Warning: Permanently added '10.128.0.136' (ED25519) to the list of known hosts. 2024/03/22 13:20:36 fuzzer started 2024/03/22 13:20:36 dialing manager at 10.128.0.169:30012 [ 152.562789][ T5014] cgroup: Unknown subsys name 'net' [ 152.725671][ T5014] cgroup: Unknown subsys name 'rlimit' [ 157.651796][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.658447][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 2024/03/22 13:21:23 syscalls: 3852 2024/03/22 13:21:23 code coverage: enabled 2024/03/22 13:21:23 comparison tracing: enabled 2024/03/22 13:21:23 extra coverage: enabled 2024/03/22 13:21:23 delay kcov mmap: enabled 2024/03/22 13:21:23 setuid sandbox: enabled 2024/03/22 13:21:23 namespace sandbox: enabled 2024/03/22 13:21:23 Android sandbox: /sys/fs/selinux/policy does not exist 2024/03/22 13:21:23 fault injection: enabled 2024/03/22 13:21:23 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/03/22 13:21:23 net packet injection: enabled 2024/03/22 13:21:23 net device setup: enabled 2024/03/22 13:21:23 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/03/22 13:21:23 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/03/22 13:21:23 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/03/22 13:21:23 USB emulation: enabled 2024/03/22 13:21:23 hci packet injection: enabled 2024/03/22 13:21:23 wifi device emulation: enabled 2024/03/22 13:21:23 802.15.4 emulation: enabled 2024/03/22 13:21:23 swap file: enabled [ 198.345173][ T5014] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/22 13:21:27 fetching corpus: 0, signal 0/2000 (executing program) 2024/03/22 13:21:27 fetching corpus: 49, signal 10613/4000 (executing program) 2024/03/22 13:21:27 fetching corpus: 99, signal 16829/6000 (executing program) 2024/03/22 13:21:27 fetching corpus: 149, signal 21516/8000 (executing program) 2024/03/22 13:21:27 fetching corpus: 199, signal 25013/10000 (executing program) 2024/03/22 13:21:27 fetching corpus: 249, signal 27692/12000 (executing program) 2024/03/22 13:21:27 fetching corpus: 299, signal 32119/14000 (executing program) 2024/03/22 13:21:27 fetching corpus: 349, signal 38255/16000 (executing program) 2024/03/22 13:21:28 fetching corpus: 399, signal 40215/18000 (executing program) 2024/03/22 13:21:28 fetching corpus: 449, signal 42714/20000 (executing program) 2024/03/22 13:21:28 fetching corpus: 499, signal 44878/22000 (executing program) 2024/03/22 13:21:28 fetching corpus: 549, signal 47449/24000 (executing program) 2024/03/22 13:21:28 fetching corpus: 599, signal 49865/26000 (executing program) 2024/03/22 13:21:28 fetching corpus: 649, signal 52603/28000 (executing program) 2024/03/22 13:21:28 fetching corpus: 699, signal 54940/30000 (executing program) 2024/03/22 13:21:28 fetching corpus: 749, signal 56913/32000 (executing program) 2024/03/22 13:21:29 fetching corpus: 799, signal 59153/34000 (executing program) 2024/03/22 13:21:29 fetching corpus: 849, signal 60509/36000 (executing program) 2024/03/22 13:21:29 fetching corpus: 899, signal 62833/38000 (executing program) 2024/03/22 13:21:29 fetching corpus: 949, signal 64594/40000 (executing program) 2024/03/22 13:21:29 fetching corpus: 999, signal 66100/42000 (executing program) 2024/03/22 13:21:29 fetching corpus: 1049, signal 68574/44000 (executing program) 2024/03/22 13:21:29 fetching corpus: 1099, signal 71060/46000 (executing program) 2024/03/22 13:21:29 fetching corpus: 1149, signal 73269/48000 (executing program) 2024/03/22 13:21:30 fetching corpus: 1199, signal 74067/50000 (executing program) 2024/03/22 13:21:30 fetching corpus: 1249, signal 75728/52000 (executing program) 2024/03/22 13:21:30 fetching corpus: 1299, signal 78392/54000 (executing program) 2024/03/22 13:21:30 fetching corpus: 1349, signal 79588/56000 (executing program) 2024/03/22 13:21:30 fetching corpus: 1399, signal 80510/58000 (executing program) 2024/03/22 13:21:30 fetching corpus: 1449, signal 81500/60000 (executing program) 2024/03/22 13:21:30 fetching corpus: 1499, signal 82903/62000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1549, signal 84355/64000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1599, signal 85496/66000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1649, signal 86409/68000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1699, signal 87690/70000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1749, signal 88848/72000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1799, signal 89885/74000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1849, signal 91315/76000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1899, signal 92260/78000 (executing program) 2024/03/22 13:21:31 fetching corpus: 1949, signal 93025/80000 (executing program) 2024/03/22 13:21:32 fetching corpus: 1999, signal 94390/82000 (executing program) 2024/03/22 13:21:32 fetching corpus: 2049, signal 95223/84000 (executing program) 2024/03/22 13:21:32 fetching corpus: 2099, signal 96504/86000 (executing program) 2024/03/22 13:21:32 fetching corpus: 2149, signal 97006/88000 (executing program) 2024/03/22 13:21:32 fetching corpus: 2199, signal 98136/90000 (executing program) 2024/03/22 13:21:32 fetching corpus: 2249, signal 99303/92000 (executing program) 2024/03/22 13:21:33 fetching corpus: 2299, signal 100489/94000 (executing program) 2024/03/22 13:21:33 fetching corpus: 2349, signal 102164/96000 (executing program) 2024/03/22 13:21:33 fetching corpus: 2399, signal 102932/98000 (executing program) 2024/03/22 13:21:33 fetching corpus: 2449, signal 103395/100000 (executing program) 2024/03/22 13:21:33 fetching corpus: 2499, signal 105285/102000 (executing program) 2024/03/22 13:21:33 fetching corpus: 2549, signal 106211/104000 (executing program) 2024/03/22 13:21:33 fetching corpus: 2599, signal 107161/106000 (executing program) 2024/03/22 13:21:34 fetching corpus: 2649, signal 108057/108000 (executing program) 2024/03/22 13:21:34 fetching corpus: 2699, signal 108818/110000 (executing program) 2024/03/22 13:21:34 fetching corpus: 2749, signal 109493/112000 (executing program) 2024/03/22 13:21:34 fetching corpus: 2799, signal 110220/114000 (executing program) 2024/03/22 13:21:34 fetching corpus: 2849, signal 110890/116000 (executing program) 2024/03/22 13:21:34 fetching corpus: 2899, signal 111776/118000 (executing program) 2024/03/22 13:21:34 fetching corpus: 2949, signal 112834/120000 (executing program) 2024/03/22 13:21:34 fetching corpus: 2999, signal 113751/122000 (executing program) 2024/03/22 13:21:34 fetching corpus: 3049, signal 114360/124000 (executing program) 2024/03/22 13:21:34 fetching corpus: 3099, signal 115086/126000 (executing program) 2024/03/22 13:21:34 fetching corpus: 3149, signal 115813/128000 (executing program) 2024/03/22 13:21:34 fetching corpus: 3199, signal 116201/130000 (executing program) 2024/03/22 13:21:34 fetching corpus: 3249, signal 116899/132000 (executing program) 2024/03/22 13:21:34 fetching corpus: 3299, signal 117889/134000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3349, signal 118618/136000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3399, signal 119554/138000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3449, signal 120051/140000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3499, signal 120588/142000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3549, signal 121330/144000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3599, signal 122109/146000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3649, signal 122859/148000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3699, signal 123531/150000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3749, signal 124180/152000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3799, signal 124829/154000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3849, signal 125475/156000 (executing program) 2024/03/22 13:21:35 fetching corpus: 3899, signal 126282/158000 (executing program) 2024/03/22 13:21:36 fetching corpus: 3949, signal 126876/160000 (executing program) 2024/03/22 13:21:36 fetching corpus: 3999, signal 127479/162000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4049, signal 128393/164000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4099, signal 128983/166000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4149, signal 129608/168000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4199, signal 130239/170000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4249, signal 131040/172000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4299, signal 131664/174000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4348, signal 132329/176000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4398, signal 132901/178000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4448, signal 133371/180000 (executing program) 2024/03/22 13:21:36 fetching corpus: 4498, signal 134291/182000 (executing program) 2024/03/22 13:21:37 fetching corpus: 4548, signal 136005/184000 (executing program) 2024/03/22 13:21:37 fetching corpus: 4598, signal 136777/186000 (executing program) 2024/03/22 13:21:37 fetching corpus: 4648, signal 137219/188000 (executing program) 2024/03/22 13:21:37 fetching corpus: 4698, signal 138204/190000 (executing program) 2024/03/22 13:21:37 fetching corpus: 4748, signal 138650/192000 (executing program) 2024/03/22 13:21:37 fetching corpus: 4798, signal 139158/194000 (executing program) 2024/03/22 13:21:37 fetching corpus: 4848, signal 139648/196000 (executing program) 2024/03/22 13:21:37 fetching corpus: 4898, signal 140608/198000 (executing program) 2024/03/22 13:21:38 fetching corpus: 4948, signal 141503/200000 (executing program) 2024/03/22 13:21:38 fetching corpus: 4998, signal 142020/202000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5048, signal 142992/204000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5098, signal 143541/206000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5148, signal 144152/208000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5198, signal 144599/210000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5248, signal 145030/212000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5298, signal 146010/214000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5348, signal 146904/216000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5398, signal 147374/218000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5448, signal 147864/220000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5498, signal 148289/222000 (executing program) 2024/03/22 13:21:38 fetching corpus: 5548, signal 148769/224000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5598, signal 149134/226000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5648, signal 149627/228000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5698, signal 150218/230000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5748, signal 150820/232000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5798, signal 151321/234000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5848, signal 152203/236000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5898, signal 152763/238000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5948, signal 153286/240000 (executing program) 2024/03/22 13:21:39 fetching corpus: 5998, signal 153826/242000 (executing program) 2024/03/22 13:21:39 fetching corpus: 6048, signal 154509/244000 (executing program) 2024/03/22 13:21:39 fetching corpus: 6098, signal 155069/246000 (executing program) 2024/03/22 13:21:39 fetching corpus: 6148, signal 155574/248000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6198, signal 156122/250000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6248, signal 156611/252000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6298, signal 157108/254000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6348, signal 157629/256000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6398, signal 158190/258000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6448, signal 158720/260000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6498, signal 159537/262000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6548, signal 160060/264000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6598, signal 160493/266000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6648, signal 161005/268000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6698, signal 161517/270000 (executing program) 2024/03/22 13:21:40 fetching corpus: 6748, signal 162132/272000 (executing program) 2024/03/22 13:21:41 fetching corpus: 6798, signal 162983/274000 (executing program) 2024/03/22 13:21:41 fetching corpus: 6848, signal 163572/276000 (executing program) 2024/03/22 13:21:41 fetching corpus: 6898, signal 164056/278000 (executing program) 2024/03/22 13:21:41 fetching corpus: 6948, signal 164577/280000 (executing program) 2024/03/22 13:21:41 fetching corpus: 6998, signal 164890/282000 (executing program) 2024/03/22 13:21:41 fetching corpus: 7048, signal 165442/284000 (executing program) 2024/03/22 13:21:41 fetching corpus: 7098, signal 166028/286000 (executing program) 2024/03/22 13:21:41 fetching corpus: 7148, signal 166567/288000 (executing program) 2024/03/22 13:21:41 fetching corpus: 7198, signal 167071/290000 (executing program) 2024/03/22 13:21:41 fetching corpus: 7248, signal 167483/292000 (executing program) 2024/03/22 13:21:41 fetching corpus: 7298, signal 167788/294000 (executing program) 2024/03/22 13:21:41 fetching corpus: 7348, signal 168290/296000 (executing program) 2024/03/22 13:21:41 fetching corpus: 7398, signal 168697/298000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7448, signal 169192/300000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7498, signal 169601/302000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7548, signal 170425/304000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7598, signal 171004/306000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7648, signal 171579/308000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7698, signal 171922/310000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7748, signal 172888/312000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7798, signal 173284/314000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7848, signal 173628/316000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7898, signal 174489/318000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7948, signal 174991/320000 (executing program) 2024/03/22 13:21:42 fetching corpus: 7998, signal 175571/322000 (executing program) 2024/03/22 13:21:42 fetching corpus: 8048, signal 176044/324000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8098, signal 176412/326000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8148, signal 176689/328000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8198, signal 177168/330000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8248, signal 177531/332000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8298, signal 178047/334000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8348, signal 178418/336000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8398, signal 178701/338000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8448, signal 178998/340000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8498, signal 179366/342000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8548, signal 179904/344000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8598, signal 180227/346000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8648, signal 180547/348000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8698, signal 180963/350000 (executing program) 2024/03/22 13:21:43 fetching corpus: 8748, signal 181556/352000 (executing program) 2024/03/22 13:21:44 fetching corpus: 8798, signal 181945/354000 (executing program) 2024/03/22 13:21:44 fetching corpus: 8848, signal 182484/356000 (executing program) 2024/03/22 13:21:44 fetching corpus: 8898, signal 182759/358000 (executing program) 2024/03/22 13:21:44 fetching corpus: 8948, signal 183291/360000 (executing program) 2024/03/22 13:21:44 fetching corpus: 8998, signal 183669/362000 (executing program) 2024/03/22 13:21:44 fetching corpus: 9048, signal 184083/364000 (executing program) [ 219.093091][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.099770][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 2024/03/22 13:21:44 fetching corpus: 9098, signal 184388/366000 (executing program) 2024/03/22 13:21:44 fetching corpus: 9148, signal 184734/368000 (executing program) 2024/03/22 13:21:44 fetching corpus: 9198, signal 185148/370000 (executing program) 2024/03/22 13:21:44 fetching corpus: 9248, signal 185567/372000 (executing program) 2024/03/22 13:21:44 fetching corpus: 9298, signal 186046/374000 (executing program) 2024/03/22 13:21:44 fetching corpus: 9348, signal 186381/376000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9398, signal 186829/378000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9448, signal 187239/380000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9498, signal 187730/382000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9548, signal 188021/384000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9598, signal 188336/386000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9648, signal 188654/388000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9698, signal 189262/390000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9748, signal 189575/392000 (executing program) 2024/03/22 13:21:45 fetching corpus: 9798, signal 189932/394000 (executing program) 2024/03/22 13:21:46 fetching corpus: 9848, signal 190348/396000 (executing program) 2024/03/22 13:21:46 fetching corpus: 9898, signal 190853/398000 (executing program) 2024/03/22 13:21:46 fetching corpus: 9948, signal 191223/400000 (executing program) 2024/03/22 13:21:46 fetching corpus: 9998, signal 191559/402000 (executing program) 2024/03/22 13:21:46 fetching corpus: 10048, signal 191859/404000 (executing program) 2024/03/22 13:21:46 fetching corpus: 10098, signal 192178/406000 (executing program) 2024/03/22 13:21:46 fetching corpus: 10148, signal 192568/408000 (executing program) 2024/03/22 13:21:46 fetching corpus: 10198, signal 192823/410000 (executing program) 2024/03/22 13:21:47 fetching corpus: 10248, signal 193334/412000 (executing program) 2024/03/22 13:21:47 fetching corpus: 10298, signal 193818/414000 (executing program) 2024/03/22 13:21:47 fetching corpus: 10348, signal 194244/416000 (executing program) 2024/03/22 13:21:47 fetching corpus: 10398, signal 194610/418000 (executing program) 2024/03/22 13:21:47 fetching corpus: 10448, signal 194930/419608 (executing program) 2024/03/22 13:21:47 fetching corpus: 10498, signal 195560/419608 (executing program) 2024/03/22 13:21:47 fetching corpus: 10548, signal 196067/419608 (executing program) 2024/03/22 13:21:47 fetching corpus: 10598, signal 196475/419608 (executing program) 2024/03/22 13:21:47 fetching corpus: 10648, signal 197048/419608 (executing program) 2024/03/22 13:21:47 fetching corpus: 10698, signal 197451/419608 (executing program) 2024/03/22 13:21:47 fetching corpus: 10748, signal 197799/419608 (executing program) 2024/03/22 13:21:47 fetching corpus: 10798, signal 198110/419608 (executing program) 2024/03/22 13:21:47 fetching corpus: 10848, signal 198557/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 10898, signal 199021/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 10948, signal 199267/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 10998, signal 199585/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11048, signal 199936/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11098, signal 200388/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11148, signal 200763/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11198, signal 201053/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11248, signal 201325/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11298, signal 201692/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11348, signal 202065/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11398, signal 202355/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11448, signal 202779/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11498, signal 203078/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11548, signal 203344/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11598, signal 203586/419608 (executing program) 2024/03/22 13:21:48 fetching corpus: 11648, signal 203906/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 11698, signal 204290/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 11748, signal 204570/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 11798, signal 205013/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 11848, signal 205293/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 11898, signal 205697/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 11948, signal 206106/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 11998, signal 206846/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 12048, signal 207347/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 12098, signal 207636/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 12148, signal 207981/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 12198, signal 208328/419623 (executing program) 2024/03/22 13:21:49 fetching corpus: 12248, signal 208630/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12298, signal 209053/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12348, signal 209401/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12398, signal 209706/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12448, signal 209982/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12498, signal 210422/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12548, signal 210762/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12598, signal 211074/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12648, signal 211371/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12698, signal 211723/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12748, signal 212067/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12798, signal 212323/419623 (executing program) 2024/03/22 13:21:50 fetching corpus: 12848, signal 212581/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 12898, signal 212935/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 12948, signal 213246/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 12998, signal 213637/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13048, signal 213923/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13098, signal 214197/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13148, signal 214491/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13198, signal 214708/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13248, signal 214941/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13298, signal 215222/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13348, signal 215529/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13398, signal 215831/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13448, signal 216152/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13498, signal 216420/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13548, signal 216786/419623 (executing program) 2024/03/22 13:21:51 fetching corpus: 13598, signal 217000/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 13648, signal 217359/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 13698, signal 217547/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 13748, signal 217780/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 13798, signal 217971/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 13848, signal 218255/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 13898, signal 218452/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 13948, signal 218774/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 13998, signal 219089/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 14048, signal 219321/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 14098, signal 219616/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 14148, signal 219888/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 14198, signal 220266/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 14248, signal 220600/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 14298, signal 220791/419623 (executing program) 2024/03/22 13:21:52 fetching corpus: 14348, signal 221104/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14398, signal 221435/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14448, signal 221636/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14498, signal 221899/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14548, signal 222286/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14598, signal 222522/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14648, signal 222716/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14698, signal 222903/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14748, signal 223176/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14798, signal 223643/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14848, signal 223919/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14898, signal 224129/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14948, signal 224409/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 14998, signal 224739/419623 (executing program) 2024/03/22 13:21:53 fetching corpus: 15048, signal 224954/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15098, signal 225213/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15148, signal 225504/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15198, signal 225786/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15248, signal 225971/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15298, signal 226211/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15348, signal 226461/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15398, signal 226720/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15448, signal 227007/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15498, signal 227248/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15548, signal 227589/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15598, signal 227972/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15648, signal 228219/419623 (executing program) 2024/03/22 13:21:54 fetching corpus: 15698, signal 228408/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 15748, signal 228692/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 15798, signal 228948/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 15848, signal 229123/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 15898, signal 229434/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 15948, signal 229776/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 15998, signal 230087/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16048, signal 230307/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16098, signal 230600/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16148, signal 230841/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16198, signal 231098/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16248, signal 231302/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16298, signal 231583/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16348, signal 231818/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16398, signal 232014/419623 (executing program) 2024/03/22 13:21:55 fetching corpus: 16448, signal 232285/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16498, signal 232523/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16548, signal 232856/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16598, signal 233246/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16648, signal 233499/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16698, signal 233670/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16748, signal 234039/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16798, signal 234284/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16848, signal 234551/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16898, signal 234745/419623 (executing program) 2024/03/22 13:21:56 fetching corpus: 16948, signal 234967/419624 (executing program) 2024/03/22 13:21:56 fetching corpus: 16998, signal 235244/419624 (executing program) 2024/03/22 13:21:56 fetching corpus: 17048, signal 235528/419624 (executing program) 2024/03/22 13:21:56 fetching corpus: 17098, signal 235861/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17148, signal 236095/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17198, signal 236333/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17248, signal 236577/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17298, signal 236867/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17348, signal 237174/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17398, signal 237381/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17448, signal 237562/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17498, signal 237714/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17548, signal 237982/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17598, signal 238175/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17648, signal 238639/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17698, signal 238985/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17748, signal 239272/419624 (executing program) 2024/03/22 13:21:57 fetching corpus: 17798, signal 239510/419624 (executing program) 2024/03/22 13:21:58 fetching corpus: 17848, signal 239727/419624 (executing program) 2024/03/22 13:21:58 fetching corpus: 17898, signal 239961/419624 (executing program) 2024/03/22 13:21:58 fetching corpus: 17948, signal 240187/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 17998, signal 240331/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18048, signal 240750/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18098, signal 240933/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18148, signal 241126/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18198, signal 241608/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18248, signal 241811/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18298, signal 242029/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18348, signal 242282/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18398, signal 242543/419625 (executing program) 2024/03/22 13:21:58 fetching corpus: 18448, signal 242756/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18498, signal 242945/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18548, signal 243195/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18598, signal 243421/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18648, signal 243670/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18698, signal 244003/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18748, signal 244315/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18798, signal 244585/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18848, signal 244746/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18898, signal 244997/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18948, signal 245310/419625 (executing program) 2024/03/22 13:21:59 fetching corpus: 18998, signal 245516/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19048, signal 245856/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19098, signal 246074/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19148, signal 246289/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19198, signal 246512/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19248, signal 246703/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19298, signal 246897/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19348, signal 247067/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19398, signal 247313/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19448, signal 247600/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19498, signal 247792/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19548, signal 248415/419625 (executing program) 2024/03/22 13:22:00 fetching corpus: 19598, signal 248593/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 19648, signal 248871/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 19698, signal 249099/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 19748, signal 249311/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 19798, signal 249487/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 19848, signal 249723/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 19898, signal 249964/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 19948, signal 250230/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 19998, signal 250489/419625 (executing program) 2024/03/22 13:22:01 fetching corpus: 20048, signal 250678/419625 (executing program) 2024/03/22 13:22:02 fetching corpus: 20098, signal 250898/419625 (executing program) 2024/03/22 13:22:02 fetching corpus: 20148, signal 251083/419625 (executing program) 2024/03/22 13:22:02 fetching corpus: 20198, signal 251406/419625 (executing program) 2024/03/22 13:22:02 fetching corpus: 20248, signal 251747/419625 (executing program) 2024/03/22 13:22:02 fetching corpus: 20298, signal 252012/419626 (executing program) 2024/03/22 13:22:02 fetching corpus: 20348, signal 252253/419626 (executing program) 2024/03/22 13:22:02 fetching corpus: 20398, signal 252528/419626 (executing program) 2024/03/22 13:22:02 fetching corpus: 20448, signal 252747/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20498, signal 252889/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20548, signal 253328/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20598, signal 253597/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20648, signal 253843/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20698, signal 254059/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20748, signal 254342/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20798, signal 254543/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20848, signal 254790/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20898, signal 255049/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20948, signal 255300/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 20998, signal 255558/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 21048, signal 255748/419626 (executing program) 2024/03/22 13:22:03 fetching corpus: 21098, signal 256137/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21148, signal 256360/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21198, signal 256561/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21248, signal 256832/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21298, signal 257048/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21348, signal 257250/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21398, signal 257578/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21448, signal 257819/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21498, signal 257980/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21548, signal 258184/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21598, signal 258462/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21648, signal 258779/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21698, signal 258916/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21748, signal 259118/419626 (executing program) 2024/03/22 13:22:04 fetching corpus: 21798, signal 259353/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 21848, signal 259531/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 21898, signal 259809/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 21948, signal 260054/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 21998, signal 260215/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22048, signal 260398/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22098, signal 260597/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22148, signal 260798/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22198, signal 260976/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22248, signal 261208/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22298, signal 261383/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22348, signal 261769/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22398, signal 262019/419626 (executing program) 2024/03/22 13:22:05 fetching corpus: 22448, signal 262171/419626 (executing program) 2024/03/22 13:22:06 fetching corpus: 22498, signal 262348/419626 (executing program) 2024/03/22 13:22:06 fetching corpus: 22548, signal 262524/419626 (executing program) 2024/03/22 13:22:06 fetching corpus: 22598, signal 262737/419626 (executing program) 2024/03/22 13:22:06 fetching corpus: 22648, signal 262937/419626 (executing program) 2024/03/22 13:22:06 fetching corpus: 22698, signal 263179/419626 (executing program) 2024/03/22 13:22:06 fetching corpus: 22748, signal 263327/419626 (executing program) 2024/03/22 13:22:07 fetching corpus: 22798, signal 263554/419626 (executing program) 2024/03/22 13:22:07 fetching corpus: 22848, signal 263721/419626 (executing program) 2024/03/22 13:22:07 fetching corpus: 22898, signal 263920/419626 (executing program) 2024/03/22 13:22:07 fetching corpus: 22948, signal 264065/419626 (executing program) 2024/03/22 13:22:07 fetching corpus: 22998, signal 264516/419626 (executing program) 2024/03/22 13:22:07 fetching corpus: 23048, signal 264854/419626 (executing program) 2024/03/22 13:22:07 fetching corpus: 23098, signal 265090/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23148, signal 265265/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23198, signal 265540/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23248, signal 265741/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23298, signal 265938/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23348, signal 266148/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23398, signal 266310/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23448, signal 266602/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23498, signal 266910/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23548, signal 267164/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23598, signal 267354/419626 (executing program) 2024/03/22 13:22:08 fetching corpus: 23648, signal 267572/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 23698, signal 267840/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 23748, signal 268116/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 23798, signal 268247/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 23848, signal 268456/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 23898, signal 268617/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 23948, signal 268866/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 23998, signal 269124/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 24048, signal 269381/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 24098, signal 269580/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 24148, signal 269787/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 24198, signal 269959/419626 (executing program) 2024/03/22 13:22:09 fetching corpus: 24248, signal 270191/419626 (executing program) 2024/03/22 13:22:10 fetching corpus: 24298, signal 270532/419626 (executing program) 2024/03/22 13:22:10 fetching corpus: 24348, signal 270711/419626 (executing program) 2024/03/22 13:22:10 fetching corpus: 24398, signal 270954/419626 (executing program) 2024/03/22 13:22:10 fetching corpus: 24448, signal 271187/419626 (executing program) 2024/03/22 13:22:10 fetching corpus: 24498, signal 271343/419626 (executing program) 2024/03/22 13:22:10 fetching corpus: 24548, signal 271544/419626 (executing program) 2024/03/22 13:22:10 fetching corpus: 24598, signal 271710/419626 (executing program) 2024/03/22 13:22:10 fetching corpus: 24648, signal 271979/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 24698, signal 272269/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 24748, signal 272416/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 24798, signal 272672/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 24848, signal 272833/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 24898, signal 273107/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 24948, signal 273361/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 24998, signal 273518/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 25048, signal 273697/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 25098, signal 273887/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 25148, signal 274037/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 25198, signal 274205/419626 (executing program) 2024/03/22 13:22:11 fetching corpus: 25248, signal 274432/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25298, signal 274651/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25348, signal 274882/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25398, signal 275147/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25448, signal 275354/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25498, signal 275650/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25548, signal 275828/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25598, signal 275945/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25648, signal 276183/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25698, signal 276354/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25748, signal 276622/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25798, signal 276781/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25848, signal 276922/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25898, signal 277118/419626 (executing program) 2024/03/22 13:22:12 fetching corpus: 25948, signal 277310/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 25998, signal 277478/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26048, signal 277740/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26098, signal 277873/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26148, signal 278086/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26198, signal 278243/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26248, signal 278395/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26298, signal 278558/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26348, signal 278701/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26398, signal 278899/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26448, signal 279120/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26498, signal 279297/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26548, signal 279449/419626 (executing program) 2024/03/22 13:22:13 fetching corpus: 26598, signal 279832/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 26648, signal 280018/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 26698, signal 280195/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 26748, signal 280373/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 26798, signal 280540/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 26848, signal 280852/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 26898, signal 281032/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 26948, signal 281208/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 26998, signal 281342/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 27048, signal 281568/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 27098, signal 281734/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 27148, signal 281948/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 27198, signal 282091/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 27248, signal 282260/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 27298, signal 282435/419626 (executing program) 2024/03/22 13:22:14 fetching corpus: 27348, signal 282657/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27398, signal 282880/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27448, signal 283063/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27498, signal 283184/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27548, signal 283380/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27598, signal 283547/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27648, signal 283727/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27698, signal 283902/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27748, signal 284116/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27798, signal 284305/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27848, signal 284529/419626 (executing program) 2024/03/22 13:22:15 fetching corpus: 27898, signal 284732/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 27948, signal 284875/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 27998, signal 285029/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28048, signal 285237/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28098, signal 285429/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28148, signal 285605/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28198, signal 285772/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28248, signal 285900/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28298, signal 286112/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28348, signal 286320/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28398, signal 286495/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28448, signal 286659/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28498, signal 286862/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28548, signal 287054/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28598, signal 287175/419626 (executing program) 2024/03/22 13:22:16 fetching corpus: 28648, signal 287318/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 28698, signal 287571/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 28748, signal 287714/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 28798, signal 287994/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 28848, signal 288165/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 28898, signal 288301/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 28948, signal 288452/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 28998, signal 288641/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 29048, signal 288811/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 29098, signal 289148/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 29148, signal 289375/419626 (executing program) 2024/03/22 13:22:17 fetching corpus: 29198, signal 289583/419626 (executing program) 2024/03/22 13:22:18 fetching corpus: 29248, signal 289795/419626 (executing program) 2024/03/22 13:22:18 fetching corpus: 29298, signal 289920/419626 (executing program) 2024/03/22 13:22:18 fetching corpus: 29348, signal 290324/419626 (executing program) 2024/03/22 13:22:18 fetching corpus: 29398, signal 290494/419626 (executing program) 2024/03/22 13:22:18 fetching corpus: 29448, signal 290699/419626 (executing program) 2024/03/22 13:22:18 fetching corpus: 29498, signal 290859/419626 (executing program) 2024/03/22 13:22:19 fetching corpus: 29548, signal 291062/419626 (executing program) 2024/03/22 13:22:19 fetching corpus: 29598, signal 291220/419626 (executing program) 2024/03/22 13:22:19 fetching corpus: 29648, signal 291485/419626 (executing program) 2024/03/22 13:22:19 fetching corpus: 29698, signal 291703/419626 (executing program) 2024/03/22 13:22:19 fetching corpus: 29748, signal 291855/419626 (executing program) 2024/03/22 13:22:20 fetching corpus: 29798, signal 292045/419626 (executing program) 2024/03/22 13:22:20 fetching corpus: 29848, signal 292241/419626 (executing program) 2024/03/22 13:22:20 fetching corpus: 29898, signal 292399/419626 (executing program) 2024/03/22 13:22:20 fetching corpus: 29948, signal 292595/419626 (executing program) 2024/03/22 13:22:20 fetching corpus: 29998, signal 292920/419626 (executing program) 2024/03/22 13:22:20 fetching corpus: 30048, signal 293090/419626 (executing program) 2024/03/22 13:22:20 fetching corpus: 30098, signal 293417/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30148, signal 293587/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30198, signal 293919/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30248, signal 294083/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30298, signal 294291/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30348, signal 294432/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30398, signal 294569/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30448, signal 294728/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30498, signal 294916/419626 (executing program) 2024/03/22 13:22:21 fetching corpus: 30548, signal 295117/419626 (executing program) 2024/03/22 13:22:22 fetching corpus: 30598, signal 295234/419626 (executing program) 2024/03/22 13:22:22 fetching corpus: 30648, signal 295353/419626 (executing program) 2024/03/22 13:22:22 fetching corpus: 30698, signal 295494/419626 (executing program) 2024/03/22 13:22:22 fetching corpus: 30748, signal 295709/419626 (executing program) 2024/03/22 13:22:22 fetching corpus: 30798, signal 295888/419626 (executing program) 2024/03/22 13:22:22 fetching corpus: 30848, signal 296025/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 30898, signal 296155/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 30948, signal 296340/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 30998, signal 296506/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 31048, signal 296738/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 31098, signal 296916/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 31148, signal 297082/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 31198, signal 297299/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 31248, signal 297481/419628 (executing program) 2024/03/22 13:22:23 fetching corpus: 31298, signal 297650/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31348, signal 297835/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31398, signal 297977/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31448, signal 298111/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31498, signal 298260/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31548, signal 298423/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31598, signal 298603/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31648, signal 298732/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31698, signal 298907/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31748, signal 299040/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31798, signal 299143/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31848, signal 299318/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31898, signal 299636/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31948, signal 299813/419628 (executing program) 2024/03/22 13:22:24 fetching corpus: 31998, signal 300025/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32048, signal 300177/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32098, signal 300344/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32148, signal 300480/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32198, signal 300658/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32248, signal 300806/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32298, signal 300969/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32348, signal 301127/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32398, signal 301297/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32448, signal 301481/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32498, signal 301636/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32548, signal 301808/419628 (executing program) 2024/03/22 13:22:25 fetching corpus: 32598, signal 301928/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 32648, signal 302106/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 32698, signal 302293/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 32748, signal 302507/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 32798, signal 302622/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 32848, signal 302823/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 32898, signal 302976/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 32948, signal 303102/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 32998, signal 303222/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 33048, signal 303770/419628 (executing program) 2024/03/22 13:22:26 fetching corpus: 33098, signal 303887/419630 (executing program) 2024/03/22 13:22:26 fetching corpus: 33148, signal 304016/419630 (executing program) 2024/03/22 13:22:26 fetching corpus: 33198, signal 304181/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33248, signal 304334/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33298, signal 304485/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33348, signal 304653/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33398, signal 304824/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33448, signal 304979/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33498, signal 305177/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33548, signal 305316/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33598, signal 305468/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33648, signal 305629/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33698, signal 305783/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33748, signal 305915/419630 (executing program) 2024/03/22 13:22:27 fetching corpus: 33798, signal 306097/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 33848, signal 306313/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 33898, signal 306425/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 33948, signal 306542/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 33998, signal 306713/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 34048, signal 306855/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 34098, signal 306982/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 34148, signal 307109/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 34198, signal 307253/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 34248, signal 307365/419630 (executing program) 2024/03/22 13:22:28 fetching corpus: 34298, signal 307528/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34348, signal 307683/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34398, signal 307817/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34448, signal 308045/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34498, signal 308185/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34548, signal 308367/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34598, signal 308510/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34648, signal 308638/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34698, signal 308775/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34748, signal 308915/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34798, signal 309051/419630 (executing program) 2024/03/22 13:22:29 fetching corpus: 34848, signal 309263/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 34898, signal 309416/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 34948, signal 309569/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 34998, signal 309775/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35048, signal 309934/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35098, signal 310074/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35148, signal 310242/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35198, signal 310392/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35248, signal 310551/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35298, signal 310682/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35348, signal 310830/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35398, signal 310982/419630 (executing program) 2024/03/22 13:22:30 fetching corpus: 35448, signal 311109/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35498, signal 311256/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35548, signal 311402/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35598, signal 311548/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35648, signal 311722/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35698, signal 311851/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35748, signal 312036/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35798, signal 312160/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35848, signal 312280/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35898, signal 312426/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35948, signal 312703/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 35998, signal 312813/419630 (executing program) 2024/03/22 13:22:31 fetching corpus: 36048, signal 312929/419630 (executing program) 2024/03/22 13:22:32 fetching corpus: 36098, signal 313060/419630 (executing program) 2024/03/22 13:22:32 fetching corpus: 36148, signal 313181/419630 (executing program) 2024/03/22 13:22:32 fetching corpus: 36198, signal 313324/419630 (executing program) 2024/03/22 13:22:32 fetching corpus: 36248, signal 313558/419630 (executing program) 2024/03/22 13:22:32 fetching corpus: 36298, signal 313715/419630 (executing program) 2024/03/22 13:22:32 fetching corpus: 36348, signal 313810/419630 (executing program) 2024/03/22 13:22:32 fetching corpus: 36398, signal 313947/419630 (executing program) 2024/03/22 13:22:32 fetching corpus: 36448, signal 314076/419633 (executing program) 2024/03/22 13:22:32 fetching corpus: 36498, signal 314211/419633 (executing program) 2024/03/22 13:22:32 fetching corpus: 36548, signal 314315/419633 (executing program) 2024/03/22 13:22:32 fetching corpus: 36598, signal 314424/419633 (executing program) 2024/03/22 13:22:32 fetching corpus: 36648, signal 314542/419633 (executing program) 2024/03/22 13:22:32 fetching corpus: 36698, signal 314717/419633 (executing program) 2024/03/22 13:22:32 fetching corpus: 36748, signal 314849/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 36798, signal 315023/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 36848, signal 315134/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 36898, signal 315283/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 36948, signal 315389/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 36998, signal 315526/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 37048, signal 315733/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 37098, signal 315897/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 37148, signal 316030/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 37198, signal 316201/419633 (executing program) 2024/03/22 13:22:33 fetching corpus: 37248, signal 316295/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37298, signal 316441/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37348, signal 316570/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37398, signal 316690/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37448, signal 316821/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37498, signal 316970/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37548, signal 317094/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37598, signal 317230/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37648, signal 317416/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37698, signal 317692/419633 (executing program) 2024/03/22 13:22:34 fetching corpus: 37748, signal 317848/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 37798, signal 318015/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 37848, signal 318160/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 37898, signal 318316/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 37948, signal 318443/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 37998, signal 318607/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38048, signal 318710/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38098, signal 318867/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38148, signal 318990/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38198, signal 319148/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38248, signal 319262/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38298, signal 319401/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38348, signal 319510/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38398, signal 319657/419633 (executing program) 2024/03/22 13:22:35 fetching corpus: 38448, signal 319829/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38498, signal 320034/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38548, signal 320193/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38598, signal 320310/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38648, signal 320510/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38698, signal 320642/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38748, signal 320760/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38798, signal 320923/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38848, signal 321033/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38856, signal 321047/419633 (executing program) 2024/03/22 13:22:36 fetching corpus: 38856, signal 321047/419633 (executing program) 2024/03/22 13:22:36 starting 5 fuzzer processes [ 272.718710][ T5033] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 272.759473][ T5033] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 272.821374][ T5037] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 272.832406][ T5037] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 272.844856][ T5037] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 272.855704][ T5043] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 272.863986][ T5042] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 272.882934][ T5041] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 272.900769][ T5041] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 272.908787][ T5043] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 272.919578][ T5041] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 272.933674][ T5042] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 272.943716][ T5042] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 272.951641][ T4398] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 272.972502][ T4398] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 272.991171][ T4398] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 273.005398][ T5033] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 273.014889][ T5033] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 273.441692][ T4398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 273.468815][ T4398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 273.492604][ T4398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 273.667483][ T5041] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 273.679332][ T5042] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 273.691068][ T5042] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 273.708577][ T5033] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 273.724040][ T5042] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 273.739606][ T5042] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 273.762977][ T5033] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 273.796549][ T5033] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 273.816002][ T5033] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 274.463704][ T5032] chnl_net:caif_netlink_parms(): no params data found [ 274.679153][ T5034] chnl_net:caif_netlink_parms(): no params data found [ 275.027559][ T5033] Bluetooth: hci0: command tx timeout [ 275.080732][ T5033] Bluetooth: hci1: command tx timeout [ 275.086902][ T5038] chnl_net:caif_netlink_parms(): no params data found [ 275.193217][ T5033] Bluetooth: hci2: command tx timeout [ 275.193322][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.206830][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.214620][ T5032] bridge_slave_0: entered allmulticast mode [ 275.222663][ T5032] bridge_slave_0: entered promiscuous mode [ 275.293298][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.301281][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.308925][ T5032] bridge_slave_1: entered allmulticast mode [ 275.317879][ T5032] bridge_slave_1: entered promiscuous mode [ 275.549122][ T5032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.565183][ T5046] chnl_net:caif_netlink_parms(): no params data found [ 275.603950][ T5032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.629690][ T5051] chnl_net:caif_netlink_parms(): no params data found [ 275.758489][ T5032] team0: Port device team_slave_0 added [ 275.802965][ T5033] Bluetooth: hci3: command tx timeout [ 275.878337][ T5032] team0: Port device team_slave_1 added [ 275.884251][ T5033] Bluetooth: hci4: command tx timeout [ 276.160209][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.167369][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.193659][ T5032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.206073][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.214621][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.222430][ T5034] bridge_slave_0: entered allmulticast mode [ 276.231198][ T5034] bridge_slave_0: entered promiscuous mode [ 276.309307][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.317607][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.344035][ T5032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.373379][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.384698][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.394296][ T5034] bridge_slave_1: entered allmulticast mode [ 276.403099][ T5034] bridge_slave_1: entered promiscuous mode [ 276.416707][ T5038] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.424518][ T5038] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.434927][ T5038] bridge_slave_0: entered allmulticast mode [ 276.446686][ T5038] bridge_slave_0: entered promiscuous mode [ 276.576763][ T5038] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.585096][ T5038] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.592924][ T5038] bridge_slave_1: entered allmulticast mode [ 276.601808][ T5038] bridge_slave_1: entered promiscuous mode [ 276.649461][ T5032] hsr_slave_0: entered promiscuous mode [ 276.660710][ T5032] hsr_slave_1: entered promiscuous mode [ 276.764123][ T5034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.835509][ T5038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.898999][ T5034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.909883][ T5051] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.918099][ T5051] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.925781][ T5051] bridge_slave_0: entered allmulticast mode [ 276.934595][ T5051] bridge_slave_0: entered promiscuous mode [ 276.983995][ T5038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.020275][ T5051] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.027922][ T5051] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.035680][ T5051] bridge_slave_1: entered allmulticast mode [ 277.044509][ T5051] bridge_slave_1: entered promiscuous mode [ 277.080376][ T5033] Bluetooth: hci0: command tx timeout [ 277.160274][ T5033] Bluetooth: hci1: command tx timeout [ 277.268250][ T5033] Bluetooth: hci2: command tx timeout [ 277.413894][ T5051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.435400][ T5034] team0: Port device team_slave_0 added [ 277.463002][ T5038] team0: Port device team_slave_0 added [ 277.484422][ T5046] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.492498][ T5046] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.500262][ T5046] bridge_slave_0: entered allmulticast mode [ 277.508934][ T5046] bridge_slave_0: entered promiscuous mode [ 277.526619][ T5051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.536520][ T5046] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.544464][ T5046] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.552235][ T5046] bridge_slave_1: entered allmulticast mode [ 277.561207][ T5046] bridge_slave_1: entered promiscuous mode [ 277.575205][ T5034] team0: Port device team_slave_1 added [ 277.632155][ T5038] team0: Port device team_slave_1 added [ 277.847397][ T5046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.858893][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.866259][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.892586][ T5034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.900344][ T5033] Bluetooth: hci3: command tx timeout [ 277.916672][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.924152][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.950488][ T5034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.970290][ T5033] Bluetooth: hci4: command tx timeout [ 277.995024][ T5038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.002436][ T5038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.028728][ T5038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.057087][ T5038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.064377][ T5038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.090669][ T5038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.108811][ T5051] team0: Port device team_slave_0 added [ 278.138784][ T5046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.238806][ T5051] team0: Port device team_slave_1 added [ 278.320225][ T5051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.327377][ T5051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.353726][ T5051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.426983][ T5051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.434177][ T5051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.460848][ T5051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.484341][ T5046] team0: Port device team_slave_0 added [ 278.655253][ T5046] team0: Port device team_slave_1 added [ 278.677328][ T5034] hsr_slave_0: entered promiscuous mode [ 278.689787][ T5034] hsr_slave_1: entered promiscuous mode [ 278.701796][ T5034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.709516][ T5034] Cannot create hsr debugfs directory [ 278.732693][ T5038] hsr_slave_0: entered promiscuous mode [ 278.741590][ T5038] hsr_slave_1: entered promiscuous mode [ 278.749169][ T5038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.757257][ T5038] Cannot create hsr debugfs directory [ 278.829762][ T5046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.837051][ T5046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.863376][ T5046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.882586][ T5046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.889716][ T5046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.916915][ T5046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.163484][ T5051] hsr_slave_0: entered promiscuous mode [ 279.167281][ T5033] Bluetooth: hci0: command tx timeout [ 279.176420][ T5051] hsr_slave_1: entered promiscuous mode [ 279.184613][ T5051] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.192492][ T5051] Cannot create hsr debugfs directory [ 279.248937][ T5033] Bluetooth: hci1: command tx timeout [ 279.320310][ T5033] Bluetooth: hci2: command tx timeout [ 279.354792][ T5032] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 279.485252][ T5032] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 279.557416][ T5046] hsr_slave_0: entered promiscuous mode [ 279.568564][ T5046] hsr_slave_1: entered promiscuous mode [ 279.577666][ T5046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.585450][ T5046] Cannot create hsr debugfs directory [ 279.613896][ T5032] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 279.684943][ T5032] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 279.970839][ T5033] Bluetooth: hci3: command tx timeout [ 280.067349][ T5033] Bluetooth: hci4: command tx timeout [ 280.343450][ T5034] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 280.412788][ T5034] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 280.449144][ T5034] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 280.488545][ T5034] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 280.595785][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 280.603449][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 280.698803][ T5038] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 280.773141][ T5038] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 280.799420][ T5038] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 280.825785][ T5038] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 280.914859][ T5051] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 280.982687][ T5051] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 281.022597][ T5051] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 281.106750][ T5051] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 281.260286][ T5033] Bluetooth: hci0: command tx timeout [ 281.308482][ T5032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.321628][ T5033] Bluetooth: hci1: command tx timeout [ 281.331841][ T5046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 281.365947][ T5046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 281.408815][ T5033] Bluetooth: hci2: command tx timeout [ 281.430851][ T5046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 281.551997][ T5046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 281.611977][ T5032] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.685067][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.692955][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.819178][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.826974][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.042974][ T5033] Bluetooth: hci3: command tx timeout [ 282.120334][ T5033] Bluetooth: hci4: command tx timeout [ 282.227946][ T5038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.348967][ T5034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.476190][ T5051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.533170][ T5034] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.553806][ T5038] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.675799][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.683564][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.714092][ T5046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.767615][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.775339][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.790766][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.798428][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.823698][ T5051] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.988738][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.996474][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.038631][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.046351][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.095616][ T5046] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.188254][ T5090] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.196119][ T5090] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.216112][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.223815][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.238862][ T5090] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.246540][ T5090] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.535595][ T5038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 283.546514][ T5038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 284.415075][ T5032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.960020][ T5032] veth0_vlan: entered promiscuous mode [ 285.061475][ T5032] veth1_vlan: entered promiscuous mode [ 285.147097][ T5034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.444266][ T5032] veth0_macvtap: entered promiscuous mode [ 285.536368][ T5032] veth1_macvtap: entered promiscuous mode [ 285.719397][ T5038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.743891][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.825142][ T5034] veth0_vlan: entered promiscuous mode [ 285.881254][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.967047][ T5051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.989544][ T5032] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.999525][ T5032] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.009265][ T5032] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.018377][ T5032] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.051872][ T5034] veth1_vlan: entered promiscuous mode [ 286.117386][ T5046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.275998][ T5038] veth0_vlan: entered promiscuous mode [ 286.421886][ T5038] veth1_vlan: entered promiscuous mode [ 286.491141][ T5034] veth0_macvtap: entered promiscuous mode [ 286.597213][ T5034] veth1_macvtap: entered promiscuous mode [ 286.749617][ T5051] veth0_vlan: entered promiscuous mode [ 286.859096][ T5038] veth0_macvtap: entered promiscuous mode [ 286.890830][ T5051] veth1_vlan: entered promiscuous mode [ 286.916253][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.928895][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.943929][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.997218][ T5038] veth1_macvtap: entered promiscuous mode [ 287.071267][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.083808][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.098831][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.239133][ T5051] veth0_macvtap: entered promiscuous mode [ 287.258425][ T5038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.270631][ T5038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.281324][ T5038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.292052][ T5038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.306708][ T5038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.381469][ T5051] veth1_macvtap: entered promiscuous mode [ 287.405005][ T5034] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.414202][ T5034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.423441][ T5034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.432582][ T5034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.529372][ T5038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.540584][ T5038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.550787][ T5038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.561853][ T5038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.576487][ T5038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.623417][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.634325][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.645206][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.655962][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.666139][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.676958][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.691908][ T5051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.771927][ T5038] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.782773][ T5038] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.793411][ T5038] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.805958][ T5038] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.953818][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.967612][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.978573][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.989317][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.999520][ T5051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.012321][ T5051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.027489][ T5051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.233143][ T5051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.242288][ T5051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.251503][ T5051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.260675][ T5051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.907102][ T5046] veth0_vlan: entered promiscuous mode [ 289.048191][ T5046] veth1_vlan: entered promiscuous mode [ 289.515488][ T5046] veth0_macvtap: entered promiscuous mode [ 289.578880][ T5046] veth1_macvtap: entered promiscuous mode [ 289.767207][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.779328][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.790393][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.801914][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.812489][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.823255][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.833449][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 289.844210][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 289.858905][ T5046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.181592][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.192526][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.204083][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.216266][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.227351][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.238226][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.248362][ T5046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.259148][ T5046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.274022][ T5046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.545296][ T5046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.555924][ T5046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.566017][ T5046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.575144][ T5046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.412299][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.420431][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.579750][ T5086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.594081][ T5086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:22:59 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x4020940d, 0x0) 13:22:59 executing program 1: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) writev(r0, &(0x7f00000002c0)=[{0x0}, {0x0}, {0x0}], 0x3) [ 294.740623][ T5086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.749529][ T5086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:23:00 executing program 1: recvmsg(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000001740)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) [ 295.050345][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.059714][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.365058][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.373292][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:23:00 executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, 0x0, 0x0) 13:23:01 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r0, 0xffff, 0x1006, 0x0, 0x0) [ 295.721144][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.729107][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.801877][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.810086][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.085237][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.093480][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:23:01 executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000100)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x10}}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x0, 0x70bd2b, 0x4, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r3, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, r4, 0x4, 0x0, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x75adc41b, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24000000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x38, r4, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x1}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ec0f4aef314d"}]}, 0x38}}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000040)={'bond0\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 13:23:01 executing program 3: pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="0206000006000000000000000000000004"], 0x30}}, 0x0) 13:23:01 executing program 1: r0 = msgget$private(0x0, 0x0) msgsnd(r0, &(0x7f0000000040)={0x3}, 0x8, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, 0x0, 0x0) 13:23:02 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00'}, 0x10) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) [ 296.871570][ T5228] : renamed from bond0 13:23:02 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r0, 0x890b, &(0x7f00000003c0)={@null, 0x0, 'pim6reg\x00'}) 13:23:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000064c0)={0x0, 0x0, &(0x7f0000006480)={&(0x7f0000006340)={{0x14}, [@NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_HANDLE={0xc}]}], {0x14}}, 0x48}}, 0x0) 13:23:02 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) 13:23:02 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x3, 0x6, 0x48, @private0={0xfc, 0x0, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, 0x0, 0x80, 0xfffffff7, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x81, 0x0, 0x7, 0x0, @empty, @mcast1, 0x80, 0x7, 0x8, 0x80000000}}) 13:23:03 executing program 3: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) unshare(0x2a020600) [ 297.854806][ T5240] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 13:23:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)=@in={0x10, 0x2}, 0x10) 13:23:03 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) 13:23:03 executing program 0: wait4(0x0, 0x0, 0xd31915b961249fcc, 0x0) [ 298.437024][ T5247] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! 13:23:03 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000000)={0x3f, 0x0, 0xb, 0xb, 0x9}) 13:23:04 executing program 1: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) unshare(0x2a020600) 13:23:04 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) 13:23:04 executing program 0: semget(0x3, 0x2, 0x248) [ 299.061963][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.070313][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.373884][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.382185][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:23:04 executing program 3: timer_create(0xfffffffffffffffc, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000001400)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x9}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="3c00000058001f00030300f9002304000a04d65f0800010002010002170003800500000099db9742d5ea7f1e31fd6200b040670000bcf04fd376f73f", 0x3c) 13:23:04 executing program 2: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ipv6_route\x00') preadv(r0, &(0x7f00000006c0)=[{&(0x7f0000000040)=""/98, 0x62}], 0x1, 0x1c2, 0x0) 13:23:05 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) 13:23:05 executing program 4: clock_nanosleep(0x7, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 13:23:05 executing program 0: unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semop(0x0, &(0x7f0000000040)=[{0x0, 0x0, 0x1800}], 0x1) unshare(0x2a020600) [ 300.077729][ T5265] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 300.086338][ T5265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 13:23:05 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 13:23:05 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x145142, 0x0) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) ftruncate(r0, 0x2007ffc) sendfile(r0, r0, 0x0, 0x800000009) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000340)) 13:23:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)={0x74, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x11}}]}]}]}]}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x74}, 0x1, 0xf0ffffff}, 0x0) 13:23:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e000000000000000000000001", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005880)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) 13:23:06 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) [ 300.809433][ T28] audit: type=1800 audit(1711113786.153:2): pid=5278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1953 res=0 errno=0 13:23:06 executing program 2: r0 = open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x4e282, 0x0) pwrite64(r1, &(0x7f0000000600)="cd", 0x1, 0x80000001) 13:23:06 executing program 4: r0 = syz_open_procfs$pagemap(0x0, &(0x7f00000012c0)) r1 = dup2(r0, r0) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000080)={0x60, 0x4, &(0x7f0000002000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0, 0x0}) 13:23:06 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e000000000000000000000001", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005880)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) 13:23:07 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) 13:23:07 executing program 1: setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)="d4", 0x1) mprotect(&(0x7f00003fd000/0xc00000)=nil, 0xc00000, 0x0) 13:23:07 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001fc0)={@map, 0xffffffffffffffff, 0xd, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) 13:23:07 executing program 4: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x40) 13:23:07 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001540)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18}, 0x0) 13:23:07 executing program 2: syz_clone(0x42200000, 0x0, 0x0, 0x0, 0x0, 0x0) 13:23:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x140}}, 0x0) getsockname$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0xab) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000024000b0e000000000000000000000001", @ANYRES32=r4, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000005880)=@newtfilter={0x68, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x68}}, 0x0) 13:23:07 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{}, {}, {}]}]}}, &(0x7f00000002c0)=""/89, 0x3e, 0x59, 0x1}, 0x20) 13:23:07 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) 13:23:08 executing program 3: clock_adjtime(0x0, &(0x7f0000000140)={0x9b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f00000000}) 13:23:08 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000002640)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003f00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003e80)=[@rights={{0x10}}], 0x10}, 0x0) 13:23:08 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:08 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000002680)={0x0, 0x0, &(0x7f00000024c0)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 13:23:09 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x1}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 13:23:09 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0xc, 0x0, 0x0) 13:23:09 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x1f}, 0x20) 13:23:09 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:09 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@map, 0xffffffffffffffff, 0x2e, 0x0, 0x0, @prog_id}, 0x20) 13:23:09 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000004340), 0x0, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000004380)) 13:23:09 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@struct={0x3}]}, {0x0, [0x0, 0x0, 0x5f]}}, 0x0, 0x29}, 0x20) 13:23:09 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000011c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x1}) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000)) 13:23:10 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f00000011c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@typedef={0x7}, @struct]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x39}, 0x20) 13:23:10 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x3, &(0x7f00000003c0)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x18032, r0}, 0x90) 13:23:10 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001e80)={0x0, 0xf, &(0x7f0000001ac0)=@ringbuf, &(0x7f0000001bc0)='syzkaller\x00'}, 0x90) 13:23:10 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000e80)={@ifindex, 0xffffffffffffffff, 0x7, 0x0, 0x0, @prog_fd}, 0x20) 13:23:10 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001b00)={@map, 0xffffffffffffffff, 0x29, 0x0, 0x0, @prog_id}, 0x20) 13:23:10 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1}, 0x20) 13:23:11 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:11 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/ipc\x00') 13:23:11 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x7, [@var={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e, 0x18]}}, 0x0, 0x2f}, 0x20) 13:23:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000001440)="8f", 0x1}], 0x3}, 0x0) 13:23:11 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x5}]}]}}, 0x0, 0x2e, 0x0, 0x1}, 0x20) 13:23:11 executing program 2: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000840)={@ifindex, 0xffffffffffffffff, 0x35, 0x11, 0xffffffffffffffff, @link_id}, 0x20) 13:23:11 executing program 0: syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000001300)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) sendmsg$unix(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000400)="c1", 0x1}], 0x1}, 0x0) 13:23:11 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:11 executing program 1: pipe(&(0x7f00000006c0)={0xffffffffffffffff}) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 13:23:12 executing program 4: sendmsg$tipc(0xffffffffffffffff, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000001380)="6b48d552a2e36e60f534be1742818aee4f743bbb0bcc6fdc246b8df0867177da0116344a6703018f26a8f12ba3792d3900c271bf40283f4ddba827015776fb91f662ad345b2d4e60cb499681f9854870fca5edd7f94d86b0903e17f424777b370b880f15de050fc027b0aabba772d0d24a6b9aececf2c3c3271ba16004741f60d77b55f038a5128eae95b4acfa0c0d69d035861aee57140a1693d8ae5efef55362f52a03c6c9b8968031a3e8a5cc80065e515ac1be264cd571270ac67f9fab818407dc4de47b975dd6cf894587bee0a82530ee1ec0d24a70bfdd5c9081a09e77d2d7e31b16addb5b4279d7515fdd74a1ed05904aa0a128cae63e1d035566c8f428afd0466d28b809b8b6669cdd87c36f542415437ba8bb2aa19e8bb56ca839a13657bc293cb785363eb8d53f71d3579f47f0a738eed0bdedd248443cd0711365e93614a9f6b75d3bbd6154bbcd74183ec0e72a257e87d915ae143c8be193f27236c34316707d892269628409f7a7cf4a2ec0ccc42d4b192e90ce92ddc243069676e2de040648016932e1f1cd29053fe59eaca4276bf02273ee5bbc166cc2e7fa8adb22b3d24e3788c969887b4b26fbd797517b69a6fa35239d4d869cf25fc4b19f46bd4ac5e358a1d6aeea3dfe520339f05e438fd5136290500e125e22c0d8bc1b6bb25eb5b9ac3ce47f470baed6612412456d60848bb74541b937ca3bcf31c91b4001b4febd5a296f56786a461d731340cc31a0041c416cfd62d9485cacb1a506642146faedf0dd244ecd1f83116c4ea0c098d6719fdd286e00144da4eaaa74290a5bc1ce4cc48b5d6455278798622b437a7458ef38d5b1bef7541249657284879539cc08ece7cf4a6d2b7e0c6b8241e7727e4ee2e059ae8ef7520a7a6e81d160620a33c72edb40d781f93556f07d0758e8a21e2c4695dd1259e24843259735474ce10054b951edbd85ddb69bb533e49f77b21b0159ffc8c6e05eacf3c65e0660a6675a6fb5bb5cd347082d0fc3310e1c3932a93d88a680bd770eefb11db3dbb5454f7c35e8a1102605ba0c6a3029a8f2a285a0b5cac4c3d0bd2ea509a32ac41a3d49342a3d223876e5a2dd96bcd6901a7502bfdb4a92cc51791df80af19ff81a1d1a151c9c7a183b87a860063d55d6d6f583e219445dafba80df4fc022893e2583dbaf834cfb20a14552732a198b977aba54fb63f716abca7a67aa8e508c8bda14c0e281a7428e68259431990cd4c6a89cd9b575c317896dd5229827450cb999a49bbb06681797666336c4ded10dc9c2079bf904851cae881cbdcaa66a56663e6c9199d58a81523f6615b0bd5c63571c72715f882ecf0001f911be498d286aa7e38d22998a7c692a4bea5553c2108cc62c6a95a688e44c2a6525cb711559a8f1fa3e39f13ff2d961ae4538f5f00252885a6cba6d575b906ce21b27cf512ab383145658efed528d2d593879cc057bc11596a7ef2e5f60bf85fd82943d5b6d76d7d8c0c8a333ec697a3cb71b4a0e2b8f565dadef297e2dca264ee5cb21defa71418854389bc681422f018c8d2521469b8492e4603b3b913dd9d9108e435ce2a6d87b6e52b8bd20850143e5aec80263cd570cb4c5fec2133ff1426df0de4bb2db2acae3d3a265a03bd73bf5a6aa9393ac79317b0c5be39185987ab0daae884637d31dc86a45c9117912dd444562099599e0b2c581d1ab3b404a93795e152fe0eaed563f794c6ffd196e2c781d29cccf0fdc26327002f2380a607d5664c4d59471efd16031c481c8bccd249a7cbcee1db29094186b80871c043344f7895d8c264a9e6a5ac173bf4419164998b7dc0236ca2a363057b2efb5196e8c052b3f2a0bdb687df016a4eabb34078e2a91576e6a89b00a82fd5149b3a9e1892b6839feeae0d5a5dae2d7cb8f53cfe15a4ffb4a87ec14c7290a025f8952ff5da6963150e560d9cdc60e9e5d7308227bb7a74a1aedfd1cdb3b499c4b8a71ff1e3befa067fa7eeb7122d06179db4fc699a2732d342288d0adadfc1800155bbcb78ab5c833d1b93055e1fe59560332cbebeedaf43a1fc1f128192c615b74dbf47a88d395ef9470aea19546291339a465dec5136be9f68986c60bb53c63f96aee91c59f63358568b477e138d9198a9f6e96423436d29e56788aca65b6e02f51d88bee41e612545c1f222deef501da5b6b49f4b4e5c1e342bc0fc9e2ef43bf45132707e244056cddadb858c9e12e58e06558e259ee50b6d208d212969e8936e6992c5a9ca7b1175c84ee43743c4323155826c220593b50723a4160473a335cfb36eb0829a125fe0a006a2019f755edb7ab38d7739bac12fbf780bdf56dff1df906a510f402b790c4d5dda3de7d88b404adb63a86fecbf751dc98614b4f8e43029dab64c45227a5641125e649c29942455c4844b0d60fcf564c14b61c3aeb93dd0cdb793237d6e1f83c607ad2ea81e1761ed92850d5f9bcec7d626694083d522ae6d2cea35e1dc421546a9aae1add9ed0a6e4376f32f6e2ff9a2f833c1b6a9f231a1e71f1bc7d09727341f40f2ec85a422e1dd0504a7cac350fe4a3fe99314224efe4a809e4c6acd199fb891552ec5c2d728b4530ae14144803df295bbc1a39b85dbbbda62e82c1a5a36804d6186745040a33a8168ac563a7f09d59c4fb594756594faf1fac8086efdc9503d3067f4c7245cfa2e52cd7f0284031c1d208ac6f5c43b064179da7887a79e79661e029332487313668636d4140ce57daf4283132968ed81f7384e8abccf7b67b3917dfe113e3f8fb600ed914b92c3b2fe9a94cec42a303de7501bc70a8231322557aadf4b659c482c34c24d4fdd378a9171d74f3e0955ac9c8b8d077a75d9f33c70de48c19c38946fcd781a695cf0166b2af30385a873199ffa204b012547b2ddd931f9d6a0e08f9652bdc3efa9a8d6d556ba3a34ebdb7f06640dfed5ad7a42acc12d3d5a702b4f713f3da503298a5b0c6784b574bbe372ba866347cc8bfe517027546baa74fa0eff478cdd93a306ecebbb748b81e8ff9758f28df2183c91e8c4ec5d6b5b2a04e0395e190c243ffa677f317c6c55f9a4cb1e7ea98b59de199fba300608cd4b5250a53675479904d8b7e35eb160fcd50e1cdde1a7acac52f12cb17374b468abc50f979afd55be60e57fdb56c73da17feec229c860ce415244c54263e9603977b7a767a2213b86728e008905497a6fa5b69b8857bdde8a9da775626a0d279a197d0e0c794af215340bfeb835551e72ac5284d98247de6b7bab54b294cf17695a3cce2700f715afc270b9767c827fcaa46873b303c0cd47b5a155f57d74d1ac228e607c65ffccb6abd3d39330964fdbc79d1585630b8fba49d3253cba3171cfe2ff6a65e9f483317f74322336c1469d4c6c091ac7182404d7b257dfc83118be73b604ac00cd51430676d1d257f07faa4974857e75b8d615c3e88bcc9e073f437ebdf7d60fbfee1b87d0bf5b7be3a19ea9072cc38d629fa1df95162979d301b1a00f9f858a37e22ba6388d6c7707ea2a0d96c70a5f935c4377b122b0334b9e620e6a0d14e7476352546e51e5cd3aef34748df911421aa8e314ebf42e9ba88bb2e2b92d21cf3bc1eb701b56b7e58d268077ab64364b0407b1909bbf802623764ca23c0885c72383612f3ea9ef475383419988242e32c7f197e0f4a601215bcdd566ec94b8855100aa8f3042c7dcbcb2db01cf1afbf96d6a42909f0054617967ec146c0ce30d8d64dcba603e403fcdc72a430c8f649634f5b87922520b5520a7f77ddbf26bc88af7ddadae97be9a02760489e2cc68a9ff92fecd591392ff955affd598f5c4bc2abc0fa01ef4f341538bfb36f1687e39478c7a09e950d6afd78e1688a80674406af632a8bc70c19df564eab1476882137c501ebd9efd79c9d263142eedd015136bc78c4def30542cafa18816c9887bbe6291417be41891fbd6083a86c5232f9689a3adbbdcdf42d00ca550c10f970ec97bd824dcacccda3ca9e5d2558732ff2390b268a70067165763d4f62b6455d0f68564d5a5e4710dd8a79cfaf940ffd64f7e5e6425f18dbb5a9bcb739bf274fc6663dbae51f4a2bcd4f456cc480fdb9436fb829e4e8f4735b97ffc143ea9358f3adbe8e0880f12d30f472711670123805babd4b83922a8de9dd4fb4c6ff18f063c95d2ad8f039415236bbea882ea6f225876a64ec290ec54394f71229cfb2e68d03be505d2c55bbf24c3136ee", 0xba8}], 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001f80)={r0, 0x58, &(0x7f0000001f00)}, 0x10) 13:23:12 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum]}}, &(0x7f0000000400)=""/185, 0x26, 0xb9, 0x1}, 0x20) 13:23:12 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000016c0)={0x6, 0x3, &(0x7f0000001780)=@framed, &(0x7f0000001480)='syzkaller\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001600), 0x10}, 0x90) 13:23:12 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:12 executing program 1: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@map, 0xffffffffffffffff, 0x18, 0x8, 0x0, @prog_id}, 0x20) 13:23:12 executing program 4: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@ifindex, 0xffffffffffffffff, 0xd, 0x2010, 0x0, @prog_fd}, 0x20) 13:23:12 executing program 2: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000a80)={@ifindex, 0xffffffffffffffff, 0xd, 0x0, 0x0, @link_id}, 0x20) 13:23:13 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000940)={r1}) 13:23:13 executing program 1: r0 = getpgrp(0x0) wait4(r0, 0x0, 0x0, 0x0) 13:23:13 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0xffff, 0x1004, &(0x7f0000000040), 0x1) 13:23:13 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:13 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@typedef={0x1, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x2e, 0x30, 0x2e, 0x2e]}}, 0x0, 0x2a}, 0x20) 13:23:13 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x3, 0x0) 13:23:13 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x19}, 0x48) 13:23:13 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x10000}]}}, 0x0, 0x26, 0x0, 0x1}, 0x20) 13:23:13 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:13 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) recvmsg$kcm(r0, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x2141) 13:23:14 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f00000013c0)={&(0x7f0000000040), 0x10, 0x0}, 0x0) 13:23:14 executing program 4: r0 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$kcm(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0xfffffd69, 0x0, 0xffffffffffffff4b}, 0x0) 13:23:14 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r0, &(0x7f0000003700)={0x0, 0x0, 0x0}, 0x140) 13:23:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x8}, 0x48) 13:23:14 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:14 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95524fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x1000000) 13:23:14 executing program 1: bpf$BPF_MAP_CONST_STR_FREEZE(0x1d, &(0x7f0000000000), 0x4) 13:23:14 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000c80)={@ifindex, 0xffffffffffffffff, 0x1c, 0x4, 0x0, @prog_id}, 0x20) 13:23:14 executing program 3: bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000300)={@map, 0xffffffffffffffff, 0x7, 0x0, 0x0, @link_id}, 0x20) [ 309.509212][ T5428] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 309.517836][ T5428] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. 13:23:15 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1f, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 13:23:15 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'team0\x00'}) 13:23:15 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) 13:23:15 executing program 0: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001fc0)={@map, 0xffffffffffffffff, 0xb, 0x2004, 0xffffffffffffffff, @prog_id}, 0x20) 13:23:15 executing program 3: bpf$BPF_PROG_WITH_BTFID_LOAD(0xa, &(0x7f0000000940)=@bpf_ext={0x1c, 0x0, 0x0, 0x0}, 0x90) 13:23:15 executing program 1: bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x0, 0xf75736ae134e45c9}, 0x20) 13:23:15 executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@union={0x7}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2c}, 0x20) 13:23:15 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) 13:23:15 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@restrict, @typedef={0x3}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, &(0x7f0000000240)=""/175, 0x36, 0xaf, 0x1}, 0x20) 13:23:15 executing program 0: bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x1a, 0x10}, 0x20) 13:23:15 executing program 1: socketpair(0xf, 0x0, 0x0, &(0x7f0000001480)) 13:23:16 executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000001c0)='GPL\x00', 0x9, 0x1f, &(0x7f0000000200)=""/31}, 0x90) 13:23:16 executing program 0: openat$tun(0xffffffffffffff9c, 0x0, 0x195f40, 0x0) 13:23:16 executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000400)={&(0x7f00000001c0)=@abs, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000240)="1c", 0x1}], 0x1, &(0x7f0000000340)=[@rights={{0x18, 0x1, 0x1, [r1, r0]}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x30}, 0x5) 13:23:16 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000002c40), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'veth1\x00', 0x1}) 13:23:16 executing program 2: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x14, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 13:23:16 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000026c0)={0x13, 0x5, &(0x7f0000002400)=@raw=[@tail_call], 0x0}, 0x90) 13:23:16 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x48) 13:23:16 executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{}, {}]}]}}, 0x0, 0x36}, 0x20) 13:23:16 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@rights={{0x10}}], 0x10}, 0x0) 13:23:17 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000640)={@cgroup, 0xffffffffffffffff, 0x14, 0x8}, 0x20) 13:23:17 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x101841, 0x0) writev(r0, &(0x7f0000001280)=[{&(0x7f00000000c0)='Y', 0x1}, {&(0x7f00000015c0)="f0", 0x1}, {&(0x7f0000000280)="ba1155", 0x3}], 0x3) 13:23:17 executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 13:23:17 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@union={0x7, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x5, 0xfff}]}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x30]}}, &(0x7f0000000440)=""/51, 0x3a, 0x33, 0x1}, 0x20) 13:23:17 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000d00)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000003b80)={&(0x7f0000001780)=@file={0x0, './file0\x00'}, 0x6e, 0x0}, 0x0) 13:23:17 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) sendmsg$unix(r0, &(0x7f0000001100)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x0) 13:23:18 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000001880), 0x20640, 0x0) 13:23:18 executing program 2: socketpair$unix(0xa, 0x1, 0x0, &(0x7f0000000dc0)) [ 313.012877][ T4398] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 313.022216][ T4398] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 313.033799][ T4398] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 313.054620][ T4398] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 313.091101][ T4398] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 313.101426][ T4398] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 13:23:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = gettid() sendmsg$unix(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee01, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x40}, 0x0) 13:23:18 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x12, &(0x7f0000000340), 0x4) 13:23:18 executing program 2: bpf$BPF_PROG_DETACH(0x10, &(0x7f0000001dc0)={@map}, 0x20) 13:23:18 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001780)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu\x00', 0x0, 0x0) sendmsg$unix(r1, 0x0, 0x0) 13:23:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000000340), 0x4) 13:23:19 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x101201, 0x0) 13:23:19 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000002540)=@base={0x6, 0x0, 0x0, 0x0, 0x304}, 0x48) 13:23:19 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r2 = syz_clone(0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, &(0x7f0000000ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r3, 0x0, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)=r2, 0x12) 13:23:19 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000005340)={&(0x7f0000003f00)=@caif=@rfm={0x25, 0x0, "fce453477f9752301796b6886ed76495"}, 0x80, &(0x7f00000051c0)=[{0x0}, {0x0}, {0x0, 0x803e0000}], 0x3, &(0x7f0000005240)=[@txtime={{0x18}}, @timestamping={{0x14}}], 0x30}, 0x0) [ 314.169775][ T1536] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.336316][ T1536] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 13:23:19 executing program 2: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380), 0xffffffffffffff9a) 13:23:20 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000680)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f00000002c0)='freezer.parent_freezing\x00', 0x0, 0x0) [ 314.625118][ T1536] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 13:23:20 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000009c0)={@cgroup, 0xffffffffffffffff, 0x2e, 0x40, 0xffffffffffffffff, @link_id}, 0x20) 13:23:20 executing program 0: socketpair(0xa, 0x0, 0x10f, &(0x7f00000000c0)) [ 314.759241][ T1536] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.180316][ T4398] Bluetooth: hci5: command tx timeout 13:23:20 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x5, &(0x7f0000000340), 0x4) [ 315.280686][ T1536] bridge_slave_1: left allmulticast mode [ 315.286599][ T1536] bridge_slave_1: left promiscuous mode [ 315.294918][ T1536] bridge0: port 2(bridge_slave_1) entered disabled state 13:23:20 executing program 2: syz_open_procfs$namespace(0x0, &(0x7f0000001400)='ns/uts\x00') [ 315.437876][ T1536] bridge_slave_0: left allmulticast mode [ 315.444024][ T1536] bridge_slave_0: left promiscuous mode [ 315.450790][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state 13:23:20 executing program 1: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000040)) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30f) 13:23:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {0x3}, {}, {0x6}]}) 13:23:21 executing program 0: bpf$BPF_PROG_DETACH(0x10, &(0x7f0000005ac0)={@ifindex, 0xffffffffffffffff, 0x0, 0x0, 0x0, @link_id}, 0x20) [ 316.302790][ T1536] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface 13:23:21 executing program 2: openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000880)='tasks\x00', 0x2, 0x0) r2 = syz_clone(0x0, &(0x7f0000000a00), 0x0, 0x0, 0x0, &(0x7f0000000ac0)) write$cgroup_pid(r1, &(0x7f0000000b80)=r2, 0x12) [ 316.405056][ T1536] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.432385][ T1536] bond0 (unregistering): Released all slaves 13:23:22 executing program 0: bpf$MAP_CREATE(0xe, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) [ 316.788274][ T5487] chnl_net:caif_netlink_parms(): no params data found 13:23:22 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x17, &(0x7f0000000240)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x30}, 0x0) 13:23:22 executing program 2: bpf$BPF_PROG_DETACH(0x6, &(0x7f0000005ac0)={@ifindex, 0xffffffffffffffff, 0x0, 0x8, 0x0, @link_id}, 0x20) [ 317.241271][ T4398] Bluetooth: hci5: command tx timeout 13:23:22 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x18, 0x1, 0x1, [r1, 0xffffffffffffffff]}}], 0x18}, 0x0) 13:23:22 executing program 1: syz_clone(0x18028400, 0x0, 0x0, 0x0, 0x0, 0x0) 13:23:22 executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) r1 = getpid() sendmsg$unix(r0, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xee00, 0xee01}}}], 0x20}, 0x0) 13:23:23 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x8, &(0x7f0000000340), 0x4) [ 317.907405][ T1536] hsr_slave_0: left promiscuous mode [ 317.966036][ T1536] hsr_slave_1: left promiscuous mode [ 318.015797][ T1536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 318.023687][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0 13:23:23 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003ec0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000005340)={&(0x7f0000003f00)=@caif=@rfm={0x25, 0x0, "fce453477f9752301796b6886ed76495"}, 0x80, &(0x7f00000051c0)=[{0x0, 0x803e0000}, {0x0}, {0x0}], 0x3, &(0x7f0000005240)=[@txtime={{0x18}}, @timestamping={{0x14}}], 0x30}, 0x0) [ 318.124231][ T1536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 318.133334][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1 13:23:23 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000340), 0x4) [ 318.281911][ T1536] veth1_macvtap: left promiscuous mode [ 318.287677][ T1536] veth0_macvtap: left promiscuous mode [ 318.293756][ T1536] veth1_vlan: left promiscuous mode [ 318.301500][ T1536] veth0_vlan: left promiscuous mode 13:23:23 executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000024c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), &(0x7f0000000100)='%pi6 \x00'}, 0x20) 13:23:23 executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff}) write$P9_RREADLINK(r0, 0x0, 0xfffffffffffffe98) 13:23:24 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bind$unix(r0, 0xfffffffffffffffd, 0x0) 13:23:24 executing program 1: set_mempolicy(0x1, &(0x7f0000000040), 0x81) 13:23:24 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(r0, &(0x7f0000007100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 13:23:24 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) syz_open_procfs$userns(r1, &(0x7f0000000540)) [ 319.320559][ T4398] Bluetooth: hci5: command tx timeout 13:23:24 executing program 2: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000b40000000000000004000000185100000200000000000000000000008500000010000000183a00000000000000000000009500"/64], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x1, &(0x7f00000001c0)=""/1, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@ifindex=r0, r1, 0x5, 0x10, r2, @link_id=0xffffffffffffffff}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xb3f, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 319.574515][ T1536] team0 (unregistering): Port device team_slave_1 removed 13:23:25 executing program 1: r0 = socket(0x11, 0x3, 0x0) recvmsg$inet_nvme(r0, 0x0, 0x40012163) 13:23:25 executing program 0: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x801c0, 0x0) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f00000003c0)='./file0\x00', 0x0, r1) [ 319.744867][ T1536] team0 (unregistering): Port device team_slave_0 removed 13:23:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) 13:23:25 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x80, &(0x7f0000000100)) 13:23:25 executing program 0: symlink(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00') openat$dir(0xffffffffffffff9c, &(0x7f0000003500)='./file0\x00', 0x0, 0x0) 13:23:25 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1000, 0x0, &(0x7f0000000100)) 13:23:25 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x0, &(0x7f0000000040), 0xffffffffffffff91) 13:23:26 executing program 0: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000b40000000000000004000000185100000200000000000000000000008500000010000000183a00000000000000000000009500"/64], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x1, &(0x7f00000001c0)=""/1, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@ifindex=r0, r1, 0x5, 0x10, r2, @link_id=0xffffffffffffffff}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xb3f, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) 13:23:26 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r0, 0x1, 0x6, &(0x7f0000000340), 0x4) 13:23:26 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = openat$cgroup_type(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000040)) 13:23:26 executing program 2: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual', 0x0, 0x0) close_range(r0, r0, 0x0) memfd_create(&(0x7f00000002c0)='trusted.overlay.redirect\x00', 0x0) write$binfmt_misc(r0, 0x0, 0x0) [ 321.400599][ T4398] Bluetooth: hci5: command tx timeout [ 321.424737][ T5487] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.434254][ T5487] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.442178][ T5487] bridge_slave_0: entered allmulticast mode [ 321.451276][ T5487] bridge_slave_0: entered promiscuous mode [ 321.555309][ T5487] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.563203][ T5487] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.571141][ T5487] bridge_slave_1: entered allmulticast mode [ 321.582634][ T5487] bridge_slave_1: entered promiscuous mode 13:23:27 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000000040)='!', 0x1, 0x0, 0x0, 0x0) 13:23:27 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') 13:23:27 executing program 1: syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@local, @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @multicast, @remote, @multicast, @broadcast}}}}, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) 13:23:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg$unix(r0, 0x0, 0x0, 0x2000, 0x0) [ 322.143888][ T5487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.274770][ T5487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 13:23:27 executing program 3: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000b40000000000000004000000185100000200000000000000000000008500000010000000183a00000000000000000000009500"/64], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x1, &(0x7f00000001c0)=""/1, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@ifindex=r0, r1, 0x5, 0x10, r2, @link_id=0xffffffffffffffff}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xb3f, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) 13:23:27 executing program 1: openat$ppp(0xffffffffffffff9c, &(0x7f0000001680), 0x2001, 0x0) 13:23:27 executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a1e5850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) 13:23:27 executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000009e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x77009480, 0x0, 0x0, 0x0, 0x0, 0x0) [ 322.641780][ T5487] team0: Port device team_slave_0 added [ 322.736003][ T5487] team0: Port device team_slave_1 added 13:23:28 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000540)='mm_page_free_batched\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={r1, 0x58, &(0x7f0000000340)}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00pizs '], 0x6) write$cgroup_subtree(r2, 0x0, 0x7ffffffff000) 13:23:28 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) [ 323.108290][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.117427][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.144486][ T5487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 13:23:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_clone(0x77009480, 0x0, 0x0, 0x0, 0x0, 0x0) [ 323.298037][ T5487] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.305407][ T5487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.333759][ T5487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active 13:23:29 executing program 1: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={0x1, 0x58, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000b40000000000000004000000185100000200000000000000000000008500000010000000183a00000000000000000000009500"/64], &(0x7f0000000180)='syzkaller\x00', 0xffffffff, 0x1, &(0x7f00000001c0)=""/1, 0x41000, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000300)=@o_path={&(0x7f00000002c0)='./file0\x00', 0x0, 0x4018}, 0x18) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)={@ifindex=r0, r1, 0x5, 0x10, r2, @link_id=0xffffffffffffffff}, 0x20) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000200)="9e36d448b388dd965f7a3312779a", 0x0, 0xb3f, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x48) 13:23:29 executing program 2: socketpair(0x1a, 0x0, 0x0, &(0x7f0000001940)) 13:23:29 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000018c0)=ANY=[@ANYBLOB="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"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x185}, 0x48) [ 324.309315][ T5487] hsr_slave_0: entered promiscuous mode [ 324.401997][ T5487] hsr_slave_1: entered promiscuous mode [ 324.497488][ T5487] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.505456][ T5487] Cannot create hsr debugfs directory 13:23:30 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x43451) write$cgroup_subtree(r0, 0x0, 0x400ffc06044) 13:23:30 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x12b001, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'\x00', 0x802}) write$cgroup_subtree(r1, &(0x7f0000000000), 0xfe3a) 13:23:30 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) 13:23:30 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000024c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0x20, &(0x7f00000001c0)={&(0x7f0000000040)=""/180, 0xb4, 0x0, &(0x7f0000000100)=""/187, 0xbb}}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f0000000280)}, 0x20) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={&(0x7f0000000180)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000340)={r4, &(0x7f00000002c0)="9e352618d25c762b8fd786a3f060648648bf83e6f0067344bccd86bc8ff5e464ff5873d6e30df4f32a87b8f69845c2db483ba4ea1b44ed85f4c559f77f63cca694b6adf1e41ff6e7e5ca3dfc4f77d0218c7af2f099443f1f0dbf3c705aff8e585023b0bc1f20d239"}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001b40)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r7, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[@rights={{0x18, 0x1, 0x1, [r8, 0xffffffffffffffff]}}], 0x18}, 0x0) r9 = getpid() r10 = syz_clone(0x40020000, &(0x7f00000005c0)="e08f034a433f2bc9d8e087ef8b83f6c457d36ad21094a7a5f24746db2637d5c30d8f0dc6d200158a69fe48de68ab8792b72b70a4732935c4fd9a5e35cbf005a4e4bbe246aeff456a8846aca613172794b64c53e118405e8e10d33279d3ca53a888df40ad062be00cbe1f9f85ef71cee1ecb4ba48960d678309", 0x79, &(0x7f0000000640), &(0x7f0000000680), &(0x7f00000006c0)="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") r11 = getpid() r12 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000016c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r13 = syz_clone(0x4004800, &(0x7f0000001700)="f96f36e72b47478df4e91cd63420bb3edb409382ba3a858bfa8f487d5078cd25d52754569a7bf7e673360e281a212210b5b6afcd345268c5683eda0c065f2cc1bab6447218aaf96603f98fdc5fbba5a42a86a67b92fc3f40cb0c0ea9485599cad021fc7a213de3458306e06b4847", 0x6e, &(0x7f0000001780), &(0x7f00000017c0), &(0x7f0000001800)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, 0x0, 0x0) sendmsg$unix(r5, &(0x7f00000019c0)={&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e1f}, 0x6e, 0x0, 0x0, &(0x7f0000001840)=[@rights={{0xa}}, @rights={{0x1c, 0x1, 0x1, [r4, r7, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r9, 0xffffffffffffffff, 0xee01}}}, @rights={{0x18, 0x1, 0x1, [r6, r3]}}, @cred={{0x1c, 0x1, 0x2, {r10, 0xee00, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r11, 0xffffffffffffffff, 0xee00}}}, @rights={{0x30, 0x1, 0x1, [r12, r4, r4, r4, r14, r4, r4, r1]}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @cred={{0x1c, 0x1, 0x2, {r13, 0x0, 0xffffffffffffffff}}}], 0x148, 0xc010}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r16 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x101, 0x0, r0, 0x81, '\x00', 0x0, r1, 0x1, 0x5, 0x4}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0x17, &(0x7f0000000300)=@raw=[@btf_id={0x18, 0x3, 0x3, 0x0, 0x3}, @jmp={0x5, 0x0, 0x0, 0x1, 0x2, 0x1, 0x10}, @alu={0x7, 0x0, 0x9, 0x8, 0x0, 0x4}, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x1, 0x1, 0x6, 0x1, 0x3, 0xffffffffffffffe0, 0x10}, @alu={0x8, 0x0, 0x5, 0x8, 0xa, 0xfffffffffffffff8, 0xfffffffffffffffc}, @cb_func={0x18, 0x9, 0x4, 0x0, 0x5}], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', r15, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x2, 0x3, 0x1f, 0x100}, 0x10, r2, 0x0, 0x0, &(0x7f0000000580)=[r0, r0, r0, r16, r0], 0x0, 0x10, 0x8}, 0x90) 13:23:30 executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000024c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000000b00), 0x0, 0xb01, r0}, 0x38) 13:23:31 executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000024c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r0}, &(0x7f00000000c0), 0x0}, 0x20) 13:23:31 executing program 3: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000024c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r0, 0x0, 0x0}, 0x10) 13:23:31 executing program 1: r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGPHYS(r0, 0x4004480f, &(0x7f0000000000)) 13:23:31 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x85401) ioctl$HIDIOCGRDESC(r0, 0x40086602, &(0x7f00000000c0)=ANY=[]) 13:23:31 executing program 2: r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40086602, &(0x7f0000000840)=[0xed]) 13:23:31 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fef292766a6120eb844d0868ed7071a0465e738b1dcc8d983ed5c"], 0x0) 13:23:32 executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 13:23:32 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000000)) [ 327.217835][ T5090] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 327.371676][ T5086] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 327.480239][ T5090] usb 2-1: Using ep0 maxpacket: 16 [ 327.710451][ T5090] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 327.718746][ T5090] usb 2-1: config 0 has no interface number 0 [ 327.731983][ T5090] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 327.745488][ T5090] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10025, setting to 1024 [ 327.801632][ T5100] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 327.892843][ T5086] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 327.903691][ T5086] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 327.913276][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 327.929717][ T5086] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 327.940875][ T5086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.993428][ T5090] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 328.003013][ T5090] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 328.011649][ T5090] usb 2-1: Product: syz [ 328.016047][ T5090] usb 2-1: SerialNumber: syz [ 328.076548][ T5487] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 328.094634][ T5680] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 328.109889][ T5090] usb 2-1: config 0 descriptor?? [ 328.149012][ T5678] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 328.189583][ T5086] hub 4-1:1.0: bad descriptor, ignoring hub [ 328.195842][ T5086] hub 4-1:1.0: probe with driver hub failed with error -5 [ 328.205046][ T5086] cdc_wdm 4-1:1.0: skipping garbage [ 328.210587][ T5086] cdc_wdm 4-1:1.0: skipping garbage [ 328.250436][ T5100] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 328.258673][ T5090] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 328.261826][ T5100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.272266][ T5090] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input5 [ 328.279640][ T5100] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.298392][ T5487] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 328.299734][ T5100] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 328.361011][ T5086] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 328.367187][ T5086] cdc_wdm 4-1:1.0: Unknown control protocol [ 328.433606][ T5090] usb 2-1: USB disconnect, device number 2 [ 328.445910][ C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 328.446764][ T5100] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 328.453038][ C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 328.471789][ T5100] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 328.480270][ T5100] usb 3-1: Manufacturer: syz [ 328.522422][ T5487] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 328.529386][ T5086] usb 4-1: USB disconnect, device number 2 [ 328.550752][ T5100] usb 3-1: config 0 descriptor?? [ 328.553739][ T5090] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 328.702555][ T5487] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 329.064066][ T5086] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 329.096038][ T5100] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 13:23:34 executing program 1: r0 = syz_open_dev$hidraw(&(0x7f0000000140), 0x0, 0x101) write$hidraw(r0, 0x0, 0xffffffffffffff1f) [ 329.158988][ T5100] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 329.260548][ T5100] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 329.380483][ T5086] usb 4-1: Using ep0 maxpacket: 8 [ 329.401069][ T5100] usb 3-1: USB disconnect, device number 2 [ 329.510756][ T5086] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.521403][ T5086] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 329.530702][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 329.542322][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 329.554384][ T5086] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 329.568683][ T5086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.791991][ T5086] hub 4-1:1.0: bad descriptor, ignoring hub [ 329.798173][ T5086] hub 4-1:1.0: probe with driver hub failed with error -5 [ 329.809449][ T5086] cdc_wdm 4-1:1.0: skipping garbage [ 329.815481][ T5086] cdc_wdm 4-1:1.0: skipping garbage 13:23:35 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fef292766a6120eb844d0868ed7071a0465e738b1dcc8d983ed5c"], 0x0) [ 329.898238][ T5086] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 329.904541][ T5086] cdc_wdm 4-1:1.0: Unknown control protocol 13:23:35 executing program 2: r0 = syz_open_dev$hidraw(&(0x7f0000000140), 0x0, 0x101) write$hidraw(r0, 0x0, 0xffffffffffffff1f) [ 330.052756][ T5086] usb 4-1: USB disconnect, device number 3 [ 330.449137][ T5487] 8021q: adding VLAN 0 to HW filter on device bond0 13:23:36 executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002201"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGPHYS(r1, 0x80404812, &(0x7f0000000000)) [ 330.621732][ T5100] usb 2-1: new high-speed USB device number 3 using dummy_hcd 13:23:36 executing program 3: r0 = syz_open_dev$hidraw(&(0x7f0000000140), 0x0, 0x101) write$hidraw(r0, 0x0, 0xffffffffffffff1f) [ 330.714903][ T5487] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.907340][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.915128][ T5086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.980608][ T5100] usb 2-1: Using ep0 maxpacket: 16 [ 331.027591][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.035336][ T5086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.120723][ T5100] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 331.129095][ T5100] usb 2-1: config 0 has no interface number 0 [ 331.135728][ T5100] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 331.147422][ T5100] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10025, setting to 1024 [ 331.306274][ T5100] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 331.315852][ T5100] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 331.324462][ T5100] usb 2-1: Product: syz [ 331.328850][ T5100] usb 2-1: SerialNumber: syz [ 331.424360][ T5100] usb 2-1: config 0 descriptor?? [ 331.458617][ T5694] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 331.520259][ T778] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 331.630981][ T5100] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 331.641942][ T5100] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input6 13:23:37 executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) [ 331.942756][ T778] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 331.955627][ T778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.967344][ T778] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.977468][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.985444][ T778] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 331.998813][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 331.998995][ T5086] usb 2-1: USB disconnect, device number 3 [ 332.012390][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 332.012518][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 332.092194][ T5086] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 332.203555][ T778] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 332.213053][ T778] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 332.221643][ T778] usb 3-1: Manufacturer: syz [ 332.312742][ T778] usb 3-1: config 0 descriptor?? [ 332.420329][ T42] usb 4-1: new low-speed USB device number 4 using dummy_hcd 13:23:38 executing program 1: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) [ 332.859878][ T778] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 332.880706][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 332.891224][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 332.900649][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 332.912090][ T42] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 332.921635][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.965395][ T778] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 333.028680][ T778] appleir 0003:05AC:8243.0002: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 333.093121][ T5707] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 333.157869][ T42] hub 4-1:1.0: bad descriptor, ignoring hub [ 333.165771][ T42] hub 4-1:1.0: probe with driver hub failed with error -5 [ 333.175645][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 333.181304][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 333.238614][ T778] usb 3-1: USB disconnect, device number 3 [ 333.260778][ T9] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 333.298924][ T42] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 333.306716][ T42] cdc_wdm 4-1:1.0: Unknown control protocol [ 333.423001][ T42] usb 4-1: USB disconnect, device number 4 [ 333.683080][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 333.694181][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 333.703484][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 333.714785][ T9] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 333.725012][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.806245][ T5487] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.891790][ T5713] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 333.926470][ T9] hub 2-1:1.0: bad descriptor, ignoring hub [ 333.934569][ T9] hub 2-1:1.0: probe with driver hub failed with error -5 13:23:39 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fef292766a6120eb844d0868ed7071a0465e738b1dcc8d983ed5c"], 0x0) 13:23:39 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$unix(r0, &(0x7f0000004000)='2', 0x1, 0x0, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000, &(0x7f0000004700)={0x0, 0x3938700}) [ 333.944049][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 333.949484][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 334.006085][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 334.012470][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 334.161673][ T42] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 334.311163][ T9] usb 2-1: USB disconnect, device number 4 [ 334.451138][ T42] usb 4-1: Using ep0 maxpacket: 8 13:23:39 executing program 0: r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000180)={0x0, 0xfffffffffffffea2, &(0x7f0000000000)="bdb2dacf4f02ec0267"}) ioctl$EVIOCSKEYCODE_V2(r0, 0x40284504, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0) [ 334.572742][ T42] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 334.585074][ T42] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 334.595001][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 334.606601][ T42] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 334.618292][ T42] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 334.627760][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.652946][ T777] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 334.724545][ T42] hub 4-1:1.0: bad descriptor, ignoring hub [ 334.731109][ T42] hub 4-1:1.0: probe with driver hub failed with error -5 [ 334.806597][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 334.812361][ T42] cdc_wdm 4-1:1.0: skipping garbage [ 334.820391][ T5100] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 334.852666][ T42] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 334.858819][ T42] cdc_wdm 4-1:1.0: Unknown control protocol [ 334.965999][ T42] usb 4-1: USB disconnect, device number 5 [ 335.015276][ T777] usb 3-1: Using ep0 maxpacket: 16 [ 335.100159][ T5100] usb 2-1: Using ep0 maxpacket: 8 [ 335.221044][ T5100] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.232613][ T5100] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 335.242972][ T5100] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 335.255442][ T5100] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 335.267612][ T5100] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 335.277140][ T5100] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.412506][ T5100] hub 2-1:1.0: bad descriptor, ignoring hub [ 335.418693][ T5100] hub 2-1:1.0: probe with driver hub failed with error -5 [ 335.427938][ T5100] cdc_wdm 2-1:1.0: skipping garbage [ 335.433478][ T5100] cdc_wdm 2-1:1.0: skipping garbage [ 335.464565][ T777] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 335.473001][ T777] usb 3-1: config 0 has no interface number 0 [ 335.479330][ T777] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 335.491758][ T777] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10025, setting to 1024 [ 335.512844][ T5100] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 335.518987][ T5100] cdc_wdm 2-1:1.0: Unknown control protocol [ 335.642517][ T777] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 335.651982][ T777] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 335.660451][ T777] usb 3-1: Product: syz [ 335.664868][ T777] usb 3-1: SerialNumber: syz [ 335.769217][ T777] usb 3-1: config 0 descriptor?? [ 335.791515][ T5721] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 335.860618][ T777] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 335.862533][ T42] usb 2-1: USB disconnect, device number 5 [ 335.871230][ T777] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input7 13:23:41 executing program 3: pipe2(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) readlinkat(r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=""/80, 0x50) [ 336.170948][ T42] usb 3-1: USB disconnect, device number 4 [ 336.180227][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 336.187454][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 336.223372][ T5100] usb 1-1: new high-speed USB device number 2 using dummy_hcd 13:23:41 executing program 1: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) [ 336.317097][ T42] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 336.491217][ T5100] usb 1-1: Using ep0 maxpacket: 8 13:23:41 executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) [ 336.635681][ T5100] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 13:23:42 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='percpu_free_percpu\x00', r0}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0xa, 0xc400, 0x37b0, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x48) [ 336.881578][ T5100] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 336.891528][ T5100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.899794][ T5100] usb 1-1: Product: syz [ 336.904845][ T5100] usb 1-1: Manufacturer: syz [ 336.909674][ T5100] usb 1-1: SerialNumber: syz [ 337.045062][ T777] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 337.069275][ T5487] veth0_vlan: entered promiscuous mode [ 337.222841][ T5487] veth1_vlan: entered promiscuous mode [ 337.336439][ T5093] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 337.353118][ T5100] usb 1-1: USB disconnect, device number 2 [ 337.492894][ T777] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.503798][ T777] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.513090][ T777] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 337.524465][ T777] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 337.533928][ T777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.585177][ T5487] veth0_macvtap: entered promiscuous mode [ 337.610835][ T5487] veth1_macvtap: entered promiscuous mode [ 337.632224][ T5740] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 337.666927][ T777] hub 2-1:1.0: bad descriptor, ignoring hub [ 337.676919][ T777] hub 2-1:1.0: probe with driver hub failed with error -5 [ 337.686967][ T777] cdc_wdm 2-1:1.0: skipping garbage [ 337.693775][ T777] cdc_wdm 2-1:1.0: skipping garbage [ 337.727956][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.739084][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.749214][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.766048][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.770722][ T5093] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 337.777605][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.786195][ T5093] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 337.796788][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.796849][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 337.796932][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 337.801799][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.807744][ T5093] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 337.851598][ T777] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 337.856476][ T5093] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 337.870333][ T777] cdc_wdm 2-1:1.0: Unknown control protocol [ 337.873593][ T5093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.981105][ T777] usb 2-1: USB disconnect, device number 6 [ 337.991608][ T5743] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 338.031099][ T5093] hub 4-1:1.0: bad descriptor, ignoring hub [ 338.035915][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.037179][ T5093] hub 4-1:1.0: probe with driver hub failed with error -5 [ 338.048117][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.056525][ T5093] cdc_wdm 4-1:1.0: skipping garbage [ 338.070945][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.073754][ T5093] cdc_wdm 4-1:1.0: skipping garbage [ 338.085188][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.099345][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.110130][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.123108][ T5487] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 338.134196][ T5487] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 338.226831][ T5093] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 338.235766][ T5093] cdc_wdm 4-1:1.0: Unknown control protocol [ 338.298777][ T5487] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 338.418055][ T5487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.427326][ T5487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.436495][ T5487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.447873][ T5487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.835493][ T777] usb 2-1: new high-speed USB device number 7 using dummy_hcd 13:23:44 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fef292766a6120eb844d0868ed7071a0465e738b1dcc8d983ed5c"], 0x0) [ 339.121389][ T777] usb 2-1: Using ep0 maxpacket: 8 [ 339.300689][ T777] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 339.311331][ T777] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 339.320705][ T777] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 339.332195][ T777] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 339.342201][ T5743] cdc_wdm 4-1:1.0: Error autopm - -16 [ 339.343665][ T777] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 339.358418][ T777] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.370084][ T5086] usb 4-1: USB disconnect, device number 6 [ 339.478381][ T777] hub 2-1:1.0: bad descriptor, ignoring hub [ 339.484811][ T777] hub 2-1:1.0: probe with driver hub failed with error -5 [ 339.493739][ T777] cdc_wdm 2-1:1.0: skipping garbage [ 339.506371][ T777] cdc_wdm 2-1:1.0: skipping garbage 13:23:44 executing program 0: setsockopt$inet6_IPV6_RTHDR(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) [ 339.564411][ T777] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 339.572289][ T777] cdc_wdm 2-1:1.0: Unknown control protocol [ 339.708693][ T5086] usb 4-1: new high-speed USB device number 7 using dummy_hcd 13:23:45 executing program 1: pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) inotify_add_watch(r0, 0x0, 0x0) [ 339.814145][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 339.873011][ T777] usb 2-1: USB disconnect, device number 7 [ 340.005175][ T5086] usb 4-1: Using ep0 maxpacket: 8 [ 340.091528][ T9] usb 3-1: Using ep0 maxpacket: 16 13:23:45 executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) 13:23:45 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x20, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000440)) 13:23:45 executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f00000000c0)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @tail_call], &(0x7f0000002940)='GPL\x00'}, 0x90) [ 340.241913][ T5086] usb 4-1: device descriptor read/all, error -71 [ 340.264736][ T9] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 340.274096][ T9] usb 3-1: config 0 has no interface number 0 [ 340.280970][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 340.292592][ T9] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10025, setting to 1024 [ 340.451715][ T9] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 340.461279][ T9] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 340.469627][ T9] usb 3-1: Product: syz [ 340.474196][ T9] usb 3-1: SerialNumber: syz [ 340.541378][ T9] usb 3-1: config 0 descriptor?? [ 340.576866][ T5756] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 340.695792][ T9] cm109 3-1:0.8: invalid payload size 1024, expected 4 [ 340.761156][ T9] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input8 [ 340.870099][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.890131][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.910104][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.935267][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.959104][ T9] usb 3-1: USB disconnect, device number 5 [ 340.965366][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 340.965494][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 13:23:46 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000003c0)) [ 341.023291][ T5086] usb 4-1: new low-speed USB device number 8 using dummy_hcd 13:23:46 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b40)={0x6, 0x15, &(0x7f0000000140)=@framed={{}, [@cb_func, @func, @cb_func, @snprintf]}, &(0x7f0000002940)='GPL\x00'}, 0x90) [ 341.072273][ T9] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 341.431892][ T5086] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.447186][ T5086] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 341.457949][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 341.469309][ T5086] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 341.478733][ T5086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.571783][ T5768] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 341.636993][ T5086] hub 4-1:1.0: bad descriptor, ignoring hub [ 341.643356][ T5086] hub 4-1:1.0: probe with driver hub failed with error -5 [ 341.659273][ T5086] cdc_wdm 4-1:1.0: skipping garbage [ 341.666683][ T5086] cdc_wdm 4-1:1.0: skipping garbage 13:23:47 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xc, 0x0, 0x4, 0x0, 0x2d81, 0x1}, 0x48) [ 341.742305][ T5086] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 341.756758][ T5086] cdc_wdm 4-1:1.0: Unknown control protocol 13:23:47 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000000e80)=[{&(0x7f00000001c0)=@in={0x2, 0x0, @local}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000200)="99", 0x1}], 0x1, &(0x7f00000004c0)=[@sndinfo={0x20}, @init={0x18, 0x84, 0x0, {0x0, 0x8}}], 0x38}], 0x1, 0x0) 13:23:47 executing program 1: [ 341.912728][ T5086] usb 4-1: USB disconnect, device number 8 [ 341.983377][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 341.990676][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 13:23:47 executing program 1: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map, 0xffffffffffffffff, 0x1c, 0x10, 0xffffffffffffffff, @prog_id}, 0x20) 13:23:47 executing program 0: 13:23:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xda00) write$cgroup_int(r0, &(0x7f0000000140), 0x12) [ 342.590407][ T5086] usb 4-1: new high-speed USB device number 9 using dummy_hcd 13:23:48 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b40)={0x6, 0x4, &(0x7f00000028c0)=@raw=[@map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x6}, @map_fd], &(0x7f0000002940)='GPL\x00'}, 0x90) 13:23:48 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000840), 0x12) [ 342.851904][ T5086] usb 4-1: Using ep0 maxpacket: 8 [ 342.991757][ T5086] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 343.002317][ T5086] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 343.011617][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 343.023154][ T5086] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 343.034796][ T5086] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 343.044203][ T5086] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:23:48 executing program 2: 13:23:48 executing program 1: r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x14, &(0x7f0000001e80), 0x4) [ 343.262860][ T5086] hub 4-1:1.0: bad descriptor, ignoring hub [ 343.269033][ T5086] hub 4-1:1.0: probe with driver hub failed with error -5 [ 343.343031][ T5086] cdc_wdm 4-1:1.0: skipping garbage [ 343.348582][ T5086] cdc_wdm 4-1:1.0: skipping garbage 13:23:48 executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002100), 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001040)={r0, &(0x7f0000000000)="8f", &(0x7f0000001000)=@udp}, 0x20) [ 343.422470][ T5086] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 343.428631][ T5086] cdc_wdm 4-1:1.0: Unknown control protocol 13:23:48 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x0, 0x5}, 0x20) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) [ 343.555640][ T5086] usb 4-1: USB disconnect, device number 9 13:23:49 executing program 1: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 13:23:49 executing program 0: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup3(r2, r3, 0x0) write$P9_RWRITE(r4, 0x0, 0x0) 13:23:49 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000c00)={0x2c, r1, 0x1, 0x0, 0x0, {0x23}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) 13:23:50 executing program 0: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) 13:23:50 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='0', 0x1) syz_usb_disconnect(r0) 13:23:50 executing program 3: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 13:23:50 executing program 2: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000024c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000020c0)={r0, &(0x7f00000000c0)="cb", &(0x7f00000010c0)=""/4096}, 0x20) [ 345.321305][ T9] usb 1-1: new low-speed USB device number 3 using dummy_hcd 13:23:51 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x0, 0x5}, 0x20) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) [ 345.701312][ T5100] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 345.740435][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 345.755555][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 345.767088][ T9] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 345.778456][ T9] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 345.787950][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.858766][ T5827] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 13:23:51 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x11, 0x4, &(0x7f0000000780)=@framed={{}, [@generic]}, &(0x7f00000007c0)='syzkaller\x00', 0x9}, 0x90) [ 345.924038][ T9] hub 1-1:1.0: bad descriptor, ignoring hub [ 345.931492][ T9] hub 1-1:1.0: probe with driver hub failed with error -5 [ 345.940540][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 345.945971][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 346.000982][ T5100] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 346.001663][ T9] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 346.015023][ T9] cdc_wdm 1-1:1.0: Unknown control protocol [ 346.141229][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.150716][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.163638][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.242149][ T9] usb 1-1: USB disconnect, device number 3 [ 346.299336][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.308757][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.320521][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.455348][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.466333][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.478686][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 13:23:51 executing program 3: syz_usb_connect(0x0, 0x2d, 0x0, 0x0) [ 346.574312][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.583621][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.594896][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.742825][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.752250][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.756998][ T1550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.765742][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 346.777019][ T1550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.890844][ T1071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.899057][ T1071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.922890][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 346.932334][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 346.943699][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 13:23:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r1, 0x7, 0x0, 0x0, {}, [@GTPA_O_TEI={0x8}, @GTPA_VERSION={0x8}]}, 0x24}}, 0x0) [ 347.065201][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.077105][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.089160][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 13:23:52 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) [ 347.191454][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 347.200889][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 347.212243][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 13:23:52 executing program 2: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_disconnect(r0) 13:23:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x0, 0x5}, 0x20) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) [ 347.411541][ T5100] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 347.421012][ T5100] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 347.429605][ T5100] usb 2-1: Product: syz [ 347.434268][ T5100] usb 2-1: Manufacturer: syz [ 347.439101][ T5100] usb 2-1: SerialNumber: syz 13:23:52 executing program 4: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002100), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) [ 347.497700][ T5100] usb 2-1: config 0 descriptor?? [ 347.632136][ T5100] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 13:23:53 executing program 3: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) [ 347.803904][ T9] usb 2-1: USB disconnect, device number 8 [ 347.848825][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected 13:23:53 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) [ 348.222069][ T5100] usb 3-1: new low-speed USB device number 6 using dummy_hcd 13:23:53 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89a1, &(0x7f0000000080)) 13:23:53 executing program 1: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) 13:23:53 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='0', 0x1) syz_usb_disconnect(r0) [ 348.591143][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 348.681400][ T5100] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 348.692221][ T5100] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 348.701538][ T5100] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 348.715452][ T5100] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 348.725589][ T5100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:23:54 executing program 0: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='0', 0x1) syz_usb_disconnect(r0) [ 348.811643][ T5858] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 348.889323][ T5100] hub 3-1:1.0: bad descriptor, ignoring hub [ 348.895965][ T5100] hub 3-1:1.0: probe with driver hub failed with error -5 [ 348.900775][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 348.904747][ T5100] cdc_wdm 3-1:1.0: skipping garbage [ 348.913972][ T5100] cdc_wdm 3-1:1.0: skipping garbage [ 348.950686][ T5100] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 348.956840][ T5100] cdc_wdm 3-1:1.0: Unknown control protocol 13:23:54 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x0, 0x5}, 0x20) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000000c0)=0x81, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) [ 349.052540][ T9] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 349.061049][ T9] usb 5-1: config 0 has no interface number 0 [ 349.067381][ T9] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 349.113329][ T5100] usb 3-1: USB disconnect, device number 6 [ 349.291283][ T9] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 349.301052][ T9] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 349.309394][ T9] usb 5-1: Product: syz [ 349.314020][ T9] usb 5-1: SerialNumber: syz [ 349.320673][ T5086] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 349.403400][ T9] usb 5-1: config 0 descriptor?? [ 349.490793][ T9] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 349.667225][ T9] usb 5-1: USB disconnect, device number 2 [ 349.712652][ T5086] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 349.772114][ T5088] usb 1-1: new high-speed USB device number 4 using dummy_hcd 13:23:55 executing program 2: socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r1}}}], 0x28}}], 0x2, 0x0) [ 349.854362][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 349.863730][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 349.875229][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 349.999752][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.009144][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.020775][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 13:23:55 executing program 2: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 350.202334][ T5088] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 350.211049][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.220769][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.232138][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 13:23:55 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 13:23:55 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) [ 350.299355][ T5088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.308740][ T5088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.320102][ T5088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.371776][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.381502][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.392816][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.463119][ T5088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.473231][ T5088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.484532][ T5088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.511553][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.520994][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.532554][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.631797][ T5088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.641347][ T5088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.652779][ T5088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.678360][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.687911][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.699313][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 350.775525][ T5088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.785465][ T5088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.796936][ T5088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.804538][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.813910][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.825497][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 13:23:56 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000001080)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @loopback}, {0x2, 0x0, @dev}}) [ 350.893704][ T5088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.903187][ T5088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 350.914488][ T5088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 350.981056][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 350.990703][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.002147][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 351.010467][ T5088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.019627][ T5088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.031181][ T5088] usb 1-1: config 0 interface 0 has no altsetting 0 13:23:56 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 351.154124][ T5088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.163766][ T5088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.180216][ T42] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 351.188233][ T5088] usb 1-1: config 0 interface 0 has no altsetting 0 [ 351.279148][ T5086] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 351.288622][ T5086] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 351.297557][ T5086] usb 4-1: Product: syz [ 351.302030][ T5086] usb 4-1: Manufacturer: syz [ 351.306865][ T5086] usb 4-1: SerialNumber: syz [ 351.331951][ T5088] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 351.341226][ T5088] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 351.352532][ T5088] usb 1-1: config 0 interface 0 has no altsetting 0 13:23:56 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000000)={{0x2, 0x0, @loopback}, {0x0, @remote}, 0x0, {0x2, 0x0, @multicast2}, 'pim6reg\x00'}) [ 351.404285][ T5086] usb 4-1: config 0 descriptor?? [ 351.420246][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 351.470481][ T5086] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 13:23:56 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) [ 351.551293][ T42] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 351.559584][ T42] usb 2-1: config 0 has no interface number 0 [ 351.568422][ T42] usb 2-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 351.601554][ T5088] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 351.611127][ T5088] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 351.619734][ T5088] usb 1-1: Product: syz [ 351.624374][ T5088] usb 1-1: Manufacturer: syz [ 351.629576][ T5088] usb 1-1: SerialNumber: syz [ 351.706044][ T5088] usb 1-1: config 0 descriptor?? [ 351.781042][ T42] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 351.793134][ T42] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 351.802371][ T42] usb 2-1: Product: syz [ 351.806763][ T42] usb 2-1: SerialNumber: syz [ 351.854681][ T5086] usb 4-1: USB disconnect, device number 10 [ 351.868725][ T42] usb 2-1: config 0 descriptor?? [ 351.895643][ T5088] yurex 1-1:0.0: USB YUREX device now attached to Yurex #1 13:23:57 executing program 4: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 351.953101][ T5086] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 351.984268][ T42] usbhid 2-1:0.8: couldn't find an input interrupt endpoint 13:23:57 executing program 2: openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xf2902, 0x0) [ 352.162799][ T42] usb 2-1: USB disconnect, device number 9 [ 352.192612][ T5100] usb 1-1: USB disconnect, device number 4 [ 352.250198][ C1] hrtimer: interrupt took 286300 ns [ 352.269156][ T5100] yurex 1-1:0.0: USB YUREX #1 now disconnected 13:23:58 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 13:23:58 executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=ANY=[@ANYBLOB="3000000024001d0f3a61aa51acb1d59e1a43ca38", @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=@delchain={0x5c, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff2, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x28, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x24, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0xff10}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x7eb}]}]}]}}]}, 0x5c}}, 0x0) 13:23:58 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) 13:23:58 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905"], 0x0) 13:23:58 executing program 2: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='0', 0x1) syz_usb_disconnect(r0) 13:23:58 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) 13:23:58 executing program 3: syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) 13:23:58 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_udp_int(r0, 0x11, 0x68, 0x0, &(0x7f0000000900)) 13:23:58 executing program 4: ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)) [ 353.720502][ T5086] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 353.780263][ T5088] usb 3-1: new high-speed USB device number 7 using dummy_hcd 13:23:59 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}], 0x1, 0x0) [ 353.960613][ T5086] usb 1-1: Using ep0 maxpacket: 16 13:23:59 executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8921, &(0x7f0000000080)) [ 354.081515][ T5086] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 354.089888][ T5086] usb 1-1: config 0 has no interface number 0 [ 354.097099][ T5086] usb 1-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 354.109517][ T5088] usb 3-1: too many configurations: 9, using maximum allowed: 8 13:23:59 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @broadcast, {[@end]}}}}}) [ 354.216492][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.225970][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.237449][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 354.335031][ T5086] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 354.350402][ T5086] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 354.358768][ T5086] usb 1-1: Product: syz [ 354.364995][ T5086] usb 1-1: SerialNumber: syz [ 354.403698][ T5086] usb 1-1: config 0 descriptor?? [ 354.440941][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.455594][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.468803][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:23:59 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) [ 354.504785][ T5086] usbhid 1-1:0.8: couldn't find an input interrupt endpoint 13:24:00 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x1, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_disconnect(r0) [ 354.601163][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.610643][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.622419][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 354.692441][ T5086] usb 1-1: USB disconnect, device number 5 [ 354.782795][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.792221][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.804530][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:00 executing program 1: creat(&(0x7f00000000c0)='./file0\x00', 0x0) getresgid(&(0x7f0000001380)=0x0, &(0x7f00000013c0), &(0x7f0000001400)) lchown(&(0x7f0000001340)='./file0\x00', 0x0, r0) [ 354.911507][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 354.921253][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 354.932667][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:00 executing program 3: bpf$MAP_UPDATE_CONST_STR(0xe, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) [ 355.031332][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.040828][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.052269][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:00 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) [ 355.210324][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.219601][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.230987][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:00 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$nbd(r0, 0x0, 0x94) write$nbd(r0, &(0x7f0000000040), 0x10) [ 355.320723][ T5100] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 355.400967][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 355.411194][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 355.422643][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:01 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) 13:24:01 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8992, &(0x7f0000000080)) [ 355.620607][ T5088] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 355.630231][ T5088] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 355.638847][ T5088] usb 3-1: Product: syz [ 355.643403][ T5088] usb 3-1: Manufacturer: syz [ 355.648232][ T5088] usb 3-1: SerialNumber: syz [ 355.705104][ T5088] usb 3-1: config 0 descriptor?? [ 355.721067][ T5100] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 355.732259][ T5100] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 355.741579][ T5100] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 13:24:01 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) [ 355.751755][ T5100] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 355.761403][ T5100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.841785][ T5088] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 355.966343][ T5100] hub 5-1:1.0: bad descriptor, ignoring hub [ 355.972795][ T5100] hub 5-1:1.0: probe with driver hub failed with error -5 [ 355.981677][ T5100] cdc_wdm 5-1:1.0: skipping garbage [ 355.990781][ T5100] cdc_wdm 5-1:1.0: skipping garbage [ 355.996357][ T5100] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 13:24:01 executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x14, 0x15, 0x1, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) [ 356.114205][ T9] usb 3-1: USB disconnect, device number 7 [ 356.153771][ T9] yurex 3-1:0.0: USB YUREX #0 now disconnected 13:24:01 executing program 0: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) [ 356.250463][ T5088] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 356.251201][ T5093] usb 5-1: USB disconnect, device number 3 [ 356.560399][ T5088] usb 4-1: Using ep0 maxpacket: 16 13:24:02 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) [ 356.708034][ T5088] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 356.717443][ T5088] usb 4-1: config 0 has no interface number 0 [ 356.724015][ T5088] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 356.914987][ T5088] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 356.924515][ T5088] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 356.933102][ T5088] usb 4-1: Product: syz [ 356.937490][ T5088] usb 4-1: SerialNumber: syz 13:24:02 executing program 4: pselect6(0x40, &(0x7f0000000300), &(0x7f0000000340)={0x4}, 0x0, 0x0, 0x0) [ 356.992759][ T5088] usb 4-1: config 0 descriptor?? 13:24:02 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a010000190581"], 0x0) syz_usb_disconnect(r0) 13:24:02 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000140)={0x0, @loopback, @loopback}, 0xc) [ 357.060773][ T5088] usbhid 4-1:0.8: couldn't find an input interrupt endpoint 13:24:02 executing program 0: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000080)='0', 0x1) syz_usb_disconnect(r0) [ 357.268590][ T5088] usb 4-1: USB disconnect, device number 11 [ 357.306159][ T5947] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 13:24:02 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) 13:24:03 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @raw_data="25d5765d32e7d646d542ccc998d7da81215cabac8f95b12ca36cd2c99c2d823787bff105715232f33c0134f4e5a7f9f16ddf2b8c101eb747309660ac2c6f07b4bb7199b12eac57cd054d8be827b04f96ba61dc67eb774f80d47a078237d4ff7d317cc4c8208135ddabc6fac5fbf686374fb86d80a66ae7326fbf6e32974432df4e0521cd9e19f34ba00fa649ba82f4ceb6515c7c56c4e799adf72421316ad5d3084c941da68e6d74b832b694604ba2d291a76213463d78171df8eed7d73edc41ba73a47baf98d4c1"}) [ 357.680370][ T5093] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 357.864927][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd 13:24:03 executing program 3: syz_genetlink_get_family_id$net_dm(&(0x7f0000000340), 0xffffffffffffffff) [ 357.970492][ T5093] usb 3-1: Using ep0 maxpacket: 8 13:24:03 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) 13:24:03 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) [ 358.098414][ T5093] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 358.109228][ T5093] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 358.118500][ T5093] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 358.128714][ T5093] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 358.140509][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.242566][ T9] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 358.255128][ T5093] hub 3-1:1.0: bad descriptor, ignoring hub [ 358.262454][ T5093] hub 3-1:1.0: probe with driver hub failed with error -5 [ 358.271425][ T5093] cdc_wdm 3-1:1.0: skipping garbage [ 358.276868][ T5093] cdc_wdm 3-1:1.0: skipping garbage [ 358.282727][ T5093] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 358.391015][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.400328][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.411643][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:03 executing program 3: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x782f83b55479dac6) write$P9_RUNLINKAT(r0, 0x0, 0x0) [ 358.582881][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.592218][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.606217][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.613205][ T5100] usb 3-1: USB disconnect, device number 8 [ 358.641729][ T5086] usb 5-1: new high-speed USB device number 4 using dummy_hcd 13:24:04 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14}, 0x14}}, 0x0) [ 358.754417][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.763888][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.775220][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.877748][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 358.887155][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 358.898708][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 358.941465][ T5086] usb 5-1: Using ep0 maxpacket: 16 13:24:04 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0}}], 0x2, 0x0) [ 359.042239][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.051687][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.068358][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 359.101487][ T5086] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 359.109771][ T5086] usb 5-1: config 0 has no interface number 0 [ 359.116393][ T5086] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 359.211229][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.220569][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.231926][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:04 executing program 2: mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000040)={0x180}, 0x20) [ 359.301359][ T5086] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 359.310860][ T5086] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 359.319201][ T5086] usb 5-1: Product: syz [ 359.323790][ T5086] usb 5-1: SerialNumber: syz [ 359.348564][ T5086] usb 5-1: config 0 descriptor?? [ 359.385230][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.395155][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.406507][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:04 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_disconnect(r0) [ 359.463425][ T5086] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 359.581313][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 359.590898][ T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 359.602248][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 359.630608][ T5086] usb 5-1: USB disconnect, device number 4 13:24:05 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0}}], 0x2, 0x0) 13:24:05 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r0, 0xc02c563a, 0x0) [ 359.871802][ T9] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 359.889558][ T9] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 359.900251][ T9] usb 1-1: Product: syz [ 359.904653][ T9] usb 1-1: Manufacturer: syz [ 359.909471][ T9] usb 1-1: SerialNumber: syz [ 359.983253][ T9] usb 1-1: config 0 descriptor?? [ 360.072533][ T9] yurex 1-1:0.0: USB YUREX device now attached to Yurex #0 13:24:05 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x80111500) 13:24:05 executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x0, 'netdevsim0\x00', {0x4}, 0x2}) 13:24:05 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0}}], 0x2, 0x0) [ 360.437128][ T9] usb 1-1: USB disconnect, device number 6 [ 360.443415][ C0] usb 1-1: yurex_control_callback - control failed: -71 [ 360.485909][ T9] yurex 1-1:0.0: USB YUREX #0 now disconnected 13:24:06 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB], 0x0) 13:24:06 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0x5421, &(0x7f0000000100)={"c00d9aee22208454e5f7757a739f461ec2b5fe3531154ed35d59f0fcea41"}) 13:24:06 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)}}], 0x2, 0x0) 13:24:06 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_disconnect(r0) 13:24:06 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x5452) 13:24:06 executing program 0: syz_init_net_socket$802154_dgram(0xffffffffffffffff, 0x2, 0x0) [ 361.293125][ T5100] usb 4-1: new high-speed USB device number 12 using dummy_hcd 13:24:06 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, &(0x7f0000000080)='0', 0x1) 13:24:06 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)}}], 0x2, 0x0) [ 361.570192][ T5100] usb 4-1: Using ep0 maxpacket: 16 13:24:07 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x18, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, [@private0]}, 0x18) [ 361.724212][ T5100] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 361.732802][ T5100] usb 4-1: config 0 has no interface number 0 [ 361.739144][ T5100] usb 4-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x0, skipping 13:24:07 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0xa, 0x4}) [ 361.941517][ T5100] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 361.951417][ T5100] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 361.959761][ T5100] usb 4-1: Product: syz [ 361.964357][ T5100] usb 4-1: SerialNumber: syz [ 362.012641][ T5100] usb 4-1: config 0 descriptor?? 13:24:07 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, 0x0, 0x0) syz_usb_disconnect(r0) [ 362.101194][ T5088] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 362.125867][ T5100] usbhid 4-1:0.8: couldn't find an input interrupt endpoint 13:24:07 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)}}], 0x2, 0x0) [ 362.306034][ T5100] usb 4-1: USB disconnect, device number 12 [ 362.411856][ T5088] usb 2-1: too many configurations: 9, using maximum allowed: 8 13:24:07 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 362.531079][ T5088] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.545788][ T5088] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.559007][ T5088] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:08 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r0, 0x101, 0x7, &(0x7f0000001400), 0x4) [ 362.661245][ T5088] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.671146][ T5088] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.682501][ T5088] usb 2-1: config 0 interface 0 has no altsetting 0 [ 362.771779][ T5088] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.781156][ T5088] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.792480][ T5088] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:08 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) [ 362.925264][ T5088] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 362.934784][ T5088] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 362.951812][ T5088] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:08 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fef292766a6120eb844d0868ed7"], 0x0) [ 363.057356][ T5088] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.066800][ T5088] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.078145][ T5088] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:08 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 363.220613][ T5088] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.229806][ T5088] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.241795][ T5088] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:08 executing program 4: r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) 13:24:08 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r0) [ 363.392591][ T5088] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.402887][ T5088] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.414263][ T5088] usb 2-1: config 0 interface 0 has no altsetting 0 [ 363.545885][ T5088] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 363.555192][ T5088] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 363.572032][ T5088] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:09 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) 13:24:09 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 363.800286][ T5100] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 363.800725][ T5088] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 363.817304][ T5088] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 363.826051][ T5088] usb 2-1: Product: syz [ 363.830996][ T5088] usb 2-1: Manufacturer: syz [ 363.835822][ T5088] usb 2-1: SerialNumber: syz [ 363.886257][ T5088] usb 2-1: config 0 descriptor?? [ 363.911028][ T5093] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 364.021345][ T5088] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 364.111191][ T5100] usb 3-1: Using ep0 maxpacket: 16 [ 364.117323][ T5093] usb 4-1: device descriptor read/64, error -71 13:24:09 executing program 0: openat$bsg(0xffffffffffffff9c, &(0x7f0000001540), 0x10000, 0x0) [ 364.164558][ T5088] usb 2-1: USB disconnect, device number 10 [ 364.217505][ T5088] yurex 2-1:0.0: USB YUREX #0 now disconnected 13:24:09 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty}}}], 0x28}}], 0x2, 0x0) [ 364.272268][ T5100] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 364.284483][ T5100] usb 3-1: config 0 has no interface number 0 [ 364.291679][ T5100] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 364.303353][ T5100] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10025, setting to 1024 [ 364.451031][ T5100] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 364.460596][ T5100] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 364.468936][ T5100] usb 3-1: Product: syz [ 364.473566][ T5100] usb 3-1: SerialNumber: syz [ 364.493233][ T5093] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 364.541979][ T5100] usb 3-1: config 0 descriptor?? [ 364.562009][ T6016] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 364.626147][ T5100] cm109 3-1:0.8: invalid payload size 1024, expected 4 13:24:10 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 364.701006][ T5100] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input9 [ 364.730593][ T5093] usb 4-1: device descriptor read/64, error -71 [ 364.830102][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 364.843431][ T5088] usb 3-1: USB disconnect, device number 9 [ 364.850143][ C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 364.857351][ C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 364.888001][ T5093] usb usb4-port1: attempt power cycle 13:24:10 executing program 1: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x8002) 13:24:10 executing program 4: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 364.942419][ T5088] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 13:24:10 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) [ 365.370565][ T5093] usb 4-1: new high-speed USB device number 15 using dummy_hcd 13:24:10 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:10 executing program 2: r0 = getpid() syz_clone3(&(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001440)='./cgroup.net/syz0\x00', 0x200002, 0x0) process_mrelease(0xffffffffffffffff, 0x0) syz_pidfd_open(r0, 0x0) openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000002a40), 0x1, 0x0) [ 365.491005][ T5093] usb 4-1: device descriptor read/8, error -71 [ 365.530911][ T5086] usb 5-1: new high-speed USB device number 5 using dummy_hcd 13:24:11 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) [ 365.802411][ T5093] usb 4-1: new high-speed USB device number 16 using dummy_hcd 13:24:11 executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) [ 365.881406][ T5086] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 365.910503][ T5093] usb 4-1: device descriptor read/8, error -71 [ 365.986030][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 365.995315][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.006712][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.092811][ T5093] usb usb4-port1: unable to enumerate USB device [ 366.141088][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.150436][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.161751][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.190606][ T778] usb 1-1: new high-speed USB device number 7 using dummy_hcd 13:24:11 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:11 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) [ 366.300938][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.310262][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.321559][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.436770][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.440898][ T778] usb 1-1: Using ep0 maxpacket: 16 [ 366.446414][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.462479][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.595769][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.606025][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.611887][ T778] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 366.617244][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.625362][ T778] usb 1-1: config 0 has no interface number 0 13:24:12 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x1, 0x0) [ 366.642566][ T778] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 13:24:12 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:12 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000019c0)={&(0x7f0000001840), 0xc, &(0x7f0000001980)={&(0x7f0000001880)=@delqdisc={0x60, 0x25, 0x1, 0x0, 0x0, {}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}, @TCA_RATE={0x6}]}, 0x60}}, 0x0) [ 366.785569][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.795228][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.796830][ T778] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 366.806450][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 366.815900][ T778] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 366.830951][ T778] usb 1-1: Product: syz [ 366.835341][ T778] usb 1-1: SerialNumber: syz [ 366.908947][ T778] usb 1-1: config 0 descriptor?? [ 366.972933][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 366.982214][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 366.983589][ T778] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 366.993387][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:12 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r0) 13:24:12 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 367.160939][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 367.170266][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 367.181586][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 367.198206][ T778] usb 1-1: USB disconnect, device number 7 13:24:12 executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) [ 367.421199][ T5086] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 367.430677][ T5086] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 367.439283][ T5086] usb 5-1: Product: syz [ 367.443812][ T5086] usb 5-1: Manufacturer: syz [ 367.448635][ T5086] usb 5-1: SerialNumber: syz 13:24:12 executing program 2: bpf$MAP_CREATE_CONST_STR(0x11, &(0x7f0000002900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) [ 367.517464][ T5086] usb 5-1: config 0 descriptor?? [ 367.666663][ T5086] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0 13:24:13 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 367.731879][ T778] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 367.815751][ T5086] usb 5-1: USB disconnect, device number 5 13:24:13 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) [ 367.889862][ T5086] yurex 5-1:0.0: USB YUREX #0 now disconnected 13:24:13 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) [ 367.982018][ T778] usb 2-1: device descriptor read/64, error -71 [ 368.300239][ T778] usb 2-1: new high-speed USB device number 12 using dummy_hcd 13:24:13 executing program 3: bpf$BPF_LINK_CREATE(0x13, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) 13:24:13 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:13 executing program 4: r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001380)={0xa, 0x0, 0x0, @mcast2, 0x83}, 0x1c, 0x0, 0x0, &(0x7f00000014c0)=[@pktinfo={{0x24, 0x29, 0x32, {@empty, r2}}}], 0x28}}], 0x2, 0x0) [ 368.500511][ T778] usb 2-1: device descriptor read/64, error -71 [ 368.540568][ T5086] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 368.636954][ T778] usb usb2-port1: attempt power cycle 13:24:14 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 368.790720][ T5086] usb 3-1: Using ep0 maxpacket: 16 13:24:14 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) recvfrom$llc(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 368.930365][ T5086] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 368.938658][ T5086] usb 3-1: config 0 has no interface number 0 [ 368.945148][ T5086] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 13:24:14 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 369.094966][ T778] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 369.133143][ T5086] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 369.142899][ T5086] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 369.151403][ T5086] usb 3-1: Product: syz [ 369.155802][ T5086] usb 3-1: SerialNumber: syz [ 369.220547][ T5086] usb 3-1: config 0 descriptor?? [ 369.228392][ T778] usb 2-1: device descriptor read/8, error -71 13:24:14 executing program 0: r0 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)) [ 369.292135][ T5086] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 369.322674][ T5093] usb 4-1: new high-speed USB device number 17 using dummy_hcd 13:24:14 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000340)={0x0, 0x9, 0x4, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "84d35994"}, 0x0, 0x4, {}, 0x1}) [ 369.537694][ T6085] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.540874][ T778] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 369.554553][ T5086] usb 3-1: USB disconnect, device number 10 [ 369.642363][ T5093] usb 4-1: too many configurations: 9, using maximum allowed: 8 13:24:15 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 369.700402][ T778] usb 2-1: device descriptor read/8, error -71 [ 369.752241][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.761596][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.772922][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 369.840839][ T778] usb usb2-port1: unable to enumerate USB device [ 369.901727][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 369.913576][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 369.925729][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 13:24:15 executing program 4: bpf$MAP_CREATE_CONST_STR(0xa, &(0x7f0000002900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) [ 370.021499][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.030911][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.042372][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 13:24:15 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) 13:24:15 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 370.170977][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.180512][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.191856][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.324685][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.333998][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.345323][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 13:24:15 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) 13:24:15 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000040)={'sit0\x00', 0x0}) [ 370.491205][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.500750][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.512066][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 13:24:15 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_disconnect(r0) 13:24:15 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 370.631124][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.640405][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.651796][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 370.775676][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 370.785109][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 370.796926][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 13:24:16 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1]) 13:24:16 executing program 0: openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_io_uring_setup(0x32c2, &(0x7f0000000340), &(0x7f0000000000), &(0x7f00000003c0)) [ 371.012088][ T5093] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 371.021667][ T5093] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 371.030455][ T5093] usb 4-1: Product: syz [ 371.037380][ T5093] usb 4-1: Manufacturer: syz [ 371.043036][ T5093] usb 4-1: SerialNumber: syz [ 371.122793][ T5086] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 371.153980][ T5088] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 371.155972][ T5093] usb 4-1: config 0 descriptor?? [ 371.233262][ T5093] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 13:24:16 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 371.380462][ T5088] usb 3-1: device descriptor read/64, error -71 [ 371.402050][ T5086] usb 5-1: Using ep0 maxpacket: 16 13:24:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x14}, 0xf}}, 0x0) [ 371.437852][ T5093] usb 4-1: USB disconnect, device number 17 [ 371.463923][ T5093] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 371.555150][ T5086] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 371.563709][ T5086] usb 5-1: config 0 has no interface number 0 [ 371.570216][ T5086] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 371.760342][ T5088] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 371.775768][ T5086] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 371.785555][ T5086] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 371.794199][ T5086] usb 5-1: Product: syz [ 371.798602][ T5086] usb 5-1: SerialNumber: syz [ 371.820443][ T5086] usb 5-1: config 0 descriptor?? 13:24:17 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000000)={0xa, @vbi={0x0, 0x0, 0x0, 0x0, [], [0xfffffffb]}}) [ 371.909797][ T5086] usbhid 5-1:0.8: couldn't find an input interrupt endpoint 13:24:17 executing program 1: ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 371.966512][ T5088] usb 3-1: device descriptor read/64, error -71 13:24:17 executing program 3: r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) [ 372.087143][ T5086] usb 5-1: USB disconnect, device number 6 [ 372.117212][ T5088] usb usb3-port1: attempt power cycle 13:24:17 executing program 0: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) 13:24:17 executing program 1: syz_clone3(&(0x7f0000001200)={0x2008000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:24:17 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 372.601523][ T5088] usb 3-1: new high-speed USB device number 13 using dummy_hcd 13:24:18 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000006c5e405c9987aa"], 0x48}}, 0x0) [ 372.729486][ T5088] usb 3-1: device descriptor read/8, error -71 13:24:18 executing program 4: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) 13:24:18 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fef292766a6120e"], 0x0) 13:24:18 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000180)={0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x0, 0x0, '\x00', @value64}}) [ 373.030301][ T5088] usb 3-1: new high-speed USB device number 14 using dummy_hcd 13:24:18 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 373.160806][ T5088] usb 3-1: device descriptor read/8, error -71 13:24:18 executing program 4: syz_clone3(&(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58) [ 373.335756][ T5088] usb usb3-port1: unable to enumerate USB device 13:24:18 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91d7f7c6", 0x69) 13:24:19 executing program 4: socketpair(0x1d, 0x0, 0x7f, &(0x7f0000000000)) 13:24:19 executing program 0: syz_clone3(&(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x58) [ 373.631155][ T5093] usb 2-1: new high-speed USB device number 15 using dummy_hcd 13:24:19 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 373.900597][ T5093] usb 2-1: Using ep0 maxpacket: 16 13:24:19 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:24:19 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) 13:24:19 executing program 0: bpf$BPF_LINK_CREATE(0xe, 0x0, 0x0) [ 374.050618][ T5093] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 374.058916][ T5093] usb 2-1: config 0 has no interface number 0 [ 374.065542][ T5093] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 374.077236][ T5093] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 10025, setting to 1024 [ 374.242618][ T5093] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 374.252122][ T5093] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 374.260672][ T5093] usb 2-1: Product: syz [ 374.265079][ T5093] usb 2-1: SerialNumber: syz [ 374.300943][ T5093] usb 2-1: config 0 descriptor?? 13:24:19 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) [ 374.324104][ T6132] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 374.438343][ T5093] cm109 2-1:0.8: invalid payload size 1024, expected 4 [ 374.448967][ T5093] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input10 13:24:19 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 374.547514][ T5088] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 374.638992][ T9] usb 2-1: USB disconnect, device number 15 [ 374.650144][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 374.657365][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 374.698512][ T9] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 374.720671][ T5086] usb 5-1: new high-speed USB device number 7 using dummy_hcd 13:24:20 executing program 3: syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x490180) [ 374.900712][ T5088] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 374.946652][ T5086] usb 5-1: device descriptor read/64, error -71 13:24:20 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) [ 374.990533][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 374.999841][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.010328][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.175750][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.185319][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.195512][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:20 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:20 executing program 1: syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000006240)) [ 375.290735][ T5086] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 375.311255][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.321544][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.332639][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:20 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fef"], 0x0) [ 375.463248][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.472621][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.482856][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.533019][ T5086] usb 5-1: device descriptor read/64, error -71 [ 375.611094][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.620718][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.630905][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.669360][ T5086] usb usb5-port1: attempt power cycle 13:24:21 executing program 3: r0 = openat$random(0xffffffffffffff9c, &(0x7f00000009c0), 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) 13:24:21 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 375.758260][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.768025][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.778195][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 375.876280][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 375.885828][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 375.896108][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.028508][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 376.037928][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 376.048127][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 376.091321][ T777] usb 1-1: new high-speed USB device number 8 using dummy_hcd 13:24:21 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000080)=ANY=[]) [ 376.146382][ T5086] usb 5-1: new high-speed USB device number 9 using dummy_hcd 13:24:21 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000002f00)) [ 376.251466][ T5086] usb 5-1: device descriptor read/8, error -71 [ 376.280580][ T5088] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 376.290043][ T5088] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 376.298659][ T5088] usb 3-1: Product: syz [ 376.303264][ T5088] usb 3-1: Manufacturer: syz [ 376.308093][ T5088] usb 3-1: SerialNumber: syz [ 376.347844][ T5088] usb 3-1: config 0 descriptor?? [ 376.415876][ T5088] yurex 3-1:0.0: Could not find endpoints 13:24:21 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 376.472906][ T777] usb 1-1: Using ep0 maxpacket: 16 [ 376.580494][ T5086] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 376.603297][ T777] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 376.611875][ T777] usb 1-1: config 0 has no interface number 0 [ 376.618209][ T777] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 13:24:22 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000001640)={0x0, 0x9, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b11bbb53"}}) [ 376.629560][ T777] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 376.676233][ T5088] usb 3-1: USB disconnect, device number 15 [ 376.751177][ T5086] usb 5-1: device descriptor read/8, error -71 [ 376.841253][ T777] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 376.850888][ T777] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 376.859328][ T777] usb 1-1: Product: syz [ 376.863869][ T777] usb 1-1: SerialNumber: syz [ 376.908266][ T5086] usb usb5-port1: unable to enumerate USB device [ 376.928443][ T777] usb 1-1: config 0 descriptor?? 13:24:22 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) 13:24:22 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 377.056436][ T777] cm109 1-1:0.8: invalid payload size 0, expected 4 [ 377.086473][ T777] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input11 [ 377.200134][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 377.209512][ T5093] usb 1-1: USB disconnect, device number 8 [ 377.220243][ C0] cm109 1-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 377.227453][ C0] cm109 1-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 13:24:22 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0), 0x48) 13:24:22 executing program 2: syz_open_dev$video(&(0x7f0000000280), 0x2, 0x0) [ 377.314630][ T5093] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 13:24:22 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:24:23 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) 13:24:23 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, 0x0) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:23 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@bcast, @bcast, @default, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 13:24:23 executing program 0: openat$random(0xffffffffffffff9c, &(0x7f00000009c0), 0x200, 0x0) [ 378.280473][ T5088] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 378.347657][ T5093] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 378.580393][ T5093] usb 4-1: device descriptor read/64, error -71 [ 378.622032][ T5088] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 378.726962][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.736592][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 378.746794][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.845075][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.854464][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 378.864796][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 378.871632][ T5093] usb 4-1: new high-speed USB device number 19 using dummy_hcd 13:24:24 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) 13:24:24 executing program 0: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 13:24:24 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 378.971939][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 378.981302][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 378.991529][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:24 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 379.070401][ T5093] usb 4-1: device descriptor read/64, error -71 [ 379.082380][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 379.091989][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 379.102184][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:24 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x20002, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, 0x0) [ 379.211169][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 379.221171][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 379.224303][ T5093] usb usb4-port1: attempt power cycle [ 379.236914][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 379.361207][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 379.370585][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 379.370816][ T778] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 379.380967][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:24 executing program 0: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 379.519312][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 379.529443][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 379.545060][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 379.642152][ T778] usb 2-1: Using ep0 maxpacket: 16 13:24:25 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x40045109) [ 379.680971][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 379.681101][ T5093] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 379.690191][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 379.707979][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:25 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001200)=@x={0x94, 0x6, "89aae0a09070"}) [ 379.811099][ T778] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 379.819480][ T778] usb 2-1: config 0 has no interface number 0 [ 379.826276][ T778] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 379.857005][ T5093] usb 4-1: device descriptor read/8, error -71 [ 379.911003][ T5088] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 379.920456][ T5088] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 379.929056][ T5088] usb 5-1: Product: syz [ 379.933640][ T5088] usb 5-1: Manufacturer: syz [ 379.938472][ T5088] usb 5-1: SerialNumber: syz [ 380.008672][ T5088] usb 5-1: config 0 descriptor?? [ 380.021756][ T778] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 380.031429][ T778] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 380.039758][ T778] usb 2-1: Product: syz [ 380.049127][ T778] usb 2-1: SerialNumber: syz [ 380.095060][ T778] usb 2-1: config 0 descriptor?? [ 380.112020][ T5088] yurex 5-1:0.0: Could not find endpoints 13:24:25 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 380.186740][ T778] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 380.228907][ T5093] usb 4-1: new high-speed USB device number 21 using dummy_hcd 13:24:25 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) [ 380.289880][ T5088] usb 5-1: USB disconnect, device number 11 [ 380.342713][ T5093] usb 4-1: device descriptor read/8, error -71 [ 380.385822][ T778] usb 2-1: USB disconnect, device number 16 [ 380.462341][ T5093] usb usb4-port1: unable to enumerate USB device 13:24:25 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000004dc0)={&(0x7f0000004a00)={0x10, 0x0, 0x119a, 0x1000}, 0xc, &(0x7f0000004d80)={&(0x7f0000004a80)={0x14}, 0x14}}, 0x0) 13:24:26 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:26 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 13:24:26 executing program 1: r0 = syz_open_dev$video(&(0x7f00000000c0), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000100)={0x0, 0x0, @value}) 13:24:26 executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_ifreq(r0, 0x0, 0x0) 13:24:26 executing program 4: bpf$BPF_LINK_CREATE(0x19, 0x0, 0x0) 13:24:26 executing program 3: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x4020940d) 13:24:26 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) 13:24:26 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) 13:24:26 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:24:26 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:26 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 13:24:27 executing program 4: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) 13:24:27 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 382.080305][ T5093] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 382.140494][ T777] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 382.150744][ T5100] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 382.290420][ T5093] usb 4-1: device descriptor read/64, error -71 13:24:27 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 13:24:27 executing program 2: syz_clone3(&(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x98) [ 382.420640][ T5100] usb 2-1: Using ep0 maxpacket: 16 [ 382.451087][ T777] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 382.540431][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.549704][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 382.551372][ T5100] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 382.559897][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 382.567743][ T5100] usb 2-1: config 0 has no interface number 0 [ 382.580994][ T5100] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 382.612702][ T5093] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 382.731729][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.741110][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 382.751186][ T5100] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 382.751346][ T5100] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 382.762504][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 382.768792][ T5100] usb 2-1: Product: syz [ 382.780238][ T5100] usb 2-1: SerialNumber: syz 13:24:28 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 382.873420][ T5093] usb 4-1: device descriptor read/64, error -71 [ 382.905301][ T5100] usb 2-1: config 0 descriptor?? 13:24:28 executing program 2: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) [ 382.981624][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.990984][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 383.001244][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.006721][ T5093] usb usb4-port1: attempt power cycle [ 383.060703][ T5100] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 383.162306][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.171842][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 383.182008][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.248581][ T5100] usb 2-1: USB disconnect, device number 17 [ 383.314876][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.330731][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 383.342780][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:28 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) 13:24:28 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 383.443768][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.453261][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 383.465344][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.513931][ T5093] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 383.571255][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.580613][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 383.591136][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 383.633683][ T5093] usb 4-1: device descriptor read/8, error -71 13:24:29 executing program 2: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) [ 383.706923][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 383.716514][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 383.726818][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:29 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 13:24:29 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) [ 383.923078][ T5093] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 383.945610][ T777] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 383.955407][ T777] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 383.964558][ T777] usb 1-1: Product: syz [ 383.968939][ T777] usb 1-1: Manufacturer: syz [ 383.973908][ T777] usb 1-1: SerialNumber: syz [ 384.051239][ T5093] usb 4-1: device descriptor read/8, error -71 [ 384.051676][ T777] usb 1-1: config 0 descriptor?? 13:24:29 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8f"], 0x0) [ 384.166765][ T777] yurex 1-1:0.0: Could not find endpoints [ 384.193429][ T5093] usb usb4-port1: unable to enumerate USB device 13:24:29 executing program 4: setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) [ 384.370469][ T5093] usb 1-1: USB disconnect, device number 9 13:24:29 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) 13:24:30 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) [ 384.755292][ T777] usb 3-1: new high-speed USB device number 16 using dummy_hcd 13:24:30 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 13:24:30 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) [ 385.040770][ T777] usb 3-1: Using ep0 maxpacket: 16 13:24:30 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09040000010209"], 0x0) syz_usb_disconnect(r0) 13:24:30 executing program 4: write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 385.195538][ T777] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 385.203976][ T777] usb 3-1: config 0 has no interface number 0 [ 385.210448][ T777] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 13:24:30 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) [ 385.400618][ T777] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 385.410220][ T777] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 385.419198][ T777] usb 3-1: Product: syz [ 385.423981][ T777] usb 3-1: SerialNumber: syz [ 385.515270][ T777] usb 3-1: config 0 descriptor?? 13:24:30 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) [ 385.590097][ T777] usbhid 3-1:0.8: couldn't find an input interrupt endpoint 13:24:31 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, 0x0) [ 385.790551][ T5088] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 385.811362][ T777] usb 3-1: USB disconnect, device number 16 [ 385.830929][ T5086] usb 5-1: new high-speed USB device number 12 using dummy_hcd 13:24:31 executing program 3: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) [ 386.096458][ T5088] usb 1-1: Using ep0 maxpacket: 8 13:24:31 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x0, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) [ 386.172094][ T5086] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 386.227095][ T5088] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.237679][ T5088] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 386.246993][ T5088] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 386.260413][ T5088] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 386.269737][ T5088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:24:31 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 386.330800][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.340258][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 386.350426][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 386.372269][ T5088] hub 1-1:1.0: bad descriptor, ignoring hub [ 386.378420][ T5088] hub 1-1:1.0: probe with driver hub failed with error -5 [ 386.387692][ T5088] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 13:24:31 executing program 2: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) [ 386.460951][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.470764][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 386.480927][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:31 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="8fef"], 0x0) [ 386.614511][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.624747][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 386.635935][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 386.721432][ T5090] usb 1-1: USB disconnect, device number 10 [ 386.791590][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.801664][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 386.817199][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:32 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) 13:24:32 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 386.942389][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 386.952093][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 386.962302][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 387.081550][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.091404][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 387.101557][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 [ 387.170661][ T5093] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 387.228063][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.237779][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 387.247974][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:32 executing program 3: ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) 13:24:32 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) [ 387.397723][ T5086] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 387.407068][ T5086] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 387.411241][ T5093] usb 2-1: device descriptor read/64, error -71 [ 387.417236][ T5086] usb 5-1: config 0 interface 0 has no altsetting 0 13:24:32 executing program 2: syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) [ 387.632268][ T5086] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 387.641837][ T5086] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 387.650628][ T5086] usb 5-1: Product: syz [ 387.655020][ T5086] usb 5-1: Manufacturer: syz [ 387.659846][ T5086] usb 5-1: SerialNumber: syz [ 387.710628][ T5086] usb 5-1: config 0 descriptor?? 13:24:33 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socket$phonet(0x23, 0x2, 0x1) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18}, './file0\x00'}) [ 387.750245][ T5093] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 387.788536][ T5086] yurex 5-1:0.0: Could not find endpoints 13:24:33 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) [ 387.962478][ T5093] usb 2-1: device descriptor read/64, error -71 [ 387.970354][ T5088] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 387.985796][ T5086] usb 5-1: USB disconnect, device number 12 13:24:33 executing program 3: syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) [ 388.129902][ T5093] usb usb2-port1: attempt power cycle [ 388.220493][ T5088] usb 1-1: device descriptor read/64, error -71 13:24:33 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000004c0)) [ 388.500477][ T5088] usb 1-1: new high-speed USB device number 12 using dummy_hcd 13:24:33 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) 13:24:34 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) 13:24:34 executing program 2: write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 388.620838][ T5093] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 388.730504][ T5088] usb 1-1: device descriptor read/64, error -71 [ 388.730971][ T5093] usb 2-1: device descriptor read/8, error -71 [ 388.861977][ T5088] usb usb1-port1: attempt power cycle 13:24:34 executing program 3: r0 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x10) 13:24:34 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) [ 389.030963][ T5093] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 389.070617][ T778] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 389.140987][ T5093] usb 2-1: device descriptor read/8, error -71 13:24:34 executing program 3: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) [ 389.294034][ T5093] usb usb2-port1: unable to enumerate USB device [ 389.332594][ T5088] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 389.360829][ T778] usb 3-1: too many configurations: 9, using maximum allowed: 8 13:24:34 executing program 4: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) [ 389.460625][ T5088] usb 1-1: device descriptor read/8, error -71 [ 389.491601][ T778] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.500955][ T778] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.511092][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.611372][ T778] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.620726][ T778] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.630929][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:35 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) 13:24:35 executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, 0x0, 0x0) [ 389.759578][ T778] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.769163][ T778] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.780826][ T5088] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 389.790204][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 [ 389.870677][ T5088] usb 1-1: device descriptor read/8, error -71 [ 389.882027][ T778] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 389.882197][ T778] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 389.882348][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:35 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) 13:24:35 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, 0x0, 0x0, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) [ 390.011016][ T778] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.020370][ T778] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 390.030748][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 [ 390.108454][ T5088] usb usb1-port1: unable to enumerate USB device [ 390.140656][ T778] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.149844][ T778] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 390.161031][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:35 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="8fef"], 0x0) [ 390.300552][ T778] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.309739][ T778] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 390.320352][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:35 executing program 1: syz_open_dev$sg(&(0x7f0000000480), 0xcf, 0x0) [ 390.500287][ T778] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 390.509475][ T778] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 390.519709][ T778] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:35 executing program 3: bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@cgroup, 0x26, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 13:24:36 executing program 0: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f0000000840)={0x0, 0xe}) [ 390.730838][ T778] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 390.740446][ T778] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 390.749176][ T778] usb 3-1: Product: syz [ 390.753887][ T778] usb 3-1: Manufacturer: syz [ 390.758722][ T778] usb 3-1: SerialNumber: syz 13:24:36 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) [ 390.829863][ T778] usb 3-1: config 0 descriptor?? [ 390.875218][ T5100] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 390.906679][ T778] yurex 3-1:0.0: Could not find endpoints 13:24:36 executing program 3: r0 = gettid() sched_rr_get_interval(r0, &(0x7f00000000c0)) 13:24:36 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VIDIOC_G_EDID(r0, 0xc0285628, &(0x7f0000000200)={0x0, 0x0, 0x8000, '\x00', 0x0}) [ 391.098103][ T5093] usb 3-1: USB disconnect, device number 17 [ 391.135488][ T5100] usb 5-1: device descriptor read/64, error -71 13:24:36 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) [ 391.410818][ T778] usb 2-1: new high-speed USB device number 22 using dummy_hcd 13:24:36 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) [ 391.473577][ T5100] usb 5-1: new high-speed USB device number 14 using dummy_hcd 13:24:37 executing program 3: syz_open_dev$sndpcmp(&(0x7f0000000000), 0x4, 0x107442) [ 391.670280][ T778] usb 2-1: device descriptor read/64, error -71 [ 391.700454][ T5100] usb 5-1: device descriptor read/64, error -71 13:24:37 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) [ 391.884419][ T5100] usb usb5-port1: attempt power cycle [ 391.980575][ T778] usb 2-1: new high-speed USB device number 23 using dummy_hcd 13:24:37 executing program 0: write$hidraw(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:24:37 executing program 3: r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x80000000}, 0x0) [ 392.190184][ T778] usb 2-1: device descriptor read/64, error -71 13:24:37 executing program 2: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8930, 0x0) [ 392.310275][ T5100] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 392.333495][ T778] usb usb2-port1: attempt power cycle [ 392.421720][ T5100] usb 5-1: device descriptor read/8, error -71 13:24:37 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) 13:24:38 executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) bind$ax25(r0, &(0x7f0000000300)={{0x3, @null}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) [ 392.670271][ T5086] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 392.702429][ T5100] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 392.770416][ T778] usb 2-1: new high-speed USB device number 24 using dummy_hcd 13:24:38 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)) [ 392.820981][ T5100] usb 5-1: device descriptor read/8, error -71 [ 392.882527][ T778] usb 2-1: device descriptor read/8, error -71 13:24:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000180)={0x0, 0x7, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "61893876"}}) [ 392.957878][ T5100] usb usb5-port1: unable to enumerate USB device [ 392.990710][ T5086] usb 1-1: too many configurations: 9, using maximum allowed: 8 13:24:38 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) dup(r0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000002a7093fcdb0000000010000000000001cfff817c601e67c8a75c4ab6597f107ebfa8dc7e2c602900a4e949ad9ce640daefd881542249191ee2f7966800000000cecbe87e681231de95e1fcbc8071136f64065faec702a983240e001c33c38ba19394e40e62cd9a0ea330df644748af0d211c83fd4ef58760105d35ebd047f3458d4eb820607c905a8f666cfbbb73e6354e7f1259be2f7b9c8251bfbbefc687cc69845310e67dafcc4b6da3e45bcd828ef40c2db029ddcba591", @ANYRES32, @ANYBLOB="0400ffffe0ff0c00f2ff0400"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20060040) [ 393.071644][ T5086] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.081123][ T5086] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 393.091345][ T5086] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.180830][ T778] usb 2-1: new high-speed USB device number 25 using dummy_hcd 13:24:38 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)) [ 393.235657][ T5086] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.245159][ T5086] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 393.255380][ T5086] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.300427][ T778] usb 2-1: device descriptor read/8, error -71 [ 393.369586][ T5086] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.378931][ T5086] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 393.389086][ T5086] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.439733][ T778] usb usb2-port1: unable to enumerate USB device 13:24:38 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) dup3(r0, r1, 0x0) [ 393.521088][ T5086] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.530366][ T5086] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 393.540532][ T5086] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:39 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000840)) [ 393.660406][ T5086] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.675066][ T5086] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 393.687077][ T5086] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:39 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000000), 0x100000000, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x0, 0x2}) [ 393.831540][ T5086] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.841040][ T5086] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 393.851270][ T5086] usb 1-1: config 0 interface 0 has no altsetting 0 [ 393.982022][ T5086] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 393.991911][ T5086] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 394.002093][ T5086] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:39 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="8fef"], 0x0) 13:24:39 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)=ANY=[@ANYBLOB="01a400000100000018"]) 13:24:39 executing program 1: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) [ 394.183780][ T5086] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 394.193075][ T5086] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 394.203332][ T5086] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:39 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r0) [ 394.422115][ T5086] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 394.431653][ T5086] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 394.440426][ T5086] usb 1-1: Product: syz [ 394.444858][ T5086] usb 1-1: Manufacturer: syz [ 394.449682][ T5086] usb 1-1: SerialNumber: syz [ 394.465670][ T6386] autofs4:pid:6386:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(41985.1), cmd(0xc018937b) [ 394.479715][ T6386] autofs4:pid:6386:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937b) [ 394.503298][ T5086] usb 1-1: config 0 descriptor?? [ 394.561090][ T5086] yurex 1-1:0.0: Could not find endpoints 13:24:40 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_MIDI_INFO(r0, 0xc0189436, &(0x7f0000000100)={"c00d9aee22208454e5f7757a739f461ec2b5fe3531154ed35d59f0fcea41"}) [ 394.693381][ T778] usb 4-1: new high-speed USB device number 26 using dummy_hcd 13:24:40 executing program 2: bpf$BPF_LINK_CREATE(0x21, &(0x7f0000001700)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, @void}, 0x10) [ 394.790459][ T5100] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 394.830517][ T5093] usb 1-1: USB disconnect, device number 15 [ 394.940496][ T778] usb 4-1: device descriptor read/64, error -71 [ 395.040289][ T5100] usb 5-1: device descriptor read/64, error -71 13:24:40 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18}, './file0\x00'}) 13:24:40 executing program 2: socket(0x2, 0xa, 0x2) [ 395.241565][ T49] Bluetooth: hci1: command 0x0406 tx timeout [ 395.247932][ T49] Bluetooth: hci0: command 0x0406 tx timeout [ 395.256994][ T5033] Bluetooth: hci2: command 0x0406 tx timeout [ 395.264970][ T778] usb 4-1: new high-speed USB device number 27 using dummy_hcd 13:24:40 executing program 1: openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) syz_io_uring_setup(0x28dd, &(0x7f0000000400), &(0x7f0000000480), &(0x7f00000004c0)) [ 395.350455][ T5100] usb 5-1: new high-speed USB device number 18 using dummy_hcd 13:24:40 executing program 0: syz_io_uring_setup(0x1dcc, &(0x7f0000000340)={0x0, 0x0, 0x8}, 0x0, 0x0) [ 395.460745][ T778] usb 4-1: device descriptor read/64, error -71 [ 395.473769][ T6396] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 395.540855][ T5100] usb 5-1: device descriptor read/64, error -71 [ 395.596485][ T778] usb usb4-port1: attempt power cycle 13:24:41 executing program 2: write$hidraw(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:24:41 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000080)='GPL\x00', 0x1, 0x47, &(0x7f00000000c0)=""/71}, 0x90) [ 395.684767][ T5100] usb usb5-port1: attempt power cycle 13:24:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000dc0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000006c5e405c9987aa10ac"], 0x48}}, 0x0) 13:24:41 executing program 1: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r0, 0x80811501) [ 396.031101][ T778] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 396.151564][ T778] usb 4-1: device descriptor read/8, error -71 [ 396.160385][ T5100] usb 5-1: new high-speed USB device number 19 using dummy_hcd 13:24:41 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 396.270671][ T5100] usb 5-1: device descriptor read/8, error -71 [ 396.272638][ T5088] usb 3-1: new high-speed USB device number 18 using dummy_hcd 13:24:41 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000001500)=@gcm_128={{}, "2bf4d2e5efdf8a28", "241fbb25b9c0136100f7c984565a7475", "ef315ce6", "91e876db1a477a3d"}, 0x28) [ 396.460424][ T778] usb 4-1: new high-speed USB device number 29 using dummy_hcd 13:24:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) signalfd4(r1, &(0x7f0000000100), 0x8, 0x0) [ 396.570484][ T5100] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 396.578832][ T778] usb 4-1: device descriptor read/8, error -71 [ 396.625334][ T5088] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 396.670992][ T5100] usb 5-1: device descriptor read/8, error -71 13:24:42 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 396.718421][ T778] usb usb4-port1: unable to enumerate USB device [ 396.736274][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.751204][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 396.763706][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 396.809178][ T5100] usb usb5-port1: unable to enumerate USB device [ 396.901457][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 396.911118][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 396.921390][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:42 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8994, &(0x7f0000000040)) 13:24:42 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)) [ 397.043547][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.058115][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 397.070943][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.177752][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.187140][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 397.197490][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:42 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 397.316750][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.327775][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 397.338355][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000000)={0x0, 0x499f04f09a95a595, &(0x7f0000000040)={0x0, 0x3f}}, 0x0) [ 397.441725][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.451126][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 397.467429][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40086602, 0x0) 13:24:42 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="8fef"], 0x0) [ 397.608305][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.618198][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 397.628461][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 [ 397.751183][ T5088] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 397.760680][ T5088] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 397.776299][ T5088] usb 3-1: config 0 interface 0 has no altsetting 0 13:24:43 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200000000000000"], 0x0) syz_usb_disconnect(r0) 13:24:43 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) 13:24:43 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200802, 0x0) [ 397.976530][ T5088] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 397.986042][ T5088] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 397.994789][ T5088] usb 3-1: Product: syz [ 397.999189][ T5088] usb 3-1: Manufacturer: syz [ 398.004264][ T5088] usb 3-1: SerialNumber: syz [ 398.083434][ T5088] usb 3-1: config 0 descriptor?? [ 398.162344][ T5088] yurex 3-1:0.0: Could not find endpoints 13:24:43 executing program 1: syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000680), 0x4040, 0x0) ioctl$SNDCTL_TMR_METRONOME(r0, 0x40045407) [ 398.221666][ T777] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 398.331554][ T5090] usb 1-1: new high-speed USB device number 16 using dummy_hcd 13:24:43 executing program 3: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 398.417491][ T5088] usb 3-1: USB disconnect, device number 18 [ 398.464526][ T777] usb 5-1: device descriptor read/64, error -71 [ 398.621052][ T5090] usb 1-1: Using ep0 maxpacket: 8 13:24:44 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @remote}}) [ 398.711261][ T5090] usb 1-1: no configurations [ 398.716223][ T5090] usb 1-1: can't read configurations, error -22 [ 398.771361][ T777] usb 5-1: new high-speed USB device number 22 using dummy_hcd 13:24:44 executing program 3: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002100), 0x8) [ 398.950807][ T5090] usb 1-1: new high-speed USB device number 17 using dummy_hcd 13:24:44 executing program 2: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 398.996768][ T777] usb 5-1: device descriptor read/64, error -71 [ 399.134697][ T777] usb usb5-port1: attempt power cycle 13:24:44 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 399.214786][ T5090] usb 1-1: Using ep0 maxpacket: 8 13:24:44 executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, 0x0) [ 399.262429][ T5090] usb 1-1: no configurations [ 399.267369][ T5090] usb 1-1: can't read configurations, error -22 [ 399.310425][ T5090] usb usb1-port1: attempt power cycle 13:24:44 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000a00)='oom_score_adj\x00') read$eventfd(r0, &(0x7f0000000200), 0x8) 13:24:45 executing program 3: ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 399.612151][ T777] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 399.721040][ T777] usb 5-1: device descriptor read/8, error -71 [ 399.740314][ T5086] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 399.771294][ T5090] usb 1-1: new high-speed USB device number 18 using dummy_hcd 13:24:45 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) 13:24:45 executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) [ 399.923999][ T5090] usb 1-1: Using ep0 maxpacket: 8 [ 400.012694][ T777] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 400.028770][ T5090] usb 1-1: no configurations [ 400.033822][ T5090] usb 1-1: can't read configurations, error -22 [ 400.066342][ T5086] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 400.163455][ T777] usb 5-1: device descriptor read/8, error -71 [ 400.175065][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.184842][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 400.194985][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000200)={'ip_vti0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @private}}}}) [ 400.230753][ T5090] usb 1-1: new high-speed USB device number 19 using dummy_hcd 13:24:45 executing program 3: socket$inet6_tcp(0x2f, 0x1, 0x0) [ 400.291601][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.300993][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 400.311357][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.355906][ T777] usb usb5-port1: unable to enumerate USB device [ 400.361264][ T4398] Bluetooth: hci4: command 0x0406 tx timeout [ 400.383581][ T5090] usb 1-1: Using ep0 maxpacket: 8 [ 400.442719][ T5090] usb 1-1: no configurations [ 400.447721][ T5090] usb 1-1: can't read configurations, error -22 [ 400.460961][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.470458][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 400.480596][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.515892][ T5090] usb usb1-port1: unable to enumerate USB device 13:24:45 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) 13:24:46 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, &(0x7f0000000380)='syzkaller\x00'}, 0x90) [ 400.606825][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.616285][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 400.627183][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.762581][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.772017][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 400.782239][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 400.911291][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 400.920588][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 400.930727][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:46 executing program 4: bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{}, 0x0, 0x0}, 0xfdd6) 13:24:46 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="8fef"], 0x0) 13:24:46 executing program 3: syz_io_uring_setup(0x10aa, &(0x7f0000001e00)={0x0, 0x0, 0x1000}, &(0x7f0000001e80), &(0x7f0000001ec0)) 13:24:46 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 401.093467][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.102930][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 401.113316][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.230983][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.240315][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 401.256062][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.455537][ T5086] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 401.465178][ T5086] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 401.473955][ T5086] usb 2-1: Product: syz [ 401.478349][ T5086] usb 2-1: Manufacturer: syz [ 401.484913][ T5086] usb 2-1: SerialNumber: syz 13:24:46 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200000000000000"], 0x0) syz_usb_disconnect(r0) 13:24:46 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 401.578713][ T5086] usb 2-1: config 0 descriptor?? [ 401.612122][ T5100] usb 3-1: new high-speed USB device number 19 using dummy_hcd 13:24:47 executing program 3: syz_open_procfs(0x0, &(0x7f0000000180)='net/netlink\x00') [ 401.688365][ T5086] yurex 2-1:0.0: Could not find endpoints [ 401.850427][ T5100] usb 3-1: device descriptor read/64, error -71 [ 401.851585][ T5086] usb 2-1: USB disconnect, device number 26 13:24:47 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @multicast1, @loopback}}}}) 13:24:47 executing program 3: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 402.141130][ T5100] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 402.181251][ T778] usb 1-1: new high-speed USB device number 20 using dummy_hcd 13:24:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0) [ 402.355352][ T5100] usb 3-1: device descriptor read/64, error -71 [ 402.440674][ T778] usb 1-1: Using ep0 maxpacket: 8 13:24:47 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x45850000}) [ 402.495548][ T778] usb 1-1: no configurations [ 402.500633][ T778] usb 1-1: can't read configurations, error -22 [ 402.516004][ T5100] usb usb3-port1: attempt power cycle 13:24:47 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f0000000000), 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:24:48 executing program 4: openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(0xffffffffffffffff, 0xc0445624, &(0x7f00000000c0)={0x80000001, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 402.696494][ T778] usb 1-1: new high-speed USB device number 21 using dummy_hcd 13:24:48 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x8, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @loopback}}}}) [ 402.960277][ T5100] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 402.970846][ T778] usb 1-1: Using ep0 maxpacket: 8 [ 403.012957][ T778] usb 1-1: no configurations [ 403.017898][ T778] usb 1-1: can't read configurations, error -22 [ 403.077824][ T778] usb usb1-port1: attempt power cycle [ 403.095570][ T5100] usb 3-1: device descriptor read/8, error -71 13:24:48 executing program 4: r0 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=[@rights={{0x10}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x30}}], 0x1, 0x0) [ 403.160745][ T5093] usb 4-1: new high-speed USB device number 30 using dummy_hcd 13:24:48 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) 13:24:48 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000180)={@dev, @ipv4={'\x00', '\xff\xff', @loopback}, @private0, 0xfff}) [ 403.381063][ T5100] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 403.433243][ T1215] ieee802154 phy0 wpan0: encryption failed: -22 [ 403.439894][ T1215] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.491484][ T5100] usb 3-1: device descriptor read/8, error -71 [ 403.505037][ T5093] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 403.530834][ T778] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 403.621336][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 403.630679][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 403.640947][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 403.666097][ T778] usb 1-1: Using ep0 maxpacket: 8 [ 403.691399][ T5100] usb usb3-port1: unable to enumerate USB device 13:24:49 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000780)={@private1, @remote, @loopback}) [ 403.739840][ T778] usb 1-1: no configurations [ 403.744866][ T778] usb 1-1: can't read configurations, error -22 13:24:49 executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) [ 403.791893][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 403.801289][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 403.813797][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 403.946457][ T778] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 403.980927][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 13:24:49 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000010000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc16, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) [ 403.990224][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 404.000406][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.090642][ T778] usb 1-1: Using ep0 maxpacket: 8 [ 404.114871][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.124271][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 404.134787][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.152300][ T778] usb 1-1: no configurations [ 404.157129][ T778] usb 1-1: can't read configurations, error -22 13:24:49 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5421, 0x0) [ 404.200406][ T778] usb usb1-port1: unable to enumerate USB device [ 404.271000][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.280402][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 404.290631][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 13:24:49 executing program 2: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, 0x0) [ 404.404526][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.413995][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 404.426523][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 13:24:50 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="8fef"], 0x0) [ 404.580856][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.590165][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 404.600323][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.692268][ T5093] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 404.701739][ T5093] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 404.711951][ T5093] usb 4-1: config 0 interface 0 has no altsetting 0 [ 404.728738][ T778] usb 5-1: new high-speed USB device number 25 using dummy_hcd 13:24:50 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') preadv(r0, &(0x7f00000016c0)=[{&(0x7f0000000280)=""/236, 0xec}], 0x1, 0x0, 0x0) [ 404.914151][ T5093] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 404.923727][ T5093] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 404.934854][ T5093] usb 4-1: Product: syz [ 404.939254][ T5093] usb 4-1: Manufacturer: syz [ 404.945010][ T5093] usb 4-1: SerialNumber: syz 13:24:50 executing program 0: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 404.992399][ T5093] usb 4-1: config 0 descriptor?? [ 405.007852][ T778] usb 5-1: Using ep0 maxpacket: 8 [ 405.046854][ T5093] yurex 4-1:0.0: Could not find endpoints [ 405.141368][ T778] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 13:24:50 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009000008250200000000000000"], 0x0) syz_usb_disconnect(r0) [ 405.244669][ T5090] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 405.256769][ T5093] usb 4-1: USB disconnect, device number 30 [ 405.330852][ T778] usb 5-1: New USB device found, idVendor=0c16, idProduct=0002, bcdDevice= 0.40 [ 405.342850][ T778] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.352020][ T778] usb 5-1: Product: syz [ 405.356430][ T778] usb 5-1: Manufacturer: syz [ 405.361525][ T778] usb 5-1: SerialNumber: syz [ 405.465391][ T778] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 405.490694][ T5090] usb 2-1: device descriptor read/64, error -71 13:24:50 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000006b40)={0x0, 0x2, &(0x7f0000006980)=@raw=[@map_idx], &(0x7f00000069c0)='GPL\x00'}, 0x90) [ 405.672312][ T5093] usb 5-1: USB disconnect, device number 25 [ 405.771721][ T5090] usb 2-1: new high-speed USB device number 28 using dummy_hcd 13:24:51 executing program 3: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 405.931506][ T5100] usb 3-1: new high-speed USB device number 23 using dummy_hcd 13:24:51 executing program 0: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbeb", 0x35) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 405.985612][ T5090] usb 2-1: device descriptor read/64, error -71 [ 406.127438][ T5090] usb usb2-port1: attempt power cycle [ 406.182351][ T5100] usb 3-1: Using ep0 maxpacket: 8 13:24:51 executing program 3: syz_clone3(&(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, {0x8c}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 406.233343][ T5100] usb 3-1: no configurations [ 406.238194][ T5100] usb 3-1: can't read configurations, error -22 13:24:51 executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f00000000c0)={0x0, 0x0, "fd97e3b391f83e0fda8e120ad4591c8b3230c61fd1f7ede5938831ebbc33b2f3"}) [ 406.450456][ T5100] usb 3-1: new high-speed USB device number 24 using dummy_hcd 13:24:51 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x1e, &(0x7f0000000180)=[@mss, @timestamp, @window, @sack_perm], 0x4) [ 406.493770][ T5093] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 406.580278][ T5090] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 406.690557][ T5090] usb 2-1: device descriptor read/8, error -71 13:24:52 executing program 4: r0 = socket(0x1e, 0x4, 0x0) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}, @rand_addr=' \x01\x00'}) [ 406.740855][ T5100] usb 3-1: Using ep0 maxpacket: 8 13:24:52 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') [ 406.782503][ T5100] usb 3-1: no configurations [ 406.787422][ T5100] usb 3-1: can't read configurations, error -22 [ 406.806772][ T5093] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 406.831925][ T5100] usb usb3-port1: attempt power cycle [ 406.901288][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 406.910712][ T5093] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 406.920909][ T5093] usb 1-1: config 0 interface 0 has no altsetting 0 [ 407.010284][ T5090] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 407.071400][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.084908][ T5093] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 407.096089][ T5093] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:52 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x15, &(0x7f0000000180)=[@mss, @timestamp, @window, @sack_perm], 0x4) [ 407.117600][ T5090] usb 2-1: device descriptor read/8, error -71 13:24:52 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private0, @empty}}) [ 407.224900][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.234347][ T5093] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 407.244562][ T5093] usb 1-1: config 0 interface 0 has no altsetting 0 [ 407.266084][ T5090] usb usb2-port1: unable to enumerate USB device [ 407.330191][ T5100] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 407.385784][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.397587][ T5093] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 407.408838][ T5093] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:52 executing program 4: syz_open_dev$usbmon(&(0x7f00000021c0), 0x0, 0x0) [ 407.470623][ T5100] usb 3-1: Using ep0 maxpacket: 8 13:24:52 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) [ 407.538829][ T5100] usb 3-1: no configurations [ 407.543909][ T5100] usb 3-1: can't read configurations, error -22 [ 407.557473][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.566924][ T5093] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 407.577562][ T5093] usb 1-1: config 0 interface 0 has no altsetting 0 [ 407.680902][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.690222][ T5093] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 407.702797][ T5093] usb 1-1: config 0 interface 0 has no altsetting 0 [ 407.780453][ T5100] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 407.804682][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.814170][ T5093] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 13:24:53 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000100)=0x1e) [ 407.824370][ T5093] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:53 executing program 4: r0 = socket(0x1e, 0x4, 0x0) setsockopt$MRT_PIM(r0, 0x0, 0xcf, 0x0, 0x0) [ 407.940872][ T5100] usb 3-1: Using ep0 maxpacket: 8 [ 407.951205][ T5093] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.961012][ T5093] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 407.971178][ T5093] usb 1-1: config 0 interface 0 has no altsetting 0 [ 408.014266][ T5100] usb 3-1: no configurations [ 408.019200][ T5100] usb 3-1: can't read configurations, error -22 13:24:53 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000800)='./file0/file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 408.055052][ T5100] usb usb3-port1: unable to enumerate USB device 13:24:53 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109", @ANYBLOB="8fef"], 0x0) [ 408.190890][ T5093] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 408.200559][ T5093] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 408.211601][ T5093] usb 1-1: Product: syz [ 408.215991][ T5093] usb 1-1: Manufacturer: syz [ 408.221767][ T5093] usb 1-1: SerialNumber: syz [ 408.275413][ T5093] usb 1-1: config 0 descriptor?? 13:24:53 executing program 4: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='attr/keycreate\x00') [ 408.376917][ T5093] yurex 1-1:0.0: Could not find endpoints 13:24:53 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x15, 0x0, 0x0) 13:24:54 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 408.667872][ T5093] usb 1-1: USB disconnect, device number 24 13:24:54 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f9"], 0x0) syz_usb_disconnect(r0) [ 408.844681][ T5090] usb 4-1: new high-speed USB device number 31 using dummy_hcd 13:24:54 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0x1d, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x90) 13:24:54 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000040)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback}}}}) [ 409.100406][ T5090] usb 4-1: Using ep0 maxpacket: 16 13:24:54 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, "30f2936e"}, &(0x7f00000000c0)=0x28) [ 409.315204][ T5090] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 409.323359][ T5090] usb 4-1: can't read configurations, error -61 13:24:54 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbeb", 0x35) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 409.471665][ T777] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 409.521235][ T5090] usb 4-1: new high-speed USB device number 32 using dummy_hcd 13:24:54 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x20, 0x0, 0x7}, 0x48) 13:24:55 executing program 0: memfd_create(&(0x7f0000000040)=']!\x00', 0x4) [ 409.780213][ T777] usb 5-1: Using ep0 maxpacket: 8 [ 409.823032][ T5090] usb 4-1: Using ep0 maxpacket: 16 [ 409.901179][ T777] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.911854][ T777] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 409.921287][ T777] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 409.930672][ T777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:24:55 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'tunl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102}}}}) [ 410.010530][ T5086] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 410.032397][ T5090] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 410.040559][ T5090] usb 4-1: can't read configurations, error -61 [ 410.058053][ T5090] usb usb4-port1: attempt power cycle 13:24:55 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, 0x0, 0x0) [ 410.311328][ T777] usb 5-1: USB disconnect, device number 26 [ 410.331736][ T5086] usb 2-1: too many configurations: 9, using maximum allowed: 8 13:24:55 executing program 2: r0 = socket(0x2, 0x3, 0x3) sendmmsg$unix(r0, &(0x7f0000008100)=[{{&(0x7f0000000040)=@abs, 0x6e, 0x0}}], 0x1, 0x0) recvmsg$inet_nvme(r0, &(0x7f0000001a40)={&(0x7f0000000540)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, 0x0}, 0x2) [ 410.457108][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.472843][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.485001][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.521188][ T5090] usb 4-1: new high-speed USB device number 33 using dummy_hcd 13:24:56 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') write$eventfd(r0, 0x0, 0x0) [ 410.643968][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.653396][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.663872][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.685016][ T5090] usb 4-1: Using ep0 maxpacket: 16 13:24:56 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x49, &(0x7f0000000000), 0x8) [ 410.765050][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.780183][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.792239][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:56 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 410.930826][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 410.940318][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 410.950539][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 410.958050][ T5090] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 410.966338][ T5090] usb 4-1: can't read configurations, error -61 [ 411.061576][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.070996][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 411.086594][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:56 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f9"], 0x0) syz_usb_disconnect(r0) [ 411.160453][ T5090] usb 4-1: new high-speed USB device number 34 using dummy_hcd 13:24:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14, r1, 0x1}, 0x14}}, 0x0) [ 411.202420][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.211839][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 411.222074][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 [ 411.271712][ T5090] usb 4-1: Using ep0 maxpacket: 16 [ 411.376985][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.392229][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 411.404153][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:56 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x19, &(0x7f0000000000)={0x0, 0x2, 0x0, 0x0, 0x0, [@private0]}, 0x18) [ 411.530977][ T5086] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.540395][ T5086] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 411.550649][ T5086] usb 2-1: config 0 interface 0 has no altsetting 0 13:24:56 executing program 3: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/xfrm_stat\x00') [ 411.641102][ T5090] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 411.649128][ T5090] usb 4-1: can't read configurations, error -71 [ 411.685674][ T5090] usb usb4-port1: unable to enumerate USB device [ 411.740658][ T5088] usb 5-1: new high-speed USB device number 27 using dummy_hcd 13:24:57 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109", @ANYBLOB="8fef"], 0x0) [ 411.781547][ T5086] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 411.796843][ T5086] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 411.807262][ T5086] usb 2-1: Product: syz [ 411.812363][ T5086] usb 2-1: Manufacturer: syz [ 411.817200][ T5086] usb 2-1: SerialNumber: syz 13:24:57 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, @private2}}) [ 411.863038][ T5086] usb 2-1: config 0 descriptor?? [ 411.988381][ T5086] yurex 2-1:0.0: Could not find endpoints 13:24:57 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', 0x0) [ 412.060370][ T5088] usb 5-1: Using ep0 maxpacket: 8 [ 412.131281][ T5086] usb 2-1: USB disconnect, device number 31 [ 412.195514][ T5088] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 412.211668][ T5088] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 412.222808][ T5088] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 412.232264][ T5088] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:24:57 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) eventfd(0x0) [ 412.322307][ T5093] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 412.620166][ T5093] usb 3-1: Using ep0 maxpacket: 16 [ 412.678504][ T777] usb 5-1: USB disconnect, device number 27 13:24:58 executing program 3: syz_io_uring_setup(0x76b9, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0x0, 0x0) 13:24:58 executing program 1: syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={{}, 0x2c, {}, 0x2c, {}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[], [{@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}}, 0x0, 0x0, 0x0) [ 412.811286][ T5093] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 412.821673][ T5093] usb 3-1: can't read configurations, error -61 13:24:58 executing program 0: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbeb", 0x35) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 413.021899][ T6601] fuse: Bad value for 'fd' [ 413.035112][ T5093] usb 3-1: new high-speed USB device number 28 using dummy_hcd 13:24:58 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/udplite\x00') 13:24:58 executing program 3: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) syz_clone3(&(0x7f0000000340)={0x20000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r1], 0x1}, 0x58) [ 413.315046][ T5093] usb 3-1: Using ep0 maxpacket: 16 [ 413.433917][ T777] usb 1-1: new high-speed USB device number 25 using dummy_hcd 13:24:58 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="6b797a74036c31000000000000000000", @ANYRES32]}) 13:24:58 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f9"], 0x0) syz_usb_disconnect(r0) [ 413.511365][ T5093] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 413.519334][ T5093] usb 3-1: can't read configurations, error -61 [ 413.584616][ T5093] usb usb3-port1: attempt power cycle [ 413.771656][ T777] usb 1-1: too many configurations: 9, using maximum allowed: 8 13:24:59 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001200)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0xebffffff, 0x0) [ 413.881373][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 413.890831][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 413.901030][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.021110][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.030498][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 414.040653][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.060909][ T5093] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 414.155296][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.164954][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 414.169416][ T5093] usb 3-1: Using ep0 maxpacket: 16 [ 414.175489][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.181159][ T24] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 414.321038][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.330629][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 414.341902][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:59 executing program 3: r0 = getegid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000000, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESHEX=0x0, @ANYRES64, @ANYRES16, @ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES16=r0, @ANYBLOB="3db61aa5d12fe8a8de75b2dfb24b41097a29906f745333b404f6ef8446791378e76e90e409d38a91b8328dea91dfdf3d93dda60d57668e32ebf632ee7d245b8178ac09c58875cfdfc787ed374675503367cf61072b89da19e39d0085644f20e85997008476a312fc5ed63bfedafd28219cd7090f6d0974a606d91c25af253307cc88e511b586624a21fec14426aa87bf3446ff3703830700992dc92065521284bc14fdf1"], 0x1, 0x512, &(0x7f0000000cc0)="$eJzs3VFrLGcZAOB3JtmcnHNSd6sitWBbbOWcomc3aWwbREoF0auCWu9jTDYhZJMN2U09CUXTXyCIqOCVV94I/gBB+hNEKOi9YFVET/WiN3Zkd2fbJJ1NVk+SSZPngcl833wz877fhJ2d2RlmAri2noqIlyNiIiKejYhqPj3Nh8Ve5WAw3zsPXl/uDUlk2av/SCLJpw3X1atPRsTtwSIxHRHf+nrEd5MPx+3s7W8stVrNnbze6G5uNzp7+/fWN5fWmmvNrfn5uRcWXlx4fmE2yz1UP2sR8dJX3/7JD3/5tZd++4Xv/Wnxb3e/30vry58a5B0Ryw8VYITBuiv9bTHU20Y75xGsBBN5fyplJwIAwFh6x/gfj4jP9o//qzHRP5oDAAAArpL3r6plJzqtHQAAALjE0oiYiSSt5/cCzESa1uuDe3g/GbfSVrvT/fxqe3drpdcWUYtKurreas7m9wrXopL06nP5PbbD+nPH6vMR8WhE/Lh6s1+vL7dbK+X+9AEAAADXxu0nj57//7ua9ssAAADAFVMbWQEAAACuCqf8AAAAcPWNff7/l+r5JgIAAACch2+88kpvyIbv8V55bW93o/3avZVmZ6O+ubtcX27vbNfX2u21/jP7Nk9bX6vd3v5ibO3eb3SbnW6js7e/uNne3eourh95BXb+5nEAAADgIjz65Jt/TCLi4Es3+0PkzwE85KCczIBL5c9lJwCcpYmyEwBKM1l2AkBpKofKxccC9hBw1SWntE+PavjdsfrNs8kHAAA4e3c+/eHr/1N5W6XUzIDzlpadAABw4Vzdg+ur4g5AuPY+NhjdGNU+9vX/kbLsf04KAAA4UzP9IUnr+bXAmUjTej3ikf5rASrJ6nqrOZufH/yhWrnRq8/1l0xOvWcYAAAAAAAAAAAAAAAAAAAAAAAAABjIsiQyAAAA4EqLSP+a9J/mH3Gn+szM8HeBd/P2qeTdarydT/z5qz+9v9Tt7sxFTCX/rPYmTUVE92f59OcyrwQAAACAS2Bwnp6P58rOBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICr5p0Hry8Ph4uM+/evREStKP5kTPfH01GJiFv/SmLy0HJJREycQfyDNyLisaL4SbyXZVktz6Io/s1zjl/rb5ri+GlE3D6D+HCdvdnb/7xc9PlL46n+uPjzN5kPD2v0/i99f/83MWL/88iYMR5/69eNo1OmPoj/RsTjk8X7n2H8ZET8p8eM/51v7++Past+EXGn8PsnORKr0d3cbnT29u+tby6tNdeaW/Pzcy8svLjw/MJsY3W91cz/Fsb40Wd+896o+L3+3xoRv3ZK/58Zs///eev+g08MipWi+HefLv7+fWwQP/vBsfhp/t33ubzcy+XOsHwwKB/2xK9+/8RJ/V8Z0f/T/v93x+z/s9+cGnNOAOAidPb2N5ZarebOCYXpMeZR+CgUIuLgEqRRUOgf5EZE4TyTMeZ6ihf//wtZ2ZuluHAj//Cea6wy90oAAMB5+OCgv+xMAAAAAAAAAAAAAAAAAAAA4Pq6iCeWHY95UE5XAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9N8AAAD//zGO3eQ=") creat(&(0x7f0000006600)='./file1\x00', 0x0) [ 414.374561][ T5093] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 414.382696][ T5093] usb 3-1: can't read configurations, error -61 [ 414.461464][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.471204][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 414.480445][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 414.481360][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 13:24:59 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8991, &(0x7f0000000040)) [ 414.590824][ T5093] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 414.615703][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.623734][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 414.625257][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 414.635145][ T24] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 414.635349][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 414.635501][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.645370][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.770432][ T5093] usb 3-1: Using ep0 maxpacket: 16 [ 414.776432][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.785986][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 414.796083][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.851004][ T6619] loop3: detected capacity change from 0 to 512 [ 414.922570][ T6619] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 414.936283][ T6619] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 414.945132][ T777] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 414.955368][ T777] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 414.960270][ T5093] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 414.971013][ T777] usb 1-1: config 0 interface 0 has no altsetting 0 [ 414.976650][ T5093] usb 3-1: can't read configurations, error -61 13:25:00 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x3, &(0x7f0000000000), 0x8) [ 415.042747][ T5086] usb 2-1: USB disconnect, device number 32 [ 415.049625][ T5093] usb usb3-port1: unable to enumerate USB device 13:25:00 executing program 2: r0 = socket(0x2, 0x3, 0x3) bind$xdp(r0, 0x0, 0x0) [ 415.238274][ T777] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 415.247944][ T777] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 415.256759][ T777] usb 1-1: Product: syz [ 415.261318][ T777] usb 1-1: Manufacturer: syz [ 415.273076][ T777] usb 1-1: SerialNumber: syz [ 415.329134][ T777] usb 1-1: config 0 descriptor?? 13:25:00 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109", @ANYBLOB="8fef"], 0x0) [ 415.403068][ T777] yurex 1-1:0.0: Could not find endpoints 13:25:00 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', &(0x7f0000000000)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}) [ 415.601295][ T777] usb 1-1: USB disconnect, device number 25 13:25:01 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_delneigh={0x1c, 0x1d, 0x1}, 0x1c}}, 0x0) 13:25:01 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4008ae6a, 0x0) 13:25:01 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a090400"], 0x0) syz_usb_disconnect(r0) [ 416.050806][ T5086] usb 4-1: new high-speed USB device number 35 using dummy_hcd 13:25:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000004c0)={0x14, r1, 0x11f}, 0x14}}, 0x0) [ 416.239221][ T6633] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. 13:25:01 executing program 0: openat$vhost_vsock(0xffffffffffffff9c, 0xffffffffffffffff, 0x2, 0x0) [ 416.349344][ T5086] usb 4-1: Using ep0 maxpacket: 16 [ 416.522281][ T5086] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 416.530285][ T5086] usb 4-1: can't read configurations, error -61 13:25:01 executing program 2: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e", 0x4f) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:25:02 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r0) [ 416.691214][ T5093] usb 5-1: new high-speed USB device number 28 using dummy_hcd 13:25:02 executing program 0: bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0xfffffbff}, 0x8) [ 416.740432][ T5086] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 416.980805][ T5093] usb 5-1: Using ep0 maxpacket: 8 [ 417.025240][ T5086] usb 4-1: Using ep0 maxpacket: 16 [ 417.100865][ T5093] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 417.111397][ T5093] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 417.123080][ T5093] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 417.133299][ T5093] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.167357][ T777] usb 3-1: new high-speed USB device number 31 using dummy_hcd 13:25:02 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x42, &(0x7f0000000000), 0x8) [ 417.230835][ T5093] hub 5-1:1.0: bad descriptor, ignoring hub [ 417.234769][ T5086] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 417.236911][ T5093] hub 5-1:1.0: probe with driver hub failed with error -5 [ 417.244646][ T5086] usb 4-1: can't read configurations, error -61 [ 417.317215][ T5086] usb usb4-port1: attempt power cycle 13:25:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x1c, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) [ 417.591742][ T777] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 417.599722][ T5100] usb 5-1: USB disconnect, device number 28 13:25:03 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x69}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000340)='kfree\x00', r2}, 0x10) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) close(r0) [ 417.671134][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.680440][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.690707][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:03 executing program 1: clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ppoll(&(0x7f0000000040)=[{}], 0x1, &(0x7f00000000c0)={0x0, r0+10000000}, 0x0, 0x0) [ 417.801406][ T5086] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 417.810419][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 417.819679][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 417.830031][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 417.940893][ T5086] usb 4-1: Using ep0 maxpacket: 16 [ 417.991418][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.001084][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 418.011235][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 418.101010][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.110428][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 418.122465][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 418.130878][ T5086] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 418.144995][ T5086] usb 4-1: can't read configurations, error -61 13:25:03 executing program 0: syz_clone3(&(0x7f00000003c0)={0x140008000, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, &(0x7f0000000380)=[0x0], 0x1}, 0x58) [ 418.252582][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.262233][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 418.272962][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:03 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, @loopback, 0x0, 0x0, 0x306}) [ 418.329865][ T5086] usb 4-1: new high-speed USB device number 38 using dummy_hcd 13:25:03 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f9"], 0x0) syz_usb_disconnect(r0) [ 418.432527][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.442589][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 418.458265][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 418.502523][ T5086] usb 4-1: Using ep0 maxpacket: 16 13:25:03 executing program 0: syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000004c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1e7d, 0x2c24, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x81, 0xa8, 0x8, [{{0x9, 0x4, 0x0, 0x15, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x3ff, 0x1, 0x1, {0x22, 0x40f}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x40, 0x8, 0xfd}}, [{{0x9, 0x5, 0x2, 0x3, 0x5df, 0x5, 0x3, 0x3}}]}}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x1f, 0x7f, 0x0, 0x0, 0x1f}, 0xb9, &(0x7f0000000540)={0x5, 0xf, 0xb9, 0x5, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "da7197876d8986ba040ed59dc8732f5d"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x21, 0xaa, 0x4, 0xbb7e, 0xff}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "7be4a12023838df61dd42ab7d13fc107"}, @generic={0x71, 0x10, 0x1, "512f9ff7c4e0300354810c4adef621e1d2efffd0297f0b7ecdb1ff433ec02d2e102cf38c05261485f56f5f694f813cfc62ffeb516f42072f90bd5805b92dddd821f37a207f2e502661573614939de5b20f7ef1abd110c012d43669f358438d6490f6927873f9a1133b6cb78a7dfa"}, @ssp_cap={0x10, 0x10, 0xa, 0x6, 0x1, 0x1ff, 0x0, 0x7, [0xffc007]}]}, 0x4, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x4c0a}}, {0x3b, &(0x7f0000000680)=@string={0x3b, 0x3, "570fe8d3da7926f7a279588bf60d26f13e791e9d724ff059278a6c44055262224b5cb2f7e6ef94fd48b764a5c74bfd2d0b3a04dea330035ae6"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x401}}, {0x26, &(0x7f0000000700)=@string={0x26, 0x3, "a49bb635dc842905334eb7a9cbf809729c75958113d428f2ee59be6d2cb78d4a7203ce13"}}]}) [ 418.603198][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.612607][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 418.622978][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 418.750414][ T5086] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 418.764335][ T5086] usb 4-1: can't read configurations, error -71 13:25:04 executing program 3: bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x6) [ 418.814907][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 418.824781][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 418.834911][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 418.848254][ T5086] usb usb4-port1: unable to enumerate USB device 13:25:04 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="8fef"], 0x0) [ 419.021217][ T777] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 419.031154][ T777] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 419.039766][ T777] usb 3-1: Product: syz [ 419.044379][ T777] usb 3-1: Manufacturer: syz [ 419.049206][ T777] usb 3-1: SerialNumber: syz [ 419.102698][ T777] usb 3-1: config 0 descriptor?? [ 419.154951][ T777] yurex 3-1:0.0: Could not find endpoints [ 419.160723][ T5100] usb 1-1: new high-speed USB device number 26 using dummy_hcd 13:25:04 executing program 3: bpf$OBJ_GET_PROG(0x7, &(0x7f0000001700)=@generic={&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x18) [ 419.234996][ T24] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 419.384053][ T778] usb 3-1: USB disconnect, device number 31 [ 419.410858][ T5100] usb 1-1: Using ep0 maxpacket: 32 [ 419.531234][ T5093] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 419.550652][ T24] usb 2-1: Using ep0 maxpacket: 8 13:25:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f00000004c0)={0x18, r1, 0x11f, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4}]}, 0x18}}, 0x0) [ 419.621872][ T5100] usb 1-1: config 1 interface 0 altsetting 21 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 419.634594][ T5100] usb 1-1: config 1 interface 0 altsetting 21 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 419.648076][ T5100] usb 1-1: config 1 interface 0 has no altsetting 0 [ 419.701105][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 419.711750][ T24] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 419.721322][ T24] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 419.730739][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 419.860973][ T5093] usb 5-1: Using ep0 maxpacket: 16 [ 419.866932][ T5100] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c24, bcdDevice= 0.40 [ 419.876506][ T5100] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.888090][ T5100] usb 1-1: Product: Ё [ 419.893258][ T5100] usb 1-1: Manufacturer: བྷ폨秚禢識෶社鴞佲姰訧䑬刅≢屋ﶔ띈ꕤ䯇ⷽ㨋ィ娃 13:25:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40049409, 0x0) [ 419.905353][ T5100] usb 1-1: SerialNumber: 鮤㖶蓜ԩ丳ꦷ爉疜膕퐓姮涾뜬䪍ͲᏎ 13:25:05 executing program 2: r0 = fsopen(&(0x7f0000000000)='configfs\x00', 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0}) ppoll(&(0x7f0000000040)=[{r0, 0xa188}], 0x1, &(0x7f00000000c0)={r1}, &(0x7f0000000100), 0x8) [ 420.020855][ T5093] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 420.022517][ T6663] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 420.029232][ T5093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.047756][ T5093] usb 5-1: config 0 has no interface number 0 [ 420.054208][ T5093] usb 5-1: config 0 interface 143 has no altsetting 0 [ 420.065232][ T777] usb 2-1: USB disconnect, device number 33 [ 420.235570][ T5093] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 420.245099][ T5093] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 420.253723][ T5093] usb 5-1: Product: syz [ 420.258128][ T5093] usb 5-1: SerialNumber: syz [ 420.286668][ T5093] usb 5-1: config 0 descriptor?? 13:25:05 executing program 3: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e", 0x4f) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 420.491172][ T5100] usbhid 1-1:1.0: can't add hid device: -71 [ 420.501703][ T5100] usbhid 1-1:1.0: probe with driver usbhid failed with error -71 13:25:05 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @remote}}}}) [ 420.561157][ T5093] usb 5-1: USB disconnect, device number 29 [ 420.592741][ T5100] usb 1-1: USB disconnect, device number 26 13:25:06 executing program 1: syz_clone3(&(0x7f0000000640)={0x2160000, 0x0, 0x0, &(0x7f0000000480), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 13:25:06 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f9"], 0x0) syz_usb_disconnect(r0) [ 421.000435][ T5086] usb 4-1: new high-speed USB device number 39 using dummy_hcd 13:25:06 executing program 2: bpf$MAP_CREATE_RINGBUF(0x12, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) 13:25:06 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1) [ 421.400643][ T5086] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 421.511455][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.526413][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 421.538296][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 13:25:06 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="8fef"], 0x0) 13:25:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4030ae7b, &(0x7f0000000000)) [ 421.682299][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.691739][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 421.696441][ T5100] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 421.701815][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 421.840586][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 421.849872][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 421.860199][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 13:25:07 executing program 4: futex_waitv(&(0x7f0000000e40)=[{0x0, 0x0, 0x184}], 0x1, 0x0, 0x0, 0x0) [ 422.005331][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.014914][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 422.021178][ T5100] usb 1-1: Using ep0 maxpacket: 8 [ 422.025253][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.141953][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.151517][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 422.161810][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.210463][ T5100] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 422.221320][ T5100] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 422.230746][ T5100] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 422.242447][ T5100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 422.243702][ T777] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 422.285674][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.295445][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 422.305764][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 13:25:07 executing program 4: r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002980)={0x2020}, 0x2020) [ 422.431309][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.446125][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 422.457929][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 13:25:08 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfa}]}]}, @NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x4}]}]}]}]}, 0x50}}, 0x0) [ 422.590459][ T777] usb 3-1: Using ep0 maxpacket: 16 [ 422.600833][ T5090] usb 1-1: USB disconnect, device number 27 [ 422.608563][ T5086] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 422.618582][ T5086] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 422.628729][ T5086] usb 4-1: config 0 interface 0 has no altsetting 0 [ 422.741027][ T777] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 422.755084][ T777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.767680][ T777] usb 3-1: config 0 has no interface number 0 [ 422.774118][ T777] usb 3-1: config 0 interface 143 has no altsetting 0 [ 422.871327][ T5086] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 422.881329][ T5086] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 422.890177][ T5086] usb 4-1: Product: syz [ 422.894583][ T5086] usb 4-1: Manufacturer: syz [ 422.899408][ T5086] usb 4-1: SerialNumber: syz [ 422.958275][ T5086] usb 4-1: config 0 descriptor?? [ 422.983144][ T777] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 422.992663][ T777] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 423.001353][ T777] usb 3-1: Product: syz [ 423.005745][ T777] usb 3-1: SerialNumber: syz [ 423.033669][ T5086] yurex 4-1:0.0: Could not find endpoints 13:25:08 executing program 4: modify_ldt$write2(0x11, &(0x7f0000000040)={0xffffffff}, 0x10) [ 423.085803][ T777] usb 3-1: config 0 descriptor?? 13:25:08 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 423.269772][ T777] usb 4-1: USB disconnect, device number 39 [ 423.420839][ T5086] usb 3-1: USB disconnect, device number 32 13:25:08 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x31, &(0x7f0000000000), 0x8) 13:25:08 executing program 4: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f9"], 0x0) syz_usb_disconnect(r0) 13:25:09 executing program 1: bpf$MAP_UPDATE_CONST_STR(0x21, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20) 13:25:09 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000040)={0x1d, r2}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000040)={0x1d, r5}, 0x10) bind$can_raw(r3, &(0x7f0000000440), 0x10) 13:25:09 executing program 2: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e", 0x4f) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:25:09 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904", @ANYBLOB="8fef"], 0x0) 13:25:09 executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@generic]}, &(0x7f0000000080)='GPL\x00'}, 0x90) [ 424.325769][ T5100] usb 5-1: new high-speed USB device number 30 using dummy_hcd 13:25:09 executing program 3: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0) [ 424.604778][ T5100] usb 5-1: Using ep0 maxpacket: 8 13:25:10 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @local, @private0}}) [ 424.730316][ T5093] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 424.748491][ T5100] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 424.759308][ T5100] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 424.768677][ T5100] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 424.778250][ T5100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.791670][ T5086] usb 1-1: new high-speed USB device number 28 using dummy_hcd 13:25:10 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r0}, 0x10) r1 = userfaultfd(0x801) fstat(r1, &(0x7f0000000040)) 13:25:10 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x401c5820, &(0x7f0000000040)) [ 425.052888][ T5093] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 425.072530][ T5086] usb 1-1: Using ep0 maxpacket: 16 [ 425.085025][ T777] usb 5-1: USB disconnect, device number 30 [ 425.197248][ T5093] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.209246][ T5093] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 425.220250][ T5093] usb 3-1: config 0 interface 0 has no altsetting 0 [ 425.223084][ T5086] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 425.235814][ T5086] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.246333][ T5086] usb 1-1: config 0 has no interface number 0 [ 425.253075][ T5086] usb 1-1: config 0 interface 143 has no altsetting 0 [ 425.407882][ T5093] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.419549][ T5093] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 425.430629][ T5093] usb 3-1: config 0 interface 0 has no altsetting 0 [ 425.436607][ T5086] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 425.446808][ T5086] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 425.455264][ T5086] usb 1-1: Product: syz [ 425.459654][ T5086] usb 1-1: SerialNumber: syz [ 425.499411][ T5086] usb 1-1: config 0 descriptor?? 13:25:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000440)={'ip_vti0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x7800, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @local}}}}) [ 425.571329][ T5093] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.580936][ T5093] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 425.591161][ T5093] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8902, 0x0) [ 425.692856][ T5093] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.702324][ T5093] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 425.712507][ T5093] usb 3-1: config 0 interface 0 has no altsetting 0 [ 425.776696][ T5100] usb 1-1: USB disconnect, device number 28 [ 425.829833][ T5093] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.839239][ T5093] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 425.849490][ T5093] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x21, &(0x7f0000000000), 0x8) [ 425.955366][ T5093] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 425.964903][ T5093] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 425.975332][ T5093] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:11 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09"], 0x0) syz_usb_disconnect(r0) 13:25:11 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000140)={'syztnl2\x00', 0x0}) [ 426.097718][ T5093] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 426.107837][ T5093] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 426.118654][ T5093] usb 3-1: config 0 interface 0 has no altsetting 0 [ 426.221539][ T5093] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 426.233942][ T5093] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 426.244820][ T5093] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:11 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x4d, 0x0, 0x0) 13:25:11 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x5452, &(0x7f0000000040)) [ 426.441010][ T5093] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 426.450575][ T5093] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 426.459272][ T5093] usb 3-1: Product: syz [ 426.463864][ T5093] usb 3-1: Manufacturer: syz [ 426.468688][ T5093] usb 3-1: SerialNumber: syz [ 426.551694][ T5093] usb 3-1: config 0 descriptor?? [ 426.617855][ T5093] yurex 3-1:0.0: Could not find endpoints [ 426.660608][ T5088] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 426.840238][ T5093] usb 3-1: USB disconnect, device number 33 [ 426.990560][ T5088] usb 2-1: Using ep0 maxpacket: 8 13:25:12 executing program 4: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8fef"], 0x0) 13:25:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}}) [ 427.111495][ T5088] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 427.122062][ T5088] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 427.131531][ T5088] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 427.140973][ T5088] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:25:12 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 13:25:12 executing program 2: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29", 0x5c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 427.531381][ T5086] usb 2-1: USB disconnect, device number 34 [ 427.630236][ T5093] usb 5-1: new high-speed USB device number 31 using dummy_hcd 13:25:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_TID_CONFIG={0xc, 0x11d, 0x0, 0x1, [{0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}]}]}]}, 0x34}}, 0x0) [ 427.904066][ T5093] usb 5-1: Using ep0 maxpacket: 16 13:25:13 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000006c0)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) [ 428.057906][ T5093] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 428.066748][ T5093] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 428.079580][ T5093] usb 5-1: config 0 has no interface number 0 [ 428.086819][ T5093] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 428.171656][ T24] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 428.235745][ T5093] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 428.245443][ T5093] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 428.254006][ T5093] usb 5-1: Product: syz [ 428.258407][ T5093] usb 5-1: SerialNumber: syz 13:25:13 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000013c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000016c0)={'pimreg0\x00', 0x41}) [ 428.303867][ T5093] usb 5-1: config 0 descriptor?? 13:25:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x1c, 0x0, 0x0) 13:25:13 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x1e1a01) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x1000) [ 428.541014][ T24] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 428.609182][ T5093] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 428.635373][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.645110][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 428.655326][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 428.710023][ T5093] usb 5-1: USB disconnect, device number 31 [ 428.781299][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.793539][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 428.804429][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:14 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09"], 0x0) syz_usb_disconnect(r0) 13:25:14 executing program 0: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000140)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) [ 428.901821][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 428.911429][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 428.922121][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:14 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x56a, 0x9, 0x8001, 0x401}, 'syz1\x00', 0x25}) ioctl$UI_DEV_CREATE(r0, 0x5501) [ 429.070963][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.080403][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 429.090963][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=@framed={{}, [@printk={@p, {}, {}, {}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x5}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000005600)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) fadvise64(r1, 0x0, 0x0, 0x0) [ 429.246128][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.255704][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 429.265910][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 429.329503][ T6769] input: syz1 as /devices/virtual/input/input12 [ 429.391243][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.400620][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 429.413704][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:14 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8fef"], 0x0) [ 429.552576][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.562027][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 429.572289][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 429.611272][ T5093] usb 4-1: new high-speed USB device number 40 using dummy_hcd 13:25:15 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000000)=0x655e, 0x4) r2 = dup2(r1, r1) write$tun(r2, &(0x7f0000000040)=ANY=[], 0x46) recvmmsg(r2, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2000, 0x0) [ 429.692551][ T24] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 429.701986][ T24] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 429.714545][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:15 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast2}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @multicast1}, 0x5, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='pimreg\x00'}) [ 429.881694][ T5093] usb 4-1: Using ep0 maxpacket: 8 [ 429.950945][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 429.962629][ T24] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 429.971742][ T24] usb 3-1: Product: syz [ 429.976145][ T24] usb 3-1: Manufacturer: syz [ 429.981138][ T24] usb 3-1: SerialNumber: syz 13:25:15 executing program 4: r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x100000000) [ 430.029623][ T24] usb 3-1: config 0 descriptor?? [ 430.041279][ T5093] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 430.051986][ T5093] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 430.061419][ T5093] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 430.070886][ T5093] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.132402][ T24] yurex 3-1:0.0: Could not find endpoints [ 430.162899][ T5086] usb 1-1: new high-speed USB device number 29 using dummy_hcd 13:25:15 executing program 1: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x40081271, 0x0) [ 430.321075][ T5100] usb 3-1: USB disconnect, device number 34 [ 430.412619][ T5088] usb 4-1: USB disconnect, device number 40 [ 430.480139][ T5086] usb 1-1: Using ep0 maxpacket: 16 13:25:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x7}) close_range(r0, 0xffffffffffffffff, 0x0) [ 430.641391][ T5086] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 430.649830][ T5086] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.661275][ T5086] usb 1-1: config 0 has no interface number 0 [ 430.667623][ T5086] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 13:25:16 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = dup2(r0, r0) readv(r1, 0x0, 0x0) [ 430.850796][ T5086] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 430.861115][ T5086] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 430.869466][ T5086] usb 1-1: Product: syz [ 430.874041][ T5086] usb 1-1: SerialNumber: syz [ 430.931409][ T5086] usb 1-1: config 0 descriptor?? 13:25:16 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 13:25:16 executing program 4: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29", 0x5c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:25:16 executing program 1: r0 = socket(0x2, 0x3, 0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f00000038c0)=[{{&(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000000000007000000940401000000d47eb66b4b7352b4b6a72b0000"], 0x18}}], 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f0000000080)=0xff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00'}) r2 = socket$inet(0x2, 0x3, 0x100) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)='\v', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) [ 431.233110][ T5086] usbhid 1-1:0.8: couldn't find an input interrupt endpoint 13:25:16 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x80041284, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "2a92bac2c1d3d4238f5df710c9c705258e8e4b145590126158315d8e43bc34a3e7a2cbaf64d920a54b3370e6f8100b3d0d106aa7fa797efb064c004f5c9c0263", "edd8b48c879ea086a2bcfebcbb38931fcb9c0b70a05e037072de37055b39508ae7f6389e33228330c50fb3d0c5b60ca28e9af7e3e4f623cf9fc5b94b86ec4306", "cf71417aae7ffb09db34566c6f43ced86523d53bce0e3eba0307e07200ecfdff"}) [ 431.311721][ T5086] usb 1-1: USB disconnect, device number 29 13:25:17 executing program 1: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09"], 0x0) syz_usb_disconnect(r0) 13:25:17 executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00'}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x70, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x40, 0x2, [@TCA_BASIC_EMATCHES={0x3c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc}, @TCA_EM_META_LVALUE={0x4}]}}]}]}]}}]}, 0x70}}, 0x0) 13:25:17 executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x80) [ 431.795451][ T5088] usb 5-1: new high-speed USB device number 32 using dummy_hcd 13:25:17 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) [ 432.030180][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.141703][ T5088] usb 5-1: too many configurations: 9, using maximum allowed: 8 13:25:17 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300", @ANYBLOB="8fef"], 0x0) [ 432.231281][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.241684][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 432.251869][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:17 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000080)) [ 432.280564][ T5086] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 432.386183][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.396464][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 432.406995][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:17 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/config\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) [ 432.532286][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.541709][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 432.551928][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 432.610878][ T5086] usb 2-1: Using ep0 maxpacket: 8 [ 432.700413][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.709599][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 432.719754][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) [ 432.821193][ T5086] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 432.831668][ T5086] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 432.841872][ T5086] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 432.851928][ T5086] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.911028][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 432.920716][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 432.931126][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:18 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pipe2(0x0, 0x0) [ 433.021152][ T5090] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 433.042935][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.052360][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 433.062947][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 433.157763][ T777] usb 2-1: USB disconnect, device number 35 [ 433.167996][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.177304][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 433.187476][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 433.290309][ T5090] usb 4-1: Using ep0 maxpacket: 16 [ 433.303781][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 433.313287][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 433.323620][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 433.451356][ T5090] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 433.459729][ T5090] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.471229][ T5090] usb 4-1: config 0 has no interface number 0 [ 433.477561][ T5090] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 13:25:18 executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000980), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000d0000000c00018008000100", @ANYRES32=r3], 0x20}}, 0x0) 13:25:18 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pipe2(0x0, 0x0) [ 433.601088][ T5088] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 433.618696][ T5088] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 433.628464][ T5088] usb 5-1: Product: syz [ 433.633227][ T5088] usb 5-1: Manufacturer: syz [ 433.638047][ T5088] usb 5-1: SerialNumber: syz [ 433.662658][ T5090] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 433.672264][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 433.680795][ T5090] usb 4-1: Product: syz [ 433.685181][ T5090] usb 4-1: SerialNumber: syz [ 433.715803][ T5088] usb 5-1: config 0 descriptor?? [ 433.725738][ T5090] usb 4-1: config 0 descriptor?? [ 433.782344][ T5088] yurex 5-1:0.0: Could not find endpoints 13:25:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/13, 0xd}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) [ 434.014400][ T5100] usb 5-1: USB disconnect, device number 32 [ 434.027397][ T5090] usbhid 4-1:0.8: couldn't find an input interrupt endpoint 13:25:19 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pipe2(0x0, 0x0) [ 434.109109][ T5090] usb 4-1: USB disconnect, device number 41 13:25:20 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) syz_usb_disconnect(r0) 13:25:20 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x2a, 0x0, &(0x7f0000000600)) 13:25:20 executing program 1: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29", 0x5c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:25:20 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10) pipe2(0x0, 0x0) 13:25:20 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.memory_spread_page\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0x12) 13:25:20 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8fef"], 0x0) 13:25:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000140)={{0x56a, 0x9, 0x4, 0x401}, 'syz1\x00', 0x25}) 13:25:20 executing program 0: quotactl$Q_QUOTAON(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='.'], 0x0, 0x0) [ 435.220604][ T5093] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 435.237711][ T5100] usb 2-1: new high-speed USB device number 36 using dummy_hcd 13:25:20 executing program 0: syz_clone3(&(0x7f0000000100)={0x104100000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0x58) [ 435.510202][ T5093] usb 3-1: Using ep0 maxpacket: 8 13:25:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) writev(r2, &(0x7f00000001c0)=[{0x0}], 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) [ 435.551903][ T5100] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 435.641314][ T24] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 435.654626][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.663975][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 435.674394][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.691247][ T5093] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 435.702172][ T5093] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 435.711467][ T5093] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 435.720931][ T5093] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.781655][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.791430][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 435.801718][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 435.835445][ T5093] hub 3-1:1.0: bad descriptor, ignoring hub [ 435.842047][ T5093] hub 3-1:1.0: probe with driver hub failed with error -5 [ 435.940789][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 435.954750][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 435.966928][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 435.977829][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 13:25:21 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x401870cb, 0x0) [ 436.101563][ T24] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 436.110094][ T24] usb 4-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 436.121286][ T24] usb 4-1: config 0 has no interface number 0 [ 436.127633][ T24] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 436.199018][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.210437][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.211666][ T4398] Bluetooth: hci5: command 0x0406 tx timeout [ 436.220493][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.257081][ T778] usb 3-1: USB disconnect, device number 35 13:25:21 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') fstat(r0, &(0x7f000000d040)) [ 436.412864][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.422444][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.432643][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.441594][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 436.451513][ T24] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 436.459859][ T24] usb 4-1: Product: syz [ 436.464447][ T24] usb 4-1: SerialNumber: syz [ 436.487877][ T24] usb 4-1: config 0 descriptor?? [ 436.520483][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.529827][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.540344][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.590451][ T24] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 436.704375][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.714264][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.724640][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 [ 436.781538][ T24] usb 4-1: USB disconnect, device number 42 13:25:22 executing program 2: r0 = socket(0x10, 0x400000000080803, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="040000000000000014"]}) [ 436.871124][ T5100] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 436.882875][ T5100] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 436.893770][ T5100] usb 2-1: config 0 interface 0 has no altsetting 0 13:25:22 executing program 0: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09"], 0x0) syz_usb_disconnect(r0) 13:25:22 executing program 4: syz_clone3(&(0x7f0000003200)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) [ 437.129231][ T6860] bridge0: port 3(batadv0) entered blocking state [ 437.136430][ T6860] bridge0: port 3(batadv0) entered disabled state [ 437.142182][ T5100] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 437.143763][ T6860] batadv0: entered allmulticast mode [ 437.152877][ T5100] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 437.160345][ T6860] batadv0: entered promiscuous mode [ 437.166082][ T5100] usb 2-1: Product: syz [ 437.173485][ T6860] bridge0: port 3(batadv0) entered blocking state [ 437.175475][ T5100] usb 2-1: Manufacturer: syz [ 437.182396][ T6860] bridge0: port 3(batadv0) entered forwarding state [ 437.189231][ T5100] usb 2-1: SerialNumber: syz [ 437.252528][ T1071] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 437.262084][ T1071] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 437.295507][ T5100] usb 2-1: config 0 descriptor?? [ 437.380679][ T5100] yurex 2-1:0.0: Could not find endpoints 13:25:22 executing program 3: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x23, 0x0) 13:25:22 executing program 2: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8fef"], 0x0) [ 437.570607][ T5088] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 437.581122][ T778] usb 2-1: USB disconnect, device number 36 13:25:23 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000000), 0x8, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b, 0x0, "2a92bac2c1d3d4238f5df710c9c705258e8e4b145590126158315d8e43bc34a3e7a2cbaf64d920a54b3370e6f8100b3d0d106aa7fa797efb064c004f5c9c0263", "edd8b48c879ea086a2bcfebcbb38931fcb9c0b70a05e037072de37055b39508ae7f6389e33228330c50fb3d0c5b60ca28e9af7e3e4f623cf9fc5b94b86ec4306", "cf71417aae7ffb09db34566c6f43ced86523d53bce0e3eba0307e07200ecfdff"}) [ 437.820928][ T5088] usb 1-1: Using ep0 maxpacket: 8 [ 437.894682][ T6868] loop3: detected capacity change from 0 to 512 [ 437.991790][ T5088] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.002752][ T5088] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 438.017587][ T5088] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 438.028704][ T5088] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:25:23 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="b702000009000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2e6405000000000065060400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000002c3f2cc2b7956244cef7baf48e6d2885a09a87507ebfc75b5b0f4e4309ebcdac5f7a860c008cbdd3b4c3b7f28754860c9c781f6410457253e89ad528d985636a86ec0f68f59cd1159a2c2e85d726859a919cc9548a349980d1ccdce27f94bc074c27f81078545c146a0857153b7b8f00034debae58a4ab415b0d7ff0575cc272cd3d7e8d974927676468ff2d86e0ffac94792ed9cf6b40b3cf252a47c05ae8a70d57cc3e067d1867b54d24e20000000000000020009ebf84d3b042d6e432cd080e3b57239f0127473e6ba922aff649609d40b47ec331ccba3cf96f9483ff19a6471bf5abc742d9cbcfb964b11b31034694a6aad86cf08a6c7b2235dc99de9aa3e6b77c7a2877261ed32da90864987f30926c9013eec3b86836ae50447aa5a79f40c235000000453302712c3d8fc4e2b61adb0695e800000000d4f4e91f0000002c33df424d1bafe5725c8a404724f8a4f1cda7997b65954f74097560b91da309b887af2485c2d9ab09b523000000000000000bf7b2ff4602aec1eea200000064881c5630521a08e051374cf05c921a06fb7818000000009dc8d95e0e5b365d10e1004dae58b3b5b89709b0ff47b200000000004000cbef88811dc8c1b27ac7d9a6bb70f60eb9c01dd2fc79b85e4d961498f3a80131d21d856177a2189f45d011ef1da5c6d57bb8fd387ccea9c3899a914e47e82f040000009d81003f927355408f87264797d3fa970949793b94329d580500d1f91c0d22587e05a61e3d8576ca168e88d7a9af95b04a37c27bfffab9abbb31fa8c0080258cfa6d3f166e695f3c56490aeef464d9965d70a50f1282619344f223548e750339643adac1322c87ca253ff2fb1882760d6feab16bacdf83c11816dbe959ebc5ec479c8319f73e2249eab0486b110702a481d3b51976a52303056e800b4ae5acc2dfae60ab958e9f3ef9b4aaa4e8d6166f636a65eb1d672bf2000000cda8462cc9b16624998be65683321e970000000009b8e20762c1bf4a3eb6769f2b23e842bacd9c685edea0ffa3e975424f8ede49e61a4de808a38ba3512d64dc71867df4eee3f1ff791cf7c9862f98b45852e4b2f78721b978a2df2f2a29a387c6f0576b36038f819286eca99a6a434811cf2a117d775fe986a49fb82cf5f15972d5ab18f1045384501adabb20f7b0e15ff47f1744e2341b59034959a1289ba6e243668e6735305707e3de7652bfc5b60c76deff43a1d6fd6a4180ab723735abbeffe7f2ec3a0bb86f9eddfc0f3d1d503d7a54b49e1ae6c5aa620d27e91aa0aa0ed6fcacfc91fbb4c256409e54daefbb107c381fa729ff5f3907d93430da178d685d7730f5e129438a5214f722096d2986334c2576bef69145d3fbd78a9059e454474f92e65828b018174a9f4738b8c71fbdeac26ab95e02f9a847182766964976b1fccdb9f35721e43e33883cf16ed1343fb7429eb395123b0a4262b7023c22039b9002589a378ed4c6267965af78b861bd025312538cec97966b8973d4e299d9802264d06e40ae118e1d242d1128dcedeb44030df12ef68f78215d65f96eb55db8cbcb060008000d988374f85451a694ffe38a1d03916ff10dc82b31c98d42e1a1bda1290de1a499a5a385b31112a48ba3e6d6849914c1788a7aca37177cc341fff44fec5c5e0abae01c439a1b0311e074e81ae9993b5b3459553e4ece78d4c1501c70f5d81e0725d5b273755c0000000000000000aa4234ff82182952a76233d18e7d49638aeb04e7a9e9e7eafb7c255372795d2d192a0a33cab0f5bf2e93e0544fcdf2df2bc6ce96e5a11993d54f97a23754ac828674dbb93c0ad345715be4a13678b01edf76d8a923655800a2c88cce004505ab45d8f5f88aa887bbce5c18970428516f6099bdbb2cd7a2356397f1a0a23e662e2a6c4834400cbaa41c3c574e6e6aefb7a68da5ec1ae49f968bbe0e0bf9878516f553639f5b4828e92019b61f5874be1c7cdd9482df50bc24a8a1fa10d291390eb84e26a2e8dbeaa45604b05a116c1210a7540bf81005044273f5a8ffc538db289350eb248e483bd8920efcf30a798c2b636243e0a37262ca47dfeefa753ba528f7ba77e825051ce69b4475d7d714ba0c636e6ae9f710411d30ef424aeaabe057c7df6ff8f767bcd9012e1047c686f5ccb76ab3a5df53cbc22ba7ea8f6a8e220bb4d83de1e4dc19d6c1be841503850803bc2c2d5e0e34270a7f1cca0c6c53a8e5f891f7a793a70da62d6d88fbb90d220acc687931b42d6be83ab870da3c0a567f5e65ec0457f4ad2a4ec0b671b36388afd5520a8483a4b11f7d02a409315f0f9e59f47668d68a74838d6976e12fd45200014041dffacbf60892ec8bd7560686f137a806d3dfaba900b47cac62f828342fff009adb5b2251461a1b9d6ba625b8fe04e69a1a4be2696f0000000086e172932e03000000000000005942e1b9d6dc28ab8e19e1111dd893e801015642faf21eef40d6e7de3ef62c4bc5ff17e7aeb2841098f845d1cc9ec4eee79c298fb0ba939b13707044e2e9cc0d350438c1c8c6bb9a38c6ac5ca0d9cf1f3d6915f25cb26edfc28b3079b97df32601240e454db103fb0c4a143673a3f160d3a7b83ecd0509ce9eba0c7bf7843799b1b56a234f9eaab8a3f14f1472bb6aaeb8ac9ee4054605558ab31f339f6a4caf2ee2fd01f34dca3300000000000000000000000000000000f59f8e6e00000000c44130098d833a24000000000095e6f945ba9a941cef5e70b8c152321e24b5b29bcf374dcf5a29a35d76e6e2bf8df95462690a4fc9ec8129e92b6ebb4b40a992a75d3c595426ae40d0bfc87db24d856359079b29b3c374d081c300b2cfaa596d24e800ef8e2201f2fb7a9946f89f9f31f7cbd603fd7f8898c70b5c65f2e28f22e1a79a6af3a54861b07f124642e98389557affbdede09b5566a4a1ee73b20846810030a754acddcdafe3ceeeebc0b5f2fedfe7d198e3067f3dbac9441a9ab8409cbbb7e15b9ae3944097de34de2001c8533a3766e6e4c4c4702ccb932a27a3962814cd6aa8fc684beeaa3932efae3a9052be8eec1e95f6ad8d41dd34829503ba4b66e27154cb6e34aa13450522df1723130b6fe347c93f00e40e293c98d849a33f773c743728992f40faccd5c23130a1c6bfd6fc661bca1598137ddd1090ded672f5a48a40cab3f640c8241a364cbdd3f188eec7da7bccafbd5bf28a46f0eecc6b550471b0b0770c6a5a411c0e0b19e15a461e7c6833ba936e214b013f2819ec6572a43b5cd32b11d7e4f8dcf8f7820a17b7b2ee6178a03351dd25091e46bfd82a3979b9cad109fd6217cd52aa81bdabd50826a674bd16b8f7e6aed12a305366599f5f029a7b24558c027518c669760500002f1c19d16a6f391906000000cc0bbbfb8c698ecc137d96711100e0108d3bd2afed0b279ebf0527552a9331e646c424b14ffbb815622bfd2f635855bed1b164d0a56bd104be069854111c5b26ec3c652b5f0a6b9676dae987ec23456ba05a4dfb15321ef6b76e7e547a688c67ab531cfc784c9f940d9fb0464a6cce635e14b80dc5c1c64e75e6bd5355d84f8df272f18f58c570e7afd83ee77f157c146aa747b728969aeb4aba1d8f9de1b3fb8ab6ea50e884c2ea98e6400bf0c5ae2887cd1da0e57ccfdf5eca2b455247efcc13102846c0a85f20c80007c0ce6efce627b95b8ad3003385de97101678fb2163ecea6e70a77a6fbc089e31a5ccece932229b8f79faa6863d6857c3d9a9710f9f8ad16eeb8342278f311cbc226498028234d21466892983378fe64acbb44f694cd78e43c74aa75505cb1c91b189f8f89f233a05f5cd4e173a373178557843dd705268f74a9e5429945503195aefd6706b584d8408c9652b3fe68500747f7ee8375fa559c3ad195d3795df1a8364cd13acc3256ee4634c73eeb6954d0fcf09ab84df0b8900e0c6fea2ccb600ae7a4b128cae19df160e7c207b89132d1d5bdc9ffc79f0549b82df521817651d5fead5128205b92ccdccc69407ab556217af277af911dbd456dfc43dd061b6c91485dcc208cf0b3d0bf851de413f5de5ec015e296914afab6411109355e027ce04990d9aae251b9deb11b7db45b9f15b7b55d8fdbedd9e6cf891205694f02be8b9ea8ecd41308a0e1b93ae3435bfa88b440b1f701b4d0fc49c82193f27f8023b630ea97edbf3bf421a0a1a2b4ac7bb30bcd1cdd172c0df37408fd6827bb03e8742fc1c7a2befd1299928c5f79e846a8dc7ca648d960a759e6711b69776896a9656d59af6d44bc5348229fa84ae78af8421a22c4b4c17a3d24a4a0104000000000000d77cc4eef51c2b417c8c7458ddd7dd9d1a863bf0a9e1a30a19020490038017a5c7e474c83302a2c2b5c976dacf3dda7191c757f208000000000000005f7ed983f65723fbb36b9b51abb0dbcd335700000000000000000000000000000086666201251aa4f139d0485ffcf89f01639fd1579a3802f720a0215c720a97071f5065a23642a58275dbca444b00e2e5835185d5d5b2796eb0fe32cf3b0633f58ecc7648c3c6efe82f93a3008052416512eea30ea9472e0b456a652883c0907323cf03be193a05008cdef7a98a1671a1918df310dc4bfd61c3db4819ab1c57b348a8ff1ed36364a20fe846f1cd086058d139ce528425b31c5d08b433562ffb318c1285011f9b78b2401989384311101e452f54661ecdb2514a6ae50dbdd422de0f0f8c670000000000390be79688f80c47314cb1b14afcaa5d23f9032e0ec51f45f447d6a7c798fcf7e60e2180e289410801e4f03a0e140f388f25b92da1025d8409e171a2336ed71cca86eb4658fe06df286e0e20276b0618eeffd05774f15686cd9d3182ca2fec863875f305fed6baf48a594db12582a38cfdffffffffffffff0cf8d920517835fe7d09cfcb624f6931f1cc6f6b71f58de9ddc38e0c43992f6bc57a718d0cfd197b5324b4e05ef1caa96db3ae1f2f2e5791faba2ebbe1a6faf21f2748fb1fb6743c3ca8af4e6b02518c9b7fdc1b5721eb1c3ed98db25536f74ac7861afc94544e52dcb5c60460a05802e3b437ac977bfa26b887a2443e8d559c58187f004eb82b07937df6e96f77ed551926bec4e0188fae10a35d1c5f1768ac6be829bea46f1babc3d74adc31ca71bdab9079e4288881b434484eadde9da6b81802842abd462d546c59d87acc014f81d3414759bda12d2a2c6bc1bfa807bd3101eb227184a61107b6d0618e2a3b842671e084ac3f0ff94dc48b51601247318ab4d1c5106458000000000008000000000000cfee0107e6c2fe8639d926829fdbbd86bf591a8c3c235d8939af9d923f648165881a6c29997234406400b3b1c321cc158dbe17123eace30000000000009ea77cb4d3ca892600000000796de6ae4ae40bdf9a6e8c5dc29562262af9cd54e8e3ecc7e3c8cba0ecc791683496c4e5c1a5729714d9f9031f49b400cd2667b4ea6df54809615a4f973f93e6ccec72f16ff998e29ed99df733680a9d5cea57f99cc139b6ea9014f3000000000000000000000000000000000000feeab45a4046a622b0dceb413e4e39b7317e92cbed46b41ab5115bfb542c933783d750852dfdc6656aaf15e10615a88821f2f1bc53969b52d6852755e7681ad5beda80b38ccd34116b99f50b4fdd967b3f20f260455412b67563e40e323bde9d673fceda0ad6981565c8a183d928903b4f4472dde41b6dcd75314c31e704dfcb222c8359fe88944f852242270c932abfaeece0843d708f5cd25b2a63ae1e79723c1c3c013836b47da0a35d0f34c070000000000000422ae2c148d444dd437a7d2f5e575009bc2d17a199802409329dae8baa58d3de63ad45328a9d4dc1ace543dfe11913c6c6413f8f7a15657d012fea460bb4656a20df1ba26932b0ef49f8ea88d7b4c1289314ba789661640f1b5d7cbae103fa95b0035f1e8e866307d4796eab0992704f9e00be4b1af8dfa9e94ad74e607ea9d7d7a95ed5a15429426abbed8d2c657018305c6f9e5159a5453f958991a908ff4cb2e8cbccb1d3c8daf754e4b01b2edd023e5bfdf293bd28fc1f8885f6edd5a715df4d180247feb08e9e2e5126c48be6098e711f0d86de5d76fdccae34eef9197c32ab4e6fcb52eb9ce18fdb621a75913a97254d783778203ec0bd1a8859683e1d01da4e81fb73bb3b358340a0310bf5ae17b917208da607fd7b125cf99fd3e9056f5184df7570ede94b736ae354b5b8ae2cc473b455f2f86d47c69027676bf1141f316b0f278f1692406572ee82766f8e5ff1cfec2a7a6cab7d0f2582a877c9bd4ca81089373f738d02e6bb4d3df30ac0f041e51ad36e1ff140812baf54b80635cc80963c8f69fa4506f7a30c99d3e538cc0aeafcad86ead38ed949aa3c204aea50e5e0039f01b82595b7dc921a8acc1f76340f060cc9a3acad3451c17dc9b5ca5d10a0cb1708592d1900a046f33761d50895febd9fd58cb132989766cf7c252daac259576ec218e3857e6fa97fe445d1fab51d87302a4bb28a4cfe462ee4849cc6832650188ca187d85509d8beccf9d9cf752368985804195b9fd2faf1aff8248f3981bd55cbbf514cd8365fee72cc7af053e5388ceadadb967ef735181df6a90cab13f58f6d563c9ab4ad37297aecffd8446cb2b14ec36a99af8393e3760d5970ba1debdcbccd54012c559ee2797ff962328aa6a252c0756e396ce4d52937546675203bdf1d6b120acac576523f8b1daa922188bf61536312f90dba92fb380c3c6fb5f9883a2c4dd99a1bac9b7cb25ff2ef9bd58ff97ddfdd2d4bcc371ee82245b57cd91a7fa3479cd339f54a5c422b753cd42d441ea881d46e419312db1f0cccce"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="b9180bb76003070c009e40f086dd1fff310000003c0020010010ac14142ee0080001c699da153f0ae0e6e380f60115f683317585d7472ce0ab4439f0f570ff155bc5f73ba3f8bb99a6e8ded1ce485cf058105cd981b42493481cd659416a2e10c9119664f36eb00b333c20c9ec0c222d644bdcb178c1cc53d6960fbb842d6a33dfcde3a1e1848135214baf139753866cadcbe3ce52505e992818cc452bee339d9ab076f484020eaa348a21d7911e4c44905256ec2cc54cca47a198b00c10aff62a4bed43a2ebcad92743fb22c593f28fd4bb7c703cde9cae0569d4c8d9a823f2c12863f7a6c0cf88ed22aae4f6f084508833b61429a25773eedf63dd9f33d430f2a0a30a7761db16fe0f743b95ded898c28aac1256ce2751b3d738899b8b19d9052b7f13ff94", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0xfffffe73}, 0x28) [ 438.115039][ T5090] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 438.240943][ T6868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 438.254380][ T6868] ext4 filesystem being mounted at /root/syzkaller-testdir2931963039/syzkaller.TxOQ3Z/156/file0 supports timestamps until 2038-01-19 (0x7fffffff) 13:25:23 executing program 4: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a8413", 0x63) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 438.387194][ T6868] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 438.423528][ T5090] usb 3-1: Using ep0 maxpacket: 16 [ 438.491362][ T778] usb 1-1: USB disconnect, device number 30 [ 438.550573][ T5090] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 438.558861][ T5090] usb 3-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 438.569664][ T5090] usb 3-1: config 0 has no interface number 0 [ 438.576095][ T5090] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 13:25:24 executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000004850000007b00000095000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet(r1, &(0x7f00000006c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='2', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000005c0)="b8", 0x1}, {&(0x7f0000000600)='Z', 0x1}, {&(0x7f0000000700)="c8", 0x1}, {&(0x7f0000000800)="ed", 0x1}, {&(0x7f00000008c0)="d0", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000c40)='&', 0x1}, {&(0x7f0000000d00)="8f", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000f80)="990e0c0eadc3fb46ba6b74c1b7707224ccfcd08e2e784324433c7fb152c89305f6cabd7938862e09a185cf4f06335008ee96b94e4e7d77591cd4d001524e1c8b7e8eff6132dff8bb6fb86532ceac76c39f2f19b9a55957ba8d6ae96a6f73624a4918af718cbb9732e5eb58c13a976cfbce791d3bb06871722c5dadbf3fa9a151d1", 0x81}, {&(0x7f0000001040)='\f', 0x1}], 0x218}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001380)="be", 0x1}], 0x1}}], 0x5, 0x4008440) 13:25:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x0) dup3(r0, r3, 0x0) [ 438.772911][ T5090] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 438.782570][ T5090] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 438.791058][ T5090] usb 3-1: Product: syz [ 438.795462][ T5090] usb 3-1: SerialNumber: syz [ 438.812859][ T5051] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 438.851564][ T5090] usb 3-1: config 0 descriptor?? 13:25:24 executing program 1: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x23, 0x0) [ 438.942287][ T5090] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 439.010680][ T5100] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 439.168588][ T778] usb 3-1: USB disconnect, device number 36 13:25:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000200)) [ 439.320730][ T5100] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 439.399066][ T6884] loop1: detected capacity change from 0 to 512 [ 439.407552][ T5100] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.417827][ T5100] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 439.427950][ T5100] usb 5-1: config 0 interface 0 has no altsetting 0 [ 439.557072][ T5100] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.566442][ T5100] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 439.576708][ T5100] usb 5-1: config 0 interface 0 has no altsetting 0 [ 439.591460][ T6884] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. 13:25:24 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09"], 0x0) syz_usb_disconnect(r0) [ 439.604945][ T6884] ext4 filesystem being mounted at /root/syzkaller-testdir1518851359/syzkaller.BVLYBn/167/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 439.701024][ T5100] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.710726][ T5100] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 439.722535][ T5100] usb 5-1: config 0 interface 0 has no altsetting 0 [ 439.807650][ T6884] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 439.844041][ T5100] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 13:25:25 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, 0x0) [ 439.856029][ T5100] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 439.866991][ T5100] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:25 executing program 0: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b000100000000090408000103000000", @ANYBLOB="8fef"], 0x0) [ 439.971439][ T5100] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 439.981183][ T5100] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 439.991448][ T5100] usb 5-1: config 0 interface 0 has no altsetting 0 [ 440.111888][ T5100] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 440.121326][ T5100] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 440.132030][ T5100] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:25 executing program 1: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x5, &(0x7f0000000040)=0x0) write$P9_RFSYNC(r0, &(0x7f0000000140)={0x7}, 0x7) r2 = open(&(0x7f0000000400)='./bus\x00', 0x14113e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r2, 0x0) fcntl$setstatus(r0, 0x4, 0x6800) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 440.185487][ T778] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 440.226371][ T5032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.271369][ T5100] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 440.280946][ T5100] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 440.291144][ T5100] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:25 executing program 2: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x23, 0x0) [ 440.431132][ T5100] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 440.440674][ T5100] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 440.451406][ T5100] usb 5-1: config 0 interface 0 has no altsetting 0 [ 440.527098][ T778] usb 4-1: Using ep0 maxpacket: 8 [ 440.612609][ T5090] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 440.654302][ T6899] loop2: detected capacity change from 0 to 512 [ 440.671691][ T778] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 440.682539][ T778] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 440.692486][ T778] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 440.702058][ T778] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.712982][ T5100] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 440.722584][ T5100] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 440.731427][ T5100] usb 5-1: Product: syz [ 440.735817][ T5100] usb 5-1: Manufacturer: syz [ 440.740783][ T5100] usb 5-1: SerialNumber: syz [ 440.809825][ T5100] usb 5-1: config 0 descriptor?? [ 440.846586][ T6899] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 440.860426][ T6899] ext4 filesystem being mounted at /root/syzkaller-testdir4004450129/syzkaller.u5FY6S/147/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 440.865897][ T5100] yurex 5-1:0.0: Could not find endpoints [ 440.940427][ T5090] usb 1-1: Using ep0 maxpacket: 16 13:25:26 executing program 1: keyctl$search(0xa, 0x0, &(0x7f0000000000)='ceph\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0) [ 441.061069][ T5090] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 441.069500][ T5090] usb 1-1: config 0 has an invalid descriptor of length 143, skipping remainder of the config [ 441.085863][ T5090] usb 1-1: config 0 has no interface number 0 [ 441.094619][ T5090] usb 1-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 441.102505][ T5100] usb 5-1: USB disconnect, device number 33 [ 441.161559][ T5088] usb 4-1: USB disconnect, device number 43 [ 441.203036][ T6899] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. [ 441.300697][ T5090] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 441.310209][ T5090] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 441.318569][ T5090] usb 1-1: Product: syz [ 441.323227][ T5090] usb 1-1: SerialNumber: syz 13:25:26 executing program 2: r0 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, 0x0, 0x57) [ 441.375040][ T5090] usb 1-1: config 0 descriptor?? [ 441.439871][ T5038] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 441.455051][ T5090] usbhid 1-1:0.8: couldn't find an input interrupt endpoint 13:25:26 executing program 1: syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x21, 0x4a6, &(0x7f0000000a40)="$eJzs3cFPG9kZAPBvBgiEkEDaHNqqbdI0bVpFscFJUJRTemlVRZGqRj31kFBwEMLGCJs00BzI/1CpkXpq/4QeKvVQKae97233tpfsYaXsbrSrsNIevJqxIYRgYDcES/j3k55m3jzj7z2sec98gF8APetcRKxFxLGIuBcRo+3rSbvEzVbJHvfyxaPp9RePppNoNu98luTt2bXY8jWZE+3nHIqIP/4u4i/Jm3HrK6vzU5VKealdLzaqi8X6yurluerUbHm2vFAqTU5Mjl+/cq10YGM9W/3P89/O3frT///3k2fvr/36b1m3RtptW8dxkFpDH9iMk+mPiFvvIlgX9LXHc6zbHeE7SSPiexFxPr//R6MvfzUBgKOs2RyN5ujWOgBw1KV5DixJC+1cwEikaaHQyuGdieG0Uqs3Lt2vLS/MtHJlYzGQ3p+rlMfbucKxGEiy+kR+/qpe2la/EhGnI+Lvg8fzemG6Vpnp5hsfAOhhJ7at/18OttZ/AOCIG+p2BwCAQ2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvKH27ez0lxvf/71zIOV5fnag8sz5fp8obo8XZiuLS0WZmu12fwze6p7PV+lVlucuBrLD4uNcr1RrK+s3q3Wlhcad/PP9b5bHjiUUQEAuzl99umHSUSs3Tiel9iyl4O1Go62tNsdALqmr9sdALrGbl/Qu/yMD+ywRe9rOv6J0JOD7wtwOC7+UP4fepX8P/Qu+X/oXfL/0LuazcSe/wDQY+T4Ab//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG9vJC9JWmjvBT4SaVooRJyMiLEYSO7PVcrjEXEqIj4YHBjM6hPd7jQA8JbST5L2/l8XRy+MbG89lnw1mB8j4q//vPOPh1ONxtJEdv3zzeuNJ+3rpW70HwDYy8Y6vbGOb3j54tH0RjnM/jz/TWtz0Szueru0WvqjPz8OxUBEDH+RtOst2fuVvgOIv/Y4In6w0/iTPDcy1t75dHv8LPbJQ42fvhY/zdtax+x78f0D6Av0mqfZ/HNzp/svjXP5cef7fyifod7exvy3/sb8l27Of30d5r9z+41x9b3fd2x7HPGj/p3iJ5vxkw7xL+wz/kc//un5Tm3Nf0VcjJ3jb41VbFQXi/WV1ctz1anZ8mx5oVSanJgcv37lWqmY56iLG5nqN31649Kp3cY/3CH+0B7j/8U+x//vr+/9+We7xP/Vz3d+/c/sEj9bE3+5z/hTw//tuH13Fn+mw/j3ev0v7TP+s49XZ/b5UADgENRXVuenKpXykhMnTpxsnnR7ZgLetVc3fbd7AgAAAAAAAAAAAAAAdHIY/07U7TECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwdH0TAAD//yyP2UE=") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x23, 0x0) [ 441.652168][ T5090] usb 1-1: USB disconnect, device number 31 13:25:27 executing program 4: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a8413", 0x63) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 441.863991][ T6908] loop1: detected capacity change from 0 to 512 13:25:27 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, 0x0, &(0x7f0000000100)) 13:25:27 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a09"], 0x0) syz_usb_disconnect(r0) [ 442.071699][ T6908] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.085437][ T6908] ext4 filesystem being mounted at /root/syzkaller-testdir1518851359/syzkaller.BVLYBn/170/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 442.212259][ T6908] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: writeback. 13:25:27 executing program 0: r0 = socket(0x2, 0x3, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000100)={'wg2\x00'}) sendmmsg$inet(r0, &(0x7f0000003900)=[{{&(0x7f00000006c0)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_retopts={{0x10}}], 0x28}}], 0x1, 0x0) 13:25:27 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8fef"], 0x0) [ 442.400336][ T778] usb 5-1: new high-speed USB device number 34 using dummy_hcd 13:25:27 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1}) [ 442.579469][ T5032] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.591411][ T5100] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 442.730919][ T778] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 442.811173][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 442.823203][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 442.834095][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 442.890325][ T5100] usb 3-1: Using ep0 maxpacket: 8 [ 442.992899][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 443.003166][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 443.014483][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.031423][ T5100] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 443.042203][ T5100] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 443.051629][ T5100] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 443.061085][ T5100] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.100453][ T5090] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 443.171240][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 443.180805][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 443.191590][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.325136][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 443.337824][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 443.348875][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:28 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x2b, 0x0, &(0x7f00000002c0)) [ 443.371686][ T5090] usb 4-1: Using ep0 maxpacket: 16 [ 443.479336][ T5100] usb 3-1: USB disconnect, device number 37 [ 443.490675][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 443.499851][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 443.510482][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.521013][ T5090] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 13:25:28 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x0, 0x2, &(0x7f0000000280)="fa", 0x1) [ 443.529450][ T5090] usb 4-1: config 0 has no interface number 0 [ 443.541624][ T5090] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.640534][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 443.649823][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 443.660809][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.690630][ T5090] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 443.700306][ T5090] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 443.708652][ T5090] usb 4-1: Product: syz [ 443.713292][ T5090] usb 4-1: SerialNumber: syz [ 443.751665][ T5090] usb 4-1: config 0 descriptor?? [ 443.786759][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 443.796244][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 443.806695][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 443.887899][ T5090] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 443.895359][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 443.895534][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 443.915075][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:29 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0xb, &(0x7f0000000fc0)={'nat\x00', 0x2, [{}, {}]}, 0x48) 13:25:29 executing program 1: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000880)={0xe}, 0x48) [ 444.042486][ T5090] usb 4-1: USB disconnect, device number 44 [ 444.091877][ T778] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 444.101453][ T778] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 444.110413][ T778] usb 5-1: Product: syz [ 444.114840][ T778] usb 5-1: Manufacturer: syz [ 444.119674][ T778] usb 5-1: SerialNumber: syz [ 444.187126][ T778] usb 5-1: config 0 descriptor?? [ 444.258850][ T778] yurex 5-1:0.0: Could not find endpoints 13:25:29 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000380)=0x7, 0x4) sendto$inet6(r0, 0x0, 0xffffffffffffff26, 0x8000, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @dev}, 0x1c) 13:25:29 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 444.454125][ T778] usb 5-1: USB disconnect, device number 34 13:25:29 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8994, &(0x7f0000000080)) 13:25:30 executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002100)={0xf}, 0x48) 13:25:30 executing program 1: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8fef"], 0x0) 13:25:30 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, 0x0) [ 444.991036][ T5100] usb 1-1: new high-speed USB device number 32 using dummy_hcd 13:25:30 executing program 3: r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long}, 0xff05) 13:25:30 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20008010) 13:25:30 executing program 2: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a8413", 0x63) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 445.310782][ T5100] usb 1-1: Using ep0 maxpacket: 8 [ 445.431351][ T5100] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 445.442001][ T5100] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 445.451384][ T5100] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 445.460944][ T5100] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:25:30 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x64, &(0x7f0000000100), 0x4) [ 445.551150][ T5090] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 445.618064][ T5100] hub 1-1:1.0: bad descriptor, ignoring hub [ 445.625023][ T5100] hub 1-1:1.0: probe with driver hub failed with error -5 13:25:31 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYBLOB], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="5400000024001d0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000f1ffffff000000000b000100636c73616374"], 0x54}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002980)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) [ 445.830346][ T5090] usb 2-1: Using ep0 maxpacket: 16 [ 445.911386][ T777] usb 3-1: new high-speed USB device number 38 using dummy_hcd 13:25:31 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt(r0, 0x0, 0x2, 0x0, 0x0) [ 445.961525][ T5090] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 445.970093][ T5090] usb 2-1: config 0 has no interface number 0 [ 445.976424][ T5090] usb 2-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.089536][ T6956] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 446.145304][ T5100] usb 1-1: USB disconnect, device number 32 [ 446.162333][ T5090] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 446.168720][ T6956] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 446.172460][ T5090] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 446.189687][ T5090] usb 2-1: Product: syz [ 446.194273][ T5090] usb 2-1: SerialNumber: syz 13:25:31 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt(r0, 0x0, 0x0, 0x0, 0x0) [ 446.269304][ T5090] usb 2-1: config 0 descriptor?? [ 446.322469][ T777] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 446.374942][ T5090] usbhid 2-1:0.8: couldn't find an input interrupt endpoint [ 446.450520][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 446.459862][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 446.470148][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:31 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x16, 0x9, 0x0, 0x1}, 0x48) [ 446.544533][ T5090] usb 2-1: USB disconnect, device number 37 13:25:32 executing program 0: openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000005040), 0x1, 0x0) [ 446.601409][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 446.616478][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 446.628944][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:32 executing program 4: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 446.781777][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 446.791128][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 446.801285][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 446.911420][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 446.926468][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 446.938310][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:32 executing program 3: syz_open_procfs$namespace(0x0, &(0x7f0000000a00)='ns/user\x00') 13:25:32 executing program 0: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x40049409, &(0x7f0000000080)) [ 447.110557][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 447.125284][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 447.137096][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:32 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x1c, 0x0, &(0x7f00000002c0)) [ 447.284309][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 447.293717][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 447.304270][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 447.362032][ T5100] usb 5-1: new high-speed USB device number 35 using dummy_hcd 13:25:32 executing program 3: syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b00010000000009040800010300000009", @ANYBLOB="8fef"], 0x0) [ 447.422926][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 447.437620][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 447.450209][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 [ 447.596227][ T777] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 447.605747][ T777] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 447.616166][ T777] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:33 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000020c0)={0x0, &(0x7f0000002080)=""/26, 0x1e, 0x1a, 0x1}, 0x20) [ 447.651300][ T5100] usb 5-1: Using ep0 maxpacket: 8 [ 447.793039][ T5100] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 447.803642][ T5100] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 447.812998][ T5100] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 447.822462][ T5100] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:25:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)={0x48, r1, 0x109, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x29}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}]}]}, 0x48}}, 0x0) [ 447.843646][ T777] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 447.853168][ T777] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 447.861959][ T777] usb 3-1: Product: syz [ 447.871751][ T777] usb 3-1: Manufacturer: syz [ 447.876586][ T777] usb 3-1: SerialNumber: syz [ 447.945122][ T777] usb 3-1: config 0 descriptor?? [ 447.972961][ T5100] hub 5-1:1.0: bad descriptor, ignoring hub [ 447.979134][ T5100] hub 5-1:1.0: probe with driver hub failed with error -5 [ 448.021181][ T778] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 448.027603][ T777] yurex 3-1:0.0: Could not find endpoints [ 448.130932][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 448.140795][ T6980] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 448.239621][ T777] usb 3-1: USB disconnect, device number 38 [ 448.280474][ T778] usb 4-1: Using ep0 maxpacket: 16 13:25:33 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 448.431137][ T778] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 448.439576][ T778] usb 4-1: config 0 has no interface number 0 [ 448.446220][ T778] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.536116][ T5100] usb 5-1: USB disconnect, device number 35 [ 448.638373][ T6983] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. 13:25:34 executing program 1: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x891d, &(0x7f0000000080)) 13:25:34 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 449.138587][ T778] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 449.148896][ T778] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 449.157960][ T778] usb 4-1: Product: syz [ 449.162531][ T778] usb 4-1: SerialNumber: syz 13:25:34 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904"], 0x0) syz_usb_disconnect(0xffffffffffffffff) [ 449.191367][ T778] usb 4-1: config 0 descriptor?? [ 449.282231][ T778] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 449.471068][ T777] usb 4-1: USB disconnect, device number 45 [ 449.559092][ T6987] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. 13:25:35 executing program 4: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91", 0x66) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:25:35 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 449.950207][ T24] usb 3-1: new high-speed USB device number 39 using dummy_hcd 13:25:35 executing program 3: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) [ 450.165258][ T6993] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 450.235227][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 450.371038][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 450.381800][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 450.391279][ T24] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 450.403019][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 13:25:35 executing program 1: r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmsg$can_j1939(r0, &(0x7f0000002440)={0x0, 0x0, 0x0}, 0x0) [ 450.443143][ T778] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 450.554626][ T24] hub 3-1:1.0: bad descriptor, ignoring hub [ 450.560986][ T24] hub 3-1:1.0: probe with driver hub failed with error -5 [ 450.752538][ T4398] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 450.788567][ T4398] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 450.799591][ T4398] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 13:25:36 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 450.830906][ T778] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 450.853066][ T4398] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 450.873646][ T4398] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 450.887997][ T4398] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 450.990704][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.000132][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 451.013051][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.047262][ T7001] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. 13:25:36 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$sock_cred(r0, 0x1, 0x3d, 0x0, &(0x7f00000002c0)) [ 451.290677][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.300133][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 451.310467][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.334507][ T5100] usb 3-1: USB disconnect, device number 39 [ 451.454634][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.463966][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 451.474176][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 451.611464][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.620875][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 451.633434][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:37 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 451.761357][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.771075][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 451.783077][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:37 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000340)={0x0, 0x0, 0x5}, 0x20) bind$inet6(r0, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c) [ 451.936615][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 451.946123][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 451.956550][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:37 executing program 1: r0 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)='netdevsim0\x00'}) [ 451.995333][ T1536] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.091292][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.100747][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 452.110926][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 452.185644][ T1536] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.262134][ T778] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 452.271933][ T778] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 452.282240][ T778] usb 5-1: config 0 interface 0 has no altsetting 0 [ 452.359189][ T1536] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 13:25:37 executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x5, 0x9, 0xe9c, 0x3f}, 0x48) [ 452.540074][ T1536] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.540902][ T778] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 452.563248][ T778] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 452.571975][ T778] usb 5-1: Product: syz [ 452.576368][ T778] usb 5-1: Manufacturer: syz [ 452.582117][ T778] usb 5-1: SerialNumber: syz [ 452.630511][ T6996] chnl_net:caif_netlink_parms(): no params data found [ 452.683692][ T778] usb 5-1: config 0 descriptor?? 13:25:38 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 452.737303][ T778] yurex 5-1:0.0: Could not find endpoints [ 453.000254][ T5042] Bluetooth: hci3: command tx timeout [ 453.051183][ T5100] usb 5-1: USB disconnect, device number 36 13:25:38 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000003c0), &(0x7f0000000400)=0xc) [ 453.249052][ T1536] bridge_slave_1: left allmulticast mode [ 453.255184][ T1536] bridge_slave_1: left promiscuous mode [ 453.261950][ T1536] bridge0: port 2(bridge_slave_1) entered disabled state 13:25:38 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x14, &(0x7f0000000fc0)={'nat\x00', 0x2, [{}, {}]}, 0x48) [ 453.362073][ T1536] bridge_slave_0: left allmulticast mode [ 453.375522][ T1536] bridge_slave_0: left promiscuous mode [ 453.382984][ T1536] bridge0: port 1(bridge_slave_0) entered disabled state 13:25:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) 13:25:39 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xe0, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x700, 0x3, 0x3}}) 13:25:39 executing program 2: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91", 0x66) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) 13:25:39 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b40)={0x6, 0x1803, &(0x7f00000028c0)=@raw=[@map_fd, @map_fd], &(0x7f0000002940)='GPL\x00'}, 0x90) 13:25:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x8941, &(0x7f0000000040)) [ 454.220915][ T1536]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.263744][ T1536]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.329544][ T1536]  (unregistering): Released all slaves [ 454.480492][ T5090] usb 3-1: new high-speed USB device number 40 using dummy_hcd 13:25:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) 13:25:40 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xe0, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x700, 0x3, 0x3}}) 13:25:40 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x5, 0xff, 0x2, 0x6}, 0x48) [ 454.821692][ T5090] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 454.936395][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 454.946094][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 454.956293][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 455.081941][ T5042] Bluetooth: hci3: command tx timeout [ 455.116532][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.125960][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 455.136159][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 455.172515][ T7042] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. 13:25:40 executing program 3: bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000280)={@ifindex, 0xffffffffffffffff, 0x1, 0x2002, 0xffffffffffffffff, @prog_id}, 0x20) [ 455.281831][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.291211][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 455.301447][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:40 executing program 1: r0 = socket$inet(0x2, 0xa, 0x0) sendmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) [ 455.450162][ T1536] hsr_slave_0: left promiscuous mode 13:25:40 executing program 4: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xe0, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x700, 0x3, 0x3}}) [ 455.472655][ T1536] hsr_slave_1: left promiscuous mode [ 455.492144][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.501612][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 455.512194][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 455.524388][ T1536] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 455.532373][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 455.584930][ T1536] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 455.592793][ T1536] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 455.670740][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.680132][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 455.690917][ T1536] veth1_macvtap: left promiscuous mode [ 455.691055][ T1536] veth0_macvtap: left promiscuous mode [ 455.696551][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 455.709469][ T1536] veth1_vlan: left promiscuous mode [ 455.715147][ T1536] veth0_vlan: left promiscuous mode [ 455.857949][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 455.868511][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 455.879756][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 456.041616][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.051059][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 456.061382][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 13:25:41 executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002b40)={0x6, 0x104, &(0x7f00000028c0)=@raw=[@map_fd, @map_fd], &(0x7f0000002940)='GPL\x00'}, 0x90) [ 456.201767][ T5090] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 456.211240][ T5090] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 456.221422][ T5090] usb 3-1: config 0 interface 0 has no altsetting 0 [ 456.432671][ T5090] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 456.446104][ T5090] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 456.456045][ T5090] usb 3-1: Product: syz [ 456.460601][ T5090] usb 3-1: Manufacturer: syz [ 456.465427][ T5090] usb 3-1: SerialNumber: syz [ 456.533686][ T5090] usb 3-1: config 0 descriptor?? [ 456.687580][ T7057] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. 13:25:42 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) getsockname$unix(r0, &(0x7f0000003d80)=@abs, &(0x7f0000002c80)=0x6e) [ 456.731909][ T5090] yurex 3-1:0.0: Could not find endpoints [ 456.764429][ T1536] team0 (unregistering): Port device team_slave_1 removed [ 456.867855][ T24] usb 3-1: USB disconnect, device number 40 [ 456.884618][ T1536] team0 (unregistering): Port device team_slave_0 removed 13:25:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 457.160367][ T5042] Bluetooth: hci3: command tx timeout 13:25:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000c00)={0x2c, r1, 0x1, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x2c}}, 0x0) [ 457.364825][ T7063] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. 13:25:42 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x5}, 0x48) 13:25:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) [ 457.781908][ T6996] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.789616][ T6996] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.799346][ T6996] bridge_slave_0: entered allmulticast mode [ 457.808485][ T6996] bridge_slave_0: entered promiscuous mode 13:25:43 executing program 4: write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="297860dfde1863c08be8a1b7ad03094335f03542a50ea1e811193af3fb75f07ebb230f0791102fcd36124dd6fe8af416d0cb4bbbebbd8f1396a4772e1e9bc2c9e18ec784a3a99bc0f612d783b6822e8c7d2fd6f3e32710a16907ba29fc540e5f7a84138d2b91", 0x66) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058d"], 0x0) [ 457.991425][ T6996] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.999162][ T6996] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.007118][ T6996] bridge_slave_1: entered allmulticast mode [ 458.016194][ T6996] bridge_slave_1: entered promiscuous mode 13:25:43 executing program 1: bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xe0, 0x7fffffff, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x27}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x80, 0x700, 0x3, 0x3}}) 13:25:43 executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0xc00}, 0x48) 13:25:43 executing program 2: clock_gettime(0x0, &(0x7f0000000180)={0x0}) pselect6(0x40, &(0x7f0000000000)={0x5}, &(0x7f0000000040)={0x4}, 0x0, &(0x7f00000000c0)={r0}, 0x0) [ 458.467031][ T6996] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.520314][ T5088] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 458.599733][ T6996] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link 13:25:44 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) 13:25:44 executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x2e, &(0x7f0000000400)=@ringbuf={{}, {}, {}, [@cb_func, @ldst, @ringbuf_output, @call, @btf_id, @snprintf, @kfunc, @map_val]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x90) [ 458.843212][ T5088] usb 5-1: too many configurations: 9, using maximum allowed: 8 13:25:44 executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000580)={0x0, 0x7}, 0x4) [ 458.982904][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 458.992331][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 458.992791][ T6996] team0: Port device team_slave_0 added [ 459.006770][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.143743][ T6996] team0: Port device team_slave_1 added [ 459.183233][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.193853][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 459.208158][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.240655][ T5042] Bluetooth: hci3: command tx timeout [ 459.322417][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.331899][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 459.342094][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 13:25:44 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xb, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8feffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) [ 459.530412][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.539687][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 459.550255][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.565830][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.573163][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.600320][ T6996] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active 13:25:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000140)={0x0, 0x1d, '\x00', [@jumbo, @generic={0x0, 0xe0, "dea334b66399688e75dcc5c30a30e900d9918184b487eb9adc28dff00be9f36e9d46e0fa55202ddbfad65e94bd1302d349b5a0c2ff9696d88d5523020a15a6d30e149f19a07c6aa7668b36b285d085d7c60e8341f808ecff7fcd25c52d9da4e9357f410a73eedc6f302c84775519ca37b365b4d641570b1cd0c261239d0f5e29891c8a4e1bf3d6a42e26c974c6ebc098a0d4b8919c4e0dc59c1ff4ffe7a3e31f6b401bded387cae8d7eea52d8392819de4c560b95da49bf8aff0711955c5fa61782851e7cd1dd64d4f50d261974dec07d13efc1e9c808986fc994f4c760dc6c4"}]}, 0xf0) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\b\x00', 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xaa}}}}}}}, 0x0) 13:25:45 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000006380)=[{&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="bb", 0x1}], 0x1}], 0x1, 0x0) [ 459.691886][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.701314][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 459.711717][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.795252][ T6996] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.802703][ T6996] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.831843][ T6996] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.890570][ T5088] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 459.899786][ T5088] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 459.910494][ T5088] usb 5-1: config 0 interface 0 has no altsetting 0 [ 459.993830][ T7095] ===================================================== [ 460.001657][ T7095] BUG: KMSAN: uninit-value in strnchr+0x90/0xd0 [ 460.008114][ T7095] strnchr+0x90/0xd0 [ 460.012382][ T7095] bpf_bprintf_prepare+0x1c2/0x23c0 [ 460.017819][ T7095] bpf_trace_printk+0xec/0x3e0 [ 460.022980][ T7095] ___bpf_prog_run+0x13fe/0xe0f0 [ 460.028139][ T7095] __bpf_prog_run288+0xb5/0xe0 [ 460.033254][ T7095] bpf_test_run+0x43e/0xc30 [ 460.038085][ T7095] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 460.043897][ T7095] bpf_prog_test_run+0x6b7/0xad0 [ 460.049039][ T7095] __sys_bpf+0x6aa/0xd90 [ 460.053595][ T7095] __x64_sys_bpf+0xa0/0xe0 [ 460.058175][ T7095] do_syscall_64+0xd5/0x1f0 [ 460.063090][ T7095] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 460.069234][ T7095] [ 460.071792][ T7095] Local variable stack created at: [ 460.077001][ T7095] __bpf_prog_run288+0x45/0xe0 [ 460.082085][ T7095] bpf_test_run+0x43e/0xc30 [ 460.086783][ T7095] [ 460.089196][ T7095] CPU: 1 PID: 7095 Comm: syz-executor.1 Not tainted 6.8.0-syzkaller-12677-g241590e5a1d1 #0 [ 460.099519][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 460.110032][ T7095] ===================================================== [ 460.117084][ T7095] Disabling lock debugging due to kernel taint [ 460.123559][ T7095] Kernel panic - not syncing: kmsan.panic set ... [ 460.130098][ T7095] CPU: 1 PID: 7095 Comm: syz-executor.1 Tainted: G B 6.8.0-syzkaller-12677-g241590e5a1d1 #0 [ 460.141755][ T7095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 460.151967][ T7095] Call Trace: [ 460.155366][ T7095] [ 460.158414][ T7095] dump_stack_lvl+0x216/0x2d0 [ 460.163298][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.169383][ T7095] dump_stack+0x1e/0x30 [ 460.173737][ T7095] panic+0x4e2/0xcd0 [ 460.177821][ T7095] ? kmsan_get_metadata+0x101/0x1d0 [ 460.183281][ T7095] kmsan_report+0x2d5/0x2e0 [ 460.188024][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.194080][ T7095] ? __change_page_attr_set_clr+0x46f3/0x55f0 [ 460.200438][ T7095] ? __msan_warning+0x95/0x120 [ 460.205427][ T7095] ? strnchr+0x90/0xd0 [ 460.209690][ T7095] ? bpf_bprintf_prepare+0x1c2/0x23c0 [ 460.215292][ T7095] ? bpf_trace_printk+0xec/0x3e0 [ 460.220447][ T7095] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 460.225758][ T7095] ? __bpf_prog_run288+0xb5/0xe0 [ 460.230892][ T7095] ? bpf_test_run+0x43e/0xc30 [ 460.235768][ T7095] ? bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 460.241534][ T7095] ? bpf_prog_test_run+0x6b7/0xad0 [ 460.246828][ T7095] ? __sys_bpf+0x6aa/0xd90 [ 460.251421][ T7095] ? __x64_sys_bpf+0xa0/0xe0 [ 460.256181][ T7095] ? do_syscall_64+0xd5/0x1f0 [ 460.261058][ T7095] ? entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 460.267347][ T7095] ? kmsan_get_metadata+0x146/0x1d0 [ 460.272783][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.278937][ T7095] ? kmsan_get_metadata+0x146/0x1d0 [ 460.284388][ T7095] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 460.290892][ T7095] ? kmsan_get_metadata+0x146/0x1d0 [ 460.296339][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.302402][ T7095] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 460.308512][ T7095] ? kmsan_get_metadata+0x146/0x1d0 [ 460.313944][ T7095] ? kmsan_get_metadata+0x146/0x1d0 [ 460.319383][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.325450][ T7095] __msan_warning+0x95/0x120 [ 460.330288][ T7095] strnchr+0x90/0xd0 [ 460.334397][ T7095] bpf_bprintf_prepare+0x1c2/0x23c0 [ 460.339842][ T7095] ? kmsan_get_metadata+0x146/0x1d0 [ 460.345286][ T7095] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 460.351785][ T7095] ? __msan_memcpy+0x108/0x1c0 [ 460.356778][ T7095] bpf_trace_printk+0xec/0x3e0 [ 460.361765][ T7095] ? kmsan_get_metadata+0x146/0x1d0 [ 460.367215][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.373288][ T7095] ___bpf_prog_run+0x13fe/0xe0f0 [ 460.378434][ T7095] ? kmsan_get_metadata+0x146/0x1d0 [ 460.383905][ T7095] __bpf_prog_run288+0xb5/0xe0 [ 460.388890][ T7095] ? kmsan_get_metadata+0x146/0x1d0 13:25:45 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x40086602, &(0x7f0000000040)) [ 460.394334][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.400398][ T7095] ? ktime_get+0x381/0x470 [ 460.405073][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.411144][ T7095] ? __pfx___bpf_prog_run288+0x10/0x10 [ 460.416842][ T7095] bpf_test_run+0x43e/0xc30 [ 460.421559][ T7095] ? bpf_test_run+0x388/0xc30 [ 460.426471][ T7095] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 460.432547][ T7095] bpf_prog_test_run_xdp+0xeaa/0x1a40 [ 460.438186][ T7095] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 460.444225][ T7095] bpf_prog_test_run+0x6b7/0xad0 [ 460.449382][ T7095] __sys_bpf+0x6aa/0xd90 [ 460.453818][ T7095] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 460.460127][ T7095] __x64_sys_bpf+0xa0/0xe0 [ 460.464732][ T7095] do_syscall_64+0xd5/0x1f0 [ 460.469431][ T7095] entry_SYSCALL_64_after_hwframe+0x6d/0x75 [ 460.475517][ T7095] RIP: 0033:0x7f869427dda9 [ 460.480065][ T7095] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 460.499860][ T7095] RSP: 002b:00007f869507d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 460.508449][ T7095] RAX: ffffffffffffffda RBX: 00007f86943abf80 RCX: 00007f869427dda9 [ 460.516568][ T7095] RDX: 0000000000000048 RSI: 00000000200000c0 RDI: 000000000000000a [ 460.524685][ T7095] RBP: 00007f86942ca47a R08: 0000000000000000 R09: 0000000000000000 [ 460.532802][ T7095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 460.540915][ T7095] R13: 000000000000000b R14: 00007f86943abf80 R15: 00007fff70656eb8 [ 460.549054][ T7095] [ 460.552430][ T7095] Kernel Offset: disabled [ 460.556807][ T7095] Rebooting in 86400 seconds..