last executing test programs: 50m59.583119633s ago: executing program 2 (id=132): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x4, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x400, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES32, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab8325cdc8faa5cb28989108c94e95a12489c73629f24aaef11a6cafca29547a05f362658b49"], 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4764beb"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd8500", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 50m59.350560858s ago: executing program 2 (id=135): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) lseek(0xffffffffffffffff, 0x8020100001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000010100008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @private}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x73}, @noop]}}}], 0x40}, 0x0) 50m58.169498106s ago: executing program 2 (id=138): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{0x0, 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 50m56.179977358s ago: executing program 2 (id=142): socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x2, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r5, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x468d, &(0x7f0000000300)={0x0, 0x9b92, 0x4, 0x1, 0x226, 0x0, r3}, &(0x7f0000000280), &(0x7f0000000380)) close(0xffffffffffffffff) write$binfmt_script(r3, &(0x7f0000000100), 0xfffffd9d) r7 = socket(0x1e, 0x4, 0x0) connect$tipc(r7, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) sendfile(r7, r3, 0x0, 0x8010002b) 50m50.817170103s ago: executing program 2 (id=153): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x7ffe, 0x1000, 0x4, 0x2}}) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9"], 0x24}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='\a\x00'], 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x18000, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, &(0x7f0000000100)={0xf0f022}) r7 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) pselect6(0x40, &(0x7f0000000400), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r7, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8000, 0x1000, 0x4, 0x2}}) 50m49.101532662s ago: executing program 2 (id=156): socket(0x2, 0x80805, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000340)={0x0, 0x10, 0x0, 0xfffffffe, "00fc2000000000201b14700c00000000a80008801200000000000a000000e919"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0xd}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 50m33.824165887s ago: executing program 32 (id=156): socket(0x2, 0x80805, 0x0) socket$rds(0x15, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000340)={0x0, 0x10, 0x0, 0xfffffffe, "00fc2000000000201b14700c00000000a80008801200000000000a000000e919"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205647, 0x0) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) chdir(0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed074479000000000000000018000000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000003c0)='sched_switch\x00', r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001080)=ANY=[@ANYRES32=r4], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r5, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x4}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0xffff, 0xa5}, {}, {0xd}, @connect={{0x2, 0x3}, {0x3}}}, {0x0, 0x0, 0x0, 0x0, @time={0x2, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0x0, 0x1, 0x0, @time, {}, {}, @connect={{}, {0x0, 0x5}}}], 0x70) 20.231643004s ago: executing program 0 (id=9004): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000002000)=ANY=[@ANYBLOB="12010000facf01406e0510401c20000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0xfffffffd, {0x0, 0x0, 0x12, r2, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x1, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x26f}]}]}]}}]}, 0xac}}, 0x0) syz_usb_connect(0x3, 0x689, &(0x7f00000008c0)={{0x12, 0x1, 0x110, 0xbd, 0x30, 0x86, 0x20, 0x2c7c, 0x512, 0x2c23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x677, 0x3, 0xe, 0x8a, 0x0, 0xc0, [{{0x9, 0x4, 0x61, 0x6, 0x0, 0xff, 0x0, 0x0, 0x1f, [@generic={0x48, 0x8, "e961fd569d1fa3c3b6afac6aae4117084e9253727fc9587c391f6efd374a0aed04dff4d6db05976ffb1fab43b9e44106d5bb846f8c81134860a971ecd7c91bf3cebbed918786"}, @hid_hid={0x9, 0x21, 0x8, 0x1, 0x1, {0x22, 0xcc5}}]}}, {{0x9, 0x4, 0xf0, 0xde, 0x3, 0xe9, 0x92, 0x47, 0xf1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "fc52dc"}, {0x5, 0x24, 0x0, 0x81}, {0xd, 0x24, 0xf, 0x1, 0x2ccc, 0x0, 0x80, 0x3}, {0x6, 0x24, 0x1a, 0x3, 0x1c}, [@network_terminal={0x7, 0x24, 0xa, 0x2, 0x8, 0x4, 0xa3}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x6, 0x3}, @mdlm={0x15, 0x24, 0x12, 0xfffb}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0xfa}, @obex={0x5, 0x24, 0x15, 0x4}]}], [{{0x9, 0x5, 0x3, 0x8, 0x200, 0x4, 0x10, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x5, 0x1}]}}, {{0x9, 0x5, 0xd, 0x1, 0x20, 0x7, 0x6, 0x0, [@generic={0x4c, 0xc, "9a6ac04fe0d1091c67d893e9f065e4b247a12d393578b09fee73131647ae47eff83e635e5951fabf6de8d0844f11d0162956d65b404629c6f018359684207021f85d53c6d09204ce9fcd"}, @generic={0x32, 0x6, "af4e5cd91e89074bf7e012aeee4b952ee66ec023781a0a0e2b55a9188933503130a518685f550f11a1269d84c5acdff8"}]}}, {{0x9, 0x5, 0x1, 0xc, 0x40, 0x0, 0x68, 0xfd, [@generic={0x94, 0x2, "ea1dd3c563da3dc46d9f29e7653e988a748e31d10fc75c42ddd406aa7796cb9d3dd66a0cddbdbf4701779d04d0588c3a18b665190a96432cd231d38548ef92a8257c981b8baf436bf2488221a90c8b351d88678427ba2082187933d699adf694c4ff3cbdfeab54750e3f5c1d95394b3728a73fa16c4dd2e6e5680b36a879bb07b34ebf4408699bcc148cbcdfa6bc70abb728"}]}}]}}, {{0x9, 0x4, 0xde, 0x5, 0xd, 0xd8, 0x1c, 0xb1, 0x24, [@generic={0xb7, 0x11, "d42b7f5a58b37f6335375f3f20af7980c1fef126e775e2a27d886778870a22cb603e6acc912ec9577ad8bc7c1ef8d9549becc474e3b0943c1a4f133305af72b14a612181dba9a78a4af482a72300973799d1e1dd808673bf9d78c0c53869c2898dead19a86a1481f8e3aebb5a39dc21cc894d9c33a84778340a97a03ae669a584b79821ffed80c8d32b03c8587534333157aa1051bd174163a2e2c6f5a5a5a4a6ef7bd6fe9e3e9eda0caa2a498dee7bce8f39cb2cc"}], [{{0x9, 0x5, 0x0, 0x0, 0x400, 0x7f, 0x8, 0x2, [@generic={0x5f, 0x2, "0679551a44fa89ff6dd0bbbd33eb83e9f1470714d2e354fe04a3badb01b692f04b6b25ab5d5bce2030a9f7305189f83f7f4f6648ea10e0dd391031a1f9e1b898ade7fe2e93c290c86f45e01f26d840fccf8327e56fdaa61a720e80f5e8"}]}}, {{0x9, 0x5, 0xe, 0xc, 0x10, 0x25, 0x1, 0x74, [@generic={0x2e, 0x23, "6ef8774948bf2d73af6ce180c0f1dacf46951832a57304eab8d2ed37f69940c5b43fe9ba4c5986a233bd377d"}]}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xb, 0x0, 0x5}}, {{0x9, 0x5, 0x7, 0x2, 0x20, 0x7f, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x82}]}}, {{0x9, 0x5, 0xa, 0x0, 0x8, 0x3, 0x1, 0xa, [@generic={0x28, 0x3, "2b1462b77142652e8b7f93500a643c3c4bcf2394a0632e42dbc8e30fe3c4169616c6293612b8"}]}}, {{0x9, 0x5, 0xd, 0x8, 0x2c806cd5c09bc783, 0x9, 0x7f, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x7, 0x1}, @generic={0xd, 0x30, "e4f111f5569d710533b310"}]}}, {{0x9, 0x5, 0xa, 0x8, 0x8, 0x1, 0xf8, 0x61, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x8, 0x6}, @generic={0x9d, 0x23, "1cf06abec5b2cd48c0687d8bcdd5fe161adbdf909c0cb92f36a2af5b21da9401be1307465213f3f9bf6fb9980d9d29e5b4f8a30ffc8d27504aa4141a62b7bc0c31330482eafae0d9177b2f3dc65f6568f97c6e71f264e27be7edb6448aa2f87f17b3353c2ef83dced66836eed737a325e3523616898abab854952969defb3504d4ad9404ee3ba91b8ae0c78be6183423d0f8e2c619159aba800438"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x3ff, 0x8, 0x5, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x9}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8001}]}}, {{0x9, 0x5, 0x0, 0x3, 0x10, 0x5c, 0xfc, 0x8, [@generic={0xd0, 0x24, "ec36ffd7f758414caa204f7905cc9756e0901e79565913b5d8d56c939f637b006a10548890bfe9124ffb89bceb972dc96c550a4e9236045f7860df70d20e750d2d6f2a656120c2b55a2a7701f1c49daac7fbb29748d64aa6cb8b502f115d5d21c2acfdb5a598aeae61e7a16780651475af1aadc338cf43fcf9e2a6f7bebd0eaffc4d21ee09e33c68deb98626ac6d18b25a2e5eb5f849bce6a264603afc139c6e8d8fdeeaaef030ca0070e66e5b95c07f803cd1b8d4b245c51d4db0562423cf654ef702ba04864c4fbbf1fdbe7216"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x3e7, 0x8, 0x1, 0x10, [@generic={0x9, 0x3, "3d19b77847505f"}, @generic={0x6f, 0x21, "4f8f7f99f94ed51a4feb0f454419301f69af87beeb2befecbbd48711a5d54c3854aebce90a5e0abd62f51adb4840022b6578ec34dd32a9e12a32e5f84cff08df798a5797bf51770dec5627ac2ac3121c712808fe11a89f571d68f9f43f9066190c19be173bea8919e71014455d"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x10, 0x9, 0x0, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x62, 0xe4}]}}, {{0x9, 0x5, 0x7, 0x8, 0x3ff, 0x9, 0x4, 0xfc, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x5, 0xd9a}]}}, {{0x9, 0x5, 0xe, 0x10, 0x10, 0x1, 0x0, 0x8, [@generic={0x7c, 0x3, "333cc1f8344646c3e6aca6daf18022ae76745c92b23235b737d8a9086f1e3ff58f7b8f803948cd26a2c2c8f4a2ae2a32756792c7e27a35efb40de501b88aea8c83c8532fafb770f69cd772000d189c77c32c3574f68b4b815efd19965fbf0aa9d1ed19642ce5c1c3ba4c8e3f1286827c918fd092b2a618f2b6e0"}]}}]}}]}}]}}, &(0x7f0000000380)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x310, 0x6, 0x1f, 0xd, 0x8, 0x40}, 0x19, &(0x7f0000000040)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "a255c98226f6282d635bfe2bb58900bd"}]}, 0x5, [{0x62, &(0x7f0000000080)=@string={0x62, 0x3, "d8f3ca1b40ef21a088f0e69e6d85830a4841c43d6ef45eac4f15fa34336655f9f0780b19c79235d97484daf1bbaf92dfa4132464f7d5d252bdeb68e9b82b4cb6d5d42e265f37c30d48f037438259c343d8e46422032566ee2ee252d5dc2e8f17"}}, {0x2, &(0x7f0000000100)=@string={0x2}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x1409}}, {0xfe, &(0x7f0000000180)=@string={0xfe, 0x3, "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"}}, {0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x1c01}}]}) syz_usb_connect$uac1(0x3, 0xce, &(0x7f0000000400)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbc, 0x3, 0x1, 0xe, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x4, 0x2}, [@extension_unit={0x8, 0x24, 0x8, 0x1, 0xd6, 0x0, "fc"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x1, 0x6, 0x4}, @format_type_ii_discrete={0xc, 0x24, 0x2, 0x2, 0x7, 0x3, 0x81, "3aa907"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x9, 0xd, 0xeb, {0x7, 0x25, 0x1, 0x1, 0x5, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x0, 0x4, 0x3, 0x95, "1a2e3c724f"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x4, 0x7, 0x4, "", "341e"}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x6, 0x4, 0x2, 0x1, "dd", "9ef50c"}, @as_header={0x7, 0x24, 0x1, 0x6b, 0x40, 0x5}, @as_header={0x7, 0x24, 0x1, 0x6, 0x2b, 0x2}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x2, 0x3, 0xbc, 0x3, "d0916f48e552a89749"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xf, 0x7e, {0x7, 0x25, 0x1, 0x80, 0xff, 0x2}}}}}}}]}}, &(0x7f00000006c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x1, 0x9, 0x4, 0x20, 0xc}, 0x6d, &(0x7f0000000500)={0x5, 0xf, 0x6d, 0x1, [@generic={0x68, 0x10, 0x1, "b53e65e06161a23f86508408c46033f5e7df7d73276edf925c35ad168d4451b9c3a6a055cf28303fb8f4b070f2edfb15f8456440eae93126b9cd4667f9ae1c2d27361b635c4b7031bc86eeed33213457bcb8ab012376d6a3bb01d187829d30c81ea1fa84f5"}]}, 0x4, [{0x8, &(0x7f0000000580)=@string={0x8, 0x3, "ea676f7405eb"}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x5ecd9235d9344a1e}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0xc25}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x41c}}]}) r4 = syz_usb_connect$uac1(0x5, 0xc6, &(0x7f00000011c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb4, 0x3, 0x1, 0x6, 0x30, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xe}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x2, 0x5, [0x9, 0x7, 0x3, 0x2, 0xa], 0x2}, @extension_unit={0x8, 0x24, 0x8, 0x5, 0x9, 0x9, '\f'}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x304, 0x4, 0x4, 0xd}, @extension_unit={0x7, 0x24, 0x8, 0x6, 0xff, 0x57}, @feature_unit={0xd, 0x24, 0x6, 0x2, 0x2, 0x3, [0x6, 0x6, 0xa], 0x3}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x1, 0x3, 0xaf, 0x8, "85", '\a'}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xf, 0x9, 0x0, {0x7, 0x25, 0x1, 0x1, 0x0, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x9, 0x4, 0x40, 0x35, "9409c7", 'G'}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x8, 0x3, 0x3, 0x7, "0e"}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x2, 0x2, 0x1, {0x7, 0x25, 0x1, 0x82, 0x7, 0x2}}}}}}}]}}, &(0x7f00000014c0)={0xa, &(0x7f0000000740)={0xa, 0x6, 0x200, 0x4, 0x5, 0xb, 0x40, 0x1}, 0xc, &(0x7f0000000780)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0x4, 0xe6d9}]}, 0x6, [{0x4, &(0x7f00000007c0)=@lang_id={0x4, 0x3, 0x407}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x861}}, {0xdd, &(0x7f0000001300)=@string={0xdd, 0x3, "8da9d6e93a8762a24abd4a717d2a7376c30dbf3eb06c823183a2ae9504cfb53461f598ea4c1d63cabe0355e1c8247ca82bb1bc26e7c13f1cd48414392b0bf1b23ec437c76dc51753586b35b0df38c4a7dbd6e47e5f304f11cfc9e04e2c703dcb6f225cb66933f5d2897be424c1849585f5258e5f374f9603af2ae20686616813843b6dae9bca33eddcbd27d00acd93a94e01ec025f36b56a1fac9520c5c0f4a9d1e9d930011e80761d672d4ce3cdfb49024c0d3bef4c2741a57e62ebb6299c29e3adef54e3576a4f71d535aaf7f34d7075f4e920d919c9874c5e8b"}}, {0x4, &(0x7f0000001400)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x2009}}, {0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0x280a}}]}) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000600)={0x2c, &(0x7f0000000300)={0x0, 0x0, 0x1, 'w'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000340)={0x20, 0x11, 0x4, "51c3e024"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 18.583545085s ago: executing program 4 (id=9012): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb00000001090224"], 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0xc2882, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0xebff5d0857818f7f}, 0x4000) r3 = socket(0x11, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4000000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000001600), 0x42fffffe) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x123a02, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) sendmsg$nl_route_sched(r6, &(0x7f0000000240)={0x0, 0xffffffffffffff47, 0x0, 0x1, 0x0, 0x0, 0x480c0}, 0x20000800) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r6, 0x4) io_uring_setup(0x168f, &(0x7f0000000400)={0x0, 0x631d, 0x2, 0x2, 0x2d7}) pwritev(r5, &(0x7f0000000040)=[{&(0x7f00000000c0)="b2", 0xfdef}], 0x10000000000000bb, 0x7, 0x1) execve(&(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000800)={[&(0x7f0000000940)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000a40)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}) 15.545681099s ago: executing program 5 (id=9015): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r0, 0x11, 0x9, 0xfd) shutdown(r1, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 14.422978161s ago: executing program 0 (id=9017): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_io_uring_setup(0x2c9a, &(0x7f0000000400)={0x0, 0xf1cc, 0x8000, 0x2, 0x2e}, &(0x7f0000000100), &(0x7f0000000140)) mkdir(&(0x7f0000001c00)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xa, 0x5, &(0x7f0000000140)=""/5, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x4) syz_open_dev$tty1(0xc, 0x4, 0x1) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x7) ioctl$TCFLSH(r4, 0x8925, 0x20001116) 14.315583996s ago: executing program 5 (id=9019): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 12.006093607s ago: executing program 4 (id=9021): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d094", 0xe3}, {&(0x7f0000002880)="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", 0x118}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff", 0x2c}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a81", 0x55}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076", 0x1a}], 0x2}}], 0x3, 0x0) 11.968761998s ago: executing program 3 (id=9022): fsopen(&(0x7f0000000240)='erofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000905010429bd7000fddbdf250013000864004b80040074800400b580040029808d261848cef6f6e4493ebb69b9c512bb27cd38afe22a952789fbef56b2b175c37c4fdc6a5c9a79f4f5732598d29f0ea9ba253ce5daa9a4e9aadc7835ddeb4026f49884b9a3edf96db9719b8e4c82761c0a1ee3ca352840b701eb42141197fdc21bfbe057e45b92af55908066bc6ac8661628c900"], 0x98}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 11.910641913s ago: executing program 5 (id=9024): mount(&(0x7f0000000240), 0x0, 0x0, 0x2410, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 10.136402972s ago: executing program 3 (id=9025): fsopen(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000905010429bd7000fddbdf250013000864004b80040074800400b580040029808d261848cef6f6e4493ebb69b9c512bb27cd38afe22a952789fbef56b2b175c37c4fdc6a5c9a79f4f5732598d29f0ea9ba253ce5daa9a4e9aadc7835ddeb4026f49884b9a3edf96db9719b8e4c82761c0a1ee3ca352840b701eb42141197fdc21bfbe057e45b92af55908066bc6ac8661628c900"], 0x98}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 9.494932749s ago: executing program 4 (id=9026): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 9.016189487s ago: executing program 0 (id=9027): fsopen(&(0x7f0000000240)='erofs\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000905010429bd7000fddbdf250013000864004b80040074800400b580040029808d261848cef6f6e4493ebb69b9c512bb27cd38afe22a952789fbef56b2b175c37c4fdc6a5c9a79f4f5732598d29f0ea9ba253ce5daa9a4e9aadc7835ddeb4026f49884b9a3edf96db9719b8e4c82761c0a1ee3ca352840b701eb42141197fdc21bfbe057e45b92af55908066bc6ac8661628c900"], 0x98}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 8.297895259s ago: executing program 3 (id=9029): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.140089545s ago: executing program 4 (id=9030): socket$nl_crypto(0x10, 0x3, 0x15) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0xd) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x1000, &(0x7f0000fef000/0x1000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b702000014fa0000b7030000000008008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000020000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) openat$yama_ptrace_scope(0xffffff9c, &(0x7f0000000180), 0x2, 0x0) syz_io_uring_setup(0x468d, &(0x7f0000000300)={0x0, 0x9b92, 0x4, 0x1, 0x226}, &(0x7f0000000280), &(0x7f0000000380)) r5 = socket(0x1e, 0x4, 0x0) connect$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) 7.332758827s ago: executing program 0 (id=9031): r0 = syz_open_dev$swradio(&(0x7f0000000940), 0x1, 0x2) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000a80)={0xb, @win={{0x38305343, 0x9, 0xfff, 0x2}, 0x1, 0x2, 0x0, 0x5, 0x0, 0x8f}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r6 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0xfffffffd}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x21, &(0x7f0000000440)=r5, 0x1) 6.855197535s ago: executing program 1 (id=9032): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00'}, 0x10) io_uring_setup(0x7bda, &(0x7f0000000080)={0x0, 0x6cdf, 0x2, 0x3, 0x5}) 6.090719756s ago: executing program 5 (id=9033): mount(&(0x7f0000000240), 0x0, 0x0, 0x2410, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5.752405132s ago: executing program 1 (id=9034): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x2f702, 0xfeff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0x8af, 0x640, 0x1, 0x2, 0xd59f83, 0x19f2, 0x42, 0x4, 0x3, 0x3, 0x2800, 0x2800, 0x2, 0xba2, 0xd, 0x23, {0x8, 0xffffffff}, 0xd0, 0x9}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r1, &(0x7f0000000880)=""/202, 0x8f, 0x200000000004, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) 5.6375954s ago: executing program 1 (id=9035): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r0, 0x11, 0x9, 0xfd) shutdown(r1, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r3, 0x0, r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 5.412734079s ago: executing program 0 (id=9036): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000180)="93bffce623851797a8dc79018d7716840ffc6941c667f6d345b18bc896d8f016f5f206bb2b0eb2fe32d2f0048678cd35ef833c35225ff95a94770a6845b091e69f243dea0d601c54e9c93ee3568b89a3427c84262ff67b679ccac305b5cea1dcd151d7bb5754603b6b0e362d8041bdc61529260e6c4046d55927c96dcce1609b9c4f8424b9da760270a470f95b99ebb6fc40b5d175e86ac0b7a9fd7f1748af98902340eb3de6f89a6272ddc63ce532e270bc6cba3d229a96e108026bf64d48efc0435d52b40c578d3deb33677cf2ec5fadf9a784f2b2bdc8d978e9e1a788494631d094", 0xe3}, {&(0x7f0000002880)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cbf8fbaaec9647b07d0a4965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee425367bc33b71054226beb00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43ad50629f689703d478abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90b60b01f880c3acedd4a54014844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235a7b129564e93cd73f6e4ed85bbf5b8193811d78883260630f2fd1c357747636890f515ab0a1e61b618cb3af02418eca8e402b83f543c6ed9d2fe910a7e", 0x118}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff", 0x2c}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a81", 0x55}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076", 0x1a}], 0x2}}], 0x3, 0x0) 4.487620438s ago: executing program 1 (id=9037): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) fallocate(r0, 0x11, 0x9, 0xfd) shutdown(r1, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 4.473158728s ago: executing program 0 (id=9038): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.375734101s ago: executing program 3 (id=9039): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x11a) mknodat(r2, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='.\x00', 0x0, 0x0) mkdir(0x0, 0x0) renameat2(r3, &(0x7f00000001c0)='./file0\x00', r3, &(0x7f0000000200)='./bus/file0\x00', 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) mkdir(&(0x7f0000000180)='./file0\x00', 0x334b2c0a33ad3927) 3.348558905s ago: executing program 4 (id=9040): getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c) 3.332791359s ago: executing program 1 (id=9041): fsopen(&(0x7f0000000240)='erofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000014c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f0000000400)={'#! ', './file0'}, 0xb) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="980000000905010429bd7000fddbdf250013000864004b80040074800400b580040029808d261848cef6f6e4493ebb69b9c512bb27cd38afe22a952789fbef56b2b175c37c4fdc6a5c9a79f4f5732598d29f0ea9ba253ce5daa9a4e9aadc7835ddeb4026f49884b9a3edf96db9719b8e4c82761c0a1ee3ca352840b701eb42141197fdc21bfbe057e45b92af55908066bc6ac8661628c900"], 0x98}, 0x1, 0x0, 0x0, 0x20008001}, 0x20000041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}}) 2.12743997s ago: executing program 3 (id=9042): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000000400000008000000010000008000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0], 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1.640276133s ago: executing program 4 (id=9043): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1.615338913s ago: executing program 5 (id=9044): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$I2C(0x0, 0xfffffffffffffffa, 0x8000) r1 = openat$audio1(0xffffffffffffff9c, 0x0, 0x100, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701fcffffff00000000017c00000c"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0) r3 = syz_open_dev$vivid(&(0x7f0000004780), 0x3, 0x2) ioctl$VIDIOC_G_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000004840)={0x4, 0x800, 0x0, 0xffffffffffffffff, 0x0, 0x0}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r6, 0x400442c8, &(0x7f0000000000)=ANY=[@ANYRES32=r5]) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000340)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r7}, &(0x7f0000000200), &(0x7f00000003c0)=r8}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r9 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) dup(r9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, @void, @value}, 0x94) r10 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 1.41317163s ago: executing program 1 (id=9045): mount(&(0x7f0000000240), 0x0, 0x0, 0x2410, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 282.471068ms ago: executing program 3 (id=9046): socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(0xffffffffffffffff, 0x4068aea3, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f000000de40)=ANY=[], 0x2000}], 0x1}, 0x80000c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="5d58000000000000140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c0002800600010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)=0xa, 0x4) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4, @loopback}, 0x1c) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000480)='svcrdma_decode_short_err\x00', r5}, 0x18) socket$inet_udplite(0x2, 0x2, 0x88) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c27ebc93", @ANYRES32, @ANYBLOB], 0x40}}, 0x0) 0s ago: executing program 5 (id=9047): r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x9, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES32=r0, @ANYRES16=r1], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x9, 0x0, 0x100000, {}, [{0x90, 0x1, [@m_ct={0x44, 0x19, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9, 0x11e41e7a, 0x5, 0xfffffffe, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb058}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$KDGKBDIACR(0xffffffffffffffff, 0x4b4b, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e2b, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x0, 0x0) r6 = io_uring_setup(0x8000773d, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) close_range(r6, r7, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x402) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) kernel console output (not intermixed with test programs): 52] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 2541.086230][ T2143] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2541.104948][T16066] usb 4-1: config 0 descriptor?? [ 2541.116646][ T2143] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2542.040564][ T2176] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7523'. [ 2542.331508][ T52] usb 4-1: USB disconnect, device number 110 [ 2542.659434][T30928] usb 5-1: USB disconnect, device number 118 [ 2542.998632][ T2188] netlink: 'syz.4.7526': attribute type 2 has an invalid length. [ 2543.081234][ T2196] netlink: 52 bytes leftover after parsing attributes in process `syz.5.7529'. [ 2544.651209][ T2195] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7528'. [ 2544.660474][ T2195] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7528'. [ 2544.742872][ T2193] netlink: 200 bytes leftover after parsing attributes in process `syz.3.7530'. [ 2547.573118][ T2226] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7537'. [ 2548.076469][T16066] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 2548.167883][ T2240] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7541'. [ 2549.263684][ T2242] overlayfs: failed to resolve './file0': -2 [ 2549.530141][T16066] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2549.539377][T16066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2549.562000][T16066] usb 5-1: config 0 descriptor?? [ 2549.797892][ T2249] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2549.887258][ T2251] ubi: mtd0 is already attached to ubi31 [ 2550.212685][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2550.222789][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2551.216594][ T2259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7548'. [ 2551.303227][T16066] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 2551.354544][ T2228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2551.518780][ T2228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2552.739296][T30928] usb 5-1: USB disconnect, device number 119 [ 2552.961121][ T2279] ubi: mtd0 is already attached to ubi31 [ 2555.511809][ T2301] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2557.266497][ T2311] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7564'. [ 2558.595098][ T2343] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7572'. [ 2558.936863][ T2346] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7574'. [ 2559.751807][ T2355] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 2562.576686][ T2379] wireguard0: entered promiscuous mode [ 2562.582511][ T2379] wireguard0: entered allmulticast mode [ 2564.658283][T19784] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 2564.816206][T19784] usb 5-1: Using ep0 maxpacket: 16 [ 2564.838423][T19784] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 2564.846856][T19784] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2564.855267][T19784] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2564.875712][T19784] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 2564.911464][T19784] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2564.949250][T19784] usb 5-1: config 0 has no interface number 0 [ 2564.981997][T19784] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2565.057429][T19784] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2565.996035][T19784] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2566.083368][T19784] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2566.137022][ T2414] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7589'. [ 2566.183140][T19784] usb 5-1: config 0 interface 125 has no altsetting 2 [ 2566.552326][ T2416] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7590'. [ 2566.561405][ T2416] netlink: 72 bytes leftover after parsing attributes in process `syz.3.7590'. [ 2566.670480][T19784] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2566.706475][T19784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2566.728571][T19784] usb 5-1: Product: syz [ 2566.732748][T19784] usb 5-1: Manufacturer: syz [ 2567.702949][T19784] usb 5-1: SerialNumber: syz [ 2567.717641][T19784] usb 5-1: config 0 descriptor?? [ 2567.728432][T19784] usb 5-1: can't set config #0, error -71 [ 2567.796626][T19784] usb 5-1: USB disconnect, device number 120 [ 2572.337629][ T2495] No source specified [ 2572.364365][T23895] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 2572.556223][T23895] usb 5-1: Using ep0 maxpacket: 8 [ 2572.720257][T23895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2572.774474][T23895] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2572.841799][T23895] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2573.059348][T23895] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2573.092439][T23895] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2573.124998][ T2501] netlink: 'syz.0.7607': attribute type 2 has an invalid length. [ 2574.015877][T23895] usb 5-1: Product: syz [ 2574.020918][T23895] usb 5-1: Manufacturer: syz [ 2574.025496][T23895] usb 5-1: SerialNumber: syz [ 2574.060368][T23895] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 2574.421802][T23895] usb 5-1: USB disconnect, device number 121 [ 2575.461934][ T2521] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7608'. [ 2575.954335][ T2528] ubi: mtd0 is already attached to ubi31 [ 2577.286218][ T2551] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7617'. [ 2577.669015][ T2556] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2579.360298][ T2582] netlink: 'syz.4.7622': attribute type 2 has an invalid length. [ 2580.346265][ T52] usb 1-1: new high-speed USB device number 113 using dummy_hcd [ 2580.403399][ T2599] tmpfs: Bad value for 'mpol' [ 2580.496169][ T52] usb 1-1: Using ep0 maxpacket: 8 [ 2580.553254][ T52] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2580.583616][ T52] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2580.826227][T19784] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 2581.076298][ T52] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2581.089875][ T52] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2581.100661][ T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2581.109229][ T52] usb 1-1: Product: syz [ 2581.114481][ T52] usb 1-1: Manufacturer: syz [ 2581.120701][ T52] usb 1-1: SerialNumber: syz [ 2581.170548][ T52] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 2581.305168][T19784] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2581.315951][T19784] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2581.335781][T19784] usb 5-1: config 0 descriptor?? [ 2581.375338][ T52] usb 1-1: USB disconnect, device number 113 [ 2581.915065][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.923793][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.937001][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.949924][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2581.961846][ T2604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2581.983256][ T2604] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2583.088690][T19784] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 2583.098947][T19784] usb 5-1: USB disconnect, device number 122 [ 2585.563970][ T2648] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7634'. [ 2586.873420][ T2668] netlink: 'syz.5.7640': attribute type 2 has an invalid length. [ 2587.965433][ T2681] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7642'. [ 2588.236274][T19784] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 2588.481573][ T2693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7643'. [ 2589.336169][T19784] usb 2-1: Using ep0 maxpacket: 8 [ 2589.342654][T19784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2589.352597][T19784] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2589.383517][T19784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2589.415365][T19784] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2589.444608][T19784] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2589.475370][T19784] usb 2-1: Product: syz [ 2589.482966][T19784] usb 2-1: Manufacturer: syz [ 2589.488058][T19784] usb 2-1: SerialNumber: syz [ 2589.500739][T19784] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 2589.703787][T31880] usb 2-1: USB disconnect, device number 87 [ 2589.780554][T30928] usb 4-1: new high-speed USB device number 111 using dummy_hcd [ 2589.797299][ T2710] kAFS: unparsable volume name [ 2589.999016][T30928] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2590.008490][T30928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2590.019737][T30928] usb 4-1: config 0 descriptor?? [ 2590.366924][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2590.373437][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2590.454060][ T2700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.483822][ T2700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.584449][ T2720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7651'. [ 2590.752785][ T2700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.878979][ T2700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2590.930159][ T2700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2590.964855][ T2700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2592.224241][ T2731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7653'. [ 2592.301646][T30928] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 2592.342430][T30928] usb 4-1: USB disconnect, device number 111 [ 2594.265985][ T2759] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7659'. [ 2594.816225][T16066] usb 1-1: new high-speed USB device number 114 using dummy_hcd [ 2595.065609][ T2772] ubi: mtd0 is already attached to ubi31 [ 2595.271945][T16066] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2595.302817][T16066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2595.324518][T16066] usb 1-1: config 0 descriptor?? [ 2596.314659][ T2784] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7664'. [ 2596.323974][ T2784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7664'. [ 2596.828311][ T2790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2596.922432][ T2790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2597.332939][ T2790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2597.355739][ T2790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2597.368318][T16066] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 2597.386551][ T2790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2597.400906][ T2790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2598.269385][ T2788] netlink: 200 bytes leftover after parsing attributes in process `syz.4.7666'. [ 2599.246297][T23895] usb 4-1: new high-speed USB device number 112 using dummy_hcd [ 2599.544741][T16066] usb 1-1: USB disconnect, device number 114 [ 2599.689723][ T2831] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7674'. [ 2600.388092][T23895] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2600.440272][T23895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2600.455876][ T2835] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7675'. [ 2600.613067][ T2839] netlink: 'syz.1.7676': attribute type 2 has an invalid length. [ 2601.164708][T23895] usb 4-1: config 0 descriptor?? [ 2601.688364][ T2814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2601.700802][ T2814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2601.766935][ T2814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2602.379520][ T2814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2602.573214][ T2814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2602.765805][T23895] pegasus 4-1:0.0: probe with driver pegasus failed with error -32 [ 2602.890311][ T2814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2602.913763][ T2868] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7679'. [ 2602.925422][ T2868] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7679'. [ 2604.720279][ T2882] kAFS: unparsable volume name [ 2604.826905][T23895] usb 4-1: USB disconnect, device number 112 [ 2606.757309][ T2906] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2606.766011][ T2906] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2608.183206][ T2921] kAFS: unparsable volume name [ 2608.469780][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 2610.601888][ T336] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2610.608997][ T798] Bluetooth: hci1: command 0x1003 tx timeout [ 2612.162800][ T2957] kAFS: unparsable volume name [ 2614.211480][ T2970] ubi: mtd0 is already attached to ubi31 [ 2618.553982][ T3010] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7713'. [ 2618.563504][ T3010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7713'. [ 2620.892349][ T3032] ubi: mtd0 is already attached to ubi31 [ 2622.506372][T21791] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2622.996338][T21791] usb 6-1: Using ep0 maxpacket: 16 [ 2623.156640][T21791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2623.167951][T21791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2623.177781][T21791] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2623.217385][T21791] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 2623.253632][ T3060] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7727'. [ 2623.276289][T21791] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 2623.286392][T21791] usb 6-1: Manufacturer: syz [ 2623.791179][T21791] usb 6-1: config 0 descriptor?? [ 2623.929910][T29871] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 2624.115206][ T3073] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7730'. [ 2624.126485][ T3073] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7730'. [ 2624.376191][T29871] usb 2-1: Using ep0 maxpacket: 8 [ 2624.388763][T29871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2624.400278][T29871] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2624.416132][T21791] usb 4-1: new high-speed USB device number 113 using dummy_hcd [ 2624.436253][T29871] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2624.497747][T29871] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2624.516303][T29871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2624.524464][T29871] usb 2-1: Product: syz [ 2624.529479][T29871] usb 2-1: Manufacturer: syz [ 2624.534636][T29871] usb 2-1: SerialNumber: syz [ 2624.564150][T29871] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 2624.583597][T21791] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2624.594235][T21791] usb 4-1: config 0 has no interfaces? [ 2624.599814][T21791] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2624.609970][T21791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2624.629090][T21791] usb 4-1: config 0 descriptor?? [ 2625.808764][T21791] usb 2-1: USB disconnect, device number 88 [ 2626.482321][T32163] usb 6-1: USB disconnect, device number 95 [ 2626.734461][ T3089] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7736'. [ 2626.743665][ T3089] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7736'. [ 2627.056252][T32163] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 2627.226318][T32163] usb 6-1: Using ep0 maxpacket: 8 [ 2627.240027][T32163] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2627.308866][T32163] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2627.350790][T32163] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2627.401620][T32163] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2627.412665][T32163] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2627.652137][T32163] usb 6-1: Product: syz [ 2628.167128][T32163] usb 6-1: Manufacturer: syz [ 2628.171768][T32163] usb 6-1: SerialNumber: syz [ 2628.180633][T32163] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 2628.823816][ T52] usb 4-1: USB disconnect, device number 113 [ 2628.856396][ T3112] netlink: 'syz.0.7742': attribute type 2 has an invalid length. [ 2629.029413][T32163] usb 6-1: USB disconnect, device number 96 [ 2630.569266][ T3128] kAFS: unparsable volume name [ 2630.916306][T29871] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 2631.096528][T29871] usb 5-1: Using ep0 maxpacket: 8 [ 2631.103591][T29871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2631.148351][T29871] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2631.205810][T29871] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2631.324343][T29871] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2631.338268][T29871] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2631.348250][T29871] usb 5-1: Product: syz [ 2631.352468][T29871] usb 5-1: Manufacturer: syz [ 2631.786128][T29871] usb 5-1: SerialNumber: syz [ 2631.805085][T29871] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 2632.882767][ T52] usb 5-1: USB disconnect, device number 123 [ 2634.741200][ T3156] wireguard0: entered promiscuous mode [ 2634.753963][ T3156] wireguard0: entered allmulticast mode [ 2635.045593][ T3172] ubi: mtd0 is already attached to ubi31 [ 2638.746220][T30928] usb 1-1: new high-speed USB device number 115 using dummy_hcd [ 2639.308614][T30928] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2639.329372][T30928] usb 1-1: config 1 has an invalid descriptor of length 247, skipping remainder of the config [ 2639.366115][T30928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2639.375295][T30928] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2639.390478][ T52] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 2639.403401][T30928] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2639.412723][T30928] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2639.420874][T30928] usb 1-1: Product: syz [ 2639.425011][T30928] usb 1-1: Manufacturer: syz [ 2639.525985][T30928] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2639.593844][ T52] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2639.607300][ T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2639.668274][T16066] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 2639.707839][ T3212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7767'. [ 2639.851874][ T52] usb 2-1: config 0 descriptor?? [ 2640.096195][T16066] usb 6-1: Using ep0 maxpacket: 8 [ 2640.292296][ T3215] sp0: Synchronizing with TNC [ 2640.307702][T16066] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2640.949812][T16066] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2640.959571][T16066] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2640.979117][T16066] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2640.988469][T16066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2640.996761][T16066] usb 6-1: Product: syz [ 2641.001130][T16066] usb 6-1: Manufacturer: syz [ 2641.005810][T16066] usb 6-1: SerialNumber: syz [ 2641.023982][T16066] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 2642.297862][ T52] pegasus 2-1:0.0: probe with driver pegasus failed with error -71 [ 2642.507691][ T3224] netlink: 'syz.3.7772': attribute type 2 has an invalid length. [ 2642.632464][ T52] usb 2-1: USB disconnect, device number 89 [ 2643.069046][T30928] usb 1-1: USB disconnect, device number 115 [ 2643.278025][T32163] usb 6-1: USB disconnect, device number 97 [ 2644.569713][T16066] IPVS: starting estimator thread 0... [ 2644.705588][ T3241] IPVS: using max 40 ests per chain, 96000 per kthread [ 2646.388865][ T3264] netlink: 'syz.0.7781': attribute type 2 has an invalid length. [ 2649.253325][ T3283] ubi: mtd0 is already attached to ubi31 [ 2649.806314][T16066] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 2649.981186][T16066] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2650.176409][T16066] usb 2-1: config 1 descriptor has 1 excess byte, ignoring [ 2650.273625][T16066] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2650.386145][T16066] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2650.417587][T16066] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2650.635256][T16066] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2650.650188][T16066] usb 2-1: Product: syz [ 2650.654365][T16066] usb 2-1: Manufacturer: syz [ 2650.785770][T16066] cdc_wdm 2-1:1.0: skipping garbage [ 2650.840229][T16066] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2651.799718][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2651.849997][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2651.880106][ T3307] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7791'. [ 2652.603709][ T3311] sp0: Synchronizing with TNC [ 2652.662642][ T3313] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7793'. [ 2652.671731][ T3313] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7793'. [ 2652.949026][ T3319] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7795'. [ 2652.960221][ T3319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7795'. [ 2655.951935][T16066] usb 2-1: USB disconnect, device number 90 [ 2656.607705][ T3351] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7804'. [ 2656.616793][ T3351] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7804'. [ 2657.966182][T31880] usb 4-1: new high-speed USB device number 114 using dummy_hcd [ 2658.117218][T31880] usb 4-1: Using ep0 maxpacket: 8 [ 2658.369859][T31880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2658.380606][T31880] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2658.397131][T31880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2658.409325][T31880] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2658.426132][T31880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2658.453597][T31880] usb 4-1: Product: syz [ 2658.466159][T31880] usb 4-1: Manufacturer: syz [ 2658.474326][T31880] usb 4-1: SerialNumber: syz [ 2658.512328][T31880] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 2659.146650][T32163] usb 4-1: USB disconnect, device number 114 [ 2661.023196][ T3396] No control pipe specified [ 2661.468621][ T3398] netlink: 'syz.5.7815': attribute type 2 has an invalid length. [ 2663.194379][ T30] audit: type=1400 audit(1746171092.909:810): avc: denied { map } for pid=3408 comm="syz.0.7817" path="socket:[119541]" dev="sockfs" ino=119541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2663.217518][ C0] vkms_vblank_simulate: vblank timer overrun [ 2664.069922][ T30] audit: type=1400 audit(1746171092.909:811): avc: denied { read } for pid=3408 comm="syz.0.7817" path="socket:[119541]" dev="sockfs" ino=119541 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2664.236586][ T3414] netlink: 'syz.5.7821': attribute type 2 has an invalid length. [ 2664.357312][ T3418] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7822'. [ 2666.256173][T31880] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 2666.816878][T31880] usb 5-1: Using ep0 maxpacket: 8 [ 2666.824552][T31880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2666.845766][ T3438] netlink: 'syz.0.7827': attribute type 2 has an invalid length. [ 2666.854673][T31880] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2666.866926][T31880] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2667.507400][T31880] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2667.939680][T31880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2667.956223][T31880] usb 5-1: Product: syz [ 2667.961567][T31880] usb 5-1: Manufacturer: syz [ 2667.969233][T31880] usb 5-1: SerialNumber: syz [ 2667.988786][T31880] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 2668.084957][ T3447] netlink: 'syz.0.7829': attribute type 2 has an invalid length. [ 2669.055972][T21791] usb 5-1: USB disconnect, device number 124 [ 2672.320271][ T3487] ubi: mtd0 is already attached to ubi31 [ 2674.477293][T30928] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 2674.956431][T30928] usb 2-1: Using ep0 maxpacket: 8 [ 2674.965002][T30928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2674.983130][T30928] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2675.126136][T30928] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2675.140108][T30928] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2675.152847][T30928] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2675.898237][T30928] usb 2-1: Product: syz [ 2675.908904][T30928] usb 2-1: Manufacturer: syz [ 2675.913662][T30928] usb 2-1: SerialNumber: syz [ 2676.157956][T30928] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 2677.113543][T32163] usb 2-1: USB disconnect, device number 91 [ 2677.281492][ T3534] netlink: 'syz.0.7851': attribute type 2 has an invalid length. [ 2679.638150][ T336] Bluetooth: hci4: command 0x0406 tx timeout [ 2681.172523][ T3553] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2682.253270][ T3563] ubi: mtd0 is already attached to ubi31 [ 2682.569043][ T3562] wireguard0: entered promiscuous mode [ 2682.575038][ T3562] wireguard0: entered allmulticast mode [ 2684.189698][ T3576] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7861'. [ 2684.225233][ T3576] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7861'. [ 2687.521208][ T3613] netlink: 'syz.4.7872': attribute type 2 has an invalid length. [ 2689.164627][ T3628] No source specified [ 2689.297559][ T3630] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7876'. [ 2689.345113][ T3630] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7876'. [ 2689.520180][ T3633] trusted_key: encrypted_key: key user:syz not found [ 2690.882520][ T3645] ubi: mtd0 is already attached to ubi31 [ 2693.823376][ T3676] netlink: 256 bytes leftover after parsing attributes in process `syz.4.7888'. [ 2693.921295][ T3676] netlink: 72 bytes leftover after parsing attributes in process `syz.4.7888'. [ 2694.180329][ T3670] wireguard0: entered promiscuous mode [ 2694.228916][ T3670] wireguard0: entered allmulticast mode [ 2694.721640][ T3686] No source specified [ 2695.489042][ T3691] netlink: 'syz.3.7892': attribute type 2 has an invalid length. [ 2696.311653][ T3697] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7893'. [ 2696.325974][ T3697] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7893'. [ 2698.677025][ T3718] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2699.725439][ T3719] wireguard0: entered promiscuous mode [ 2699.735271][ T3719] wireguard0: entered allmulticast mode [ 2700.966886][ T3738] No source specified [ 2702.955392][ T3755] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7909'. [ 2702.967889][ T3755] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7909'. [ 2704.575239][ T3771] kAFS: unparsable volume name [ 2704.747413][T16066] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 2704.976690][T16066] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2704.995941][T16066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2705.036729][T16066] usb 5-1: config 0 descriptor?? [ 2705.808748][ T3782] ubi: mtd0 is already attached to ubi31 [ 2706.084207][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2706.114111][ T3783] wireguard0: entered promiscuous mode [ 2706.126469][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2706.701208][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2706.736640][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2706.759186][T16066] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 2706.773569][ T3783] wireguard0: entered allmulticast mode [ 2706.966388][ T3788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2707.007071][ T3788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2707.574358][ T3800] xt_CT: You must specify a L4 protocol and not use inversions on it [ 2707.647180][T16066] usb 1-1: new high-speed USB device number 116 using dummy_hcd [ 2707.797527][T16066] usb 1-1: Using ep0 maxpacket: 32 [ 2707.805729][T16066] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 2707.816343][T16066] usb 1-1: config 0 has no interface number 0 [ 2707.824864][T16066] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2707.869286][T16066] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 2707.894748][T16066] usb 1-1: config 0 interface 126 has no altsetting 0 [ 2707.985196][T16066] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2707.994770][T16066] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2708.002816][T16066] usb 1-1: Product: syz [ 2708.007056][T16066] usb 1-1: Manufacturer: syz [ 2708.011652][T16066] usb 1-1: SerialNumber: syz [ 2708.037553][T16066] usb 1-1: config 0 descriptor?? [ 2708.043653][ T3805] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 2708.704770][ T3805] raw-gadget.4 gadget.0: fail, usb_ep_enable returned -22 [ 2709.070287][ T3815] ubi: mtd0 is already attached to ubi31 [ 2709.078882][T31880] usb 5-1: USB disconnect, device number 125 [ 2709.150953][ T3824] No source specified [ 2709.356236][T32163] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 2709.358492][ T3830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7928'. [ 2709.373226][ T3830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7928'. [ 2709.451347][T16066] ir_usb 1-1:0.126: IR Dongle converter detected [ 2709.465069][T16066] usb 1-1: IRDA class descriptor not found, device not bound [ 2709.541160][T16066] usb 1-1: USB disconnect, device number 116 [ 2709.843610][T32163] usb 4-1: Using ep0 maxpacket: 32 [ 2710.412386][T32163] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 2710.421170][T32163] usb 4-1: config 0 has no interface number 0 [ 2710.436139][T32163] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2710.449809][T32163] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 2710.469429][T32163] usb 4-1: config 0 interface 126 has no altsetting 0 [ 2710.568306][T32163] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2710.628618][T32163] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2710.712132][T32163] usb 4-1: Product: syz [ 2710.755799][T32163] usb 4-1: Manufacturer: syz [ 2710.810609][T32163] usb 4-1: SerialNumber: syz [ 2711.227824][T32163] usb 4-1: config 0 descriptor?? [ 2711.906829][ T3822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2711.924729][ T3822] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2712.154963][T32163] ir_usb 4-1:0.126: IR Dongle converter detected [ 2712.169671][T32163] usb 4-1: IRDA class descriptor not found, device not bound [ 2712.280358][T32163] usb 4-1: USB disconnect, device number 115 [ 2712.326531][ T3857] No source specified [ 2713.488001][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2713.495611][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2714.114490][T29871] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 2714.286108][T29871] usb 4-1: device descriptor read/64, error -71 [ 2715.336854][T29871] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 2715.588709][T29871] usb 4-1: device descriptor read/64, error -71 [ 2715.639389][ T3894] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7949'. [ 2715.649534][ T3894] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7949'. [ 2715.698518][T29871] usb usb4-port1: attempt power cycle [ 2716.394885][T29871] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 2717.196207][T29871] usb 4-1: device not accepting address 118, error -71 [ 2721.477416][T21791] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 2721.546279][T32163] usb 1-1: new high-speed USB device number 117 using dummy_hcd [ 2721.626159][T21791] usb 2-1: device descriptor read/64, error -71 [ 2721.750072][T32163] usb 1-1: Using ep0 maxpacket: 8 [ 2722.746391][T21791] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2722.886180][T21791] usb 2-1: device descriptor read/64, error -71 [ 2722.947578][T32163] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2723.446474][T21791] usb usb2-port1: attempt power cycle [ 2723.781420][T32163] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2723.861214][T32163] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2723.988982][T32163] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2724.016728][T32163] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2724.026155][T21791] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2724.029877][T32163] usb 1-1: Product: syz [ 2724.040184][T32163] usb 1-1: Manufacturer: syz [ 2724.047575][T32163] usb 1-1: SerialNumber: syz [ 2724.047587][T21791] usb 2-1: device descriptor read/8, error -71 [ 2724.072961][T32163] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 2724.314017][ T3979] kAFS: unparsable volume name [ 2724.429882][T32163] usb 1-1: USB disconnect, device number 117 [ 2724.717634][ T3983] netlink: 256 bytes leftover after parsing attributes in process `syz.0.7975'. [ 2724.726707][ T3983] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7975'. [ 2724.899171][ T3986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7974'. [ 2724.908631][ T3986] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7974'. [ 2727.374859][ T4012] No source specified [ 2728.685242][ T4023] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2728.920401][T30928] usb 1-1: new high-speed USB device number 118 using dummy_hcd [ 2728.999070][ T4028] netlink: 256 bytes leftover after parsing attributes in process `syz.5.7987'. [ 2729.008156][ T4028] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7987'. [ 2729.506230][T30928] usb 1-1: device descriptor read/64, error -71 [ 2729.836235][T30928] usb 1-1: new high-speed USB device number 119 using dummy_hcd [ 2730.023848][T30928] usb 1-1: device descriptor read/64, error -71 [ 2730.719293][T30928] usb usb1-port1: attempt power cycle [ 2731.246144][T16066] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 2731.946133][T16066] usb 5-1: Using ep0 maxpacket: 32 [ 2731.954885][T16066] usb 5-1: config 0 has an invalid interface number: 126 but max is 0 [ 2731.976672][T16066] usb 5-1: config 0 has no interface number 0 [ 2731.982840][T16066] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2731.994814][T16066] usb 5-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 2732.023323][T16066] usb 5-1: config 0 interface 126 has no altsetting 0 [ 2732.040054][T16066] usb 5-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2732.160737][T16066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2732.172468][T16066] usb 5-1: Product: syz [ 2732.178761][T16066] usb 5-1: Manufacturer: syz [ 2732.183365][T16066] usb 5-1: SerialNumber: syz [ 2732.191333][T16066] usb 5-1: config 0 descriptor?? [ 2732.202009][ T4039] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2732.216136][ T4039] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 2732.570077][ T4063] No source specified [ 2733.033409][T16066] ir_usb 5-1:0.126: IR Dongle converter detected [ 2733.086254][T16066] usb 5-1: IRDA class descriptor not found, device not bound [ 2733.101191][T16066] usb 5-1: USB disconnect, device number 126 [ 2733.496680][ T4066] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2734.260879][ T4069] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7998'. [ 2734.269960][ T4069] netlink: 72 bytes leftover after parsing attributes in process `syz.1.7998'. [ 2735.537339][ T4080] wireguard0: entered promiscuous mode [ 2735.559196][ T4080] wireguard0: entered allmulticast mode [ 2735.828327][T16066] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2735.996105][T16066] usb 2-1: Using ep0 maxpacket: 16 [ 2736.040490][T16066] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 2736.056340][T16066] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 2736.076118][ T9] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 2736.617366][T16066] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2736.645368][T16066] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2736.709013][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 2736.727769][ T9] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 2736.750402][ T9] usb 4-1: config 0 has no interface number 0 [ 2736.826474][ T9] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2736.836906][T16066] usb 2-1: config 0 has no interface number 0 [ 2736.867717][T16066] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2736.957255][ T9] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 2736.969144][T16066] usb 2-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2736.982187][ T9] usb 4-1: config 0 interface 126 has no altsetting 0 [ 2736.992250][ T9] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2737.002292][T16066] usb 2-1: config 0 interface 125 has no altsetting 0 [ 2737.012448][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2737.027522][ T9] usb 4-1: Product: syz [ 2737.033144][T16066] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2737.042298][ T9] usb 4-1: Manufacturer: syz [ 2737.049838][T16066] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2737.058013][ T9] usb 4-1: SerialNumber: syz [ 2737.067692][T16066] usb 2-1: Product: syz [ 2737.072306][ T9] usb 4-1: config 0 descriptor?? [ 2737.080057][T16066] usb 2-1: Manufacturer: syz [ 2737.085097][ T4087] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2737.092297][T16066] usb 2-1: SerialNumber: syz [ 2737.097003][ T4087] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2737.108059][T16066] usb 2-1: config 0 descriptor?? [ 2737.385278][ T9] ir_usb 4-1:0.126: IR Dongle converter detected [ 2737.397994][ T9] usb 4-1: IRDA class descriptor not found, device not bound [ 2737.410762][ T9] usb 4-1: USB disconnect, device number 120 [ 2738.203880][ T4106] netlink: 256 bytes leftover after parsing attributes in process `syz.0.8010'. [ 2738.213047][ T4106] netlink: 72 bytes leftover after parsing attributes in process `syz.0.8010'. [ 2739.462982][ T9] usb 2-1: USB disconnect, device number 96 [ 2739.680027][ T4121] netlink: 'syz.3.8014': attribute type 2 has an invalid length. [ 2741.316109][T21791] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 2741.597519][T21791] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2741.640111][ T4141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8018'. [ 2741.649858][ T4141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8018'. [ 2741.776845][T21791] usb 5-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2741.788337][T21791] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2741.808801][T21791] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2741.823362][T21791] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2741.835717][T21791] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2741.851311][T21791] usb 5-1: Product: syz [ 2741.855761][T21791] usb 5-1: Manufacturer: syz [ 2742.813265][T21791] cdc_wdm 5-1:1.0: skipping garbage [ 2742.827307][T21791] cdc_wdm 5-1:1.0: skipping garbage [ 2742.845342][T21791] cdc_wdm 5-1:1.0: skipping garbage [ 2742.856339][T21791] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2744.074252][ T4167] sp0: Synchronizing with TNC [ 2744.188591][ T4168] No source specified [ 2746.474886][T21791] usb 5-1: USB disconnect, device number 127 [ 2748.651825][ T4206] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8034'. [ 2748.661541][ T4206] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8034'. [ 2748.924304][ T4204] netlink: 'syz.0.8033': attribute type 2 has an invalid length. [ 2750.226171][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2751.733702][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2751.758059][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2751.785090][ T9] usb 5-1: config 0 descriptor?? [ 2752.816613][ T4230] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2753.011442][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2753.070958][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2753.558236][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2753.569814][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2753.579972][ T4210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2753.589051][ T4210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2754.692427][ T9] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 2754.703040][ T9] usb 5-1: USB disconnect, device number 2 [ 2754.909320][ T4255] kAFS: unparsable volume name [ 2755.340779][ T4259] No source specified [ 2760.584299][ T4309] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2761.110007][T32163] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 2761.291362][T32163] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2761.346091][T32163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2761.364491][T32163] usb 2-1: config 0 descriptor?? [ 2763.346958][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2763.355983][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2763.451381][T32163] pegasus 2-1:0.0: probe with driver pegasus failed with error -32 [ 2764.000972][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2764.017544][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2764.030363][ T4338] netlink: 'syz.4.8070': attribute type 2 has an invalid length. [ 2764.070434][ T4312] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2764.099498][ T4312] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2765.266236][T32163] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 2765.496507][T32163] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2765.670142][T32163] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2765.686847][ T9] usb 2-1: USB disconnect, device number 97 [ 2765.700502][T32163] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2765.713726][T32163] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2765.736586][T32163] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 2765.759108][T32163] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 2766.050351][T32163] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2766.059478][T32163] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2766.067520][T32163] usb 4-1: Product: syz [ 2766.075311][T32163] usb 4-1: Manufacturer: syz [ 2766.092513][T32163] cdc_wdm 4-1:1.0: skipping garbage [ 2766.097787][T32163] cdc_wdm 4-1:1.0: skipping garbage [ 2766.113405][T32163] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2767.329627][ T4371] netlink: 'syz.0.8078': attribute type 2 has an invalid length. [ 2767.576372][ T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2767.743622][ T4378] sp0: Synchronizing with TNC [ 2768.341344][ T9] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2768.358915][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2768.381956][ T9] usb 5-1: config 0 descriptor?? [ 2768.973263][ T4388] ubi: mtd0 is already attached to ubi31 [ 2769.318138][ T4370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2769.336530][ T4370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2769.430305][ T4370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2769.477209][ T4370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2769.506537][ T4370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2770.325368][ T9] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 2770.396911][ T4370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2770.730384][T21791] usb 4-1: USB disconnect, device number 121 [ 2770.738059][ T4398] No source specified [ 2771.246212][T21791] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 2771.295132][ T4406] netlink: 'syz.0.8088': attribute type 2 has an invalid length. [ 2772.474387][T29871] usb 5-1: USB disconnect, device number 3 [ 2772.507014][T21791] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2772.527373][T21791] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 2772.554217][T21791] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2772.565853][T21791] usb 4-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 2772.586087][T21791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 52, changing to 7 [ 2772.600480][T21791] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 9272, setting to 1024 [ 2772.614107][T21791] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2772.625665][T21791] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2772.689735][T21791] usb 4-1: Product: syz [ 2772.705683][T21791] usb 4-1: Manufacturer: syz [ 2772.724583][T21791] cdc_wdm 4-1:1.0: skipping garbage [ 2772.864927][T21791] cdc_wdm 4-1:1.0: skipping garbage [ 2772.883834][T21791] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 2774.678997][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2774.679047][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2775.330051][ T4433] netlink: 'syz.4.8095': attribute type 2 has an invalid length. [ 2776.098370][T21791] usb 4-1: USB disconnect, device number 122 [ 2779.418669][ T4466] No source specified [ 2779.496232][ T9] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 2779.776240][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 2779.908286][ T4472] overlayfs: missing 'workdir' [ 2779.923113][ T9] usb 6-1: config 0 has an invalid interface number: 126 but max is 0 [ 2779.931377][ T9] usb 6-1: config 0 has no interface number 0 [ 2780.533869][ T9] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2780.581168][ T9] usb 6-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8 [ 2780.593371][ T9] usb 6-1: config 0 interface 126 has no altsetting 0 [ 2780.826693][ T9] usb 6-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2780.848625][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2780.868769][ T9] usb 6-1: Product: syz [ 2780.875174][ T9] usb 6-1: Manufacturer: syz [ 2780.885259][ T9] usb 6-1: SerialNumber: syz [ 2780.933929][ T9] usb 6-1: config 0 descriptor?? [ 2780.964160][ T4459] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2780.978997][ T4459] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 2781.953973][ T9] ir_usb 6-1:0.126: IR Dongle converter detected [ 2781.968321][ T9] usb 6-1: IRDA class descriptor not found, device not bound [ 2781.988696][ T9] usb 6-1: USB disconnect, device number 98 [ 2787.727172][ T4527] trusted_key: encrypted_key: key user:syz not found [ 2789.937462][ T4547] ubi: mtd0 is already attached to ubi31 [ 2790.056229][T30928] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 2790.287656][T30928] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2790.349023][T30928] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2790.609938][ T4552] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8125'. [ 2791.446179][T30928] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2791.446214][T30928] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2791.446230][T30928] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2791.450847][T30928] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2791.450865][T30928] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2791.450876][T30928] usb 6-1: Product: syz [ 2791.450885][T30928] usb 6-1: Manufacturer: syz [ 2791.482986][T30928] cdc_wdm 6-1:1.0: skipping garbage [ 2791.482997][T30928] cdc_wdm 6-1:1.0: skipping garbage [ 2791.489823][T30928] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 2791.489842][T30928] cdc_wdm 6-1:1.0: Unknown control protocol [ 2791.839748][ T4562] No source specified [ 2793.315228][ T4567] sp0: Synchronizing with TNC [ 2795.102465][ T9] usb 6-1: USB disconnect, device number 99 [ 2796.477024][ T4591] netlink: 200 bytes leftover after parsing attributes in process `syz.1.8136'. [ 2798.130474][ T4610] No source specified [ 2798.719166][ T4615] tmpfs: Bad value for 'mpol' [ 2799.106292][T30928] usb 1-1: new high-speed USB device number 121 using dummy_hcd [ 2799.306207][T30928] usb 1-1: Using ep0 maxpacket: 8 [ 2800.099964][T30928] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2800.138458][T30928] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2800.449612][T30928] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2800.471954][T30928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2801.060316][T30928] usb 1-1: Product: syz [ 2801.065205][T30928] usb 1-1: Manufacturer: syz [ 2801.072945][T30928] usb 1-1: SerialNumber: syz [ 2801.693373][T32163] usb 1-1: USB disconnect, device number 121 [ 2803.686280][ T4657] ubi: mtd0 is already attached to ubi31 [ 2804.696117][T23897] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 2804.834453][ T4677] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8161'. [ 2804.844392][ T4677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8161'. [ 2805.066955][T23897] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2805.116346][T23897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2805.185996][T23897] usb 2-1: config 0 descriptor?? [ 2806.496234][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2806.509299][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2806.538109][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2806.553156][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2806.671688][ T4691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2806.727209][ T4691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2807.590331][ T4643] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 2807.806215][ T4643] usb 6-1: Using ep0 maxpacket: 8 [ 2807.826923][ T4643] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2807.858080][ T4697] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8167'. [ 2807.878374][ T4643] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 2807.936354][ T4643] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2807.957446][ T4643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2807.992786][ T4643] usb 6-1: Product: syz [ 2808.013970][ T4643] usb 6-1: Manufacturer: syz [ 2808.053201][ T4643] usb 6-1: SerialNumber: syz [ 2808.357201][T23897] pegasus 2-1:0.0: probe with driver pegasus failed with error -110 [ 2808.393857][ T4700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2809.290805][T23897] usb 6-1: USB disconnect, device number 100 [ 2812.018646][ T4721] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2813.179255][ T4728] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8175'. [ 2813.189226][ T4728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8175'. [ 2813.974877][T30928] usb 2-1: USB disconnect, device number 98 [ 2815.013192][ T4740] trusted_key: encrypted_key: key user:syz not found [ 2817.817694][ T4769] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2820.540145][ T4791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2820.576215][T16066] usb 6-1: new high-speed USB device number 101 using dummy_hcd [ 2820.746136][T16066] usb 6-1: Using ep0 maxpacket: 8 [ 2821.617714][T16066] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2821.627948][ T4795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2821.650413][T16066] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2821.693686][T16066] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2821.865468][T16066] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2822.322319][T16066] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2822.332171][T16066] usb 6-1: Product: syz [ 2822.337331][T16066] usb 6-1: Manufacturer: syz [ 2822.342480][T16066] usb 6-1: SerialNumber: syz [ 2822.353035][T16066] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 2823.300195][T16066] usb 6-1: USB disconnect, device number 101 [ 2824.149341][ T4819] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2825.406770][T30928] usb 6-1: new high-speed USB device number 102 using dummy_hcd [ 2825.856084][T30928] usb 6-1: Using ep0 maxpacket: 8 [ 2825.881869][T30928] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2826.108405][T30928] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2826.126682][T30928] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2826.135922][T30928] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2826.258858][ T4840] netlink: 'syz.0.8208': attribute type 2 has an invalid length. [ 2827.249516][T30928] usb 6-1: Product: syz [ 2827.257852][T30928] usb 6-1: Manufacturer: syz [ 2827.262536][T30928] usb 6-1: SerialNumber: syz [ 2827.271727][T30928] ti_usb_3410_5052 6-1:1.0: required endpoints missing [ 2827.406357][ T4847] kAFS: unparsable volume name [ 2827.659176][T32163] usb 6-1: USB disconnect, device number 102 [ 2829.863602][ T4861] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2833.496073][ T4901] kAFS: unparsable volume name [ 2833.772870][ T4896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2833.812702][ T4903] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2835.328771][ T4916] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2836.120695][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2836.127262][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2838.107551][ T4932] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2838.532683][ T4941] netlink: 'syz.3.8235': attribute type 2 has an invalid length. [ 2840.086901][ T4955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2840.897715][ T13] Bluetooth: hci1: Frame reassembly failed (-84) [ 2842.719318][ T4974] ubi: mtd0 is already attached to ubi31 [ 2842.916203][T28830] Bluetooth: hci1: command 0x1003 tx timeout [ 2842.918267][ T336] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2844.426313][T16066] usb 6-1: new high-speed USB device number 103 using dummy_hcd [ 2844.663916][ T5001] No source specified [ 2844.748906][ T9] usb 1-1: new high-speed USB device number 122 using dummy_hcd [ 2844.885708][T16066] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2845.241587][T16066] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2845.279282][T16066] usb 6-1: config 0 descriptor?? [ 2845.431469][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 2845.446667][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2845.462319][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2845.562717][ T9] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2845.580653][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2845.596139][ T9] usb 1-1: Product: syz [ 2845.604650][ T9] usb 1-1: Manufacturer: syz [ 2845.608021][ T5008] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2845.613640][ T9] usb 1-1: SerialNumber: syz [ 2845.654198][ T9] ti_usb_3410_5052 1-1:1.0: required endpoints missing [ 2845.828663][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2845.839251][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2845.861304][ T9] usb 1-1: USB disconnect, device number 122 [ 2845.871677][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2845.929714][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2845.969008][ T4987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2846.008275][ T4987] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2847.056753][T16066] pegasus 6-1:0.0: probe with driver pegasus failed with error -71 [ 2847.072155][T16066] usb 6-1: USB disconnect, device number 103 [ 2848.512415][ T5031] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2848.956142][T32163] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2848.975413][ T5035] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2849.203516][T32163] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2849.226232][T32163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2849.226255][T32163] usb 5-1: Product: syz [ 2849.226270][T32163] usb 5-1: Manufacturer: syz [ 2849.226284][T32163] usb 5-1: SerialNumber: syz [ 2849.646940][T32163] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2849.678467][T23897] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2850.766249][T23897] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2850.790355][T23897] ath9k_htc: Failed to initialize the device [ 2850.814370][ T9] usb 5-1: USB disconnect, device number 4 [ 2850.845310][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 2852.865290][ T5076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2853.019674][ T9] usb 1-1: new high-speed USB device number 123 using dummy_hcd [ 2854.026640][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2854.035680][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2854.063907][ T9] usb 1-1: config 0 descriptor?? [ 2854.607837][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2854.710711][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2854.774746][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2855.030789][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2855.107985][ T5071] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2855.129150][ T5071] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2855.813666][ T9] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 2856.101191][ T5096] netlink: 356 bytes leftover after parsing attributes in process `syz.1.8280'. [ 2856.386103][ T4643] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 2857.216061][ T4643] usb 2-1: Using ep0 maxpacket: 32 [ 2857.227455][ T4643] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2857.236212][ T9] usb 1-1: USB disconnect, device number 123 [ 2857.237763][ T4643] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2857.256048][ T4643] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2857.407061][ T4643] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.425212][ T4643] usb 2-1: Product: syz [ 2857.435025][ T4643] usb 2-1: Manufacturer: syz [ 2857.746953][T31880] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2857.914159][ T4643] usb 2-1: SerialNumber: syz [ 2857.937695][ T4643] usb 2-1: config 0 descriptor?? [ 2857.962649][T31880] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2857.975016][T31880] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2857.990415][T31880] usb 5-1: Product: syz [ 2857.999827][T31880] usb 5-1: Manufacturer: syz [ 2858.008603][T31880] usb 5-1: SerialNumber: syz [ 2858.031381][T31880] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2858.062983][T16066] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2858.101291][ T5119] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2859.192857][ T4643] usb 2-1: USB disconnect, device number 99 [ 2859.224312][ T5128] netlink: 'syz.0.8288': attribute type 2 has an invalid length. [ 2859.858512][T32163] usb 5-1: USB disconnect, device number 5 [ 2860.076111][T16066] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 2860.090132][T16066] ath9k_htc: Failed to initialize the device [ 2860.742062][T32163] usb 5-1: ath9k_htc: USB layer deinitialized [ 2862.336321][T21791] usb 1-1: new high-speed USB device number 124 using dummy_hcd [ 2862.338479][ T5160] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2862.866798][T21791] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2863.774784][T21791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2863.946256][T21791] usb 1-1: config 0 descriptor?? [ 2864.253745][ T5182] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2865.078941][T21791] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 2865.097619][ T5190] netlink: 356 bytes leftover after parsing attributes in process `syz.3.8303'. [ 2865.160581][T21791] usb 1-1: USB disconnect, device number 124 [ 2865.322129][T32163] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 2865.590691][T16066] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 2865.607265][ T5203] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2865.610114][T32163] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2865.638810][T32163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2866.126350][T16066] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 2866.161125][T16066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2866.163648][T32163] usb 6-1: config 0 descriptor?? [ 2866.170376][T16066] usb 4-1: Product: syz [ 2866.184448][T16066] usb 4-1: Manufacturer: syz [ 2866.193589][T16066] usb 4-1: SerialNumber: syz [ 2866.221412][T16066] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 2866.247813][T16066] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 2866.684678][ T5188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.695764][ T5188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.724360][ T5188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.736345][ T5188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2866.786832][ T5188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2866.804514][ T5188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2867.627248][T21791] usb 4-1: USB disconnect, device number 123 [ 2867.635702][T16066] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 2867.651377][T32163] pegasus 6-1:0.0: probe with driver pegasus failed with error -32 [ 2867.667442][T16066] ath9k_htc: Failed to initialize the device [ 2867.683690][T21791] usb 4-1: ath9k_htc: USB layer deinitialized [ 2868.848175][T32163] usb 6-1: USB disconnect, device number 104 [ 2869.977059][ T5233] No source specified [ 2870.152452][T16066] usb 1-1: new high-speed USB device number 125 using dummy_hcd [ 2870.226965][ T5236] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2870.318549][T16066] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2870.439751][T16066] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2870.452002][T16066] usb 1-1: config 0 descriptor?? [ 2871.265832][ T5252] netlink: 'syz.3.8321': attribute type 2 has an invalid length. [ 2872.234853][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2872.265762][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2872.292156][T16066] pegasus 1-1:0.0: probe with driver pegasus failed with error -32 [ 2872.323928][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2872.355626][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2872.396791][ T5263] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 2872.442098][ T5232] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2872.516450][ T5232] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2872.524282][T21791] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 2872.716184][T21791] usb 2-1: Using ep0 maxpacket: 32 [ 2873.031556][T21791] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 2873.063661][T21791] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2873.085507][T21791] usb 2-1: config 0 has no interface number 0 [ 2873.099996][T21791] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2873.133351][T21791] usb 2-1: config 0 interface 126 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2873.175090][T21791] usb 2-1: config 0 interface 126 has no altsetting 0 [ 2873.191681][T21791] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c [ 2873.203004][T21791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2873.218458][T21791] usb 2-1: Product: syz [ 2873.225787][T21791] usb 2-1: Manufacturer: syz [ 2873.234105][T21791] usb 2-1: SerialNumber: syz [ 2873.257831][T21791] usb 2-1: config 0 descriptor?? [ 2873.267243][ T5261] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 2873.508034][T21791] ir_usb 2-1:0.126: required endpoints missing [ 2873.537468][T21791] usb 2-1: USB disconnect, device number 100 [ 2873.656445][T16066] usb 1-1: USB disconnect, device number 125 [ 2873.930868][ T5277] delete_channel: no stack [ 2874.159721][ T5292] No source specified [ 2874.657925][ T5296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2877.484924][ T5303] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8336'. [ 2877.498695][ T5301] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 2877.786196][T30928] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 2878.011406][T30928] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2878.305167][T30928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2878.339977][T30928] usb 4-1: config 0 descriptor?? [ 2878.842910][ T5331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.606997][ T5331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2879.653319][ T5331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2879.987395][ T5331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2880.014277][ T5331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2880.043727][ T5331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2881.292852][T30928] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 2881.446471][T30928] usb 4-1: USB disconnect, device number 124 [ 2881.589627][ T5351] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2882.757193][ T5356] netlink: 'syz.0.8352': attribute type 2 has an invalid length. [ 2883.755488][ T5360] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2887.096129][T32163] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2887.232492][ T5399] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2887.255365][ T5402] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2887.268652][T32163] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2887.773453][T32163] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2887.784415][T32163] usb 5-1: config 0 descriptor?? [ 2888.230524][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2888.240986][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2888.344249][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2888.456378][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2888.619762][ T5392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2888.728011][ T5392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2889.589613][ T3003] Bluetooth: hci1: Frame reassembly failed (-84) [ 2889.713067][T32163] pegasus 5-1:0.0: probe with driver pegasus failed with error -71 [ 2889.730909][T32163] usb 5-1: USB disconnect, device number 6 [ 2890.546374][ T5434] ubi: mtd0 is already attached to ubi31 [ 2891.556061][ T336] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2893.573566][ T5449] wireguard0: entered promiscuous mode [ 2893.583813][ T5449] wireguard0: entered allmulticast mode [ 2893.989112][ T5458] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2895.926123][T32163] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2896.117797][T32163] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2896.130242][T32163] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2896.141420][T32163] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2896.150677][T32163] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2896.162022][T32163] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2896.595223][T32163] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2896.624508][T32163] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2896.681455][T32163] usb 5-1: Product: syz [ 2896.894592][T32163] usb 5-1: Manufacturer: syz [ 2897.127722][T32163] cdc_wdm 5-1:1.0: skipping garbage [ 2897.162297][T32163] cdc_wdm 5-1:1.0: skipping garbage [ 2897.202449][T32163] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 2897.328287][T32163] cdc_wdm 5-1:1.0: Unknown control protocol [ 2897.596660][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.603095][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2897.758961][ T5504] sp0: Synchronizing with TNC [ 2898.580479][ T5507] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2900.146175][T30928] usb 1-1: new high-speed USB device number 126 using dummy_hcd [ 2900.685320][ T9] usb 5-1: USB disconnect, device number 7 [ 2900.800634][T30928] usb 1-1: Using ep0 maxpacket: 8 [ 2900.924622][T30928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2901.613300][T30928] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2901.623313][T30928] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2901.643155][T30928] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2901.689079][T30928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2901.710539][T30928] usb 1-1: Product: syz [ 2901.719612][T30928] usb 1-1: Manufacturer: syz [ 2901.970775][T30928] usb 1-1: SerialNumber: syz [ 2902.374289][T30928] usb 1-1: can't set config #1, error -71 [ 2902.498793][T30928] usb 1-1: USB disconnect, device number 126 [ 2903.646268][ T5554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2904.174350][ T5564] kAFS: unparsable volume name [ 2905.326395][T32163] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2905.406048][T21791] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 2905.476223][T32163] usb 5-1: Using ep0 maxpacket: 8 [ 2905.484996][T32163] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2905.498403][T32163] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2905.510496][T32163] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2905.528572][T32163] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2905.538091][T32163] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.546498][T32163] usb 5-1: Product: syz [ 2905.550823][T32163] usb 5-1: Manufacturer: syz [ 2905.555451][T32163] usb 5-1: SerialNumber: syz [ 2905.580813][T21791] usb 2-1: Using ep0 maxpacket: 8 [ 2905.617879][T21791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2905.619049][T32163] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 2905.661886][T21791] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2905.685587][T21791] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 2905.711340][T21791] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2905.730865][T21791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2905.749740][T21791] usb 2-1: Product: syz [ 2905.762687][T21791] usb 2-1: Manufacturer: syz [ 2905.775331][T21791] usb 2-1: SerialNumber: syz [ 2905.788455][T21791] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 2905.806657][T21791] usb 2-1: Direct firmware load for moxa/moxa-1110.fw failed with error -2 [ 2905.830117][T21791] usb 2-1: Falling back to sysfs fallback for: moxa/moxa-1110.fw [ 2906.276075][ T9] usb 1-1: new high-speed USB device number 127 using dummy_hcd [ 2906.350726][T16066] usb 5-1: USB disconnect, device number 8 [ 2906.469091][ T9] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 2906.478319][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2906.499194][ T9] usb 1-1: config 0 descriptor?? [ 2906.509270][ T5594] bridge5: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 2906.718692][ T5596] netlink: 'syz.1.8418': attribute type 2 has an invalid length. [ 2907.661665][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2907.690714][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2907.720949][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2907.729918][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2907.741264][ T5586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2907.749971][ T5586] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2909.584326][ T9] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 2909.829631][ T9] usb 1-1: USB disconnect, device number 127 [ 2910.262619][T29871] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 2910.919607][T29871] usb 4-1: Using ep0 maxpacket: 8 [ 2910.932388][T29871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2911.050877][T29871] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2911.066163][T29871] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2911.179936][T29871] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2911.196665][T29871] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2911.205154][T29871] usb 4-1: Product: syz [ 2911.309932][T29871] usb 4-1: Manufacturer: syz [ 2911.315650][T29871] usb 4-1: SerialNumber: syz [ 2911.743532][T29871] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 2911.893848][T23897] usb 4-1: USB disconnect, device number 125 [ 2916.954174][ T5692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2917.486094][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 2918.436129][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 2918.461745][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2918.472990][ T9] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2918.483022][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2918.494939][ T9] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2918.661203][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2918.702297][ T9] usb 1-1: Product: syz [ 2918.818570][ T9] usb 1-1: Manufacturer: syz [ 2918.835389][ T9] usb 1-1: SerialNumber: syz [ 2919.059416][ T9] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 2919.294141][ T9] usb 1-1: USB disconnect, device number 2 [ 2919.623036][ T5718] trusted_key: encrypted_key: key user:syz not found [ 2922.180521][ T5737] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2924.035524][ T5745] overlayfs: failed to resolve './file0': -2 [ 2926.163724][ T5770] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2926.686544][ T5771] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2927.063594][ T5779] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8467'. [ 2929.991899][ T5809] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2931.698804][ T5818] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2933.913912][ T5836] ubi: mtd0 is already attached to ubi31 [ 2934.637168][ T4643] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 2934.836567][ T4643] usb 6-1: Using ep0 maxpacket: 8 [ 2934.845361][ T4643] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2934.858487][ T4643] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2934.889691][ T5844] ubi: mtd0 is already attached to ubi31 [ 2934.906754][ T4643] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2934.936423][ T4643] usb 6-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2934.945875][ T4643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2934.960877][ T4643] usb 6-1: Product: syz [ 2934.965616][ T4643] usb 6-1: Manufacturer: syz [ 2934.986820][ T4643] usb 6-1: SerialNumber: syz [ 2935.136549][ T4643] ti_usb_3410_5052 6-1:1.0: TI USB 3410 1 port adapter converter detected [ 2935.942307][ T4643] usb 6-1: USB disconnect, device number 105 [ 2936.909688][ T52] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 2937.446596][ T52] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 2937.675209][ T52] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 2938.065021][ T52] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 2938.771430][ T52] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2938.796567][ T52] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2938.985031][ T52] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 2939.075935][ T52] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 2939.126657][ T52] usb 4-1: Product: syz [ 2939.159868][ T52] usb 4-1: Manufacturer: syz [ 2939.228057][ T52] cdc_wdm 4-1:1.0: skipping garbage [ 2939.233506][ T52] cdc_wdm 4-1:1.0: skipping garbage [ 2939.241496][ T52] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 2939.343313][ T52] cdc_wdm 4-1:1.0: Unknown control protocol [ 2939.807411][ T5907] sp0: Synchronizing with TNC [ 2941.833411][T19784] usb 4-1: USB disconnect, device number 126 [ 2946.153177][ T5977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2947.203468][ T5979] ubi: mtd0 is already attached to ubi31 [ 2949.939753][ T6005] ubi: mtd0 is already attached to ubi31 [ 2953.148572][ T6047] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8546'. [ 2954.576242][ T6070] No source specified [ 2955.193616][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.5.8554'. [ 2955.706585][ T6080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8555'. [ 2957.246159][ T5716] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 2957.441153][ T5716] usb 4-1: Using ep0 maxpacket: 8 [ 2957.491575][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 2957.575556][ T5716] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 2957.650776][ T5716] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 2957.767054][ T5716] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 2957.797222][ T5716] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2957.805221][ T5716] usb 4-1: Product: syz [ 2957.828392][ T5716] usb 4-1: Manufacturer: syz [ 2957.833005][ T5716] usb 4-1: SerialNumber: syz [ 2957.862392][ T5716] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 2958.066312][ T9] usb 4-1: USB disconnect, device number 127 [ 2959.008428][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.014725][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 2967.096622][ T5185] udevd[5185]: worker [5461] /devices/platform/dummy_hcd.1/usb2/2-1 is taking a long time [ 2969.254435][T21791] usb 2-1: ti_download_firmware - firmware not found [ 2969.261260][T21791] ti_usb_3410_5052 2-1:1.0: probe with driver ti_usb_3410_5052 failed with error -2 [ 2969.274142][T21791] usb 2-1: USB disconnect, device number 101 [ 2982.665288][ T6109] ubi: mtd0 is already attached to ubi31 [ 2983.993331][T28830] Bluetooth: hci1: command 0x1003 tx timeout [ 2984.007284][ T336] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2986.342234][T28830] Bluetooth: hci4: command 0x0406 tx timeout [ 2987.175781][ T6156] ubi: mtd0 is already attached to ubi31 [ 2988.627486][ T6163] autofs: Unknown parameter 'fd0x0000000000000000' [ 2991.060865][T11183] Bluetooth: hci1: Frame reassembly failed (-84) [ 2993.097094][ T336] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 2993.097945][ T798] Bluetooth: hci1: command 0x1003 tx timeout [ 2995.390148][ T6201] ubi: mtd0 is already attached to ubi31 [ 2998.516233][ T6234] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8595'. [ 2999.631349][ T6256] ubi: mtd0 is already attached to ubi31 [ 3003.918447][ T6304] ubi: mtd0 is already attached to ubi31 [ 3004.371066][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8612'. [ 3005.809880][ T6320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8614'. [ 3008.380392][T28830] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3009.267599][ T6355] ubi: mtd0 is already attached to ubi31 [ 3009.619228][ T6359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3011.580345][ T6380] No source specified [ 3013.304465][ T6397] netlink: 44 bytes leftover after parsing attributes in process `syz.5.8637'. [ 3017.459381][ T6425] tmpfs: Bad value for 'mpol' [ 3018.246044][T16066] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 3018.925785][ T6445] tmpfs: Bad value for 'mpol' [ 3019.175451][T16066] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3019.186143][T16066] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3019.206035][T16066] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3019.215109][T16066] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3019.226936][T16066] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3019.670764][T16066] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3019.685783][T16066] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3019.699355][T16066] usb 1-1: Product: syz [ 3019.703700][T16066] usb 1-1: Manufacturer: syz [ 3019.714167][T16066] cdc_wdm 1-1:1.0: skipping garbage [ 3019.719873][T16066] cdc_wdm 1-1:1.0: skipping garbage [ 3019.730579][T16066] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 3019.736733][T16066] cdc_wdm 1-1:1.0: Unknown control protocol [ 3019.747606][ T6454] wireguard0: entered promiscuous mode [ 3019.753395][ T6454] wireguard0: entered allmulticast mode [ 3020.222572][ T6459] sp0: Synchronizing with TNC [ 3021.136457][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.144727][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3021.514157][T21791] usb 1-1: USB disconnect, device number 3 [ 3021.973782][ T6469] ubi: mtd0 is already attached to ubi31 [ 3022.266124][ T52] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 3022.646074][ T52] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3022.716089][ T52] usb 1-1: config 0 has no interfaces? [ 3022.726004][ T52] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3022.748787][ T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3022.771251][ T52] usb 1-1: config 0 descriptor?? [ 3026.054084][ T9] usb 1-1: USB disconnect, device number 4 [ 3026.059015][ T6509] No source specified [ 3026.559264][ T6523] fuse: Bad value for 'fd' [ 3027.567924][ T6531] ubi: mtd0 is already attached to ubi31 [ 3029.995545][ T6537] ubi: mtd0 is already attached to ubi31 [ 3030.167883][ T6549] ubi: mtd0 is already attached to ubi31 [ 3030.246037][ T52] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 3030.429898][ T52] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3030.498122][ T52] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3030.587516][ T52] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3031.138272][ T6560] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8682'. [ 3031.515250][ T52] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3031.526472][ T52] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3031.547104][ T52] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3031.556532][ T52] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3031.564580][ T52] usb 6-1: Product: syz [ 3031.569892][ T52] usb 6-1: Manufacturer: syz [ 3031.617985][ T52] cdc_wdm 6-1:1.0: skipping garbage [ 3031.623912][ T52] cdc_wdm 6-1:1.0: skipping garbage [ 3032.894912][ T52] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 3032.902470][ T52] cdc_wdm 6-1:1.0: Unknown control protocol [ 3034.633059][ T6579] sp0: Synchronizing with TNC [ 3036.295207][ T52] usb 6-1: USB disconnect, device number 106 [ 3050.006086][T30928] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 3050.213669][T30928] usb 5-1: Using ep0 maxpacket: 8 [ 3050.572224][T30928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3050.738388][T30928] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3052.935104][T30928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3052.980013][T30928] usb 5-1: string descriptor 0 read error: -71 [ 3052.998702][T30928] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3053.325327][T30928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3053.355877][T30928] usb 5-1: can't set config #1, error -71 [ 3053.370067][T30928] usb 5-1: USB disconnect, device number 9 [ 3055.276144][T30928] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 3055.362127][ T6754] wireguard0: entered promiscuous mode [ 3055.388007][ T6754] wireguard0: entered allmulticast mode [ 3055.979337][T30928] usb 4-1: Using ep0 maxpacket: 8 [ 3056.000161][T30928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3056.033210][T30928] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3056.434036][T30928] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3056.487192][T30928] usb 4-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3056.499412][T30928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3056.585841][T30928] usb 4-1: Product: syz [ 3056.618528][T30928] usb 4-1: Manufacturer: syz [ 3056.623122][T30928] usb 4-1: SerialNumber: syz [ 3056.645435][T30928] ti_usb_3410_5052 4-1:1.0: TI USB 3410 1 port adapter converter detected [ 3057.208375][ T6779] ubi: mtd0 is already attached to ubi31 [ 3057.695386][ T6784] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3058.655237][ T4643] usb 4-1: USB disconnect, device number 2 [ 3059.467115][ T6794] No source specified [ 3060.371338][ T6804] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3061.357140][ T6810] ubi: mtd0 is already attached to ubi31 [ 3061.464422][ T6796] overlayfs: missing 'lowerdir' [ 3063.012273][ T6822] wireguard0: entered promiscuous mode [ 3064.076622][ T6822] wireguard0: entered allmulticast mode [ 3065.384718][ T6851] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3067.894898][ T6870] ubi: mtd0 is already attached to ubi31 [ 3070.666035][T16066] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3070.903842][ T6906] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 3071.008257][T16066] usb 5-1: Using ep0 maxpacket: 8 [ 3071.771484][T16066] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3071.786078][T16066] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3071.796605][T16066] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3071.809720][T16066] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3071.819168][T16066] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3071.826445][ T6897] wireguard0: entered promiscuous mode [ 3071.835610][ T6897] wireguard0: entered allmulticast mode [ 3071.841633][T16066] usb 5-1: Product: syz [ 3071.845852][T16066] usb 5-1: Manufacturer: syz [ 3071.866042][T16066] usb 5-1: SerialNumber: syz [ 3071.876645][T16066] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 3074.337429][T21791] usb 5-1: USB disconnect, device number 10 [ 3075.992996][ T6941] ubi: mtd0 is already attached to ubi31 [ 3077.165054][ T6040] Bluetooth: hci1: Frame reassembly failed (-84) [ 3079.166395][T28830] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3079.167766][ T336] Bluetooth: hci1: command 0x1003 tx timeout [ 3080.041204][ T6968] wireguard0: entered promiscuous mode [ 3080.046951][ T6968] wireguard0: entered allmulticast mode [ 3081.801921][T29666] Bluetooth: hci1: Frame reassembly failed (-84) [ 3081.887774][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3081.912972][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3083.646051][ T798] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3093.161043][ T7101] ubi: mtd0 is already attached to ubi31 [ 3093.386794][ T30] audit: type=1400 audit(1746171523.129:812): avc: denied { create } for pid=7096 comm="syz.4.8828" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3093.402332][ T7097] overlayfs: failed to resolve '/»»': -2 [ 3094.086471][ T30] audit: type=1400 audit(1746171523.139:813): avc: denied { ioctl } for pid=7096 comm="syz.4.8828" path="socket:[134357]" dev="sockfs" ino=134357 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 3096.295896][ T7137] No source specified [ 3097.503649][T19784] usb 2-1: new high-speed USB device number 102 using dummy_hcd [ 3098.011772][ T6107] Bluetooth: hci1: Frame reassembly failed (-84) [ 3098.099877][T19784] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3098.151292][T19784] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3098.184345][T19784] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3098.289267][T19784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3098.322248][T19784] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3098.418154][T19784] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3098.439395][T19784] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3098.466144][T19784] usb 2-1: Product: syz [ 3098.470676][T19784] usb 2-1: Manufacturer: syz [ 3098.483419][T19784] cdc_wdm 2-1:1.0: skipping garbage [ 3098.489131][T19784] cdc_wdm 2-1:1.0: skipping garbage [ 3098.495880][T19784] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 3098.506462][T19784] cdc_wdm 2-1:1.0: Unknown control protocol [ 3100.024537][T28830] Bluetooth: hci1: command 0x1003 tx timeout [ 3100.027822][ T7158] sp0: Synchronizing with TNC [ 3100.031222][ T798] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3102.175834][ T9] usb 2-1: USB disconnect, device number 102 [ 3103.361718][ T7188] No source specified [ 3104.946337][ T7196] overlayfs: failed to resolve './file1': -2 [ 3105.894404][ T6040] Bluetooth: hci1: Frame reassembly failed (-84) [ 3107.556108][ T798] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3109.296028][T21791] usb 2-1: new high-speed USB device number 103 using dummy_hcd [ 3110.881047][T21791] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3110.890132][T21791] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3110.900463][T21791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3110.909752][T21791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3110.920911][T21791] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3110.934981][T21791] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3110.945940][T21791] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3110.953918][T21791] usb 2-1: Product: syz [ 3110.958228][T21791] usb 2-1: Manufacturer: syz [ 3110.967954][T21791] cdc_wdm 2-1:1.0: skipping garbage [ 3110.973284][T21791] cdc_wdm 2-1:1.0: skipping garbage [ 3110.980879][T21791] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 3110.987263][T21791] cdc_wdm 2-1:1.0: Unknown control protocol [ 3112.798622][ T7278] sp0: Synchronizing with TNC [ 3114.643795][ T4643] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 3114.986996][T21791] usb 2-1: USB disconnect, device number 103 [ 3117.215820][ T4643] usb 1-1: device descriptor read/all, error -71 [ 3117.846011][ T5735] usb 2-1: new high-speed USB device number 104 using dummy_hcd [ 3118.031501][ T5735] usb 2-1: Using ep0 maxpacket: 8 [ 3118.050187][ T5735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3118.289097][ T5735] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3118.411895][ T5735] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3118.441045][ T5735] usb 2-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3118.451408][ T5735] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3118.466034][ T5735] usb 2-1: Product: syz [ 3118.471533][ T5735] usb 2-1: Manufacturer: syz [ 3119.337773][ T5735] usb 2-1: SerialNumber: syz [ 3119.359646][ T5735] ti_usb_3410_5052 2-1:1.0: TI USB 3410 1 port adapter converter detected [ 3119.786075][T21791] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 3120.026208][T21791] usb 1-1: Using ep0 maxpacket: 8 [ 3120.101035][T21791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3120.231421][T21791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3120.366801][T21791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3120.427758][T21791] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3120.479642][T21791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3121.276144][ T7351] No source specified [ 3121.602451][T21791] usb 1-1: Product: syz [ 3121.607216][T21791] usb 1-1: Manufacturer: syz [ 3121.611809][T21791] usb 1-1: SerialNumber: syz [ 3121.623691][T21791] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 3122.900255][ T5735] usb 2-1: USB disconnect, device number 104 [ 3122.956728][T21791] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 3123.020925][T19784] usb 1-1: USB disconnect, device number 7 [ 3123.598941][T21791] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3123.609174][T21791] usb 6-1: config 0 has no interfaces? [ 3123.614648][T21791] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3123.630947][T21791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3123.736490][T21791] usb 6-1: config 0 descriptor?? [ 3125.077736][ T336] Bluetooth: hci1: command 0x1003 tx timeout [ 3125.085808][T28830] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 3125.905833][ T7393] overlayfs: failed to resolve './file0': -2 [ 3126.836755][T23897] usb 6-1: USB disconnect, device number 107 [ 3127.713463][T21791] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 3127.909991][T21791] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 3128.546764][T21791] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3128.576167][T21791] usb 1-1: config 0 descriptor?? [ 3128.787447][T21791] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 3129.157100][T21791] usb 1-1: USB disconnect, device number 8 [ 3132.924642][ T7440] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3132.943623][ T7440] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3132.972532][ T7440] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3132.986900][ T5716] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3133.204539][ T5716] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 3133.226469][ T5716] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3133.258956][ T5716] usb 5-1: config 0 descriptor?? [ 3134.173856][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3134.186440][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3134.236037][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3134.266684][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3134.312323][ T7457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3134.983580][ T7457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3135.147456][ T336] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 3135.253361][ T336] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 3135.273035][ T336] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 3135.406396][ T336] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 3135.414669][ T336] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 3135.484799][T29666] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3135.582561][T29666] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3135.596737][ T5716] pegasus 5-1:0.0: can't reset MAC [ 3135.601948][ T5716] pegasus 5-1:0.0: probe with driver pegasus failed with error -5 [ 3135.623830][ T5716] usb 5-1: USB disconnect, device number 11 [ 3135.681601][T29666] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 3135.877650][ T7482] ubi: mtd0 is already attached to ubi31 [ 3136.269015][ T7469] chnl_net:caif_netlink_parms(): no params data found [ 3136.833339][ T7493] ubi: mtd0 is already attached to ubi31 [ 3137.967148][ T336] Bluetooth: hci1: command tx timeout [ 3139.706888][ T7512] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3139.726367][ T7512] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3139.736124][ T7512] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3139.871847][ T7469] bridge0: port 1(bridge_slave_0) entered blocking state [ 3139.902444][ T7469] bridge0: port 1(bridge_slave_0) entered disabled state [ 3139.946107][ T7469] bridge_slave_0: entered allmulticast mode [ 3139.976237][ T7469] bridge_slave_0: entered promiscuous mode [ 3139.997615][ T7469] bridge0: port 2(bridge_slave_1) entered blocking state [ 3140.161983][ T7469] bridge0: port 2(bridge_slave_1) entered disabled state [ 3140.169375][ T7469] bridge_slave_1: entered allmulticast mode [ 3140.176783][ T7469] bridge_slave_1: entered promiscuous mode [ 3140.391188][ T336] Bluetooth: hci1: command tx timeout [ 3142.447174][ T336] Bluetooth: hci1: command tx timeout [ 3143.321276][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 3143.330840][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 3143.700579][ T7577] ubi: mtd0 is already attached to ubi31 [ 3144.024540][ T7580] overlayfs: failed to resolve './file1': -2 [ 3144.724329][ T336] Bluetooth: hci1: command tx timeout [ 3144.886434][T29666] bond0 (unregistering): Released all slaves [ 3145.021276][ T7469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 3145.059022][ T7469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 3146.922112][ T7603] ubi: mtd0 is already attached to ubi31 [ 3147.780955][T29666] hsr_slave_0: left promiscuous mode [ 3147.812022][T29666] hsr_slave_1: left promiscuous mode [ 3147.836641][T29666] veth1_macvtap: left promiscuous mode [ 3147.852287][T29666] veth0_macvtap: left promiscuous mode [ 3147.869016][T29666] veth1_vlan: left promiscuous mode [ 3147.905400][T29666] veth0_vlan: left promiscuous mode [ 3148.124308][ T7620] No source specified [ 3148.567301][ T5716] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 3148.727633][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 3148.792040][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3148.833378][ T5716] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3148.855814][ T5716] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3148.894072][ T5716] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3148.909713][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3148.940830][ T5716] usb 5-1: Product: syz [ 3149.030383][ T5716] usb 5-1: Manufacturer: syz [ 3149.038951][ T5716] usb 5-1: SerialNumber: syz [ 3149.057854][ T5716] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 3149.268231][ T5716] usb 5-1: USB disconnect, device number 12 [ 3149.325971][T30928] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 3149.687305][T30928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3149.699585][T30928] usb 2-1: config 0 has no interfaces? [ 3149.705208][T30928] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3149.745966][T30928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3149.759242][T30928] usb 2-1: config 0 descriptor?? [ 3151.606028][T30928] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 3151.755979][T30928] usb 5-1: Using ep0 maxpacket: 8 [ 3151.779329][T30928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3151.790398][T30928] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3151.802171][T30928] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3151.819815][T30928] usb 5-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3151.830491][T30928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3151.839907][T30928] usb 5-1: Product: syz [ 3151.844317][T30928] usb 5-1: Manufacturer: syz [ 3151.849385][T30928] usb 5-1: SerialNumber: syz [ 3151.860637][T30928] ti_usb_3410_5052 5-1:1.0: TI USB 3410 1 port adapter converter detected [ 3151.891983][ T7469] team0: Port device team_slave_0 added [ 3151.931795][ T7469] team0: Port device team_slave_1 added [ 3152.096000][ T5716] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 3152.114850][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 3152.137901][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3152.195037][ T7469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 3152.218486][ T7469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 3152.225442][ T7469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 3152.286372][ T5716] usb 1-1: Using ep0 maxpacket: 8 [ 3152.545984][ T7469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 3152.683467][T30928] usb 2-1: USB disconnect, device number 105 [ 3152.750749][ T7668] wireguard0: entered promiscuous mode [ 3152.771283][ T5716] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3152.782123][ T7668] wireguard0: entered allmulticast mode [ 3152.810800][ T5716] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3152.935510][ T5716] usb 1-1: Product: syz [ 3153.023517][ T7678] No source specified [ 3153.393545][ T5716] usb 1-1: Manufacturer: syz [ 3153.400457][T30928] usb 5-1: USB disconnect, device number 13 [ 3153.402330][ T5716] usb 1-1: SerialNumber: syz [ 3153.414296][ T5716] usb 1-1: config 0 descriptor?? [ 3153.662333][ T5716] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3153.728474][T29666] IPVS: stop unused estimator thread 0... [ 3153.866583][ T7469] hsr_slave_0: entered promiscuous mode [ 3153.897272][ T7469] hsr_slave_1: entered promiscuous mode [ 3153.903377][ T7469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 3153.916111][T21791] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 3154.003461][ T7469] Cannot create hsr debugfs directory [ 3154.127083][T21791] usb 2-1: Using ep0 maxpacket: 8 [ 3154.140486][T21791] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3154.152885][T21791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3154.171137][T21791] usb 2-1: Product: syz [ 3154.176087][T21791] usb 2-1: Manufacturer: syz [ 3154.180710][T21791] usb 2-1: SerialNumber: syz [ 3154.207829][T21791] usb 2-1: config 0 descriptor?? [ 3154.401706][ T7700] Cannot find add_set index 0 as target [ 3155.136965][T21791] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3155.351643][ T5716] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3155.364364][ T5716] usb 1-1: USB disconnect, device number 9 [ 3156.801467][ T7721] wireguard0: entered promiscuous mode [ 3156.825129][ T7721] wireguard0: entered allmulticast mode [ 3156.836785][T21791] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3156.902433][T21791] usb 2-1: USB disconnect, device number 106 [ 3158.920943][ T7745] overlayfs: failed to resolve './file1': -2 [ 3159.075959][T30928] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 3159.904594][ T7469] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 3159.927367][T30928] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 3160.219542][T30928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3160.240937][T30928] usb 5-1: config 0 descriptor?? [ 3160.242128][ T7469] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 3160.284712][ T7469] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 3160.310790][ T7469] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 3160.465980][T21791] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 3160.522813][ T7469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 3160.544192][ T7469] 8021q: adding VLAN 0 to HW filter on device team0 [ 3160.562075][ T1230] bridge0: port 1(bridge_slave_0) entered blocking state [ 3160.569281][ T1230] bridge0: port 1(bridge_slave_0) entered forwarding state [ 3160.612120][T29853] bridge0: port 2(bridge_slave_1) entered blocking state [ 3160.619268][T29853] bridge0: port 2(bridge_slave_1) entered forwarding state [ 3160.656180][T21791] usb 1-1: Using ep0 maxpacket: 8 [ 3160.664465][T21791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 3160.687568][T21791] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 3160.715656][ T7766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3160.725045][ T7766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3160.745384][T21791] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 3160.773520][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3160.948820][T21791] usb 1-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 3160.963196][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3160.984116][T21791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3160.987431][ T7469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 3161.004198][T21791] usb 1-1: Product: syz [ 3161.017013][T21791] usb 1-1: Manufacturer: syz [ 3161.031746][T21791] usb 1-1: SerialNumber: syz [ 3161.032240][ T7741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3161.060164][ T7741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3161.112489][T21791] ti_usb_3410_5052 1-1:1.0: TI USB 3410 1 port adapter converter detected [ 3161.557204][T30928] pegasus 5-1:0.0: probe with driver pegasus failed with error -32 [ 3162.147356][T21791] usb 5-1: USB disconnect, device number 14 [ 3163.342095][ T7469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 3163.783791][ T7469] veth0_vlan: entered promiscuous mode [ 3163.831139][ T7469] veth1_vlan: entered promiscuous mode [ 3164.269944][ T7469] veth0_macvtap: entered promiscuous mode [ 3164.916859][ T7469] veth1_macvtap: entered promiscuous mode [ 3164.964312][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 3165.004182][ T7469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3165.044783][ T7469] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3165.249259][ T7469] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3165.308561][ T7469] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3165.359710][ T7469] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3166.117130][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3166.124975][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3166.244967][T11183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3166.339316][T11183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3167.711922][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 3167.719241][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 3167.950922][T16066] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 3168.004818][ T1230] Bluetooth: hci5: Frame reassembly failed (-84) [ 3168.116500][T16066] usb 5-1: Using ep0 maxpacket: 16 [ 3168.132155][T16066] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 238, changing to 11 [ 3168.261836][T16066] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 3168.544725][T16066] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 3168.561554][ T5735] usb 1-1: USB disconnect, device number 10 [ 3168.592440][T16066] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3168.645045][T16066] usb 5-1: config 0 descriptor?? [ 3168.724770][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 3168.743201][ T7847] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 3169.633641][T16066] lua 0003:1E7D:2C2E.0014: item fetching failed at offset 1/3 [ 3169.650371][T16066] lua 0003:1E7D:2C2E.0014: parse failed [ 3169.659801][T16066] lua 0003:1E7D:2C2E.0014: probe with driver lua failed with error -22 [ 3169.741074][ T7847] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3169.764135][ T7847] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3169.780085][ T7847] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3169.802118][ T7847] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 3169.938252][T30928] usb 5-1: USB disconnect, device number 15 [ 3170.037459][T28830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 3170.038341][ T336] Bluetooth: hci5: command 0x1003 tx timeout [ 3170.353582][ T5716] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 3170.434893][ T7896] netlink: 456 bytes leftover after parsing attributes in process `syz.1.9007'. [ 3170.511074][ T5716] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 3170.522374][ T5716] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3171.413551][ T5716] usb 1-1: config 0 descriptor?? [ 3171.976061][T30928] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 3172.113011][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3172.156286][T30928] usb 2-1: Using ep0 maxpacket: 16 [ 3172.217836][T30928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3172.235282][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3172.371523][T30928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3172.426844][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3172.484665][T30928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 3172.504195][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3172.519992][T30928] usb 2-1: New USB device found, idVendor=05ac, idProduct=0247, bcdDevice= 0.00 [ 3172.566098][ T7882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 3172.574687][T30928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3172.616819][ T7882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 3172.638212][T30928] usb 2-1: config 0 descriptor?? [ 3172.996081][ T5735] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 3173.230285][T30928] usbhid 2-1:0.0: can't add hid device: -71 [ 3173.236383][T30928] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3173.249159][ T5735] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3174.234332][T30928] usb 2-1: USB disconnect, device number 107 [ 3174.286247][ T5716] pegasus 1-1:0.0: probe with driver pegasus failed with error -110 [ 3174.324432][ T5735] usb 5-1: config 0 has no interfaces? [ 3174.386568][ T5716] usb 1-1: USB disconnect, device number 11 [ 3174.406655][ T5735] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 3174.435537][ T5735] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3174.459426][ T5735] usb 5-1: config 0 descriptor?? [ 3176.085979][T30928] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 3177.092651][T30928] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 3177.101520][T30928] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 3177.133633][T30928] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 3177.163698][T30928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 3177.356972][T30928] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 3177.840468][T30928] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 3177.840528][T30928] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 3177.840555][T30928] usb 1-1: Product: syz [ 3177.840615][T30928] usb 1-1: Manufacturer: syz [ 3177.998724][T30928] cdc_wdm 1-1:1.0: skipping garbage [ 3177.998778][T30928] cdc_wdm 1-1:1.0: skipping garbage [ 3178.024682][T30928] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 3178.024735][T30928] cdc_wdm 1-1:1.0: Unknown control protocol [ 3178.151843][T30928] usb 5-1: USB disconnect, device number 16 [ 3178.963966][ T7983] sp0: Synchronizing with TNC [ 3181.142560][ T4643] usb 1-1: USB disconnect, device number 12 [ 3182.756007][ T4643] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 3183.127859][ T4643] usb 4-1: Using ep0 maxpacket: 8 [ 3183.205030][ T4643] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3183.314718][ T4643] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3183.335143][ T4643] usb 4-1: Product: syz [ 3183.391914][ T4643] usb 4-1: Manufacturer: syz [ 3183.442920][ T4643] usb 4-1: SerialNumber: syz [ 3183.498423][ T4643] usb 4-1: config 0 descriptor?? [ 3183.771027][ T4643] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3183.910486][T11183] Bluetooth: hci5: Frame reassembly failed (-84) [ 3185.696996][ T4643] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 3185.738757][ T4643] usb 4-1: USB disconnect, device number 3 [ 3185.974733][ T798] Bluetooth: hci5: command 0x1003 tx timeout [ 3185.976003][T30928] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 3185.981078][T28830] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 3186.906596][T30928] usb 1-1: Using ep0 maxpacket: 8 [ 3187.774164][T30928] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3187.793255][T30928] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3187.948807][T30928] usb 1-1: Product: syz [ 3187.953698][T30928] usb 1-1: Manufacturer: syz [ 3187.958541][T30928] usb 1-1: SerialNumber: syz [ 3187.986801][T30928] usb 1-1: config 0 descriptor?? [ 3188.452813][T28830] Bluetooth: hci1: link tx timeout [ 3188.464636][T28830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 3188.489020][T28830] Bluetooth: hci1: link tx timeout [ 3188.494140][T28830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 3188.508016][T30928] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 3188.919010][T28830] Bluetooth: hci1: link tx timeout [ 3188.924252][T28830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 3189.165986][ T5716] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 3189.557621][T28830] Bluetooth: hci1: link tx timeout [ 3189.563021][T28830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 3189.893557][ T30] audit: type=1400 audit(1746171619.639:814): avc: denied { sys_chroot } for pid=8095 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 3189.925738][ T30] audit: type=1400 audit(1746171619.659:815): avc: denied { setgid } for pid=8095 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 3189.925762][T28830] Bluetooth: hci1: link tx timeout [ 3190.046112][T28830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 3190.056231][T28830] Bluetooth: hci1: link tx timeout [ 3190.061368][T28830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 3190.070858][T28830] Bluetooth: hci1: link tx timeout [ 3190.076061][T28830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 3190.105192][ T30] audit: type=1400 audit(1746171619.669:816): avc: denied { setrlimit } for pid=8095 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 3190.178367][ T5716] usb 5-1: Using ep0 maxpacket: 8 [ 3190.331310][ T5716] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 3190.346022][ T5716] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 3190.596536][T28830] Bluetooth: hci1: command 0x0406 tx timeout [ 3190.753409][ T5716] usb 5-1: Product: syz [ 3190.757649][ T5716] usb 5-1: Manufacturer: syz [ 3190.762238][ T5716] usb 5-1: SerialNumber: syz [ 3190.776376][ T5716] usb 5-1: config 0 descriptor?? [ 3190.778685][T28830] Bluetooth: hci1: link tx timeout [ 3190.786524][T28830] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 3190.799595][T28830] ================================================================== [ 3190.807665][T28830] BUG: KASAN: slab-use-after-free in hci_disconnect+0x1fe/0x220 [ 3190.815295][T28830] Read of size 4 at addr ffff8880371a003c by task kworker/u9:0/28830 [ 3190.823351][T28830] [ 3190.825665][T28830] CPU: 1 UID: 0 PID: 28830 Comm: kworker/u9:0 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 3190.825679][T28830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 3190.825687][T28830] Workqueue: hci1 hci_tx_work [ 3190.825704][T28830] Call Trace: [ 3190.825708][T28830] [ 3190.825712][T28830] dump_stack_lvl+0x116/0x1f0 [ 3190.825730][T28830] print_report+0xc3/0x670 [ 3190.825747][T28830] ? __virt_addr_valid+0x5e/0x590 [ 3190.825768][T28830] ? __phys_addr+0xc6/0x150 [ 3190.825788][T28830] ? hci_disconnect+0x1fe/0x220 [ 3190.825802][T28830] kasan_report+0xe0/0x110 [ 3190.825813][T28830] ? hci_disconnect+0x1fe/0x220 [ 3190.825824][T28830] hci_disconnect+0x1fe/0x220 [ 3190.825834][T28830] ? __pfx_hci_disconnect+0x10/0x10 [ 3190.825849][T28830] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 3190.825862][T28830] ? __rcu_read_unlock+0x2b4/0x580 [ 3190.825885][T28830] __check_timeout+0x3f7/0x730 [ 3190.825907][T28830] ? __check_timeout+0x3d8/0x730 [ 3190.825928][T28830] ? __pfx___check_timeout+0x10/0x10 [ 3190.825951][T28830] hci_tx_work+0x6ee/0x1490 [ 3190.825973][T28830] ? __pfx_hci_tx_work+0x10/0x10 [ 3190.825989][T28830] ? rcu_is_watching+0x12/0xc0 [ 3190.826001][T28830] process_one_work+0x9cc/0x1b70 [ 3190.826014][T28830] ? __pfx_process_one_work+0x10/0x10 [ 3190.826027][T28830] ? assign_work+0x1a0/0x250 [ 3190.826042][T28830] worker_thread+0x6c8/0xf10 [ 3190.826063][T28830] ? __pfx_worker_thread+0x10/0x10 [ 3190.826079][T28830] kthread+0x3c2/0x780 [ 3190.826093][T28830] ? __pfx_kthread+0x10/0x10 [ 3190.826106][T28830] ? __pfx_kthread+0x10/0x10 [ 3190.826116][T28830] ? __pfx_kthread+0x10/0x10 [ 3190.826124][T28830] ? __pfx_kthread+0x10/0x10 [ 3190.826133][T28830] ? rcu_is_watching+0x12/0xc0 [ 3190.826145][T28830] ? __pfx_kthread+0x10/0x10 [ 3190.826154][T28830] ret_from_fork+0x45/0x80 [ 3190.826164][T28830] ? __pfx_kthread+0x10/0x10 [ 3190.826173][T28830] ret_from_fork_asm+0x1a/0x30 [ 3190.826200][T28830] [ 3190.826206][T28830] [ 3191.016523][T28830] Allocated by task 336: [ 3191.020751][T28830] kasan_save_stack+0x33/0x60 [ 3191.025433][T28830] kasan_save_track+0x14/0x30 [ 3191.030107][T28830] __kasan_kmalloc+0xaa/0xb0 [ 3191.034697][T28830] __hci_conn_add+0x130/0x1b70 [ 3191.039457][T28830] hci_conn_add_unset+0x6d/0x100 [ 3191.044390][T28830] le_conn_complete_evt+0x791/0x1d70 [ 3191.049671][T28830] hci_le_conn_complete_evt+0x23c/0x370 [ 3191.055216][T28830] hci_le_meta_evt+0x2f3/0x5e0 [ 3191.059960][T28830] hci_event_packet+0x669/0x1190 [ 3191.064883][T28830] hci_rx_work+0x2c5/0x16b0 [ 3191.069371][T28830] process_one_work+0x9cc/0x1b70 [ 3191.074286][T28830] worker_thread+0x6c8/0xf10 [ 3191.078864][T28830] kthread+0x3c2/0x780 [ 3191.082913][T28830] ret_from_fork+0x45/0x80 [ 3191.087316][T28830] ret_from_fork_asm+0x1a/0x30 [ 3191.092065][T28830] [ 3191.094363][T28830] Freed by task 798: [ 3191.098237][T28830] kasan_save_stack+0x33/0x60 [ 3191.102902][T28830] kasan_save_track+0x14/0x30 [ 3191.107559][T28830] kasan_save_free_info+0x3b/0x60 [ 3191.112562][T28830] __kasan_slab_free+0x51/0x70 [ 3191.117323][T28830] kfree+0x2b6/0x4d0 [ 3191.121199][T28830] device_release+0xa1/0x240 [ 3191.125768][T28830] kobject_put+0x1e4/0x5a0 [ 3191.130169][T28830] device_unregister+0x2f/0xc0 [ 3191.134912][T28830] hci_conn_del_sysfs+0xb4/0x180 [ 3191.139831][T28830] hci_conn_del+0x55f/0xdc0 [ 3191.144312][T28830] hci_abort_conn_sync+0x740/0xb40 [ 3191.149413][T28830] abort_conn_sync+0x197/0x360 [ 3191.154159][T28830] hci_cmd_sync_work+0x1a8/0x430 [ 3191.159071][T28830] process_one_work+0x9cc/0x1b70 [ 3191.163989][T28830] worker_thread+0x6c8/0xf10 [ 3191.168548][T28830] kthread+0x3c2/0x780 [ 3191.172591][T28830] ret_from_fork+0x45/0x80 [ 3191.176992][T28830] ret_from_fork_asm+0x1a/0x30 [ 3191.181737][T28830] [ 3191.184047][T28830] The buggy address belongs to the object at ffff8880371a0000 [ 3191.184047][T28830] which belongs to the cache kmalloc-8k of size 8192 [ 3191.198086][T28830] The buggy address is located 60 bytes inside of [ 3191.198086][T28830] freed 8192-byte region [ffff8880371a0000, ffff8880371a2000) [ 3191.211857][T28830] [ 3191.214180][T28830] The buggy address belongs to the physical page: [ 3191.220573][T28830] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x371a0 [ 3191.229301][T28830] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3191.237771][T28830] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3191.245728][T28830] page_type: f5(slab) [ 3191.249699][T28830] raw: 00fff00000000040 ffff88801b442280 0000000000000000 dead000000000001 [ 3191.258266][T28830] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 3191.266825][T28830] head: 00fff00000000040 ffff88801b442280 0000000000000000 dead000000000001 [ 3191.275476][T28830] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 3191.284128][T28830] head: 00fff00000000003 ffffea0000dc6801 00000000ffffffff 00000000ffffffff [ 3191.292788][T28830] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 3191.301432][T28830] page dumped because: kasan: bad access detected [ 3191.307819][T28830] page_owner tracks the page as allocated [ 3191.313513][T28830] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18466647615, free_ts 0 [ 3191.332421][T28830] post_alloc_hook+0x181/0x1b0 [ 3191.337182][T28830] get_page_from_freelist+0x135c/0x3920 [ 3191.342716][T28830] __alloc_frozen_pages_noprof+0x263/0x23a0 [ 3191.348602][T28830] alloc_pages_mpol+0x1fb/0x550 [ 3191.353424][T28830] new_slab+0x244/0x340 [ 3191.357560][T28830] ___slab_alloc+0xd9c/0x1940 [ 3191.362220][T28830] __slab_alloc.constprop.0+0x56/0xb0 [ 3191.367580][T28830] __kmalloc_cache_noprof+0xfb/0x3e0 [ 3191.372851][T28830] tomoyo_init_log+0xc8a/0x2140 [ 3191.377677][T28830] tomoyo_supervisor+0x302/0x13b0 [ 3191.382680][T28830] tomoyo_env_perm+0x191/0x200 [ 3191.387425][T28830] tomoyo_find_next_domain+0xec2/0x20b0 [ 3191.392945][T28830] tomoyo_bprm_check_security+0x12e/0x1d0 [ 3191.398651][T28830] security_bprm_check+0x1b9/0x1e0 [ 3191.403760][T28830] bprm_execve+0x810/0x1650 [ 3191.408246][T28830] kernel_execve+0x2ef/0x3b0 [ 3191.412834][T28830] page_owner free stack trace missing [ 3191.418188][T28830] [ 3191.420495][T28830] Memory state around the buggy address: [ 3191.426099][T28830] ffff88803719ff00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3191.434132][T28830] ffff88803719ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3191.442162][T28830] >ffff8880371a0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3191.450191][T28830] ^ [ 3191.456057][T28830] ffff8880371a0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3191.464095][T28830] ffff8880371a0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3191.472135][T28830] ================================================================== [ 3191.523437][T28830] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3191.530652][T28830] CPU: 0 UID: 0 PID: 28830 Comm: kworker/u9:0 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 3191.542877][T28830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 3191.552912][T28830] Workqueue: hci1 hci_tx_work [ 3191.557581][T28830] Call Trace: [ 3191.560844][T28830] [ 3191.563750][T28830] dump_stack_lvl+0x3d/0x1f0 [ 3191.568317][T28830] panic+0x71c/0x800 [ 3191.572207][T28830] ? __pfx_panic+0x10/0x10 [ 3191.576612][T28830] ? mark_held_locks+0x49/0x80 [ 3191.581387][T28830] ? preempt_schedule_thunk+0x16/0x30 [ 3191.586756][T28830] ? hci_disconnect+0x1fe/0x220 [ 3191.591606][T28830] ? preempt_schedule_common+0x44/0xc0 [ 3191.597071][T28830] ? check_panic_on_warn+0x1f/0xb0 [ 3191.602189][T28830] ? hci_disconnect+0x1fe/0x220 [ 3191.607041][T28830] check_panic_on_warn+0xab/0xb0 [ 3191.611986][T28830] end_report+0x107/0x170 [ 3191.616309][T28830] kasan_report+0xee/0x110 [ 3191.620722][T28830] ? hci_disconnect+0x1fe/0x220 [ 3191.625574][T28830] hci_disconnect+0x1fe/0x220 [ 3191.630252][T28830] ? __pfx_hci_disconnect+0x10/0x10 [ 3191.635443][T28830] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 3191.641243][T28830] ? __rcu_read_unlock+0x2b4/0x580 [ 3191.646340][T28830] __check_timeout+0x3f7/0x730 [ 3191.651097][T28830] ? __check_timeout+0x3d8/0x730 [ 3191.656015][T28830] ? __pfx___check_timeout+0x10/0x10 [ 3191.661281][T28830] hci_tx_work+0x6ee/0x1490 [ 3191.665763][T28830] ? __pfx_hci_tx_work+0x10/0x10 [ 3191.670681][T28830] ? rcu_is_watching+0x12/0xc0 [ 3191.675420][T28830] process_one_work+0x9cc/0x1b70 [ 3191.680331][T28830] ? __pfx_process_one_work+0x10/0x10 [ 3191.685678][T28830] ? assign_work+0x1a0/0x250 [ 3191.690240][T28830] worker_thread+0x6c8/0xf10 [ 3191.694804][T28830] ? __pfx_worker_thread+0x10/0x10 [ 3191.699887][T28830] kthread+0x3c2/0x780 [ 3191.703931][T28830] ? __pfx_kthread+0x10/0x10 [ 3191.708490][T28830] ? __pfx_kthread+0x10/0x10 [ 3191.713050][T28830] ? __pfx_kthread+0x10/0x10 [ 3191.717611][T28830] ? __pfx_kthread+0x10/0x10 [ 3191.722171][T28830] ? rcu_is_watching+0x12/0xc0 [ 3191.726912][T28830] ? __pfx_kthread+0x10/0x10 [ 3191.731484][T28830] ret_from_fork+0x45/0x80 [ 3191.735882][T28830] ? __pfx_kthread+0x10/0x10 [ 3191.740462][T28830] ret_from_fork_asm+0x1a/0x30 [ 3191.745205][T28830] [ 3191.748395][T28830] Kernel Offset: disabled [ 3191.752694][T28830] Rebooting in 86400 seconds..