last executing test programs: 22m14.75662405s ago: executing program 2 (id=1842): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) sched_setparam(r0, &(0x7f0000000100)) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb5, 0x0, 0x5, 0x1000}, &(0x7f0000000340)=0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x3, r3, 0x0, 0x0, 0x0, 0x80000}) io_uring_enter(r4, 0x3516, 0x3e44, 0x8, 0x0, 0x0) 22m10.437192902s ago: executing program 2 (id=1854): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = fsopen(0x0, 0x0) fsmount(r1, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) mount$overlay(0x0, 0x0, 0x0, 0x1001090, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r2, 0xffffffffffffffff}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r4}, 0xc) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, 0x0, 0xc081) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) 22m9.968073714s ago: executing program 2 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x2, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x600, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 22m4.506456016s ago: executing program 2 (id=1865): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xff2e) r1 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x79af, 0x80, 0x8010, 0x400250}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(r1, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) 22m3.265525871s ago: executing program 2 (id=1870): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffef}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f00000006c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x28, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0x700}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) 22m1.668645391s ago: executing program 2 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 21m46.553370661s ago: executing program 32 (id=1873): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x200000a, 0x13, r0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) 23.779531343s ago: executing program 0 (id=4693): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 22.842131573s ago: executing program 0 (id=4695): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_socket_connect_nvme_tcp() recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/117, 0x75}], 0x6}, 0x40010040) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) syz_usb_disconnect(r3) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000400)=0x1f) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$printer(r6, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) 17.767267307s ago: executing program 0 (id=4703): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x1a1) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d) write$dsp(r3, &(0x7f0000000200), 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={[{'lock'}]}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f00000000c0)={0x20, 0xb, 0x5, {0x5, 0x31, "a9387a"}}, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000500)={0x34, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x1}}) close_range(r1, 0xffffffffffffffff, 0x0) 15.589594271s ago: executing program 5 (id=4706): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 14.747408664s ago: executing program 3 (id=4708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 14.176999751s ago: executing program 5 (id=4709): socketpair$unix(0x1, 0x4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x10, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x94}, 0x40010) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r1, &(0x7f0000000240)={0x24, @short={0x2, 0x1, 0xaaa0}}, 0x14) writev(r1, &(0x7f0000000180), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_dev$radio(&(0x7f00000000c0), 0x0, 0x2) preadv2(r5, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 13.090437826s ago: executing program 0 (id=4712): syz_usb_connect(0x931df8e112793e69, 0x24, &(0x7f0000001280)=ANY=[], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x0, 0x0}, {0x0, 0x0}, {0x7, &(0x7f0000000300)=@string={0x7, 0x3, "3c1ca8fd8a"}}, {0x0, 0x0}]}) syz_open_dev$I2C(0x0, 0x1, 0x402) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}}, 0x20}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240), &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0), 0x0}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[0x0], &(0x7f0000000200), &(0x7f0000000580)=[0x0], &(0x7f0000000040)}) keyctl$set_reqkey_keyring(0xe, 0x3) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r6, 0xee01, 0x0) keyctl$setperm(0x5, r6, 0x30925) 12.8648777s ago: executing program 3 (id=4713): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 12.066907877s ago: executing program 4 (id=4714): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 11.917869146s ago: executing program 5 (id=4716): syz_usb_connect(0x931df8e112793e69, 0x24, &(0x7f0000001280)=ANY=[], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f00000004c0)=@string={0x2}}, {0x0, 0x0}, {0x0, 0x0}, {0x11, &(0x7f0000000300)=@string={0x11, 0x3, "3c1ca8fd8ad153ce9fb7bc77c45a7c"}}, {0x0, 0x0}]}) syz_open_dev$I2C(0x0, 0x1, 0x402) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func_proto={0x2, 0x0, 0x0, 0x13, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000580)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0x0, 0x401}, 0x10}, 0x94) syz_io_uring_setup(0x239, 0x0, 0x0, 0x0) preadv(r4, &(0x7f0000000180)=[{0x0}], 0x1, 0x401, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r7], &(0x7f0000000200), &(0x7f0000000580)=[r6], &(0x7f0000000040)}) keyctl$set_reqkey_keyring(0xe, 0x3) r8 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$chown(0x4, r8, 0xee01, 0x0) keyctl$setperm(0x5, r8, 0x30925) 10.678859677s ago: executing program 3 (id=4717): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1c3425, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1ce0ff00070601080000000000000000000000000500010006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000680)=""/4096, 0x1000) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000404c054b0200000000000109022400010000000009040000010300000009210800000122f8040905a103"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="580000001000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="0008000007500500380012800b0001006272696467650000280002800500190002000000050017000000000008000100810000000a0014080000000000000000"], 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x0) setuid(0x0) 10.020855186s ago: executing program 4 (id=4718): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$radio(0x0, 0x0, 0x2) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 9.061980324s ago: executing program 4 (id=4719): pwritev(0xffffffffffffffff, &(0x7f0000021c40)=[{&(0x7f0000021800)}, {0x0}, {0x0}], 0x3, 0x5, 0x1b) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_emit_ethernet(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r1, 0xff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000021d40)={0x0, @in6={{0xa, 0x4e24, 0x2390, @mcast1, 0xe04}}, 0x7, 0x3}, 0x90) clock_gettime(0x0, &(0x7f0000021600)={0x0, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0xa, 0x5}, &(0x7f0000000540)) recvmmsg(0xffffffffffffffff, &(0x7f00000213c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000003b80)=""/62, 0x3e}, 0xac}, {{&(0x7f0000004140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f00000042c0)=""/249, 0xf9}, 0x9}, {{&(0x7f00000043c0)=@rc={0x1f, @none}, 0x80, 0x0}, 0x2}, {{&(0x7f0000021cc0)=@ax25={{0x3, @null}, [@rose, @default, @netrom, @netrom, @bcast, @rose, @rose, @rose]}, 0x80, &(0x7f0000004840)=[{0x0}], 0x1, &(0x7f0000004880)=""/252, 0xfc}, 0xff}, {{0x0, 0x0, &(0x7f0000021340)}, 0x400}], 0x6, 0x40, &(0x7f0000021640)={r2, r3+60000000}) semget$private(0x0, 0x1, 0x8) 9.05212669s ago: executing program 0 (id=4720): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x1a1) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d) write$dsp(r3, &(0x7f0000000200), 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f00000000c0)={0x20, 0xb, 0x5, {0x5, 0x31, "a9387a"}}, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000500)={0x34, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x1}}) close_range(r1, 0xffffffffffffffff, 0x0) 8.219074344s ago: executing program 5 (id=4721): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 8.156880443s ago: executing program 4 (id=4722): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 6.944211151s ago: executing program 5 (id=4724): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd80000000400000045"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x4) 6.828701759s ago: executing program 3 (id=4725): r0 = socket$unix(0x1, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x69) r1 = syz_open_dev$vim2m(0x0, 0x0, 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x5, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad00000000000000", 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000140)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x2}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x800}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x9000) sendmmsg$unix(r5, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9802}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write$nbd(0xffffffffffffffff, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000240)=0x1) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r8, 0xffffffffffffffff, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) recvmmsg$unix(r0, &(0x7f0000004a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10021, 0x0) 6.753068256s ago: executing program 4 (id=4726): ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000240)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff}}, './file0\x00'}) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x36}}, 0x4004815) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102384, 0x18ff0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r2, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000d455b4da00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bd1d8811cd8a942e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000041c0)={&(0x7f00000001c0)={0x50, 0x0, 0x0, {0x7, 0x29, 0x7, 0x2110029, 0x100, 0x0, 0x1, 0x57, 0x0, 0x0, 0x80, 0x4020}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004300)="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", 0x2000, &(0x7f0000008c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x78, 0x0, 0x7, {0xf, 0xcbff, 0x0, {0x5, 0x5, 0x3, 0x6c, 0x7, 0x6, 0x1, 0x6, 0x101, 0x4000, 0xfffffffe, 0xffffffffffffffff, 0x0, 0x3, 0x1}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) r3 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x18000], [0x4]], '\x00', [{}, {0x0, 0x10}, {}, {0x0, 0x5, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) prctl$PR_SET_VMA(0x53564d41, 0x500, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) fcntl$addseals(r3, 0x409, 0x8) 5.364247962s ago: executing program 1 (id=4728): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$inet6_sctp(0xa, 0x801, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 5.157254498s ago: executing program 0 (id=4729): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_io_uring_setup(0x7d, &(0x7f0000000080)={0x0, 0x86f7, 0x2000}, &(0x7f0000000300), &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000200)={0x0, 0x80000, 0x0, 0x0, 0x20, 0x19, 0xffffffff}) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007f9, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000000700000002a0e83dd80000000400000045"], 0x87) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000003a00000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet6(0x10, 0x3, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r6}, 0x10) sendto$inet6(r5, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x4) 4.405270549s ago: executing program 1 (id=4730): bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$radio(0x0, 0x0, 0x2) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000700)=""/4096, 0x1000}], 0x1, 0x0, 0x0, 0x0) 4.10155083s ago: executing program 4 (id=4731): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000380)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x8, "48b603de"}]}}, 0x0}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socketpair$unix(0x1, 0x3, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) open(0x0, 0x0, 0x1a1) r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r3 = fcntl$dupfd(r2, 0x0, r2) write$binfmt_script(r3, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000001b00), 0xfffffd9d) write$dsp(r3, &(0x7f0000000200), 0x0) mknod(&(0x7f0000001b40)='./file0\x00', 0x400, 0xffffffff) mount$nfs(0x0, 0x0, 0x0, 0x0, &(0x7f0000001cc0)={[{'lock'}]}) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(0xffffffffffffffff, &(0x7f0000000100)={0x14, &(0x7f00000000c0)={0x20, 0xb, 0x5, {0x5, 0x31, "a9387a"}}, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}}, &(0x7f0000000500)={0x34, 0x0, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x1}, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x1, 0x8}, &(0x7f00000004c0)={0x20, 0x0, 0x1, 0x1}}) close_range(r1, 0xffffffffffffffff, 0x0) 3.381426658s ago: executing program 1 (id=4732): pwritev(0xffffffffffffffff, &(0x7f0000021c40)=[{&(0x7f0000021800)}, {0x0}, {0x0}], 0x3, 0x5, 0x1b) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) syz_emit_ethernet(0x1e, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x114, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r1 = syz_open_procfs(0x0, &(0x7f0000002140)='fdinfo\x00') lseek(r1, 0xff, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000021d40)={0x0, @in6={{0xa, 0x4e24, 0x2390, @mcast1, 0xe04}}, 0x7, 0x3}, 0x90) clock_gettime(0x0, &(0x7f0000021600)={0x0, 0x0}) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x400000001, &(0x7f0000000300), 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, 0x0, 0x0) prlimit64(0x0, 0xf, &(0x7f0000000380)={0xa, 0x5}, &(0x7f0000000540)) recvmmsg(0xffffffffffffffff, &(0x7f00000213c0)=[{{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000003b00), 0x0, &(0x7f0000003b80)=""/62, 0x3e}, 0xac}, {{&(0x7f0000004140)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, 0x0, 0x0, &(0x7f00000042c0)=""/249, 0xf9}, 0x9}, {{&(0x7f00000043c0)=@rc={0x1f, @none}, 0x80, 0x0}, 0x2}, {{&(0x7f0000021cc0)=@ax25={{0x3, @null}, [@rose, @default, @netrom, @netrom, @bcast, @rose, @rose, @rose]}, 0x80, &(0x7f0000004840)=[{0x0}], 0x1, &(0x7f0000004880)=""/252, 0xfc}, 0xff}, {{0x0, 0x0, &(0x7f0000021340)}, 0x400}], 0x6, 0x40, &(0x7f0000021640)={r2, r3+60000000}) semget$private(0x0, 0x1, 0x8) 2.719056101s ago: executing program 3 (id=4733): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace$ARCH_SHSTK_ENABLE(0x1e, r1, 0x0, 0x5001) socket$inet6_sctp(0xa, 0x801, 0x84) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) 2.716636525s ago: executing program 1 (id=4734): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) dup(0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x4000000000009, 0x8, 0x0, 0x3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1300000010000000020000000000000000010000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb6}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) request_key(&(0x7f00000001c0)='blacklist\x00', 0x0, &(0x7f0000000240)='\x05]!*,.)!\xfb&\\#\x00', 0xfffffffffffffff8) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0) rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file2\x00') socket$inet(0x2, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x42002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000040)={0xc}) ioctl$IOMMU_IOAS_COPY$syz(r4, 0x3b83, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x2, 0x100000000, 0x9c7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @multicast2, @dev}, 0x0) socket$kcm(0x2c, 0x3, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.776268332s ago: executing program 3 (id=4735): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_socket_connect_nvme_tcp() recvmsg(r0, &(0x7f0000000800)={&(0x7f0000000280)=@un=@abs, 0x80, &(0x7f0000000780)=[{&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000480)=""/213, 0xd5}, {&(0x7f0000000580)=""/119, 0x77}, {&(0x7f0000000600)=""/237, 0xed}, {&(0x7f0000000700)=""/117, 0x75}], 0x6}, 0x40010040) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) syz_usb_disconnect(r3) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000400)=0x1f) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$printer(r6, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000000)={0x27}, 0x74) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) 1.258863198s ago: executing program 1 (id=4736): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$rxrpc(0x21, 0x2, 0x2) listen(r2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0xffffffff80000201, 0x0, 0x0) shutdown(r1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCGSOFTCAR(r3, 0x5416, &(0x7f0000001100)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x28, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {}, {0x0, 0x0, 0x0, 0x2, 0x0, 0x100000}, {}, {0xfffffffd, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) 1.197537101s ago: executing program 5 (id=4737): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_socket_connect_nvme_tcp() recvmsg(r0, 0x0, 0x40010040) socket$nl_crypto(0x10, 0x3, 0x15) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x40000) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg2\x00'}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r3 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/188, 0xbc) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r5, 0x0, 0xd}, 0x18) syz_usb_disconnect(r3) ioctl$FS_IOC_SETFLAGS(r2, 0x40046f41, &(0x7f0000000400)=0x1f) syz_genetlink_get_family_id$gtp(&(0x7f0000000880), r1) r6 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x0, 0x71, 0x6c, 0x75}}]}}]}}, 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316844268cb89e14f00800", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_control_io$printer(r6, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r8 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$bt_hci(r8, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x81) 0s ago: executing program 1 (id=4738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x801, 0x84) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100), 0x24, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): [ C1] hrtimer: interrupt took 27956 ns [ 1634.903416][T22963] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4273'. [ 1634.922140][T22963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1635.811233][ T2190] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1635.995904][ T2190] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1636.095447][ T2190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1636.109172][ T2190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1636.120266][ T2190] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1636.133386][ T2190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1636.180689][ T2190] usb 2-1: config 0 descriptor?? [ 1636.753080][ T2190] sony 0003:054C:024B.002C: unexpected long global item [ 1636.760679][ T2190] sony 0003:054C:024B.002C: parse failed [ 1636.838886][ T2190] sony 0003:054C:024B.002C: probe with driver sony failed with error -22 [ 1638.012002][ T2190] usb 2-1: USB disconnect, device number 34 [ 1638.083691][T22985] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4276'. [ 1638.272028][T22989] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4280'. [ 1641.059037][T23016] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4285'. [ 1641.078511][T23016] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1641.254263][T23018] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4286'. [ 1641.290497][T23018] syz.5.4286 (23018): drop_caches: 2 [ 1641.601359][T23025] fuse: Bad value for 'fd' [ 1641.815648][T23026] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4290'. [ 1641.830234][T23026] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1643.174973][T23043] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4294'. [ 1645.231253][T16586] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1645.320653][T23059] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4298'. [ 1645.346751][T23059] syz.0.4298 (23059): drop_caches: 2 [ 1645.691237][T16586] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1645.741253][T16586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1645.954312][T16586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1645.981069][T16586] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1645.993629][T16586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1646.214433][T23071] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4301'. [ 1646.215164][T16586] usb 5-1: config 0 descriptor?? [ 1647.109368][T16586] sony 0003:054C:024B.002D: unexpected long global item [ 1647.324875][T16586] sony 0003:054C:024B.002D: parse failed [ 1647.451504][T16586] sony 0003:054C:024B.002D: probe with driver sony failed with error -22 [ 1648.121129][ T2190] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1648.341056][T16586] usb 5-1: USB disconnect, device number 43 [ 1648.583477][ T2190] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1648.597694][ T2190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1648.702677][ T2190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1648.753658][ T2190] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1648.769307][ T2190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.814724][ T2190] usb 6-1: config 0 descriptor?? [ 1649.258672][ T2190] sony 0003:054C:024B.002E: unexpected long global item [ 1649.827141][ T2190] sony 0003:054C:024B.002E: parse failed [ 1649.842248][ T2190] sony 0003:054C:024B.002E: probe with driver sony failed with error -22 [ 1650.035517][T21342] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1650.325200][T21342] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1650.468128][T21342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1650.504398][T21342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1650.560202][T21342] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1650.598443][T21342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1650.671143][ T2190] usb 6-1: USB disconnect, device number 29 [ 1650.697473][T21342] usb 4-1: config 0 descriptor?? [ 1651.099093][T23123] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4311'. [ 1651.124943][T23123] syz.4.4311 (23123): drop_caches: 2 [ 1651.157782][T21342] sony 0003:054C:024B.002F: unexpected long global item [ 1651.168905][T21342] sony 0003:054C:024B.002F: parse failed [ 1651.176207][T21342] sony 0003:054C:024B.002F: probe with driver sony failed with error -22 [ 1651.203506][T23125] fuse: Unknown parameter '0x0000000000000003' [ 1652.554203][T21342] usb 4-1: USB disconnect, device number 46 [ 1652.556295][T23139] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4317'. [ 1652.599656][T23139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1653.489519][T23152] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4321'. [ 1653.513493][T23152] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1655.518244][T23159] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4318'. [ 1655.641510][T23174] fuse: Unknown parameter '0x0000000000000003' [ 1656.194005][T23175] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4323'. [ 1657.168287][T23183] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4328'. [ 1657.721234][T16586] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1658.071049][T16586] usb 5-1: Using ep0 maxpacket: 32 [ 1658.087901][T16586] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1658.125003][T16586] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1658.159012][T16586] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1658.189678][T16586] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1658.216881][T16586] usb 5-1: Product: syz [ 1658.224134][T16586] usb 5-1: Manufacturer: syz [ 1658.229824][T16586] usb 5-1: SerialNumber: syz [ 1658.246662][T16586] usb 5-1: config 0 descriptor?? [ 1658.947795][T21342] usb 5-1: USB disconnect, device number 44 [ 1658.991135][T16586] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1659.153490][T16586] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1659.176303][T16586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.189859][T16586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1659.206531][T16586] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1659.233619][T16586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1659.247119][T16586] usb 6-1: config 0 descriptor?? [ 1660.413898][T21342] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1661.057601][T16586] sony 0003:054C:024B.0030: unexpected long global item [ 1661.071994][T16586] sony 0003:054C:024B.0030: parse failed [ 1661.077786][T16586] sony 0003:054C:024B.0030: probe with driver sony failed with error -22 [ 1661.967786][ T2190] usb 6-1: USB disconnect, device number 30 [ 1662.507463][T23216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4337'. [ 1662.871551][T23216] syz.1.4337 (23216): drop_caches: 2 [ 1663.121062][ T2190] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1663.338600][ T2190] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1663.626450][ T2190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1663.653934][ T2190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1663.666874][ T2190] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1663.677700][ T2190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1663.690003][ T2190] usb 6-1: config 0 descriptor?? [ 1664.304214][T23230] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4339'. [ 1664.525790][ T2190] sony 0003:054C:024B.0031: unexpected long global item [ 1664.541196][ T2190] sony 0003:054C:024B.0031: parse failed [ 1664.547190][ T2190] sony 0003:054C:024B.0031: probe with driver sony failed with error -22 [ 1665.912733][ T2190] usb 6-1: USB disconnect, device number 31 [ 1666.331527][T23256] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4347'. [ 1666.350262][T23256] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1667.201117][ T2190] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1667.361953][T23264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4348'. [ 1667.465061][ T2190] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1667.606688][T23264] syz.0.4348 (23264): drop_caches: 2 [ 1667.640454][ T2190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1667.655572][ T2190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1667.666100][ T2190] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1667.667833][T23271] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4350'. [ 1667.677144][ T2190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1667.707402][ T2190] usb 6-1: config 0 descriptor?? [ 1668.380720][ T2190] sony 0003:054C:024B.0032: unexpected long global item [ 1668.432579][ T2190] sony 0003:054C:024B.0032: parse failed [ 1668.449097][ T2190] sony 0003:054C:024B.0032: probe with driver sony failed with error -22 [ 1668.625160][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1668.632090][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.674255][ T2190] usb 6-1: USB disconnect, device number 32 [ 1670.855316][T23302] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4357'. [ 1670.879200][T23302] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1671.389094][T23293] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4352'. [ 1673.625151][T23333] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4364'. [ 1673.644963][T23333] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1674.191898][ T8639] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1674.359831][ T8639] usb 4-1: Using ep0 maxpacket: 32 [ 1674.488608][ T8639] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1674.505051][ T8639] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1674.956067][ T8639] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1674.964565][ T8639] usb 4-1: Product: syz [ 1674.968737][ T8639] usb 4-1: Manufacturer: syz [ 1674.973716][ T8639] usb 4-1: SerialNumber: syz [ 1674.996259][ T8639] usb 4-1: config 0 descriptor?? [ 1675.015625][T23336] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1675.081860][T16586] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1675.486349][T16586] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1675.533537][T16586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1675.557955][T16586] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1675.568540][T16586] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1675.577847][T16586] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.602051][T16586] usb 1-1: config 0 descriptor?? [ 1675.624156][ T8639] usb 4-1: USB disconnect, device number 47 [ 1676.011120][ T5851] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1676.023666][T16586] sony 0003:054C:024B.0033: unexpected long global item [ 1676.039752][T16586] sony 0003:054C:024B.0033: parse failed [ 1676.046891][T16586] sony 0003:054C:024B.0033: probe with driver sony failed with error -22 [ 1676.182989][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1676.194701][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.205752][ T8639] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1676.213408][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1676.238370][ T5851] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1676.248217][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.257953][ T5851] usb 2-1: config 0 descriptor?? [ 1676.301373][ T2190] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1676.401087][ T8639] usb 4-1: Using ep0 maxpacket: 32 [ 1676.408065][ T8639] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1676.420445][ T8639] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1676.430219][ T8639] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1676.438452][ T8639] usb 4-1: Product: syz [ 1676.442767][ T8639] usb 4-1: Manufacturer: syz [ 1676.447400][ T8639] usb 4-1: SerialNumber: syz [ 1676.454134][ T8639] usb 4-1: config 0 descriptor?? [ 1676.459991][T23336] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1676.471313][ T2190] usb 5-1: Using ep0 maxpacket: 32 [ 1676.493977][ T2190] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1676.514764][ T2190] usb 5-1: config 0 has no interfaces? [ 1676.526702][ T2190] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1676.551311][ T2190] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1676.559494][ T2190] usb 5-1: Product: syz [ 1676.576772][ T2190] usb 5-1: Manufacturer: syz [ 1676.581819][ T2190] usb 5-1: SerialNumber: syz [ 1676.724268][ T2190] usb 5-1: config 0 descriptor?? [ 1676.753660][ T5851] sony 0003:054C:024B.0034: unexpected long global item [ 1676.761881][ T5851] sony 0003:054C:024B.0034: parse failed [ 1676.769056][ T5851] sony 0003:054C:024B.0034: probe with driver sony failed with error -22 [ 1677.316095][ T5851] usb 1-1: USB disconnect, device number 49 [ 1677.358202][ T2190] usb 5-1: USB disconnect, device number 46 [ 1677.975619][ T5851] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1679.179214][T21342] usb 4-1: USB disconnect, device number 48 [ 1679.249377][ T8639] usb 2-1: USB disconnect, device number 35 [ 1679.342634][ T2190] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1679.466462][T23379] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4375'. [ 1679.482982][T23379] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1679.549703][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1679.577910][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1679.631607][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1679.672906][ T5851] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1679.971282][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.008507][ T5851] usb 1-1: config 0 descriptor?? [ 1680.711342][ T5933] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1680.926840][ T5851] sony 0003:054C:024B.0035: unexpected long global item [ 1680.935093][ T5851] sony 0003:054C:024B.0035: parse failed [ 1680.942671][ T5851] sony 0003:054C:024B.0035: probe with driver sony failed with error -22 [ 1681.142996][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1681.159135][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1681.174469][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1681.188744][ T5933] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1681.200016][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.219795][ T5933] usb 2-1: config 0 descriptor?? [ 1681.705251][ T5933] sony 0003:054C:024B.0036: unexpected long global item [ 1681.739436][ T5933] sony 0003:054C:024B.0036: parse failed [ 1681.991445][ T2190] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1682.050782][ T5933] sony 0003:054C:024B.0036: probe with driver sony failed with error -22 [ 1682.062942][T21342] usb 1-1: USB disconnect, device number 50 [ 1682.213437][ T2190] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1682.237852][ T2190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.256967][ T2190] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1682.270452][ T2190] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1682.280517][ T2190] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.328295][ T2190] usb 6-1: config 0 descriptor?? [ 1682.791650][ T2190] sony 0003:054C:024B.0037: unexpected long global item [ 1682.815187][ T2190] sony 0003:054C:024B.0037: parse failed [ 1682.830156][ T2190] sony 0003:054C:024B.0037: probe with driver sony failed with error -22 [ 1683.032921][ T5851] usb 2-1: USB disconnect, device number 36 [ 1683.676035][ T2190] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1683.853798][ T2190] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1683.865677][ T2190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1683.877146][ T2190] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1683.906388][ T2190] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1683.919816][ T2190] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.941614][ T2190] usb 4-1: config 0 descriptor?? [ 1684.478524][ T2190] sony 0003:054C:024B.0038: unexpected long global item [ 1684.491805][T23417] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4384'. [ 1684.601568][ T5851] usb 6-1: USB disconnect, device number 33 [ 1684.612945][ T2190] sony 0003:054C:024B.0038: parse failed [ 1684.637711][ T2190] sony 0003:054C:024B.0038: probe with driver sony failed with error -22 [ 1685.930249][ T2190] usb 4-1: USB disconnect, device number 49 [ 1685.963207][ T5851] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1686.065732][T23431] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4388'. [ 1686.088153][T23431] syz.4.4388 (23431): drop_caches: 2 [ 1686.132867][ T5851] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1686.147435][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1686.160133][ T5851] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1686.171357][ T5851] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1686.183002][ T5851] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1686.199758][ T5851] usb 6-1: config 0 descriptor?? [ 1686.339905][ T2190] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1686.524172][ T2190] usb 4-1: Using ep0 maxpacket: 32 [ 1686.552315][ T2190] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1686.620796][ T2190] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1686.638975][ T5851] sony 0003:054C:024B.0039: unexpected long global item [ 1686.649234][ T2190] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1686.729967][ T5851] sony 0003:054C:024B.0039: parse failed [ 1686.737118][ T5851] sony 0003:054C:024B.0039: probe with driver sony failed with error -22 [ 1686.756549][ T2190] usb 4-1: Product: syz [ 1686.758516][T23439] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4391'. [ 1686.786317][ T2190] usb 4-1: Manufacturer: syz [ 1686.790944][ T2190] usb 4-1: SerialNumber: syz [ 1686.818860][ T2190] usb 4-1: config 0 descriptor?? [ 1687.008822][T23429] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1687.015187][T23442] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4392'. [ 1688.211149][ T5851] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1688.399319][T16586] usb 4-1: USB disconnect, device number 50 [ 1688.451224][ T2190] usb 6-1: USB disconnect, device number 34 [ 1688.613268][ T5851] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1688.673845][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.777812][ T5851] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.021573][ T5851] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1689.051099][ T5851] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.100945][T16586] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1689.132141][ T5851] usb 1-1: config 0 descriptor?? [ 1689.261130][T16586] usb 4-1: Using ep0 maxpacket: 32 [ 1689.277004][T16586] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1689.318575][T16586] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1689.459685][T16586] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1689.588699][ T5851] sony 0003:054C:024B.003A: unexpected long global item [ 1689.701808][ T5851] sony 0003:054C:024B.003A: parse failed [ 1689.717969][T16586] usb 4-1: Product: syz [ 1689.736457][T16586] usb 4-1: Manufacturer: syz [ 1689.746573][ T5851] sony 0003:054C:024B.003A: probe with driver sony failed with error -22 [ 1689.763742][T16586] usb 4-1: SerialNumber: syz [ 1689.799823][T16586] usb 4-1: config 0 descriptor?? [ 1689.818160][T16586] usb 4-1: can't set config #0, error -71 [ 1689.841604][T16586] usb 4-1: USB disconnect, device number 51 [ 1690.315960][T23472] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4397'. [ 1690.369707][T23472] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1691.291159][ T5851] usb 1-1: USB disconnect, device number 51 [ 1692.028145][ T8639] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1692.295966][ T8639] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1692.387814][ T8639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1692.398859][ T8639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1692.409017][ T8639] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1692.418323][ T8639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1692.429663][ T8639] usb 6-1: config 0 descriptor?? [ 1693.008055][ T8639] sony 0003:054C:024B.003B: unexpected long global item [ 1693.021591][ T5851] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1693.142234][ T8639] sony 0003:054C:024B.003B: parse failed [ 1693.285350][ T8639] sony 0003:054C:024B.003B: probe with driver sony failed with error -22 [ 1693.672682][ T5851] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1693.801151][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1693.812299][ T5851] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1693.822448][ T5851] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1693.831606][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.843113][ T5851] usb 4-1: config 0 descriptor?? [ 1694.173177][ T2190] usb 6-1: USB disconnect, device number 35 [ 1694.294304][ T5851] sony 0003:054C:024B.003C: unexpected long global item [ 1694.310002][ T5851] sony 0003:054C:024B.003C: parse failed [ 1694.316670][ T5851] sony 0003:054C:024B.003C: probe with driver sony failed with error -22 [ 1695.242815][T21342] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1695.286626][T23514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4409'. [ 1695.484758][T21342] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1695.598861][ T2190] usb 4-1: USB disconnect, device number 52 [ 1696.072755][T21342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1696.088819][T21342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1696.111412][T21342] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1696.120494][T21342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1696.132116][T21342] usb 2-1: config 0 descriptor?? [ 1696.635044][T21342] sony 0003:054C:024B.003D: unexpected long global item [ 1696.650707][T21342] sony 0003:054C:024B.003D: parse failed [ 1696.673513][T21342] sony 0003:054C:024B.003D: probe with driver sony failed with error -22 [ 1698.256665][ T5851] usb 2-1: USB disconnect, device number 37 [ 1698.311086][T21342] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1698.495717][T21342] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1698.534368][T21342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1698.567806][T21342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1698.621693][T21342] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1698.665973][T21342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.698753][T21342] usb 4-1: config 0 descriptor?? [ 1699.321360][ T5851] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1699.338990][T21342] sony 0003:054C:024B.003E: unexpected long global item [ 1699.356585][T21342] sony 0003:054C:024B.003E: parse failed [ 1699.411314][T21342] sony 0003:054C:024B.003E: probe with driver sony failed with error -22 [ 1699.703202][ T5851] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1699.716200][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.727572][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.104995][ T5851] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1700.115532][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.130848][ T5851] usb 2-1: config 0 descriptor?? [ 1700.309683][T23559] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4419'. [ 1700.332304][T23559] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1700.380679][ T8639] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1700.598178][ T5851] sony 0003:054C:024B.003F: unexpected long global item [ 1700.610918][T16586] usb 4-1: USB disconnect, device number 53 [ 1700.623686][ T5851] sony 0003:054C:024B.003F: parse failed [ 1700.754565][ T5851] sony 0003:054C:024B.003F: probe with driver sony failed with error -22 [ 1700.842903][ T8639] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1700.856992][ T8639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1700.874899][ T8639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.886116][ T8639] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1700.985977][ T8639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.005191][ T8639] usb 6-1: config 0 descriptor?? [ 1701.024575][T23564] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4421'. [ 1701.533035][ T8639] sony 0003:054C:024B.0040: unexpected long global item [ 1701.857626][T16586] usb 2-1: USB disconnect, device number 38 [ 1702.830323][ T8639] sony 0003:054C:024B.0040: parse failed [ 1703.079108][T23570] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4422'. [ 1703.105777][T23570] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1703.209479][ T8639] sony 0003:054C:024B.0040: probe with driver sony failed with error -22 [ 1704.017809][T21342] usb 6-1: USB disconnect, device number 36 [ 1704.042751][T23580] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4424'. [ 1704.963918][T23589] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4427'. [ 1705.031526][T23589] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1705.167841][T21342] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1705.342831][T21342] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1705.516587][T21342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.528732][T21342] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.538828][T21342] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1705.548169][T21342] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.558970][T21342] usb 2-1: config 0 descriptor?? [ 1705.671068][T16586] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1705.822652][T16586] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1705.834354][T16586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.845809][T16586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.857684][T16586] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1705.866851][T16586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.877389][T16586] usb 6-1: config 0 descriptor?? [ 1706.014010][T21342] sony 0003:054C:024B.0041: unexpected long global item [ 1706.024305][T21342] sony 0003:054C:024B.0041: parse failed [ 1706.030152][T21342] sony 0003:054C:024B.0041: probe with driver sony failed with error -22 [ 1706.296570][T16586] sony 0003:054C:024B.0042: unexpected long global item [ 1706.305461][T16586] sony 0003:054C:024B.0042: parse failed [ 1706.312195][T16586] sony 0003:054C:024B.0042: probe with driver sony failed with error -22 [ 1707.141212][T23605] netlink: 6 bytes leftover after parsing attributes in process `syz.0.4430'. [ 1707.163734][T23605] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1707.501439][T21323] usb 2-1: USB disconnect, device number 39 [ 1708.121233][T21323] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1708.401325][T21342] usb 6-1: USB disconnect, device number 37 [ 1708.623161][T21323] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1708.772212][T23615] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4434'. [ 1708.773958][T21323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.804698][T21323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1709.479166][T21323] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1709.488298][T21323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1709.512659][T21323] usb 4-1: config 0 descriptor?? [ 1710.253498][T21323] sony 0003:054C:024B.0043: unexpected long global item [ 1710.261232][T21323] sony 0003:054C:024B.0043: parse failed [ 1710.267008][T21323] sony 0003:054C:024B.0043: probe with driver sony failed with error -22 [ 1711.460628][T21342] usb 4-1: USB disconnect, device number 54 [ 1714.082787][T23667] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4446'. [ 1714.462443][T21323] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1714.893324][T21323] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1714.974470][T21323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1715.065498][T21323] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1715.081261][T21323] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1715.119143][T21323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1715.193489][T21323] usb 6-1: config 0 descriptor?? [ 1715.384284][T23680] fuse: Bad value for 'fd' [ 1715.648680][T21323] sony 0003:054C:024B.0044: unexpected long global item [ 1715.662002][T21323] sony 0003:054C:024B.0044: parse failed [ 1715.675110][T21323] sony 0003:054C:024B.0044: probe with driver sony failed with error -22 [ 1715.703939][T23682] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4450'. [ 1716.891227][T21342] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1716.958277][ T2190] usb 6-1: USB disconnect, device number 38 [ 1717.291226][T21342] usb 4-1: Using ep0 maxpacket: 32 [ 1717.307000][T21342] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1717.342895][T21342] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1717.352006][T21342] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1717.360276][T21342] usb 4-1: Product: syz [ 1717.366035][T21342] usb 4-1: Manufacturer: syz [ 1717.370628][T21342] usb 4-1: SerialNumber: syz [ 1717.491762][T23703] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4455'. [ 1717.510590][T23703] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1717.681160][T23699] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4452'. [ 1718.216778][T21342] usb 4-1: config 0 descriptor?? [ 1718.291713][T23695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1718.914971][T16586] usb 4-1: USB disconnect, device number 55 [ 1718.961244][T21323] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1719.181340][T21323] usb 5-1: Using ep0 maxpacket: 32 [ 1719.188244][T21323] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1719.403991][T21323] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1719.421123][T16586] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1719.435274][T21323] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1719.871072][T21323] usb 5-1: Product: syz [ 1719.892954][T21323] usb 5-1: Manufacturer: syz [ 1719.941577][T21323] usb 5-1: SerialNumber: syz [ 1719.949696][T21323] usb 5-1: config 0 descriptor?? [ 1719.955186][T16586] usb 4-1: Using ep0 maxpacket: 32 [ 1719.963721][T23713] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1719.975693][T16586] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1719.994837][T16586] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1720.003985][T23571] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1720.016706][T16586] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1720.056969][T16586] usb 4-1: Product: syz [ 1720.071382][T16586] usb 4-1: Manufacturer: syz [ 1720.081749][T16586] usb 4-1: SerialNumber: syz [ 1720.115249][T16586] usb 4-1: config 0 descriptor?? [ 1720.123578][T23695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1720.147230][T16586] usb 4-1: can't set config #0, error -71 [ 1720.165241][T23571] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1720.306292][T16586] usb 4-1: USB disconnect, device number 56 [ 1720.334349][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1720.353528][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1720.364610][T23571] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1720.376677][T23571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1720.492874][T21323] usb 5-1: USB disconnect, device number 48 [ 1720.534919][T23733] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4462'. [ 1721.073758][T23571] usb 1-1: config 0 descriptor?? [ 1721.311238][T21342] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1721.603188][T21342] usb 5-1: Using ep0 maxpacket: 32 [ 1721.619780][T23571] sony 0003:054C:024B.0045: unexpected long global item [ 1721.628163][T23571] sony 0003:054C:024B.0045: parse failed [ 1721.739016][T23571] sony 0003:054C:024B.0045: probe with driver sony failed with error -22 [ 1721.762622][T21342] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1721.778326][T21342] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1721.792767][T21342] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1721.803442][T21342] usb 5-1: Product: syz [ 1721.807672][T21342] usb 5-1: Manufacturer: syz [ 1722.217039][T21342] usb 5-1: SerialNumber: syz [ 1722.247776][T21342] usb 5-1: config 0 descriptor?? [ 1722.271196][T21342] usb 5-1: can't set config #0, error -71 [ 1722.299945][T21342] usb 5-1: USB disconnect, device number 49 [ 1722.417237][T23745] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4465'. [ 1722.471519][T23745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1722.641196][T23571] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1722.851065][T23571] usb 6-1: Using ep0 maxpacket: 32 [ 1722.858011][T23571] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1722.871301][T23571] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1722.880908][T23571] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1722.889393][T23571] usb 6-1: Product: syz [ 1722.893997][T23571] usb 6-1: Manufacturer: syz [ 1722.898701][T23571] usb 6-1: SerialNumber: syz [ 1722.908196][T23571] usb 6-1: config 0 descriptor?? [ 1722.914241][T23742] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1723.035610][T23571] usb 1-1: USB disconnect, device number 52 [ 1723.795827][T21342] usb 6-1: USB disconnect, device number 39 [ 1724.395330][T21342] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1725.683817][T21342] usb 6-1: Using ep0 maxpacket: 32 [ 1725.911713][T21342] usb 6-1: device descriptor read/all, error -71 [ 1726.611156][ T2190] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1726.852959][ T2190] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1726.870045][ T2190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1726.911573][ T2190] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.001810][ T2190] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1727.081206][ T5933] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 1727.137305][ T2190] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.375831][ T2190] usb 2-1: config 0 descriptor?? [ 1727.458012][ T5933] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1727.572457][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1727.600430][ T5933] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1727.646113][ T5933] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1727.661126][ T5933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1727.687352][ T5933] usb 1-1: config 0 descriptor?? [ 1727.711087][T21342] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1727.849091][ T2190] sony 0003:054C:024B.0046: unexpected long global item [ 1727.908875][T21342] usb 5-1: Using ep0 maxpacket: 32 [ 1727.916208][ T2190] sony 0003:054C:024B.0046: parse failed [ 1727.923897][ T2190] sony 0003:054C:024B.0046: probe with driver sony failed with error -22 [ 1727.955267][T21342] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1727.967848][ T5933] usbhid 1-1:0.0: can't add hid device: -71 [ 1727.998927][ T5933] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1728.008293][T21342] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1728.020381][T21342] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1728.034994][ T5933] usb 1-1: USB disconnect, device number 53 [ 1728.042627][T21342] usb 5-1: Product: syz [ 1728.087617][T21342] usb 5-1: Manufacturer: syz [ 1728.109028][T21342] usb 5-1: SerialNumber: syz [ 1728.137523][T21342] usb 5-1: config 0 descriptor?? [ 1728.149943][T23782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1728.440214][T21342] usb 5-1: USB disconnect, device number 50 [ 1728.621106][ T5933] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1728.841046][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 1728.862349][ T5933] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1728.892377][ T5933] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1728.912782][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1728.921635][ T5933] usb 1-1: Product: syz [ 1728.925858][ T5933] usb 1-1: Manufacturer: syz [ 1728.930587][ T5933] usb 1-1: SerialNumber: syz [ 1728.939228][ T5933] usb 1-1: config 0 descriptor?? [ 1729.015655][T23794] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4476'. [ 1729.034669][T23791] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1729.147509][T21342] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1729.155292][ T5933] usb 2-1: USB disconnect, device number 40 [ 1729.321097][T21342] usb 5-1: Using ep0 maxpacket: 32 [ 1729.427598][T21342] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1729.512989][T21342] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1729.640093][T21323] usb 1-1: USB disconnect, device number 54 [ 1729.648312][T21342] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1729.659566][T21342] usb 5-1: Product: syz [ 1729.669735][T21342] usb 5-1: Manufacturer: syz [ 1729.680018][T21342] usb 5-1: SerialNumber: syz [ 1729.702889][T21342] usb 5-1: config 0 descriptor?? [ 1729.708405][T23782] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1729.771722][T23571] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1729.951059][T23571] usb 6-1: Using ep0 maxpacket: 32 [ 1729.960803][T23571] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1729.974979][T23571] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1729.988812][T23571] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1729.997796][T23571] usb 6-1: Product: syz [ 1730.002364][T23571] usb 6-1: Manufacturer: syz [ 1730.007287][T23571] usb 6-1: SerialNumber: syz [ 1730.020682][T23571] usb 6-1: config 0 descriptor?? [ 1730.026632][T23799] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1730.050060][T23571] chaoskey 6-1:0.0: Unable to register with hwrng [ 1730.065237][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.072956][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.104815][T21323] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1730.301080][T21323] usb 1-1: Using ep0 maxpacket: 32 [ 1730.463032][T21323] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1730.484010][T21323] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1730.495778][T21323] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1730.504172][T21323] usb 1-1: Product: syz [ 1730.508578][T21323] usb 1-1: Manufacturer: syz [ 1730.513391][T21323] usb 1-1: SerialNumber: syz [ 1730.618144][T21323] usb 1-1: config 0 descriptor?? [ 1730.624570][T23571] usb 6-1: USB disconnect, device number 42 [ 1730.641264][T23791] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1731.173129][T21323] chaoskey 1-1:0.0: Unable to register with hwrng [ 1731.563750][T23821] netlink: 6 bytes leftover after parsing attributes in process `syz.1.4484'. [ 1731.589775][T23821] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1731.643853][T23571] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1731.991319][T23571] usb 6-1: Using ep0 maxpacket: 32 [ 1732.001652][T23571] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1732.022295][T23571] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1732.037143][T23571] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1732.045666][T23571] usb 6-1: Product: syz [ 1732.049979][T23571] usb 6-1: Manufacturer: syz [ 1732.059329][T23571] usb 6-1: SerialNumber: syz [ 1732.061636][T21342] usb 5-1: USB disconnect, device number 51 [ 1732.096058][T23571] usb 6-1: config 0 descriptor?? [ 1732.108367][T23810] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1732.664938][T23571] usb 6-1: USB disconnect, device number 43 [ 1733.177783][T16586] usb 1-1: USB disconnect, device number 55 [ 1734.061414][T21342] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1734.317677][T21342] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1734.543565][T21342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.571098][T21342] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1734.591577][ T5933] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1734.601251][T21342] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1734.620322][T21342] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.637237][T21342] usb 6-1: config 0 descriptor?? [ 1734.823087][ T5933] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1734.838183][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.880549][T23834] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4483'. [ 1734.899745][ T5933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.176586][T21342] sony 0003:054C:024B.0047: unexpected long global item [ 1735.192382][ T5933] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1735.203624][T21342] sony 0003:054C:024B.0047: parse failed [ 1735.212231][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.220332][T21342] sony 0003:054C:024B.0047: probe with driver sony failed with error -22 [ 1735.247708][ T5933] usb 5-1: config 0 descriptor?? [ 1735.689159][ T5933] sony 0003:054C:024B.0048: unexpected long global item [ 1735.702362][ T5933] sony 0003:054C:024B.0048: parse failed [ 1735.718831][ T5933] sony 0003:054C:024B.0048: probe with driver sony failed with error -22 [ 1736.446156][T23571] usb 6-1: USB disconnect, device number 44 [ 1736.742233][T16586] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1737.105649][ T5933] usb 5-1: USB disconnect, device number 52 [ 1737.175162][T16586] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1737.230877][T16586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1737.298947][T16586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1737.466244][T16586] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1737.484646][T23881] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4496'. [ 1737.510512][T23881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1737.707060][T16586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.744901][T16586] usb 4-1: config 0 descriptor?? [ 1738.199966][T16586] sony 0003:054C:024B.0049: unexpected long global item [ 1738.345830][T16586] sony 0003:054C:024B.0049: parse failed [ 1738.355348][T16586] sony 0003:054C:024B.0049: probe with driver sony failed with error -22 [ 1739.051214][T16586] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1739.254563][T16586] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1739.271073][T16586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.282488][T16586] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.292826][T16586] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1739.302637][T16586] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.821478][ T5933] usb 4-1: USB disconnect, device number 57 [ 1739.852619][T16586] usb 6-1: config 0 descriptor?? [ 1740.424920][T16586] sony 0003:054C:024B.004A: unexpected long global item [ 1740.474000][T16586] sony 0003:054C:024B.004A: parse failed [ 1740.502143][T16586] sony 0003:054C:024B.004A: probe with driver sony failed with error -22 [ 1741.677429][T16586] usb 6-1: USB disconnect, device number 45 [ 1743.704683][T23936] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4508'. [ 1743.741097][T16586] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1743.759946][T23936] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1744.013358][T16586] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1744.037247][T16586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.082534][T16586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.099284][T16586] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1744.122424][T16586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.257546][T16586] usb 5-1: config 0 descriptor?? [ 1744.734069][T16586] sony 0003:054C:024B.004B: unexpected long global item [ 1744.745123][T16586] sony 0003:054C:024B.004B: parse failed [ 1744.821322][T16586] sony 0003:054C:024B.004B: probe with driver sony failed with error -22 [ 1745.265758][T23954] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4506'. [ 1746.001603][T16586] usb 5-1: USB disconnect, device number 53 [ 1746.081808][T23961] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4514'. [ 1746.131208][ T5933] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1746.307021][T23962] syz.4.4514 (23962): drop_caches: 2 [ 1747.122652][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1747.145123][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1747.188788][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1747.622583][ T5933] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1747.651185][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1747.684255][ T5933] usb 2-1: config 0 descriptor?? [ 1748.124039][ T5933] sony 0003:054C:024B.004C: unexpected long global item [ 1748.171625][ T5933] sony 0003:054C:024B.004C: parse failed [ 1748.313139][ T5933] sony 0003:054C:024B.004C: probe with driver sony failed with error -22 [ 1749.581125][ T5933] usb 2-1: USB disconnect, device number 41 [ 1749.671252][T16586] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1749.952856][T16586] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1749.969149][T16586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1750.239640][T16586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1750.293778][T16586] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1750.375148][T16586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.420339][T16586] usb 5-1: config 0 descriptor?? [ 1750.667173][T24002] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4524'. [ 1750.686066][T24002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1751.075927][T16586] sony 0003:054C:024B.004D: unexpected long global item [ 1751.125475][T16586] sony 0003:054C:024B.004D: parse failed [ 1751.160415][T16586] sony 0003:054C:024B.004D: probe with driver sony failed with error -22 [ 1752.171532][ T5933] usb 5-1: USB disconnect, device number 54 [ 1753.711120][T16586] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1754.112236][T16586] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1754.134664][T24030] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4530'. [ 1754.510848][T16586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.623450][T16586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.677318][T16586] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1754.713721][T24034] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4531'. [ 1754.724550][T16586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.744035][T16586] usb 2-1: config 0 descriptor?? [ 1754.988319][T24037] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4533'. [ 1755.189816][T16586] sony 0003:054C:024B.004E: unexpected long global item [ 1755.718258][T16586] sony 0003:054C:024B.004E: parse failed [ 1755.726350][T16586] sony 0003:054C:024B.004E: probe with driver sony failed with error -22 [ 1756.525696][T16586] usb 2-1: USB disconnect, device number 42 [ 1756.609654][T24050] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4535'. [ 1759.529403][T24077] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4536'. [ 1761.202540][T24092] netlink: 6 bytes leftover after parsing attributes in process `syz.3.4543'. [ 1761.277821][T24092] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1762.782907][T24109] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4549'. [ 1763.009929][T23571] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1763.565875][T23571] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1763.626811][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1763.845948][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1763.915763][T23571] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1763.949589][T23571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1763.967223][T23571] usb 1-1: config 0 descriptor?? [ 1764.425902][T23571] sony 0003:054C:024B.004F: unexpected long global item [ 1764.447167][T23571] sony 0003:054C:024B.004F: parse failed [ 1764.458531][T23571] sony 0003:054C:024B.004F: probe with driver sony failed with error -22 [ 1765.071122][ T5933] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1765.388588][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1765.548571][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1765.568869][T24122] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4548'. [ 1765.591088][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1765.753062][T21342] usb 1-1: USB disconnect, device number 56 [ 1766.273530][ T5933] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1766.286237][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.311620][ T5933] usb 4-1: config 0 descriptor?? [ 1766.571886][ T5906] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1766.794740][ T5933] sony 0003:054C:024B.0050: unexpected long global item [ 1766.812778][ T5933] sony 0003:054C:024B.0050: parse failed [ 1766.831330][ T5933] sony 0003:054C:024B.0050: probe with driver sony failed with error -22 [ 1766.864208][ T5906] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1766.939653][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.970023][ T5906] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1767.010011][ T5906] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1767.034958][ T5906] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1767.067914][ T5906] usb 6-1: config 0 descriptor?? [ 1767.507410][ T5906] sony 0003:054C:024B.0051: unexpected long global item [ 1767.518833][ T5906] sony 0003:054C:024B.0051: parse failed [ 1767.524879][ T5906] sony 0003:054C:024B.0051: probe with driver sony failed with error -22 [ 1767.751081][T23571] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1768.188714][ T5906] usb 4-1: USB disconnect, device number 58 [ 1768.331134][T23571] usb 5-1: Using ep0 maxpacket: 32 [ 1768.924793][T16586] usb 6-1: USB disconnect, device number 46 [ 1768.930849][T23571] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1768.944632][T23571] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1768.960790][T23571] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1768.969224][T23571] usb 5-1: Product: syz [ 1768.973648][T23571] usb 5-1: Manufacturer: syz [ 1768.978237][T23571] usb 5-1: SerialNumber: syz [ 1769.004364][T23571] usb 5-1: config 0 descriptor?? [ 1769.012665][T24142] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1769.687850][ T5906] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1769.718297][T23571] usb 5-1: USB disconnect, device number 55 [ 1769.994381][ T5933] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1770.391220][T23571] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1770.551172][T23571] usb 5-1: Using ep0 maxpacket: 32 [ 1770.559643][T23571] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1770.581662][T23571] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1770.592732][ T5906] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1770.594465][T23571] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1770.608266][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1770.627377][ T5906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1770.639009][ T5906] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1770.645437][T23571] usb 5-1: Product: syz [ 1770.648119][ T5906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1770.663096][ T5906] usb 4-1: config 0 descriptor?? [ 1770.674152][T23571] usb 5-1: Manufacturer: syz [ 1770.688726][T23571] usb 5-1: SerialNumber: syz [ 1770.689894][T24166] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4561'. [ 1770.702694][T23571] usb 5-1: config 0 descriptor?? [ 1770.730495][T24142] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1770.731075][ T5933] usb 2-1: device descriptor read/64, error -71 [ 1771.181520][ T5933] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1771.217026][ T5906] sony 0003:054C:024B.0052: unexpected long global item [ 1771.321102][ T5933] usb 2-1: device descriptor read/64, error -71 [ 1771.329180][ T5906] sony 0003:054C:024B.0052: parse failed [ 1771.336733][ T5906] sony 0003:054C:024B.0052: probe with driver sony failed with error -22 [ 1771.372935][ T5906] usb 5-1: USB disconnect, device number 56 [ 1771.452633][ T5933] usb usb2-port1: attempt power cycle [ 1772.193527][ T5906] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1772.407397][T21342] usb 4-1: USB disconnect, device number 59 [ 1772.419083][ T5906] usb 5-1: device descriptor read/64, error -71 [ 1772.586475][ T5933] usb usb2-port1: Cannot enable. Maybe the USB cable is bad? [ 1772.713214][ T5906] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1772.933414][ T5933] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1773.031065][ T5906] usb 5-1: device descriptor read/64, error -71 [ 1773.144145][ T5906] usb usb5-port1: attempt power cycle [ 1773.204605][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1773.217885][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.230199][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1773.245221][ T5933] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1773.254956][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.390570][ T5933] usb 2-1: config 0 descriptor?? [ 1773.455795][T21342] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1773.711078][ T5906] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1773.720536][T21342] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1773.751644][ T5906] usb 5-1: device descriptor read/8, error -71 [ 1773.759369][T21342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1773.772286][T21342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1773.782190][T21342] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1773.791631][T21342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1773.839271][ T5933] sony 0003:054C:024B.0053: unexpected long global item [ 1773.871232][T21342] usb 4-1: config 0 descriptor?? [ 1773.909686][ T5933] sony 0003:054C:024B.0053: parse failed [ 1773.929439][ T5933] sony 0003:054C:024B.0053: probe with driver sony failed with error -22 [ 1774.011066][ T5906] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1774.068509][ T5906] usb 5-1: device descriptor read/8, error -71 [ 1774.181598][ T5906] usb usb5-port1: unable to enumerate USB device [ 1774.419083][T21342] sony 0003:054C:024B.0054: unexpected long global item [ 1774.439798][T21342] sony 0003:054C:024B.0054: parse failed [ 1774.446154][T21342] sony 0003:054C:024B.0054: probe with driver sony failed with error -22 [ 1775.051285][T23571] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1775.463765][ T5933] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1775.472730][T21342] usb 2-1: USB disconnect, device number 46 [ 1775.602549][T23571] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1775.614261][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.625685][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.636313][T23571] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1775.645660][T23571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.655910][ T5933] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1775.658054][T16586] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1775.668824][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.687565][ T5933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1775.699555][ T5933] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1775.700336][T23571] usb 1-1: config 0 descriptor?? [ 1775.709232][ T5933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.748758][ T5933] usb 6-1: config 0 descriptor?? [ 1775.849218][T21342] usb 4-1: USB disconnect, device number 60 [ 1775.872853][T16586] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1775.986509][T16586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1775.997684][T16586] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1776.011216][T16586] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1776.020436][T16586] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1776.132057][T16586] usb 5-1: config 0 descriptor?? [ 1776.150263][T23571] sony 0003:054C:024B.0055: unexpected long global item [ 1776.216093][ T5933] sony 0003:054C:024B.0056: unexpected long global item [ 1776.277145][T23571] sony 0003:054C:024B.0055: parse failed [ 1776.283018][T23571] sony 0003:054C:024B.0055: probe with driver sony failed with error -22 [ 1776.413279][ T5933] sony 0003:054C:024B.0056: parse failed [ 1776.423326][ T5933] sony 0003:054C:024B.0056: probe with driver sony failed with error -22 [ 1777.013367][T16586] sony 0003:054C:024B.0057: unexpected long global item [ 1777.027262][T16586] sony 0003:054C:024B.0057: parse failed [ 1777.033439][T16586] sony 0003:054C:024B.0057: probe with driver sony failed with error -22 [ 1778.138822][T23571] usb 1-1: USB disconnect, device number 57 [ 1778.194261][T21323] usb 5-1: USB disconnect, device number 61 [ 1778.199052][T21342] usb 6-1: USB disconnect, device number 47 [ 1778.381120][T16586] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1778.558081][T16586] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1778.936629][ T5933] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1778.944671][T21323] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1778.985158][T16586] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1778.995846][T16586] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1779.005304][T16586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.018275][T16586] usb 2-1: config 0 descriptor?? [ 1779.071091][T23571] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1779.141664][T21323] usb 5-1: Using ep0 maxpacket: 32 [ 1779.142838][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1779.149478][T21323] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1779.170567][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1779.172331][T21323] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1779.194045][T21323] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1779.203240][T21323] usb 5-1: Product: syz [ 1779.207394][T21323] usb 5-1: Manufacturer: syz [ 1779.212850][T21323] usb 5-1: SerialNumber: syz [ 1779.212938][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1779.273497][T23571] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1779.283746][T23571] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1779.292754][T23571] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1779.308705][T23571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.309087][ T5933] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1779.317834][T21323] usb 5-1: config 0 descriptor?? [ 1779.331289][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1779.349526][T23571] usb 6-1: config 0 descriptor?? [ 1779.350881][ T5933] usb 4-1: config 0 descriptor?? [ 1779.380549][T24227] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1779.675254][T24237] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4577'. [ 1779.867644][ T5933] sony 0003:054C:024B.0058: unexpected long global item [ 1779.926303][ T5933] sony 0003:054C:024B.0058: parse failed [ 1779.970294][T21342] usb 5-1: USB disconnect, device number 62 [ 1779.977617][ T5933] sony 0003:054C:024B.0058: probe with driver sony failed with error -22 [ 1780.533483][T21342] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1780.701057][T21342] usb 5-1: Using ep0 maxpacket: 32 [ 1780.787537][T21342] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1780.883505][T24245] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4578'. [ 1780.930409][T21342] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1780.945343][T21342] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1780.957806][T21342] usb 5-1: Product: syz [ 1780.964193][T21342] usb 5-1: Manufacturer: syz [ 1780.970414][T21342] usb 5-1: SerialNumber: syz [ 1781.016977][T21323] usb 2-1: USB disconnect, device number 47 [ 1781.059848][T23571] usb 4-1: USB disconnect, device number 61 [ 1781.123619][T21342] usb 5-1: config 0 descriptor?? [ 1781.130498][T24227] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1782.538208][T16586] usb 6-1: USB disconnect, device number 48 [ 1782.791316][T21323] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1782.868333][ T5961] usb 5-1: USB disconnect, device number 63 [ 1782.912681][T24258] netlink: 204 bytes leftover after parsing attributes in process `syz.5.4581'. [ 1783.062659][T21323] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1783.539710][T23571] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1783.732965][T21323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.845912][T21323] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1783.855751][T21323] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1783.877754][T21323] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1783.889131][T21323] usb 2-1: config 0 descriptor?? [ 1783.922800][T23571] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1783.958147][T23571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1783.971077][ T5961] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1783.997178][T23571] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.033226][T23571] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1784.079324][T23571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.096059][T23571] usb 4-1: config 0 descriptor?? [ 1784.162964][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1784.292922][T23571] usbhid 4-1:0.0: can't add hid device: -71 [ 1784.304016][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.335650][T21323] sony 0003:054C:024B.0059: unexpected long global item [ 1784.371086][T23571] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1784.391837][T21323] sony 0003:054C:024B.0059: parse failed [ 1784.397590][T21323] sony 0003:054C:024B.0059: probe with driver sony failed with error -22 [ 1784.407912][ T5961] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.466341][T23571] usb 4-1: USB disconnect, device number 62 [ 1784.477072][ T5961] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1784.541799][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.574381][ T5961] usb 5-1: config 0 descriptor?? [ 1785.076543][ T5961] sony 0003:054C:024B.005A: unexpected long global item [ 1785.094372][ T5961] sony 0003:054C:024B.005A: parse failed [ 1785.100117][ T5961] sony 0003:054C:024B.005A: probe with driver sony failed with error -22 [ 1785.774098][ T5961] usb 2-1: USB disconnect, device number 48 [ 1786.258658][ T5961] usb 5-1: USB disconnect, device number 64 [ 1787.021432][T23571] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1787.148243][T21342] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1787.294838][T23571] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1787.307739][T23571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1787.322400][T23571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1787.334544][T24280] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1787.403093][T23571] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1787.471061][T21342] usb 2-1: Using ep0 maxpacket: 32 [ 1787.478084][T23571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1787.498348][T21342] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1787.508245][T24283] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4585'. [ 1787.531398][T23571] usb 5-1: config 0 descriptor?? [ 1787.553288][T21342] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1787.569520][T21342] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1787.618591][T21342] usb 2-1: Product: syz [ 1787.622924][T21342] usb 2-1: Manufacturer: syz [ 1787.634958][T21342] usb 2-1: SerialNumber: syz [ 1787.673851][T21342] usb 2-1: config 0 descriptor?? [ 1787.706375][T24294] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1788.078749][T23571] sony 0003:054C:024B.005B: unexpected long global item [ 1788.413921][T23571] sony 0003:054C:024B.005B: parse failed [ 1788.431773][T23571] sony 0003:054C:024B.005B: probe with driver sony failed with error -22 [ 1788.544239][T21342] usb 2-1: USB disconnect, device number 49 [ 1788.642012][ T5961] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1789.796548][T21323] usb 5-1: USB disconnect, device number 65 [ 1789.802532][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1789.826260][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1789.839922][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1789.850612][ T5961] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1789.860659][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1789.871092][T23571] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1790.077143][T23571] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1790.351427][ T5961] usb 6-1: config 0 descriptor?? [ 1790.400045][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1790.412836][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1790.425189][T23571] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1790.434778][T23571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.605321][T23571] usb 1-1: config 0 descriptor?? [ 1791.036348][ T5961] sony 0003:054C:024B.005C: unexpected long global item [ 1791.045805][ T5961] sony 0003:054C:024B.005C: parse failed [ 1791.053667][ T5961] sony 0003:054C:024B.005C: probe with driver sony failed with error -22 [ 1791.117544][T23571] sony 0003:054C:024B.005D: unexpected long global item [ 1791.139618][T23571] sony 0003:054C:024B.005D: parse failed [ 1791.157070][T23571] sony 0003:054C:024B.005D: probe with driver sony failed with error -22 [ 1791.432691][T24325] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4596'. [ 1791.504646][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.627312][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1792.128651][T23571] usb 6-1: USB disconnect, device number 49 [ 1792.756206][ T5961] usb 1-1: USB disconnect, device number 58 [ 1793.091076][T23571] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1793.807068][T23571] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1793.851082][T23571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1793.876588][T23571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1793.906723][T23571] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1793.999685][ T5961] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1794.130702][T24322] netlink: 96 bytes leftover after parsing attributes in process `syz.3.4595'. [ 1794.191129][T23571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.215429][T23571] usb 5-1: config 0 descriptor?? [ 1794.502925][ T5961] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1794.516947][ T5961] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1794.530222][ T5961] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1794.539914][ T5961] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1794.556065][ T5961] usb 1-1: config 0 descriptor?? [ 1794.566662][ T5961] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1794.579662][T24349] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4601'. [ 1794.653732][T23571] sony 0003:054C:024B.005E: unexpected long global item [ 1794.666077][T23571] sony 0003:054C:024B.005E: parse failed [ 1794.673776][T23571] sony 0003:054C:024B.005E: probe with driver sony failed with error -22 [ 1795.954086][T23571] usb 5-1: USB disconnect, device number 66 [ 1795.977204][T24361] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4602'. [ 1797.002408][T21342] usb 1-1: USB disconnect, device number 59 [ 1797.144621][T24374] netlink: 204 bytes leftover after parsing attributes in process `syz.0.4607'. [ 1797.746691][T24385] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4612'. [ 1798.747022][T21342] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1799.581255][T21342] usb 2-1: Using ep0 maxpacket: 32 [ 1799.737312][T21342] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1799.891241][ T5933] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1799.902278][T21342] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1799.997810][T21342] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1800.081105][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 1800.094697][T21342] usb 2-1: Product: syz [ 1800.109894][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1800.143794][T21342] usb 2-1: Manufacturer: syz [ 1800.182587][T21342] usb 2-1: SerialNumber: syz [ 1800.187291][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1800.224868][T21342] usb 2-1: config 0 descriptor?? [ 1800.236039][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1800.272273][T24384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1800.274351][ T5933] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1800.288855][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1800.311410][ T5933] usb 4-1: config 0 descriptor?? [ 1800.619638][T24407] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4609'. [ 1800.728295][T23571] usb 2-1: USB disconnect, device number 51 [ 1800.860862][T24401] random: crng reseeded on system resumption [ 1800.902804][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1800.902821][ T30] audit: type=1400 audit(1755118310.093:804): avc: denied { read write } for pid=24400 comm="syz.3.4616" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1800.942028][ T30] audit: type=1400 audit(1755118310.093:805): avc: denied { ioctl open } for pid=24400 comm="syz.3.4616" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1801.140069][ T5933] input: HID 0955:7214 Haptics as /devices/virtual/input/input8 [ 1801.200767][ T5933] shield 0003:0955:7214.005F: Registered Thunderstrike controller [ 1801.219308][ T5933] shield 0003:0955:7214.005F: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1801.261172][T23571] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1801.304470][ T5906] shield 0003:0955:7214.005F: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1801.325320][ T5933] usb 4-1: USB disconnect, device number 63 [ 1801.414225][ T5906] shield 0003:0955:7214.005F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1801.431153][T23571] usb 2-1: Using ep0 maxpacket: 32 [ 1801.440808][T23571] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1801.458942][ T5906] shield 0003:0955:7214.005F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1801.472976][ T5906] shield 0003:0955:7214.005F: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1801.544054][T23571] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1801.553486][T23571] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1801.573390][T23571] usb 2-1: Product: syz [ 1801.584900][T23571] usb 2-1: Manufacturer: syz [ 1801.599714][T23571] usb 2-1: SerialNumber: syz [ 1801.633365][T23571] usb 2-1: config 0 descriptor?? [ 1801.646321][T24384] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1803.852620][T23571] usb 2-1: USB disconnect, device number 52 [ 1804.231439][T23571] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1804.531467][T23571] usb 2-1: Using ep0 maxpacket: 16 [ 1804.548220][T23571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1804.927558][ T5961] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1805.002970][T23571] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1805.030014][T23571] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1805.046783][T23571] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1805.070054][T23571] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.153853][T23571] usb 2-1: config 0 descriptor?? [ 1805.212970][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1805.377227][ T5961] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1805.398739][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1805.453845][ T5961] usb 6-1: config 0 descriptor?? [ 1805.705899][T24426] random: crng reseeded on system resumption [ 1805.801929][T21323] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1805.811838][ T5961] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1805.829537][T23571] usbhid 2-1:0.0: can't add hid device: -71 [ 1805.836013][T23571] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1805.883332][T23571] usb 2-1: USB disconnect, device number 53 [ 1806.104010][T21323] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.196628][T21323] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1806.256262][T21323] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1806.266309][T21323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.287189][T21323] usb 4-1: config 0 descriptor?? [ 1806.298522][T21323] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1806.321139][ T5961] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1806.394206][T24443] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4619'. [ 1806.532175][ T5961] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1806.694006][ T5961] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1806.707453][ T5961] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1806.716797][ T5961] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1806.747799][ T5961] usb 5-1: config 0 descriptor?? [ 1806.760897][ T5961] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1807.806760][ T5961] usb 6-1: USB disconnect, device number 50 [ 1808.082616][ T5933] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1808.628255][ T5961] usb 4-1: USB disconnect, device number 64 [ 1808.691119][ T5933] usb 2-1: Using ep0 maxpacket: 16 [ 1808.812363][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1808.823365][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1808.835827][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1808.919077][ T5933] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1809.384896][ T5933] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1809.491790][ T5933] usb 2-1: config 0 descriptor?? [ 1809.569312][ T5961] usb 5-1: USB disconnect, device number 67 [ 1810.606750][T24458] random: crng reseeded on system resumption [ 1811.019171][ T5933] usbhid 2-1:0.0: can't add hid device: -71 [ 1811.028292][ T5933] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1811.051021][ T5933] usb 2-1: USB disconnect, device number 54 [ 1811.298578][ T5961] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1812.099554][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 1812.119568][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1812.130993][ T5961] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1812.148664][ T5961] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1812.180362][ T5961] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1812.301118][ T5961] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1812.368873][ T5961] usb 6-1: config 0 descriptor?? [ 1813.789466][T24476] random: crng reseeded on system resumption [ 1813.853023][ T5961] input: HID 0955:7214 Haptics as /devices/virtual/input/input9 [ 1814.516273][ T5961] shield 0003:0955:7214.0060: Registered Thunderstrike controller [ 1814.592255][ T5961] shield 0003:0955:7214.0060: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1814.723521][ T5961] usb 6-1: USB disconnect, device number 51 [ 1814.742861][T23571] shield 0003:0955:7214.0060: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1814.791116][T16586] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1814.801142][ T5933] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1814.801805][T23571] shield 0003:0955:7214.0060: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1814.892351][T23571] shield 0003:0955:7214.0060: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1814.933449][T23571] shield 0003:0955:7214.0060: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1814.971152][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 1815.217456][T16586] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1815.221869][ T5933] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1815.227738][T16586] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1815.549229][ T5933] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1815.550707][T16586] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1815.573015][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1815.573801][T16586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1815.588023][ T5933] usb 1-1: Product: syz [ 1815.595922][ T5933] usb 1-1: Manufacturer: syz [ 1815.600600][ T5933] usb 1-1: SerialNumber: syz [ 1815.612366][ T5933] usb 1-1: config 0 descriptor?? [ 1815.614678][T16586] usb 2-1: config 0 descriptor?? [ 1815.618518][T24513] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1815.658015][T24527] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4645'. [ 1817.169875][T16586] usb 1-1: USB disconnect, device number 60 [ 1819.705206][ T5933] usb 2-1: USB disconnect, device number 55 [ 1819.731080][ T5961] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1821.821252][T16586] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1821.829246][ T5961] usb 1-1: device descriptor read/64, error -71 [ 1821.941143][T23571] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1822.102976][T23571] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.121525][T23571] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1822.130544][T23571] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1822.140119][T23571] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.159633][T23571] usb 6-1: config 0 descriptor?? [ 1822.164936][T16586] usb 2-1: Using ep0 maxpacket: 16 [ 1822.182698][T16586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.194302][T16586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.204385][T16586] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1822.217829][T16586] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1822.227551][T16586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1822.246732][T16586] usb 2-1: config 0 descriptor?? [ 1822.251797][ T5961] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1822.291142][ T5933] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1822.517649][ T5961] usb 1-1: Using ep0 maxpacket: 32 [ 1822.532581][ T5961] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1822.544054][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 1822.545100][ T5961] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1822.561051][ T5961] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1822.571253][ T5961] usb 1-1: Product: syz [ 1822.571874][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1822.640415][ T5961] usb 1-1: Manufacturer: syz [ 1822.645129][ T5961] usb 1-1: SerialNumber: syz [ 1822.652890][ T5961] usb 1-1: config 0 descriptor?? [ 1822.657174][T24586] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4658'. [ 1822.659841][T24573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1822.672275][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1822.705934][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1822.719300][ T5933] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1822.757982][T24580] random: crng reseeded on system resumption [ 1822.980512][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1823.000702][T16586] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 1823.016763][ T5933] usb 4-1: config 0 descriptor?? [ 1823.037855][T16586] shield 0003:0955:7214.0061: Registered Thunderstrike controller [ 1823.070124][T16586] shield 0003:0955:7214.0061: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1823.096795][ T5906] usb 1-1: USB disconnect, device number 62 [ 1823.241224][T23571] shield 0003:0955:7214.0061: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1823.258160][T16586] usb 2-1: USB disconnect, device number 56 [ 1823.264197][T23571] shield 0003:0955:7214.0061: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1823.306545][T23571] shield 0003:0955:7214.0061: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1823.348622][T23571] shield 0003:0955:7214.0061: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1823.436623][T24584] random: crng reseeded on system resumption [ 1823.457721][ T5933] input: HID 0955:7214 Haptics as /devices/virtual/input/input11 [ 1823.486832][ T5933] shield 0003:0955:7214.0062: Registered Thunderstrike controller [ 1823.498991][ T5933] shield 0003:0955:7214.0062: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1823.631382][ T5906] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1823.661724][T23571] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1823.705408][T22212] shield 0003:0955:7214.0062: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1823.707663][T16586] usb 4-1: USB disconnect, device number 65 [ 1823.725775][T22212] shield 0003:0955:7214.0062: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1823.737210][T22212] shield 0003:0955:7214.0062: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1823.752641][T22212] shield 0003:0955:7214.0062: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1823.791322][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 1823.799311][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1823.820601][ T5906] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1823.830041][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1823.838285][ T5906] usb 1-1: Product: syz [ 1823.842602][ T5906] usb 1-1: Manufacturer: syz [ 1823.847241][ T5906] usb 1-1: SerialNumber: syz [ 1823.855438][ T5906] usb 1-1: config 0 descriptor?? [ 1823.867577][T24573] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1823.975273][T23571] usb 5-1: Using ep0 maxpacket: 16 [ 1823.983037][T23571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1823.994736][T23571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1824.005574][T23571] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1824.018942][T23571] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1824.027997][T23571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1824.037768][T23571] usb 5-1: config 0 descriptor?? [ 1825.032721][T16586] usb 6-1: USB disconnect, device number 52 [ 1825.336125][T24592] random: crng reseeded on system resumption [ 1825.340072][ T5961] usb 1-1: USB disconnect, device number 63 [ 1825.376727][T23571] input: HID 0955:7214 Haptics as /devices/virtual/input/input12 [ 1825.503305][T24605] overlayfs: failed to resolve './file1': -2 [ 1826.200538][T23571] shield 0003:0955:7214.0063: Registered Thunderstrike controller [ 1826.237407][T23571] shield 0003:0955:7214.0063: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1826.469168][T16586] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1826.488481][T23571] usb 5-1: USB disconnect, device number 68 [ 1826.497988][T16586] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1826.966384][T16586] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1827.045543][T16586] shield 0003:0955:7214.0063: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1827.442671][ T5961] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1827.971204][T16586] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1827.992328][ T5961] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1828.011666][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1828.096135][ T5961] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1828.186491][T24616] netlink: 96 bytes leftover after parsing attributes in process `syz.0.4667'. [ 1828.227148][ T5961] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1828.255468][ T5961] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1828.431110][T16586] usb 2-1: Using ep0 maxpacket: 16 [ 1828.452593][ T5961] usb 4-1: config 0 descriptor?? [ 1828.461317][T16586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1828.481103][T16586] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1828.492648][T16586] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1828.505903][T16586] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1828.641143][T16586] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1829.148074][T16586] usb 2-1: config 0 descriptor?? [ 1829.674720][T24624] random: crng reseeded on system resumption [ 1829.992619][T16586] input: HID 0955:7214 Haptics as /devices/virtual/input/input13 [ 1830.256055][T16586] shield 0003:0955:7214.0064: Registered Thunderstrike controller [ 1830.418594][T23571] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1830.516608][ T5961] usbhid 4-1:0.0: can't add hid device: -71 [ 1830.539826][ T5961] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1830.553817][T16586] shield 0003:0955:7214.0064: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1830.579773][ T5961] usb 4-1: USB disconnect, device number 66 [ 1830.859066][T23571] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1831.203422][ T30] audit: type=1400 audit(1755118340.213:806): avc: denied { listen } for pid=24654 comm="syz.3.4677" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 1831.239152][T23571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1831.264978][ T8639] shield 0003:0955:7214.0064: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1831.937833][T23571] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1831.953945][T16586] usb 2-1: USB disconnect, device number 57 [ 1831.961249][ T8639] shield 0003:0955:7214.0064: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1831.982123][T23571] usb 5-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1832.001374][ T8639] shield 0003:0955:7214.0064: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1832.012532][T23571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1832.028483][ T8639] shield 0003:0955:7214.0064: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1832.165163][T23571] usb 5-1: config 0 descriptor?? [ 1832.962306][ T5906] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1833.091190][ T8639] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1833.132770][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1833.164778][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.271434][ T8639] usb 4-1: Using ep0 maxpacket: 16 [ 1833.296921][ T8639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1833.357069][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.367030][ T5906] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1833.376241][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.391656][ T5906] usb 1-1: config 0 descriptor?? [ 1833.395832][ T8639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1833.407886][ T8639] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1833.421490][ T8639] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1833.430657][ T8639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1833.862563][ T8639] usb 4-1: config 0 descriptor?? [ 1833.876148][T23571] usbhid 5-1:0.0: can't add hid device: -71 [ 1833.882843][T23571] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1833.929350][T23571] usb 5-1: USB disconnect, device number 69 [ 1834.261096][T22212] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1834.573285][T24665] random: crng reseeded on system resumption [ 1834.585320][T22212] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1834.705896][ T8639] input: HID 0955:7214 Haptics as /devices/virtual/input/input14 [ 1834.713330][T22212] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1834.734797][T22212] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1834.749202][T22212] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1834.769843][T22212] usb 6-1: config 0 descriptor?? [ 1834.771973][ T8639] shield 0003:0955:7214.0065: Registered Thunderstrike controller [ 1834.783039][T22212] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1834.807385][ T8639] shield 0003:0955:7214.0065: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1835.170508][T16586] shield 0003:0955:7214.0065: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1835.182504][ T8639] usb 4-1: USB disconnect, device number 67 [ 1835.210751][T16586] shield 0003:0955:7214.0065: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1835.278488][T16586] shield 0003:0955:7214.0065: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1835.714587][ T5906] usbhid 1-1:0.0: can't add hid device: -71 [ 1835.746268][ T5906] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1835.756330][T16586] shield 0003:0955:7214.0065: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1835.789528][ T5906] usb 1-1: USB disconnect, device number 64 [ 1836.368280][T24693] overlayfs: failed to resolve './file1': -2 [ 1836.377599][ T5906] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1836.728733][T22212] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1836.841318][ T5906] usb 1-1: Using ep0 maxpacket: 16 [ 1836.858057][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.872626][ T5906] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.884598][ T5906] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1836.899503][ T5906] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1836.908912][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1836.917033][T22212] usb 2-1: Using ep0 maxpacket: 16 [ 1836.931062][T22212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1836.944538][T22212] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1836.961375][ T5906] usb 1-1: config 0 descriptor?? [ 1836.966665][T22212] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1836.979667][T22212] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1837.105012][T22212] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.119010][ T8639] usb 6-1: USB disconnect, device number 53 [ 1837.139377][T22212] usb 2-1: config 0 descriptor?? [ 1837.418582][T24685] random: crng reseeded on system resumption [ 1837.436291][ T5906] input: HID 0955:7214 Haptics as /devices/virtual/input/input15 [ 1837.661734][ T8639] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1837.851472][ T8639] usb 6-1: Using ep0 maxpacket: 16 [ 1837.856664][ T5933] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 1837.864478][ T8639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1837.890294][ T8639] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1837.910401][ T5906] shield 0003:0955:7214.0066: Registered Thunderstrike controller [ 1837.919480][ T8639] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1837.919530][ T8639] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1837.919555][ T8639] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1837.922942][ T8639] usb 6-1: config 0 descriptor?? [ 1837.937355][T22212] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 1837.962921][ T5906] shield 0003:0955:7214.0066: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1837.989310][T22212] shield 0003:0955:7214.0067: Registered Thunderstrike controller [ 1837.998030][T22212] shield 0003:0955:7214.0067: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1838.034692][T24707] shield 0003:0955:7214.0066: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1838.051424][ T5906] usb 1-1: USB disconnect, device number 65 [ 1838.080585][ T5933] usb 4-1: Using ep0 maxpacket: 16 [ 1838.177055][T21342] thermal thermal_zone0: Temperature check failed (-19) [ 1838.185347][T21342] shield 0003:0955:7214.0067: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1838.200293][T24707] shield 0003:0955:7214.0066: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1838.214923][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1838.231370][T21342] shield 0003:0955:7214.0067: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1838.242612][T24707] shield 0003:0955:7214.0066: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1838.253731][ T5933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1838.263631][T24707] shield 0003:0955:7214.0066: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1838.274808][T21342] shield 0003:0955:7214.0067: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1838.286095][ T5933] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1838.299088][ T5933] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1838.308500][T21342] shield 0003:0955:7214.0067: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1838.320683][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1838.339365][T22212] usb 2-1: USB disconnect, device number 58 [ 1838.364809][ T5933] usb 4-1: config 0 descriptor?? [ 1838.391635][T24701] random: crng reseeded on system resumption [ 1838.475332][ T8639] input: HID 0955:7214 Haptics as /devices/virtual/input/input17 [ 1838.553226][ T8639] shield 0003:0955:7214.0068: Registered Thunderstrike controller [ 1838.574958][ T8639] shield 0003:0955:7214.0068: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.5-1/input0 [ 1838.780935][T23571] shield 0003:0955:7214.0068: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1838.802909][ T8639] usb 6-1: USB disconnect, device number 54 [ 1838.811181][T23571] shield 0003:0955:7214.0068: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1838.824957][T23571] shield 0003:0955:7214.0068: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1838.839700][T23571] shield 0003:0955:7214.0068: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1838.876197][T24699] random: crng reseeded on system resumption [ 1839.282914][ T5933] input: HID 0955:7214 Haptics as /devices/virtual/input/input18 [ 1839.354645][ T5933] shield 0003:0955:7214.0069: Registered Thunderstrike controller [ 1839.363001][ T5933] shield 0003:0955:7214.0069: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1839.610775][T22212] usb 4-1: USB disconnect, device number 68 [ 1839.616788][ T5906] shield 0003:0955:7214.0069: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1839.641487][ T5906] shield 0003:0955:7214.0069: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1839.657412][ T5906] shield 0003:0955:7214.0069: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1839.688432][ T5906] shield 0003:0955:7214.0069: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1840.011282][ T8639] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1840.469626][ T8639] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1840.488031][ T8639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1840.501070][ T5906] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1840.612670][ T8639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1840.626226][ T8639] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1840.637879][ T8639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1840.652583][ T8639] usb 2-1: config 0 descriptor?? [ 1840.703516][ T5906] usb 1-1: Using ep0 maxpacket: 32 [ 1840.926512][ T5906] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1840.955732][ T5906] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1840.970606][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1841.077994][ T5906] usb 1-1: Product: syz [ 1841.439492][ T5906] usb 1-1: Manufacturer: syz [ 1841.452755][ T5906] usb 1-1: SerialNumber: syz [ 1841.469510][ T5906] usb 1-1: config 0 descriptor?? [ 1841.476727][T24733] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1842.019365][ T5906] usb 1-1: USB disconnect, device number 66 [ 1842.241285][T16586] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 1842.551086][T16586] usb 4-1: Using ep0 maxpacket: 16 [ 1842.557999][T16586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1842.582987][T16586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1842.637078][T16586] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1842.681240][T23571] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1842.693616][T16586] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1842.731845][T16586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1842.770015][T16586] usb 4-1: config 0 descriptor?? [ 1842.841351][T23571] usb 1-1: Using ep0 maxpacket: 32 [ 1842.855363][T23571] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1842.870693][T23571] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1842.908341][ T8639] usbhid 2-1:0.0: can't add hid device: -71 [ 1842.914459][T23571] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1842.934440][ T8639] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1842.945532][T23571] usb 1-1: Product: syz [ 1843.071785][T23571] usb 1-1: Manufacturer: syz [ 1843.076937][T23571] usb 1-1: SerialNumber: syz [ 1843.084770][ T8639] usb 2-1: USB disconnect, device number 59 [ 1843.093863][T23571] usb 1-1: config 0 descriptor?? [ 1843.103016][T24752] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1844.531487][T24750] random: crng reseeded on system resumption [ 1844.574892][T23571] usb 1-1: USB disconnect, device number 67 [ 1844.671991][T16586] input: HID 0955:7214 Haptics as /devices/virtual/input/input19 [ 1844.851237][ T8639] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1845.414666][ T8639] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1845.428648][T16586] shield 0003:0955:7214.006A: Registered Thunderstrike controller [ 1845.444112][T16586] shield 0003:0955:7214.006A: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 1845.457124][T23571] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1845.464738][ T8639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.478441][ T8639] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.490121][ T8639] usb 2-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1845.500092][ T8639] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.517304][ T8639] usb 2-1: config 0 descriptor?? [ 1845.532847][T21323] shield 0003:0955:7214.006A: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1845.550418][T16586] usb 4-1: USB disconnect, device number 69 [ 1845.556801][T21323] shield 0003:0955:7214.006A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1845.596411][T21323] shield 0003:0955:7214.006A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1845.621896][T23571] usb 1-1: Using ep0 maxpacket: 16 [ 1845.631787][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1845.647793][T21323] shield 0003:0955:7214.006A: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1845.675893][T23571] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1845.699164][T23571] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1845.712315][T23571] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1845.721863][T23571] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1845.743660][T23571] usb 1-1: config 0 descriptor?? [ 1846.175811][T24768] random: crng reseeded on system resumption [ 1846.445104][T23571] input: HID 0955:7214 Haptics as /devices/virtual/input/input20 [ 1846.499481][T23571] shield 0003:0955:7214.006B: Registered Thunderstrike controller [ 1846.507895][T23571] shield 0003:0955:7214.006B: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1846.832656][ T5906] usb 1-1: USB disconnect, device number 68 [ 1846.840016][T21323] shield 0003:0955:7214.006B: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1846.875480][T21323] shield 0003:0955:7214.006B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1847.407731][ T8639] usbhid 2-1:0.0: can't add hid device: -71 [ 1847.419239][ T8639] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1847.623292][T21323] shield 0003:0955:7214.006B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1847.657156][ T8639] usb 2-1: USB disconnect, device number 60 [ 1847.975105][T21323] shield 0003:0955:7214.006B: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1851.821949][ T5906] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1852.371213][ T5906] usb 2-1: Using ep0 maxpacket: 16 [ 1852.384596][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1852.395937][ T5906] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1852.409252][ T5906] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1852.429766][ T5906] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1852.445144][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1852.460559][ T5906] usb 2-1: config 0 descriptor?? [ 1852.959293][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1852.966242][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1853.041116][ T8639] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 1853.187482][T24824] random: crng reseeded on system resumption [ 1853.293363][ T5906] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 1853.294651][ T8639] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 1853.338382][ T8639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1853.350529][ T8639] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1853.360517][ T8639] usb 4-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 1853.387174][ T5906] shield 0003:0955:7214.006C: Registered Thunderstrike controller [ 1853.388888][ T8639] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1853.403107][ T5906] shield 0003:0955:7214.006C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 1853.417031][ T8639] usb 4-1: config 0 descriptor?? [ 1853.857581][T21323] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1854.000844][ T5933] shield 0003:0955:7214.006C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1854.001340][T23571] usb 2-1: USB disconnect, device number 61 [ 1854.045746][ T5933] shield 0003:0955:7214.006C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1854.095805][ T5933] shield 0003:0955:7214.006C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1854.144718][T21323] usb 1-1: Using ep0 maxpacket: 16 [ 1854.157592][T21323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1854.169736][T21323] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1854.182144][T21323] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1854.199416][T21323] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1854.212176][T21323] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1854.234383][T21323] usb 1-1: config 0 descriptor?? [ 1854.238104][ T5933] shield 0003:0955:7214.006C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1854.890791][T24856] random: crng reseeded on system resumption [ 1854.920072][T21323] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 1854.956555][T21323] shield 0003:0955:7214.006D: Registered Thunderstrike controller [ 1854.969167][T21323] shield 0003:0955:7214.006D: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 1855.793756][ T8639] usbhid 4-1:0.0: can't add hid device: -71 [ 1855.799773][ T8639] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1855.848402][ T8639] usb 4-1: USB disconnect, device number 70 [ 1856.009888][ T5933] usb 1-1: USB disconnect, device number 69 [ 1856.015885][T16586] shield 0003:0955:7214.006D: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1856.054098][T16586] shield 0003:0955:7214.006D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1856.080515][T16586] shield 0003:0955:7214.006D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1856.219894][T16586] shield 0003:0955:7214.006D: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 1856.317095][T24874] overlayfs: failed to resolve './file0': -2 [ 1859.181248][ T5906] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1859.550426][T24890] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4724'. [ 1859.595363][ T5906] usb 5-1: Using ep0 maxpacket: 16 [ 1859.617131][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1859.628967][ T5906] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1859.666488][ T5906] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1859.707756][ T5906] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 1859.735716][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1860.412030][ T5906] usb 5-1: config 0 descriptor?? [ 1861.052744][T24892] random: crng reseeded on system resumption [ 1861.075111][ T5906] input: HID 0955:7214 Haptics as /devices/virtual/input/input23 [ 1861.175989][ T5906] shield 0003:0955:7214.006E: Registered Thunderstrike controller [ 1861.194988][T16586] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 1861.216696][ T5906] shield 0003:0955:7214.006E: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 1862.251057][T16586] usb 4-1: Using ep0 maxpacket: 32 [ 1862.342460][T16586] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1862.370375][T16586] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1862.386789][T16586] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1862.406159][T16586] usb 4-1: Product: syz [ 1862.410351][T16586] usb 4-1: Manufacturer: syz [ 1862.415722][T16586] usb 4-1: SerialNumber: syz [ 1862.438705][T16586] usb 4-1: config 0 descriptor?? [ 1862.445625][T24908] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1862.500041][T23571] usb 5-1: USB disconnect, device number 70 [ 1862.525999][T23571] ------------[ cut here ]------------ [ 1862.531484][T23571] workqueue: work disable count underflowed [ 1862.537448][T23571] WARNING: CPU: 0 PID: 23571 at kernel/workqueue.c:4326 enable_work+0x2f8/0x340 [ 1862.546484][T23571] Modules linked in: [ 1862.550566][T23571] CPU: 0 UID: 0 PID: 23571 Comm: kworker/0:2 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 1862.562718][T23571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1862.572775][T23571] Workqueue: usb_hub_wq hub_event [ 1862.577809][T23571] RIP: 0010:enable_work+0x2f8/0x340 [ 1862.583006][T23571] Code: 89 ee e8 0b 56 38 00 45 84 ed 0f 85 29 fe ff ff e8 1d 5b 38 00 c6 05 4a 4d 10 0f 01 90 48 c7 c7 c0 02 ac 8b e8 a9 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 b7 b2 9e 00 e9 aa fe ff ff [ 1862.602631][T23571] RSP: 0018:ffffc90017bb73c0 EFLAGS: 00010086 [ 1862.608700][T23571] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90019fb1000 [ 1862.616665][T23571] RDX: 0000000000100000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1862.619118][T22212] shield 0003:0955:7214.006E: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 1862.624631][T23571] RBP: ffff8880762a2738 R08: 0000000000000001 R09: 0000000000000000 [ 1862.624647][T23571] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92002f76e79 [ 1862.624660][T23571] R13: 0000000000000000 R14: ffff8880762a2698 R15: ffff8880762a2730 [ 1862.624674][T23571] FS: 0000000000000000(0000) GS:ffff8881246bc000(0000) knlGS:0000000000000000 [ 1862.624694][T23571] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1862.624707][T23571] CR2: 0000001b2fe22ff8 CR3: 0000000033c57000 CR4: 00000000003526f0 [ 1862.624720][T23571] Call Trace: [ 1862.624729][T23571] [ 1862.624738][T23571] ? __pfx_enable_work+0x10/0x10 [ 1862.624785][T23571] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 1862.624815][T23571] __cancel_work_sync+0xe7/0x130 [ 1862.624838][T23571] thermal_zone_device_unregister+0x28e/0x4d0 [ 1862.710834][T23571] ? __pfx_shield_remove+0x10/0x10 [ 1862.715929][T23571] power_supply_unregister+0x10a/0x150 [ 1862.721365][T23571] shield_remove+0x75/0x130 [ 1862.725842][T23571] ? __pfx_shield_remove+0x10/0x10 [ 1862.730922][T23571] hid_device_remove+0xce/0x260 [ 1862.735743][T23571] ? __pfx_hid_device_remove+0x10/0x10 [ 1862.741177][T23571] device_remove+0xcb/0x170 [ 1862.745676][T23571] device_release_driver_internal+0x44b/0x620 [ 1862.751727][T23571] bus_remove_device+0x22f/0x420 [ 1862.756651][T23571] device_del+0x396/0x9f0 [ 1862.760956][T23571] ? __pfx_device_del+0x10/0x10 [ 1862.765786][T23571] ? do_raw_spin_lock+0x12c/0x2b0 [ 1862.770787][T23571] hid_destroy_device+0x19c/0x240 [ 1862.775791][T23571] usbhid_disconnect+0xa0/0xe0 [ 1862.780531][T23571] usb_unbind_interface+0x1da/0x9e0 [ 1862.785711][T23571] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 1862.791317][T23571] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1862.797016][T23571] device_remove+0x122/0x170 [ 1862.801583][T23571] device_release_driver_internal+0x44b/0x620 [ 1862.807715][T23571] bus_remove_device+0x22f/0x420 [ 1862.812635][T23571] device_del+0x396/0x9f0 [ 1862.816939][T23571] ? __pfx_device_del+0x10/0x10 [ 1862.821763][T23571] ? kobject_put+0x210/0x5a0 [ 1862.826331][T23571] usb_disable_device+0x355/0x7d0 [ 1862.831337][T23571] usb_disconnect+0x2e1/0x9c0 [ 1862.835992][T23571] hub_event+0x1c81/0x4fe0 [ 1862.840393][T23571] ? __lock_acquire+0xb97/0x1ce0 [ 1862.845321][T23571] ? __pfx_hub_event+0x10/0x10 [ 1862.850056][T23571] ? interval_tree_iter_first+0xf0/0x250 [ 1862.855671][T23571] ? rcu_is_watching+0x12/0xc0 [ 1862.860410][T23571] process_one_work+0x9cc/0x1b70 [ 1862.865324][T23571] ? __pfx_process_one_work+0x10/0x10 [ 1862.870673][T23571] ? assign_work+0x1a0/0x250 [ 1862.875234][T23571] worker_thread+0x6c8/0xf10 [ 1862.879800][T23571] ? __kthread_parkme+0x19e/0x250 [ 1862.884819][T23571] ? __pfx_worker_thread+0x10/0x10 [ 1862.889901][T23571] kthread+0x3c5/0x780 [ 1862.893943][T23571] ? __pfx_kthread+0x10/0x10 [ 1862.898512][T23571] ? rcu_is_watching+0x12/0xc0 [ 1862.903273][T23571] ? __pfx_kthread+0x10/0x10 [ 1862.907836][T23571] ret_from_fork+0x5d7/0x6f0 [ 1862.912395][T23571] ? __pfx_kthread+0x10/0x10 [ 1862.916954][T23571] ret_from_fork_asm+0x1a/0x30 [ 1862.921702][T23571] [ 1862.924703][T23571] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1862.931951][T23571] CPU: 0 UID: 0 PID: 23571 Comm: kworker/0:2 Not tainted 6.17.0-rc1-syzkaller-00029-g91325f31afc1 #0 PREEMPT(full) [ 1862.944083][T23571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1862.954113][T23571] Workqueue: usb_hub_wq hub_event [ 1862.959118][T23571] Call Trace: [ 1862.962371][T23571] [ 1862.965274][T23571] dump_stack_lvl+0x3d/0x1f0 [ 1862.969837][T23571] vpanic+0x6e8/0x7a0 [ 1862.973794][T23571] ? __pfx_vpanic+0x10/0x10 [ 1862.978275][T23571] ? enable_work+0x2f8/0x340 [ 1862.982837][T23571] panic+0xca/0xd0 [ 1862.986562][T23571] ? __pfx_panic+0x10/0x10 [ 1862.990966][T23571] check_panic_on_warn+0xab/0xb0 [ 1862.995885][T23571] __warn+0xf6/0x3c0 [ 1862.999757][T23571] ? __pfx_vprintk_emit+0x10/0x10 [ 1863.004778][T23571] ? enable_work+0x2f8/0x340 [ 1863.009346][T23571] report_bug+0x3c3/0x580 [ 1863.013656][T23571] ? enable_work+0x2f8/0x340 [ 1863.018218][T23571] handle_bug+0x184/0x210 [ 1863.022526][T23571] exc_invalid_op+0x17/0x50 [ 1863.027022][T23571] asm_exc_invalid_op+0x1a/0x20 [ 1863.031845][T23571] RIP: 0010:enable_work+0x2f8/0x340 [ 1863.037016][T23571] Code: 89 ee e8 0b 56 38 00 45 84 ed 0f 85 29 fe ff ff e8 1d 5b 38 00 c6 05 4a 4d 10 0f 01 90 48 c7 c7 c0 02 ac 8b e8 a9 f9 f6 ff 90 <0f> 0b 90 90 e9 06 fe ff ff 48 89 ef e8 b7 b2 9e 00 e9 aa fe ff ff [ 1863.056593][T23571] RSP: 0018:ffffc90017bb73c0 EFLAGS: 00010086 [ 1863.062632][T23571] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffc90019fb1000 [ 1863.070575][T23571] RDX: 0000000000100000 RSI: ffffffff817a3365 RDI: 0000000000000001 [ 1863.078517][T23571] RBP: ffff8880762a2738 R08: 0000000000000001 R09: 0000000000000000 [ 1863.086483][T23571] R10: 0000000000000000 R11: 0000000000000001 R12: 1ffff92002f76e79 [ 1863.094424][T23571] R13: 0000000000000000 R14: ffff8880762a2698 R15: ffff8880762a2730 [ 1863.102384][T23571] ? __warn_printk+0x1a5/0x350 [ 1863.107149][T23571] ? __pfx_enable_work+0x10/0x10 [ 1863.112063][T23571] ? __thermal_zone_cdev_unbind+0x6c/0x6c0 [ 1863.117844][T23571] __cancel_work_sync+0xe7/0x130 [ 1863.122774][T23571] thermal_zone_device_unregister+0x28e/0x4d0 [ 1863.128814][T23571] ? __pfx_shield_remove+0x10/0x10 [ 1863.133898][T23571] power_supply_unregister+0x10a/0x150 [ 1863.139332][T23571] shield_remove+0x75/0x130 [ 1863.143809][T23571] ? __pfx_shield_remove+0x10/0x10 [ 1863.148891][T23571] hid_device_remove+0xce/0x260 [ 1863.153710][T23571] ? __pfx_hid_device_remove+0x10/0x10 [ 1863.159138][T23571] device_remove+0xcb/0x170 [ 1863.163614][T23571] device_release_driver_internal+0x44b/0x620 [ 1863.169656][T23571] bus_remove_device+0x22f/0x420 [ 1863.174569][T23571] device_del+0x396/0x9f0 [ 1863.178871][T23571] ? __pfx_device_del+0x10/0x10 [ 1863.183696][T23571] ? do_raw_spin_lock+0x12c/0x2b0 [ 1863.188700][T23571] hid_destroy_device+0x19c/0x240 [ 1863.193702][T23571] usbhid_disconnect+0xa0/0xe0 [ 1863.198441][T23571] usb_unbind_interface+0x1da/0x9e0 [ 1863.203618][T23571] ? kernfs_remove_by_name_ns+0xbe/0x110 [ 1863.209226][T23571] ? __pfx_usb_unbind_interface+0x10/0x10 [ 1863.214925][T23571] device_remove+0x122/0x170 [ 1863.219488][T23571] device_release_driver_internal+0x44b/0x620 [ 1863.225531][T23571] bus_remove_device+0x22f/0x420 [ 1863.230450][T23571] device_del+0x396/0x9f0 [ 1863.234750][T23571] ? __pfx_device_del+0x10/0x10 [ 1863.239585][T23571] ? kobject_put+0x210/0x5a0 [ 1863.244151][T23571] usb_disable_device+0x355/0x7d0 [ 1863.249156][T23571] usb_disconnect+0x2e1/0x9c0 [ 1863.253823][T23571] hub_event+0x1c81/0x4fe0 [ 1863.258227][T23571] ? __lock_acquire+0xb97/0x1ce0 [ 1863.263142][T23571] ? __pfx_hub_event+0x10/0x10 [ 1863.267898][T23571] ? interval_tree_iter_first+0xf0/0x250 [ 1863.273524][T23571] ? rcu_is_watching+0x12/0xc0 [ 1863.278264][T23571] process_one_work+0x9cc/0x1b70 [ 1863.283193][T23571] ? __pfx_process_one_work+0x10/0x10 [ 1863.288541][T23571] ? assign_work+0x1a0/0x250 [ 1863.293101][T23571] worker_thread+0x6c8/0xf10 [ 1863.297668][T23571] ? __kthread_parkme+0x19e/0x250 [ 1863.302676][T23571] ? __pfx_worker_thread+0x10/0x10 [ 1863.307761][T23571] kthread+0x3c5/0x780 [ 1863.311821][T23571] ? __pfx_kthread+0x10/0x10 [ 1863.316381][T23571] ? rcu_is_watching+0x12/0xc0 [ 1863.321120][T23571] ? __pfx_kthread+0x10/0x10 [ 1863.325681][T23571] ret_from_fork+0x5d7/0x6f0 [ 1863.330243][T23571] ? __pfx_kthread+0x10/0x10 [ 1863.334807][T23571] ret_from_fork_asm+0x1a/0x30 [ 1863.339551][T23571] [ 1863.342774][T23571] Kernel Offset: disabled [ 1863.347080][T23571] Rebooting in 86400 seconds..