last executing test programs: 18m8.399303751s ago: executing program 32 (id=21): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(0xffffffffffffffff, 0x7a5, &(0x7f0000000100)={{@hyper, 0x7}, 0x1, 0x0, 0x4}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = syz_io_uring_setup(0x237, &(0x7f0000000380)={0x0, 0x80fd, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r1, 0x80, &(0x7f0000000080)=@l2tp={0x2, 0x0, @local, 0x3}}) syz_emit_ethernet(0x82, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000088a800008100000086dd605f106000442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000000000800000086dd080088be86ddffff100000000100000000000000080022eb000000002000000002000800655800"/130], 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r5, 0x65, 0x3, &(0x7f0000000040), &(0x7f0000000000)=0xfffffffffffffeac) io_uring_enter(r2, 0x47bc, 0x0, 0x0, 0x0, 0x0) 17m52.928487146s ago: executing program 33 (id=24): r0 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000"], 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000540)) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) recvfrom$l2tp6(r0, 0x0, 0x54, 0x162, 0x0, 0x0) 13m45.542967711s ago: executing program 34 (id=313): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @empty}}, [0x6bdc, 0x40000002, 0x8, 0x7, 0x73, 0x7, 0x5, 0x3, 0xfffffffffffffff8, 0x2, 0xffffffffffffe602, 0x7, 0x100000, 0x400, 0xac3]}, 0x0) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=r1, @ANYBLOB], 0xe) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="ad76b6c5", 0x4) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f0000000200)=[{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000000)="a9861869a75f66ef7d128ae4230965648a021cdf93508c9706dc1e4d9e1d4c436faf1d2786e53d4c8b827fc9174b67dab67acb28c76f6310145b3bfb0804675b44f3372615", 0x45}, {&(0x7f0000000240)="eeb9ff4efd6ce05a6ccd7c232e4442ec0660f89aeac6d45aea60e560bd9dd945dfc8e65ad2cf2e4d55fb59ee276f5e40e07f7b37b86e88c65190565d726b079d4043e88acbc549f5d3291ba8e35c906d22091ac5b87485aab22c1c9723fe9e1fdc8dd53b5e20ff5f2aa43f29cb053bba51958b69b6a5196c75f6c4c10e213afd12e617eceab1020c9c814d4560", 0x8d}, {&(0x7f0000001380)="5e4f1b8edaca0fbbb2d381bca66efabb97e5ec4f21ea39add4576b3f6cee354e296c6341", 0x24}], 0x3}], 0x1, 0x0) recvmsg(r8, &(0x7f0000001e80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000004dc0)=""/108, 0x6c}, {0x0}], 0x2}, 0x0) 8m29.323105707s ago: executing program 6 (id=699): chdir(&(0x7f0000000480)='./cgroup\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x43a600, 0x4e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 8m27.063858375s ago: executing program 6 (id=702): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000001300)={[{@nodiscard}, {@errors_continue}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@block_validity}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x800003d, 0x7ff) write$binfmt_script(r0, &(0x7f00000000c0), 0xfda1) 8m23.51273767s ago: executing program 6 (id=705): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_emit_vhci(&(0x7f00000015c0)=ANY=[@ANYBLOB="0407ff0811ab906a07a4a969de492ed39bbd996b8e24a5a7b1c5e5c49be1ec063627233ab3b348d692fbb6b1c03117727cc09ac5ee0000000000000001c58fd31eeed83b6d47b00ef08475b8f7004e0cef249b7d1c6b898b87f7027a0e05fa5555f1b5d3e0041f0068baddca6a28cae840f90cbd83a10b768fd3a9e29891e3f9c8f49aaaaf57ac11b91ad20627dc1c9edcb5903bd78bac1c998a973ec1f019b215"], 0x102) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) 8m21.857099071s ago: executing program 6 (id=710): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x44, 0x2, [@TCA_FQ_INITIAL_QUANTUM={0x8, 0xe}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8}, @TCA_FQ_FLOW_DEFAULT_RATE={0x8}, @TCA_FQ_QUANTUM={0x8, 0xf}]}}]}, 0x70}}, 0x0) 8m20.599296674s ago: executing program 6 (id=712): chdir(&(0x7f0000000480)='./cgroup\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x43a600, 0x4e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x1, 0x5001) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) 8m18.632794519s ago: executing program 6 (id=715): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a0000040000000000000000000000000000000000150000000000fd000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000040)=0xd, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 8m2.321518303s ago: executing program 35 (id=715): syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x360, &(0x7f0000000b00)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) rename(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00') r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r1, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a0000040000000000000000000000000000000000150000000000fd000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') creat(&(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x10, &(0x7f0000000040)=0xd, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r7, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000100)=0x1f, 0x4) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) 6m35.217017067s ago: executing program 8 (id=900): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip6_tables_matches\x00') read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) 6m34.297673636s ago: executing program 8 (id=902): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x238, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100, 0x1, 0x3a6, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r5 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000240), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x0, 0x0}}, 0xfc36) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_emit_vhci(&(0x7f0000000380)=ANY=[], 0xfffffffffffffdf3) openat$kvm(0xffffffffffffff9c, 0x0, 0x2542, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) 6m30.411985001s ago: executing program 8 (id=911): unshare(0x8000400) r0 = socket(0x1e, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, 0x0, 0x0) 6m29.796956155s ago: executing program 8 (id=914): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000340), 0xfe, 0x560, &(0x7f0000000f00)="$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") mkdir(&(0x7f00000002c0)='./file1/file1\x00', 0x0) chdir(&(0x7f0000000000)='./file1\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90900f7d6a4ae6dddfbd11000000000000000000ff8ee09e737ff0edf110ff4117639c2eb8f18d2b8f6277dd41905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61ffcf33524bbd9bffbcc2542ded71038232d71e14efbac003000000852f2036dc783800000000e9b49600", "f28359738e229a4c66810000000000f300e6d902000000000000000000000001"}) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 6m28.304776164s ago: executing program 8 (id=918): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) memfd_create(0x0, 0x8) close(0x3) 6m26.022110223s ago: executing program 8 (id=926): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0xc8, &(0x7f00000007c0)=""/200}]}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 6m22.170201993s ago: executing program 36 (id=926): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10000}, 0x50) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000200)={0x1, 0x101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000540)={0x1, 0x0, [{0x0, 0xc8, &(0x7f00000007c0)=""/200}]}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x8b}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000001, 0x28011, r2, 0x0) 3m6.073734286s ago: executing program 3 (id=1575): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 3m4.784164581s ago: executing program 3 (id=1579): bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905"], 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m1.375197228s ago: executing program 3 (id=1588): mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") llistxattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f0000000cc0)={0x0, 0xfb, 0x583, 0x5f60f72cfc5309b9, 0x3, "dd42a57be9b30957548644a9bbe788a8", "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"}, 0x583, 0x0) 2m59.664071549s ago: executing program 3 (id=1591): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f00000000c0)={0x17, 0x1, 0x1, "3a8e07ca5de21f0077ab7a4d8601acc620004b5c000000000000002100", 0x3231564e}) 2m58.957357529s ago: executing program 3 (id=1593): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x2, {}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) sendmsg$can_j1939(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x3}, 0xfe}, 0x18, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x20040908}, 0x20000000) 2m58.246622721s ago: executing program 3 (id=1597): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r2, 0x7ffe, 0x184c, 0x2, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) 2m42.510632893s ago: executing program 37 (id=1597): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x0, 0x100}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x13}) io_uring_enter(r2, 0x7ffe, 0x184c, 0x2, 0x0, 0x0) rt_sigsuspend(&(0x7f0000000040)={[0x20000001]}, 0x8) 2m15.23661933s ago: executing program 9 (id=1682): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000280)={0xc, 0x0, 0x0}) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x7, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, 0xffffffffffffffff, 0x0, 0x7, 0x3, &(0x7f0000000140)="5e71ad", 0x1}) 2m14.65278699s ago: executing program 9 (id=1685): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) r5 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10) gettid() timer_create(0x2, 0x0, &(0x7f0000000700)) syz_clone(0xa90a70c0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x41) 2m12.932113701s ago: executing program 9 (id=1689): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000001400)=ANY=[@ANYBLOB='\x00\x00'], 0x152) 2m11.925537737s ago: executing program 9 (id=1694): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x10000100, @loopback, 0xb}, 0x1c) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000005, 0x4010, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, &(0x7f00000022c0)=""/157, 0x9d, 0x87) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000280)={0x1, 0x0, {0x9, 0x8, 0x0, 0x4, 0x8, 0x6, 0x2, 0x4}}) recvmsg(r2, 0x0, 0x10040) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000040)=0xcd45, 0x4) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f0000000cc0)={0x0, 0xfb, 0x583, 0x5f60f72cfc5309b9, 0x3, "dd42a57be9b30957548644a9bbe788a8", "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"}, 0x583, 0x0) 1m56.305992094s ago: executing program 7 (id=1744): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000c40)={0x20, r4, &(0x7f0000000c00)=[{0x0, 0x1}, {0x1, 0x1}, {0x1, 0x3}], 0xdeadbeef, 0x8, 0x3}) 1m55.506685812s ago: executing program 7 (id=1746): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x6, 0x2) 1m52.120749476s ago: executing program 7 (id=1749): ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000580)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @loopback}, 0x2000000, 0x0, 0x7d, 0x400, 0x0, 0x930310}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x640100fd}, @loopback, @loopback, 0x1, 0x0, 0x40, 0x0, 0x0, 0x10200}) 1m50.952982182s ago: executing program 7 (id=1753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24015}, 0x20004000) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000040)=@x86={0x7, 0x72, 0x81, 0x0, 0xd8, 0x7, 0x8, 0xff, 0x78, 0xd4, 0x21, 0x5, 0x0, 0x200004, 0x8, 0x4, 0x1, 0x3, 0x0, '\x00', 0x79, 0xe}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m49.463782432s ago: executing program 7 (id=1760): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x800000010d, 0x2, &(0x7f0000000040)="0000e2ff", 0x4) 1m48.827936481s ago: executing program 7 (id=1763): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$midi(0x0, 0x4, 0xc2880) openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x0, 0x13291}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r4, 0x0, 0x0, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x300, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1m41.097196505s ago: executing program 38 (id=1735): mkdir(0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="003bfa093f92d25f4b42889f58b36282edd6f82c49e007ed49b9ed030962f330bd57af2a"], 0x2, 0x1a2, &(0x7f0000000440)="$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") llistxattr(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000180), &(0x7f0000000cc0)={0x0, 0xfb, 0x583, 0x5f60f72cfc5309b9, 0x3, "dd42a57be9b30957548644a9bbe788a8", "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"}, 0x583, 0x0) 1m32.606090993s ago: executing program 39 (id=1763): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_dev$midi(0x0, 0x4, 0xc2880) openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000003, 0x4008032, 0xffffffffffffffff, 0x0) r4 = syz_io_uring_setup(0x178e, &(0x7f0000000180)={0x0, 0x0, 0x13291}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_enter(r4, 0x0, 0x0, 0x1, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f7274"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x300, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x29}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 11.761647572s ago: executing program 5 (id=2005): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES16, @ANYBLOB="0000000000000000ffffffe9000008", @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905"], 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 8.93315392s ago: executing program 4 (id=2012): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) 8.321219164s ago: executing program 4 (id=2017): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 8.197274937s ago: executing program 5 (id=2018): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000039c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffffe8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x18000000000002a0, 0x38, 0x0, &(0x7f0000000140)="b9ff0300600d698cff9e14f086dd", 0x0, 0x63, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 7.769090033s ago: executing program 4 (id=2020): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) 7.161990154s ago: executing program 5 (id=2022): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009", @ANYRES32], 0x3c}}, 0x0) 6.50210549s ago: executing program 2 (id=2024): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="02", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="b5d383823677f025217943343e36323daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef857", 0x6e}, {&(0x7f0000000480)="e7b138d8123da3b6cb393031ebce132275503c9acb6db9db83861c29ac0d34d8265f1a0f423d32def46c2226507998c6314f0043e32a0ab5f125c5b0642ea5c645df49585853e95d323628545b4bfa3b455a8da3a459e0", 0x57}], 0x2}}], 0x3, 0xc0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 6.431760187s ago: executing program 5 (id=2025): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) 5.749461274s ago: executing program 2 (id=2028): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES16, @ANYBLOB="0000000000000000ffffffe90000080000", @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905"], 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 5.273653937s ago: executing program 5 (id=2029): r0 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000840), 0x0, 0x40000160, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x36, &(0x7f00000008c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x56e, 0xff, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0xa0, 0x1, [{{0x9, 0x4, 0x0, 0xa0, 0x1, 0x3, 0x1, 0x3, 0x13, {0x9, 0x21, 0x1, 0x7, 0x1, {0x22, 0x35c}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0xa8, 0xc, 0x6}}}}}]}}]}}, &(0x7f0000000a00)={0x0, 0x0, 0x30, &(0x7f0000000940)={0x5, 0xf, 0x30, 0x3, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x31, "9d3836f8e4d9504cad97ba6ef22298d7"}, @ss_container_id={0x14, 0x10, 0x4, 0xa, "db29de7737b30258e090666c87ead86f"}]}, 0x1, [{0x6, &(0x7f00000009c0)=@string={0x6, 0x3, "971e7217"}}]}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) fallocate(0xffffffffffffffff, 0x0, 0xd, 0x45) syz_usb_control_io$uac1(r0, 0x0, 0x0) 4.744828945s ago: executing program 0 (id=2032): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) 4.358922126s ago: executing program 1 (id=2033): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 4.323262552s ago: executing program 4 (id=2034): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f000000400000", @ANYRES16, @ANYBLOB="0000000000000000ffffffe900000800000000", @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905"], 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041) 3.867983715s ago: executing program 0 (id=2035): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r0 = socket$kcm(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000000c0)={0x2, 0xfffe, @multicast2}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff010000000500070000000000080009", @ANYRES32], 0x3c}}, 0x0) 3.708156156s ago: executing program 1 (id=2036): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r3, 0x40047459, 0xf0ff1f00000000) 2.85502541s ago: executing program 0 (id=2037): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="2801"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r3}, 0x10) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.583558853s ago: executing program 1 (id=2038): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="02", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002400)="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", 0x11a}, {&(0x7f0000002300)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b0800623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c510f006d7856897144e708601", 0xd4}, {&(0x7f0000000940)="5be3b011e12323e4ab88c0472f0700000000000000e71ba62334303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000d6e36e737691a1c6bd2a64b2a85cbaaf648c9100", 0x74}], 0x3}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="b5d383823677f025217943343e36323daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef857", 0x6e}, {&(0x7f0000000480)="e7b138d8123da3b6cb393031ebce132275503c9acb6db9db83861c29ac0d34d8265f1a0f423d32def46c2226507998c6314f0043e32a0ab5f125c5b0642ea5c645df49585853e95d323628545b4bfa3b455a8da3a459e0", 0x57}], 0x2}}], 0x3, 0xc0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 2.454059238s ago: executing program 0 (id=2039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) 2.306897954s ago: executing program 2 (id=2040): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000e56520207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000640)='fib6_table_lookup\x00', r0}, 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x7000002}, 0x2c) 2.043211389s ago: executing program 1 (id=2041): socket$nl_xfrm(0x10, 0x3, 0x6) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/notes', 0x40, 0x1cd) socket$packet(0x11, 0x2, 0x300) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x7}, 0x38) pipe2$9p(0x0, 0x80880) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0xe, 0xc, 0xe, 0xb4, 0xfffffffffffffffc, 0x7, 0x26, 0x1ff]}) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1555555555555457, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.910264255s ago: executing program 0 (id=2042): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="feffffff00000005", &(0x7f0000000700)=""/8, 0x447, 0x6000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.534020074s ago: executing program 4 (id=2043): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty, 0x7}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000140)={0x32, 0x3, 0x2, 0x6, 0x4, 0x2, 0x4, 0xda, 0x6, 0xd5, 0x5b, 0x27, 0x40, 0x7f}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) 1.234634203s ago: executing program 0 (id=2044): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001", @ANYRES32], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) 1.074417126s ago: executing program 2 (id=2045): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 925.918802ms ago: executing program 1 (id=2046): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 829.039394ms ago: executing program 4 (id=2047): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioprio_set$uid(0x3, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040), 0x1003, r0}, 0x38) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) r4 = fcntl$dupfd(r2, 0x0, r3) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, 0x0) r5 = eventfd2(0x8001, 0x0) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000000c0)={0x0, r5}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r6}, 0x18) gettid() timer_create(0x2, 0x0, &(0x7f0000000700)) syz_clone(0xa90a70c0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x400000, 0x41) 584.101832ms ago: executing program 2 (id=2048): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r1}, 0x69) 309.110395ms ago: executing program 5 (id=2049): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffff4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a88a855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) 300.243932ms ago: executing program 1 (id=2050): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000010000003f0000004000000042000000", @ANYRES16, @ANYBLOB="0000000000000000ffffffe90000080000", @ANYRES32=0x0, @ANYRES32], 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000020ac050f022200018283010902240001010000000904000002030102000921000500012200000905"], 0x0) syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) openat$mice(0xffffffffffffff9c, &(0x7f00000000c0), 0x101041) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) readlinkat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=2051): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)="02", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000002400)="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", 0x11a}, {&(0x7f0000002300)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc487553859348d48e6fc49d81c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b95e269169f5f7b51dd5319b0800623d1863d70581691a79a6678db1e5e7fa1c98c5b9e4a87272e9c4a1bde5fbc390c7ccb9d3c1020e80bd0659e82d861dc6fe4c62639134c510f006d7856897144e708601", 0xd4}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000300)="b5d383823677f025217943343e36323daecfa0fdc5beb5a7ac332a11533627b41dbe33a6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a813bc3ebba62168141343c9938965233cdaef857", 0x6e}, {&(0x7f0000000480)="e7b138d8123da3b6cb393031ebce132275503c9acb6db9db83861c29ac0d34d8265f1a0f423d32def46c2226507998c6314f0043e32a0ab5f125c5b0642ea5c645df49585853e95d323628545b4bfa3b455a8da3a459e0", 0x57}], 0x2}}], 0x3, 0xc0) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) kernel console output (not intermixed with test programs): ce 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1164.544740][ T9850] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1164.555808][ T9850] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1164.571413][ T9850] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1164.582517][ T9850] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1164.660660][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1164.670609][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1164.711321][ T9850] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1164.721699][ T9850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1164.730010][ T9850] usb 4-1: Product: syz [ 1164.734644][ T9850] usb 4-1: Manufacturer: syz [ 1164.739513][ T9850] usb 4-1: SerialNumber: syz [ 1164.775823][ T1747] usbhid 3-1:0.0: can't add hid device: -71 [ 1164.782868][ T9850] usb 4-1: config 0 descriptor?? [ 1164.782884][ T1747] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1164.818954][ T1747] usb 3-1: USB disconnect, device number 85 [ 1164.898219][ T9850] usb 4-1: selecting invalid altsetting 2 [ 1166.218063][ T9850] get_1284_register timeout [ 1166.223317][ T9850] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 1166.223665][ C0] usb 4-1: async_complete: urb error -104 [ 1166.238317][ C0] usb 4-1: async_complete: urb error -104 [ 1166.245156][ C0] usb 4-1: async_complete: urb error -104 [ 1166.320642][ T1747] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1166.551995][ T1747] usb 3-1: Using ep0 maxpacket: 32 [ 1166.591407][ T1747] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1166.603107][ T1747] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1166.633323][ T1747] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1166.643269][ T1747] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1166.652098][ T1747] usb 3-1: Product: syz [ 1166.656614][ T1747] usb 3-1: Manufacturer: syz [ 1166.661672][ T1747] usb 3-1: SerialNumber: syz [ 1166.695814][ T1747] appletouch 3-1:1.0: Could not find int-in endpoint [ 1166.703058][ T1747] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1166.714397][ T1747] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1166.800890][ T5843] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 1166.926770][ T1747] usb 3-1: USB disconnect, device number 86 [ 1166.998765][ T5843] usb 10-1: Using ep0 maxpacket: 16 [ 1167.025545][ T5843] usb 10-1: config 0 has no interfaces? [ 1167.045057][ T5843] usb 10-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 1167.054834][ T5843] usb 10-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 1167.063554][ T5843] usb 10-1: Product: syz [ 1167.068093][ T5843] usb 10-1: Manufacturer: syz [ 1167.073207][ T5843] usb 10-1: SerialNumber: syz [ 1167.105094][ T5843] usb 10-1: config 0 descriptor?? [ 1167.683656][T10950] syz_tun: entered allmulticast mode [ 1167.759297][T10949] syz_tun: left allmulticast mode [ 1168.066431][ T5843] usb 4-1: USB disconnect, device number 82 [ 1168.101506][ T9850] usb 10-1: USB disconnect, device number 12 [ 1168.150667][ T1747] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1168.371216][ T1747] usb 3-1: Using ep0 maxpacket: 16 [ 1168.413895][ T1747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1168.425467][ T1747] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1168.437445][ T1747] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1168.447995][ T1747] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1168.572752][ T1747] usb 3-1: config 0 descriptor?? [ 1169.097631][T10954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1169.107445][T10954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1169.188611][ T1747] usbhid 3-1:0.0: can't add hid device: -71 [ 1169.195540][ T1747] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1169.246481][ T1747] usb 3-1: USB disconnect, device number 87 [ 1170.238532][T10980] @: renamed from vlan0 (while UP) [ 1170.275869][ T9850] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 1170.470687][ T9850] usb 10-1: Using ep0 maxpacket: 32 [ 1170.511568][ T9850] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1170.523114][ T9850] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1170.667298][ T9850] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1170.677444][ T9850] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1170.688284][ T9850] usb 10-1: Product: syz [ 1170.693739][ T9850] usb 10-1: Manufacturer: syz [ 1170.698894][ T9850] usb 10-1: SerialNumber: syz [ 1170.848342][ T9850] appletouch 10-1:1.0: Could not find int-in endpoint [ 1170.855838][ T9850] appletouch 10-1:1.0: probe with driver appletouch failed with error -5 [ 1170.867382][ T9850] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 1171.097887][ T9850] usb 10-1: USB disconnect, device number 13 [ 1171.133205][ T1747] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1171.325900][ T1747] usb 4-1: Using ep0 maxpacket: 32 [ 1171.355055][ T1747] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1171.363937][ T1747] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1171.375392][ T1747] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1171.387046][ T1747] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1171.402488][ T1747] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1171.431301][ T1747] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1171.441113][ T1747] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1171.449868][ T1747] usb 4-1: Product: syz [ 1171.454490][ T1747] usb 4-1: Manufacturer: syz [ 1171.459445][ T1747] usb 4-1: SerialNumber: syz [ 1171.489964][ T1747] usb 4-1: config 0 descriptor?? [ 1171.518952][ T1747] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1171.540932][ T1747] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1171.601191][ T9850] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1171.692592][T10999] loop5: detected capacity change from 0 to 1024 [ 1171.720502][T11001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1375'. [ 1171.774414][T10999] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1171.797166][ T1747] usb 4-1: USB disconnect, device number 83 [ 1171.833580][ T1747] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1171.840717][ T9850] usb 8-1: Using ep0 maxpacket: 16 [ 1171.883607][ T9850] usb 8-1: config index 0 descriptor too short (expected 16456, got 72) [ 1171.893004][ T9850] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1171.901952][ T9850] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1171.912626][ T9850] usb 8-1: config 0 has an invalid interface number: 125 but max is 1 [ 1171.921868][ T9850] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1171.931554][ T9850] usb 8-1: config 0 has no interface number 0 [ 1171.939903][ T9850] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1171.952368][ T9850] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1171.962984][ T9850] usb 8-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1171.979659][ T9850] usb 8-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1171.993291][ T9850] usb 8-1: config 0 interface 125 has no altsetting 0 [ 1172.000551][ T9850] usb 8-1: config 0 interface 125 has no altsetting 2 [ 1172.118133][T10999] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1172.150930][ T9850] usb 8-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1172.161272][ T9850] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1172.169594][ T9850] usb 8-1: Product: syz [ 1172.174287][ T9850] usb 8-1: Manufacturer: syz [ 1172.179160][ T9850] usb 8-1: SerialNumber: syz [ 1172.198321][ T9850] usb 8-1: config 0 descriptor?? [ 1172.267541][ T9850] usb 8-1: selecting invalid altsetting 2 [ 1173.352983][ T9850] get_1284_register timeout [ 1173.358061][ T9850] uss720 8-1:0.125: probe with driver uss720 failed with error -5 [ 1173.358412][ C0] usb 8-1: async_complete: urb error -104 [ 1173.373163][ C0] usb 8-1: async_complete: urb error -104 [ 1173.379922][ C0] usb 8-1: async_complete: urb error -104 [ 1173.482596][ T8302] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.841762][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1379'. [ 1173.893619][T11017] bridge0: port 3(team0) entered disabled state [ 1173.933726][T11017] team0 (unregistering): left allmulticast mode [ 1173.942733][T11017] team_slave_0: left allmulticast mode [ 1173.948751][T11017] team_slave_1: left allmulticast mode [ 1173.954803][T11017] team0 (unregistering): left promiscuous mode [ 1173.964018][T11017] team_slave_0: left promiscuous mode [ 1173.972289][T11017] team_slave_1: left promiscuous mode [ 1173.979474][T11017] bridge0: port 3(team0) entered disabled state [ 1174.026941][T11017] team0 (unregistering): Port device team_slave_0 removed [ 1174.096730][T11017] team0 (unregistering): Port device team_slave_1 removed [ 1175.011774][ T1747] usb 8-1: USB disconnect, device number 36 [ 1175.680520][ T1747] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 1175.885435][ T1747] usb 10-1: Using ep0 maxpacket: 32 [ 1175.931899][ T1747] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1175.943812][ T1747] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1176.021481][ T1747] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1176.032364][ T1747] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1176.041702][ T1747] usb 10-1: Product: syz [ 1176.046481][ T1747] usb 10-1: Manufacturer: syz [ 1176.051685][ T1747] usb 10-1: SerialNumber: syz [ 1176.668188][ T1747] appletouch 10-1:1.0: Could not find int-in endpoint [ 1176.675488][ T1747] appletouch 10-1:1.0: probe with driver appletouch failed with error -5 [ 1176.686952][ T1747] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 1176.881832][ T1747] usb 10-1: USB disconnect, device number 14 [ 1177.088716][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1394'. [ 1177.220930][T11054] team0 (unregistering): Port device team_slave_0 removed [ 1177.254818][T11054] team0 (unregistering): Port device team_slave_1 removed [ 1177.520616][ T9850] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1177.711751][ T9850] usb 4-1: Using ep0 maxpacket: 16 [ 1177.749753][ T9850] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 1177.759024][ T9850] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1177.768706][ T9850] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1177.779333][ T9850] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 1177.790380][ T9850] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1177.799882][ T9850] usb 4-1: config 0 has no interface number 0 [ 1177.806474][ T9850] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1177.818137][ T9850] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1177.828706][ T9850] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1177.839401][ T9850] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1177.855473][ T9850] usb 4-1: config 0 interface 125 has no altsetting 0 [ 1177.863342][ T9850] usb 4-1: config 0 interface 125 has no altsetting 2 [ 1177.956224][ T9850] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1177.966021][ T9850] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.974631][ T9850] usb 4-1: Product: syz [ 1177.981286][ T9850] usb 4-1: Manufacturer: syz [ 1177.986168][ T9850] usb 4-1: SerialNumber: syz [ 1177.996849][ T9850] usb 4-1: config 0 descriptor?? [ 1178.029053][ T9850] usb 4-1: selecting invalid altsetting 2 [ 1179.400867][ T9850] get_1284_register timeout [ 1179.405926][ T9850] uss720 4-1:0.125: probe with driver uss720 failed with error -5 [ 1179.406270][ C0] usb 4-1: async_complete: urb error -104 [ 1179.420929][ C0] usb 4-1: async_complete: urb error -104 [ 1179.427602][ C0] usb 4-1: async_complete: urb error -104 [ 1179.807232][T11073] loop7: detected capacity change from 0 to 2048 [ 1179.834617][T11073] EXT4-fs: Ignoring removed bh option [ 1179.842237][T11073] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1179.849314][T11073] EXT4-fs: Ignoring removed orlov option [ 1179.899173][T11073] EXT4-fs (loop7): can't mount with both data=journal and dax [ 1180.089068][T11073] loop7: detected capacity change from 0 to 256 [ 1180.105858][T11073] exfat: Deprecated parameter 'namecase' [ 1180.242706][T11073] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 1180.619431][T11089] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1408'. [ 1180.726540][T11089] team0 (unregistering): Port device team_slave_0 removed [ 1180.761657][T11089] team0 (unregistering): Port device team_slave_1 removed [ 1181.327673][ T1747] usb 4-1: USB disconnect, device number 84 [ 1181.520844][ T9850] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1181.751097][ T9850] usb 6-1: Using ep0 maxpacket: 32 [ 1181.788967][ T9850] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1181.800865][ T9850] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1181.872701][ T9850] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1181.885049][ T9850] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1181.895552][ T9850] usb 6-1: Product: syz [ 1181.900743][ T9850] usb 6-1: Manufacturer: syz [ 1181.905618][ T9850] usb 6-1: SerialNumber: syz [ 1181.973733][ T9850] appletouch 6-1:1.0: Could not find int-in endpoint [ 1181.981089][ T9850] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 1181.992729][ T9850] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1182.228448][ T9850] usb 6-1: USB disconnect, device number 26 [ 1182.530437][ T5841] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 1182.723850][ T5841] usb 10-1: Using ep0 maxpacket: 16 [ 1182.781855][ T5841] usb 10-1: config 0 has an invalid interface number: 8 but max is 0 [ 1182.792674][ T5841] usb 10-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1182.808587][ T5841] usb 10-1: config 0 has no interface number 0 [ 1182.818526][ T5841] usb 10-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1182.944328][ T5841] usb 10-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1182.955058][ T5841] usb 10-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1182.963939][ T5841] usb 10-1: Product: syz [ 1182.968584][ T5841] usb 10-1: SerialNumber: syz [ 1183.032792][ T5841] usb 10-1: config 0 descriptor?? [ 1183.092247][ T5841] usbhid 10-1:0.8: couldn't find an input interrupt endpoint [ 1183.874146][T11111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1183.883700][T11111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1184.004402][T11121] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1421'. [ 1185.265833][ T11] usb 10-1: USB disconnect, device number 15 [ 1185.291421][ T9850] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1185.303140][ T5841] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1185.479436][ T9850] usb 6-1: Using ep0 maxpacket: 16 [ 1185.491892][ T5841] usb 8-1: Using ep0 maxpacket: 32 [ 1185.531451][ T9850] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1185.543862][ T9850] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1185.555189][ T9850] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1185.565131][ T9850] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1185.581011][ T9850] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1185.590865][ T9850] usb 6-1: config 0 has no interface number 0 [ 1185.597274][ T9850] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1185.608996][ T9850] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1185.619915][ T9850] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1185.630655][ T9850] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1185.646359][ T9850] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1185.654448][ T9850] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1185.671120][ T5841] usb 8-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1185.682979][ T5841] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1185.723926][ T5841] usb 8-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1185.735945][ T5841] usb 8-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1185.745493][ T5841] usb 8-1: Product: syz [ 1185.750033][ T5841] usb 8-1: Manufacturer: syz [ 1185.755086][ T5841] usb 8-1: SerialNumber: syz [ 1185.766313][ T9850] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1185.776166][ T9850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.784774][ T9850] usb 6-1: Product: syz [ 1185.789272][ T9850] usb 6-1: Manufacturer: syz [ 1185.794370][ T9850] usb 6-1: SerialNumber: syz [ 1185.835760][ T5841] appletouch 8-1:1.0: Could not find int-in endpoint [ 1185.846981][ T5841] appletouch 8-1:1.0: probe with driver appletouch failed with error -5 [ 1185.858454][ T5841] usbhid 8-1:1.0: couldn't find an input interrupt endpoint [ 1185.881360][ T9850] usb 6-1: config 0 descriptor?? [ 1185.902467][ T9850] usb 6-1: selecting invalid altsetting 2 [ 1185.926866][T11138] loop3: detected capacity change from 0 to 2048 [ 1185.952909][T11138] EXT4-fs: Ignoring removed bh option [ 1185.959409][T11138] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1185.969339][T11138] EXT4-fs: Ignoring removed orlov option [ 1185.997300][T11138] EXT4-fs (loop3): can't mount with both data=journal and dax [ 1186.059392][ T5841] usb 8-1: USB disconnect, device number 37 [ 1186.294991][T11138] loop3: detected capacity change from 0 to 256 [ 1186.333177][T11138] exfat: Deprecated parameter 'namecase' [ 1186.562652][T11138] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 1186.995614][T11147] loop9: detected capacity change from 0 to 128 [ 1187.299350][ T9850] get_1284_register timeout [ 1187.304845][ C0] usb 6-1: async_complete: urb error -104 [ 1187.311517][ C0] usb 6-1: async_complete: urb error -104 [ 1187.318253][ C0] usb 6-1: async_complete: urb error -104 [ 1187.324509][ T9850] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 1187.824053][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'. [ 1188.404880][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1436'. [ 1189.291906][ T9850] usb 6-1: USB disconnect, device number 27 [ 1189.891084][ T1747] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1190.074379][ T1747] usb 3-1: Using ep0 maxpacket: 16 [ 1190.140817][ T1747] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1190.149201][ T1747] usb 3-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1190.160377][ T1747] usb 3-1: config 0 has no interface number 0 [ 1190.168283][ T1747] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1190.249414][ T1747] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1190.259602][ T1747] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1190.269259][ T1747] usb 3-1: Product: syz [ 1190.274240][ T1747] usb 3-1: SerialNumber: syz [ 1190.333143][ T1747] usb 3-1: config 0 descriptor?? [ 1190.380662][ T1747] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1190.610655][ T5841] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 1190.793131][ T5841] usb 10-1: Using ep0 maxpacket: 32 [ 1190.831136][ T5841] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1190.843586][ T5841] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1190.929536][ T5841] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1190.940485][ T5841] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1190.949236][ T5841] usb 10-1: Product: syz [ 1190.954108][ T5841] usb 10-1: Manufacturer: syz [ 1190.961043][ T5841] usb 10-1: SerialNumber: syz [ 1191.098283][ T5841] appletouch 10-1:1.0: Could not find int-in endpoint [ 1191.106038][ T5841] appletouch 10-1:1.0: probe with driver appletouch failed with error -5 [ 1191.117757][ T5841] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 1191.132542][T11185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1191.142225][T11185] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1191.298108][ T5841] usb 10-1: USB disconnect, device number 16 [ 1192.566112][ T1747] usb 3-1: USB disconnect, device number 88 [ 1192.700955][T11202] loop9: detected capacity change from 0 to 2048 [ 1192.735353][T11202] EXT4-fs: Ignoring removed bh option [ 1192.741623][T11202] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1192.748832][T11202] EXT4-fs: Ignoring removed orlov option [ 1192.814666][T11202] EXT4-fs (loop9): can't mount with both data=journal and dax [ 1193.026806][T11202] loop9: detected capacity change from 0 to 256 [ 1193.056834][T11202] exfat: Deprecated parameter 'namecase' [ 1193.219780][T11202] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 1194.391190][ T30] audit: type=1800 audit(1741929093.744:236): pid=11228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1463" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 1195.241453][ T5841] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1195.466715][ T5841] usb 8-1: Using ep0 maxpacket: 16 [ 1195.516045][ T5841] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1195.526300][ T5841] usb 8-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 1195.537278][ T5841] usb 8-1: config 0 has no interface number 0 [ 1195.544020][ T5841] usb 8-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1195.653241][ T5841] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1195.663407][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1195.673893][ T5841] usb 8-1: Product: syz [ 1195.678348][ T5841] usb 8-1: SerialNumber: syz [ 1195.704509][ T5841] usb 8-1: config 0 descriptor?? [ 1195.745919][ T5841] usbhid 8-1:0.8: couldn't find an input interrupt endpoint [ 1196.516975][T11252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1196.526455][T11252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.913107][ T1747] usb 8-1: USB disconnect, device number 38 [ 1198.688443][T11281] loop7: detected capacity change from 0 to 2048 [ 1198.737659][T11281] EXT4-fs: Ignoring removed bh option [ 1198.746242][T11281] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1198.754227][T11281] EXT4-fs: Ignoring removed orlov option [ 1198.832276][T11281] EXT4-fs (loop7): can't mount with both data=journal and dax [ 1199.033267][T11281] loop7: detected capacity change from 0 to 256 [ 1199.076029][T11281] exfat: Deprecated parameter 'namecase' [ 1199.199095][T11281] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 1201.675283][T11320] loop5: detected capacity change from 0 to 8 [ 1204.641248][ T1747] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1204.836031][ T1747] usb 6-1: Using ep0 maxpacket: 32 [ 1204.872078][ T1747] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1204.880837][ T1747] usb 6-1: config 0 has no interface number 0 [ 1204.889188][ T1747] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1204.971692][ T1747] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1204.981274][ T1747] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.991199][ T1747] usb 6-1: Product: syz [ 1204.995662][ T1747] usb 6-1: Manufacturer: syz [ 1205.001263][ T1747] usb 6-1: SerialNumber: syz [ 1205.090527][ T1747] usb 6-1: config 0 descriptor?? [ 1205.123932][ T1747] smsc75xx v1.0.0 [ 1205.375917][T11353] loop7: detected capacity change from 0 to 1024 [ 1205.809617][ T1747] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -61 [ 1205.820983][ T1747] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1206.016034][ T1747] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1206.027561][ T1747] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 1206.039158][ T1747] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1206.050578][ T1747] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 1206.061370][ T1747] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -32 [ 1206.212181][T11364] loop9: detected capacity change from 0 to 8 [ 1206.333098][ T3457] hfsplus: b-tree write err: -5, ino 4 [ 1207.091336][ T5841] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1207.688486][ T1747] usb 6-1: USB disconnect, device number 28 [ 1207.746119][ T5841] usb 3-1: Using ep0 maxpacket: 16 [ 1207.799961][ T5841] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1207.808692][ T5841] usb 3-1: config 0 has no interface number 0 [ 1207.815438][ T5841] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1207.880674][ T5841] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1207.890465][ T5841] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1207.898875][ T5841] usb 3-1: Product: syz [ 1207.903542][ T5841] usb 3-1: SerialNumber: syz [ 1207.963084][ T5841] usb 3-1: config 0 descriptor?? [ 1207.992650][ T5841] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 1208.871166][T11388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1208.882095][T11388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1209.802265][ T5841] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1209.928318][T11405] loop9: detected capacity change from 0 to 8 [ 1209.960006][ T9850] usb 3-1: USB disconnect, device number 89 [ 1209.984338][ T5841] usb 6-1: Using ep0 maxpacket: 16 [ 1210.043885][ T5841] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.055396][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1210.069959][ T5841] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1210.079630][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.157502][ T5841] usb 6-1: config 0 descriptor?? [ 1210.219970][ T5841] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1212.651943][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.659016][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1213.687903][ T5841] usb 6-1: USB disconnect, device number 29 [ 1214.585099][ T1747] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1214.798426][ T1747] usb 4-1: Using ep0 maxpacket: 16 [ 1214.868821][ T1747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.881637][ T1747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.893446][ T1747] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1214.906989][ T1747] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1214.916755][ T1747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1215.054404][ T1747] usb 4-1: config 0 descriptor?? [ 1215.751775][ T1747] usbhid 4-1:0.0: can't add hid device: -71 [ 1215.758572][ T1747] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1215.805977][ T1747] usb 4-1: USB disconnect, device number 85 [ 1216.074778][T11454] loop2: detected capacity change from 0 to 8 [ 1220.311785][ T1747] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1220.517099][ T1747] usb 3-1: Using ep0 maxpacket: 32 [ 1220.562719][ T1747] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1220.576085][ T1747] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1220.710509][ T1747] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1220.719979][ T1747] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1220.728934][ T1747] usb 3-1: Product: syz [ 1220.733393][ T1747] usb 3-1: Manufacturer: syz [ 1220.738151][ T1747] usb 3-1: SerialNumber: syz [ 1220.838365][ T1747] appletouch 3-1:1.0: Could not find int-in endpoint [ 1220.845393][ T1747] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1220.855875][ T1747] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1221.109185][ T5841] usb 3-1: USB disconnect, device number 90 [ 1222.324286][T11513] loop2: detected capacity change from 0 to 8 [ 1224.109118][ T5841] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1224.326376][ T5841] usb 4-1: Using ep0 maxpacket: 32 [ 1224.406177][ T5841] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1224.418008][ T5841] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1224.508382][T11530] loop5: detected capacity change from 0 to 1024 [ 1224.532468][ T5841] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1224.542231][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1224.553035][ T5841] usb 4-1: Product: syz [ 1224.557520][ T5841] usb 4-1: Manufacturer: syz [ 1224.563358][ T5841] usb 4-1: SerialNumber: syz [ 1224.776866][ T5841] appletouch 4-1:1.0: Could not find int-in endpoint [ 1224.784838][ T5841] appletouch 4-1:1.0: probe with driver appletouch failed with error -5 [ 1224.795785][ T5841] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 1225.063862][ T30] audit: type=1326 audit(1741929124.404:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11520 comm="syz.3.1579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffb9ed8d169 code=0x0 [ 1225.209722][ T5841] usb 4-1: USB disconnect, device number 86 [ 1225.468729][ T3656] hfsplus: b-tree write err: -5, ino 4 [ 1225.860694][ T1747] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1226.050664][ T1747] usb 3-1: Using ep0 maxpacket: 32 [ 1226.115128][ T1747] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1226.126695][ T1747] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1226.243803][ T1747] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1226.254264][ T1747] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1226.263257][ T1747] usb 3-1: Product: syz [ 1226.267703][ T1747] usb 3-1: Manufacturer: syz [ 1226.273158][ T1747] usb 3-1: SerialNumber: syz [ 1226.406273][ T1747] appletouch 3-1:1.0: Could not find int-in endpoint [ 1226.414557][ T1747] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1226.425634][ T1747] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1226.613346][ T1747] usb 3-1: USB disconnect, device number 91 [ 1226.764544][T11546] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1587'. [ 1226.792097][T11546] batadv0: entered promiscuous mode [ 1226.807611][T11546] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1226.824765][T11546] batadv0: left promiscuous mode [ 1226.870728][ T5843] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1227.080695][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 1227.120659][ T5843] usb 6-1: config 0 has an invalid interface number: 105 but max is 0 [ 1227.130737][ T5843] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1227.141778][ T5843] usb 6-1: config 0 has no interface number 0 [ 1227.259189][ T5843] usb 6-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1227.268914][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.277461][ T5843] usb 6-1: Product: syz [ 1227.281874][ T5843] usb 6-1: Manufacturer: syz [ 1227.286663][ T5843] usb 6-1: SerialNumber: syz [ 1227.421236][ T5843] usb 6-1: config 0 descriptor?? [ 1227.482819][ T5843] usb 6-1: Found UVC 0.00 device syz (046d:08f3) [ 1227.489861][ T5843] usb 6-1: No valid video chain found. [ 1227.507523][T11548] loop3: detected capacity change from 0 to 8 [ 1227.641730][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.651097][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1227.866350][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1227.876366][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.390712][T11545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.400002][T11545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.784946][ T5841] usb 6-1: USB disconnect, device number 30 [ 1230.189556][T11565] loop5: detected capacity change from 0 to 1024 [ 1230.954705][ T5843] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 1231.141871][ T4074] hfsplus: b-tree write err: -5, ino 4 [ 1231.170510][ T5843] usb 10-1: Using ep0 maxpacket: 32 [ 1231.192299][ T5843] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1231.205393][ T5843] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1231.305097][ T5843] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1231.314599][ T5843] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1231.323709][ T5843] usb 10-1: Product: syz [ 1231.329285][ T5843] usb 10-1: Manufacturer: syz [ 1231.334616][ T5843] usb 10-1: SerialNumber: syz [ 1231.340775][ T5841] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1231.455979][ T5843] appletouch 10-1:1.0: Could not find int-in endpoint [ 1231.463455][ T5843] appletouch 10-1:1.0: probe with driver appletouch failed with error -5 [ 1231.474899][ T5843] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 1231.600739][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 1231.826412][ T5841] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1231.840993][ T5841] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1231.890658][ T30] audit: type=1326 audit(1741929131.244:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11571 comm="syz.9.1598" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11a2d8d169 code=0x0 [ 1231.958680][ T5841] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1231.968171][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1231.976893][ T5841] usb 3-1: Product: syz [ 1231.981533][ T5841] usb 3-1: Manufacturer: syz [ 1231.986496][ T5841] usb 3-1: SerialNumber: syz [ 1232.034893][ T5843] usb 10-1: USB disconnect, device number 17 [ 1232.085419][ T5841] appletouch 3-1:1.0: Could not find int-in endpoint [ 1232.092700][ T5841] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1232.103065][ T5841] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1232.124963][T11583] loop7: detected capacity change from 0 to 8 [ 1232.977620][ T1747] usb 3-1: USB disconnect, device number 92 [ 1234.479129][T11594] dccp_close: ABORT with 428 bytes unread [ 1234.590493][ T6577] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 1234.800431][ T6577] usb 10-1: Using ep0 maxpacket: 16 [ 1234.867930][ T6577] usb 10-1: config 0 has an invalid interface number: 105 but max is 0 [ 1234.876874][ T6577] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.889081][ T6577] usb 10-1: config 0 has no interface number 0 [ 1235.024578][ T6577] usb 10-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1235.034488][ T6577] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1235.043065][ T6577] usb 10-1: Product: syz [ 1235.047633][ T6577] usb 10-1: Manufacturer: syz [ 1235.053091][ T6577] usb 10-1: SerialNumber: syz [ 1235.169939][ T6577] usb 10-1: config 0 descriptor?? [ 1235.202762][ T6577] usb 10-1: Found UVC 0.00 device syz (046d:08f3) [ 1235.209810][ T6577] usb 10-1: No valid video chain found. [ 1235.389431][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.400940][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.668134][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.677469][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1235.700613][T11590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1235.711226][T11590] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1236.048782][ T5841] usb 10-1: USB disconnect, device number 18 [ 1238.664590][T11612] loop5: detected capacity change from 0 to 8 [ 1241.241106][ T6577] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 1241.441799][ T6577] usb 10-1: Using ep0 maxpacket: 32 [ 1241.489692][ T6577] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1241.501306][ T6577] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.553525][ T5843] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1241.666676][ T6577] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1241.679557][ T6577] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1241.688995][ T6577] usb 10-1: Product: syz [ 1241.693784][ T6577] usb 10-1: Manufacturer: syz [ 1241.698770][ T6577] usb 10-1: SerialNumber: syz [ 1241.792682][ T5843] usb 6-1: Using ep0 maxpacket: 32 [ 1241.823222][ T5843] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1241.834310][ T5843] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1241.938475][ T6577] appletouch 10-1:1.0: Could not find int-in endpoint [ 1241.945714][ T6577] appletouch 10-1:1.0: probe with driver appletouch failed with error -5 [ 1241.957803][ T6577] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 1241.985106][ T5843] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1241.996603][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1242.005668][ T5843] usb 6-1: Product: syz [ 1242.010047][ T5843] usb 6-1: Manufacturer: syz [ 1242.015440][ T5843] usb 6-1: SerialNumber: syz [ 1242.111609][ T5843] appletouch 6-1:1.0: Could not find int-in endpoint [ 1242.118673][ T5843] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 1242.130965][ T5843] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1242.289604][ T6577] usb 10-1: USB disconnect, device number 19 [ 1242.388421][ T5843] usb 6-1: USB disconnect, device number 31 [ 1246.270568][T11640] loop2: detected capacity change from 0 to 8 [ 1249.402524][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1249.432866][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1249.442883][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1249.462409][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1249.474622][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1249.484532][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1249.660588][ T6577] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 1250.120770][ T6577] usb 3-1: Using ep0 maxpacket: 32 [ 1250.160701][ T6577] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1250.173142][ T6577] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1250.406229][ T6577] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1250.415910][ T6577] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1250.425006][ T6577] usb 3-1: Product: syz [ 1250.429460][ T6577] usb 3-1: Manufacturer: syz [ 1250.434643][ T6577] usb 3-1: SerialNumber: syz [ 1250.503027][ T6577] appletouch 3-1:1.0: Could not find int-in endpoint [ 1250.510342][ T6577] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1250.522492][ T6577] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1250.744764][ T30] audit: type=1326 audit(1741929150.094:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11647 comm="syz.2.1628" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2acf78d169 code=0x0 [ 1250.837355][ T6577] usb 3-1: USB disconnect, device number 93 [ 1251.371484][T11649] chnl_net:caif_netlink_parms(): no params data found [ 1251.560513][ T5793] Bluetooth: hci4: command tx timeout [ 1253.641010][ T5793] Bluetooth: hci4: command tx timeout [ 1254.938220][T11682] loop7: detected capacity change from 0 to 8 [ 1255.730757][ T5793] Bluetooth: hci4: command tx timeout [ 1256.286376][ T3457] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.014630][ T3457] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.220642][T11649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1257.228499][T11649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1257.240250][T11649] bridge_slave_0: entered allmulticast mode [ 1257.250660][T11649] bridge_slave_0: entered promiscuous mode [ 1257.429609][ T3457] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.599986][T11649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1257.608132][T11649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1257.616318][T11649] bridge_slave_1: entered allmulticast mode [ 1257.629633][T11649] bridge_slave_1: entered promiscuous mode [ 1257.737803][ T3457] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1257.801821][ T5793] Bluetooth: hci4: command tx timeout [ 1258.822141][ T5841] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1258.899536][T11649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.987621][T11649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.028748][ T5841] usb 6-1: Using ep0 maxpacket: 32 [ 1259.060878][ T5841] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1259.072191][ T5841] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1259.194833][ T5841] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1259.204595][ T5841] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1259.213406][ T5841] usb 6-1: Product: syz [ 1259.217840][ T5841] usb 6-1: Manufacturer: syz [ 1259.223296][ T5841] usb 6-1: SerialNumber: syz [ 1259.263644][ T5841] appletouch 6-1:1.0: Could not find int-in endpoint [ 1259.270999][ T5841] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 1259.285385][ T5841] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1259.318661][T11705] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1646'. [ 1259.376560][ T3457] bridge_slave_1: left allmulticast mode [ 1259.382801][ T3457] bridge_slave_1: left promiscuous mode [ 1259.391961][ T3457] bridge0: port 2(bridge_slave_1) entered disabled state [ 1259.480977][ T11] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1259.512270][ T30] audit: type=1326 audit(1741929158.844:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11702 comm="syz.5.1645" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7da4f8d169 code=0x0 [ 1259.784825][ T11] usb 8-1: Using ep0 maxpacket: 16 [ 1260.207020][ T1747] usb 6-1: USB disconnect, device number 32 [ 1260.234332][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.246203][ T11] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.257775][ T11] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1260.272311][ T11] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1260.285122][ T11] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.367650][ T11] usb 8-1: config 0 descriptor?? [ 1260.528317][ T3457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1260.573969][ T3457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1260.599220][ T3457] bond0 (unregistering): Released all slaves [ 1260.780710][T11649] team0: Port device team_slave_0 added [ 1260.823113][T11649] team0: Port device team_slave_1 added [ 1260.857053][ T11] koneplus 0003:1E7D:2E22.001A: unknown main item tag 0x0 [ 1260.865170][ T11] koneplus 0003:1E7D:2E22.001A: unknown main item tag 0x0 [ 1261.345553][T11649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1261.353174][T11649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1261.379662][T11649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1261.732959][ T11] koneplus 0003:1E7D:2E22.001A: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.7-1/input0 [ 1261.819630][ T11] koneplus 0003:1E7D:2E22.001A: couldn't init struct koneplus_device [ 1261.828487][ T11] koneplus 0003:1E7D:2E22.001A: couldn't install mouse [ 1261.967494][T11649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1261.975226][T11649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1262.001846][T11649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1262.035806][ T11] koneplus 0003:1E7D:2E22.001A: probe with driver koneplus failed with error -32 [ 1262.138747][ T11] usb 8-1: USB disconnect, device number 39 [ 1262.176993][ T3457] hsr_slave_0: left promiscuous mode [ 1262.228174][ T3457] hsr_slave_1: left promiscuous mode [ 1262.236471][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1262.244572][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1262.345590][ T3457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1262.356367][ T3457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1262.530514][ T3457] veth1_macvtap: left promiscuous mode [ 1262.537844][ T3457] veth0_macvtap: left promiscuous mode [ 1262.544342][ T3457] veth1_vlan: left promiscuous mode [ 1262.549987][ T3457] veth0_vlan: left promiscuous mode [ 1263.474817][ T11] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 1263.672345][ T11] usb 3-1: Using ep0 maxpacket: 16 [ 1263.697515][ T11] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1263.711452][ T11] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1263.720962][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.752582][ T11] usb 3-1: config 0 descriptor?? [ 1263.888285][ T11] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input53 [ 1264.074213][ T5136] bcm5974 3-1:0.0: could not read from device [ 1264.316241][ T5136] bcm5974 3-1:0.0: could not read from device [ 1264.558284][ T11] bcm5974 3-1:0.0: could not read from device [ 1264.593530][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1651'. [ 1264.632209][ T11] input: failed to attach handler mousedev to device input53, error: -5 [ 1264.648536][ T5136] bcm5974 3-1:0.0: could not read from device [ 1264.701750][ T11] usb 3-1: USB disconnect, device number 94 [ 1264.704066][ T5136] bcm5974 3-1:0.0: could not read from device [ 1265.137901][T11649] hsr_slave_0: entered promiscuous mode [ 1265.150574][T11649] hsr_slave_1: entered promiscuous mode [ 1265.159879][T11649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1265.168099][T11649] Cannot create hsr debugfs directory [ 1265.206670][T11736] loop7: detected capacity change from 0 to 8 [ 1266.873058][ T11] usb 10-1: new high-speed USB device number 20 using dummy_hcd [ 1267.059478][ T11] usb 10-1: Using ep0 maxpacket: 32 [ 1267.088282][ T11] usb 10-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1267.100285][ T11] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1267.179121][ T11] usb 10-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1267.190017][ T11] usb 10-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1267.201320][ T11] usb 10-1: Product: syz [ 1267.205854][ T11] usb 10-1: Manufacturer: syz [ 1267.211832][ T11] usb 10-1: SerialNumber: syz [ 1267.220961][ T5841] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1267.303796][ T11] appletouch 10-1:1.0: Could not find int-in endpoint [ 1267.311441][ T11] appletouch 10-1:1.0: probe with driver appletouch failed with error -5 [ 1267.323012][ T11] usbhid 10-1:1.0: couldn't find an input interrupt endpoint [ 1267.420379][ T5841] usb 6-1: Using ep0 maxpacket: 16 [ 1267.460991][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.472956][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.485048][ T5841] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1267.499288][ T5841] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 1267.508835][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.561457][ T30] audit: type=1326 audit(1741929166.904:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11743 comm="syz.9.1660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f11a2d8d169 code=0x0 [ 1267.663325][ T5841] usb 6-1: config 0 descriptor?? [ 1267.707338][ T6577] usb 10-1: USB disconnect, device number 20 [ 1268.133780][ T5841] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 1268.143419][ T5841] koneplus 0003:1E7D:2E22.001B: unknown main item tag 0x0 [ 1268.260950][ T5841] koneplus 0003:1E7D:2E22.001B: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.5-1/input0 [ 1268.414918][ T5841] koneplus 0003:1E7D:2E22.001B: couldn't init struct koneplus_device [ 1268.424078][ T5841] koneplus 0003:1E7D:2E22.001B: couldn't install mouse [ 1268.636713][ T5841] koneplus 0003:1E7D:2E22.001B: probe with driver koneplus failed with error -32 [ 1268.675472][ T5841] usb 6-1: USB disconnect, device number 33 [ 1268.805364][T11649] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1268.859300][T11649] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1268.963276][T11649] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1269.064179][T11649] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1269.330298][T11761] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1666'. [ 1270.224207][T11770] loop9: detected capacity change from 0 to 8 [ 1270.230262][T11649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1270.488526][T11649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1270.652051][ T3837] bridge0: port 1(bridge_slave_0) entered blocking state [ 1270.660246][ T3837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1270.875986][ T3837] bridge0: port 2(bridge_slave_1) entered blocking state [ 1270.884035][ T3837] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1272.751451][T11795] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1678'. [ 1273.298429][T11649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1273.685803][T11809] loop5: detected capacity change from 0 to 8 [ 1274.103993][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1274.112065][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1274.395792][T11816] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1274.405114][T11816] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1274.453246][T11649] veth0_vlan: entered promiscuous mode [ 1274.551244][T11649] veth1_vlan: entered promiscuous mode [ 1274.973655][T11649] veth0_macvtap: entered promiscuous mode [ 1275.037399][T11649] veth1_macvtap: entered promiscuous mode [ 1275.173877][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.186279][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.197381][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.208313][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.218770][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1275.229756][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.248686][T11649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1275.349368][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.363399][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.374330][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.385520][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.395806][T11649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1275.406812][T11649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1275.422505][T11649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1275.537361][T11649] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.549425][T11649] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.559101][T11649] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.570942][T11649] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1275.943586][T11826] syzkaller1: entered promiscuous mode [ 1275.952095][T11826] syzkaller1: entered allmulticast mode [ 1276.131600][T11832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'. [ 1277.064789][T11844] loop7: detected capacity change from 0 to 16384 [ 1277.310503][ T6577] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1277.415830][T11844] loop7: detected capacity change from 16384 to 16383 [ 1277.480407][ T6577] usb 6-1: Using ep0 maxpacket: 16 [ 1277.525229][ T6577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.538068][ T6577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.548507][ T6577] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1277.562234][ T6577] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1277.571573][ T6577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.784646][ T6577] usb 6-1: config 0 descriptor?? [ 1277.845575][T11852] loop7: detected capacity change from 16383 to 16384 [ 1278.235294][ T6577] usbhid 6-1:0.0: can't add hid device: -71 [ 1278.242310][ T6577] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1278.881769][ T6577] usb 6-1: USB disconnect, device number 34 [ 1279.756960][T11868] loop5: detected capacity change from 0 to 8 [ 1280.794109][T11876] syzkaller1: entered promiscuous mode [ 1280.800243][T11876] syzkaller1: entered allmulticast mode [ 1283.740922][ T4159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1283.749376][ T4159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1285.470800][ T3837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1285.480871][ T3837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1286.064179][T11912] syzkaller1: entered promiscuous mode [ 1286.069968][T11912] syzkaller1: entered allmulticast mode [ 1287.678139][T11933] loop2: detected capacity change from 0 to 8 [ 1287.870432][ T5841] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1288.130884][ T5841] usb 8-1: Using ep0 maxpacket: 16 [ 1288.168697][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.180417][ T5841] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.191472][ T5841] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1288.201105][ T5841] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.403714][ T5841] usb 8-1: config 0 descriptor?? [ 1289.120025][ T5841] usbhid 8-1:0.0: can't add hid device: -71 [ 1289.127117][ T5841] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1289.162420][ T5841] usb 8-1: USB disconnect, device number 40 [ 1289.775577][T11947] syzkaller1: entered promiscuous mode [ 1289.789939][T11947] syzkaller1: entered allmulticast mode [ 1290.431480][T11959] fuse: Unknown parameter '0x0000000000000003' [ 1290.565590][T11962] loop9: detected capacity change from 0 to 8 [ 1292.207934][T11982] fuse: Unknown parameter 'group_id00000000000000000000' [ 1292.466276][T11988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1292.523591][ T6577] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1292.730561][ T6577] usb 6-1: Using ep0 maxpacket: 16 [ 1292.772561][ T6577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1292.784292][ T6577] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1292.794683][ T6577] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1292.804242][ T6577] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.001260][ T6577] usb 6-1: config 0 descriptor?? [ 1294.048895][ T6577] usbhid 6-1:0.0: can't add hid device: -71 [ 1294.060280][ T6577] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1294.634334][ T6577] usb 6-1: USB disconnect, device number 35 [ 1298.123260][T12115] fuse: Unknown parameter 'group_id00000000000000000000' [ 1298.581316][T12120] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1757'. [ 1302.994305][T12150] fuse: Bad value for 'user_id' [ 1302.999484][T12150] fuse: Bad value for 'user_id' [ 1304.792297][T12159] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1771'. [ 1307.177140][T12138] Set syz1 is full, maxelem 65536 reached [ 1309.451795][ T5089] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1309.472731][ T5089] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1309.492470][ T5089] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1309.542998][ T5089] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1309.653113][ T5089] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1309.669724][ T5089] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1310.407299][T12187] fuse: Bad value for 'user_id' [ 1310.412475][T12187] fuse: Bad value for 'user_id' [ 1311.449289][T12181] chnl_net:caif_netlink_parms(): no params data found [ 1311.672443][T12201] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1785'. [ 1311.728894][ T5089] Bluetooth: hci1: command tx timeout [ 1313.525844][ T1150] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.762946][ T1150] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1313.802225][ T5089] Bluetooth: hci1: command tx timeout [ 1314.265620][ T1150] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.849158][ T1150] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1314.903165][T12181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1314.911195][T12181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.918907][T12181] bridge_slave_0: entered allmulticast mode [ 1314.928858][T12181] bridge_slave_0: entered promiscuous mode [ 1315.104383][T12181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1315.112722][T12181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1315.121094][T12181] bridge_slave_1: entered allmulticast mode [ 1315.130798][T12181] bridge_slave_1: entered promiscuous mode [ 1315.605766][T12223] fuse: Bad value for 'user_id' [ 1315.611160][T12223] fuse: Bad value for 'user_id' [ 1315.881244][ T5089] Bluetooth: hci1: command tx timeout [ 1315.915449][ T1150] bridge_slave_1: left allmulticast mode [ 1315.921762][ T1150] bridge_slave_1: left promiscuous mode [ 1315.929715][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1316.086442][ T1150] bridge_slave_0: left allmulticast mode [ 1316.094073][ T1150] bridge_slave_0: left promiscuous mode [ 1316.101128][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1317.032088][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1317.082194][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1317.112416][ T1150] bond0 (unregistering): Released all slaves [ 1317.151805][T12181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1317.267537][T12181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1317.343042][ T5793] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1317.354010][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1317.363897][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1317.447797][ T5793] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1317.468304][T12233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1317.478479][T12233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1317.583224][ T9850] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1317.707347][T12181] team0: Port device team_slave_0 added [ 1317.750506][ T9850] usb 6-1: Using ep0 maxpacket: 16 [ 1317.773238][ T9850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1317.783987][ T9850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1317.795705][ T9850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1317.807953][ T9850] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1317.819395][ T9850] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1317.976243][ T5089] Bluetooth: hci1: command tx timeout [ 1318.018202][T12181] team0: Port device team_slave_1 added [ 1318.202440][ T9850] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1318.212132][ T9850] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1318.220601][ T9850] usb 6-1: Manufacturer: syz [ 1318.255337][ T9850] usb 6-1: config 0 descriptor?? [ 1318.478007][T12240] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1798'. [ 1318.545782][ T1150] hsr_slave_0: left promiscuous mode [ 1318.578217][ T1150] hsr_slave_1: left promiscuous mode [ 1318.586932][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1318.594960][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1318.675840][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1318.685628][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1318.762278][ T1150] veth1_macvtap: left promiscuous mode [ 1318.768371][ T1150] veth0_macvtap: left promiscuous mode [ 1318.774474][ T1150] veth1_vlan: left promiscuous mode [ 1318.782140][ T1150] veth0_vlan: left promiscuous mode [ 1318.840846][ T9850] rc_core: IR keymap rc-hauppauge not found [ 1318.847226][ T9850] Registered IR keymap rc-empty [ 1318.853176][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1318.880965][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1318.902702][ T9850] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1318.917928][ T9850] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input54 [ 1319.020482][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.100885][T12246] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1319.113029][T12246] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1319.162763][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.200848][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.237064][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.341467][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.362604][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.432879][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.460908][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.493604][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.524521][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1319.554078][ T9850] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1319.563384][ T9850] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1319.621815][ T5089] Bluetooth: hci0: command tx timeout [ 1319.636791][ T9850] usb 6-1: USB disconnect, device number 36 [ 1320.157357][T12181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1320.164815][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.193184][T12181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1320.574536][T12181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1320.582132][T12181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1320.610688][T12181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1321.513677][T12181] hsr_slave_0: entered promiscuous mode [ 1321.526674][T12181] hsr_slave_1: entered promiscuous mode [ 1321.536079][T12181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1321.545605][T12181] Cannot create hsr debugfs directory [ 1321.650428][ T5089] Bluetooth: hci0: command tx timeout [ 1321.861885][T12260] fuse: Bad value for 'fd' [ 1321.935295][ T1150] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.255329][ T1150] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.309423][T12266] vivid-000: disconnect [ 1322.467454][ T1150] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.640359][ T1150] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.702812][T12226] chnl_net:caif_netlink_parms(): no params data found [ 1323.200867][ T1150] bridge_slave_1: left allmulticast mode [ 1323.207050][ T1150] bridge_slave_1: left promiscuous mode [ 1323.214031][ T1150] bridge0: port 2(bridge_slave_1) entered disabled state [ 1323.271152][ T1150] bridge_slave_0: left allmulticast mode [ 1323.277260][ T1150] bridge_slave_0: left promiscuous mode [ 1323.285810][ T1150] bridge0: port 1(bridge_slave_0) entered disabled state [ 1323.462889][ T9850] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1323.693466][ T9850] usb 6-1: Using ep0 maxpacket: 16 [ 1323.721223][ T5089] Bluetooth: hci0: command tx timeout [ 1323.752268][ T9850] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1323.763059][ T9850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1323.775592][ T9850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1323.786365][ T9850] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1323.797507][ T9850] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1323.889067][ T9850] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1323.900917][ T9850] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1323.909541][ T9850] usb 6-1: Manufacturer: syz [ 1323.920404][ T9850] usb 6-1: config 0 descriptor?? [ 1323.922510][ T1150] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1324.001267][ T1150] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1324.023355][ T1150] bond0 (unregistering): Released all slaves [ 1324.390531][ T9850] rc_core: IR keymap rc-hauppauge not found [ 1324.396840][ T9850] Registered IR keymap rc-empty [ 1324.404033][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.440881][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.501987][ T9850] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 1324.518364][ T9850] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input55 [ 1324.574793][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.634670][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.673131][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.701055][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.742137][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.750569][T12283] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1324.759940][T12283] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1324.775873][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.808166][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.853974][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.881495][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.939988][ T9850] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 1324.980902][ T9850] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 1324.989495][ T9850] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1325.060384][ T9850] usb 6-1: USB disconnect, device number 37 [ 1325.093401][T12286] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1812'. [ 1325.248304][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1325.259393][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1325.265587][T12262] vivid-000: reconnect [ 1325.280550][ T1150] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1325.288517][ T1150] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1325.313210][ T1150] veth1_macvtap: left promiscuous mode [ 1325.319263][ T1150] veth0_macvtap: left promiscuous mode [ 1325.326364][ T1150] veth1_vlan: left promiscuous mode [ 1325.333518][ T1150] veth0_vlan: left promiscuous mode [ 1325.800643][ T5089] Bluetooth: hci0: command tx timeout [ 1326.842443][T12226] bridge0: port 1(bridge_slave_0) entered blocking state [ 1326.850682][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 1326.858577][T12226] bridge_slave_0: entered allmulticast mode [ 1326.870283][T12226] bridge_slave_0: entered promiscuous mode [ 1326.894009][T12226] bridge0: port 2(bridge_slave_1) entered blocking state [ 1326.903180][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 1326.911414][T12226] bridge_slave_1: entered allmulticast mode [ 1326.921690][T12226] bridge_slave_1: entered promiscuous mode [ 1327.481251][T12226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1327.504795][T12226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1327.776055][T12226] team0: Port device team_slave_0 added [ 1327.981442][T12226] team0: Port device team_slave_1 added [ 1328.413789][T12299] fuse: Bad value for 'fd' [ 1328.449064][T12226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1328.457251][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1328.484555][T12226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1328.506804][T12181] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1329.396697][T12181] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1329.434847][T12226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1329.442406][T12226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1329.469232][T12226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1329.489042][T12181] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1329.551339][T12181] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1329.720816][ T6577] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1329.915042][T12226] hsr_slave_0: entered promiscuous mode [ 1329.926126][T12226] hsr_slave_1: entered promiscuous mode [ 1329.935333][T12226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1329.944590][T12226] Cannot create hsr debugfs directory [ 1330.008254][ T6577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.020934][ T6577] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.031418][ T6577] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1330.045899][ T6577] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1330.055716][ T6577] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.180695][T12314] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1823'. [ 1330.193216][ T6577] usb 2-1: config 0 descriptor?? [ 1330.642585][ T6577] usbhid 2-1:0.0: can't add hid device: -71 [ 1330.649394][ T6577] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1330.689261][ T6577] usb 2-1: USB disconnect, device number 2 [ 1331.108399][T12181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1331.428112][T12181] 8021q: adding VLAN 0 to HW filter on device team0 [ 1331.519514][T12053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1331.527501][T12053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1331.703858][T12083] bridge0: port 2(bridge_slave_1) entered blocking state [ 1331.711987][T12083] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1332.285848][T12226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1332.338030][T12325] fuse: Bad value for 'fd' [ 1332.352203][T12226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1332.453971][T12226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1332.552785][T12226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1334.534593][T12226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.934296][T12349] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1833'. [ 1334.944083][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1833'. [ 1335.046528][T12226] 8021q: adding VLAN 0 to HW filter on device team0 [ 1335.249188][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 1335.257200][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1335.338966][T12181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1335.484261][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 1335.492213][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1335.559240][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1335.566689][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1336.312492][T12181] veth0_vlan: entered promiscuous mode [ 1336.506529][T12181] veth1_vlan: entered promiscuous mode [ 1336.999665][T12181] veth0_macvtap: entered promiscuous mode [ 1337.102222][T12181] veth1_macvtap: entered promiscuous mode [ 1337.377384][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.389316][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.400379][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1337.414944][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.436339][T12181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1337.553705][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.564814][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.575152][T12181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1337.585953][T12181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1337.603311][T12181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1338.119152][T12181] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.128909][T12181] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.139524][T12181] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1338.149210][T12181] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1339.136201][T12226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1339.495052][T12369] fuse: Bad value for 'fd' [ 1343.294919][T12226] veth0_vlan: entered promiscuous mode [ 1343.522281][T12226] veth1_vlan: entered promiscuous mode [ 1343.917997][T12226] veth0_macvtap: entered promiscuous mode [ 1343.997563][T12226] veth1_macvtap: entered promiscuous mode [ 1344.223371][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.234502][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.244758][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.255676][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.266719][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1344.278899][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.297214][T12226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1344.505389][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.516401][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.526866][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.538327][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.548683][T12226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1344.559591][T12226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1344.575456][T12226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1344.823215][T12226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.832852][T12226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.842966][T12226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.852376][T12226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1344.953031][T12413] fuse: Bad value for 'fd' [ 1345.498118][T12422] loop2: detected capacity change from 0 to 7 [ 1345.548903][T12422] Dev loop2: unable to read RDB block 7 [ 1345.555287][T12422] loop2: AHDI p3 [ 1345.559232][T12422] loop2: partition table partially beyond EOD, truncated [ 1346.616325][T12436] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1347.748210][ T3803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.758628][ T3803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1347.972995][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1347.982691][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1349.790611][ T5843] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 1349.890619][T12463] fuse: Bad value for 'fd' [ 1350.012122][ T5843] usb 1-1: Using ep0 maxpacket: 16 [ 1350.054201][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1350.065707][ T5843] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1350.075976][ T5843] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1350.090375][ T5843] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1350.099767][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1350.237676][T12466] loop2: detected capacity change from 0 to 7 [ 1350.279206][T12466] Dev loop2: unable to read RDB block 7 [ 1350.284691][ T5843] usb 1-1: config 0 descriptor?? [ 1350.285435][T12466] loop2: AHDI p3 [ 1350.294335][T12466] loop2: partition table partially beyond EOD, truncated [ 1350.793434][ T5843] usbhid 1-1:0.0: can't add hid device: -71 [ 1350.800617][ T5843] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1350.892807][ T5843] usb 1-1: USB disconnect, device number 3 [ 1351.909360][T12476] vivid-000: disconnect [ 1351.942103][T12475] vivid-000: reconnect [ 1352.142994][T12479] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1353.283631][T12037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.293435][T12037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1353.669382][T12053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1353.678125][T12053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1354.220720][ T5841] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1354.381509][ T9850] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1354.444982][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1354.456665][ T5841] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1354.467008][ T5841] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1354.476684][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.612111][ T5841] usb 6-1: config 0 descriptor?? [ 1354.706678][ T9850] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1354.716102][ T9850] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1354.729624][ T9850] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1354.740672][ T9850] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1354.750502][ T9850] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1354.844728][ T9850] usb 2-1: rejected 1 configuration due to insufficient available bus power [ 1354.854625][ T9850] usb 2-1: no configuration chosen from 1 choice [ 1355.151964][ T5841] uclogic 0003:5543:0042.001C: No inputs registered, leaving [ 1355.205415][ T5841] uclogic 0003:5543:0042.001C: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 1355.303039][ T5843] usb 6-1: USB disconnect, device number 38 [ 1355.693505][T12506] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1356.544474][T12511] vivid-000: disconnect [ 1356.591545][T12509] vivid-000: reconnect [ 1356.863878][T12513] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1357.470292][ T5841] usb 2-1: USB disconnect, device number 3 [ 1358.684965][T12535] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1359.011234][ T5843] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1359.075911][T12544] vivid-000: disconnect [ 1359.082838][T12543] vivid-000: reconnect [ 1359.137072][T12547] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1359.219777][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1359.234362][ T5843] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1359.245793][ T5843] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1359.255516][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.362697][ T5843] usb 6-1: config 0 descriptor?? [ 1359.730589][ T1747] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1359.980956][ T5843] uclogic 0003:5543:0042.001D: No inputs registered, leaving [ 1360.010610][ T1747] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1360.019661][ T1747] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1360.030489][ T1747] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1360.039845][ T1747] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1360.052340][ T1747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.081592][ T5843] uclogic 0003:5543:0042.001D: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 1360.131314][ T5843] usb 6-1: USB disconnect, device number 39 [ 1360.224811][ T1747] usb 1-1: rejected 1 configuration due to insufficient available bus power [ 1360.235831][ T1747] usb 1-1: no configuration chosen from 1 choice [ 1362.053341][T12567] veth0_vlan: entered allmulticast mode [ 1362.215713][T12567] ÿÿÿÿÿÿ: renamed from vlan1 [ 1362.738018][ T5841] usb 1-1: USB disconnect, device number 4 [ 1362.972485][T12573] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1363.574675][ T5841] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 1363.750748][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 1363.764788][ T9850] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1363.816952][ T5841] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1363.825974][ T5841] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1363.837692][ T5841] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1363.847383][ T5841] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1363.856238][ T5841] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1363.865735][ T5841] usb 2-1: config 0 has no interface number 0 [ 1363.872540][ T5841] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1363.884829][ T5841] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1363.895574][ T5841] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1363.906177][ T5841] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1363.920149][ T5841] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1363.927270][ T5841] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1363.943760][ T5843] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1363.958318][ T5841] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1363.968220][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1363.976785][ T5841] usb 2-1: Product: syz [ 1363.981411][ T5841] usb 2-1: Manufacturer: syz [ 1363.986314][ T5841] usb 2-1: SerialNumber: syz [ 1364.027669][ T5841] usb 2-1: config 0 descriptor?? [ 1364.058921][ T9850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.070638][ T9850] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.081187][ T9850] usb 6-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1364.090901][ T9850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.111293][ T5841] usb 2-1: selecting invalid altsetting 2 [ 1364.126062][ T9850] usb 6-1: config 0 descriptor?? [ 1364.180632][ T5843] usb 5-1: Using ep0 maxpacket: 16 [ 1364.213393][ T5843] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1364.224828][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1364.236350][ T5843] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1364.249392][ T5843] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1364.260706][ T5843] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1364.335839][ T5843] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1364.348663][ T5843] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1364.358099][ T5843] usb 5-1: Manufacturer: syz [ 1364.401872][ T5843] usb 5-1: config 0 descriptor?? [ 1365.199652][T12597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.209786][T12597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.341428][ T5843] rc_core: IR keymap rc-hauppauge not found [ 1365.348893][ T5843] Registered IR keymap rc-empty [ 1365.354768][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1365.380499][ T5841] get_1284_register timeout [ 1365.386038][ T5841] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 1365.386377][ C0] usb 2-1: async_complete: urb error -104 [ 1365.401053][ C0] usb 2-1: async_complete: urb error -104 [ 1365.407750][ C0] usb 2-1: async_complete: urb error -104 [ 1365.438679][ T9850] uclogic 0003:5543:0042.001E: No inputs registered, leaving [ 1365.449963][ T9850] uclogic 0003:5543:0042.001E: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.5-1/input0 [ 1365.478805][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1365.540100][ T5843] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 1365.556080][ T5843] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input58 [ 1365.684075][ T9850] usb 6-1: USB disconnect, device number 40 [ 1365.724711][T12600] pim6reg1: entered promiscuous mode [ 1365.735315][T12600] pim6reg1: entered allmulticast mode [ 1365.794793][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1365.909605][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1365.943923][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1365.987440][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1366.035228][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1366.070924][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1366.111472][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1366.130880][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1366.161394][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1366.218180][ T5843] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 1366.253151][ T5843] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 1366.262280][ T5843] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1366.318207][ T5843] usb 5-1: USB disconnect, device number 15 [ 1366.472100][ T5841] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1366.691620][ T5841] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1366.703199][ T5841] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1366.715010][ T5841] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1366.724967][ T5841] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1366.734561][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.053048][ T5841] usb 6-1: rejected 1 configuration due to insufficient available bus power [ 1367.062297][ T5841] usb 6-1: no configuration chosen from 1 choice [ 1367.513889][ T5843] usb 2-1: USB disconnect, device number 4 [ 1369.350747][ T5843] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1369.428459][ T1747] usb 6-1: USB disconnect, device number 41 [ 1369.547843][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 1369.583712][ T5843] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1369.595121][ T5843] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1369.636755][ T5841] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1369.665521][ T5843] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1369.678332][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1369.688172][ T5843] usb 3-1: Product: syz [ 1369.692983][ T5843] usb 3-1: Manufacturer: syz [ 1369.697875][ T5843] usb 3-1: SerialNumber: syz [ 1369.822215][ T5843] appletouch 3-1:1.0: Could not find int-in endpoint [ 1369.829276][ T5843] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1369.840833][ T5843] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1369.864637][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1369.880555][ T5841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1369.892560][ T5841] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1369.902580][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.926611][ T5841] usb 1-1: config 0 descriptor?? [ 1370.059805][ T30] audit: type=1326 audit(1741929269.424:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12620 comm="syz.2.1919" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2acf78d169 code=0x0 [ 1370.199651][ T5843] usb 3-1: USB disconnect, device number 95 [ 1370.426579][ T5841] uclogic 0003:5543:0042.001F: No inputs registered, leaving [ 1370.438917][ T5841] uclogic 0003:5543:0042.001F: hidraw0: USB HID v0.00 Device [HID 5543:0042] on usb-dummy_hcd.0-1/input0 [ 1370.520637][ T9850] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1370.619473][ T5841] usb 1-1: USB disconnect, device number 5 [ 1370.706776][ T9850] usb 2-1: Using ep0 maxpacket: 16 [ 1370.735878][ T9850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1370.747377][ T9850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1370.758891][ T9850] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1370.769142][ T9850] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1370.780357][ T9850] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1370.823116][ T9850] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1370.832960][ T9850] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1370.841990][ T9850] usb 2-1: Manufacturer: syz [ 1370.882840][ T9850] usb 2-1: config 0 descriptor?? [ 1371.463464][ T9850] rc_core: IR keymap rc-hauppauge not found [ 1371.469829][ T9850] Registered IR keymap rc-empty [ 1371.476705][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.506411][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.550990][ T9850] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 1371.566979][ T9850] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input61 [ 1371.598887][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.694172][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.724188][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.729214][T12651] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1371.741769][T12651] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1371.752992][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.791957][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.824292][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.856925][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.881606][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.914015][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.940794][ T9850] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 1371.968456][ T9850] mceusb 2-1:0.0: Registered with mce emulator interface version 1 [ 1371.977156][ T9850] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1371.993218][ T9850] usb 2-1: USB disconnect, device number 5 [ 1372.456885][ T9850] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1372.620761][ T9850] usb 1-1: Using ep0 maxpacket: 16 [ 1372.675498][ T9850] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1372.684731][ T9850] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1372.693565][ T9850] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1372.702329][ T9850] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1372.717145][ T9850] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1372.726870][ T9850] usb 1-1: config 0 has no interface number 0 [ 1372.733443][ T9850] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1372.747960][ T9850] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1372.759471][ T9850] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1372.770763][ T9850] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1372.784557][ T9850] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1372.792241][ T9850] usb 1-1: config 0 interface 125 has no altsetting 2 [ 1372.839561][ T9850] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1372.852025][ T9850] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.862108][ T9850] usb 1-1: Product: syz [ 1372.866823][ T9850] usb 1-1: Manufacturer: syz [ 1372.871983][ T9850] usb 1-1: SerialNumber: syz [ 1372.903104][ T9850] usb 1-1: config 0 descriptor?? [ 1372.922609][ T9850] usb 1-1: selecting invalid altsetting 2 [ 1373.468722][ T5089] Bluetooth: hci4: command 0x0406 tx timeout [ 1374.338191][ T9850] get_1284_register timeout [ 1374.343567][ T9850] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 1374.343918][ C0] usb 1-1: async_complete: urb error -104 [ 1374.358565][ C0] usb 1-1: async_complete: urb error -104 [ 1374.365237][ C0] usb 1-1: async_complete: urb error -104 [ 1374.391540][ T5841] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1374.603914][ T5841] usb 2-1: config index 0 descriptor too short (expected 45, got 36) [ 1374.613059][ T5841] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1374.623940][ T5841] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1374.637857][ T5841] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1374.647428][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1374.672527][ T5841] usb 2-1: config 0 descriptor?? [ 1374.696907][ T5841] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1376.215661][ T5841] usb 1-1: USB disconnect, device number 6 [ 1377.199377][ T5841] usb 2-1: USB disconnect, device number 6 [ 1378.011323][ T5841] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1378.244106][ T5841] usb 2-1: Using ep0 maxpacket: 32 [ 1378.302154][ T5841] usb 2-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1378.314845][ T5841] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1378.484880][ T5841] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1378.495035][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1378.503958][ T5841] usb 2-1: Product: syz [ 1378.508418][ T5841] usb 2-1: Manufacturer: syz [ 1378.513517][ T5841] usb 2-1: SerialNumber: syz [ 1378.545837][ T5841] appletouch 2-1:1.0: Could not find int-in endpoint [ 1378.553059][ T5841] appletouch 2-1:1.0: probe with driver appletouch failed with error -5 [ 1378.564577][ T5841] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 1378.804786][ T30] audit: type=1326 audit(1741929278.164:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12680 comm="syz.1.1941" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4d4bb8d169 code=0x0 [ 1378.961281][ T5843] usb 2-1: USB disconnect, device number 7 [ 1381.401527][ T5841] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1381.595252][ T5841] usb 2-1: Using ep0 maxpacket: 16 [ 1381.639428][ T5841] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 1381.652182][ T5841] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1381.662038][ T5841] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1381.670757][ T5841] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 1381.679279][ T5841] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1381.688884][ T5841] usb 2-1: config 0 has no interface number 0 [ 1381.695533][ T5841] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1381.707146][ T5841] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1381.717647][ T5841] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1381.728288][ T5841] usb 2-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1381.742171][ T5841] usb 2-1: config 0 interface 125 has no altsetting 0 [ 1381.749281][ T5841] usb 2-1: config 0 interface 125 has no altsetting 2 [ 1382.305713][ T5841] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1382.315567][ T5841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.324060][ T5841] usb 2-1: Product: syz [ 1382.328504][ T5841] usb 2-1: Manufacturer: syz [ 1382.333736][ T5841] usb 2-1: SerialNumber: syz [ 1382.538819][ T5841] usb 2-1: config 0 descriptor?? [ 1382.583412][ T5841] usb 2-1: selecting invalid altsetting 2 [ 1383.401166][ T5843] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1383.673199][ T5843] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 1383.682262][ T5843] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1383.693104][ T5843] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1383.709631][ T5843] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1383.720322][ T5843] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1383.960975][ T5841] get_1284_register timeout [ 1383.966044][ T5841] uss720 2-1:0.125: probe with driver uss720 failed with error -5 [ 1383.966397][ C0] usb 2-1: async_complete: urb error -104 [ 1383.981301][ C0] usb 2-1: async_complete: urb error -104 [ 1383.987986][ C0] usb 2-1: async_complete: urb error -104 [ 1383.992505][ T5843] usb 6-1: config 0 descriptor?? [ 1384.125404][ T5843] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1384.610770][ T5841] usb 2-1: USB disconnect, device number 8 [ 1385.081632][ T5841] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1385.251664][ T5841] usb 3-1: Using ep0 maxpacket: 32 [ 1385.272066][ T5841] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1385.283625][ T5841] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1385.322517][ T5841] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1385.332191][ T5841] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1385.343799][ T5841] usb 3-1: Product: syz [ 1385.348364][ T5841] usb 3-1: Manufacturer: syz [ 1385.354347][ T5841] usb 3-1: SerialNumber: syz [ 1385.383644][ T5841] appletouch 3-1:1.0: Could not find int-in endpoint [ 1385.390923][ T5841] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1385.402350][ T5841] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1385.603331][ T30] audit: type=1326 audit(1741929284.974:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12725 comm="syz.2.1958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2acf78d169 code=0x0 [ 1385.704423][ T5841] usb 3-1: USB disconnect, device number 96 [ 1386.577165][ T5841] usb 6-1: USB disconnect, device number 42 [ 1387.081707][ T5841] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1387.251636][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 1387.269471][ T5841] usb 5-1: no configurations [ 1387.275012][ T5841] usb 5-1: can't read configurations, error -22 [ 1387.430450][ T5841] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1387.609202][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 1387.628025][ T5841] usb 5-1: no configurations [ 1387.633420][ T5841] usb 5-1: can't read configurations, error -22 [ 1387.649062][ T5841] usb usb5-port1: attempt power cycle [ 1387.730728][ T9850] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1387.954548][ T9850] usb 1-1: Using ep0 maxpacket: 32 [ 1387.977246][ T9850] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1387.989079][ T9850] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1388.019488][ T5841] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1388.045592][ T9850] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1388.055924][ T9850] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1388.064759][ T9850] usb 1-1: Product: syz [ 1388.069209][ T9850] usb 1-1: Manufacturer: syz [ 1388.074294][ T9850] usb 1-1: SerialNumber: syz [ 1388.083803][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 1388.092005][ T5841] usb 5-1: no configurations [ 1388.096900][ T5841] usb 5-1: can't read configurations, error -22 [ 1388.126766][ T9850] appletouch 1-1:1.0: Could not find int-in endpoint [ 1388.134312][ T9850] appletouch 1-1:1.0: probe with driver appletouch failed with error -5 [ 1388.145714][ T9850] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 1388.241288][ T5841] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1388.291532][ T5841] usb 5-1: Using ep0 maxpacket: 16 [ 1388.301220][ T5841] usb 5-1: no configurations [ 1388.309377][ T5841] usb 5-1: can't read configurations, error -22 [ 1388.345833][ T5841] usb usb5-port1: unable to enumerate USB device [ 1388.359301][ T5843] usb 1-1: USB disconnect, device number 7 [ 1389.582272][ T5841] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1389.821139][ T5841] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1389.829607][ T5841] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1389.844138][ T5841] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1389.859101][ T5841] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1389.868743][ T5841] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1390.030171][ T5841] usb 1-1: config 0 descriptor?? [ 1390.059970][ T5841] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1390.525334][ T5841] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1390.695312][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 1390.723565][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1390.736295][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1390.796591][ T5841] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1390.806600][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1390.815432][ T5841] usb 5-1: Product: syz [ 1390.820273][ T5841] usb 5-1: Manufacturer: syz [ 1390.825200][ T5841] usb 5-1: SerialNumber: syz [ 1390.879081][ T5841] appletouch 5-1:1.0: Could not find int-in endpoint [ 1390.886677][ T5841] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 1390.898504][ T5841] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1391.105190][ T30] audit: type=1326 audit(1741929290.474:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12787 comm="syz.4.1981" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfbbd8d169 code=0x0 [ 1391.206829][ T9850] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1391.234394][ T5841] usb 5-1: USB disconnect, device number 20 [ 1391.371208][ T9850] usb 3-1: Using ep0 maxpacket: 32 [ 1391.372050][T12803] loop1: detected capacity change from 0 to 1024 [ 1391.407152][ T9850] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1391.418907][ T9850] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1391.456791][ T9850] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1391.466958][ T9850] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1391.475878][ T9850] usb 3-1: Product: syz [ 1391.484090][ T9850] usb 3-1: Manufacturer: syz [ 1391.488969][ T9850] usb 3-1: SerialNumber: syz [ 1391.611102][ T9850] appletouch 3-1:1.0: Could not find int-in endpoint [ 1391.618273][ T9850] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1391.630833][ T9850] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1391.896753][ T5843] usb 3-1: USB disconnect, device number 97 [ 1392.338452][T12037] hfsplus: b-tree write err: -5, ino 4 [ 1392.674742][ T5843] usb 1-1: USB disconnect, device number 8 [ 1393.741136][ T5843] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1393.925213][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 1393.963422][ T5843] usb 2-1: no configurations [ 1393.968485][ T5843] usb 2-1: can't read configurations, error -22 [ 1394.131261][ T5843] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1394.354482][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 1394.381516][ T5843] usb 2-1: no configurations [ 1394.386444][ T5843] usb 2-1: can't read configurations, error -22 [ 1394.408590][ T5843] usb usb2-port1: attempt power cycle [ 1394.747272][T12831] loop5: detected capacity change from 0 to 1024 [ 1394.771916][ T5843] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1394.823861][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 1394.851061][ T5843] usb 2-1: no configurations [ 1394.855988][ T5843] usb 2-1: can't read configurations, error -22 [ 1395.060704][ T5843] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1395.114647][ T1747] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1395.129685][ T5843] usb 2-1: Using ep0 maxpacket: 16 [ 1395.139699][ T5843] usb 2-1: no configurations [ 1395.145378][ T5843] usb 2-1: can't read configurations, error -22 [ 1395.159768][ T5843] usb usb2-port1: unable to enumerate USB device [ 1395.200360][ T9850] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1395.358171][ T1747] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1395.367449][ T1747] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1395.380344][ T9850] usb 3-1: Using ep0 maxpacket: 32 [ 1395.390326][ T1747] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1395.404039][ T1747] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1395.409633][ T9850] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1395.413741][ T1747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1395.433932][ T9850] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1395.461190][ T1747] usb 1-1: config 0 descriptor?? [ 1395.497678][ T1747] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1395.514127][ T9850] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1395.524116][ T9850] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1395.533295][ T9850] usb 3-1: Product: syz [ 1395.537752][ T9850] usb 3-1: Manufacturer: syz [ 1395.542791][ T9850] usb 3-1: SerialNumber: syz [ 1395.617293][ T4340] hfsplus: b-tree write err: -5, ino 4 [ 1395.633760][ T9850] appletouch 3-1:1.0: Could not find int-in endpoint [ 1395.655207][ T9850] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1395.672318][ T9850] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1395.864738][ T1747] usb 3-1: USB disconnect, device number 98 [ 1396.979775][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1396.987929][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1397.290592][ T1747] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1397.472376][ T1747] usb 6-1: Using ep0 maxpacket: 32 [ 1397.506969][ T1747] usb 6-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1397.518582][ T1747] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1397.648569][ T1747] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1397.659099][ T1747] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1397.668092][ T1747] usb 6-1: Product: syz [ 1397.672708][ T1747] usb 6-1: Manufacturer: syz [ 1397.677584][ T1747] usb 6-1: SerialNumber: syz [ 1397.789946][ T1747] appletouch 6-1:1.0: Could not find int-in endpoint [ 1397.797513][ T1747] appletouch 6-1:1.0: probe with driver appletouch failed with error -5 [ 1397.809915][ T1747] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 1398.031313][ T30] audit: type=1326 audit(1741929297.384:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12850 comm="syz.5.2005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7da4f8d169 code=0x0 [ 1398.140360][ T1747] usb 6-1: USB disconnect, device number 43 [ 1398.425289][ T1747] usb 1-1: USB disconnect, device number 9 [ 1400.561781][ T9850] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 1400.740765][ T9850] usb 3-1: Using ep0 maxpacket: 32 [ 1400.766112][ T9850] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1400.777883][ T9850] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1400.861556][ T9850] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1400.871387][ T9850] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1400.880251][ T9850] usb 3-1: Product: syz [ 1400.884698][ T9850] usb 3-1: Manufacturer: syz [ 1400.889591][ T9850] usb 3-1: SerialNumber: syz [ 1400.967442][ T9850] appletouch 3-1:1.0: Could not find int-in endpoint [ 1400.974950][ T9850] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1400.986564][ T9850] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1401.144863][ T9850] usb 3-1: USB disconnect, device number 99 [ 1401.150379][ T1747] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1401.342401][ T1747] usb 5-1: config index 0 descriptor too short (expected 45, got 36) [ 1401.351256][ T1747] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1401.361996][ T1747] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1401.375734][ T1747] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1401.385886][ T1747] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1401.443024][ T1747] usb 5-1: config 0 descriptor?? [ 1401.482797][ T1747] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1401.704509][T12891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2022'. [ 1403.201262][ T1747] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 1403.382565][ T1747] usb 3-1: Using ep0 maxpacket: 32 [ 1403.407851][ T1747] usb 3-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1403.419392][ T1747] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1403.474100][ T1747] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1403.483713][ T1747] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1403.496593][ T1747] usb 3-1: Product: syz [ 1403.501185][ T1747] usb 3-1: Manufacturer: syz [ 1403.506069][ T1747] usb 3-1: SerialNumber: syz [ 1403.514594][ T5843] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1403.587316][ T1747] appletouch 3-1:1.0: Could not find int-in endpoint [ 1403.596243][ T1747] appletouch 3-1:1.0: probe with driver appletouch failed with error -5 [ 1403.608771][ T1747] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 1403.700346][ T5843] usb 6-1: Using ep0 maxpacket: 16 [ 1403.718659][ T5843] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 1403.727603][ T5843] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1403.736708][ T5843] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1403.745982][ T5843] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 1403.754578][ T5843] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1403.764360][ T5843] usb 6-1: config 0 has no interface number 0 [ 1403.773655][ T5843] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1403.786607][ T5843] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1403.796877][ T5843] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1403.807175][ T5843] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1403.820972][ T5843] usb 6-1: config 0 interface 125 has no altsetting 0 [ 1403.828077][ T5843] usb 6-1: config 0 interface 125 has no altsetting 2 [ 1403.948370][ T30] audit: type=1326 audit(1741929303.274:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12908 comm="syz.2.2028" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2acf78d169 code=0x0 [ 1404.030507][ T1747] usb 3-1: USB disconnect, device number 100 [ 1404.070421][ T5843] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1404.082680][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1404.089652][ T9850] usb 5-1: USB disconnect, device number 21 [ 1404.092093][ T5843] usb 6-1: Product: syz [ 1404.101803][ T5843] usb 6-1: Manufacturer: syz [ 1404.106771][ T5843] usb 6-1: SerialNumber: syz [ 1404.119560][ T5843] usb 6-1: config 0 descriptor?? [ 1404.188039][ T5843] usb 6-1: selecting invalid altsetting 2 [ 1405.244111][T12926] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2035'. [ 1405.283820][ T5843] get_1284_register timeout [ 1405.289067][ T5843] uss720 6-1:0.125: probe with driver uss720 failed with error -5 [ 1405.289425][ C1] usb 6-1: async_complete: urb error -104 [ 1405.304535][ C1] usb 6-1: async_complete: urb error -104 [ 1405.311218][ C1] usb 6-1: async_complete: urb error -104 [ 1405.490463][ T5841] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1405.670625][ T5841] usb 5-1: Using ep0 maxpacket: 32 [ 1405.694973][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1405.706698][ T5841] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1405.787047][ T5841] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 1405.796856][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 1405.805796][ T5841] usb 5-1: Product: syz [ 1405.810371][ T5841] usb 5-1: Manufacturer: syz [ 1405.818342][ T5841] usb 5-1: SerialNumber: syz [ 1405.857541][ T5841] appletouch 5-1:1.0: Could not find int-in endpoint [ 1405.867224][ T5841] appletouch 5-1:1.0: probe with driver appletouch failed with error -5 [ 1405.879740][ T5841] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 1406.069838][ T5841] usb 5-1: USB disconnect, device number 22 [ 1406.911171][ T5841] usb 6-1: USB disconnect, device number 44 [ 1407.708697][ T5843] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1407.909479][ T5843] usb 1-1: config index 0 descriptor too short (expected 45, got 36) [ 1407.919231][ T5843] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1407.930459][ T5843] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1407.945051][ T5843] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1407.954564][ T5843] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1408.073671][ T5843] usb 1-1: config 0 descriptor?? [ 1408.115884][ T5843] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1408.476561][T12961] ===================================================== [ 1408.484334][T12961] BUG: KMSAN: uninit-value in erspan_build_header+0x170/0x2f0 [ 1408.492798][T12961] erspan_build_header+0x170/0x2f0 [ 1408.498298][T12961] erspan_xmit+0x1252/0x1cd0 [ 1408.503336][T12961] dev_hard_start_xmit+0x247/0xa20 [ 1408.508766][T12961] sch_direct_xmit+0x399/0xd40 [ 1408.514034][T12961] __dev_queue_xmit+0x30b9/0x57d0 [ 1408.519305][T12961] __bpf_redirect+0x1511/0x1690 [ 1408.524660][T12961] bpf_clone_redirect+0x37e/0x500 [ 1408.529959][T12961] ___bpf_prog_run+0x13fe/0xe0f0 [ 1408.535487][T12961] __bpf_prog_run512+0xc5/0xf0 [ 1408.540711][T12961] bpf_test_run+0x546/0xd20 [ 1408.545583][T12961] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1408.551485][T12961] bpf_prog_test_run+0x5e5/0xa30 [ 1408.556710][T12961] __sys_bpf+0x6aa/0xd90 [ 1408.561402][T12961] __x64_sys_bpf+0xa0/0xe0 [ 1408.566068][T12961] x64_sys_call+0x329c/0x3c30 [ 1408.571270][T12961] do_syscall_64+0xcd/0x1e0 [ 1408.576103][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.582529][T12961] [ 1408.585014][T12961] Uninit was created at: [ 1408.589596][T12961] kmem_cache_alloc_node_noprof+0x907/0xe00 [ 1408.596014][T12961] kmalloc_reserve+0x13d/0x4a0 [ 1408.601325][T12961] pskb_expand_head+0x21f/0x1b70 [ 1408.606519][T12961] erspan_xmit+0x8e2/0x1cd0 [ 1408.611761][T12961] dev_hard_start_xmit+0x247/0xa20 [ 1408.617636][T12961] sch_direct_xmit+0x399/0xd40 [ 1408.622842][T12961] __dev_queue_xmit+0x30b9/0x57d0 [ 1408.628150][T12961] __bpf_redirect+0x1511/0x1690 [ 1408.633391][T12961] bpf_clone_redirect+0x37e/0x500 [ 1408.638641][T12961] ___bpf_prog_run+0x13fe/0xe0f0 [ 1408.644013][T12961] __bpf_prog_run512+0xc5/0xf0 [ 1408.649073][T12961] bpf_test_run+0x546/0xd20 [ 1408.654004][T12961] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1408.659754][T12961] bpf_prog_test_run+0x5e5/0xa30 [ 1408.665176][T12961] __sys_bpf+0x6aa/0xd90 [ 1408.669860][T12961] __x64_sys_bpf+0xa0/0xe0 [ 1408.674709][T12961] x64_sys_call+0x329c/0x3c30 [ 1408.679617][T12961] do_syscall_64+0xcd/0x1e0 [ 1408.684557][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.690894][T12961] [ 1408.693379][T12961] CPU: 0 UID: 0 PID: 12961 Comm: syz.5.2049 Tainted: G W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 1408.706107][T12961] Tainted: [W]=WARN [ 1408.710240][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1408.720756][T12961] ===================================================== [ 1408.727864][T12961] Disabling lock debugging due to kernel taint [ 1408.734358][T12961] Kernel panic - not syncing: kmsan.panic set ... [ 1408.740953][T12961] CPU: 0 UID: 0 PID: 12961 Comm: syz.5.2049 Tainted: G B W 6.14.0-rc6-syzkaller-00103-g4003c9e78778 #0 [ 1408.753491][T12961] Tainted: [B]=BAD_PAGE, [W]=WARN [ 1408.758667][T12961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1408.768995][T12961] Call Trace: [ 1408.772422][T12961] [ 1408.775497][T12961] dump_stack_lvl+0x216/0x2d0 [ 1408.780440][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1408.786674][T12961] dump_stack+0x1e/0x24 [ 1408.791176][T12961] panic+0x4e2/0xcf0 [ 1408.795373][T12961] ? kmsan_get_metadata+0x61/0x1c0 [ 1408.801049][T12961] kmsan_report+0x2c7/0x2d0 [ 1408.805829][T12961] ? __msan_warning+0x95/0x120 [ 1408.810865][T12961] ? erspan_build_header+0x170/0x2f0 [ 1408.816448][T12961] ? erspan_xmit+0x1252/0x1cd0 [ 1408.821484][T12961] ? dev_hard_start_xmit+0x247/0xa20 [ 1408.826990][T12961] ? sch_direct_xmit+0x399/0xd40 [ 1408.832173][T12961] ? __dev_queue_xmit+0x30b9/0x57d0 [ 1408.837594][T12961] ? __bpf_redirect+0x1511/0x1690 [ 1408.842854][T12961] ? bpf_clone_redirect+0x37e/0x500 [ 1408.848451][T12961] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 1408.854164][T12961] ? __bpf_prog_run512+0xc5/0xf0 [ 1408.859481][T12961] ? bpf_test_run+0x546/0xd20 [ 1408.864446][T12961] ? bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1408.870355][T12961] ? bpf_prog_test_run+0x5e5/0xa30 [ 1408.875920][T12961] ? __sys_bpf+0x6aa/0xd90 [ 1408.880592][T12961] ? __x64_sys_bpf+0xa0/0xe0 [ 1408.885431][T12961] ? x64_sys_call+0x329c/0x3c30 [ 1408.890516][T12961] ? do_syscall_64+0xcd/0x1e0 [ 1408.895454][T12961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.901798][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1408.907989][T12961] ? kfree+0x3ad/0xdb0 [ 1408.912365][T12961] ? pskb_expand_head+0x707/0x1b70 [ 1408.917726][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1408.923193][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1408.929316][T12961] ? pskb_expand_head+0x1909/0x1b70 [ 1408.934766][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1408.940693][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1408.946889][T12961] __msan_warning+0x95/0x120 [ 1408.951735][T12961] erspan_build_header+0x170/0x2f0 [ 1408.957305][T12961] erspan_xmit+0x1252/0x1cd0 [ 1408.962172][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1408.967749][T12961] ? __pfx_erspan_xmit+0x10/0x10 [ 1408.972964][T12961] dev_hard_start_xmit+0x247/0xa20 [ 1408.978452][T12961] sch_direct_xmit+0x399/0xd40 [ 1408.983493][T12961] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1408.990130][T12961] __dev_queue_xmit+0x30b9/0x57d0 [ 1408.995504][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1409.001092][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1409.007178][T12961] ? __dev_queue_xmit+0x3d6/0x57d0 [ 1409.012658][T12961] __bpf_redirect+0x1511/0x1690 [ 1409.017768][T12961] bpf_clone_redirect+0x37e/0x500 [ 1409.023127][T12961] ___bpf_prog_run+0x13fe/0xe0f0 [ 1409.028448][T12961] __bpf_prog_run512+0xc5/0xf0 [ 1409.033589][T12961] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1409.040187][T12961] ? kmsan_internal_poison_memory+0x7d/0x90 [ 1409.046346][T12961] ? kmsan_internal_poison_memory+0x49/0x90 [ 1409.052491][T12961] ? kmsan_slab_alloc+0xdf/0x160 [ 1409.057734][T12961] ? kmem_cache_alloc_noprof+0x915/0xe10 [ 1409.063597][T12961] ? slab_build_skb+0x5c/0x560 [ 1409.068647][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1409.074114][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1409.080206][T12961] ? filter_irq_stacks+0x60/0x1a0 [ 1409.085530][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1409.091000][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1409.097094][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1409.102660][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1409.108755][T12961] ? ktime_get+0x4c4/0x520 [ 1409.113500][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1409.119584][T12961] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1409.125333][T12961] bpf_test_run+0x546/0xd20 [ 1409.130180][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1409.135645][T12961] ? kmsan_internal_set_shadow_origin+0x69/0x100 [ 1409.142252][T12961] ? kmsan_get_metadata+0x13e/0x1c0 [ 1409.147814][T12961] ? bpf_test_run+0x3af/0xd20 [ 1409.152799][T12961] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 1409.158909][T12961] bpf_prog_test_run_skb+0x18fa/0x25a0 [ 1409.164702][T12961] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1409.170789][T12961] bpf_prog_test_run+0x5e5/0xa30 [ 1409.176123][T12961] __sys_bpf+0x6aa/0xd90 [ 1409.180741][T12961] __x64_sys_bpf+0xa0/0xe0 [ 1409.185413][T12961] x64_sys_call+0x329c/0x3c30 [ 1409.190330][T12961] do_syscall_64+0xcd/0x1e0 [ 1409.195170][T12961] ? clear_bhb_loop+0x25/0x80 [ 1409.200142][T12961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.206315][T12961] RIP: 0033:0x7f7da4f8d169 [ 1409.210913][T12961] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1409.230963][T12961] RSP: 002b:00007f7da5d7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1409.239884][T12961] RAX: ffffffffffffffda RBX: 00007f7da51a5fa0 RCX: 00007f7da4f8d169 [ 1409.248178][T12961] RDX: 0000000000000048 RSI: 0000400000000900 RDI: 000000000000000a [ 1409.256443][T12961] RBP: 00007f7da500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.264711][T12961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.272967][T12961] R13: 0000000000000000 R14: 00007f7da51a5fa0 R15: 00007ffc1ef7c018 [ 1409.281167][T12961] [ 1409.284668][T12961] Kernel Offset: disabled [ 1409.289135][T12961] Rebooting in 86400 seconds..