last executing test programs: 11.208824905s ago: executing program 3 (id=2735): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mknod(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="200024f0804030b15c9c"], 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x17, 0x6, @multicast}, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.511314434s ago: executing program 4 (id=2738): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000140)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9.405179062s ago: executing program 1 (id=2739): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x10000, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r5, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 8.914862372s ago: executing program 0 (id=2740): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000e00)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d00)={0xa0, r2, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffc}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffff001}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xf}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000040}, 0x48080) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000ac0)={'ip6gre0\x00', 0x0, 0x29, 0x10, 0x0, 0x4, 0x15, @loopback, @empty, 0x700, 0x7, 0x4000000, 0x8b}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x6, 0x21, &(0x7f0000000900)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x223}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@generic={0x0, 0x0, 0x1, 0x1, 0x5a2a}, @jmp={0x5, 0x1, 0x2, 0xf, 0x9, 0xfffffffffffffff0, 0xfffffffffffffff0}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}, @jmp={0x5, 0x0, 0xd, 0x7, 0x1, 0x100, 0xfffffffffffffffa}, @map_val={0x18, 0x3, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7089}, @printk={@x}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @jmp={0x5, 0x0, 0x7, 0x4, 0x7, 0x1, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000180)='GPL\x00', 0x2, 0x48, &(0x7f0000000a40)=""/72, 0x40f00, 0x8, '\x00', r5, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x3, 0xd, 0x7, 0x400}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000b40)=[r4], &(0x7f0000000b80)=[{0x1, 0x1, 0x7, 0x9}, {0x0, 0x3, 0xa, 0x2}, {0x0, 0x3, 0xc, 0x5}]}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}}, @map_fd={0x18, 0xb, 0x1, 0x0, r9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x132, 0x0, 0x0, 0x0, 0x1ff}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(r4, 0xffffffffffffffff, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r10, 0x4140aecd, &(0x7f0000000040)) syz_usb_connect$cdc_ecm(0x0, 0x5c, &(0x7f00000006c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4a, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x4}, @dmm={0x7}, @mdlm_detail={0x4}]}}}]}}]}}, 0x0) 8.513569215s ago: executing program 1 (id=2741): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000800000000000032200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x10000008}) 8.45712842s ago: executing program 1 (id=2742): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)) mkdir(0x0, 0x0) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) 8.287185524s ago: executing program 3 (id=2743): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r5}, 0x10) mkdir(0x0, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0}, 0x90) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000001840)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 7.369626478s ago: executing program 1 (id=2745): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r0}, &(0x7f0000000e40), &(0x7f0000000e80)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700002000000000000a0000100c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000003400)=""/4089, 0xff6}, {&(0x7f0000000780)=""/214, 0xfffffd5f}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3}}], 0x1, 0x2, 0x0) 7.366775169s ago: executing program 3 (id=2747): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 6.199179534s ago: executing program 4 (id=2749): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) close(0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10000, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1c8}}, 0x0) 5.753032321s ago: executing program 0 (id=2750): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x10000, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000060006000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5426c010880f4000080060005000180000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff240002001bc715ee4868b12a49f4df11bc05475489f6a27c4d6483ad2fa5e45903b0ce851400040002000000ac1414aa00000000000000008c00098028000080060001000a00000014000200ff020000000000000000000000000001050003000000000028000080060001000a000000140002000000000000000000000000000000000105000300030000001c000080060001000200da0008000200e000000105000300000000001c000080060001000200000008000200ac141400050003000000000074000080200004000a004e2200000000fc0000000000000000000000000000000400000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff080003000100000024000200cde20bc0d9b90ac13642d7b66459dd9db5e20b4b16d3d23f2cb03a8aa417dce6080007000000000014000200776730"], 0x1c8}}, 0x0) 5.720032913s ago: executing program 0 (id=2751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000dd000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000096ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setgid(0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x9, 0x8000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000010000004672bcb8e6a30f099665491be652c62bb08896a29beefd1d12276c23bbfae4dae7e006c9d1370634d5c4d6b761aa3f867d15689aa1f75b648625b7210c9ec55b16cb07712488a90719828cf4bb5a633aea5fd12b4732c3a9168148e1d459b1b2018f57b0c932a0a1677b7da1aaf274cf9baf29af7044527a45b30ac3917118b531fdeebdbe5b9e193a51e5cc0c622709222f6b338d114282be936c5c382ec03c3de153d9f0d572902de93881531d4993c70878856dd423c4491ea3145ee22dfe65efee7588bbbe0fa10fb978a6f223789f9314baf51d7de216d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x8021, 0x50, 0xdb, {{0x8, 0x4, 0x0, 0x5, 0x20, 0x68, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, {[@generic={0x88, 0x8, "c574d923bffe"}, @end, @end, @end]}}}}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r4, r2, 0x1, 0x0, 0x4}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f0000000380)=""/87, 0x41, 0x57, 0x1, 0x300000}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2638, 0x0, 0x6, 0x888, r5, 0x9, '\x00', r4, r6, 0x5, 0x15, 0x2, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800086}, 0x10}, 0x90) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r10, 0x40047451, 0x2000000c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) 5.319685786s ago: executing program 4 (id=2752): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000800000000000032200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x10000008}) 5.26878717s ago: executing program 4 (id=2753): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000140)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.487937854s ago: executing program 3 (id=2754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getpgid(0x0) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000021c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_audit(0x10, 0x3, 0x9) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) fcntl$setstatus(r4, 0x4, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000040)={0xfffc, 0x7ff, 0x1ff, 0x246, 0xe, 0x3df}) r6 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) 4.327855727s ago: executing program 1 (id=2755): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000dd000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000096ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setgid(0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x9, 0x8000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000010000004672bcb8e6a30f099665491be652c62bb08896a29beefd1d12276c23bbfae4dae7e006c9d1370634d5c4d6b761aa3f867d15689aa1f75b648625b7210c9ec55b16cb07712488a90719828cf4bb5a633aea5fd12b4732c3a9168148e1d459b1b2018f57b0c932a0a1677b7da1aaf274cf9baf29af7044527a45b30ac3917118b531fdeebdbe5b9e193a51e5cc0c622709222f6b338d114282be936c5c382ec03c3de153d9f0d572902de93881531d4993c70878856dd423c4491ea3145ee22dfe65efee7588bbbe0fa10fb978a6f223789f9314baf51d7de216d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x8021, 0x50, 0xdb, {{0x8, 0x4, 0x0, 0x5, 0x20, 0x68, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, {[@generic={0x88, 0x8, "c574d923bffe"}, @end, @end, @end]}}}}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r4, r2, 0x1, 0x0, 0x4}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f0000000380)=""/87, 0x41, 0x57, 0x1, 0x300000}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2638, 0x0, 0x6, 0x888, r5, 0x9, '\x00', r4, r6, 0x5, 0x15, 0x2, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000800000000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800086}, 0x10}, 0x90) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r10, 0x40047451, 0x2000000c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) 3.699790148s ago: executing program 2 (id=2756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='jbd2_end_commit\x00'}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000040000000f000000180007800800020001"], 0x2c}}, 0x0) 3.603456786s ago: executing program 3 (id=2757): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000dd000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000096ffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r1}, 0x10) setgid(0x0) syz_open_dev$usbfs(&(0x7f0000000200), 0x9, 0x8000) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f00000008c0)={0x44, &(0x7f00000004c0)=ANY=[@ANYBLOB="0000010000004672bcb8e6a30f099665491be652c62bb08896a29beefd1d12276c23bbfae4dae7e006c9d1370634d5c4d6b761aa3f867d15689aa1f75b648625b7210c9ec55b16cb07712488a90719828cf4bb5a633aea5fd12b4732c3a9168148e1d459b1b2018f57b0c932a0a1677b7da1aaf274cf9baf29af7044527a45b30ac3917118b531fdeebdbe5b9e193a51e5cc0c622709222f6b338d114282be936c5c382ec03c3de153d9f0d572902de93881531d4993c70878856dd423c4491ea3145ee22dfe65efee7588bbbe0fa10fb978a6f223789f9314baf51d7de216d3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x700, 0x8021, 0x50, 0xdb, {{0x8, 0x4, 0x0, 0x5, 0x20, 0x68, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}, {[@generic={0x88, 0x8, "c574d923bffe"}, @end, @end, @end]}}}}}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', r4, r2, 0x1, 0x0, 0x4}, 0x48) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@enum={0xb, 0x1, 0x0, 0x6, 0x4, [{0x1, 0x8}]}, @restrict={0xe, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x61, 0x0, 0x5f, 0x5f, 0x2e, 0x30, 0x0]}}, &(0x7f0000000380)=""/87, 0x41, 0x57, 0x1, 0x300000}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x2638, 0x0, 0x6, 0x888, r5, 0x9, '\x00', r4, r6, 0x5, 0x15, 0x2, 0x8}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r9}, 0x10) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x800086}, 0x10}, 0x90) ioctl$TUNSETOFFLOAD(r10, 0xc004743e, 0x20001400) ioctl$TUNSETOFFLOAD(r10, 0x40047451, 0x2000000c) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r11}, 0x10) 3.373335705s ago: executing program 0 (id=2758): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb26fc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000f800b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xa, 0x4, 0xf1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='net_dev_xmit\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0x8, 0x60000000}, 0x50) 3.297762161s ago: executing program 4 (id=2759): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000140)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.82612139s ago: executing program 2 (id=2760): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x1200052, &(0x7f00000003c0), 0x1, 0x7aa, &(0x7f0000000800)="$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") pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000200)='kmem_cache_free\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) getgroups(0x0, 0x0) 2.751554546s ago: executing program 2 (id=2761): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000740)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) close(0xffffffffffffffff) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x0, 0x10000, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) 2.44585046s ago: executing program 0 (id=2762): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='jbd2_end_commit\x00'}, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0106000000000400000009000000240004801300010062726f6164636173742d6c696e6b00000c000780080005"], 0x38}}, 0x0) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000040000000f000000180007800800020001"], 0x2c}}, 0x0) 2.445499451s ago: executing program 2 (id=2763): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000800000000000032200850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x10000008}) 2.381043235s ago: executing program 2 (id=2764): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000140)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) 1.541255685s ago: executing program 0 (id=2765): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r0}, &(0x7f0000000e40), &(0x7f0000000e80)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700002000000000000a0000100c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000003400)=""/4089, 0xff6}, {&(0x7f0000000780)=""/214, 0xfffffd5f}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3}}], 0x1, 0x2, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x22, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x90) gettid() 1.532847805s ago: executing program 1 (id=2766): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000020d0039000000000000b4a518110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000500)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0) 1.074963483s ago: executing program 3 (id=2767): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000000000f9000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ec0)={{r0}, &(0x7f0000000e40), &(0x7f0000000e80)='%pK \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700002000000000000a0000100c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r5, &(0x7f0000000880)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000003400)=""/4089, 0xff6}, {&(0x7f0000000780)=""/214, 0xfffffd5f}, {&(0x7f0000002400)=""/4096, 0x1000}], 0x3}}], 0x1, 0x2, 0x0) r6 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private}}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffffff, &(0x7f0000000180)='./bus\x00', 0x0) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x22, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xec}, 0x90) gettid() 181.099406ms ago: executing program 4 (id=2768): socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x1, 0x2}, 0x20) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_open_dev$usbmon(&(0x7f0000000100), 0x9, 0x101000) (async) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 0s ago: executing program 2 (id=2769): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x7, 0x3, 0x48}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000140)=0x3, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a847500140600fe8000000000000000000000000000bb", @ANYRES32=0x41424344], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002540)=""/216, 0xd8}}], 0x1, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@txtime={{0x18}}], 0x18}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) kernel console output (not intermixed with test programs): 725.884281][ T304] r8152-cfgselector 4-1: Unknown version 0x0000 [ 725.891135][ T304] r8152-cfgselector 4-1: bad CDC descriptors [ 725.914334][ T304] r8152-cfgselector 4-1: Unknown version 0x0000 [ 725.924553][ T304] r8152-cfgselector 4-1: USB disconnect, device number 82 [ 726.204256][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.216020][ T451] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.225914][ T451] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 726.235237][ T451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.254453][ T451] usb 2-1: config 0 descriptor?? [ 726.695231][T11162] loop2: detected capacity change from 0 to 40427 [ 726.724248][ T1156] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 726.757182][T11162] F2FS-fs (loop2): Found nat_bits in checkpoint [ 726.801687][T11162] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 726.944436][ T451] usb 2-1: string descriptor 0 read error: -22 [ 727.064309][ T814] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 727.264294][ T304] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 727.304340][ T814] usb 1-1: Using ep0 maxpacket: 32 [ 727.317156][ T6981] usb 5-1: USB disconnect, device number 79 [ 727.364292][ T1156] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 727.377517][ T1156] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 727.384493][ T451] uclogic 0003:256C:006D.0061: failed retrieving string descriptor #100: -71 [ 727.395662][ T1156] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 727.395850][ T451] uclogic 0003:256C:006D.0061: failed retrieving pen parameters: -71 [ 727.413292][ T1156] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.417790][ T1156] usb 4-1: config 0 descriptor?? [ 727.426429][ T451] uclogic 0003:256C:006D.0061: failed probing pen v1 parameters: -71 [ 727.436057][ T451] uclogic 0003:256C:006D.0061: failed probing parameters: -71 [ 727.443759][ T451] uclogic: probe of 0003:256C:006D.0061 failed with error -71 [ 727.453559][ T451] usb 2-1: USB disconnect, device number 76 [ 727.459721][ T814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.472475][ T814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.482777][ T814] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 727.492505][ T814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.501614][ T814] usb 1-1: config 0 descriptor?? [ 727.514301][ T304] usb 3-1: Using ep0 maxpacket: 32 [ 727.544877][ T814] hub 1-1:0.0: USB hub found [ 727.634467][ T304] usb 3-1: config 227 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 727.647083][ T304] usb 3-1: config 227 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 727.657446][ T304] usb 3-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 727.666952][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 727.764320][ T814] hub 1-1:0.0: 1 port detected [ 727.794310][ T6981] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 728.044229][ T6981] usb 5-1: Using ep0 maxpacket: 32 [ 728.184316][ T6981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.195774][ T6981] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.206981][ T6981] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 728.216755][ T6981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.226127][ T6981] usb 5-1: config 0 descriptor?? [ 728.284942][ T6981] hub 5-1:0.0: USB hub found [ 728.504321][ T6981] hub 5-1:0.0: 1 port detected [ 728.574388][ T814] hub 1-1:0.0: hub_ext_port_status failed (err = 0) [ 728.739252][T11183] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2497'. [ 728.904422][ T1156] usb 1-1: USB disconnect, device number 87 [ 729.074297][ T814] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 729.234968][ T6981] usb 5-1: USB disconnect, device number 80 [ 729.264299][ T1156] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 729.342928][ T814] usb 2-1: Using ep0 maxpacket: 8 [ 729.467287][ T451] usb 4-1: USB disconnect, device number 83 [ 729.475283][ T814] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 729.484237][ T814] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 729.496007][ T814] usb 2-1: config 135 has no interface number 0 [ 729.503325][ T814] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 729.619717][T10107] attempt to access beyond end of device [ 729.619717][T10107] loop2: rw=2049, want=45104, limit=40427 [ 729.635332][ T304] usb 3-1: string descriptor 0 read error: -71 [ 729.674316][ T814] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 729.684282][ T814] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.692461][ T814] usb 2-1: Product: syz [ 729.714204][ T814] usb 2-1: Manufacturer: syz [ 729.719216][ T814] usb 2-1: SerialNumber: syz [ 729.744411][ T304] usbhid 3-1:227.0: can't add hid device: -71 [ 729.751057][ T304] usbhid: probe of 3-1:227.0 failed with error -71 [ 729.761823][ T304] usb 3-1: USB disconnect, device number 90 [ 729.768966][ T814] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 729.778119][T11193] fuse: Unknown parameter '000000000000000000000000x0000000000000008ÿ00000000000000000000' [ 729.789708][ T814] usb 2-1: No valid video chain found. [ 729.800739][T11193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2500'. [ 729.894401][ T451] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 730.045242][ T6981] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 730.134345][ T451] usb 4-1: Using ep0 maxpacket: 32 [ 730.207486][ T304] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 730.314300][ T6981] usb 5-1: Using ep0 maxpacket: 16 [ 730.444331][ T451] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 730.453981][ T451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.462594][ T451] usb 4-1: Product: syz [ 730.467025][ T451] usb 4-1: Manufacturer: syz [ 730.471521][ T451] usb 4-1: SerialNumber: syz [ 730.476918][ T451] usb 4-1: config 0 descriptor?? [ 730.574315][ T304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 730.585873][ T304] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 730.596491][ T304] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 730.605461][ T304] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.614266][ T304] usb 3-1: config 0 descriptor?? [ 730.644395][ T6981] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 730.655724][ T6981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 730.665205][ T6981] usb 5-1: Product: syz [ 730.669547][ T6981] usb 5-1: Manufacturer: syz [ 730.674785][ T6981] usb 5-1: SerialNumber: syz [ 730.680816][ T6981] r8152-cfgselector 5-1: config 0 descriptor?? [ 730.954295][ T304] usbhid 3-1:0.0: can't add hid device: -71 [ 730.960611][ T304] usbhid: probe of 3-1:0.0 failed with error -71 [ 730.970415][ T304] usb 3-1: USB disconnect, device number 91 [ 731.144408][ T6981] r8152-cfgselector 5-1: Unknown version 0x0000 [ 731.164303][ T6981] r8152-cfgselector 5-1: Unknown version 0x0000 [ 731.171922][ T6981] r8152-cfgselector 5-1: bad CDC descriptors [ 731.194612][ T6981] r8152-cfgselector 5-1: Unknown version 0x0000 [ 731.204298][ T451] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:3b:6a:22:da:27 [ 731.204896][ T6981] r8152-cfgselector 5-1: USB disconnect, device number 81 [ 731.217941][ T451] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 731.237243][ T451] usb 4-1: USB disconnect, device number 84 [ 731.364243][ T304] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 731.614268][ T304] usb 3-1: Using ep0 maxpacket: 32 [ 731.737992][ T451] usb 2-1: USB disconnect, device number 77 [ 732.089114][ T304] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 732.101116][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.111103][ T30] audit: type=1400 audit(2000000174.070:584): avc: denied { bind } for pid=11244 comm="syz.3.2508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 732.114004][ T304] usb 3-1: Product: syz [ 732.140668][ T30] audit: type=1400 audit(2000000174.070:585): avc: denied { node_bind } for pid=11244 comm="syz.3.2508" saddr=::ffff:0.0.0.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 732.171949][ T304] usb 3-1: Manufacturer: syz [ 732.177248][ T304] usb 3-1: SerialNumber: syz [ 732.241305][ T304] usb 3-1: config 0 descriptor?? [ 732.407569][T11256] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=11256 comm=syz.0.2509 [ 732.430944][T11256] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2509'. [ 732.444377][T11256] device gretap0 entered promiscuous mode [ 732.643755][ T30] audit: type=1326 audit(2000000174.630:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11259 comm="syz.1.2511" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a680239f9 code=0x0 [ 732.904215][ T6981] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 733.099886][ T304] (unnamed net_device) (uninitialized): Assigned a random MAC address: 82:b0:77:77:ff:0c [ 733.114088][ T304] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 733.122298][ T304] usb 3-1: USB disconnect, device number 92 [ 733.314341][ T6981] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 733.324760][ T6981] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 733.338510][ T6981] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 733.347972][ T6981] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.357292][ T6981] usb 5-1: config 0 descriptor?? [ 733.374247][ T451] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 733.414995][ T6981] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 733.634351][ T451] usb 1-1: Using ep0 maxpacket: 32 [ 733.964372][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 733.975382][ T451] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.985476][ T451] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 733.994775][ T451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 734.008109][ T451] usb 1-1: config 0 descriptor?? [ 734.045622][ T451] hub 1-1:0.0: USB hub found [ 734.264361][ T451] hub 1-1:0.0: 1 port detected [ 734.392020][T11275] overlayfs: failed to resolve './file1': -2 [ 734.467135][T11280] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2517'. [ 734.670234][T11284] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2516'. [ 734.918386][ T304] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 735.024902][ T20] usb 1-1: USB disconnect, device number 88 [ 735.044372][ T451] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 735.164222][ T304] usb 3-1: Using ep0 maxpacket: 8 [ 735.194238][ T6981] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 735.297955][ T304] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 735.329298][ T304] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 735.342795][ T304] usb 3-1: config 135 has no interface number 0 [ 735.349788][ T304] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 735.444246][ T6981] usb 4-1: Using ep0 maxpacket: 16 [ 735.514289][ T304] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 735.523827][ T304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.553564][ T304] usb 3-1: Product: syz [ 735.558068][ T304] usb 3-1: Manufacturer: syz [ 735.563279][ T304] usb 3-1: SerialNumber: syz [ 735.641201][ T20] usb 5-1: USB disconnect, device number 82 [ 735.652919][ T304] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 735.718570][ T304] usb 3-1: No valid video chain found. [ 736.410750][T11295] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2520'. [ 736.695422][ T30] audit: type=1326 audit(2000000178.670:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11302 comm="syz.4.2523" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f05621799f9 code=0x0 [ 736.726649][ T6981] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 736.737143][ T6981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.745322][ T6981] usb 4-1: Product: syz [ 736.749406][ T6981] usb 4-1: Manufacturer: syz [ 736.753976][ T6981] usb 4-1: SerialNumber: syz [ 736.766809][ T6981] r8152-cfgselector 4-1: config 0 descriptor?? [ 737.473178][T11304] usb 3-1: USB disconnect, device number 93 [ 737.536953][T11319] overlayfs: failed to resolve './file1': -2 [ 738.214254][ T6981] r8152-cfgselector 4-1: Unknown version 0x0000 [ 738.244488][ T6981] r8152-cfgselector 4-1: Unknown version 0x0000 [ 738.257853][ T6981] r8152-cfgselector 4-1: bad CDC descriptors [ 738.294263][ T6981] r8152-cfgselector 4-1: Unknown version 0x0000 [ 738.311829][ T6981] r8152-cfgselector 4-1: USB disconnect, device number 85 [ 738.433377][ T304] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 739.464239][ T6981] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 739.614317][ T304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.629127][ T304] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 739.644220][T11304] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 739.656346][ T304] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 739.674895][ T304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.693831][ T304] usb 1-1: config 0 descriptor?? [ 739.734257][ T6981] usb 4-1: Using ep0 maxpacket: 32 [ 739.735230][ T304] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 739.924340][T11304] usb 3-1: Using ep0 maxpacket: 32 [ 740.044388][ T6981] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 740.053597][ T6981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.061794][ T6981] usb 4-1: Product: syz [ 740.066004][ T6981] usb 4-1: Manufacturer: syz [ 740.070531][ T6981] usb 4-1: SerialNumber: syz [ 740.076452][ T6981] usb 4-1: config 0 descriptor?? [ 740.104346][ T304] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 740.239537][ T30] audit: type=1326 audit(2000000182.230:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.1.2539" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a680239f9 code=0x0 [ 740.264475][T11304] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 740.273675][T11304] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 740.281591][T11304] usb 3-1: Product: syz [ 740.285875][T11304] usb 3-1: Manufacturer: syz [ 740.290729][T11304] usb 3-1: SerialNumber: syz [ 740.299720][T11304] usb 3-1: config 0 descriptor?? [ 740.464333][ T304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 740.475428][ T304] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 740.489016][ T304] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 740.499198][ T304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 740.508813][ T304] usb 5-1: config 0 descriptor?? [ 740.545000][ T304] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 740.814309][ T6981] (unnamed net_device) (uninitialized): Assigned a random MAC address: fe:6d:da:25:09:ee [ 740.826489][ T6981] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 740.833841][ T6981] usb 4-1: USB disconnect, device number 86 [ 741.044351][T11304] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9a:b7:93:50:1b:63 [ 741.056697][T11304] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 741.064675][T11304] usb 3-1: USB disconnect, device number 94 [ 741.324583][ T304] usb 1-1: USB disconnect, device number 89 [ 741.614296][T11304] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 741.928402][T11406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2544'. [ 742.144449][ T304] usb 5-1: USB disconnect, device number 83 [ 742.334490][T11304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.345759][T11304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.788614][T11304] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 742.804225][T11304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.835305][T11304] usb 4-1: config 0 descriptor?? [ 742.952353][T11421] FAULT_INJECTION: forcing a failure. [ 742.952353][T11421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.968628][T11421] CPU: 1 PID: 11421 Comm: syz.4.2548 Not tainted 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 742.979845][T11421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 742.990568][T11421] Call Trace: [ 742.994162][T11421] [ 742.997194][T11421] dump_stack_lvl+0x151/0x1b7 [ 743.002559][T11421] ? io_uring_drop_tctx_refs+0x190/0x190 [ 743.008371][T11421] dump_stack+0x15/0x17 [ 743.012707][T11421] should_fail+0x3c6/0x510 [ 743.017313][T11421] should_fail_usercopy+0x1a/0x20 [ 743.022519][T11421] strncpy_from_user+0x24/0x2d0 [ 743.027633][T11421] ? kmem_cache_alloc+0xf5/0x200 [ 743.032496][T11421] getname_flags+0xf2/0x520 [ 743.037066][T11421] __x64_sys_symlinkat+0x8b/0xb0 [ 743.042334][T11421] do_syscall_64+0x3d/0xb0 [ 743.046673][T11421] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 743.053010][T11421] RIP: 0033:0x7f05621799f9 [ 743.057477][T11421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.078809][T11421] RSP: 002b:00007f0560df9038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 743.088059][T11421] RAX: ffffffffffffffda RBX: 00007f0562307f80 RCX: 00007f05621799f9 [ 743.096696][T11421] RDX: 0000000020000080 RSI: 0000000000000009 RDI: 0000000020000040 [ 743.105227][T11421] RBP: 00007f0560df9090 R08: 0000000000000000 R09: 0000000000000000 [ 743.113906][T11421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 743.123754][T11421] R13: 0000000000000000 R14: 00007f0562307f80 R15: 00007ffeca7b94a8 [ 743.132691][T11421] [ 743.181324][ T30] audit: type=1326 audit(2000000185.170:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11423 comm="syz.1.2550" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a680239f9 code=0x0 [ 743.534219][ T20] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 743.564277][ T387] Bluetooth: hci0: command 0x1003 tx timeout [ 743.570340][ T47] Bluetooth: hci0: sending frame failed (-49) [ 743.594385][T11304] usb 4-1: string descriptor 0 read error: -22 [ 743.671622][T11434] overlayfs: failed to resolve './file1': -2 [ 743.837660][ T20] usb 5-1: Using ep0 maxpacket: 32 [ 744.144341][T11304] uclogic 0003:256C:006D.0062: failed retrieving string descriptor #100: -71 [ 744.153878][T11304] uclogic 0003:256C:006D.0062: failed retrieving pen parameters: -71 [ 744.164204][T11304] uclogic 0003:256C:006D.0062: failed probing pen v1 parameters: -71 [ 744.173362][T11304] uclogic 0003:256C:006D.0062: failed probing parameters: -71 [ 744.182000][ T20] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 744.191637][T11304] uclogic: probe of 0003:256C:006D.0062 failed with error -71 [ 744.199762][ T20] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 744.210028][T11304] usb 4-1: USB disconnect, device number 87 [ 744.216074][ T20] usb 5-1: Product: syz [ 744.223243][ T20] usb 5-1: Manufacturer: syz [ 744.235800][ T20] usb 5-1: SerialNumber: syz [ 744.242986][ T20] usb 5-1: config 0 descriptor?? [ 745.689847][ T304] Bluetooth: hci0: command 0x1001 tx timeout [ 745.710658][T10616] Bluetooth: hci0: sending frame failed (-49) [ 745.744354][ T20] (unnamed net_device) (uninitialized): Assigned a random MAC address: 82:ef:2a:d3:65:f7 [ 745.758564][ T20] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 745.791390][ T20] usb 5-1: USB disconnect, device number 84 [ 746.225277][T11457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2558'. [ 746.334420][T11304] Bluetooth: hci1: command 0x1003 tx timeout [ 746.340785][T10616] Bluetooth: hci1: sending frame failed (-49) [ 747.860358][T11512] overlayfs: failed to resolve './file1': -2 [ 747.870421][T11511] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2565'. [ 747.940678][ T2284] Bluetooth: hci0: command 0x1009 tx timeout [ 748.284235][ T2284] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 748.387866][T11304] Bluetooth: hci1: command 0x1001 tx timeout [ 748.395348][T10616] Bluetooth: hci1: sending frame failed (-49) [ 748.408893][T11518] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2567'. [ 748.604277][ T2284] usb 5-1: Using ep0 maxpacket: 8 [ 748.654253][ T39] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 748.734422][ T2284] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 748.743357][ T2284] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 748.753757][ T2284] usb 5-1: config 135 has no interface number 0 [ 748.754232][ T304] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 748.760000][ T2284] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 748.974372][ T2284] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 748.983803][ T2284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.992558][ T2284] usb 5-1: Product: syz [ 748.996911][ T2284] usb 5-1: Manufacturer: syz [ 749.001775][ T2284] usb 5-1: SerialNumber: syz [ 749.004221][ T304] usb 2-1: Using ep0 maxpacket: 8 [ 749.014376][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.026177][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.036385][ T39] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 749.046916][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.055367][ T2284] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 749.055673][ T2284] usb 5-1: No valid video chain found. [ 749.063264][ T39] usb 4-1: config 0 descriptor?? [ 749.124264][ T304] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 749.133699][ T304] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 749.144881][ T304] usb 2-1: config 135 has no interface number 0 [ 749.151102][ T304] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.334339][ T304] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 749.344645][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 749.352517][ T304] usb 2-1: Product: syz [ 749.356849][ T304] usb 2-1: Manufacturer: syz [ 749.361564][ T304] usb 2-1: SerialNumber: syz [ 749.405024][ T304] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 749.411260][ T304] usb 2-1: No valid video chain found. [ 749.744286][ T39] usb 4-1: string descriptor 0 read error: -22 [ 750.174241][ T39] uclogic 0003:256C:006D.0063: failed retrieving string descriptor #100: -71 [ 750.188895][ T39] uclogic 0003:256C:006D.0063: failed retrieving pen parameters: -71 [ 750.199618][ T39] uclogic 0003:256C:006D.0063: failed probing pen v1 parameters: -71 [ 750.208598][ T39] uclogic 0003:256C:006D.0063: failed probing parameters: -71 [ 750.217912][ T39] uclogic: probe of 0003:256C:006D.0063 failed with error -71 [ 750.228575][ T39] usb 4-1: USB disconnect, device number 88 [ 750.434222][ T20] Bluetooth: hci1: command 0x1009 tx timeout [ 750.676318][ T30] audit: type=1400 audit(2000000192.670:590): avc: denied { validate_trans } for pid=11523 comm="syz.3.2568" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 750.815984][ T20] usb 5-1: USB disconnect, device number 85 [ 751.106980][T11535] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2569'. [ 751.991673][ T451] usb 2-1: USB disconnect, device number 78 [ 752.008763][ T45] tipc: Left network mode [ 752.352797][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.361330][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.368912][T11549] device bridge_slave_0 entered promiscuous mode [ 752.378641][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.386943][T11549] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.396885][T11549] device bridge_slave_1 entered promiscuous mode [ 752.445709][T11549] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.453053][T11549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.460257][T11549] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.467745][T11549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.484315][ T39] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 752.489934][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 752.500562][ T2284] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.508930][ T2284] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.525641][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 752.534026][ T304] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.541379][ T304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 752.549286][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 752.557700][ T304] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.564576][ T304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 752.572563][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 752.592607][T11549] device veth0_vlan entered promiscuous mode [ 752.599920][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 752.608614][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 752.614307][T11304] usb 5-1: new high-speed USB device number 86 using dummy_hcd [ 752.616959][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 752.632429][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 752.640162][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 752.656814][T11549] device veth1_macvtap entered promiscuous mode [ 752.664391][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 752.682045][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 752.691878][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 752.704237][ T451] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 752.724782][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 752.864449][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.892671][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.904868][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 752.916090][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.964635][ T39] usb 4-1: config 0 descriptor?? [ 753.017064][ T45] device bridge_slave_1 left promiscuous mode [ 753.033610][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 753.038180][ T39] hub 4-1:0.0: USB hub found [ 753.045702][ T45] device bridge_slave_0 left promiscuous mode [ 753.051853][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 753.059591][ T45] device veth1_macvtap left promiscuous mode [ 753.065621][ T45] device veth0_vlan left promiscuous mode [ 753.124301][ T451] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.136000][ T451] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 753.150587][ T451] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 753.160279][ T451] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.171027][ T451] usb 2-1: config 0 descriptor?? [ 753.215098][ T451] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 753.224476][ T39] hub 4-1:0.0: 1 port detected [ 753.234437][T11304] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.245302][T11304] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 753.259287][T11304] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 753.270329][T11304] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 753.279992][T11304] usb 5-1: config 0 descriptor?? [ 753.345597][T11304] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 753.934975][ T20] usb 4-1: USB disconnect, device number 89 [ 753.954476][ T39] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 754.013658][T11570] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.021962][T11570] bridge0: port 1(bridge_slave_0) entered disabled state [ 754.030202][T11570] device bridge_slave_0 entered promiscuous mode [ 754.039716][T11570] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.047330][T11570] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.055560][T11570] device bridge_slave_1 entered promiscuous mode [ 754.119970][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 754.128025][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 754.144702][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 754.153541][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 754.162254][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 754.169452][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 754.177278][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 754.186683][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 754.195684][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 754.204169][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 754.211490][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 754.221868][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 754.230474][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 754.247836][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 754.262711][T11570] device veth0_vlan entered promiscuous mode [ 754.270563][T11304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 754.300537][T11304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 754.308569][T11304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 754.327356][T11570] device veth1_macvtap entered promiscuous mode [ 754.335290][T11304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 754.347212][ T45] tipc: Left network mode [ 754.350271][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 754.362237][T11304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 754.503456][T11582] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2580'. [ 754.608732][ T814] usb 5-1: USB disconnect, device number 86 [ 754.744339][T11304] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 754.978140][ T45] device bridge_slave_1 left promiscuous mode [ 754.985357][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 754.993581][ T451] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 755.001538][ T45] device bridge_slave_0 left promiscuous mode [ 755.008728][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 755.017044][ T45] device veth1_macvtap left promiscuous mode [ 755.023175][ T45] device veth0_vlan left promiscuous mode [ 755.064324][ T39] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 755.074432][T11304] usb 1-1: Using ep0 maxpacket: 16 [ 755.137911][ T20] usb 2-1: USB disconnect, device number 79 [ 755.424786][T11304] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 755.471880][T11304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.480856][T11304] usb 1-1: Product: syz [ 755.485377][T11304] usb 1-1: Manufacturer: syz [ 755.490184][T11304] usb 1-1: SerialNumber: syz [ 755.494235][ T451] usb 3-1: Using ep0 maxpacket: 32 [ 755.501296][T11304] r8152-cfgselector 1-1: config 0 descriptor?? [ 755.514360][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 755.614374][ T451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 755.626314][ T451] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 755.636948][ T39] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 755.646057][ T451] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 755.656214][ T39] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 755.666771][ T451] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 755.674819][ T39] usb 4-1: config 135 has no interface number 0 [ 755.681534][ T39] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 755.696802][ T451] usb 3-1: config 0 descriptor?? [ 755.735008][ T451] hub 3-1:0.0: USB hub found [ 755.854347][ T39] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 755.864568][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.873285][ T39] usb 4-1: Product: syz [ 755.878294][ T39] usb 4-1: Manufacturer: syz [ 755.882927][ T39] usb 4-1: SerialNumber: syz [ 755.926759][ T39] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 755.933434][ T39] usb 4-1: No valid video chain found. [ 755.954300][ T451] hub 3-1:0.0: 1 port detected [ 756.664976][ T6981] usb 3-1: USB disconnect, device number 95 [ 756.684241][ T304] hub 3-1:0.0: hub_ext_port_status failed (err = -71) [ 756.824313][T11304] r8152-cfgselector 1-1: Unknown version 0x0000 [ 756.835068][ T20] Bluetooth: hci0: command 0x1003 tx timeout [ 756.842264][T10616] Bluetooth: hci0: sending frame failed (-49) [ 756.844761][T11304] r8152-cfgselector 1-1: Unknown version 0x0000 [ 756.856502][T11304] r8152-cfgselector 1-1: bad CDC descriptors [ 756.874334][T11304] r8152-cfgselector 1-1: Unknown version 0x0000 [ 756.881915][T11304] r8152-cfgselector 1-1: USB disconnect, device number 90 [ 757.355921][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2584'. [ 757.365609][T11602] tipc: Started in network mode [ 757.371125][T11602] tipc: Node identity 1, cluster identity 4711 [ 757.377603][T11602] tipc: Node number set to 1 [ 757.542655][T11304] Bluetooth: hci1: command 0x1003 tx timeout [ 757.547864][ T451] usb 4-1: USB disconnect, device number 90 [ 757.556020][T10616] Bluetooth: hci1: sending frame failed (-49) [ 757.753974][T11610] overlayfs: failed to resolve './file1': -2 [ 758.087580][T11615] loop2: detected capacity change from 0 to 512 [ 758.106402][T11615] EXT4-fs (loop2): Test dummy encryption mode enabled [ 758.117563][T11615] EXT4-fs error (device loop2): __ext4_iget:4892: inode #11: block 1: comm syz.2.2588: invalid block [ 758.129314][T11615] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2588: couldn't read orphan inode 11 (err -117) [ 758.144704][T11615] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,user_xattr,max_dir_size_kb=0x0000000000000009,inode_readahead_blks=0x0000000000010000,jqfmt=vfsv0,delalloc,inode_readahead_blks=0x0000000000200000,noauto_da_alloc,test_dummy_encryption,,errors=continue. Quota mode: none. [ 758.227808][T11619] overlayfs: failed to resolve './file1': -2 [ 758.295678][T11615] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #2: comm syz.2.2588: corrupted inode contents [ 758.314624][T11615] EXT4-fs error (device loop2): add_dirent_to_buf:2213: inode #2: comm syz.2.2588: mark_inode_dirty error [ 758.408355][T11570] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #2: comm syz-executor: corrupted inode contents [ 758.439785][T11570] EXT4-fs error (device loop2): __ext4_unlink:3281: inode #2: comm syz-executor: mark_inode_dirty error [ 758.514915][T11570] EXT4-fs error (device loop2): ext4_do_update_inode:5191: inode #2: comm syz-executor: corrupted inode contents [ 758.529011][ T345] tipc: Left network mode [ 758.544279][T11570] EXT4-fs error (device loop2): ext4_dirty_inode:6024: inode #2: comm syz-executor: mark_inode_dirty error [ 758.867270][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.874536][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 758.882208][T11625] device bridge_slave_0 entered promiscuous mode [ 758.889374][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.896659][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 758.903822][T11625] device bridge_slave_1 entered promiscuous mode [ 758.924236][ T451] Bluetooth: hci0: command 0x1001 tx timeout [ 758.924290][ T39] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 758.939113][T10616] Bluetooth: hci0: sending frame failed (-49) [ 758.975318][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.983220][T11625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.990718][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.997713][T11625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.018861][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 759.027867][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.036061][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.049008][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 759.057970][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 759.065383][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 759.086166][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 759.095155][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 759.104757][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 759.111979][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 759.121136][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 759.124306][T11304] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 759.129700][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 759.147553][ T345] device bridge_slave_1 left promiscuous mode [ 759.153829][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.161768][ T345] device bridge_slave_0 left promiscuous mode [ 759.168491][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 759.177168][ T345] device veth1_macvtap left promiscuous mode [ 759.183551][ T345] device veth0_vlan left promiscuous mode [ 759.204315][ T39] usb 4-1: Using ep0 maxpacket: 32 [ 759.251517][T11625] device veth0_vlan entered promiscuous mode [ 759.258945][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 759.267249][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 759.274798][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 759.287861][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 759.300002][T11625] device veth1_macvtap entered promiscuous mode [ 759.315406][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 759.324335][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.325388][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 759.343747][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.354048][ T39] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 759.363981][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.376057][ T39] usb 4-1: config 0 descriptor?? [ 759.435194][ T39] hub 4-1:0.0: USB hub found [ 759.634205][ T814] Bluetooth: hci1: command 0x1001 tx timeout [ 759.645256][T10616] Bluetooth: hci1: sending frame failed (-49) [ 759.674394][ T39] hub 4-1:0.0: 1 port detected [ 759.688608][T11304] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.699651][T11304] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 759.713276][T11304] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 759.722457][T11304] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.731435][T11304] usb 1-1: config 0 descriptor?? [ 759.774998][T11304] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 760.514325][ T39] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 760.834683][T11304] usb 4-1: USB disconnect, device number 91 [ 761.004367][ T39] Bluetooth: hci0: command 0x1009 tx timeout [ 761.714243][ T814] Bluetooth: hci1: command 0x1009 tx timeout [ 761.867809][T11304] usb 1-1: USB disconnect, device number 91 [ 761.886995][T11651] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2597'. [ 762.142043][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2598'. [ 762.151129][T11657] tipc: Started in network mode [ 762.156304][T11657] tipc: Node identity 1, cluster identity 4711 [ 762.162666][T11657] tipc: Node number set to 1 [ 762.568992][T11664] overlayfs: failed to resolve './file1': -2 [ 762.654209][T11304] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 762.886426][T11666] loop2: detected capacity change from 0 to 128 [ 762.894297][T11304] usb 1-1: Using ep0 maxpacket: 8 [ 763.024383][T11304] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 763.033675][T11304] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 763.044186][T11304] usb 1-1: config 135 has no interface number 0 [ 763.050547][T11304] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 763.274269][ T814] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 763.274286][T11304] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 763.274316][T11304] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 763.299392][T11304] usb 1-1: Product: syz [ 763.303400][T11304] usb 1-1: Manufacturer: syz [ 763.308072][T11304] usb 1-1: SerialNumber: syz [ 763.345206][T11304] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 763.351720][T11304] usb 1-1: No valid video chain found. [ 763.674276][ T814] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.689648][ T814] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 763.700870][ T814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.711366][ T814] usb 3-1: config 0 descriptor?? [ 763.755007][ T814] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 764.474237][ T814] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 764.734243][ T814] usb 4-1: Using ep0 maxpacket: 32 [ 764.854366][ T814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.866401][ T814] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.877025][ T814] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 764.887283][ T814] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.897779][ T39] usb 1-1: USB disconnect, device number 92 [ 764.904454][ T814] usb 4-1: config 0 descriptor?? [ 764.984704][ T814] hub 4-1:0.0: USB hub found [ 765.012429][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.019926][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.027876][T11682] device bridge_slave_0 entered promiscuous mode [ 765.035043][T11682] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.042003][T11682] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.052058][T11682] device bridge_slave_1 entered promiscuous mode [ 765.440402][ T814] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 765.482316][T11682] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.489863][T11682] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.498238][T11682] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.506088][T11682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.529123][ T6981] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.538787][ T6981] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.549345][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 765.557126][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 765.576962][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 765.585854][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.593182][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 765.604755][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 765.613665][ T6981] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.621424][ T6981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 765.657470][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 765.676258][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 765.703812][T11692] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.712037][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.721429][T11692] device bridge_slave_0 entered promiscuous mode [ 765.732566][T11692] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.739858][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.747781][T11692] device bridge_slave_1 entered promiscuous mode [ 765.880472][ T814] usbhid 4-1:0.0: can't add hid device: -71 [ 765.887477][ T814] usbhid: probe of 4-1:0.0 failed with error -71 [ 765.911773][T11304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 765.932832][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 765.942461][ T814] usb 4-1: USB disconnect, device number 92 [ 765.951887][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 765.969293][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 766.138000][T11682] device veth0_vlan entered promiscuous mode [ 766.236734][ T451] usb 3-1: USB disconnect, device number 96 [ 766.296902][T11682] device veth1_macvtap entered promiscuous mode [ 766.305623][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 766.315102][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 766.361635][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 766.405713][ T45] device bridge_slave_1 left promiscuous mode [ 766.414812][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.423212][ T45] device bridge_slave_0 left promiscuous mode [ 766.431065][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.439991][ T45] device veth1_macvtap left promiscuous mode [ 766.446481][ T45] device veth0_vlan left promiscuous mode [ 766.864823][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 766.873292][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 766.885369][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 766.894101][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 766.911364][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 766.919220][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 766.932948][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 766.941478][T11304] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 766.950221][ T6981] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 766.959171][ T6981] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.966831][ T6981] bridge0: port 1(bridge_slave_0) entered forwarding state [ 766.976318][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 766.984505][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 766.993067][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 767.002026][ T2284] bridge0: port 2(bridge_slave_1) entered blocking state [ 767.008943][ T2284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 767.022551][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 767.031412][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 767.041228][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 767.049962][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 767.068130][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 767.077351][ T814] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 767.086055][ T1591] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 767.101094][T11692] device veth0_vlan entered promiscuous mode [ 767.108649][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 767.117327][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 767.126423][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 767.135541][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 767.149502][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 767.158986][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 767.191417][T11692] device veth1_macvtap entered promiscuous mode [ 767.194284][T11304] usb 4-1: Using ep0 maxpacket: 16 [ 767.204188][ T451] usb 5-1: new high-speed USB device number 87 using dummy_hcd [ 767.215876][ T45] tipc: Left network mode [ 767.219901][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 767.228636][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 767.238188][ T304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 767.253931][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 767.262537][ T2284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 767.324302][T11304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 767.335749][T11304] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 767.344179][ T1591] usb 1-1: Using ep0 maxpacket: 32 [ 767.345917][T11304] usb 4-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 767.360574][T11304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 767.371042][T11304] usb 4-1: config 0 descriptor?? [ 767.444282][ T451] usb 5-1: Using ep0 maxpacket: 16 [ 767.514241][ T2284] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 767.564301][ T304] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 767.664318][ T1591] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 767.674396][ T1591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.682731][ T1591] usb 1-1: Product: syz [ 767.688740][ T1591] usb 1-1: Manufacturer: syz [ 767.693588][ T1591] usb 1-1: SerialNumber: syz [ 767.694053][ T45] device bridge_slave_1 left promiscuous mode [ 767.703316][ T1591] usb 1-1: config 0 descriptor?? [ 767.706067][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 767.718594][ T45] device bridge_slave_0 left promiscuous mode [ 767.725960][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 767.734974][ T45] device veth1_macvtap left promiscuous mode [ 767.741183][ T45] device veth0_vlan left promiscuous mode [ 767.764238][ T2284] usb 3-1: Using ep0 maxpacket: 32 [ 767.764341][ T451] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 767.779027][ T451] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 767.787052][ T451] usb 5-1: Product: syz [ 767.791068][ T451] usb 5-1: Manufacturer: syz [ 767.795650][ T451] usb 5-1: SerialNumber: syz [ 767.802986][ T451] r8152-cfgselector 5-1: config 0 descriptor?? [ 767.809188][ T304] usb 2-1: Using ep0 maxpacket: 32 [ 767.934558][T11304] usbhid 4-1:0.0: can't add hid device: -71 [ 767.941010][T11304] usbhid: probe of 4-1:0.0 failed with error -71 [ 767.949511][T11304] usb 4-1: USB disconnect, device number 93 [ 768.094260][ T2284] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 768.094289][ T304] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 768.103865][ T2284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.103900][ T2284] usb 3-1: Product: syz [ 768.103926][ T2284] usb 3-1: Manufacturer: syz [ 768.103941][ T2284] usb 3-1: SerialNumber: syz [ 768.124238][ T304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 768.146007][ T304] usb 2-1: Product: syz [ 768.150340][ T304] usb 2-1: Manufacturer: syz [ 768.155047][ T2284] usb 3-1: config 0 descriptor?? [ 768.160957][ T304] usb 2-1: SerialNumber: syz [ 768.166856][ T304] usb 2-1: config 0 descriptor?? [ 768.254268][ T451] r8152-cfgselector 5-1: Unknown version 0x0000 [ 768.275134][ T451] r8152-cfgselector 5-1: Unknown version 0x0000 [ 768.281965][ T451] r8152-cfgselector 5-1: bad CDC descriptors [ 768.304358][ T451] r8152-cfgselector 5-1: Unknown version 0x0000 [ 768.312392][ T451] r8152-cfgselector 5-1: USB disconnect, device number 87 [ 768.404266][ T1591] (unnamed net_device) (uninitialized): Assigned a random MAC address: 52:77:4b:58:9b:d0 [ 768.417826][ T1591] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 768.426252][ T1591] usb 1-1: USB disconnect, device number 93 [ 768.904234][ T304] (unnamed net_device) (uninitialized): Assigned a random MAC address: 22:20:5d:da:39:98 [ 768.957900][ T304] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 768.966302][ T304] usb 2-1: USB disconnect, device number 80 [ 768.984328][ T2284] (unnamed net_device) (uninitialized): Assigned a random MAC address: ba:85:87:68:85:6e [ 768.997762][ T2284] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 769.021174][ T2284] usb 3-1: USB disconnect, device number 97 [ 769.114449][ T451] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 769.535971][ T451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.547406][ T451] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.558955][ T451] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 769.569524][ T451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.579073][ T451] usb 5-1: config 0 descriptor?? [ 770.004230][T11304] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 770.304282][ T1591] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 770.324286][ T39] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 770.347307][ T30] audit: type=1326 audit(2000000212.340:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.1.2621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f820261f9f9 code=0x0 [ 770.384423][ T451] usb 5-1: string descriptor 0 read error: -22 [ 770.404379][T11304] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 770.418221][T11304] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 770.428640][T11304] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.438893][T11304] usb 4-1: config 0 descriptor?? [ 770.474896][T11304] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 770.544263][ T1591] usb 3-1: Using ep0 maxpacket: 32 [ 770.564275][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 770.664416][ T1591] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.677315][ T1591] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.687238][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.699614][ T1591] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 770.708661][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.719595][ T1591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.728161][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 770.738259][ T1591] usb 3-1: config 0 descriptor?? [ 770.743209][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.752677][ T39] usb 1-1: config 0 descriptor?? [ 770.775027][ T1591] hub 3-1:0.0: USB hub found [ 770.794865][ T39] hub 1-1:0.0: USB hub found [ 770.824254][ T451] uclogic 0003:256C:006D.0064: failed retrieving string descriptor #100: -71 [ 770.833511][ T451] uclogic 0003:256C:006D.0064: failed retrieving pen parameters: -71 [ 770.841647][ T451] uclogic 0003:256C:006D.0064: failed probing pen v1 parameters: -71 [ 770.849830][ T451] uclogic 0003:256C:006D.0064: failed probing parameters: -71 [ 770.858326][ T451] uclogic: probe of 0003:256C:006D.0064 failed with error -71 [ 770.867924][ T451] usb 5-1: USB disconnect, device number 88 [ 771.014412][ T39] hub 1-1:0.0: 1 port detected [ 771.074446][ T1591] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 771.379667][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2622'. [ 771.389654][T11777] tipc: Started in network mode [ 771.395079][T11777] tipc: Node identity 1, cluster identity 4711 [ 771.402228][T11777] tipc: Node number set to 1 [ 771.514733][ T1591] usbhid 3-1:0.0: can't add hid device: -71 [ 771.563891][ T1591] usbhid: probe of 3-1:0.0 failed with error -71 [ 771.665275][ T1591] usb 3-1: USB disconnect, device number 98 [ 771.734970][T11304] usb 1-1: USB disconnect, device number 94 [ 771.754259][ T451] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 771.818379][ T451] usb 4-1: USB disconnect, device number 94 [ 772.743576][T11792] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2626'. [ 773.085598][ T451] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 773.201479][T11796] loop1: detected capacity change from 0 to 2048 [ 773.254467][T11796] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 773.294272][ T30] audit: type=1326 audit(2000000215.280:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11795 comm="syz.1.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820261f9f9 code=0x7ffc0000 [ 773.318692][ T30] audit: type=1326 audit(2000000215.280:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11795 comm="syz.1.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f820261f9f9 code=0x7ffc0000 [ 773.342921][ T30] audit: type=1326 audit(2000000215.280:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11795 comm="syz.1.2628" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f820261f9f9 code=0x7ffc0000 [ 773.608359][ T451] usb 4-1: Using ep0 maxpacket: 16 [ 773.764205][ T387] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 773.914414][ T451] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 773.923926][ T451] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.931964][ T451] usb 4-1: Product: syz [ 773.935987][ T451] usb 4-1: Manufacturer: syz [ 773.940667][ T451] usb 4-1: SerialNumber: syz [ 773.946504][ T451] r8152-cfgselector 4-1: config 0 descriptor?? [ 773.986074][ T30] audit: type=1326 audit(2000000215.980:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11813 comm="syz.0.2632" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2ca9dea9f9 code=0x0 [ 774.014347][ T387] usb 3-1: Using ep0 maxpacket: 32 [ 774.324281][ T451] r8152-cfgselector 4-1: Unknown version 0x0000 [ 774.344364][ T451] r8152-cfgselector 4-1: Unknown version 0x0000 [ 774.350892][ T451] r8152-cfgselector 4-1: bad CDC descriptors [ 774.364360][ T387] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 774.374325][ T387] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.374321][ T451] r8152-cfgselector 4-1: Unknown version 0x0000 [ 774.375448][ T451] r8152-cfgselector 4-1: USB disconnect, device number 95 [ 774.385614][ T387] usb 3-1: Product: syz [ 774.390283][ T39] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 774.398378][ T387] usb 3-1: Manufacturer: syz [ 774.413962][ T387] usb 3-1: SerialNumber: syz [ 774.422896][ T387] usb 3-1: config 0 descriptor?? [ 774.564273][T11304] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 774.634256][ T39] usb 5-1: Using ep0 maxpacket: 32 [ 775.006670][T11828] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2635'. [ 775.016555][T11828] tipc: Started in network mode [ 775.022144][T11828] tipc: Node identity 1, cluster identity 4711 [ 775.028278][T11828] tipc: Node number set to 1 [ 775.104588][ T39] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 775.140726][ T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.141844][T11304] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.149465][ T39] usb 5-1: Product: syz [ 775.166797][T11304] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 775.167817][ T39] usb 5-1: Manufacturer: syz [ 775.177163][T11304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.181864][ T39] usb 5-1: SerialNumber: syz [ 775.196418][T11304] usb 2-1: config 0 descriptor?? [ 775.204409][ T387] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:ad:93:ac:60:4b [ 775.206196][ T451] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 775.224448][ T39] usb 5-1: config 0 descriptor?? [ 775.228692][ T387] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 775.239221][ T387] usb 3-1: USB disconnect, device number 99 [ 775.247304][T11304] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 775.464249][ T451] usb 4-1: Using ep0 maxpacket: 32 [ 775.584385][ T451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.595817][ T451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.606982][ T451] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 775.616796][ T451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.627284][ T451] usb 4-1: config 0 descriptor?? [ 775.664978][ T451] hub 4-1:0.0: USB hub found [ 775.857500][T11862] loop0: detected capacity change from 0 to 128 [ 775.954681][ T39] (unnamed net_device) (uninitialized): Assigned a random MAC address: 8e:bf:4c:ef:97:d4 [ 775.965273][ T451] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 775.980428][ T39] rtl8150 5-1:0.0: eth1: rtl8150 is detected [ 775.994760][ T39] usb 5-1: USB disconnect, device number 89 [ 776.054381][ T1591] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 776.314366][ T1591] usb 3-1: Using ep0 maxpacket: 32 [ 776.354893][ T451] usbhid 4-1:0.0: can't add hid device: -71 [ 776.361111][ T451] usbhid: probe of 4-1:0.0 failed with error -71 [ 776.395198][ T451] usb 4-1: USB disconnect, device number 96 [ 776.444376][ T1591] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 776.457292][ T1591] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 776.469438][ T1591] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 776.479037][ T1591] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.489204][ T1591] usb 3-1: config 0 descriptor?? [ 776.544833][ T1591] hub 3-1:0.0: USB hub found [ 776.635293][ T30] audit: type=1326 audit(2000000218.630:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 776.662736][ T30] audit: type=1326 audit(2000000218.630:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 776.688891][ T30] audit: type=1326 audit(2000000218.630:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 776.714227][ T30] audit: type=1326 audit(2000000218.630:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 776.738747][ T30] audit: type=1326 audit(2000000218.630:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 776.763738][ T30] audit: type=1326 audit(2000000218.630:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 776.788509][ T30] audit: type=1326 audit(2000000218.630:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 776.812997][ T30] audit: type=1326 audit(2000000218.630:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11895 comm="syz.0.2640" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 776.834293][ T1591] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 776.847824][ T814] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 777.094251][ T814] usb 5-1: Using ep0 maxpacket: 16 [ 777.204377][ T1591] usbhid 3-1:0.0: can't add hid device: -71 [ 777.211512][ T1591] usbhid: probe of 3-1:0.0 failed with error -71 [ 777.254396][ T451] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 777.267058][ T1591] usb 3-1: USB disconnect, device number 100 [ 777.288995][ T387] usb 2-1: USB disconnect, device number 81 [ 777.374326][ T814] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 777.384300][ T814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.392892][ T814] usb 5-1: Product: syz [ 777.398490][ T814] usb 5-1: Manufacturer: syz [ 777.404093][ T814] usb 5-1: SerialNumber: syz [ 777.409917][ T814] r8152-cfgselector 5-1: config 0 descriptor?? [ 777.504233][ T451] usb 1-1: Using ep0 maxpacket: 32 [ 777.744207][ T387] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 777.784274][ T451] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 777.794384][ T451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.804274][ T451] usb 1-1: Product: syz [ 777.808942][ T451] usb 1-1: Manufacturer: syz [ 777.813908][ T451] usb 1-1: SerialNumber: syz [ 777.826310][ T451] usb 1-1: config 0 descriptor?? [ 777.984254][ T1591] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 778.034208][ T387] usb 2-1: Using ep0 maxpacket: 16 [ 778.154194][ T39] usb 4-1: new high-speed USB device number 97 using dummy_hcd [ 778.184278][ T387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.195974][ T387] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.206687][ T387] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 778.218088][ T387] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.224172][ T1591] usb 3-1: Using ep0 maxpacket: 16 [ 778.237755][ T387] usb 2-1: config 0 descriptor?? [ 778.394213][ T39] usb 4-1: Using ep0 maxpacket: 8 [ 778.504341][ T1591] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 778.516788][ T39] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 778.532134][ T1591] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.541218][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.552943][ T1591] usb 3-1: Product: syz [ 778.557577][ T1591] usb 3-1: Manufacturer: syz [ 778.562416][ T39] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.573906][ T1591] usb 3-1: SerialNumber: syz [ 778.580479][ T1591] r8152-cfgselector 3-1: config 0 descriptor?? [ 778.587325][ T451] (unnamed net_device) (uninitialized): Assigned a random MAC address: 72:2e:68:a7:6b:13 [ 778.598301][ T39] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 778.614765][ T451] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 778.621878][ T451] usb 1-1: USB disconnect, device number 95 [ 778.628797][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 778.639710][ T39] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 778.652384][ T39] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 778.663995][ T39] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 778.784204][ T387] usbhid 2-1:0.0: can't add hid device: -71 [ 778.790960][ T387] usbhid: probe of 2-1:0.0 failed with error -71 [ 778.801110][ T387] usb 2-1: USB disconnect, device number 82 [ 778.834293][ T39] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 778.843652][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.852087][ T39] usb 4-1: Product: syz [ 778.856593][ T39] usb 4-1: Manufacturer: syz [ 778.861146][ T39] usb 4-1: SerialNumber: syz [ 779.074274][ T1591] r8152-cfgselector 3-1: Unknown version 0x0000 [ 779.155756][ T1591] r8152-cfgselector 3-1: Unknown version 0x0000 [ 779.163510][ T1591] r8152-cfgselector 3-1: bad CDC descriptors [ 779.184272][ T1591] r8152-cfgselector 3-1: Unknown version 0x0000 [ 779.192992][ T1591] r8152-cfgselector 3-1: USB disconnect, device number 101 [ 779.614231][ T814] r8152-cfgselector 5-1: Unknown version 0x0000 [ 779.634953][ T814] r8152-cfgselector 5-1: Unknown version 0x0000 [ 779.652112][ T814] r8152-cfgselector 5-1: bad CDC descriptors [ 779.695386][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2648'. [ 779.790236][ T814] r8152-cfgselector 5-1: Unknown version 0x0000 [ 779.886702][ T814] r8152-cfgselector 5-1: USB disconnect, device number 90 [ 780.454385][ T1591] usb 1-1: new high-speed USB device number 96 using dummy_hcd [ 780.534222][ T20] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 780.714174][ T1591] usb 1-1: Using ep0 maxpacket: 32 [ 780.844284][ T39] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS [ 780.851815][ T39] cdc_ncm 4-1:1.0: bind() failure [ 780.858098][ T39] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 780.866677][ T39] cdc_ncm 4-1:1.1: bind() failure [ 780.872763][ T39] usb 4-1: USB disconnect, device number 97 [ 780.904464][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.916980][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.928362][ T20] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 780.938917][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.949793][ T20] usb 3-1: config 0 descriptor?? [ 780.994403][ T1591] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 781.005726][ T1591] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.014574][ T1591] usb 1-1: Product: syz [ 781.019235][ T1591] usb 1-1: Manufacturer: syz [ 781.024477][ T1591] usb 1-1: SerialNumber: syz [ 781.030379][ T1591] usb 1-1: config 0 descriptor?? [ 781.224268][ T39] usb 4-1: new high-speed USB device number 98 using dummy_hcd [ 781.624565][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 781.642204][ T39] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 781.652208][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.664962][ T39] usb 4-1: config 0 descriptor?? [ 781.704925][ T39] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 781.734342][ T1591] (unnamed net_device) (uninitialized): Assigned a random MAC address: e6:21:f6:5f:a0:01 [ 781.746723][ T1591] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 781.754808][ T1591] usb 1-1: USB disconnect, device number 96 [ 781.754901][ T20] usbhid 3-1:0.0: can't add hid device: -71 [ 781.768015][ T20] usbhid: probe of 3-1:0.0 failed with error -71 [ 781.777322][ T20] usb 3-1: USB disconnect, device number 102 [ 782.192774][T11952] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2655'. [ 782.524220][ T20] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 782.532758][ T6981] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 782.794217][ T6981] usb 3-1: Using ep0 maxpacket: 8 [ 782.924312][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.936321][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.946298][ T6981] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 782.957702][T11965] loop4: detected capacity change from 0 to 128 [ 782.971021][ T20] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 782.984206][ T6981] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 782.996709][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.998815][ T722] usb 4-1: USB disconnect, device number 98 [ 783.020612][ T6981] usb 3-1: config 135 has no interface number 0 [ 783.030278][ T6981] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 783.044896][ T20] usb 1-1: config 0 descriptor?? [ 783.234275][ T6981] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 783.244021][ T6981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.272013][ T6981] usb 3-1: Product: syz [ 783.283189][ T6981] usb 3-1: Manufacturer: syz [ 783.296155][ T6981] usb 3-1: SerialNumber: syz [ 783.355175][ T6981] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 783.369241][ T6981] usb 3-1: No valid video chain found. [ 783.374169][ T722] usb 4-1: new high-speed USB device number 99 using dummy_hcd [ 783.624259][ T722] usb 4-1: Using ep0 maxpacket: 16 [ 783.764241][ T20] usb 1-1: string descriptor 0 read error: -22 [ 783.904397][ T722] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 783.913918][ T722] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.922758][ T722] usb 4-1: Product: syz [ 783.927116][ T722] usb 4-1: Manufacturer: syz [ 783.932026][ T722] usb 4-1: SerialNumber: syz [ 783.938275][ T722] r8152-cfgselector 4-1: config 0 descriptor?? [ 783.974208][ T39] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 784.374435][ T39] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 784.394978][ T20] uclogic 0003:256C:006D.0065: failed retrieving string descriptor #100: -71 [ 784.404468][ T20] uclogic 0003:256C:006D.0065: failed retrieving pen parameters: -71 [ 784.412804][ T20] uclogic 0003:256C:006D.0065: failed probing pen v1 parameters: -71 [ 784.419901][ T39] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 784.422237][ T20] uclogic 0003:256C:006D.0065: failed probing parameters: -71 [ 784.438597][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.439948][ T20] uclogic: probe of 0003:256C:006D.0065 failed with error -71 [ 784.454030][ T39] usb 5-1: config 0 descriptor?? [ 784.458850][ T20] usb 1-1: USB disconnect, device number 97 [ 784.484300][ T722] r8152-cfgselector 4-1: Unknown version 0x0000 [ 784.504859][ T39] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 784.512518][ T722] r8152-cfgselector 4-1: Unknown version 0x0000 [ 784.519096][ T722] r8152-cfgselector 4-1: bad CDC descriptors [ 784.544289][ T722] r8152-cfgselector 4-1: Unknown version 0x0000 [ 784.559131][ T722] r8152-cfgselector 4-1: USB disconnect, device number 99 [ 785.190253][ T6981] usb 3-1: USB disconnect, device number 103 [ 785.371341][T12000] netlink: 277 bytes leftover after parsing attributes in process `syz.1.2666'. [ 785.714250][ T39] usb 2-1: new high-speed USB device number 83 using dummy_hcd [ 785.724236][ T6981] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 785.934212][ T20] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 785.954217][ T39] usb 2-1: Using ep0 maxpacket: 8 [ 785.984256][ T6981] usb 3-1: Using ep0 maxpacket: 8 [ 786.074342][ T39] usb 2-1: config 135 has an invalid interface number: 230 but max is 0 [ 786.083652][ T39] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 786.094382][ T39] usb 2-1: config 135 has no interface number 0 [ 786.101332][ T39] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 786.124560][ T6981] usb 3-1: config index 0 descriptor too short (expected 5924, got 36) [ 786.132925][ T6981] usb 3-1: config 250 has an invalid interface number: 228 but max is -1 [ 786.141961][ T6981] usb 3-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 786.151721][ T6981] usb 3-1: config 250 has no interface number 0 [ 786.158255][ T6981] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 786.170587][ T6981] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 786.182312][ T6981] usb 3-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 12592, setting to 1024 [ 786.194935][ T6981] usb 3-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 786.206077][ T6981] usb 3-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 786.219997][ T6981] usb 3-1: config 250 interface 228 has no altsetting 0 [ 786.274492][ T39] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 786.284073][ T39] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 786.292691][ T39] usb 2-1: Product: syz [ 786.296789][ T39] usb 2-1: Manufacturer: syz [ 786.301483][ T39] usb 2-1: SerialNumber: syz [ 786.344313][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.345174][ T39] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 786.355654][ T20] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.362024][ T39] usb 2-1: No valid video chain found. [ 786.372708][ T20] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 786.388073][ T6981] usb 3-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 786.397857][ T387] usb 4-1: new high-speed USB device number 100 using dummy_hcd [ 786.406082][ T6981] usb 3-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 786.416279][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.424515][ T6981] usb 3-1: Product: syz [ 786.429062][ T6981] usb 3-1: SerialNumber: syz [ 786.434884][ T20] usb 1-1: config 0 descriptor?? [ 786.494973][ T6981] hub 3-1:250.228: bad descriptor, ignoring hub [ 786.502266][ T6981] hub: probe of 3-1:250.228 failed with error -5 [ 786.708779][ T39] usb 5-1: USB disconnect, device number 91 [ 786.725377][ T6981] usblp 3-1:250.228: usblp0: USB Bidirectional printer dev 104 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 786.784341][ T387] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.796589][ T387] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 786.806340][ T387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.816296][ T387] usb 4-1: config 0 descriptor?? [ 786.854956][ T387] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 786.927695][ T30] audit: type=1400 audit(2000000228.920:604): avc: denied { read write } for pid=11997 comm="syz.2.2667" name="lp0" dev="devtmpfs" ino=2398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 786.955099][ T30] audit: type=1400 audit(2000000228.920:605): avc: denied { open } for pid=11997 comm="syz.2.2667" path="/dev/usb/lp0" dev="devtmpfs" ino=2398 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 787.084821][ T722] usb 3-1: USB disconnect, device number 104 [ 787.109512][ T722] usblp0: removed [ 787.174335][ T20] usb 1-1: string descriptor 0 read error: -22 [ 787.644322][ T20] uclogic 0003:256C:006D.0066: failed retrieving string descriptor #100: -71 [ 787.653448][ T20] uclogic 0003:256C:006D.0066: failed retrieving pen parameters: -71 [ 787.664057][ T20] uclogic 0003:256C:006D.0066: failed probing pen v1 parameters: -71 [ 787.672955][ T20] uclogic 0003:256C:006D.0066: failed probing parameters: -71 [ 787.681528][ T20] uclogic: probe of 0003:256C:006D.0066 failed with error -71 [ 787.695291][ T20] usb 1-1: USB disconnect, device number 98 [ 787.894299][ T6981] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 788.147661][ T387] usb 4-1: USB disconnect, device number 100 [ 788.154947][ T6981] usb 5-1: Using ep0 maxpacket: 16 [ 788.679596][ T722] usb 2-1: USB disconnect, device number 83 [ 788.874620][ T814] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 788.944227][ T39] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 789.094264][ T6981] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 789.110342][T12041] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2677'. [ 789.110863][ T6981] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.129595][ T6981] usb 5-1: Product: syz [ 789.133823][ T6981] usb 5-1: Manufacturer: syz [ 789.134226][ T814] usb 1-1: Using ep0 maxpacket: 32 [ 789.138696][ T6981] usb 5-1: SerialNumber: syz [ 789.151156][ T6981] r8152-cfgselector 5-1: config 0 descriptor?? [ 789.194178][ T39] usb 3-1: Using ep0 maxpacket: 16 [ 789.264267][ T814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 789.275980][ T814] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 789.286236][ T814] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 789.295734][ T814] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.305692][ T814] usb 1-1: config 0 descriptor?? [ 789.345524][ T814] hub 1-1:0.0: USB hub found [ 789.474333][ T312] usb 4-1: new high-speed USB device number 101 using dummy_hcd [ 789.474403][ T39] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 789.492870][ T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.501818][ T39] usb 3-1: Product: syz [ 789.506253][ T39] usb 3-1: Manufacturer: syz [ 789.510989][ T39] usb 3-1: SerialNumber: syz [ 789.517053][ T39] r8152-cfgselector 3-1: config 0 descriptor?? [ 789.524609][T12021] kvm [12019]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 789.554255][ T6981] r8152-cfgselector 5-1: Unknown version 0x0000 [ 789.584415][ T6981] r8152-cfgselector 5-1: Unknown version 0x0000 [ 789.591292][ T6981] r8152-cfgselector 5-1: bad CDC descriptors [ 789.614474][ T6981] r8152-cfgselector 5-1: Unknown version 0x0000 [ 789.622088][ T6981] r8152-cfgselector 5-1: USB disconnect, device number 92 [ 789.644371][ T814] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 789.734339][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 790.024412][ T814] usbhid 1-1:0.0: can't add hid device: -71 [ 790.034006][ T814] usbhid: probe of 1-1:0.0 failed with error -71 [ 790.092379][ T312] usb 4-1: config 135 has an invalid interface number: 230 but max is 0 [ 790.101203][ T312] usb 4-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 790.111936][ T312] usb 4-1: config 135 has no interface number 0 [ 790.124296][ T312] usb 4-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 790.134844][ T814] usb 1-1: USB disconnect, device number 99 [ 790.254262][ T39] r8152-cfgselector 3-1: Unknown version 0x0000 [ 790.274620][ T39] r8152-cfgselector 3-1: Unknown version 0x0000 [ 790.281110][ T39] r8152-cfgselector 3-1: bad CDC descriptors [ 790.304258][ T39] r8152-cfgselector 3-1: Unknown version 0x0000 [ 790.312262][ T39] r8152-cfgselector 3-1: USB disconnect, device number 105 [ 790.344634][ T312] usb 4-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 790.354401][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 790.362964][ T312] usb 4-1: Product: syz [ 790.367748][ T312] usb 4-1: Manufacturer: syz [ 790.372183][ T312] usb 4-1: SerialNumber: syz [ 790.426561][ T312] usb 4-1: Found UVC 0.00 device syz (18ec:3288) [ 790.433150][ T312] usb 4-1: No valid video chain found. [ 790.759875][T12059] overlayfs: failed to resolve './file1': -2 [ 790.844159][ T312] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 791.088564][ T39] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 791.104295][ T312] usb 1-1: Using ep0 maxpacket: 32 [ 791.216102][T12066] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2683'. [ 791.225842][T12066] tipc: Started in network mode [ 791.231177][T12066] tipc: Node identity 1, cluster identity 4711 [ 791.238207][T12066] tipc: Node number set to 1 [ 791.484329][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 791.498555][ T39] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 791.508778][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.518553][ T39] usb 3-1: config 0 descriptor?? [ 791.564829][ T39] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 791.624289][ T312] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 791.633887][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.642382][ T312] usb 1-1: Product: syz [ 791.646628][ T312] usb 1-1: Manufacturer: syz [ 791.651378][ T312] usb 1-1: SerialNumber: syz [ 791.657403][ T312] usb 1-1: config 0 descriptor?? [ 791.744253][ T6981] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 792.105663][ T39] usb 4-1: USB disconnect, device number 101 [ 792.144513][ T6981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.156117][ T6981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.167444][ T6981] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 792.199402][ T6981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 792.214285][ T6981] usb 2-1: config 0 descriptor?? [ 793.664254][ T312] (unnamed net_device) (uninitialized): Assigned a random MAC address: 4e:ce:5c:2d:29:bb [ 793.678825][ T312] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 793.720206][ T30] audit: type=1400 audit(2000000235.710:606): avc: denied { read } for pid=137 comm="dhcpcd" name="n134" dev="tmpfs" ino=21502 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.747317][ T30] audit: type=1400 audit(2000000235.710:607): avc: denied { open } for pid=137 comm="dhcpcd" path="/run/udev/data/n134" dev="tmpfs" ino=21502 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.772553][ T30] audit: type=1400 audit(2000000235.710:608): avc: denied { getattr } for pid=137 comm="dhcpcd" path="/run/udev/data/n134" dev="tmpfs" ino=21502 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.800296][ T722] usb 1-1: USB disconnect, device number 100 [ 793.823101][ T814] usb 3-1: USB disconnect, device number 106 [ 793.835731][ T30] audit: type=1400 audit(2000000235.830:609): avc: denied { create } for pid=12089 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.865908][ T30] audit: type=1400 audit(2000000235.830:610): avc: denied { write } for pid=12089 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=21511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.904651][ T30] audit: type=1400 audit(2000000235.830:611): avc: denied { append } for pid=12089 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=21511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.940610][ T30] audit: type=1400 audit(2000000235.890:612): avc: denied { unlink } for pid=12102 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=21511 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 793.974468][ T6981] usb 2-1: string descriptor 0 read error: -22 [ 793.994214][ T39] usb 4-1: new high-speed USB device number 102 using dummy_hcd [ 794.332255][T12121] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2691'. [ 794.334211][ T814] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 794.364418][ T39] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 794.375272][ T39] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 794.386545][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.395901][ T39] usb 4-1: config 0 descriptor?? [ 794.404324][ T6981] uclogic 0003:256C:006D.0067: failed retrieving string descriptor #100: -71 [ 794.414714][ T6981] uclogic 0003:256C:006D.0067: failed retrieving pen parameters: -71 [ 794.423149][ T6981] uclogic 0003:256C:006D.0067: failed probing pen v1 parameters: -71 [ 794.431821][ T6981] uclogic 0003:256C:006D.0067: failed probing parameters: -71 [ 794.437260][ T39] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 794.440793][ T6981] uclogic: probe of 0003:256C:006D.0067 failed with error -71 [ 794.457822][ T6981] usb 2-1: USB disconnect, device number 84 [ 794.584318][ T814] usb 3-1: Using ep0 maxpacket: 32 [ 794.684287][ T722] usb 1-1: new high-speed USB device number 101 using dummy_hcd [ 794.824271][ T312] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 794.864381][ T814] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 794.873632][ T814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.882028][ T814] usb 3-1: Product: syz [ 794.886575][ T814] usb 3-1: Manufacturer: syz [ 794.890938][ T814] usb 3-1: SerialNumber: syz [ 794.903438][ T814] usb 3-1: config 0 descriptor?? [ 794.924332][ T722] usb 1-1: Using ep0 maxpacket: 8 [ 795.044396][ T722] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 795.053207][ T722] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 795.063722][ T722] usb 1-1: config 135 has no interface number 0 [ 795.070010][ T722] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 795.084367][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 795.174249][ T6981] usb 2-1: new high-speed USB device number 85 using dummy_hcd [ 795.254375][ T722] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 795.263956][ T722] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.272681][ T722] usb 1-1: Product: syz [ 795.276837][ T722] usb 1-1: Manufacturer: syz [ 795.281562][ T722] usb 1-1: SerialNumber: syz [ 795.335632][ T722] usb 1-1: Found UVC 0.00 device syz (18ec:3288) [ 795.342182][ T722] usb 1-1: No valid video chain found. [ 795.364347][ T312] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 795.373538][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.381707][ T312] usb 5-1: Product: syz [ 795.385975][ T312] usb 5-1: Manufacturer: syz [ 795.390658][ T312] usb 5-1: SerialNumber: syz [ 795.397073][ T312] r8152-cfgselector 5-1: config 0 descriptor?? [ 795.414318][ T6981] usb 2-1: Using ep0 maxpacket: 16 [ 795.534369][ T6981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 795.545417][ T6981] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 795.555602][ T6981] usb 2-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 795.565737][ T6981] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 795.576041][ T6981] usb 2-1: config 0 descriptor?? [ 795.654230][ T814] (unnamed net_device) (uninitialized): Assigned a random MAC address: 66:d7:19:63:93:b1 [ 795.671699][ T814] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 795.698549][ T814] usb 3-1: USB disconnect, device number 107 [ 795.794272][ T312] r8152-cfgselector 5-1: Unknown version 0x0000 [ 795.814262][ T312] r8152-cfgselector 5-1: Unknown version 0x0000 [ 795.821900][ T312] r8152-cfgselector 5-1: bad CDC descriptors [ 795.844233][ T312] r8152-cfgselector 5-1: Unknown version 0x0000 [ 795.858397][ T312] r8152-cfgselector 5-1: USB disconnect, device number 93 [ 796.114331][ T6981] usbhid 2-1:0.0: can't add hid device: -71 [ 796.120570][ T6981] usbhid: probe of 2-1:0.0 failed with error -71 [ 796.128584][ T6981] usb 2-1: USB disconnect, device number 85 [ 796.329674][T12164] netlink: 277 bytes leftover after parsing attributes in process `syz.4.2695'. [ 796.424202][ T814] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 796.550451][ T30] audit: type=1326 audit(2000000238.540:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12167 comm="syz.1.2696" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f820261f9f9 code=0x0 [ 796.664175][ T814] usb 3-1: Using ep0 maxpacket: 32 [ 796.670748][ T722] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 796.714410][ T312] usb 4-1: USB disconnect, device number 102 [ 796.924507][ T722] usb 5-1: Using ep0 maxpacket: 8 [ 797.064328][ T814] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 797.074944][ T722] usb 5-1: config 135 has an invalid interface number: 230 but max is 0 [ 797.083483][ T814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.092392][ T722] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 797.103678][ T814] usb 3-1: Product: syz [ 797.108536][ T814] usb 3-1: Manufacturer: syz [ 797.113210][ T722] usb 5-1: config 135 has no interface number 0 [ 797.119547][ T814] usb 3-1: SerialNumber: syz [ 797.125182][ T722] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 797.142197][ T814] usb 3-1: config 0 descriptor?? [ 797.294357][ T722] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 797.304591][ T722] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.313402][ T722] usb 5-1: Product: syz [ 797.317499][ T722] usb 5-1: Manufacturer: syz [ 797.322795][ T722] usb 5-1: SerialNumber: syz [ 797.336447][ T1591] usb 1-1: USB disconnect, device number 101 [ 797.365006][ T722] usb 5-1: Found UVC 0.00 device syz (18ec:3288) [ 797.374048][ T30] audit: type=1326 audit(2000000239.360:614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 797.401586][ T722] usb 5-1: No valid video chain found. [ 797.416986][ T30] audit: type=1326 audit(2000000239.360:615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12176 comm="syz.0.2699" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ca9dea9f9 code=0x7ffc0000 [ 797.455076][T12181] loop1: detected capacity change from 0 to 2048 [ 797.516797][T12181] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 798.154390][ T814] (unnamed net_device) (uninitialized): Assigned a random MAC address: ce:0a:fd:12:c0:39 [ 798.180114][ T814] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 798.228648][ T814] usb 3-1: USB disconnect, device number 108 [ 798.384197][ T39] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 798.564255][ T2284] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 798.624239][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 798.744418][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.757309][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.768195][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 798.778205][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.787645][ T39] usb 2-1: config 0 descriptor?? [ 798.825043][ T39] hub 2-1:0.0: USB hub found [ 798.834498][ T2284] usb 1-1: Using ep0 maxpacket: 16 [ 798.954186][ T814] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 799.004209][ T1591] usb 4-1: new high-speed USB device number 103 using dummy_hcd [ 799.124273][ T39] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 799.174339][ T2284] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 799.184372][ T2284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.192370][ T2284] usb 1-1: Product: syz [ 799.194164][ T814] usb 3-1: Using ep0 maxpacket: 32 [ 799.196655][ T2284] usb 1-1: Manufacturer: syz [ 799.206111][ T2284] usb 1-1: SerialNumber: syz [ 799.212592][ T2284] r8152-cfgselector 1-1: config 0 descriptor?? [ 799.244261][ T1591] usb 4-1: Using ep0 maxpacket: 32 [ 799.326289][ T451] usb 5-1: USB disconnect, device number 94 [ 799.605923][T12197] kvm [12196]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 799.614335][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 799.621961][ T814] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 799.633306][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 799.639873][ T814] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.648767][ T814] usb 3-1: Product: syz [ 799.652784][ T814] usb 3-1: Manufacturer: syz [ 799.657562][ T814] usb 3-1: SerialNumber: syz [ 799.663801][ T814] usb 3-1: config 0 descriptor?? [ 799.664285][ T2284] r8152-cfgselector 1-1: Unknown version 0x0000 [ 799.669143][ T1591] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 799.686536][ T39] usb 2-1: USB disconnect, device number 86 [ 799.694082][ T1591] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.703613][ T1591] usb 4-1: Product: syz [ 799.708022][ T1591] usb 4-1: Manufacturer: syz [ 799.712726][ T1591] usb 4-1: SerialNumber: syz [ 799.718449][ T1591] usb 4-1: config 0 descriptor?? [ 799.721328][ T2284] r8152-cfgselector 1-1: Unknown version 0x0000 [ 799.734386][ T2284] r8152-cfgselector 1-1: bad CDC descriptors [ 799.754297][ T2284] r8152-cfgselector 1-1: Unknown version 0x0000 [ 799.764384][ T2284] r8152-cfgselector 1-1: USB disconnect, device number 102 [ 800.224242][ T39] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 800.379400][T12219] overlayfs: failed to resolve './file1': -2 [ 800.444274][ T814] (unnamed net_device) (uninitialized): Assigned a random MAC address: c2:6d:78:05:80:a4 [ 800.465952][ T814] rtl8150 3-1:0.0: eth1: rtl8150 is detected [ 800.492524][ T814] usb 3-1: USB disconnect, device number 109 [ 800.514167][ T2284] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 800.514265][ T1591] (unnamed net_device) (uninitialized): Assigned a random MAC address: 12:05:0c:5e:96:d4 [ 800.535914][ T1591] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 800.564351][ T1591] usb 4-1: USB disconnect, device number 103 [ 800.604316][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 800.632678][ T39] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 800.645168][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.657846][ T39] usb 2-1: config 0 descriptor?? [ 800.694890][ T39] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 800.764172][ T2284] usb 5-1: Using ep0 maxpacket: 16 [ 801.061338][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 801.061359][ T30] audit: type=1326 audit(2000000243.050:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcec7d9f9 code=0x7ffc0000 [ 801.137653][ T30] audit: type=1326 audit(2000000243.080:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcec7d9f9 code=0x7ffc0000 [ 801.395649][ T30] audit: type=1326 audit(2000000243.090:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fdbcec7d9f9 code=0x7ffc0000 [ 801.420885][ T30] audit: type=1326 audit(2000000243.090:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12250 comm="syz.3.2713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdbcec7d9f9 code=0x7ffc0000 [ 801.942294][ T2284] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 801.956593][ T2284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.965634][ T2284] usb 5-1: Product: syz [ 801.969762][ T2284] usb 5-1: Manufacturer: syz [ 801.974453][ T2284] usb 5-1: SerialNumber: syz [ 803.169730][ T2284] r8152-cfgselector 5-1: config 0 descriptor?? [ 803.178140][T12269] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2717'. [ 803.244581][ T2284] r8152-cfgselector 5-1: can't set config #0, error -71 [ 803.258970][T12273] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2719'. [ 803.294831][ T312] usb 2-1: USB disconnect, device number 87 [ 803.304476][ T2284] r8152-cfgselector 5-1: Unknown version 0x0000 [ 803.325079][ T2284] r8152-cfgselector 5-1: USB disconnect, device number 95 [ 803.700481][T12283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2720'. [ 805.601661][ T814] usb 1-1: new high-speed USB device number 103 using dummy_hcd [ 805.654192][ T20] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 805.663152][ T30] audit: type=1326 audit(2000000247.650:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12292 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa808d069f9 code=0x7ffc0000 [ 805.689347][ T30] audit: type=1326 audit(2000000247.660:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12292 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fa808d069f9 code=0x7ffc0000 [ 805.716271][ T30] audit: type=1326 audit(2000000247.660:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12292 comm="syz.4.2724" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa808d069f9 code=0x7ffc0000 [ 805.864155][ T814] usb 1-1: Using ep0 maxpacket: 8 [ 805.870598][T12297] overlayfs: failed to resolve './file1': -2 [ 805.974192][ T312] usb 2-1: new high-speed USB device number 88 using dummy_hcd [ 805.984205][ T814] usb 1-1: config 135 has an invalid interface number: 230 but max is 0 [ 805.984329][ T20] usb 3-1: Using ep0 maxpacket: 8 [ 805.996281][ T814] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 806.009850][ T814] usb 1-1: config 135 has no interface number 0 [ 806.016795][ T814] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.144294][ T20] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 806.153382][ T20] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 806.164612][ T20] usb 3-1: config 135 has no interface number 0 [ 806.170942][ T20] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 806.185113][ T814] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 806.195078][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.224217][ T312] usb 2-1: Using ep0 maxpacket: 32 [ 806.229510][ T20] usb 3-1: string descriptor 0 read error: -71 [ 806.236444][ T20] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 806.247937][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.284358][ T20] usb 3-1: can't set config #135, error -71 [ 806.295350][ T20] usb 3-1: USB disconnect, device number 110 [ 806.316464][ T814] usb 1-1: Product: syz [ 808.194573][ T814] usb 1-1: Manufacturer: syz [ 808.201125][ T814] usb 1-1: SerialNumber: syz [ 808.234278][ T312] usb 2-1: unable to read config index 0 descriptor/all [ 808.242702][ T312] usb 2-1: can't read configurations, error -71 [ 808.277990][ T814] usb 1-1: can't set config #135, error -71 [ 808.285083][ T814] usb 1-1: USB disconnect, device number 103 [ 808.553061][T12318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'. [ 809.166368][ T1591] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 809.176541][ T814] usb 1-1: new high-speed USB device number 104 using dummy_hcd [ 810.054306][ T814] usb 1-1: Using ep0 maxpacket: 16 [ 810.147832][T12336] netlink: 277 bytes leftover after parsing attributes in process `syz.2.2736'. [ 810.174471][ T1591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.186944][ T1591] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.196764][ T1591] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 810.206494][ T1591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.215339][ T1591] usb 5-1: config 0 descriptor?? [ 810.254219][ T312] usb 2-1: new high-speed USB device number 89 using dummy_hcd [ 810.254379][ T451] usb 4-1: new high-speed USB device number 104 using dummy_hcd [ 810.344373][ T814] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 810.354951][ T814] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 810.363413][ T814] usb 1-1: Product: syz [ 810.367883][ T814] usb 1-1: Manufacturer: syz [ 810.372264][ T814] usb 1-1: SerialNumber: syz [ 810.377816][ T814] r8152-cfgselector 1-1: config 0 descriptor?? [ 810.484257][ T6981] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 810.504285][ T451] usb 4-1: Using ep0 maxpacket: 32 [ 810.625484][ T451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.637303][ T451] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.648155][ T451] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 810.658254][ T451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.666891][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.670834][ T451] usb 4-1: config 0 descriptor?? [ 810.689082][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.699867][ T312] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 810.710076][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.724922][ T451] hub 4-1:0.0: USB hub found [ 810.730512][ T312] usb 2-1: config 0 descriptor?? [ 810.744196][ T6981] usb 3-1: Using ep0 maxpacket: 8 [ 810.864385][ T6981] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 810.873465][ T6981] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 810.874287][ T814] r8152-cfgselector 1-1: Unknown version 0x0000 [ 810.884379][ T6981] usb 3-1: config 135 has no interface number 0 [ 810.899786][ T6981] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 810.914338][ T814] r8152-cfgselector 1-1: Unknown version 0x0000 [ 810.920595][ T814] r8152-cfgselector 1-1: bad CDC descriptors [ 810.934523][ T451] hub 4-1:0.0: 1 port detected [ 810.944293][ T814] r8152-cfgselector 1-1: Unknown version 0x0000 [ 810.952579][ T814] r8152-cfgselector 1-1: USB disconnect, device number 104 [ 811.074448][ T6981] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 811.084227][ T6981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.093211][ T6981] usb 3-1: Product: syz [ 811.097683][ T6981] usb 3-1: Manufacturer: syz [ 811.102373][ T6981] usb 3-1: SerialNumber: syz [ 811.144892][ T6981] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 811.151406][ T6981] usb 3-1: No valid video chain found. [ 811.174531][ T1591] usb 5-1: string descriptor 0 read error: -71 [ 811.204508][ T1591] uclogic 0003:256C:006D.0068: failed retrieving string descriptor #200: -71 [ 811.214067][ T1591] uclogic 0003:256C:006D.0068: failed retrieving pen parameters: -71 [ 811.222865][ T1591] uclogic 0003:256C:006D.0068: failed probing pen v2 parameters: -71 [ 811.231963][ T1591] uclogic 0003:256C:006D.0068: failed probing parameters: -71 [ 811.240774][ T1591] uclogic: probe of 0003:256C:006D.0068 failed with error -71 [ 811.250159][ T1591] usb 5-1: USB disconnect, device number 96 [ 811.304346][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 811.310180][ T312] usbhid: probe of 2-1:0.0 failed with error -71 [ 811.318443][ T312] usb 2-1: USB disconnect, device number 89 [ 811.624258][ T1591] hub 4-1:0.0: activate --> -90 [ 811.974241][ T814] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 812.024493][ T1591] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 812.244190][ T814] usb 5-1: Using ep0 maxpacket: 16 [ 812.344434][ T1591] usb 4-1: USB disconnect, device number 104 [ 812.754266][ T814] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 812.764447][ T814] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.773415][ T814] usb 5-1: Product: syz [ 812.784162][ T814] usb 5-1: Manufacturer: syz [ 812.789475][ T814] usb 5-1: SerialNumber: syz [ 812.799334][ T814] r8152-cfgselector 5-1: config 0 descriptor?? [ 812.832295][T12363] overlayfs: failed to resolve './file1': -2 [ 812.844358][ T451] usb 1-1: new high-speed USB device number 105 using dummy_hcd [ 813.084235][ T451] usb 1-1: Using ep0 maxpacket: 16 [ 813.224659][ T451] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 813.359144][ T1591] usb 3-1: USB disconnect, device number 111 [ 813.574581][ T451] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 813.584053][ T451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.592532][ T814] r8152-cfgselector 5-1: Unknown version 0x0000 [ 813.615987][ T451] usb 1-1: Product: syz [ 813.642639][ T814] r8152-cfgselector 5-1: Unknown version 0x0000 [ 813.671534][ T451] usb 1-1: Manufacturer: syz [ 813.682907][ T814] r8152-cfgselector 5-1: bad CDC descriptors [ 813.720991][ T451] usb 1-1: SerialNumber: syz [ 813.744199][ T814] r8152-cfgselector 5-1: Unknown version 0x0000 [ 813.858755][ T451] usb 1-1: bad CDC descriptors [ 813.903850][ T814] r8152-cfgselector 5-1: USB disconnect, device number 97 [ 814.666847][ T451] usb 1-1: USB disconnect, device number 105 [ 814.854192][ T6981] usb 4-1: new high-speed USB device number 105 using dummy_hcd [ 815.064318][ T20] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 815.383932][ T6981] usb 4-1: Using ep0 maxpacket: 16 [ 815.694360][ T6981] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 815.704294][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.716267][ T6981] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.725265][ T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.736419][ T6981] usb 4-1: Product: syz [ 815.740833][ T6981] usb 4-1: Manufacturer: syz [ 815.744178][ T451] usb 1-1: new high-speed USB device number 106 using dummy_hcd [ 815.745719][ T20] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 815.762545][ T6981] usb 4-1: SerialNumber: syz [ 815.767421][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.776054][ T6981] r8152-cfgselector 4-1: config 0 descriptor?? [ 815.784417][ T20] usb 3-1: config 0 descriptor?? [ 815.994205][ T451] usb 1-1: Using ep0 maxpacket: 32 [ 816.134193][ T312] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 816.174285][ T6981] r8152-cfgselector 4-1: Unknown version 0x0000 [ 816.195004][ T6981] r8152-cfgselector 4-1: Unknown version 0x0000 [ 816.203131][ T6981] r8152-cfgselector 4-1: bad CDC descriptors [ 816.224362][ T6981] r8152-cfgselector 4-1: Unknown version 0x0000 [ 816.232696][ T6981] r8152-cfgselector 4-1: USB disconnect, device number 105 [ 816.304248][ T451] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 816.313659][ T451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.322214][ T451] usb 1-1: Product: syz [ 816.326356][ T451] usb 1-1: Manufacturer: syz [ 816.330928][ T451] usb 1-1: SerialNumber: syz [ 816.337119][ T451] usb 1-1: config 0 descriptor?? [ 816.374218][ T312] usb 5-1: Using ep0 maxpacket: 16 [ 816.484308][ T20] usb 3-1: string descriptor 0 read error: -22 [ 816.654278][ T312] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 816.663791][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.672539][ T312] usb 5-1: Product: syz [ 816.677034][ T312] usb 5-1: Manufacturer: syz [ 816.681699][ T312] usb 5-1: SerialNumber: syz [ 816.688544][ T312] r8152-cfgselector 5-1: config 0 descriptor?? [ 816.904326][ T20] uclogic 0003:256C:006D.0069: failed retrieving string descriptor #100: -71 [ 816.914381][ T20] uclogic 0003:256C:006D.0069: failed retrieving pen parameters: -71 [ 816.922701][ T20] uclogic 0003:256C:006D.0069: failed probing pen v1 parameters: -71 [ 816.931795][ T20] uclogic 0003:256C:006D.0069: failed probing parameters: -71 [ 816.949475][ T20] uclogic: probe of 0003:256C:006D.0069 failed with error -71 [ 816.995927][ T20] usb 3-1: USB disconnect, device number 112 [ 817.064232][ T451] (unnamed net_device) (uninitialized): Assigned a random MAC address: ea:41:7b:7d:54:02 [ 817.077845][ T451] rtl8150 1-1:0.0: eth1: rtl8150 is detected [ 817.101743][ T451] usb 1-1: USB disconnect, device number 106 [ 817.144172][T11304] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 817.174370][ T312] r8152-cfgselector 5-1: Unknown version 0x0000 [ 817.194407][ T312] r8152-cfgselector 5-1: Unknown version 0x0000 [ 817.200807][ T312] r8152-cfgselector 5-1: bad CDC descriptors [ 817.224215][ T312] r8152-cfgselector 5-1: Unknown version 0x0000 [ 817.235026][ T312] r8152-cfgselector 5-1: USB disconnect, device number 98 [ 817.394282][T11304] usb 2-1: Using ep0 maxpacket: 32 [ 817.672601][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2756'. [ 817.964475][T11304] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 817.973625][T11304] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.981871][T11304] usb 2-1: Product: syz [ 817.986167][T11304] usb 2-1: Manufacturer: syz [ 817.991089][T11304] usb 2-1: SerialNumber: syz [ 818.015651][ T312] usb 4-1: new high-speed USB device number 106 using dummy_hcd [ 818.236335][T11304] usb 2-1: config 0 descriptor?? [ 818.365474][ T30] audit: type=1326 audit(2000000260.360:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.2.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa61929f9 code=0x7ffc0000 [ 818.391999][ T30] audit: type=1326 audit(2000000260.360:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.2.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7fdfa61929f9 code=0x7ffc0000 [ 818.417741][ T2284] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 818.426343][ T30] audit: type=1326 audit(2000000260.360:631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12454 comm="syz.2.2760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdfa61929f9 code=0x7ffc0000 [ 818.474188][ T312] usb 4-1: Using ep0 maxpacket: 32 [ 818.654215][ T2284] usb 5-1: Using ep0 maxpacket: 16 [ 818.754342][ T312] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 818.765324][ T312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.773207][ T312] usb 4-1: Product: syz [ 818.777934][ T312] usb 4-1: Manufacturer: syz [ 818.782463][ T312] usb 4-1: SerialNumber: syz [ 818.793654][ T312] usb 4-1: config 0 descriptor?? [ 818.955024][T12466] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2762'. [ 819.108940][T11304] (unnamed net_device) (uninitialized): Assigned a random MAC address: fa:db:91:75:cd:1c [ 819.122235][T11304] rtl8150 2-1:0.0: eth1: rtl8150 is detected [ 819.130384][T11304] usb 2-1: USB disconnect, device number 90 [ 819.184293][ T2284] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 819.193617][ T6981] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 819.201549][ T2284] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.210157][ T2284] usb 5-1: Product: syz [ 819.214718][ T2284] usb 5-1: Manufacturer: syz [ 819.219199][ T2284] usb 5-1: SerialNumber: syz [ 819.225402][ T2284] r8152-cfgselector 5-1: config 0 descriptor?? [ 819.434235][ T6981] usb 3-1: Using ep0 maxpacket: 16 [ 819.534406][ T312] (unnamed net_device) (uninitialized): Assigned a random MAC address: 2a:a8:20:ec:d5:52 [ 819.555949][ T312] rtl8150 4-1:0.0: eth1: rtl8150 is detected [ 819.563489][ T312] usb 4-1: USB disconnect, device number 106 [ 819.584440][T12451] kvm [12450]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc1 data 0x204500000800 [ 819.604192][T12451] kvm [12450]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x186 data 0x410000000000 [ 819.614625][T12451] kvm [12450]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0x187 data 0x414500000800 [ 819.714335][ T6981] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 819.728050][ T6981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.739252][ T6981] usb 3-1: Product: syz [ 819.743646][ T6981] usb 3-1: Manufacturer: syz [ 819.749757][ T6981] usb 3-1: SerialNumber: syz [ 819.759225][ T6981] r8152-cfgselector 3-1: config 0 descriptor?? [ 820.234202][T11304] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 820.684279][ T6981] r8152-cfgselector 3-1: Unknown version 0x0000 [ 820.704885][ T6981] r8152-cfgselector 3-1: Unknown version 0x0000 [ 820.711358][ T6981] r8152-cfgselector 3-1: bad CDC descriptors [ 820.734736][ T6981] r8152-cfgselector 3-1: Unknown version 0x0000 [ 820.742327][ T6981] r8152-cfgselector 3-1: USB disconnect, device number 113 [ 820.904287][T11304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.915175][T11304] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.925571][T11304] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 820.935450][T11304] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.944742][T11304] usb 2-1: config 0 descriptor?? [ 820.964261][ T2284] r8152-cfgselector 5-1: Unknown version 0x0000 [ 820.985110][ T2284] r8152-cfgselector 5-1: Unknown version 0x0000 [ 820.991528][ T2284] r8152-cfgselector 5-1: bad CDC descriptors [ 821.014221][ T2284] r8152-cfgselector 5-1: Unknown version 0x0000 [ 821.022182][ T2284] r8152-cfgselector 5-1: USB disconnect, device number 99 [ 821.374284][ T2284] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 821.444231][ T6981] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 821.684364][ T6981] usb 3-1: Using ep0 maxpacket: 16 [ 821.734254][ T2284] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.744576][ T2284] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 821.824409][ T2284] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 821.833703][ T2284] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 821.841932][ T2284] usb 5-1: SerialNumber: syz [ 821.944279][T11304] usb 2-1: string descriptor 0 read error: -71 [ 821.964305][ T6981] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 821.973680][T11304] uclogic 0003:256C:006D.006A: failed retrieving string descriptor #200: -71 [ 821.983286][ T6981] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.991634][T11304] uclogic 0003:256C:006D.006A: failed retrieving pen parameters: -71 [ 822.000401][ T6981] usb 3-1: Product: syz [ 822.004773][ T6981] usb 3-1: Manufacturer: syz [ 822.009667][T11304] uclogic 0003:256C:006D.006A: failed probing pen v2 parameters: -71 [ 822.018458][ T6981] usb 3-1: SerialNumber: syz [ 822.023601][T11304] uclogic 0003:256C:006D.006A: failed probing parameters: -71 [ 822.032418][ T6981] r8152-cfgselector 3-1: config 0 descriptor?? [ 822.038852][T11304] uclogic: probe of 0003:256C:006D.006A failed with error -71 [ 822.048725][T11304] usb 2-1: USB disconnect, device number 91 [ 822.124933][ T2284] usb 5-1: 0:2 : does not exist [ 822.129930][ T2284] ================================================================================ [ 822.141139][ T2284] UBSAN: shift-out-of-bounds in sound/usb/mixer.c:2021:20 [ 822.148436][ T2284] shift exponent 41 is too large for 32-bit type 'int' [ 822.155605][ T2284] CPU: 0 PID: 2284 Comm: kworker/0:7 Not tainted 5.15.152-syzkaller-00143-g70e1a731d986 #0 [ 822.165748][ T2284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 822.176171][ T2284] Workqueue: usb_hub_wq hub_event [ 822.181480][ T2284] Call Trace: [ 822.184914][ T2284] [ 822.187852][ T2284] dump_stack_lvl+0x151/0x1b7 [ 822.192742][ T2284] ? io_uring_drop_tctx_refs+0x190/0x190 [ 822.198928][ T2284] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 822.204834][ T2284] dump_stack+0x15/0x17 [ 822.209278][ T2284] __ubsan_handle_shift_out_of_bounds+0x3bf/0x420 [ 822.215804][ T2284] parse_audio_unit+0x270d/0x3d90 [ 822.220675][ T2284] ? usb_audio_probe+0x1412/0x2260 [ 822.225863][ T2284] ? usb_probe_interface+0x5b6/0xa90 [ 822.230998][ T2284] ? really_probe+0x28d/0x970 [ 822.236023][ T2284] ? usb_probe_device+0x144/0x260 [ 822.241031][ T2284] ? __device_attach+0x312/0x510 [ 822.246004][ T2284] ? bus_probe_device+0xbe/0x1e0 [ 822.251099][ T2284] ? usb_new_device+0x1038/0x1c00 [ 822.256081][ T2284] ? hub_event+0x2def/0x4770 [ 822.261011][ T2284] ? process_one_work+0x6bb/0xc10 [ 822.266385][ T2284] ? worker_thread+0xe02/0x12a0 [ 822.271445][ T2284] ? kthread+0x421/0x510 [ 822.275859][ T2284] ? ret_from_fork+0x1f/0x30 [ 822.280371][ T2284] ? mixer_ctl_connector_get+0x1b0/0x1b0 [ 822.286281][ T2284] ? snd_usb_find_csint_desc+0x216/0x220 [ 822.292467][ T2284] snd_usb_create_mixer+0x122f/0x2dd0 [ 822.297845][ T2284] ? dev_vprintk_emit+0x326/0x326 [ 822.302795][ T2284] ? snd_usb_mixer_notify_id+0x2d0/0x2d0 [ 822.308260][ T2284] ? __dev_printk+0x17d/0x1b0 [ 822.312869][ T2284] ? _dev_crit+0x165/0x165 [ 822.317206][ T2284] ? usb_ifnum_to_if+0x239/0x280 [ 822.322103][ T2284] ? snd_usb_create_stream+0x366/0x530 [ 822.327731][ T2284] usb_audio_probe+0x1412/0x2260 [ 822.332519][ T2284] ? snd_usb_autosuspend+0x1e0/0x1e0 [ 822.337632][ T2284] ? pm_runtime_enable+0x1e5/0x320 [ 822.342657][ T2284] ? ktime_get_mono_fast_ns+0x1bf/0x1e0 [ 822.348909][ T2284] ? pm_runtime_enable+0x1e5/0x320 [ 822.353948][ T2284] usb_probe_interface+0x5b6/0xa90 [ 822.358982][ T2284] ? usb_register_driver+0x440/0x440 [ 822.364093][ T2284] really_probe+0x28d/0x970 [ 822.368447][ T2284] ? __kasan_check_write+0x14/0x20 [ 822.373741][ T2284] __driver_probe_device+0x1a0/0x310 [ 822.379367][ T2284] driver_probe_device+0x54/0x3d0 [ 822.384664][ T2284] ? __device_attach_driver+0x2af/0x470 [ 822.390450][ T2284] __device_attach_driver+0x2c5/0x470 [ 822.396390][ T2284] ? deferred_probe_work_func+0x240/0x240 [ 822.402226][ T2284] bus_for_each_drv+0x183/0x200 [ 822.407273][ T2284] ? kfree+0xc8/0x220 [ 822.411090][ T2284] ? subsys_find_device_by_id+0x310/0x310 [ 822.416732][ T2284] ? __pm_runtime_resume+0x11e/0x170 [ 822.421878][ T2284] __device_attach+0x312/0x510 [ 822.426804][ T2284] ? kobject_uevent_env+0x33c/0x700 [ 822.432494][ T2284] ? device_attach+0x20/0x20 [ 822.437016][ T2284] device_initial_probe+0x1a/0x20 [ 822.442398][ T2284] bus_probe_device+0xbe/0x1e0 [ 822.447020][ T2284] device_add+0xb60/0xf10 [ 822.451350][ T2284] usb_set_configuration+0x190f/0x1e80 [ 822.456638][ T2284] usb_generic_driver_probe+0x8b/0x150 [ 822.462449][ T2284] usb_probe_device+0x144/0x260 [ 822.467220][ T2284] ? usb_register_device_driver+0x240/0x240 [ 822.472959][ T2284] really_probe+0x28d/0x970 [ 822.477289][ T2284] ? __kasan_check_write+0x14/0x20 [ 822.482615][ T2284] __driver_probe_device+0x1a0/0x310 [ 822.487925][ T2284] driver_probe_device+0x54/0x3d0 [ 822.492948][ T2284] ? __device_attach_driver+0x2af/0x470 [ 822.498429][ T2284] __device_attach_driver+0x2c5/0x470 [ 822.503972][ T2284] ? deferred_probe_work_func+0x240/0x240 [ 822.509523][ T2284] bus_for_each_drv+0x183/0x200 [ 822.514219][ T2284] ? kasan_quarantine_put+0x34/0x1a0 [ 822.519508][ T2284] ? subsys_find_device_by_id+0x310/0x310 [ 822.525064][ T2284] ? __pm_runtime_resume+0x11e/0x170 [ 822.530357][ T2284] __device_attach+0x312/0x510 [ 822.534957][ T2284] ? kobject_uevent_env+0x33c/0x700 [ 822.540166][ T2284] ? device_attach+0x20/0x20 [ 822.544870][ T2284] ? kobject_uevent_env+0x33c/0x700 [ 822.550264][ T2284] device_initial_probe+0x1a/0x20 [ 822.555498][ T2284] bus_probe_device+0xbe/0x1e0 [ 822.560562][ T2284] device_add+0xb60/0xf10 [ 822.564781][ T2284] usb_new_device+0x1038/0x1c00 [ 822.569552][ T2284] ? usb_disconnect+0x890/0x890 [ 822.574621][ T2284] ? __mutex_lock_slowpath+0x10/0x10 [ 822.580467][ T2284] hub_event+0x2def/0x4770 [ 822.585083][ T2284] ? led_work+0x590/0x590 [ 822.589386][ T2284] ? _raw_spin_unlock+0x4d/0x70 [ 822.594254][ T2284] ? __kasan_check_write+0x14/0x20 [ 822.599792][ T2284] ? __kasan_check_read+0x11/0x20 [ 822.604823][ T2284] ? read_word_at_a_time+0x12/0x20 [ 822.610500][ T2284] ? strscpy+0x9c/0x260 [ 822.614670][ T2284] process_one_work+0x6bb/0xc10 [ 822.619552][ T2284] worker_thread+0xe02/0x12a0 [ 822.624221][ T2284] kthread+0x421/0x510 [ 822.629469][ T2284] ? worker_clr_flags+0x180/0x180 [ 822.634594][ T2284] ? kthread_blkcg+0xd0/0xd0 [ 822.639031][ T2284] ret_from_fork+0x1f/0x30 [ 822.643281][ T2284] [ 822.647943][ T2284] ================================================================================ [ 822.894211][ T2284] usb 5-1: 5:0: cannot get min/max values for control 2 (id 5) [ 822.906171][ T2284] usb 5-1: USB disconnect, device number 100 [ 822.925718][ T314] udevd[314]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 823.944295][ T6981] r8152-cfgselector 3-1: Unknown version 0x0000 [ 823.964314][ T6981] r8152-cfgselector 3-1: Unknown version 0x0000 [ 823.970850][ T6981] r8152-cfgselector 3-1: bad CDC descriptors [ 823.994243][ T6981] r8152-cfgselector 3-1: Unknown version 0x0000 [ 824.002192][ T6981] r8152-cfgselector 3-1: USB disconnect, device number 114