_control_msg error -32 req 02 val 2100 [ 420.928376][T10013] Dev loop2: unable to read RDB block 7 [ 420.938445][T10013] loop2: unable to read partition table [ 420.944349][T10013] loop2: partition table beyond EOD, truncated [ 420.959745][T10017] device syzkaller0 entered promiscuous mode [ 420.965938][T10013] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 420.983829][ T4246] pwc: recv_control_msg error -32 req 04 val 1500 [ 421.035731][ T4246] pwc: recv_control_msg error -32 req 02 val 2500 [ 421.096449][ T4246] pwc: recv_control_msg error -32 req 02 val 2400 [ 421.162543][ T1108] pwc: recv_control_msg error -32 req 02 val 2b00 [ 421.212400][ T1108] pwc: recv_control_msg error -32 req 02 val 2700 [ 421.272617][ T1108] pwc: recv_control_msg error -32 req 02 val 2c00 [ 421.332435][ T1108] pwc: recv_control_msg error -32 req 04 val 1000 [ 421.412540][ T4246] pwc: recv_control_msg error -71 req 02 val 2900 [ 421.420071][ T1108] pwc: recv_control_msg error -32 req 04 val 1300 [ 421.462758][ T4246] pwc: recv_control_msg error -71 req 02 val 2800 [ 421.502501][ T1108] pwc: recv_control_msg error -32 req 04 val 1400 [ 421.654005][ T4246] pwc: recv_control_msg error -71 req 04 val 1100 [ 421.672522][ T1108] pwc: recv_control_msg error -32 req 02 val 2000 [ 421.763832][ T4246] pwc: recv_control_msg error -71 req 04 val 1200 [ 421.799884][ T4246] pwc: Registered as video103. [ 421.805290][ T1108] pwc: recv_control_msg error -32 req 02 val 2100 [ 421.871674][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 421.889106][ T4246] usb 4-1: USB disconnect, device number 12 [ 421.912351][ T1108] pwc: recv_control_msg error -32 req 04 val 1500 [ 422.042967][ T1108] pwc: recv_control_msg error -32 req 02 val 2500 [ 423.551364][ T1108] pwc: recv_control_msg error -32 req 02 val 2400 [ 423.962227][ T1108] pwc: recv_control_msg error -71 req 02 val 2600 [ 424.030194][T10044] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1753'. [ 424.039332][T10044] netlink: 'syz.1.1753': attribute type 1 has an invalid length. [ 424.042730][ T1108] pwc: recv_control_msg error -71 req 02 val 2900 [ 424.122440][ T1108] pwc: recv_control_msg error -71 req 02 val 2800 [ 424.162284][ T1108] pwc: recv_control_msg error -71 req 04 val 1100 [ 424.182305][ T1108] pwc: recv_control_msg error -71 req 04 val 1200 [ 424.199772][ T1108] pwc: Registered as video103. [ 424.268217][T10051] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 424.268345][ T1108] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input18 [ 424.508550][ T1108] usb 1-1: USB disconnect, device number 12 [ 427.460887][T10143] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1767'. [ 427.512176][ T4246] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 427.541894][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 427.568862][T10143] netlink: 'syz.5.1767': attribute type 1 has an invalid length. [ 427.670715][T10154] overlayfs: failed to resolve './file0': -2 [ 427.694311][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 427.808155][T10149] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 427.882375][ T4246] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.169040][ T4246] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 431.032536][ T4246] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.048913][ T4246] usb 2-1: config 0 descriptor?? [ 431.074195][ T4246] usb 2-1: can't set config #0, error -71 [ 431.166139][ T4246] usb 2-1: USB disconnect, device number 10 [ 431.214624][T10168] device syzkaller0 entered promiscuous mode [ 431.341000][T10173] device syzkaller0 entered promiscuous mode [ 432.776652][T10200] loop3: detected capacity change from 0 to 512 [ 432.872016][T10200] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.1782: inode has both inline data and extents flags [ 432.932397][T10200] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.1782: couldn't read orphan inode 15 (err -117) [ 432.967699][T10200] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 433.052212][ T23] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 433.089610][ T4246] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 433.665693][ T4246] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.792165][ T4246] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 433.822200][ T4246] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.840707][ T4246] usb 1-1: config 0 descriptor?? [ 433.883226][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 433.884171][ T4246] pwc: Askey VC010 type 2 USB webcam detected. [ 433.996222][T10212] siw: device registration error -23 [ 434.193218][ T23] usb 2-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 434.282719][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.360338][ T23] usb 2-1: Product: syz [ 434.802217][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00 [ 434.822453][ T23] usb 2-1: Manufacturer: syz [ 434.827427][ T23] usb 2-1: SerialNumber: syz [ 434.842271][ T4246] pwc: recv_control_msg error -32 req 02 val 2700 [ 434.869699][ T23] usb 2-1: config 0 descriptor?? [ 434.882259][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00 [ 434.922239][ T4246] pwc: recv_control_msg error -32 req 04 val 1000 [ 434.963565][ T23] ssu100 2-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 434.994669][ T4246] pwc: recv_control_msg error -32 req 04 val 1300 [ 435.060074][T10220] overlayfs: failed to resolve './file0': -2 [ 435.302234][ T23] ssu100: probe of 2-1:0.0 failed with error -110 [ 435.899953][ T4224] usb 2-1: USB disconnect, device number 11 [ 435.931866][ T4246] pwc: recv_control_msg error -32 req 04 val 1400 [ 435.982285][ T4246] pwc: recv_control_msg error -71 req 02 val 2000 [ 436.062341][ T4246] pwc: recv_control_msg error -71 req 02 val 2100 [ 436.170134][T10231] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 436.592595][ T4246] pwc: recv_control_msg error -71 req 04 val 1500 [ 436.679930][T10237] device syzkaller0 entered promiscuous mode [ 436.742236][ T4246] pwc: recv_control_msg error -71 req 02 val 2500 [ 437.162210][ T4246] pwc: recv_control_msg error -71 req 02 val 2400 [ 437.192193][ T4246] pwc: recv_control_msg error -71 req 02 val 2600 [ 437.212216][ T4246] pwc: recv_control_msg error -71 req 02 val 2900 [ 437.236459][ T4246] pwc: recv_control_msg error -71 req 02 val 2800 [ 437.364978][T10252] loop1: detected capacity change from 0 to 512 [ 437.382187][ T4246] pwc: recv_control_msg error -71 req 04 val 1100 [ 438.072229][ T4246] pwc: recv_control_msg error -71 req 04 val 1200 [ 438.246554][ T4246] pwc: Registered as video103. [ 438.268621][T10252] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1794: inode has both inline data and extents flags [ 438.294375][T10263] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1797'. [ 438.306046][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 438.343757][T10252] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1794: couldn't read orphan inode 15 (err -117) [ 438.512889][T10252] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 438.883369][T10265] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 439.095583][ T4246] usb 1-1: USB disconnect, device number 13 [ 439.308071][T10272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1800'. [ 439.661243][ T4224] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 439.924394][T10282] device syzkaller0 entered promiscuous mode [ 440.082433][ T4224] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.104462][ T4224] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 440.142602][ T4224] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.152599][ T4224] usb 6-1: config 0 descriptor?? [ 440.176473][T10287] tipc: Enabling of bearer rejected, failed to enable media [ 440.187016][T10287] device syzkaller0 entered promiscuous mode [ 440.361995][T10289] capability: warning: `syz.0.1805' uses deprecated v2 capabilities in a way that may be insecure [ 440.840036][ T4224] pwc: Askey VC010 type 2 USB webcam detected. [ 441.005460][ T4224] pwc: recv_control_msg error -32 req 02 val 2b00 [ 441.052291][ T4224] pwc: recv_control_msg error -32 req 02 val 2700 [ 441.081192][T10300] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 441.123597][ T4224] pwc: recv_control_msg error -32 req 02 val 2c00 [ 442.589356][ T4224] pwc: recv_control_msg error -32 req 04 val 1000 [ 442.612291][ T4224] pwc: recv_control_msg error -71 req 04 val 1300 [ 442.632241][ T4224] pwc: recv_control_msg error -71 req 04 val 1400 [ 442.633706][T10317] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 442.656929][ T4224] pwc: recv_control_msg error -71 req 02 val 2000 [ 442.682363][ T4224] pwc: recv_control_msg error -71 req 02 val 2100 [ 442.702351][ T4224] pwc: recv_control_msg error -71 req 04 val 1500 [ 442.722204][ T4224] pwc: recv_control_msg error -71 req 02 val 2500 [ 442.742759][T10328] loop5: detected capacity change from 0 to 512 [ 442.854155][ T4224] pwc: recv_control_msg error -71 req 02 val 2400 [ 442.863612][T10326] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 442.864479][T10328] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1815: inode has both inline data and extents flags [ 442.872341][ T4224] pwc: recv_control_msg error -71 req 02 val 2600 [ 442.885638][T10328] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1815: couldn't read orphan inode 15 (err -117) [ 442.911921][T10328] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 442.928753][ T4224] pwc: recv_control_msg error -71 req 02 val 2900 [ 442.987100][ T4224] pwc: recv_control_msg error -71 req 02 val 2800 [ 443.022335][ T4224] pwc: recv_control_msg error -71 req 04 val 1100 [ 443.381688][ T4224] pwc: recv_control_msg error -71 req 04 val 1200 [ 443.391432][T10334] device syzkaller0 entered promiscuous mode [ 443.622353][ T4224] pwc: Registered as video103. [ 443.628376][ T4224] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input20 [ 443.668457][ T4224] usb 6-1: USB disconnect, device number 3 [ 443.705827][T10344] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1819'. [ 443.758285][T10344] netlink: 'syz.4.1819': attribute type 1 has an invalid length. [ 445.054199][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.061184][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.734608][ T4224] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 445.735840][T10370] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 446.089583][T10381] ax25_connect(): syz.4.1828 uses autobind, please contact jreuter@yaina.de [ 446.142239][ T4224] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.475229][ T4224] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 447.533630][T10386] loop5: detected capacity change from 0 to 512 [ 447.625972][ T4224] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.646891][ T4224] usb 2-1: config 0 descriptor?? [ 447.652832][T10389] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1832'. [ 447.662202][T10389] netlink: 'syz.0.1832': attribute type 1 has an invalid length. [ 447.677292][ T4224] usb 2-1: can't set config #0, error -71 [ 447.687377][T10387] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 447.706673][ T4224] usb 2-1: USB disconnect, device number 12 [ 447.728802][T10386] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1831: inode has both inline data and extents flags [ 447.752147][ T4261] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 447.816898][T10386] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1831: couldn't read orphan inode 15 (err -117) [ 447.829522][T10386] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 448.216853][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 448.732843][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 448.750919][ T4261] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 448.760613][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.787611][ T4261] usb 4-1: config 0 descriptor?? [ 449.160882][T10414] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 450.070834][ T4261] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 450.234528][ T26] audit: type=1326 audit(6055075286.035:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0a389c5e7 code=0x7ffc0000 [ 450.257543][ T26] audit: type=1326 audit(6055075286.035:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0a3841829 code=0x7ffc0000 [ 450.291190][ T26] audit: type=1326 audit(6055075286.035:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe0a389c5e7 code=0x7ffc0000 [ 450.340350][ T26] audit: type=1326 audit(6055075286.035:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe0a3841829 code=0x7ffc0000 [ 450.462247][ T1108] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 450.478019][ T26] audit: type=1326 audit(6055075286.035:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a38a5749 code=0x7ffc0000 [ 450.508821][T10433] ax25_connect(): syz.1.1844 uses autobind, please contact jreuter@yaina.de [ 450.602775][ T26] audit: type=1326 audit(6055075286.035:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a38a5749 code=0x7ffc0000 [ 450.693116][ T26] audit: type=1326 audit(6055075286.065:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe0a38a5749 code=0x7ffc0000 [ 450.784961][ T26] audit: type=1326 audit(6055075286.065:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a38a5749 code=0x7ffc0000 [ 451.102357][ T1108] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 451.181712][ T1108] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 451.276901][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.389858][ T26] audit: type=1326 audit(6055075286.065:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe0a38a5749 code=0x7ffc0000 [ 451.438870][ T1108] usb 6-1: config 0 descriptor?? [ 451.470817][ T4224] usb 4-1: USB disconnect, device number 13 [ 451.492494][ T26] audit: type=1326 audit(6055075286.065:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10419 comm="syz.0.1840" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe0a38a5749 code=0x7ffc0000 [ 451.504104][ T1108] pwc: Askey VC010 type 2 USB webcam detected. [ 451.675831][T10442] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 452.381174][ T1108] pwc: recv_control_msg error -32 req 02 val 2b00 [ 452.436577][ T1108] pwc: recv_control_msg error -32 req 02 val 2700 [ 452.562266][ T1108] pwc: recv_control_msg error -32 req 02 val 2c00 [ 452.602207][ T1108] pwc: recv_control_msg error -32 req 04 val 1000 [ 453.022966][T10465] Can't find ip_set type hash:ne [ 453.235634][ T1108] pwc: recv_control_msg error -32 req 04 val 1300 [ 453.244457][ T4224] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 453.729641][ T1108] pwc: recv_control_msg error -32 req 04 val 1400 [ 453.895299][T10475] netlink: 'syz.1.1855': attribute type 4 has an invalid length. [ 453.903175][T10475] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1855'. [ 454.872173][ T1108] pwc: recv_control_msg error -32 req 02 val 2000 [ 454.901565][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1858'. [ 454.918403][ T1108] pwc: recv_control_msg error -32 req 02 val 2100 [ 454.926517][T10481] device syzkaller0 entered promiscuous mode [ 455.236803][T10486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 455.484623][T10491] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 455.682543][ T1108] pwc: recv_control_msg error -71 req 04 val 1500 [ 455.872825][ T4224] usb 4-1: device descriptor read/all, error -71 [ 455.880685][T10495] ax25_connect(): syz.0.1861 uses autobind, please contact jreuter@yaina.de [ 456.656860][ T1108] pwc: recv_control_msg error -71 req 02 val 2500 [ 456.918678][T10500] loop1: detected capacity change from 0 to 512 [ 456.958017][T10507] Can't find ip_set type hash:ne [ 457.029414][T10506] tipc: Enabling of bearer rejected, failed to enable media [ 457.087964][ T1108] pwc: recv_control_msg error -71 req 02 val 2400 [ 457.122223][ T1108] pwc: recv_control_msg error -71 req 02 val 2600 [ 457.162284][ T1108] pwc: recv_control_msg error -71 req 02 val 2900 [ 457.170082][T10511] device syzkaller0 entered promiscuous mode [ 457.192623][T10500] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1864: inode has both inline data and extents flags [ 457.196550][ T1108] pwc: recv_control_msg error -71 req 02 val 2800 [ 457.225615][T10516] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 457.232844][ T1108] pwc: recv_control_msg error -71 req 04 val 1100 [ 457.239990][T10500] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1864: couldn't read orphan inode 15 (err -117) [ 457.252855][T10500] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 457.263956][ T1108] pwc: recv_control_msg error -71 req 04 val 1200 [ 457.277657][T10516] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1868'. [ 457.282347][ T1108] pwc: Registered as video103. [ 457.298938][ T1108] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21 [ 457.303879][T10516] netlink: 'syz.4.1868': attribute type 1 has an invalid length. [ 457.338436][ T1108] usb 6-1: USB disconnect, device number 4 [ 458.130674][T10530] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 458.216200][T10533] device syzkaller0 entered promiscuous mode [ 458.322227][ T23] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 458.401110][T10537] siw: device registration error -23 [ 458.571071][T10539] device syzkaller0 entered promiscuous mode [ 458.715001][T10544] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 459.184111][T10550] Can't find ip_set type hash:ne [ 459.332226][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.459311][ T23] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 459.492193][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.500773][T10562] loop5: detected capacity change from 0 to 512 [ 459.514643][ T23] usb 5-1: config 0 descriptor?? [ 459.607153][T10562] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1882: inode has both inline data and extents flags [ 459.719075][T10572] ax25_connect(): syz.1.1880 uses autobind, please contact jreuter@yaina.de [ 461.130230][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 461.186766][T10562] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1882: couldn't read orphan inode 15 (err -117) [ 461.312261][ T23] pwc: send_video_command error -71 [ 461.317566][ T23] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 461.327761][ T23] Philips webcam: probe of 5-1:0.0 failed with error -71 [ 461.480290][ T23] usb 5-1: USB disconnect, device number 7 [ 461.581213][T10584] tipc: Enabling of bearer rejected, failed to enable media [ 461.814784][T10562] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 462.936903][T10601] device syzkaller0 entered promiscuous mode [ 463.004384][T10602] siw: device registration error -23 [ 463.232170][ T4246] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 463.470445][T10611] Can't find ip_set type hash:ne [ 463.710490][ T4246] usb 1-1: config 0 interface 0 altsetting 251 has an invalid endpoint with address 0x93, skipping [ 463.754558][ T4246] usb 1-1: config 0 interface 0 has no altsetting 0 [ 463.847515][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 464.223631][ T4246] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 464.267847][ T4246] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 464.315664][ T4246] usb 1-1: Product: syz [ 464.332418][ T4246] usb 1-1: Manufacturer: syz [ 464.354990][ T4246] usb 1-1: SerialNumber: syz [ 464.380359][ T4246] usb 1-1: config 0 descriptor?? [ 464.432405][T10604] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 464.808962][ T4246] snd-usb-audio: probe of 1-1:0.0 failed with error -22 [ 464.821586][T10631] loop4: detected capacity change from 0 to 512 [ 464.849548][ T8310] udevd[8310]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 464.867490][ T4246] usb 1-1: USB disconnect, device number 14 [ 464.873493][ T4189] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 464.964895][T10631] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.1898: inode has both inline data and extents flags [ 465.000996][T10631] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.1898: couldn't read orphan inode 15 (err -117) [ 465.042682][T10631] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 465.232331][ T4189] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 465.754903][ T4189] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 465.764498][ T4189] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.778155][ T4189] usb 2-1: config 0 descriptor?? [ 465.802595][T10638] tipc: Enabling of bearer rejected, failed to enable media [ 465.811969][T10638] device syzkaller0 entered promiscuous mode [ 465.824934][ T4189] pwc: Askey VC010 type 2 USB webcam detected. [ 465.955855][T10643] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1902'. [ 466.912428][T10651] Can't find ip_set type hash:ne [ 467.120168][T10649] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1901'. [ 467.176457][ T4189] pwc: recv_control_msg error -32 req 02 val 2b00 [ 467.332038][ T4189] pwc: recv_control_msg error -32 req 02 val 2700 [ 467.372186][ T4189] pwc: recv_control_msg error -32 req 02 val 2c00 [ 467.391012][T10666] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 467.433348][ T4189] pwc: recv_control_msg error -32 req 04 val 1000 [ 467.633303][ T4189] pwc: recv_control_msg error -32 req 04 val 1300 [ 467.922838][ T4189] pwc: recv_control_msg error -32 req 04 val 1400 [ 467.972281][ T4189] pwc: recv_control_msg error -32 req 02 val 2000 [ 468.104878][ T4189] pwc: recv_control_msg error -32 req 02 val 2100 [ 468.152829][ T4189] pwc: recv_control_msg error -32 req 04 val 1500 [ 468.202209][ T4189] pwc: recv_control_msg error -32 req 02 val 2500 [ 469.082271][ T4189] pwc: recv_control_msg error -32 req 02 val 2400 [ 469.131118][T10695] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 469.139301][T10695] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1914'. [ 469.148749][T10695] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 469.162321][T10695] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 469.176739][T10695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 469.184810][T10695] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 469.382308][ T4189] pwc: recv_control_msg error -71 req 02 val 2900 [ 469.402512][ T4189] pwc: recv_control_msg error -71 req 02 val 2800 [ 469.601692][T10705] Can't find ip_set type hash:ne [ 470.444961][ T4189] pwc: recv_control_msg error -71 req 04 val 1100 [ 470.480180][ T4189] pwc: recv_control_msg error -71 req 04 val 1200 [ 470.503966][ T4189] pwc: Registered as video103. [ 470.557007][ T4189] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 472.702475][ T4189] usb 2-1: USB disconnect, device number 13 [ 473.384747][T10743] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 475.470318][T10768] tipc: Enabling of bearer rejected, failed to enable media [ 475.639883][T10771] device syzkaller0 entered promiscuous mode [ 476.337118][T10779] siw: device registration error -23 [ 476.727430][T10794] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 476.983652][ T4339] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 477.939805][T10791] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 478.013934][ T23] Bluetooth: hci1: command 0x0406 tx timeout [ 478.138810][T10803] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 478.242343][T10803] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1938'. [ 478.265028][T10803] netlink: 'syz.1.1938': attribute type 1 has an invalid length. [ 478.272876][ T4339] usb 1-1: Using ep0 maxpacket: 16 [ 478.598369][ T4339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 478.668494][ T4339] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 478.716000][ T4339] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 478.832294][ T4339] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00 [ 478.855924][ T4339] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 478.945605][ T4339] usb 1-1: Manufacturer: syz [ 478.999658][ T4339] usb 1-1: config 0 descriptor?? [ 479.882242][ T4339] usb 1-1: can't set config #0, error -71 [ 479.907888][ T4339] usb 1-1: USB disconnect, device number 15 [ 481.586685][T10839] ax25_connect(): syz.3.1944 uses autobind, please contact jreuter@yaina.de [ 481.751505][T10844] tipc: Enabling of bearer rejected, failed to enable media [ 481.802872][T10844] device syzkaller0 entered promiscuous mode [ 482.167658][T10851] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 482.241299][T10856] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 482.271972][T10856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1950'. [ 482.368073][T10856] netlink: 'syz.1.1950': attribute type 1 has an invalid length. [ 484.097463][ T4246] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 486.080034][ T4246] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 486.355864][T10908] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 487.693012][ T4246] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 487.723989][ T4246] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 487.733183][ T4246] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.772333][ T4246] usb 5-1: can't set config #27, error -71 [ 487.784354][ T4246] usb 5-1: USB disconnect, device number 8 [ 488.725272][T10925] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1970'. [ 489.012194][ T4246] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 489.152628][T10937] overlayfs: overlapping lowerdir path [ 489.402476][ T4246] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.461467][ T4246] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 489.604385][ T4246] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.684612][ T4246] usb 4-1: config 0 descriptor?? [ 489.738490][ T4246] pwc: Askey VC010 type 2 USB webcam detected. [ 489.862313][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 490.028978][T10944] loop5: detected capacity change from 0 to 512 [ 490.103641][T10945] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 490.132240][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 490.263382][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 490.324387][T10944] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.1978: inode has both inline data and extents flags [ 490.518286][T10944] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.1978: couldn't read orphan inode 15 (err -117) [ 490.542804][ T23] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 490.601071][ T23] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 490.618569][ T4246] pwc: recv_control_msg error -32 req 02 val 2b00 [ 490.632133][T10944] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 490.639967][ T23] usb 5-1: Product: syz [ 490.758623][ T23] usb 5-1: Manufacturer: syz [ 490.764899][ T23] usb 5-1: SerialNumber: syz [ 490.779509][ T23] usb 5-1: config 0 descriptor?? [ 490.800260][ T4246] pwc: recv_control_msg error -32 req 02 val 2700 [ 490.815512][T10936] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 490.821493][T10951] fuse: Bad value for 'fd' [ 490.842832][ T23] hub 5-1:0.0: bad descriptor, ignoring hub [ 490.857285][ T4246] pwc: recv_control_msg error -32 req 02 val 2c00 [ 490.858345][ T23] hub: probe of 5-1:0.0 failed with error -5 [ 490.865378][T10953] loop6: detected capacity change from 0 to 7 [ 491.100938][ T4246] pwc: recv_control_msg error -32 req 04 val 1000 [ 491.217392][ T6340] Dev loop6: unable to read RDB block 7 [ 491.224004][ T6340] loop6: AHDI p3 p4 [ 491.232629][ T6340] loop6: partition table partially beyond EOD, truncated [ 491.242378][ T4246] pwc: recv_control_msg error -32 req 04 val 1300 [ 491.418550][ T6340] loop6: p3 start 1886353253 is beyond EOD, truncated [ 491.428050][ T4246] pwc: recv_control_msg error -32 req 04 val 1400 [ 491.482212][ T4246] pwc: recv_control_msg error -32 req 02 val 2000 [ 491.504920][T10953] Dev loop6: unable to read RDB block 7 [ 491.510524][T10953] loop6: AHDI p3 p4 [ 491.514755][T10953] loop6: partition table partially beyond EOD, truncated [ 491.522616][ T4246] pwc: recv_control_msg error -32 req 02 val 2100 [ 491.574741][T10953] loop6: p3 start 1886353253 is beyond EOD, truncated [ 491.582463][ T4246] pwc: recv_control_msg error -32 req 04 val 1500 [ 491.622227][ T4246] pwc: recv_control_msg error -32 req 02 val 2500 [ 491.662200][ T4246] pwc: recv_control_msg error -32 req 02 val 2400 [ 491.942784][ T6742] udevd[6742]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 492.487978][T10959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.491671][ T4246] pwc: recv_control_msg error -71 req 02 val 2900 [ 492.513640][ T1108] usb 5-1: USB disconnect, device number 9 [ 492.522673][ T4246] pwc: recv_control_msg error -71 req 02 val 2800 [ 492.565137][ T4246] pwc: recv_control_msg error -71 req 04 val 1100 [ 492.755018][ T6742] udevd[6742]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 492.764930][ T4246] pwc: recv_control_msg error -71 req 04 val 1200 [ 492.805345][ T4246] pwc: Registered as video103. [ 493.140121][T10976] Can't find ip_set type hash:ne [ 493.301915][ T4246] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 493.318832][ T4246] usb 4-1: USB disconnect, device number 16 [ 493.835596][T10993] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 494.724950][T10997] fuse: Bad value for 'fd' [ 495.002601][T11006] overlayfs: missing 'lowerdir' [ 496.191341][T11013] device syzkaller0 entered promiscuous mode [ 496.413283][ T1108] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 496.533860][T11019] Can't find ip_set type hash:ne [ 496.846780][T11023] overlayfs: overlapping lowerdir path [ 497.392247][ T4339] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 497.895207][T11043] fuse: Bad value for 'fd' [ 497.990255][T11048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2006'. [ 497.992710][T11029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 498.052317][ T4339] usb 6-1: Using ep0 maxpacket: 16 [ 498.171085][ T1108] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.171132][ T1108] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 498.171158][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.184025][ T1108] usb 5-1: config 0 descriptor?? [ 498.629679][ T1108] pwc: Askey VC010 type 2 USB webcam detected. [ 498.697982][ T4339] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 498.709084][ T4339] usb 6-1: config 0 interface 0 has no altsetting 0 [ 498.716376][ T4339] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 498.725690][ T4339] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.854932][ T4339] usb 6-1: config 0 descriptor?? [ 499.692528][ T1108] pwc: recv_control_msg error -32 req 02 val 2b00 [ 499.762357][ T1108] pwc: recv_control_msg error -32 req 02 val 2700 [ 499.852936][ T1108] pwc: recv_control_msg error -32 req 02 val 2c00 [ 499.902878][ T1108] pwc: recv_control_msg error -32 req 04 val 1000 [ 500.291289][ T4339] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 500.442258][ T1108] pwc: recv_control_msg error -32 req 04 val 1300 [ 500.502379][ T1108] pwc: recv_control_msg error -32 req 04 val 1400 [ 500.547200][ T1108] pwc: recv_control_msg error -32 req 02 val 2000 [ 500.589880][T11077] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 500.612227][ T1108] pwc: recv_control_msg error -32 req 02 val 2100 [ 500.652436][ T1108] pwc: recv_control_msg error -32 req 04 val 1500 [ 503.491366][ T1108] pwc: recv_control_msg error -32 req 02 val 2500 [ 503.570555][ T4189] usb 6-1: USB disconnect, device number 5 [ 503.582276][ T1108] pwc: recv_control_msg error -71 req 02 val 2400 [ 503.640803][T11094] ksmbd: Unknown IPC event: 11, ignore. [ 503.652237][ T1108] pwc: recv_control_msg error -71 req 02 val 2600 [ 503.692300][ T1108] pwc: recv_control_msg error -71 req 02 val 2900 [ 504.275547][ T1108] pwc: recv_control_msg error -71 req 02 val 2800 [ 504.332551][ T1108] pwc: recv_control_msg error -71 req 04 val 1100 [ 504.902213][ T1108] pwc: recv_control_msg error -71 req 04 val 1200 [ 504.910291][ T1108] pwc: Registered as video103. [ 504.952236][ T9267] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 505.825689][ T1108] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 505.860966][T11112] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2023'. [ 505.930626][ T1108] usb 5-1: USB disconnect, device number 10 [ 506.032240][ T9267] usb 4-1: Using ep0 maxpacket: 8 [ 506.152306][ T9267] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 506.174046][ T9267] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 506.213013][ T9267] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.322571][ T23] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 506.734239][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 506.853650][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.860002][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.869863][ T9267] usb 4-1: config 0 descriptor?? [ 506.882224][ T23] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 506.891471][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.902249][ T9267] usb 4-1: can't set config #0, error -71 [ 506.916449][ T23] usb 6-1: config 0 descriptor?? [ 506.921571][ T9267] usb 4-1: USB disconnect, device number 17 [ 506.965428][T11138] siw: device registration error -23 [ 506.971587][T11140] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 507.053993][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 507.067598][T11140] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2035'. [ 507.080492][T11136] device bond0 entered promiscuous mode [ 507.089553][T11136] device bond_slave_0 entered promiscuous mode [ 507.143179][T11140] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 507.159516][T11136] device bond_slave_1 entered promiscuous mode [ 507.299353][T11136] device dummy0 entered promiscuous mode [ 507.386074][T11136] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 507.475739][T11136] hsr1: Slave B (dummy0) is not up; please bring it up to get a fully working HSR network [ 507.492202][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 507.551791][T11136] device hsr1 entered promiscuous mode [ 508.602251][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 508.642235][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 508.692790][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 509.557705][ T23] pwc: recv_control_msg error -71 req 04 val 1300 [ 509.662272][ T23] pwc: recv_control_msg error -71 req 04 val 1400 [ 509.703164][T11176] siw: device registration error -23 [ 509.708992][ T23] pwc: recv_control_msg error -71 req 02 val 2000 [ 509.713230][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2043'. [ 509.769905][ T23] pwc: recv_control_msg error -71 req 02 val 2100 [ 509.812934][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 509.856213][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 510.008658][T11186] overlayfs: failed to resolve './file1': -2 [ 510.775519][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 510.775561][ T4261] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 510.775865][ T26] audit: type=1326 audit(6055075345.935:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519ad30749 code=0x7ffc0000 [ 510.812645][ T26] audit: type=1326 audit(6055075345.935:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519ad30749 code=0x7ffc0000 [ 510.857789][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 510.944607][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 510.953551][T11193] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2050'. [ 510.963490][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 510.970075][ T26] audit: type=1326 audit(6055075345.945:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f519ad30749 code=0x7ffc0000 [ 511.021153][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 511.026807][ T26] audit: type=1326 audit(6055075345.945:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519ad30749 code=0x7ffc0000 [ 511.075827][ T26] audit: type=1326 audit(6055075345.945:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11179 comm="syz.1.2048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f519ad30749 code=0x7ffc0000 [ 511.127579][T11198] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 511.141474][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 511.163992][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 511.176025][ T23] pwc: Registered as video103. [ 511.181833][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input25 [ 511.228929][ T23] usb 6-1: USB disconnect, device number 6 [ 511.362358][ T4261] usb 4-1: Using ep0 maxpacket: 8 [ 511.542641][ T4261] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 511.620178][ T4261] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 511.629703][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 511.676527][ T4261] usb 4-1: config 0 descriptor?? [ 511.927675][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2060'. [ 511.945373][ T4261] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 512.213602][ T4261] usb 4-1: USB disconnect, device number 18 [ 512.781636][T11232] overlayfs: './file0' not a directory [ 513.382988][T11239] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 513.452358][T11239] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 513.733796][T11239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 514.579136][T11239] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 514.746096][T11270] device syzkaller0 entered promiscuous mode [ 514.762311][T11274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2073'. [ 515.042369][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 515.456932][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 516.578108][T11301] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 516.592352][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 516.608711][T11299] device syzkaller0 entered promiscuous mode [ 516.618187][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 516.623159][T11301] device hsr1 left promiscuous mode [ 516.638839][ T23] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 516.658645][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.679359][ T23] usb 5-1: config 0 descriptor?? [ 516.780818][T11307] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2087'. [ 517.583101][ T13] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 517.753042][ T1111] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 517.882567][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 518.007921][ T23] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 518.052116][ T13] usb 1-1: config 0 has an invalid interface number: 83 but max is 0 [ 518.172349][ T1111] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 518.188606][ T13] usb 1-1: config 0 has no interface number 0 [ 518.193130][ T1111] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 518.214340][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.215606][ T13] usb 1-1: config 0 interface 83 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 518.239897][ T1111] usb 4-1: config 0 descriptor?? [ 518.253982][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2090'. [ 518.310715][ T1111] pwc: Askey VC010 type 2 USB webcam detected. [ 518.340856][ T23] usb 5-1: USB disconnect, device number 11 [ 518.376343][ T13] usb 1-1: config 0 interface 83 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 518.421141][T11321] fido_id[11321]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 518.752488][ T1111] pwc: recv_control_msg error -32 req 02 val 2b00 [ 518.822570][ T1111] pwc: recv_control_msg error -32 req 02 val 2700 [ 518.912533][ T1111] pwc: recv_control_msg error -32 req 02 val 2c00 [ 519.105863][ T1111] pwc: recv_control_msg error -32 req 04 val 1000 [ 519.143986][T11328] loop5: detected capacity change from 0 to 512 [ 519.162361][ T13] usb 1-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 519.171439][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.201617][ T13] usb 1-1: Product: syz [ 519.218508][ T13] usb 1-1: Manufacturer: syz [ 519.226373][ T13] usb 1-1: SerialNumber: syz [ 519.264882][ T13] usb 1-1: config 0 descriptor?? [ 519.296851][ T1111] pwc: recv_control_msg error -32 req 04 val 1300 [ 519.311738][T11328] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.2094: inode has both inline data and extents flags [ 519.329681][T11328] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.2094: couldn't read orphan inode 15 (err -117) [ 519.349435][ T13] redrat3 1-1:0.83: Couldn't find all endpoints [ 519.498866][T11328] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 519.989840][ T1111] pwc: recv_control_msg error -32 req 04 val 1400 [ 520.072280][ T13] usb 1-1: USB disconnect, device number 16 [ 520.162255][ T1111] pwc: recv_control_msg error -32 req 02 val 2000 [ 520.202302][ T1111] pwc: recv_control_msg error -32 req 02 val 2100 [ 520.243034][T11349] device syzkaller0 entered promiscuous mode [ 520.402351][ T1111] pwc: recv_control_msg error -32 req 04 val 1500 [ 520.556293][ T1111] pwc: recv_control_msg error -32 req 02 val 2500 [ 520.563021][ T26] audit: type=1804 audit(6055075356.345:27): pid=11347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2096" name="/newroot/392/file1" dev="fuse" ino=1 res=1 errno=0 [ 520.792272][ T1111] pwc: recv_control_msg error -32 req 02 val 2400 [ 520.954142][T11355] Can't find ip_set type hash:ne [ 521.492515][ T1111] pwc: recv_control_msg error -71 req 02 val 2900 [ 521.522494][ T1111] pwc: recv_control_msg error -71 req 02 val 2800 [ 521.528852][T11369] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 521.562501][ T1111] pwc: recv_control_msg error -71 req 04 val 1100 [ 521.592525][ T1111] pwc: recv_control_msg error -71 req 04 val 1200 [ 521.893225][ T1111] pwc: Registered as video103. [ 521.913526][ T1111] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input26 [ 521.919263][T11371] netlink: 'syz.4.2102': attribute type 17 has an invalid length. [ 521.931125][T11371] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2102'. [ 521.983457][ T1111] usb 4-1: USB disconnect, device number 19 [ 522.815618][T11371] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 524.212825][T11387] hugetlbfs: syz.3.2106 (11387): Using mlock ulimits for SHM_HUGETLB is deprecated [ 524.352886][T11394] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2109'. [ 524.529902][T11400] overlayfs: missing 'lowerdir' [ 526.391132][T11415] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2112'. [ 528.241728][T11430] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2119'. [ 529.990660][T11468] Can't find ip_set type hash:ne [ 530.263456][T11474] siw: device registration error -23 [ 530.530950][T11486] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2135'. [ 530.652704][ T13] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 530.688443][T11492] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 530.707967][T11494] netlink: 104 bytes leftover after parsing attributes in process `syz.5.2138'. [ 531.719268][T11505] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2141'. [ 531.728448][T11505] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 531.792388][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 531.822685][ T13] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 532.688316][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.715347][ T13] usb 5-1: config 0 descriptor?? [ 532.773547][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 533.212202][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 533.262241][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 533.302186][ T13] pwc: recv_control_msg error -32 req 02 val 2c00 [ 533.337370][T11519] siw: device registration error -23 [ 533.342372][ T13] pwc: recv_control_msg error -32 req 04 val 1000 [ 533.389173][ T13] pwc: recv_control_msg error -32 req 04 val 1300 [ 533.432228][ T13] pwc: recv_control_msg error -32 req 04 val 1400 [ 533.483428][ T13] pwc: recv_control_msg error -32 req 02 val 2000 [ 533.580674][T11528] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 533.772770][T11528] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 533.890200][T11528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 533.948329][T11528] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 534.355887][ T13] pwc: recv_control_msg error -32 req 02 val 2100 [ 534.402288][ T13] pwc: recv_control_msg error -32 req 04 val 1500 [ 535.518995][ T13] pwc: recv_control_msg error -32 req 02 val 2500 [ 535.562245][ T13] pwc: recv_control_msg error -71 req 02 val 2400 [ 535.592199][ T13] pwc: recv_control_msg error -71 req 02 val 2600 [ 535.622270][ T13] pwc: recv_control_msg error -71 req 02 val 2900 [ 535.782757][ T13] pwc: recv_control_msg error -71 req 02 val 2800 [ 535.813284][ T13] pwc: recv_control_msg error -71 req 04 val 1100 [ 536.812805][ T13] pwc: recv_control_msg error -71 req 04 val 1200 [ 536.820777][ T13] pwc: Registered as video103. [ 536.830033][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input27 [ 536.881353][T11569] siw: device registration error -23 [ 536.921361][ T13] usb 5-1: USB disconnect, device number 12 [ 537.395441][T11558] block device autoloading is deprecated and will be removed. [ 538.618844][T11596] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 538.942170][ T13] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 540.073151][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 540.502678][ T23] usb 5-1: Using ep0 maxpacket: 16 [ 540.592242][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 540.612214][ T13] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 540.621288][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.661887][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.673009][ T23] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 540.682492][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.706320][ T23] usb 5-1: config 0 descriptor?? [ 540.763196][ T13] usb 4-1: config 0 descriptor?? [ 540.834303][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 541.386836][T11626] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.562251][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 541.612241][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 541.753275][ T23] hid-led: probe of 0003:1D34:000A.0004 failed with error -71 [ 541.813297][ T23] usb 5-1: USB disconnect, device number 13 [ 542.251735][ T13] pwc: recv_control_msg error -32 req 02 val 2c00 [ 542.267621][T11636] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 542.302486][ T13] pwc: recv_control_msg error -32 req 04 val 1000 [ 542.402552][ T13] pwc: recv_control_msg error -32 req 04 val 1300 [ 542.549597][ T13] pwc: recv_control_msg error -32 req 04 val 1400 [ 543.072315][ T13] pwc: recv_control_msg error -32 req 02 val 2000 [ 543.582767][ T13] pwc: recv_control_msg error -32 req 02 val 2100 [ 543.872336][ T13] pwc: recv_control_msg error -71 req 04 val 1500 [ 543.918001][ T13] pwc: recv_control_msg error -71 req 02 val 2500 [ 544.792380][ T13] pwc: recv_control_msg error -71 req 02 val 2400 [ 544.866483][ T13] pwc: recv_control_msg error -71 req 02 val 2600 [ 545.002251][ T13] pwc: recv_control_msg error -71 req 02 val 2900 [ 545.022346][ T13] pwc: recv_control_msg error -71 req 02 val 2800 [ 545.042318][ T13] pwc: recv_control_msg error -71 req 04 val 1100 [ 545.065940][ T13] pwc: recv_control_msg error -71 req 04 val 1200 [ 545.075448][ T13] pwc: Registered as video103. [ 545.081279][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 545.612293][T11687] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2189'. [ 545.624693][T11687] unsupported nlmsg_type 40 [ 546.072184][ T13] usb 4-1: USB disconnect, device number 20 [ 549.472040][T11730] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 549.589314][T11730] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 550.577956][T11745] loop4: detected capacity change from 0 to 512 [ 550.705755][T11745] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.2205: inode has both inline data and extents flags [ 550.787409][T11745] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.2205: couldn't read orphan inode 15 (err -117) [ 550.805806][T11745] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 553.253093][T11768] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2212'. [ 553.427026][ T23] hid-generic FFFF:0008:0003.0005: item fetching failed at offset 3/4 [ 553.438134][ T23] hid-generic: probe of FFFF:0008:0003.0005 failed with error -22 [ 556.902310][ T23] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 557.891900][T11809] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2224'. [ 557.982362][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 558.001531][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 558.018522][ T23] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 558.030063][T11811] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 558.038348][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 558.069819][T11811] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 558.072534][ T23] usb 4-1: config 0 descriptor?? [ 558.099463][T11811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 558.109638][T11811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 558.878703][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 560.704704][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 560.731921][ T23] usb 4-1: USB disconnect, device number 21 [ 564.869499][T11858] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 566.792198][ T1108] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 568.095439][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.101881][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.252360][ T1108] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.292897][ T1108] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 568.438892][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.042646][ T1108] usb 6-1: config 0 descriptor?? [ 570.062253][ T1108] usb 6-1: can't set config #0, error -71 [ 570.072776][ T1108] usb 6-1: USB disconnect, device number 7 [ 572.655049][T11915] netlink: 'syz.4.2255': attribute type 10 has an invalid length. [ 572.948886][T11923] lo speed is unknown, defaulting to 1000 [ 577.507306][T11957] kvm: emulating exchange as write [ 579.160791][ T1108] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 579.542615][ T1108] usb 1-1: config 0 has no interfaces? [ 579.551507][ T1108] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 579.693758][ T1108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 579.906339][ T1108] usb 1-1: config 0 descriptor?? [ 580.658388][ T4189] usb 1-1: USB disconnect, device number 17 [ 580.768363][T11997] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 580.796620][T11997] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 580.817738][T11997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 580.833489][T11997] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 581.387495][T12010] netlink: 'syz.1.2284': attribute type 5 has an invalid length. [ 583.422262][ T4189] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 583.692217][ T4189] usb 4-1: Using ep0 maxpacket: 16 [ 583.813080][ T4189] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 583.849721][ T4189] usb 4-1: config 0 has no interface number 0 [ 584.157619][ T4189] usb 4-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01 [ 584.177030][ T4189] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.236952][ T4189] usb 4-1: Product: syz [ 584.256164][ T4189] usb 4-1: Manufacturer: syz [ 584.817679][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 584.828098][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 584.837287][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 584.847035][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 584.856070][T12049] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2298'. [ 585.553138][T12052] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 585.782904][ T4189] usb 4-1: SerialNumber: syz [ 585.810946][ T4189] usb 4-1: config 0 descriptor?? [ 585.854325][ T4189] gspca_main: xirlink-cit-2.14.0 probing 0545:8080 [ 586.816779][T12060] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.480591][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0400, value 0x01, error -71) [ 587.513665][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x00, error -71) [ 587.849824][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0420, value 0x01, error -71) [ 588.105066][T12072] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2306'. [ 588.142460][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0409, value 0x0D, error -71) [ 588.572212][T12085] netlink: 300 bytes leftover after parsing attributes in process `syz.1.2310'. [ 589.422238][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x040A, value 0x02, error -71) [ 589.482183][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0405, value 0x18, error -71) [ 589.661603][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0435, value 0x08, error -71) [ 591.258410][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x040B, value 0x26, error -71) [ 591.336250][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0437, value 0x07, error -71) [ 591.382639][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x042F, value 0x15, error -71) [ 591.462360][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0439, value 0x2B, error -71) [ 591.512320][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x043A, value 0x26, error -71) [ 591.583185][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0438, value 0x08, error -71) [ 591.923182][ T26] audit: type=1326 audit(6055075427.685:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c608a749 code=0x7ffc0000 [ 592.118897][ T26] audit: type=1326 audit(6055075427.685:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c608a749 code=0x7ffc0000 [ 592.202273][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x042B, value 0x1E, error -71) [ 592.222258][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x042C, value 0x41, error -71) [ 592.272230][ T4189] gspca_xirlink_cit: Failed to write a register (index 0x0100, value 0xC0, error -71) [ 592.355428][ T26] audit: type=1326 audit(6055075427.695:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f50c608a749 code=0x7ffc0000 [ 592.387060][ T4189] input: xirlink-cit as /devices/platform/dummy_hcd.3/usb4/4-1/input/input29 [ 592.464686][ T26] audit: type=1326 audit(6055075427.705:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c608a749 code=0x7ffc0000 [ 592.496754][ T4189] usb 4-1: USB disconnect, device number 22 [ 592.625957][ T1108] hid-generic FFFF:0008:0003.0006: item fetching failed at offset 3/4 [ 592.663102][ T26] audit: type=1326 audit(6055075427.705:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12108 comm="syz.3.2317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f50c608a749 code=0x7ffc0000 [ 592.678617][ T1108] hid-generic: probe of FFFF:0008:0003.0006 failed with error -22 [ 595.885248][T12175] siw: device registration error -23 [ 597.122875][ T9267] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 597.492390][ T9267] usb 4-1: config 0 has an invalid interface number: 189 but max is 0 [ 597.513634][ T9267] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 597.526659][ T9267] usb 4-1: config 0 has no interface number 0 [ 597.652271][ T9267] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02 [ 597.661525][ T9267] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 597.669638][ T9267] usb 4-1: Product: syz [ 597.673994][ T9267] usb 4-1: SerialNumber: syz [ 597.681032][ T9267] usb 4-1: config 0 descriptor?? [ 597.723261][ T9267] ums-alauda 4-1:0.189: USB Mass Storage device detected [ 597.822204][ T1111] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 597.882528][ T4189] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 597.928430][ T1108] usb 4-1: USB disconnect, device number 23 [ 598.132264][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 598.142811][ T4189] usb 6-1: device descriptor read/64, error -71 [ 598.582843][ T1111] usb 2-1: config 0 interface 0 has no altsetting 0 [ 598.840570][T12229] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2350'. [ 599.483262][ T4189] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 599.532521][ T1111] usb 2-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=bc.76 [ 599.541942][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.550101][ T1111] usb 2-1: Product: syz [ 599.555246][ T1111] usb 2-1: Manufacturer: syz [ 599.560051][ T1111] usb 2-1: SerialNumber: syz [ 599.574678][ T13] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 599.682242][ T4189] usb 6-1: device descriptor read/64, error -71 [ 599.721098][ T1111] usb 2-1: config 0 descriptor?? [ 599.765391][ T1111] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 found [ 599.824765][ T4189] usb usb6-port1: attempt power cycle [ 599.842299][ T13] usb 1-1: Using ep0 maxpacket: 32 [ 600.436051][ T13] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 600.463284][ T1111] snd_usb_toneport 2-1:0.0: cannot get proper max packet size [ 600.481745][ T1111] snd_usb_toneport 2-1:0.0: Line 6 TonePort UX2 now disconnected [ 600.509357][ T1111] snd_usb_toneport: probe of 2-1:0.0 failed with error -22 [ 600.642287][ T13] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 600.732149][ T4189] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 601.324607][ T13] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 601.333013][ T13] usb 1-1: Product: syz [ 601.337203][ T13] usb 1-1: Manufacturer: syz [ 601.341805][ T13] usb 1-1: SerialNumber: syz [ 601.361135][ T13] usb 1-1: config 0 descriptor?? [ 601.385567][ T4339] usb 2-1: USB disconnect, device number 14 [ 601.392409][T12228] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 601.412890][ T13] hub 1-1:0.0: bad descriptor, ignoring hub [ 601.418850][ T13] hub: probe of 1-1:0.0 failed with error -5 [ 601.572882][ T4189] usb 6-1: device not accepting address 10, error -71 [ 602.094793][ T13] usb 1-1: USB disconnect, device number 18 [ 602.163065][T12257] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 602.175911][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 602.185810][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 602.263320][T12257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.936505][ T4189] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 603.093996][ T4189] usb 6-1: Using ep0 maxpacket: 16 [ 603.174867][T12267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2362'. [ 603.272486][ T4189] usb 6-1: config 0 has an invalid interface number: 145 but max is 0 [ 603.471692][ T4189] usb 6-1: config 0 has no interface number 0 [ 603.972570][ T4189] usb 6-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 603.988976][ T4189] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.713178][ T4189] usb 6-1: Product: syz [ 604.729343][ T4189] usb 6-1: Manufacturer: syz [ 604.739025][ T4189] usb 6-1: SerialNumber: syz [ 604.751652][ T4189] usb 6-1: config 0 descriptor?? [ 604.912328][ T4189] usb 6-1: can't set config #0, error -71 [ 604.922255][ T4339] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 604.935395][ T4189] usb 6-1: USB disconnect, device number 11 [ 605.153207][T12298] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 605.332236][ T4339] usb 5-1: Using ep0 maxpacket: 8 [ 605.567013][T12304] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 605.623237][ T4339] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 605.675809][ T4339] usb 5-1: config 179 has no interface number 0 [ 605.686837][ T4339] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 605.701423][ T4339] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 605.716172][ T4339] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 605.730518][ T4339] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 605.746140][ T4339] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 605.880045][ T4339] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 605.954046][ T4339] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 606.181046][T12278] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 606.896674][ T23] usb 5-1: USB disconnect, device number 14 [ 606.912128][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 611.622082][T12390] usb usb1: check_ctrlrecip: process 12390 (syz.1.2399) requesting ep 01 but needs 81 [ 611.631787][T12390] usb usb1: usbfs: process 12390 (syz.1.2399) did not claim interface 0 before use [ 612.163382][T12397] tipc: Started in network mode [ 612.168415][T12397] tipc: Node identity 028e62dec23d, cluster identity 4711 [ 612.176780][T12397] tipc: Enabled bearer , priority 0 [ 612.184722][T12397] device syzkaller0 entered promiscuous mode [ 612.213584][T12397] tipc: Resetting bearer [ 612.231088][T12395] tipc: Resetting bearer [ 612.246222][T12395] tipc: Disabling bearer [ 612.407833][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2402'. [ 612.790859][T12409] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 612.835430][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 612.871542][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 612.912290][T12409] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 614.253748][T12426] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2408'. [ 615.797995][T12444] tipc: Enabled bearer , priority 0 [ 615.854008][ T1111] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 615.854792][T12444] device syzkaller0 entered promiscuous mode [ 616.232295][ T1111] usb 1-1: Using ep0 maxpacket: 8 [ 616.377898][T12444] tipc: Resetting bearer [ 616.392398][ T1111] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 616.400619][ T1111] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 616.415075][T12455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 616.430261][T12440] tipc: Resetting bearer [ 616.436587][ T1111] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 616.452809][T12440] tipc: Disabling bearer [ 616.472243][ T1111] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 616.499555][ T1111] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 616.521459][ T1111] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 616.541393][ T1111] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.558876][T12459] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 616.578809][T12459] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 616.595858][T12459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 616.610983][T12459] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 617.331664][T12468] siw: device registration error -23 [ 617.337465][ T1111] usb 1-1: GET_CAPABILITIES returned 0 [ 617.347693][ T1111] usbtmc 1-1:16.0: can't read capabilities [ 617.724786][T12483] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2423'. [ 618.241022][ T1111] usb 1-1: USB disconnect, device number 19 [ 619.401009][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2428'. [ 619.756273][T12501] tipc: Enabled bearer , priority 0 [ 619.797779][T12498] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 619.817697][T12505] device syzkaller0 entered promiscuous mode [ 619.945629][T12501] tipc: Resetting bearer [ 619.963961][T12498] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 620.040911][T12500] tipc: Resetting bearer [ 620.163495][T12500] tipc: Disabling bearer [ 620.923339][ T4189] hid-generic FFFF:0008:0003.0007: item fetching failed at offset 3/4 [ 620.952559][ T4189] hid-generic: probe of FFFF:0008:0003.0007 failed with error -22 [ 621.100427][T12529] program syz.1.2437 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 621.726111][T12536] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2440'. [ 622.873767][T12550] siw: device registration error -23 [ 624.254376][T12556] tipc: Enabled bearer , priority 0 [ 624.332917][T12557] device syzkaller0 entered promiscuous mode [ 624.440459][T12558] tipc: Resetting bearer [ 624.458323][T12555] tipc: Resetting bearer [ 624.506477][T12555] tipc: Disabling bearer [ 627.061919][ T23] hid-generic FFFF:0008:0003.0008: item fetching failed at offset 3/4 [ 627.070773][ T23] hid-generic: probe of FFFF:0008:0003.0008 failed with error -22 [ 629.376376][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.386284][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.052179][ T1111] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 631.949351][ T1111] usb 2-1: device descriptor read/64, error -71 [ 632.232305][ T1111] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 637.163335][ T23] hid-generic FFFF:0008:0003.0009: item fetching failed at offset 3/4 [ 637.171696][ T23] hid-generic: probe of FFFF:0008:0003.0009 failed with error -22 [ 637.299523][ T4189] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 637.522134][ T4189] usb 1-1: device descriptor read/64, error -71 [ 637.832952][ T4189] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 638.009161][T12684] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2480'. [ 638.023944][ T4189] usb 1-1: device descriptor read/64, error -71 [ 638.152815][ T4189] usb usb1-port1: attempt power cycle [ 638.242097][ C0] hrtimer: interrupt took 49100 ns [ 639.599361][ T4189] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 639.702480][ T4189] usb 1-1: device descriptor read/8, error -71 [ 639.807455][T12693] device syzkaller0 entered promiscuous mode [ 639.825008][T12695] tipc: Enabled bearer , priority 0 [ 639.840627][T12695] device syzkaller0 entered promiscuous mode [ 640.002214][ T4189] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 640.082259][T12698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2485'. [ 640.262155][ T4189] usb 1-1: device not accepting address 23, error -71 [ 640.271455][ T4189] usb usb1-port1: unable to enumerate USB device [ 640.308516][T12696] tipc: Resetting bearer [ 640.349246][T12694] tipc: Resetting bearer [ 640.364643][T12694] tipc: Disabling bearer [ 640.409281][T12704] siw: device registration error -23 [ 640.445462][T12706] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 640.458674][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 640.491671][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 640.520341][T12706] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.267540][ T4189] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 641.518518][T12716] loop3: detected capacity change from 0 to 512 [ 641.696133][ T4189] usb 1-1: device descriptor read/64, error -71 [ 642.272390][T12716] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.2493: inode has both inline data and extents flags [ 642.335058][T12716] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.2493: couldn't read orphan inode 15 (err -117) [ 642.351786][T12716] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 642.352235][ T4189] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 642.577156][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2497'. [ 643.326119][T12742] siw: device registration error -23 [ 643.371615][T12746] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 643.512862][ T13] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 643.832980][ T13] usb 2-1: no configurations [ 643.838156][ T13] usb 2-1: can't read configurations, error -22 [ 644.072277][ T13] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 644.107579][T12752] device syzkaller0 entered promiscuous mode [ 644.402248][ T13] usb 2-1: no configurations [ 644.407051][ T13] usb 2-1: can't read configurations, error -22 [ 644.441644][ T13] usb usb2-port1: attempt power cycle [ 645.102573][ T13] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 645.531571][ T13] usb 2-1: device descriptor read/all, error -71 [ 646.313161][T12771] loop1: detected capacity change from 0 to 512 [ 646.382315][ T4189] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 646.435745][T12771] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.2508: inode has both inline data and extents flags [ 646.465549][T12771] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.2508: couldn't read orphan inode 15 (err -117) [ 646.491407][T12771] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 646.752836][ T4189] usb 4-1: Using ep0 maxpacket: 8 [ 646.832783][ T4224] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 647.024780][ T4189] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 647.163567][ T4189] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 647.196741][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2511'. [ 647.212144][ T4189] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.264448][ T4189] usb 4-1: config 0 descriptor?? [ 647.313853][ T4224] usb 5-1: device descriptor read/64, error -71 [ 647.331414][T12786] siw: device registration error -23 [ 647.535052][ T4189] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 647.582181][ T4224] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 648.304353][T12788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 648.370110][T12768] usb usb8: usbfs: process 12768 (syz.3.2506) did not claim interface 0 before use [ 648.512223][ T4224] usb 5-1: device descriptor read/64, error -71 [ 648.632260][ T4224] usb usb5-port1: attempt power cycle [ 648.688459][T12800] device syzkaller0 entered promiscuous mode [ 649.091527][ T4224] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 649.566781][T12810] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 649.579832][T12810] autofs4:pid:12810:autofs_fill_super: called with bogus options [ 650.142295][ T4224] usb 5-1: device descriptor read/8, error -71 [ 650.162156][ T13] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 650.166207][ T4339] usb 4-1: USB disconnect, device number 24 [ 650.240757][T12817] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2523'. [ 650.804304][T12822] siw: device registration error -23 [ 651.124808][ T13] usb 6-1: no configurations [ 651.129720][ T13] usb 6-1: can't read configurations, error -22 [ 651.192965][T12837] device syzkaller0 entered promiscuous mode [ 652.063033][T12838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 652.279469][ T13] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 653.245574][T12858] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 653.258803][T12858] autofs4:pid:12858:autofs_fill_super: called with bogus options [ 653.815558][ T13] usb 6-1: device descriptor read/64, error -71 [ 653.942366][ T13] usb usb6-port1: attempt power cycle [ 653.982178][ T1108] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 654.164267][T12863] overlayfs: failed to resolve './file1': -2 [ 654.242246][ T1108] usb 5-1: Using ep0 maxpacket: 8 [ 654.352224][ T13] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 654.362821][ T1108] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.399019][ T1108] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 654.449625][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.502363][ T13] usb 6-1: no configurations [ 654.507168][ T13] usb 6-1: can't read configurations, error -22 [ 654.551331][ T1108] usb 5-1: config 0 descriptor?? [ 654.722369][ T13] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 654.858460][ T1108] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 654.882405][ T13] usb 6-1: no configurations [ 654.887483][ T13] usb 6-1: can't read configurations, error -22 [ 654.938757][ T13] usb usb6-port1: unable to enumerate USB device [ 656.742211][ T1108] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 656.777746][ T13] usb 5-1: USB disconnect, device number 19 [ 657.413189][T12881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 657.476212][T12886] device syzkaller0 entered promiscuous mode [ 657.522637][ T1108] usb 6-1: no configurations [ 657.527337][ T1108] usb 6-1: can't read configurations, error -22 [ 658.300896][ T1108] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 658.409874][T12892] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 658.745628][T12905] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 658.758622][T12905] autofs4:pid:12905:autofs_fill_super: called with bogus options [ 659.131209][ T1108] usb 6-1: no configurations [ 659.174876][ T1108] usb 6-1: can't read configurations, error -22 [ 659.202268][ T1111] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 659.208697][ T1108] usb usb6-port1: attempt power cycle [ 659.793119][ T1111] usb 1-1: no configurations [ 659.801239][ T1111] usb 1-1: can't read configurations, error -22 [ 659.982258][ T1111] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 660.092768][ C0] ================================================================== [ 660.101605][ C0] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 660.109086][ C0] Read of size 2 at addr ffff88805d2cd82a by task syz.5.2554/12923 [ 660.117311][ C0] [ 660.119615][ C0] CPU: 0 PID: 12923 Comm: syz.5.2554 Not tainted syzkaller #0 [ 660.127049][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 660.137574][ C0] Call Trace: [ 660.140850][ C0] [ 660.143681][ C0] dump_stack_lvl+0x168/0x230 [ 660.148379][ C0] ? show_regs_print_info+0x20/0x20 [ 660.153578][ C0] ? _printk+0xcc/0x110 [ 660.157718][ C0] ? rose_timer_expiry+0x470/0x490 [ 660.162811][ C0] ? load_image+0x3b0/0x3b0 [ 660.167384][ C0] print_address_description+0x60/0x2d0 [ 660.172907][ C0] ? rose_timer_expiry+0x470/0x490 [ 660.177999][ C0] kasan_report+0xdf/0x130 [ 660.182401][ C0] ? rose_timer_expiry+0x470/0x490 [ 660.187495][ C0] rose_timer_expiry+0x470/0x490 [ 660.192513][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 660.197542][ C0] call_timer_fn+0x16c/0x530 [ 660.202138][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 660.207154][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 660.213122][ C0] ? __run_timers+0x7c0/0x7c0 [ 660.217782][ C0] ? rcu_is_watching+0x11/0xa0 [ 660.222535][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 660.227745][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 660.232936][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 660.237954][ C0] __run_timers+0x525/0x7c0 [ 660.242460][ C0] ? detach_timer+0x2b0/0x2b0 [ 660.247322][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 660.253308][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 660.258141][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 660.263409][ C0] run_timer_softirq+0x63/0xf0 [ 660.268159][ C0] handle_softirqs+0x328/0x820 [ 660.272906][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 660.277743][ C0] ? do_softirq+0x200/0x200 [ 660.282231][ C0] __irq_exit_rcu+0x12f/0x220 [ 660.286890][ C0] ? irq_exit_rcu+0x20/0x20 [ 660.291378][ C0] irq_exit_rcu+0x5/0x20 [ 660.295608][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 660.301255][ C0] [ 660.304169][ C0] [ 660.307088][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.313066][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 660.319118][ C0] Code: 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 50 d3 f1 0b 48 89 de 5b e9 57 9e 43 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d a4 a3 8a 7e 65 8b 15 a5 a3 8a 7e 81 e2 00 01 ff 00 74 [ 660.338707][ C0] RSP: 0018:ffffc9000306f9d0 EFLAGS: 00000297 [ 660.344774][ C0] RAX: ffffffff83d9cd7d RBX: 0000000000000000 RCX: ffff888029493b80 [ 660.352750][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000002 [ 660.360706][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc9000306fd50 [ 660.368659][ C0] R10: fffff5200060df67 R11: 1ffff9200060df60 R12: 1ffff9200060df80 [ 660.377048][ C0] R13: ffffc9000306fc00 R14: dffffc0000000000 R15: 0000000000000008 [ 660.385011][ C0] ? __import_iovec+0x2fd/0x490 [ 660.389888][ C0] __import_iovec+0x2fd/0x490 [ 660.394570][ C0] import_iovec+0x6f/0xa0 [ 660.398921][ C0] ___sys_recvmsg+0x420/0x4f0 [ 660.403608][ C0] ? __sys_recvmsg+0x250/0x250 [ 660.408364][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 660.413370][ C0] ? __might_fault+0xb3/0x110 [ 660.418031][ C0] do_recvmmsg+0x344/0x7a0 [ 660.422431][ C0] ? __sys_recvmmsg+0x280/0x280 [ 660.427269][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 660.432280][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 660.437295][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 660.441878][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 660.442788][ T1111] usb 1-1: no configurations [ 660.447069][ C0] do_syscall_64+0x4c/0xa0 [ 660.451842][ T1111] usb 1-1: can't read configurations, error -22 [ 660.456049][ C0] ? clear_bhb_loop+0x30/0x80 [ 660.456072][ C0] ? clear_bhb_loop+0x30/0x80 [ 660.456087][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 660.456104][ C0] RIP: 0033:0x7fe45ed52749 [ 660.469790][ T1111] usb usb1-port1: attempt power cycle [ 660.471681][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.506986][ C0] RSP: 002b:00007fe45cf98038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 660.515385][ C0] RAX: ffffffffffffffda RBX: 00007fe45efa9090 RCX: 00007fe45ed52749 [ 660.523339][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 660.531290][ C0] RBP: 00007fe45edd6f91 R08: 0000000000000000 R09: 0000000000000000 [ 660.539275][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 660.547244][ C0] R13: 00007fe45efa9128 R14: 00007fe45efa9090 R15: 00007ffea8e4b9a8 [ 660.555226][ C0] [ 660.558227][ C0] [ 660.560562][ C0] Allocated by task 150: [ 660.564781][ C0] __kasan_kmalloc+0xb5/0xf0 [ 660.569440][ C0] __alloc_skb+0x22c/0x750 [ 660.573836][ C0] skb_copy+0x139/0x790 [ 660.577971][ C0] mac80211_hwsim_tx_frame_no_nl+0xcc7/0x15d0 [ 660.584013][ C0] mac80211_hwsim_tx_frame+0x1b5/0x200 [ 660.589455][ C0] mac80211_hwsim_beacon_tx+0x4f3/0x920 [ 660.594989][ C0] __iterate_interfaces+0x243/0x500 [ 660.600184][ C0] ieee80211_iterate_active_interfaces_atomic+0xb3/0x140 [ 660.607186][ C0] mac80211_hwsim_beacon+0x9b/0x180 [ 660.612390][ C0] __hrtimer_run_queues+0x53d/0xc40 [ 660.617570][ C0] hrtimer_run_softirq+0x176/0x240 [ 660.622663][ C0] handle_softirqs+0x328/0x820 [ 660.627406][ C0] __irq_exit_rcu+0x12f/0x220 [ 660.632062][ C0] irq_exit_rcu+0x5/0x20 [ 660.636297][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 660.641919][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 660.647897][ C0] [ 660.650218][ C0] Freed by task 10139: [ 660.654266][ C0] kasan_set_track+0x4b/0x70 [ 660.658847][ C0] kasan_set_free_info+0x1f/0x40 [ 660.663791][ C0] ____kasan_slab_free+0xd5/0x110 [ 660.668792][ C0] slab_free_freelist_hook+0xea/0x170 [ 660.674139][ C0] kfree+0xef/0x2a0 [ 660.677925][ C0] skb_release_data+0x6fe/0x850 [ 660.682809][ C0] kfree_skb_reason+0xaf/0x110 [ 660.687563][ C0] ieee80211_iface_work+0x798/0xc60 [ 660.692754][ C0] process_one_work+0x863/0x1000 [ 660.697715][ C0] worker_thread+0xaa8/0x12a0 [ 660.702413][ C0] kthread+0x436/0x520 [ 660.706648][ C0] ret_from_fork+0x1f/0x30 [ 660.711068][ C0] [ 660.713553][ C0] Last potentially related work creation: [ 660.719772][ C0] kasan_save_stack+0x35/0x60 [ 660.724436][ C0] kasan_record_aux_stack+0xb8/0x100 [ 660.729787][ C0] insert_work+0x54/0x3d0 [ 660.734264][ C0] __queue_work+0x9c5/0xd50 [ 660.738749][ C0] call_timer_fn+0x16c/0x530 [ 660.743321][ C0] __run_timers+0x550/0x7c0 [ 660.747828][ C0] run_timer_softirq+0x63/0xf0 [ 660.752675][ C0] handle_softirqs+0x328/0x820 [ 660.757454][ C0] run_ksoftirqd+0x98/0xf0 [ 660.761846][ C0] smpboot_thread_fn+0x4f6/0x970 [ 660.766774][ C0] kthread+0x436/0x520 [ 660.770849][ C0] ret_from_fork+0x1f/0x30 [ 660.775247][ C0] [ 660.777549][ C0] Second to last potentially related work creation: [ 660.784109][ C0] kasan_save_stack+0x35/0x60 [ 660.788764][ C0] kasan_record_aux_stack+0xb8/0x100 [ 660.794036][ C0] call_rcu+0x182/0x930 [ 660.798196][ C0] inetdev_event+0x791/0x1360 [ 660.802870][ C0] raw_notifier_call_chain+0xcb/0x160 [ 660.808223][ C0] unregister_netdevice_many+0xf57/0x18f0 [ 660.813927][ C0] ip_tunnel_delete_nets+0x318/0x360 [ 660.819190][ C0] cleanup_net+0x77b/0xb80 [ 660.823599][ C0] process_one_work+0x863/0x1000 [ 660.828575][ C0] worker_thread+0xaa8/0x12a0 [ 660.833230][ C0] kthread+0x436/0x520 [ 660.837277][ C0] ret_from_fork+0x1f/0x30 [ 660.841672][ C0] [ 660.843985][ C0] The buggy address belongs to the object at ffff88805d2cd800 [ 660.843985][ C0] which belongs to the cache kmalloc-512 of size 512 [ 660.858033][ C0] The buggy address is located 42 bytes inside of [ 660.858033][ C0] 512-byte region [ffff88805d2cd800, ffff88805d2cda00) [ 660.871213][ C0] The buggy address belongs to the page: [ 660.876840][ C0] page:ffffea000174b300 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d2cc [ 660.886967][ C0] head:ffffea000174b300 order:2 compound_mapcount:0 compound_pincount:0 [ 660.895277][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 660.903271][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888016841c80 [ 660.911877][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 660.920437][ C0] page dumped because: kasan: bad access detected [ 660.927028][ C0] page_owner tracks the page as allocated [ 660.932805][ C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d2a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 4330, ts 61077106213, free_ts 12229243179 [ 660.952796][ C0] get_page_from_freelist+0x1b77/0x1c60 [ 660.958335][ C0] __alloc_pages+0x1e1/0x470 [ 660.962916][ C0] new_slab+0xc0/0x4b0 [ 660.966991][ C0] ___slab_alloc+0x81e/0xdf0 [ 660.971655][ C0] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 660.977472][ C0] __alloc_skb+0x22c/0x750 [ 660.981874][ C0] ndisc_alloc_skb+0xa6/0x420 [ 660.986549][ C0] ndisc_send_rs+0x291/0x730 [ 660.991119][ C0] addrconf_rs_timer+0x2b8/0x600 [ 660.992342][ T1111] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 660.996042][ C0] call_timer_fn+0x16c/0x530 [ 661.008209][ C0] __run_timers+0x525/0x7c0 [ 661.012723][ C0] run_timer_softirq+0x63/0xf0 [ 661.017489][ C0] handle_softirqs+0x328/0x820 [ 661.022265][ C0] __irq_exit_rcu+0x12f/0x220 [ 661.026928][ C0] irq_exit_rcu+0x5/0x20 [ 661.031149][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 661.036796][ C0] page last free stack trace: [ 661.041445][ C0] free_unref_page_prepare+0x637/0x6c0 [ 661.046892][ C0] free_unref_page+0x94/0x280 [ 661.051577][ C0] free_contig_range+0x96/0xf0 [ 661.056352][ C0] destroy_args+0x100/0xa20 [ 661.060928][ C0] debug_vm_pgtable+0x318/0x370 [ 661.065765][ C0] do_one_initcall+0x1ee/0x680 [ 661.070516][ C0] do_initcall_level+0x137/0x1f0 [ 661.075448][ C0] do_initcalls+0x4b/0x90 [ 661.079760][ C0] kernel_init_freeable+0x3ce/0x560 [ 661.084940][ C0] kernel_init+0x19/0x1b0 [ 661.089257][ C0] ret_from_fork+0x1f/0x30 [ 661.093673][ C0] [ 661.096000][ C0] Memory state around the buggy address: [ 661.101636][ C0] ffff88805d2cd700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 661.109685][ C0] ffff88805d2cd780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 661.117866][ C0] >ffff88805d2cd800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.126045][ C0] ^ [ 661.131403][ C0] ffff88805d2cd880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.139475][ C0] ffff88805d2cd900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 661.147522][ C0] ================================================================== [ 661.155589][ C0] Disabling lock debugging due to kernel taint [ 661.161949][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 661.169133][ C0] CPU: 0 PID: 12923 Comm: syz.5.2554 Tainted: G B syzkaller #0 [ 661.178913][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 661.189154][ C0] Call Trace: [ 661.192415][ C0] [ 661.195241][ C0] dump_stack_lvl+0x168/0x230 [ 661.199903][ C0] ? show_regs_print_info+0x20/0x20 [ 661.205080][ C0] ? load_image+0x3b0/0x3b0 [ 661.209566][ C0] panic+0x2c9/0x7f0 [ 661.213443][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 661.217927][ C0] ? _raw_spin_unlock_irqrestore+0xa5/0x100 [ 661.223797][ C0] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 661.229673][ C0] ? _raw_spin_unlock+0x40/0x40 [ 661.234500][ C0] ? print_memory_metadata+0x314/0x400 [ 661.240041][ C0] ? rose_timer_expiry+0x470/0x490 [ 661.245138][ C0] check_panic_on_warn+0x80/0xa0 [ 661.250071][ C0] ? rose_timer_expiry+0x470/0x490 [ 661.255167][ C0] end_report+0x6d/0xf0 [ 661.259307][ C0] kasan_report+0x102/0x130 [ 661.263795][ C0] ? rose_timer_expiry+0x470/0x490 [ 661.268891][ C0] rose_timer_expiry+0x470/0x490 [ 661.273810][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 661.278824][ C0] call_timer_fn+0x16c/0x530 [ 661.283394][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 661.288408][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 661.294420][ C0] ? __run_timers+0x7c0/0x7c0 [ 661.299090][ C0] ? rcu_is_watching+0x11/0xa0 [ 661.303831][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 661.309007][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 661.314180][ C0] ? rose_start_t1timer+0xd0/0xd0 [ 661.319446][ C0] __run_timers+0x525/0x7c0 [ 661.323935][ C0] ? detach_timer+0x2b0/0x2b0 [ 661.328598][ C0] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 661.334589][ C0] ? sched_clock_cpu+0x15/0x3c0 [ 661.339416][ C0] ? ktime_get_real_ts64+0x420/0x420 [ 661.344681][ C0] run_timer_softirq+0x63/0xf0 [ 661.349426][ C0] handle_softirqs+0x328/0x820 [ 661.354168][ C0] ? __irq_exit_rcu+0x12f/0x220 [ 661.358996][ C0] ? do_softirq+0x200/0x200 [ 661.363480][ C0] __irq_exit_rcu+0x12f/0x220 [ 661.368138][ C0] ? irq_exit_rcu+0x20/0x20 [ 661.372628][ C0] irq_exit_rcu+0x5/0x20 [ 661.376859][ C0] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 661.382474][ C0] [ 661.385393][ C0] [ 661.388309][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 661.394269][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x4/0x60 [ 661.400314][ C0] Code: 84 00 00 00 00 00 53 48 89 fb e8 17 00 00 00 48 8b 3d 50 d3 f1 0b 48 89 de 5b e9 57 9e 43 00 00 00 cc cc 00 00 cc 48 8b 04 24 <65> 48 8b 0d a4 a3 8a 7e 65 8b 15 a5 a3 8a 7e 81 e2 00 01 ff 00 74 [ 661.419900][ C0] RSP: 0018:ffffc9000306f9d0 EFLAGS: 00000297 [ 661.425947][ C0] RAX: ffffffff83d9cd7d RBX: 0000000000000000 RCX: ffff888029493b80 [ 661.433901][ C0] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000002 [ 661.441852][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc9000306fd50 [ 661.449806][ C0] R10: fffff5200060df67 R11: 1ffff9200060df60 R12: 1ffff9200060df80 [ 661.457759][ C0] R13: ffffc9000306fc00 R14: dffffc0000000000 R15: 0000000000000008 [ 661.465718][ C0] ? __import_iovec+0x2fd/0x490 [ 661.470556][ C0] __import_iovec+0x2fd/0x490 [ 661.475219][ C0] import_iovec+0x6f/0xa0 [ 661.479538][ C0] ___sys_recvmsg+0x420/0x4f0 [ 661.484360][ C0] ? __sys_recvmsg+0x250/0x250 [ 661.489164][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 661.494184][ C0] ? __might_fault+0xb3/0x110 [ 661.498863][ C0] do_recvmmsg+0x344/0x7a0 [ 661.503273][ C0] ? __sys_recvmmsg+0x280/0x280 [ 661.508104][ C0] ? __lock_acquire+0x7c60/0x7c60 [ 661.513113][ C0] __x64_sys_recvmmsg+0x18d/0x240 [ 661.518134][ C0] ? do_recvmmsg+0x7a0/0x7a0 [ 661.522896][ C0] ? lockdep_hardirqs_on+0x94/0x140 [ 661.528089][ C0] do_syscall_64+0x4c/0xa0 [ 661.532493][ C0] ? clear_bhb_loop+0x30/0x80 [ 661.537149][ C0] ? clear_bhb_loop+0x30/0x80 [ 661.541808][ C0] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 661.547684][ C0] RIP: 0033:0x7fe45ed52749 [ 661.552086][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.571685][ C0] RSP: 002b:00007fe45cf98038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 661.580087][ C0] RAX: ffffffffffffffda RBX: 00007fe45efa9090 RCX: 00007fe45ed52749 [ 661.588068][ C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003 [ 661.596021][ C0] RBP: 00007fe45edd6f91 R08: 0000000000000000 R09: 0000000000000000 [ 661.603995][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 661.611982][ C0] R13: 00007fe45efa9128 R14: 00007fe45efa9090 R15: 00007ffea8e4b9a8 [ 661.619945][ C0] [ 661.623176][ C0] Kernel Offset: disabled [ 661.627500][ C0] Rebooting in 86400 seconds..