last executing test programs: 51.749889759s ago: executing program 2 (id=2994): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000069111200000000008510000002000000850000000500000095000000000000009500a50500000000a1521c8c818a4f42204ddd2a1763059335b3f9c2188b5aa6aedbf9297a97dfaa154ec665f9cad5153a9ad1"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x0, @remote, 0x0, 0x200000001, 'ovf\x00', 0x0, 0x0, 0x29}, 0x2c) mkdirat(0xffffffffffffff9c, 0x0, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800000000000008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) recvfrom$inet(r2, &(0x7f0000000180)=""/85, 0x55, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 50.736155575s ago: executing program 2 (id=2999): r0 = syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0xfd, 0x22c, &(0x7f0000000a40)="$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") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0xc, &(0x7f0000000380)=ANY=[@ANYRESHEX=r1], 0x0, 0x200, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) fspick(r0, &(0x7f0000000340)='./bus\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000001200)='syzkaller\x00'}, 0x90) r6 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000004000004000000000200000004000000090000000400000005000000a607c70c6a7f0901708b20ffff0a80000003000000010000000600400005000000070000000000"], 0x0, 0x56}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x21, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, &(0x7f00000001c0)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x4d5337314ea54c74, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x4, 0x0, 0xffffffff}, 0x10, 0x0, r5}, 0x90) r8 = fsmount(r6, 0x1, 0xf3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r5, r8, 0x0, 0x0, @val=@iter={0x0}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xe, 0x0, 0x7fe2, 0x1, 0x1908, 0xffffffffffffffff, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x5}, 0x48) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x3, &(0x7f0000000180)=[{0x4c}, {0x1, 0xb6, 0x0, 0xfffffe00}, {0x6, 0x0, 0x3}]}) bpf$PROG_LOAD(0x5, 0x0, 0x2f) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000900)="ca0000000000000000", &(0x7f0000000380), 0x5, r9}, 0x38) 49.72157899s ago: executing program 2 (id=3004): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003b0000000800", @ANYRES32=r6, @ANYBLOB="25003300d0000000080211000001080211000000505050505050000003"], 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000180)=ANY=[], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x8b, 0x8b, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @datasec={0x4, 0x7, 0x0, 0xf, 0x3, [{0x2, 0xffffff7f, 0x7}, {0x5, 0xc4, 0x4c83}, {0x1, 0x9, 0x1ff}, {0x4, 0x9, 0x8}, {0x3, 0x10000, 0xf6}, {0x3, 0x9, 0x40}, {0x5, 0x5, 0x7}], "cc2f9d"}]}}, 0x0, 0xa6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0xfffffffffffffce7, 0x0, 0x0}, 0x50) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="7f8b8f73b786316d5172", 0xa}], 0x1, &(0x7f0000000140)=ANY=[], 0x58}, 0x0) r9 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(r7, &(0x7f0000000200)=ANY=[@ANYBLOB="4900030007"], 0xd) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r5, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x1}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040801}, 0x8805) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000612073582c137153e37080c18800bac0f000300", 0x33fe0}], 0x1, 0x0, 0x0, 0x8100000}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x309, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r12}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8, 0x1, 0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_MASTER={0x8, 0x3a}, @IFLA_GSO_MAX_SEGS={0x8}]}, 0x30}}, 0x0) 49.420511866s ago: executing program 2 (id=3007): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2400, 0x110, 0x8}, 0x18) syz_mount_image$cramfs(&(0x7f0000000440), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[], 0xfc, 0x15e, &(0x7f0000000480)="$eJzs0U1rE0Ecx/Hv7E4ewIQoRggeTG5Gg5AH9CYhKwYDxgVFEE+BuKKQEDGgPTb02kOg1xz6cC19C0nbQ2lJLn0VveRW6HHL7CYs7Wv4f27zm+H3n519/3ZRVETeDfp//nrDofej8NltN79cTacNk8eB5J398PysAb/QzDQsR2Di0zT8/N3zrO6gZ9bLBiQA58Eqp59Zz3OympGGCr69zk4SwTlrNTLMnsA3el6NWLB+qsHJhH1lYL4Hz/FxHoVZBbgGbFDKXN5PhEWtUv6xgo1J6ejw4tP8vPXqZd3brjbHL1I5uwTs46jkmRU9yWLe/ui23UWtWn2TLFcsXl+aQjbH6A+pf/BdgTZ9FkFfnNwz/RW2FOwEs5bHKm0+YvfG7Yf3qJuC/3YBVH7S7eRiB53sQwu7qM2uzz3mFwU70YsIIYQQQgghhBBCCCGEEEIIIYQQkdsAAAD//7ILTbU=") syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fdb000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000640)="400f3241d39efbffff7f36460f75510b2ef3420f090f01c5f20f0766260f01734cc74424ed00170000000044240200380000ff2c24410f3065450fa0", 0x3b}], 0x1, 0x1e, &(0x7f0000000140)=[@cr0={0x0, 0x60000001}, @cr4={0x1, 0x464530}], 0x22) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000240)={0x2, 0x6, 0x0, 0x1811155c9beceda3, 0x9, 0x0, 0x70bd2d, 0x0, [@sadb_lifetime={0x4, 0x4, 0x1, 0x7, 0xa53, 0x100000001}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e24}, @sadb_ident={0x2, 0xb, 0x0, 0x0, 0x10000000000002}]}, 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000900), 0x7, 0x4c6, &(0x7f0000000100)="$eJzs3EFsFFUfAPD/bFtaoHzsx8eHgqiLaGw0tlBQOJgYjCYeNDHiQY9NWwhSqKE1EUJkSQweDYl349GrB6/qzXgy8YpHE0NCDBfA05jZnW23292l3W670v5+ybLvzbzZN2/fvDdv3mMbwJZVyv5JIoYj4lZE7I6IQmOCUvXt/t2rkw/uXp2Mcpqe/ivJDot7WTyX5O8788hIIaLwebK4o87c5SvnJ2Zmpi/l8bH5Cx+PzV2+8tK5CxNnp89OXxw/efL4saMnXhl/efWFapJfVq57Bz6bPbj/rQ9vvjPZX9s+lL/Xl6NbSlFqdioVz3U7sx7bVRdO+tulfG39T4YVy67/rLoGKu1/d/RF28oDNpE0TdPB1rvLaaPry7YAj6wken0GQG/UbvTZ82/t1WwgsG19hh89d+dU9QEoK/f9/BXxdGVjbR5koOH5tptKEfFB+e+vs1es0zwEAEC9H0/VRoIN479ixL66dP/J11CKEfHfiNgTEf+LiL0R8f+opn0sIh5v+Py+iEjb5F9qiC8f/xRur62E7WXjv1fzta3F8V/Ur4IV+/LYrojagHn6SP6djMTA4JlzM9NH2+Tx0xu/fdlqX/34L3tl+dfGgvl53O5vmKCbmpif6LjADe5cjzjQ31j+pD8iWVgJSCJif0QcWMXnFuvC51749uBCZGBpuoeXvyJtuo7WhaWK9JuI56v1X44l9b+YY9J+fXJsKGamj4xlV8GRpnn88uuNd1vl/9Dyf/9H4yFvnvjhdN6y1i6r/x1113/U1m8Xy19MIpKF9dq51edx4/cvWj7TdHr9b0ver4Rrz6WfTszPXzoasS15e/n28cVja/HsPcrV8o8cbt7+9+THZN/EExGRXcRPRsRTUX1CLEV67VBEPBMRh9uU/+fXn/2o8/Kvr6z8U037vyX1v7he3yqQlKupm+zqO3/o1oMWncfK6v94JTSSb2ne/yVLuog2Z7oksNbvDwAAAB4FhYgYrptLGo5CYXS0Oge0N3YUZmbn5l88M/vJxanqbwSKMVCozXRV54MHktr8Z7EuPt4QP5bPG3/Vt70SH52cnZnqacmBnZU2nxRGF/qCavvP/NmdKWbg38xPfmDrelj733dzg04E2HDu/7B11bX/coskZf9TBjanldz/zQXC5tSs/V/r4Bjg0ZJqy7Clrab96ytgc+mP9xbChZ6eCbDR3NNhS1rRj+Q7DqSDzXcNxfLEMdT+A/uis9PY3iSvngSykVVPct/eyVG1v6bQMk0UVveBg9GdOj2z9q/l7L6uX/xpvj7W7Rr8bkPaabNA+35jfHj9+iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu+icAAP//KPXcbw==") rmdir(&(0x7f0000000340)='./file0\x00') socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e0400470c"], 0x7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) r5 = openat$cgroup_ro(r3, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x9c) sendto$inet6(r5, &(0x7f0000000600)="100a1c151defa7884d7e3f1b502532fcb074d756b7686c14b009aec3eeb211c2bfdd8e8655e3bc689352130bfc498df896b156543ee94a6a6d", 0x39, 0x40, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000000)="4dcdc7c6223e00000000ffff8137", 0xe, 0x0, &(0x7f0000000080)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', r7, 0xffffffffffffffff, 0x0, 0x4}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="04230300000000001400030067656e65766531"], 0x3c}}, 0x0) 49.036854315s ago: executing program 2 (id=3010): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000e3ff0000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000069111200000000008510000002000000850000000500000095000000000000009500a50500000000a1521c8c818a4f42204ddd2a1763059335b3f9c2188b5aa6aedbf9297a97dfaa154ec665f9cad5153a9ad1"], &(0x7f00000003c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) ioctl$TUNSETIFF(0xffffffffffffffff, 0x5452, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x483, &(0x7f0000001280)={0x0, @remote, 0x0, 0x200000001, 'ovf\x00', 0x0, 0x0, 0x29}, 0x2c) mkdirat(0xffffffffffffff9c, 0x0, 0xc1) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x800000000000008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x401, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) recvfrom$inet(r2, &(0x7f0000000180)=""/85, 0x55, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r8, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 47.854283406s ago: executing program 2 (id=3013): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000580)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x56, 0x0, 0x9, [0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010100}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0x0, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @ra={0x94, 0x4}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_io_uring_setup(0x24f9, &(0x7f0000000080), 0x0, 0x0) 10.147794205s ago: executing program 4 (id=3116): mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r1 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r1, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x82) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r2, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) 8.527091933s ago: executing program 3 (id=3119): r0 = socket(0x0, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 8.041796758s ago: executing program 4 (id=3121): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x408c1) 7.160131113s ago: executing program 1 (id=3122): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000016"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, 0x0, 0x0) 7.099187362s ago: executing program 4 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='ext4_drop_inode\x00', r1}, 0x10) unlink(&(0x7f0000000140)='./cgroup\x00') 7.071806926s ago: executing program 0 (id=3124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @timestamp, @mss, @mss, @timestamp, @mss, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000004c0)="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", 0x109e8, 0x805, 0x0, 0x6) 7.025602253s ago: executing program 3 (id=3125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() socket$kcm(0x10, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x0, 0x8, 0x1000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup(r3, &(0x7f00000001c0)='syz1\x00', 0x1ff) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x800) recvfrom$llc(r7, &(0x7f0000000140)=""/43, 0x2b, 0x80, &(0x7f0000000180)={0x1a, 0x206, 0x7, 0x4, 0xfe, 0x2, @random="af013c12e26d"}, 0x10) write(r6, &(0x7f0000000000)="2e000300010000", 0x7) 6.901891652s ago: executing program 4 (id=3126): openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0xde02}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000040)={'lo\x00'}) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18) close(r1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8}]}, 0x24}}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000074020440fd07010099090000000109021b0001000000000904"], 0x0) 6.900174532s ago: executing program 1 (id=3127): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) shutdown(0xffffffffffffffff, 0x1) 6.863068268s ago: executing program 0 (id=3128): syz_read_part_table(0x5da, &(0x7f0000000280)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xec, r1, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d210a9fac9de02cc8012bbdf6829ce4a95632b5e04a6f0a3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "84b30b09149968bb5278fe7430408a641f8360e682aa4034"}]]}, 0xec}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x4, 0x5}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x2002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x67df, 0x4) write$binfmt_script(r6, &(0x7f00000000c0), 0x28) 6.754446845s ago: executing program 1 (id=3129): r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 4.002180726s ago: executing program 0 (id=3130): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000740)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x1, 0x174, &(0x7f0000000240)="$eJzskj9OAkEUxr9Zlj9aGE2saCCRKBbKsqgxNlpi7wEksCJxUWE3UQjFGmMoLIylJ+AaJl5AC+MBqCmItVkzs28ns17B+RV88755b2beY8+9npcF8DMfNXEEQQpL+GAMJoACi7yZEekz6SfpUyR4p7xj8u9J895geNFwXadfPChiJWEA+BaetLzDOwMzcdTXfNTki1MAYRiG3GsBPB1qTgpAT8nJm8CqaCKUObwRHmwAqPjd64o3GG51uo2203Yubbu2Z+1Y1q5dOeu4jhX9MuUKagVcNwHweS0o+2kAD5SziCRMeRrtM7U2o8ywvJasNZTaWBleZW0W8f8FnGAdOQA3AVPckjjFhGipDoYUBVVTeV90V05sbDev3NYYDCwum8CUZ1SnSMvAVoPafhA/e0xaIq2TTkinpIU/n4wpTnikqBwAGdw2fL9f5UOKVtKzpWcvB+rA+K0vRrK5NwMajUaj0Wg0Go1G89/5DQAA///T4Xqr") r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', 0x0, 0x0) execveat(r4, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) 4.001717687s ago: executing program 1 (id=3131): sched_setscheduler(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x264e33, 0x0) 3.988891249s ago: executing program 3 (id=3132): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x408c1) 3.975612411s ago: executing program 4 (id=3133): r0 = syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x40020, &(0x7f0000000340)=ANY=[], 0x2, 0x7cf, &(0x7f0000000640)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x40448d5) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) prlimit64(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x11, 0xfffffffffffffffd) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r3, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, 0xe) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, &(0x7f0000000140)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="de954b151c09f811b6436911e98a80cd6be145baf7435db21c04585c47a7f562b11862d0aef4d830e011cffeb31a214053d8976b9d0fb6f50a684b3badaa2ddb084946dae531d3780b90b6b59f95bd55a94f"]) 3.761955603s ago: executing program 3 (id=3134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r6, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r5}, 0x20) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20000094}}, 0x0) 2.668453401s ago: executing program 0 (id=3135): r0 = socket(0x0, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 2.655334013s ago: executing program 1 (id=3136): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000016"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, 0x0, 0x0) 2.654889463s ago: executing program 3 (id=3137): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0xf84}, 0x1c) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@window, @mss, @timestamp, @mss, @mss, @timestamp, @mss, @sack_perm], 0x8) sendto$inet(r0, &(0x7f00000004c0)="3ce2de4d8d957a8de4e490b6cd04b988d4edef164bd3377aa381b5f50b7ca414516489f78cd7208982e9bde22b2b7c1c7606d565477f3db9d2b077283644c0f27ab52a863a42863e06944e40a0b3c5d21c8cbe102e7f726263f28aef1bc12a069063d4c30e8f329fdb36859be727fbef4314161e5fb5f01ae00a2634d5cdecca2089c62e32f4c919886b2b88d237e287318739bec0364caf15889f38a312ef6621c0f21709a4bf2b16274cf933f6ad8fcc9c2024bc1b4713f650e860f93ae93b2361956b3e80c38c5fd29b5c1b5d7ce67edc856a8dc0ba54cee53de9a48c131389426bd06ec7c695add357934fc0321f0d3d7982e4fe5a0039decc491a663afd02facb08dd9695f854c7b031d9af8bd7350897996b5208b23030cc0feb84570730eaf24b9f2ac05d0feb3be07a29f887095f36f3c8f0e77e45509acd14a5be4a1572dd4cd1231087b830fa03e071571d4abd694710ef140469cf6df8a59839aafe046a5bffb97e5247be901789eafd726ba090337a2c49207e6b900c7e982472e6aac70e5d52ca2c1bab47b1f6d00f9601e2281686c21f770ae96e0ffec4b30496d012fa00958f794cdbd721bd155cae87", 0x109e8, 0x805, 0x0, 0x6) 136.706929ms ago: executing program 0 (id=3138): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000340)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) shutdown(r0, 0x1) shutdown(0xffffffffffffffff, 0x1) 129.23259ms ago: executing program 1 (id=3139): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000004b57db0a640746ca768cb3"], 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x3, 0xffffffff}) 121.081631ms ago: executing program 3 (id=3140): syz_read_part_table(0x5da, &(0x7f0000000280)="$eJzs3DFoU1sYB/CTIBEFETe3BjNEXFLIGCJoiJcSMCH40EFEtzpk0ckhRjAgDsYlIrjUQRFqUB46iQiCiImDkKm0tG9pS+nwKHQJlJJH4XZ7S98jhcf7/eAM5zv/c797uNzx3sB/WjL8OR6PEyGE8dGD7/5tvnxpJl27UL8SQiJcDyFM/16Y3VtJxIn9q56J5yvxPP/5SOPJfPSo0z1x+mN652cyXn8Qj/XBixv/+nBM3Nm7575OjYanPlXCy/75fuF449psL1tq9X7VPlx8nX6z/9xzE+r/vvj95MP2nahzr3h7IWquRhvJ7a3o8vO5XOppq57dnI5zNyfUv7F7NfX21bdSe+1Y/kelWu2+W3qWaZa/tO8PB5nF0eNbcW75H7xdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcvrN3z32dGg1PfaqEl/3z/cLxxrXZXrbU6v2qfbj4Ov3mTJzLTaj/++L3kw/bd6LOveLthai5Gm0kt7eiy8/ncqmnrXp2czrO3ZxQ/8bu1dTbV99K7bVj+R+VarX7bulZpln+0r4/HGQWR49vxbnlo3+zeWpCNwUAAAAAAAAAAAAAAAAAAMD/TvnSTLp2oX4lhES4HkIozM0s7dXH8ffuiTi3/x+Albie/3yk8WQ+etTpnjj9Mb3z84+4/iAe64MXNw79MBzYXwEAAP//G+SKTw==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000b40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xec, r1, 0x8, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_macvtap\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'wg0\x00'}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'bridge_slave_0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d210a9fac9de02cc8012bbdf6829ce4a95632b5e04a6f0a3"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "84b30b09149968bb5278fe7430408a641f8360e682aa4034"}]]}, 0xec}, 0x1, 0x0, 0x0, 0x20040004}, 0x8000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) utime(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)={0x4, 0x5}) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x2002) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x67df, 0x4) write$binfmt_script(r6, &(0x7f00000000c0), 0x28) 120.196692ms ago: executing program 4 (id=3141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() socket$kcm(0x10, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x14}, 0x14}}, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x2, 0x0, &(0x7f00000000c0)) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x0, 0x8, 0x1000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) mkdirat$cgroup(r3, &(0x7f00000001c0)='syz1\x00', 0x1ff) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000100)) r7 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x800) recvfrom$llc(r7, &(0x7f0000000140)=""/43, 0x2b, 0x80, &(0x7f0000000180)={0x1a, 0x206, 0x7, 0x4, 0xfe, 0x2, @random="af013c12e26d"}, 0x10) write(r6, &(0x7f0000000000)="2e000300010000", 0x7) 0s ago: executing program 0 (id=3142): r0 = socket$inet(0x2, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008800, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1) sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) kernel console output (not intermixed with test programs): 2(bridge_slave_1) entered disabled state [ 508.166452][ T4016] device bridge_slave_0 left promiscuous mode [ 508.175503][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.236643][ T4016] device veth1_macvtap left promiscuous mode [ 508.242875][ T4016] device veth0_macvtap left promiscuous mode [ 508.243718][ T8691] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 508.264405][ T4016] device veth1_vlan left promiscuous mode [ 508.270897][ T4016] device veth0_vlan left promiscuous mode [ 508.514593][ T8691] usb 1-1: Using ep0 maxpacket: 8 [ 508.639204][ T4016] team0 (unregistering): Port device team_slave_1 removed [ 508.661387][ T4016] team0 (unregistering): Port device team_slave_0 removed [ 508.680862][ T4016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 508.703977][ T4016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 508.731369][ T8691] usb 1-1: config 32 has an invalid interface number: 77 but max is 1 [ 508.754880][ T8691] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 508.799932][ T8691] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 508.827296][ T8691] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 508.834673][ T4016] bond0 (unregistering): Released all slaves [ 508.859994][ T8691] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 508.870904][ T8691] usb 1-1: config 32 has no interface number 0 [ 508.878831][ T8691] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 508.897321][T12044] loop3: detected capacity change from 0 to 64 [ 508.903742][ T8691] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 508.939283][ T8691] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 508.989500][ T8691] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 509.009082][ T8691] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 509.021408][ T8691] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 509.080859][ T8691] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 509.098012][ T8691] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 509.111670][T12052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.124810][ T8691] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 509.137282][ T8691] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 509.147752][ T8691] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 509.161536][ T8691] usb 1-1: config 32 interface 77 has no altsetting 0 [ 509.192697][T12052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.327078][T12055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.338635][ T8691] usb 1-1: Dual-Role OTG device on HNP port [ 509.360887][ T8691] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 509.379435][ T8691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.407730][ T8691] usb 1-1: Product: syz [ 509.431720][ T8691] usb 1-1: Manufacturer: syz [ 509.445120][ T8691] usb 1-1: SerialNumber: syz [ 509.654622][T11950] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 509.691816][T11950] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 509.754810][T11950] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 509.812954][T11950] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 509.842347][T12066] loop1: detected capacity change from 0 to 764 [ 509.859777][ T8691] option 1-1:32.77: GSM modem (1-port) converter detected [ 509.923182][ T8691] usb 1-1: USB disconnect, device number 54 [ 509.993112][ T8691] option 1-1:32.77: device disconnected [ 510.097287][ T3559] Bluetooth: hci1: command tx timeout [ 510.186276][T11950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.329188][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.369888][ T3588] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.370720][T12075] loop1: detected capacity change from 0 to 16 [ 510.430592][T11950] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.480413][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 510.510885][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.519442][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.526584][ T8618] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.568650][T12075] erofs: (device loop1): mounted with root inode @ nid 36. [ 510.582246][T12082] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.584998][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 510.672039][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 510.680892][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 510.759926][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.767093][ T8618] bridge0: port 2(bridge_slave_1) entered forwarding state [ 510.818189][T12086] loop0: detected capacity change from 0 to 16 [ 510.836511][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 510.965463][T12088] loop3: detected capacity change from 0 to 8 [ 511.023868][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.024012][T12086] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 511.082075][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.125375][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.157615][ T3559] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[9000] [ 511.194418][T11950] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.304272][T11950] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.328763][T12075] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 511.438314][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.530229][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.615929][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.657862][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.678425][T12107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.714820][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.747717][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.768958][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.780153][T12107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.895980][ T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 512.352260][ T3559] Bluetooth: hci1: command tx timeout [ 512.674345][T12107] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.875439][ T26] audit: type=1800 audit(1719474647.667:1983): pid=12075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2673" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 512.915043][T12119] syz.0.2684[12119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.915152][T12119] syz.0.2684[12119] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 512.917613][T12075] syz.1.2673 (12075) used greatest stack depth: 17424 bytes left [ 513.009819][ T3560] Bluetooth: hci0: SCO packet for unknown connection handle 1 [ 513.129027][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 513.287670][T12123] loop4: detected capacity change from 0 to 64 [ 513.407045][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 513.605785][T11950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.736287][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 513.758250][ T8618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 513.874954][T12137] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2688'. [ 513.969428][T12139] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 514.054944][T12139] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 514.095031][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 514.104095][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 514.152794][T12142] bond3 (unregistering): (slave batadv1): Releasing backup interface [ 514.182916][ T22] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 514.201484][T12142] bond3 (unregistering): Released all slaves [ 514.237572][T11950] device veth0_vlan entered promiscuous mode [ 514.245110][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 514.263120][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 514.301206][T12144] device ip6gretap0 entered promiscuous mode [ 514.343646][T12144] device macsec1 entered promiscuous mode [ 514.388526][T12144] device ip6gretap0 left promiscuous mode [ 514.443022][ T22] usb 2-1: Using ep0 maxpacket: 32 [ 514.483940][T11950] device veth1_vlan entered promiscuous mode [ 514.573602][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 514.597392][ T22] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 514.601652][ T8689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 514.618103][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.635689][T11950] device veth0_macvtap entered promiscuous mode [ 514.661693][ T22] usb 2-1: config 0 descriptor?? [ 514.665656][T11950] device veth1_macvtap entered promiscuous mode [ 514.704943][ T22] gspca_main: sunplus-2.14.0 probing 041e:400b [ 514.735474][ T3593] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 514.746375][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.768196][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.807742][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.829326][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.848291][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.881310][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.891257][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 514.907076][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 514.943106][T11950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.951294][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 514.962933][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 514.972901][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 514.987424][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 515.006976][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.018008][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.027825][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.047266][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.057517][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.068276][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.080030][T11950] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 515.090570][T11950] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 515.101581][T11950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.114841][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 515.127478][ T8691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 515.137897][T11950] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.146743][T11950] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.163357][T11950] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.173867][T11950] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.188618][ T3593] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 515.211472][ T3593] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 515.224897][ T3593] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 515.234275][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.239039][ T26] audit: type=1326 audit(1719474649.845:1984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.247796][ T3593] usb 1-1: config 0 descriptor?? [ 515.291933][ T26] audit: type=1326 audit(1719474649.845:1985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.325457][ T26] audit: type=1326 audit(1719474649.873:1986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.370382][ T26] audit: type=1326 audit(1719474649.873:1987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.437455][ T26] audit: type=1326 audit(1719474649.873:1988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.471195][ T3771] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.494639][ T3771] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.512646][ T4016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.520773][ T8694] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 515.530440][ T26] audit: type=1326 audit(1719474649.873:1989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.554803][ T3587] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 515.563960][ T4016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.578021][ T26] audit: type=1326 audit(1719474649.873:1990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.601804][ T26] audit: type=1326 audit(1719474649.873:1991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.637890][ T3615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 515.644440][ T26] audit: type=1326 audit(1719474649.873:1992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12157 comm="syz.3.2695" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 515.756064][ T22] gspca_sunplus: reg_r err -110 [ 515.760958][ T22] sunplus: probe of 2-1:0.0 failed with error -110 [ 515.906967][ T3593] usbhid 1-1:0.0: can't add hid device: -71 [ 515.913031][ T3593] usbhid: probe of 1-1:0.0 failed with error -71 [ 515.922900][ T3593] usb 1-1: USB disconnect, device number 55 [ 516.018564][ T3587] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.037922][ T3587] usb 5-1: config 0 interface 0 has no altsetting 0 [ 516.044585][ T3587] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 516.062495][ T3587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.078269][ T3587] usb 5-1: config 0 descriptor?? [ 516.133895][ T3615] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 516.153705][ T3587] usb 5-1: selecting invalid altsetting 0 [ 516.204394][ T3587] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 516.280759][ T3587] usb 2-1: USB disconnect, device number 51 [ 517.203115][ T8694] usb 5-1: USB disconnect, device number 50 [ 517.358260][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 517.388479][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 517.410483][ T3615] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 517.431378][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.457691][ T3615] usb 3-1: config 0 descriptor?? [ 517.730900][T12168] netlink: 'syz.2.2696': attribute type 4 has an invalid length. [ 517.794809][T12197] netlink: 'syz.2.2696': attribute type 4 has an invalid length. [ 517.954333][ T8694] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 518.078103][ T3615] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0 [ 518.133571][ T3615] arvo 0003:1E7D:30D4.002E: unknown main item tag 0x0 [ 518.181073][ T3615] arvo 0003:1E7D:30D4.002E: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.2-1/input0 [ 518.225330][ T8694] usb 2-1: Using ep0 maxpacket: 8 [ 518.302926][ T3615] arvo 0003:1E7D:30D4.002E: couldn't init struct arvo_device [ 518.313501][ T3615] arvo 0003:1E7D:30D4.002E: couldn't install keyboard [ 518.339449][ T3615] arvo: probe of 0003:1E7D:30D4.002E failed with error -71 [ 518.377821][ T3615] usb 3-1: USB disconnect, device number 44 [ 518.442026][ T8694] usb 2-1: config 32 has an invalid interface number: 77 but max is 1 [ 518.452801][ T936] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 518.477872][ T8694] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 518.512263][ T8694] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 518.553674][ T8694] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 518.568079][ T8694] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 518.612625][ T8694] usb 2-1: config 32 has no interface number 0 [ 518.623028][ T8694] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 518.645404][ T8694] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 518.662251][ T8694] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid wMaxPacketSize 0 [ 518.680471][ T8694] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 518.704995][ T8694] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 518.715978][ T936] usb 5-1: Using ep0 maxpacket: 32 [ 518.725325][ T8694] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 518.736512][ T8694] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 518.748456][ T8694] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 518.761040][ T8694] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 518.774517][ T8694] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 518.788284][ T8694] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 518.829184][ T8694] usb 2-1: config 32 interface 77 has no altsetting 0 [ 518.843010][ T936] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 518.852958][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.870745][ T936] usb 5-1: config 0 descriptor?? [ 518.886257][ T3593] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 518.921036][ T936] gspca_main: sunplus-2.14.0 probing 041e:400b [ 519.016479][ T8694] usb 2-1: Dual-Role OTG device on HNP port [ 519.038246][ T8694] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 519.046054][T12206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2711'. [ 519.080176][ T8694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.110787][ T8694] usb 2-1: Product: syz [ 519.121740][ T8694] usb 2-1: Manufacturer: syz [ 519.126748][ T8694] usb 2-1: SerialNumber: syz [ 519.537357][ T3593] usb 1-1: config 184 has an invalid interface number: 90 but max is 0 [ 519.567780][ T3593] usb 1-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config [ 519.749915][ T3593] usb 1-1: config 184 has no interface number 0 [ 519.848198][ T3593] usb 1-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 520.032740][ T3593] usb 1-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 520.046652][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 520.046822][ T26] audit: type=1326 audit(1719474654.228:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12199 comm="syz.4.2708" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x0 [ 520.067624][ T936] gspca_sunplus: reg_r err -110 [ 520.090208][ T936] sunplus: probe of 5-1:0.0 failed with error -110 [ 520.198693][ T3593] usb 1-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24 [ 520.207792][ T3593] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.329002][ T8694] option 2-1:32.77: GSM modem (1-port) converter detected [ 520.369970][ T8694] usb 2-1: USB disconnect, device number 52 [ 520.422844][ T8694] option 2-1:32.77: device disconnected [ 520.498425][T12226] device ip6gretap0 entered promiscuous mode [ 520.509497][T12226] device macsec1 entered promiscuous mode [ 520.511415][ T3593] usb 1-1: USB disconnect, device number 56 [ 520.532151][T12226] device ip6gretap0 left promiscuous mode [ 521.101251][T12244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2722'. [ 521.327126][T12249] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 521.334374][ T26] audit: type=1326 audit(1719474655.464:2018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.381434][T12249] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 521.409969][ T26] audit: type=1326 audit(1719474655.464:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.461569][ T26] audit: type=1326 audit(1719474655.464:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.492655][T12244] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 521.495079][ T26] audit: type=1326 audit(1719474655.464:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.534045][ T26] audit: type=1326 audit(1719474655.464:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.563171][ T8694] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 521.571481][T12244] bond2 (unregistering): Released all slaves [ 521.633104][ T26] audit: type=1326 audit(1719474655.464:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.702871][ T26] audit: type=1326 audit(1719474655.464:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.809164][ T26] audit: type=1326 audit(1719474655.464:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.871872][ T26] audit: type=1326 audit(1719474655.464:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12251 comm="syz.0.2723" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 521.899109][ T8694] usb 2-1: Using ep0 maxpacket: 16 [ 521.910864][ T936] usb 5-1: USB disconnect, device number 51 [ 522.148588][ T3593] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 522.203347][ T8694] usb 2-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 522.212418][ T8694] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.252720][ T8694] usb 2-1: Product: syz [ 522.267956][ T8694] usb 2-1: Manufacturer: syz [ 522.278348][ T8694] usb 2-1: SerialNumber: syz [ 522.291220][ T8694] usb 2-1: config 0 descriptor?? [ 522.419536][ T3593] usb 4-1: Using ep0 maxpacket: 8 [ 522.560794][ T3593] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 522.571225][ T8694] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 522.571757][ T3593] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 522.598059][ T3593] usb 4-1: config 0 descriptor?? [ 522.609297][ T8694] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 522.628433][ T8694] dib0700: firmware download failed at 7 with -22 [ 522.657931][ T8694] usb 2-1: USB disconnect, device number 53 [ 522.831348][ T3587] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 522.885604][ T3593] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 522.908807][ T3593] asix: probe of 4-1:0.0 failed with error -71 [ 522.923255][ T3593] usb 4-1: USB disconnect, device number 49 [ 523.028057][T12276] device ip6gretap0 entered promiscuous mode [ 523.034117][T12276] device macsec1 entered promiscuous mode [ 523.050536][T12276] device ip6gretap0 left promiscuous mode [ 523.134779][ T3587] usb 1-1: Using ep0 maxpacket: 8 [ 523.351831][ T3587] usb 1-1: config 32 has an invalid interface number: 77 but max is 1 [ 523.360840][ T3587] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 523.402618][ T3587] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 523.440198][ T3587] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 523.486346][ T3587] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 523.518346][ T3587] usb 1-1: config 32 has no interface number 0 [ 523.542850][ T3587] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 523.575474][ T3587] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 523.617660][ T3587] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid wMaxPacketSize 0 [ 523.659140][ T3587] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 523.692439][T12293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2739'. [ 523.711665][ T3587] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 523.752783][ T3587] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 523.798427][ T3587] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 523.838210][ T3587] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 523.870737][ T3587] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 523.898470][ T3587] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 523.940030][ T3587] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 523.971715][ T3587] usb 1-1: config 32 interface 77 has no altsetting 0 [ 524.164392][ T3587] usb 1-1: Dual-Role OTG device on HNP port [ 524.197543][ T3587] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 524.231846][ T3587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.287546][ T3587] usb 1-1: Product: syz [ 524.313960][ T3587] usb 1-1: Manufacturer: syz [ 524.335853][ T3587] usb 1-1: SerialNumber: syz [ 524.391980][ T8689] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 524.457241][ T8694] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 524.717074][ T8694] usb 4-1: Using ep0 maxpacket: 16 [ 524.772428][ T3587] option 1-1:32.77: GSM modem (1-port) converter detected [ 524.784505][ T3587] usb 1-1: USB disconnect, device number 57 [ 524.793129][ T8689] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 524.805644][ T8689] usb 2-1: config 0 interface 0 has no altsetting 0 [ 524.810393][ T3587] option 1-1:32.77: device disconnected [ 524.813213][ T8689] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 524.832550][ T8689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.852630][ T8689] usb 2-1: config 0 descriptor?? [ 524.905129][ T8689] usb 2-1: selecting invalid altsetting 0 [ 524.929560][ T8689] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 525.042225][ T8694] usb 4-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 525.051379][ T8694] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.064818][ T8694] usb 4-1: Product: syz [ 525.069009][ T8694] usb 4-1: Manufacturer: syz [ 525.073615][ T8694] usb 4-1: SerialNumber: syz [ 525.080269][ T8694] usb 4-1: config 0 descriptor?? [ 525.218071][ T3593] usb 2-1: USB disconnect, device number 54 [ 525.367297][ T8694] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 525.377924][ T8694] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 525.390712][ T8694] dib0700: firmware download failed at 7 with -22 [ 525.400428][ T8694] usb 4-1: USB disconnect, device number 50 [ 525.587162][ T3587] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 525.690307][T12332] loop4: detected capacity change from 0 to 16 [ 525.717405][T12332] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 525.778930][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2753'. [ 525.887569][ T3587] usb 1-1: Using ep0 maxpacket: 8 [ 525.940660][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 525.940676][ T26] audit: type=1326 audit(1719474659.718:2083): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 525.992645][ T26] audit: type=1326 audit(1719474659.727:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.023207][ T26] audit: type=1326 audit(1719474659.727:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.045612][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.052688][ T3587] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 526.066858][ T3587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.079962][ T3587] usb 1-1: config 0 descriptor?? [ 526.090594][ T26] audit: type=1326 audit(1719474659.727:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.113965][ T26] audit: type=1326 audit(1719474659.727:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.136400][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.144956][ T26] audit: type=1326 audit(1719474659.727:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.169838][ T26] audit: type=1326 audit(1719474659.727:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.192331][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.221524][ T26] audit: type=1326 audit(1719474659.727:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.244028][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.259071][ T26] audit: type=1326 audit(1719474659.727:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.281526][ C1] vkms_vblank_simulate: vblank timer overrun [ 526.322356][ T26] audit: type=1326 audit(1719474659.727:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12337 comm="syz.2.2756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f08b4f75ae9 code=0x7ffc0000 [ 526.364472][ T3587] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 526.382536][ T3587] asix: probe of 1-1:0.0 failed with error -71 [ 526.401354][ T3587] usb 1-1: USB disconnect, device number 58 [ 526.545045][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 527.155885][T12369] loop2: detected capacity change from 0 to 16 [ 527.163166][T12369] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 527.180413][T12367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2765'. [ 527.297537][ T3587] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 527.708503][ T3587] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.722872][ T3587] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 527.769417][ T3587] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 527.800098][T12365] loop1: detected capacity change from 0 to 40427 [ 527.800248][ T8694] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 527.806886][ T3587] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.845063][T12365] F2FS-fs (loop1): Invalid segment count (0) [ 527.856073][ T3587] usb 1-1: config 0 descriptor?? [ 527.861314][T12365] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 527.880821][T12365] F2FS-fs (loop1): invalid crc value [ 527.955354][T12365] F2FS-fs (loop1): Found nat_bits in checkpoint [ 528.038656][T12365] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 528.053522][T12365] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 528.202690][T12395] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2764'. [ 528.217759][ T8694] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 528.235099][ T8694] usb 5-1: config 0 interface 0 has no altsetting 0 [ 528.242410][ T8694] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 528.251688][ T8695] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 528.259441][ T8694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.280955][ T8694] usb 5-1: config 0 descriptor?? [ 528.333932][ T8694] usb 5-1: selecting invalid altsetting 0 [ 528.378048][ T8694] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 528.400717][ T7668] syz-executor: attempt to access beyond end of device [ 528.400717][ T7668] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 528.521010][ T8695] usb 4-1: Using ep0 maxpacket: 8 [ 528.521266][ T3587] usbhid 1-1:0.0: can't add hid device: -71 [ 528.543050][ T3587] usbhid: probe of 1-1:0.0 failed with error -71 [ 528.564637][ T3587] usb 1-1: USB disconnect, device number 59 [ 528.651345][ T8695] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 528.670728][ T8695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.695387][ T8695] usb 4-1: config 0 descriptor?? [ 528.708701][ T8689] usb 5-1: USB disconnect, device number 52 [ 528.924798][T12402] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2777'. [ 528.976399][ T8695] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 529.031387][ T8695] asix: probe of 4-1:0.0 failed with error -71 [ 529.059272][ T8695] usb 4-1: USB disconnect, device number 51 [ 529.151757][T12409] loop2: detected capacity change from 0 to 16 [ 529.209056][T12409] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 529.559277][T12418] loop0: detected capacity change from 0 to 256 [ 529.877647][T12425] loop2: detected capacity change from 0 to 512 [ 529.885046][T12425] EXT4-fs: Ignoring removed oldalloc option [ 529.891218][T12425] ext4: Unknown parameter 'nog' [ 530.202613][ T3560] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 530.211534][ T3560] Bluetooth: hci0: Injecting HCI hardware error event [ 530.227441][ T3559] Bluetooth: hci0: hardware error 0x00 [ 530.610245][ T3538] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 531.077457][T12447] loop1: detected capacity change from 0 to 16 [ 531.096321][T12447] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 531.284742][ T3587] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 531.544734][ T8695] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 531.555918][ T8694] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 531.648543][T12457] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2798'. [ 531.660706][T12457] ieee802154 phy0 wpan0: encryption failed: -22 [ 531.682795][ T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 531.691626][ T48] Bluetooth: hci1: Injecting HCI hardware error event [ 531.701637][ T48] Bluetooth: hci1: hardware error 0x00 [ 531.720298][ T3587] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 531.732401][ T3587] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 531.745741][ T3587] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 531.754940][ T3587] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.764987][ T3587] usb 3-1: config 0 descriptor?? [ 531.826751][ T8695] usb 4-1: Using ep0 maxpacket: 8 [ 531.998242][T12463] loop4: detected capacity change from 0 to 8 [ 532.075968][ T8694] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.086912][ T8695] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 532.096002][ T8695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.105426][ T8694] usb 2-1: config 0 interface 0 has no altsetting 0 [ 532.112546][ T8694] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 532.122564][ T8694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.131513][ T8695] usb 4-1: config 0 descriptor?? [ 532.150744][ T8694] usb 2-1: config 0 descriptor?? [ 532.197524][ T8694] usb 2-1: selecting invalid altsetting 0 [ 532.226022][ T8694] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 532.249307][ T3592] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 532.390462][ T3587] usbhid 3-1:0.0: can't add hid device: -71 [ 532.396433][ T3587] usbhid: probe of 3-1:0.0 failed with error -71 [ 532.416080][ T3587] usb 3-1: USB disconnect, device number 45 [ 532.422939][ T8695] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 532.435567][ T8695] asix: probe of 4-1:0.0 failed with error -71 [ 532.443661][ T8695] usb 4-1: USB disconnect, device number 52 [ 532.461070][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 532.467480][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 532.477556][ T3593] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 532.552276][ T22] usb 2-1: USB disconnect, device number 55 [ 532.560337][ T3592] usb 1-1: Using ep0 maxpacket: 16 [ 532.629311][ T3559] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 532.913306][ T3592] usb 1-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 532.923606][ T3592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.931644][ T3592] usb 1-1: Product: syz [ 532.936331][ T3593] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 532.946652][ T3592] usb 1-1: Manufacturer: syz [ 532.951331][ T3592] usb 1-1: SerialNumber: syz [ 532.961197][ T3592] usb 1-1: config 0 descriptor?? [ 533.114459][T12473] loop3: detected capacity change from 0 to 2048 [ 533.127784][ T3593] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 533.140744][ T3593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.141535][T12474] loop2: detected capacity change from 0 to 64 [ 533.157746][ T3593] usb 5-1: Product: syz [ 533.169873][ T3593] usb 5-1: Manufacturer: syz [ 533.178040][ T3593] usb 5-1: SerialNumber: syz [ 533.205237][T12473] Alternate GPT is invalid, using primary GPT. [ 533.258774][T12473] loop3: p1 p2 p3 [ 533.268372][ T3592] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 533.282341][ T3593] usb 5-1: config 0 descriptor?? [ 533.296052][ T3592] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 533.305624][ T3592] dib0700: firmware download failed at 7 with -22 [ 533.324908][ T3592] usb 1-1: USB disconnect, device number 60 [ 533.400232][ T3002] Alternate GPT is invalid, using primary GPT. [ 533.411802][ T3002] loop3: p1 p2 p3 [ 533.512672][ T26] kauditd_printk_skb: 94 callbacks suppressed [ 533.512687][ T26] audit: type=1326 audit(1719474666.703:2187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12477 comm="syz.1.2803" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x0 [ 533.540711][ C1] vkms_vblank_simulate: vblank timer overrun [ 533.811122][ T3592] usb 5-1: USB disconnect, device number 53 [ 533.920733][T12484] random: crng reseeded on system resumption [ 534.363574][ T48] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 535.205943][T12494] loop4: detected capacity change from 0 to 16 [ 535.235378][T12494] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 535.280494][ T26] audit: type=1326 audit(1719474668.336:2188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 535.342554][ T26] audit: type=1326 audit(1719474668.336:2189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 535.504181][ T26] audit: type=1326 audit(1719474668.373:2190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 535.526566][ C1] vkms_vblank_simulate: vblank timer overrun [ 535.565058][ T26] audit: type=1326 audit(1719474668.373:2191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 535.625357][T12504] loop4: detected capacity change from 0 to 256 [ 535.889173][ T26] audit: type=1326 audit(1719474668.373:2192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 536.062428][T12512] loop0: detected capacity change from 0 to 8 [ 536.605932][ T26] audit: type=1326 audit(1719474668.373:2193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 536.628274][ C1] vkms_vblank_simulate: vblank timer overrun [ 536.660341][ T26] audit: type=1326 audit(1719474668.373:2194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 536.714368][ T26] audit: type=1326 audit(1719474668.373:2195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 536.792840][ T26] audit: type=1326 audit(1719474668.373:2196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12495 comm="syz.1.2808" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa399175ae9 code=0x7ffc0000 [ 537.180531][ T3587] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 537.294190][T12536] random: crng reseeded on system resumption [ 537.765731][ T3592] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 537.773539][ T3593] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 537.906519][ T3587] usb 3-1: Using ep0 maxpacket: 16 [ 538.161817][T12538] loop3: detected capacity change from 0 to 64 [ 538.276090][ T3593] usb 2-1: Using ep0 maxpacket: 8 [ 538.319078][ T3587] usb 3-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 538.332082][ T3587] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.341266][ T3587] usb 3-1: Product: syz [ 538.345636][ T3587] usb 3-1: Manufacturer: syz [ 538.350345][ T3587] usb 3-1: SerialNumber: syz [ 538.365004][ T3587] usb 3-1: config 0 descriptor?? [ 538.535336][ T3593] usb 2-1: config 32 has an invalid interface number: 77 but max is 1 [ 538.543582][ T3593] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 538.554014][ T3593] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 538.564468][ T3593] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 538.574963][ T3593] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 538.584262][ T3593] usb 2-1: config 32 has no interface number 0 [ 538.590776][ T3593] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 538.602195][ T3593] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 538.615540][ T3593] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 538.627101][ T3592] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 538.636336][ T3592] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.644836][ T3587] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 538.662352][ T3587] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 538.670747][ T3593] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 538.682023][ T3592] usb 1-1: Product: syz [ 538.686264][ T3592] usb 1-1: Manufacturer: syz [ 538.691182][ T3592] usb 1-1: SerialNumber: syz [ 538.700338][ T3587] dib0700: firmware download failed at 7 with -22 [ 538.711589][ T3593] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 538.711774][ T3592] usb 1-1: config 0 descriptor?? [ 538.728087][ T3593] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 538.740304][ T3587] usb 3-1: USB disconnect, device number 46 [ 538.758635][ T3593] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 538.775335][ T3593] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 538.797634][ T3593] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 538.812370][ T3593] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 538.827457][ T3593] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 538.841426][ T3593] usb 2-1: config 32 interface 77 has no altsetting 0 [ 539.008999][ T8689] usb 1-1: USB disconnect, device number 61 [ 539.024137][ T3593] usb 2-1: Dual-Role OTG device on HNP port [ 539.044528][ T3593] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 539.057545][ T3593] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.065753][ T3593] usb 2-1: Product: syz [ 539.070167][ T3593] usb 2-1: Manufacturer: syz [ 539.074828][ T3593] usb 2-1: SerialNumber: syz [ 539.239053][T12550] loop4: detected capacity change from 0 to 8 [ 539.338536][T12556] loop4: detected capacity change from 0 to 256 [ 539.575548][ T8689] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 539.663540][ T3593] option 2-1:32.77: GSM modem (1-port) converter detected [ 539.739653][ T3593] usb 2-1: USB disconnect, device number 56 [ 539.812858][ T3593] option 2-1:32.77: device disconnected [ 539.819125][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 539.819334][ T26] audit: type=1326 audit(1719474672.322:2240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12555 comm="syz.4.2827" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x0 [ 540.232691][ T26] audit: type=1326 audit(1719474672.894:2241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.299797][ T26] audit: type=1326 audit(1719474672.894:2242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.366774][ T26] audit: type=1326 audit(1719474672.894:2243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.416690][ T26] audit: type=1326 audit(1719474672.894:2244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.558323][ T26] audit: type=1326 audit(1719474672.894:2245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.581433][ T26] audit: type=1326 audit(1719474672.894:2246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.606624][ T26] audit: type=1326 audit(1719474672.894:2247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.629537][ T26] audit: type=1326 audit(1719474672.894:2248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.659565][ T8689] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 540.686352][ T8689] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 540.772112][ T8689] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 540.813185][ T26] audit: type=1326 audit(1719474672.894:2249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12561 comm="syz.0.2828" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 540.822873][ T8689] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 540.886146][ T8689] usb 3-1: config 0 descriptor?? [ 541.606045][T12587] random: crng reseeded on system resumption [ 542.568614][T12596] loop4: detected capacity change from 0 to 764 [ 542.610385][ T8689] usbhid 3-1:0.0: can't add hid device: -71 [ 542.624563][ T8689] usbhid: probe of 3-1:0.0 failed with error -71 [ 542.666443][ T8695] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 542.708972][ T8689] usb 3-1: USB disconnect, device number 47 [ 542.971893][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.076179][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.086185][ T8695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 543.104591][ T8695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 543.149984][ T8695] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 543.159771][ T8695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.171743][ T8695] usb 2-1: config 0 descriptor?? [ 543.177912][T12607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.232033][T12591] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 543.458832][T12580] netlink: 'syz.1.2834': attribute type 4 has an invalid length. [ 543.481478][T12580] netlink: 'syz.1.2834': attribute type 4 has an invalid length. [ 543.622617][T12612] loop3: detected capacity change from 0 to 256 [ 543.846996][ T8695] arvo 0003:1E7D:30D4.002F: unknown main item tag 0x0 [ 543.853808][ T8695] arvo 0003:1E7D:30D4.002F: unknown main item tag 0x0 [ 543.891524][ T8695] arvo 0003:1E7D:30D4.002F: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 544.170840][ T3587] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 544.430864][ T8689] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 544.539295][ T3587] usb 5-1: Using ep0 maxpacket: 32 [ 544.562241][ T8695] arvo 0003:1E7D:30D4.002F: couldn't init struct arvo_device [ 544.569688][ T8695] arvo 0003:1E7D:30D4.002F: couldn't install keyboard [ 544.608023][ T8695] arvo: probe of 0003:1E7D:30D4.002F failed with error -71 [ 544.647778][ T8695] usb 2-1: USB disconnect, device number 57 [ 544.756011][ T8689] usb 1-1: Using ep0 maxpacket: 8 [ 544.821274][ T3587] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 544.850706][ T3587] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.876303][ T3587] usb 5-1: config 0 descriptor?? [ 544.948917][ T3587] gspca_main: sunplus-2.14.0 probing 041e:400b [ 544.972916][ T8689] usb 1-1: config 32 has an invalid interface number: 77 but max is 1 [ 544.993149][ T8689] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 545.019099][ T8689] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 545.040339][ T8689] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 545.061696][ T8689] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 545.081653][ T8689] usb 1-1: config 32 has no interface number 0 [ 545.095153][ T8689] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 545.117369][ T8689] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 545.140240][ T8689] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 545.152414][ T8689] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 545.163662][ T8689] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 545.182476][ T8689] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 545.193719][ T8689] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 545.205137][ T8689] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 545.216498][ T8689] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 545.227903][ T8689] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 545.240271][ T8689] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 545.253863][ T8689] usb 1-1: config 32 interface 77 has no altsetting 0 [ 545.260861][ T8695] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 545.439022][ T8689] usb 1-1: Dual-Role OTG device on HNP port [ 545.460500][ T8689] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 545.474454][ T8689] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.502634][ T8689] usb 1-1: Product: syz [ 545.510568][ T8689] usb 1-1: Manufacturer: syz [ 545.533032][ T8689] usb 1-1: SerialNumber: syz [ 545.651669][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 545.651684][ T26] audit: type=1326 audit(1719474677.904:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12615 comm="syz.4.2846" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x0 [ 545.680303][ T8695] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 545.691317][ T8695] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 545.704317][ T8695] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 545.714178][ T8695] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.727489][ T8695] usb 2-1: config 0 descriptor?? [ 545.899564][ T7119] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 545.948364][ T3587] gspca_sunplus: reg_w_riv err -110 [ 545.953639][ T3587] sunplus: probe of 5-1:0.0 failed with error -110 [ 545.962274][ T3587] usb 5-1: USB disconnect, device number 54 [ 546.740441][ T8689] option 1-1:32.77: GSM modem (1-port) converter detected [ 546.783036][ T8689] usb 1-1: USB disconnect, device number 62 [ 546.833763][ T8689] option 1-1:32.77: device disconnected [ 546.869777][ T8695] usbhid 2-1:0.0: can't add hid device: -71 [ 546.877043][ T8695] usbhid: probe of 2-1:0.0 failed with error -71 [ 546.886403][T12646] loop0: detected capacity change from 0 to 8 [ 546.896256][ T8695] usb 2-1: USB disconnect, device number 58 [ 547.140788][ T26] audit: type=1326 audit(1719474679.279:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12652 comm="syz.4.2856" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x0 [ 547.151318][ T7119] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 547.194268][ T7119] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 547.204901][ T26] audit: type=1800 audit(1719474679.325:2306): pid=12654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2855" name="bus" dev="sda1" ino=1996 res=0 errno=0 [ 547.237842][ T7119] usb 3-1: Product: syz [ 547.257428][ T7119] usb 3-1: Manufacturer: syz [ 547.268626][ T7119] usb 3-1: SerialNumber: syz [ 547.413448][ T7119] usb 3-1: config 0 descriptor?? [ 547.497378][T12662] random: crng reseeded on system resumption [ 548.240099][T12645] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 548.463415][T12667] loop1: detected capacity change from 0 to 256 [ 548.515967][ T7119] usb 3-1: USB disconnect, device number 48 [ 548.703497][ T26] audit: type=1326 audit(1719474680.728:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz.4.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x7ffc0000 [ 549.492629][ T26] audit: type=1326 audit(1719474680.746:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz.4.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x7ffc0000 [ 549.592132][T12681] loop1: detected capacity change from 0 to 16 [ 549.599499][T12681] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 549.619323][ T26] audit: type=1326 audit(1719474680.774:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz.4.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3eebf75ae9 code=0x7ffc0000 [ 549.708904][ T26] audit: type=1326 audit(1719474680.774:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz.4.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x7ffc0000 [ 549.819223][ T26] audit: type=1326 audit(1719474680.774:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz.4.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f3eebf75ae9 code=0x7ffc0000 [ 549.860652][ T8695] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 549.898487][ T26] audit: type=1326 audit(1719474680.774:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz.4.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x7ffc0000 [ 549.927250][ T26] audit: type=1326 audit(1719474680.774:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12671 comm="syz.4.2861" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3eebf75ae9 code=0x7ffc0000 [ 549.958293][ T8689] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 550.131568][ T8695] usb 4-1: Using ep0 maxpacket: 8 [ 550.218586][ T8689] usb 1-1: Using ep0 maxpacket: 32 [ 550.323607][T12697] loop1: detected capacity change from 0 to 64 [ 550.348463][ T8695] usb 4-1: config 32 has an invalid interface number: 77 but max is 1 [ 550.348565][ T8689] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 550.366163][ T8695] usb 4-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 550.390978][ T8695] usb 4-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 550.442962][ T8689] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.451845][ T8695] usb 4-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 550.471269][ T8689] usb 1-1: config 0 descriptor?? [ 550.476450][ T8695] usb 4-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 550.529209][ T8695] usb 4-1: config 32 has no interface number 0 [ 550.538544][ T8689] gspca_main: sunplus-2.14.0 probing 041e:400b [ 550.567312][ T8695] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 550.584459][ T8695] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 550.625851][ T8695] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 550.637720][ T8695] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 550.651394][ T8695] usb 4-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 550.663369][ T8695] usb 4-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 550.674927][ T8695] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 550.708708][ T8695] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 550.746926][ T8695] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 550.765465][ T8695] usb 4-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 550.783008][ T8695] usb 4-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 550.799766][ T8695] usb 4-1: config 32 interface 77 has no altsetting 0 [ 550.977000][ T8695] usb 4-1: Dual-Role OTG device on HNP port [ 551.009563][ T8695] usb 4-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 551.093139][ T8695] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.136516][ T8695] usb 4-1: Product: syz [ 551.144665][ T8695] usb 4-1: Manufacturer: syz [ 551.149615][ T8695] usb 4-1: SerialNumber: syz [ 551.176505][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 551.176519][ T26] audit: type=1326 audit(1719474683.007:2351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12685 comm="syz.0.2865" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x0 [ 551.204528][ C1] vkms_vblank_simulate: vblank timer overrun [ 551.388839][ T8689] gspca_sunplus: reg_w_riv err -110 [ 551.398769][ T8689] sunplus: probe of 1-1:0.0 failed with error -110 [ 551.606718][ T8695] option 4-1:32.77: GSM modem (1-port) converter detected [ 551.655980][ T8695] usb 4-1: USB disconnect, device number 53 [ 551.673642][ T8695] option 4-1:32.77: device disconnected [ 551.843128][T12721] loop1: detected capacity change from 0 to 256 [ 551.850533][T12704] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 552.161958][ T26] audit: type=1326 audit(1719474683.911:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12720 comm="syz.1.2874" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x0 [ 552.837505][ T26] audit: type=1326 audit(1719474684.529:2353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.3.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 552.846051][T12730] loop4: detected capacity change from 0 to 16 [ 552.862202][ T26] audit: type=1326 audit(1719474684.529:2354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.3.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 552.890192][T12730] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 552.906286][ T26] audit: type=1326 audit(1719474684.529:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.3.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 552.938511][ T8689] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 552.988357][ T26] audit: type=1326 audit(1719474684.529:2356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.3.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 553.010817][ C1] vkms_vblank_simulate: vblank timer overrun [ 553.133889][ T26] audit: type=1326 audit(1719474684.529:2357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.3.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 553.172789][ T26] audit: type=1326 audit(1719474684.529:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.3.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 553.283854][ T26] audit: type=1326 audit(1719474684.529:2359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.3.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 553.317442][ T26] audit: type=1326 audit(1719474684.594:2360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12727 comm="syz.3.2876" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 553.357035][ T3592] usb 1-1: USB disconnect, device number 63 [ 553.556401][ T8689] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 553.568076][ T8689] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.576304][ T8689] usb 3-1: Product: syz [ 553.582250][ T8689] usb 3-1: Manufacturer: syz [ 553.588898][ T8689] usb 3-1: SerialNumber: syz [ 553.607945][ T8689] usb 3-1: config 0 descriptor?? [ 553.782113][T12755] loop0: detected capacity change from 0 to 64 [ 553.896611][ T3592] usb 3-1: USB disconnect, device number 49 [ 554.324930][T12764] random: crng reseeded on system resumption [ 554.347382][ T8689] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 554.669197][T12770] loop2: detected capacity change from 0 to 256 [ 554.726860][ T8689] usb 2-1: Using ep0 maxpacket: 8 [ 555.650950][ T8689] usb 2-1: config 32 has an invalid interface number: 77 but max is 1 [ 555.662025][ T8689] usb 2-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 555.674559][ T8689] usb 2-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 555.685795][ T8689] usb 2-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 555.697093][ T8689] usb 2-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 555.707084][ T8689] usb 2-1: config 32 has no interface number 0 [ 555.716846][ T8689] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 555.739457][ T8689] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 555.769086][T12775] ieee802154 phy0 wpan0: encryption failed: -22 [ 555.798530][ T8689] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 555.869084][ T8689] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 555.892200][ T8689] usb 2-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 555.925255][ T8689] usb 2-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 555.964477][ T8689] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 556.043060][ T8689] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 556.086663][ T8689] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 556.129466][ T8689] usb 2-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 556.157459][ T3592] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 556.165360][ T8689] usb 2-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 556.220515][ T8689] usb 2-1: config 32 interface 77 has no altsetting 0 [ 556.428539][ T8689] usb 2-1: Dual-Role OTG device on HNP port [ 556.449968][ T8689] usb 2-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 556.481231][ T8689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.494482][ T8689] usb 2-1: Product: syz [ 556.498690][ T8689] usb 2-1: Manufacturer: syz [ 556.525276][ T8689] usb 2-1: SerialNumber: syz [ 556.580403][ T3592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 556.609339][ T3592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 556.631243][ T3592] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 556.650323][ T3592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.673689][ T3592] usb 5-1: config 0 descriptor?? [ 556.904056][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 556.904073][ T26] audit: type=1326 audit(1719474688.285:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12792 comm="syz.0.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 556.955515][T12779] netlink: 'syz.4.2891': attribute type 4 has an invalid length. [ 556.982915][ T8689] option 2-1:32.77: GSM modem (1-port) converter detected [ 557.014896][T12779] netlink: 'syz.4.2891': attribute type 4 has an invalid length. [ 557.025691][ T26] audit: type=1326 audit(1719474688.285:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12792 comm="syz.0.2896" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x7ffc0000 [ 557.046922][ T8689] usb 2-1: USB disconnect, device number 59 [ 557.087859][ T8689] option 2-1:32.77: device disconnected [ 557.318858][ T3592] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 557.331685][ T3592] arvo 0003:1E7D:30D4.0030: unknown main item tag 0x0 [ 557.354868][ T3592] arvo 0003:1E7D:30D4.0030: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 557.392787][ T3587] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 557.555692][ T3592] arvo 0003:1E7D:30D4.0030: couldn't init struct arvo_device [ 557.563698][ T3592] arvo 0003:1E7D:30D4.0030: couldn't install keyboard [ 557.578151][ T3592] arvo: probe of 0003:1E7D:30D4.0030 failed with error -71 [ 557.622475][ T3592] usb 5-1: USB disconnect, device number 55 [ 558.043714][ T3587] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 558.097450][ T3587] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 558.114043][ T3587] usb 1-1: Product: syz [ 558.118254][ T3587] usb 1-1: Manufacturer: syz [ 558.153326][ T3587] usb 1-1: SerialNumber: syz [ 558.197024][ T3587] usb 1-1: config 0 descriptor?? [ 558.239097][T12814] ieee802154 phy0 wpan0: encryption failed: -22 [ 558.343172][ T26] audit: type=1800 audit(1719474689.613:2418): pid=12819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2904" name="bus" dev="sda1" ino=1997 res=0 errno=0 [ 558.516256][ T8689] usb 1-1: USB disconnect, device number 64 [ 559.209311][T12830] loop0: detected capacity change from 0 to 764 [ 559.690387][ T3587] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 559.788008][ T3593] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 560.009117][ T26] audit: type=1326 audit(1719474691.154:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12842 comm="syz.2.2913" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x0 [ 560.091549][ T3593] usb 5-1: Using ep0 maxpacket: 8 [ 560.146107][ T3587] usb 4-1: config 184 has an invalid interface number: 90 but max is 0 [ 560.162033][ T3587] usb 4-1: config 184 has an invalid descriptor of length 1, skipping remainder of the config [ 560.176328][ T3587] usb 4-1: config 184 has no interface number 0 [ 560.195854][ T3587] usb 4-1: config 184 interface 90 altsetting 0 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 560.252667][ T3587] usb 4-1: config 184 interface 90 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 560.329911][ T3587] usb 4-1: New USB device found, idVendor=0bb4, idProduct=0a1b, bcdDevice=5c.24 [ 560.339302][ T3587] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.350236][ T3593] usb 5-1: config 32 has an invalid interface number: 77 but max is 1 [ 560.367051][ T3593] usb 5-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 560.376462][T12845] random: crng reseeded on system resumption [ 560.414150][ T3593] usb 5-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 560.479752][ T3593] usb 5-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 560.539764][ T3593] usb 5-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 560.568439][ T8689] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 560.582274][ T3593] usb 5-1: config 32 has no interface number 0 [ 560.595799][ T3593] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 560.650950][ T3593] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 560.667439][ T3593] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 560.695720][ T3593] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 560.737679][ T3593] usb 5-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 560.750329][ T3593] usb 5-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 560.769310][ T3593] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 560.783431][ T3593] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 560.801211][ T3593] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 560.815419][ T3593] usb 5-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 560.826271][ T3593] usb 5-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 560.841432][ T3593] usb 5-1: config 32 interface 77 has no altsetting 0 [ 560.855482][ T3587] usb 4-1: USB disconnect, device number 54 [ 561.085690][ T8689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.097258][ T8689] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.107148][ T8689] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 561.116102][ T3593] usb 5-1: Dual-Role OTG device on HNP port [ 561.116253][ T8689] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.135238][ T8689] usb 2-1: config 0 descriptor?? [ 561.154028][ T3593] usb 5-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 561.184597][ T3593] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.204035][ T3593] usb 5-1: Product: syz [ 561.208642][ T3593] usb 5-1: Manufacturer: syz [ 561.213253][ T3593] usb 5-1: SerialNumber: syz [ 561.294703][ T3592] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 561.395757][T12841] netlink: 'syz.1.2914': attribute type 4 has an invalid length. [ 561.461521][T12859] netlink: 'syz.1.2914': attribute type 4 has an invalid length. [ 561.553643][ T26] audit: type=1800 audit(1719474692.575:2420): pid=12862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2920" name="bus" dev="sda1" ino=1998 res=0 errno=0 [ 561.674613][ T3593] option 5-1:32.77: GSM modem (1-port) converter detected [ 561.745416][ T3593] usb 5-1: USB disconnect, device number 56 [ 561.762667][ T8689] arvo 0003:1E7D:30D4.0031: unknown main item tag 0x0 [ 561.769533][ T8689] arvo 0003:1E7D:30D4.0031: unknown main item tag 0x0 [ 561.788110][ T8689] arvo 0003:1E7D:30D4.0031: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 561.794252][ T3593] option 5-1:32.77: device disconnected [ 561.890653][ T3592] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 561.908724][ T3592] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.919705][ T3592] usb 3-1: Product: syz [ 561.928222][ T3592] usb 3-1: Manufacturer: syz [ 561.939079][ T3592] usb 3-1: SerialNumber: syz [ 561.956596][ T3592] usb 3-1: config 0 descriptor?? [ 561.999075][ T8689] arvo 0003:1E7D:30D4.0031: couldn't init struct arvo_device [ 562.031680][ T8689] arvo 0003:1E7D:30D4.0031: couldn't install keyboard [ 562.067013][ T8689] arvo: probe of 0003:1E7D:30D4.0031 failed with error -71 [ 562.107663][ T8689] usb 2-1: USB disconnect, device number 60 [ 562.230719][ T3593] usb 3-1: USB disconnect, device number 50 [ 562.470469][T12870] loop3: detected capacity change from 0 to 16 [ 562.491705][T12870] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 562.775279][T12877] loop1: detected capacity change from 0 to 764 [ 562.827613][ T3671] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 563.013168][T12889] loop0: detected capacity change from 0 to 256 [ 563.069966][T12882] loop3: detected capacity change from 0 to 64 [ 563.108344][ T26] audit: type=1326 audit(1719474694.015:2421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12890 comm="syz.4.2930" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x0 [ 563.598058][T12899] random: crng reseeded on system resumption [ 564.614063][ T26] audit: type=1326 audit(1719474695.408:2422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12893 comm="syz.1.2932" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x0 [ 564.855556][T12913] loop4: detected capacity change from 0 to 16 [ 564.920286][ T26] audit: type=1800 audit(1719474695.685:2423): pid=12914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2934" name="bus" dev="sda1" ino=1997 res=0 errno=0 [ 564.956781][T12913] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 565.583418][T12923] loop3: detected capacity change from 0 to 764 [ 565.670534][ T3538] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 565.954631][ T3587] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 566.235454][T12939] loop3: detected capacity change from 0 to 8 [ 566.801133][ T3587] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 566.860412][ T3587] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.071941][ T3587] usb 5-1: Product: syz [ 567.084629][ T3587] usb 5-1: Manufacturer: syz [ 567.103522][ T3587] usb 5-1: SerialNumber: syz [ 567.130047][ T3587] usb 5-1: config 0 descriptor?? [ 567.272895][T12945] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2948'. [ 567.286439][T12945] ieee802154 phy0 wpan0: encryption failed: -22 [ 567.377041][ T26] audit: type=1326 audit(1719474697.955:2424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12946 comm="syz.3.2947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x0 [ 567.392727][T12950] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.452199][T12953] loop1: detected capacity change from 0 to 16 [ 567.470339][ T3587] usb 5-1: USB disconnect, device number 57 [ 567.487348][T12953] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 567.597973][T12948] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.647733][T12956] random: crng reseeded on system resumption [ 568.020574][T12958] loop2: detected capacity change from 0 to 64 [ 568.312385][T12968] loop4: detected capacity change from 0 to 764 [ 568.609456][ T26] audit: type=1326 audit(1719474699.080:2425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12967 comm="syz.0.2954" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x0 [ 568.644522][T12980] loop3: detected capacity change from 0 to 256 [ 568.935082][ T8689] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 569.766351][ T26] audit: type=1326 audit(1719474699.680:2426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12978 comm="syz.3.2958" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x0 [ 570.148992][ T8689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 570.154920][T12991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2961'. [ 570.176586][ T8689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 570.184221][T12991] ieee802154 phy0 wpan0: encryption failed: -22 [ 570.197741][ T8689] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 570.222815][ T8689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.266113][ T8689] usb 5-1: config 0 descriptor?? [ 570.400349][T12997] loop3: detected capacity change from 0 to 16 [ 570.448512][T12997] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 570.575971][T12981] netlink: 'syz.4.2957': attribute type 4 has an invalid length. [ 570.681738][T13000] netlink: 'syz.4.2957': attribute type 4 has an invalid length. [ 570.807797][T13004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 570.875085][ T7119] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 570.881989][T13001] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.039751][ T8689] arvo 0003:1E7D:30D4.0032: unknown main item tag 0x0 [ 571.048494][ T8689] arvo 0003:1E7D:30D4.0032: unknown main item tag 0x0 [ 571.066177][ T8689] arvo 0003:1E7D:30D4.0032: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 571.276145][ T8689] arvo 0003:1E7D:30D4.0032: couldn't init struct arvo_device [ 571.283775][ T8689] arvo 0003:1E7D:30D4.0032: couldn't install keyboard [ 571.295903][ T8689] arvo: probe of 0003:1E7D:30D4.0032 failed with error -71 [ 571.347948][ T8689] usb 5-1: USB disconnect, device number 58 [ 571.442032][ T7119] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 571.477019][ T7119] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.536612][ T7119] usb 2-1: Product: syz [ 571.540831][ T7119] usb 2-1: Manufacturer: syz [ 571.545441][ T7119] usb 2-1: SerialNumber: syz [ 571.646683][ T7119] usb 2-1: config 0 descriptor?? [ 571.822472][T13012] loop2: detected capacity change from 0 to 764 [ 571.935798][ T7119] usb 2-1: USB disconnect, device number 61 [ 572.087525][T13019] loop2: detected capacity change from 0 to 256 [ 572.446851][ T26] audit: type=1326 audit(1719474702.605:2427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13018 comm="syz.2.2971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x0 [ 572.849202][T13015] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 573.138331][T13026] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2973'. [ 573.150882][ T8695] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 573.191260][T13026] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.382080][T13041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.411123][ T8695] usb 1-1: Using ep0 maxpacket: 8 [ 573.450766][T13035] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 573.454099][T13043] loop2: detected capacity change from 0 to 64 [ 573.490531][T13040] netlink: 892 bytes leftover after parsing attributes in process `syz.3.2979'. [ 573.637345][T13048] loop3: detected capacity change from 0 to 764 [ 573.647215][ T8695] usb 1-1: config 32 has an invalid interface number: 77 but max is 1 [ 573.657957][ T8695] usb 1-1: config 32 contains an unexpected descriptor of type 0x2, skipping [ 573.667331][ T8695] usb 1-1: config 32 has an invalid interface association descriptor of length 5, skipping [ 573.679797][ T8695] usb 1-1: config 32 has an invalid descriptor of length 169, skipping remainder of the config [ 573.690470][ T8689] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 573.707837][ T8695] usb 1-1: config 32 has 1 interface, different from the descriptor's value: 2 [ 573.719877][ T8695] usb 1-1: config 32 has no interface number 0 [ 573.733057][ T8695] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 573.754745][ T8695] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 573.771909][ T8695] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 573.793174][ T8695] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 573.814977][ T8695] usb 1-1: config 32 interface 77 altsetting 64 has an invalid endpoint with address 0x0, skipping [ 573.830964][ T8695] usb 1-1: config 32 interface 77 altsetting 64 has a duplicate endpoint with address 0x1, skipping [ 573.854926][ T8695] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 573.879797][ T8695] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 573.898352][ T8695] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 573.922192][ T8695] usb 1-1: config 32 interface 77 altsetting 64 endpoint 0x6 has invalid wMaxPacketSize 0 [ 573.935899][ T8695] usb 1-1: config 32 interface 77 altsetting 64 has 10 endpoint descriptors, different from the interface descriptor's value: 12 [ 573.957723][ T8695] usb 1-1: config 32 interface 77 has no altsetting 0 [ 573.970044][ T3538] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 574.104757][ T8689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.137467][ T8695] usb 1-1: Dual-Role OTG device on HNP port [ 574.147973][ T8689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.160659][ T8695] usb 1-1: New USB device found, idVendor=1bc7, idProduct=1207, bcdDevice=22.33 [ 574.202317][ T8695] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.210611][ T8689] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 574.229861][ T8695] usb 1-1: Product: syz [ 574.243656][ T8689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.263962][ T8695] usb 1-1: Manufacturer: syz [ 574.274654][ T8695] usb 1-1: SerialNumber: syz [ 574.283425][ T8689] usb 5-1: config 0 descriptor?? [ 574.374160][ T26] audit: type=1326 audit(1719474704.404:2428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13049 comm="syz.3.2982" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x0 [ 574.587777][T13042] netlink: 'syz.4.2980': attribute type 4 has an invalid length. [ 574.622258][T13042] netlink: 'syz.4.2980': attribute type 4 has an invalid length. [ 574.657634][ T8691] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 574.712854][ T8695] option 1-1:32.77: GSM modem (1-port) converter detected [ 574.748613][ T8695] usb 1-1: USB disconnect, device number 65 [ 574.782452][ T8695] option 1-1:32.77: device disconnected [ 574.911852][ T8689] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 574.926564][ T8689] arvo 0003:1E7D:30D4.0033: unknown main item tag 0x0 [ 574.945658][ T8689] arvo 0003:1E7D:30D4.0033: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.4-1/input0 [ 575.145170][ T8689] arvo 0003:1E7D:30D4.0033: couldn't init struct arvo_device [ 575.152636][ T8689] arvo 0003:1E7D:30D4.0033: couldn't install keyboard [ 575.162705][ T8689] arvo: probe of 0003:1E7D:30D4.0033 failed with error -71 [ 575.176568][ T8689] usb 5-1: USB disconnect, device number 59 [ 575.242848][ T8691] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 575.251938][ T8691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.277456][ T8691] usb 2-1: Product: syz [ 575.281605][T13063] loop0: detected capacity change from 0 to 256 [ 575.281652][ T8691] usb 2-1: Manufacturer: syz [ 575.327166][ T8691] usb 2-1: SerialNumber: syz [ 575.334079][ T8691] usb 2-1: config 0 descriptor?? [ 575.596912][ T26] audit: type=1326 audit(1719474705.530:2429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13062 comm="syz.0.2986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x0 [ 575.933424][T13060] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 576.023050][ T3587] usb 2-1: USB disconnect, device number 62 [ 576.395866][T13073] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2989'. [ 576.546919][T13073] ieee802154 phy0 wpan0: encryption failed: -22 [ 576.558070][T13079] loop2: detected capacity change from 0 to 764 [ 576.756879][T13084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.771397][T13083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.829334][ T26] audit: type=1326 audit(1719474706.674:2430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13085 comm="syz.2.2994" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x0 [ 577.157592][T13091] random: crng reseeded on system resumption [ 577.832337][T13099] loop2: detected capacity change from 0 to 256 [ 578.179819][ T3587] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 578.201732][ T26] audit: type=1326 audit(1719474707.883:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13098 comm="syz.2.2999" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x0 [ 578.780993][T13101] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 578.819182][ T3587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 578.830524][ T3587] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 578.840343][ T3587] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00 [ 578.877864][ T3587] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 578.887642][ T3587] usb 2-1: config 0 descriptor?? [ 578.997975][T13116] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3004'. [ 579.022564][T13117] loop0: detected capacity change from 0 to 764 [ 579.027784][T13116] ieee802154 phy0 wpan0: encryption failed: -22 [ 579.149732][T13097] netlink: 'syz.1.2998': attribute type 4 has an invalid length. [ 579.200849][T13122] loop2: detected capacity change from 0 to 16 [ 579.211748][T13123] netlink: 'syz.1.2998': attribute type 4 has an invalid length. [ 579.258098][T13122] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 579.339450][ T8618] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 579.536472][ T3587] arvo 0003:1E7D:30D4.0034: unknown main item tag 0x0 [ 579.571487][ T3587] arvo 0003:1E7D:30D4.0034: unknown main item tag 0x0 [ 579.625622][ T3587] arvo 0003:1E7D:30D4.0034: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.1-1/input0 [ 579.710626][ T26] audit: type=1326 audit(1719474709.331:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13129 comm="syz.2.3010" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08b4f75ae9 code=0x0 [ 579.776255][ T3587] arvo 0003:1E7D:30D4.0034: couldn't init struct arvo_device [ 579.786767][ T3587] arvo 0003:1E7D:30D4.0034: couldn't install keyboard [ 579.807174][ T3587] arvo: probe of 0003:1E7D:30D4.0034 failed with error -71 [ 579.945711][ T3587] usb 2-1: USB disconnect, device number 63 [ 580.028679][T13133] random: crng reseeded on system resumption [ 580.304108][ T8618] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 580.315041][ T8618] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.331309][ T8618] usb 4-1: Product: syz [ 580.336636][ T8618] usb 4-1: Manufacturer: syz [ 580.341772][ T8618] usb 4-1: SerialNumber: syz [ 580.376486][ T8618] usb 4-1: config 0 descriptor?? [ 580.553259][T13135] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.581104][T13134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 580.698087][ T936] usb 4-1: USB disconnect, device number 55 [ 580.799451][T13143] loop1: detected capacity change from 0 to 256 [ 580.966119][ T26] audit: type=1326 audit(1719474710.476:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13136 comm="syz.0.3012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x0 [ 581.170318][ T26] audit: type=1326 audit(1719474710.669:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13142 comm="syz.1.3014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x0 [ 581.967290][T13155] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3018'. [ 582.002632][T13155] ieee802154 phy0 wpan0: encryption failed: -22 [ 582.225490][T13162] syz.3.3021[13162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.225645][T13162] syz.3.3021[13162] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 582.573627][T13168] loop3: detected capacity change from 0 to 764 [ 582.633943][ T8689] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 582.670959][ T3538] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 582.687780][T13169] loop4: detected capacity change from 0 to 8 [ 582.904915][ T8689] usb 2-1: Using ep0 maxpacket: 16 [ 583.208713][ T8689] usb 2-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 583.240874][ T8689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.249009][ T8689] usb 2-1: Product: syz [ 583.286103][ T8689] usb 2-1: Manufacturer: syz [ 583.290839][ T8689] usb 2-1: SerialNumber: syz [ 583.330115][ T8689] usb 2-1: config 0 descriptor?? [ 583.416382][ T26] audit: type=1326 audit(1719474712.755:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13174 comm="syz.4.3024" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3eebf75ae9 code=0x0 [ 583.695274][T13176] random: crng reseeded on system resumption [ 583.696208][ T8689] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 583.734048][ T8689] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 583.767392][ T8689] dib0700: firmware download failed at 7 with -22 [ 583.830638][ T8689] usb 2-1: USB disconnect, device number 64 [ 583.979461][T11973] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.016645][ T26] audit: type=1326 audit(1719474713.299:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 584.061274][ T26] audit: type=1326 audit(1719474713.299:2437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 584.104529][ T26] audit: type=1326 audit(1719474713.299:2438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 584.172981][ T26] audit: type=1326 audit(1719474713.299:2439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 584.218468][ T26] audit: type=1326 audit(1719474713.299:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 584.252902][T11973] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.348386][ T26] audit: type=1326 audit(1719474713.299:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 584.373096][T13185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.408469][T13187] loop1: detected capacity change from 0 to 256 [ 584.474088][ T26] audit: type=1326 audit(1719474713.299:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13179 comm="syz.3.3025" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 584.522921][T13184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 584.559324][T11973] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.673618][T11973] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.490056][T13190] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 585.578493][T13204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3031'. [ 585.638119][T13204] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.846761][T13210] loop0: detected capacity change from 0 to 764 [ 585.963614][ T3671] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 586.211321][ T3615] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 586.598238][T11973] device hsr_slave_0 left promiscuous mode [ 586.619570][T11973] device hsr_slave_1 left promiscuous mode [ 586.644072][ T3615] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 586.665829][ T3615] usb 2-1: config 0 interface 0 has no altsetting 0 [ 586.691917][ T3615] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 586.722450][ T3615] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.746361][ T3615] usb 2-1: config 0 descriptor?? [ 586.759641][T11973] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.768059][T11973] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.779065][T13224] loop4: detected capacity change from 0 to 8 [ 586.793140][ T3615] usb 2-1: selecting invalid altsetting 0 [ 586.821800][T11973] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 586.855035][T11973] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 586.877424][ T3615] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 586.911788][T11973] device bridge_slave_1 left promiscuous mode [ 586.924990][T11973] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.957139][T11973] device bridge_slave_0 left promiscuous mode [ 586.995777][T11973] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.030673][T11973] device veth1_macvtap left promiscuous mode [ 587.044010][T11973] device veth0_macvtap left promiscuous mode [ 587.061044][T11973] device veth1_vlan left promiscuous mode [ 587.070598][T11973] device veth0_vlan left promiscuous mode [ 587.500916][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 587.500947][ T26] audit: type=1326 audit(1719474716.519:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13239 comm="syz.0.3038" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x0 [ 587.608614][ T3592] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 587.639730][T11973] team0 (unregistering): Port device team_slave_1 removed [ 587.712875][T11973] team0 (unregistering): Port device team_slave_0 removed [ 587.760261][ T8689] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 587.776117][T13242] random: crng reseeded on system resumption [ 587.787020][T11973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 587.842623][T11973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 588.035917][T11973] bond0 (unregistering): Released all slaves [ 588.042088][ T8689] usb 5-1: Using ep0 maxpacket: 16 [ 588.162391][ T3592] usb 4-1: device descriptor read/64, error -71 [ 588.345813][ T8689] usb 5-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 588.451372][ T8689] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.459518][ T8689] usb 5-1: Product: syz [ 588.463709][ T8689] usb 5-1: Manufacturer: syz [ 588.469322][ T8689] usb 5-1: SerialNumber: syz [ 588.478004][ T8689] usb 5-1: config 0 descriptor?? [ 588.486410][ T3592] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 588.692371][ T3592] usb 4-1: device descriptor read/64, error -71 [ 588.713699][T13261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.757398][ T8689] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 588.778966][ T8689] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 588.803744][ T8689] dib0700: firmware download failed at 7 with -22 [ 588.827997][ T3592] usb usb4-port1: attempt power cycle [ 588.828448][T13260] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 588.866387][ T8689] usb 5-1: USB disconnect, device number 60 [ 589.227545][ T8689] usb 2-1: USB disconnect, device number 65 [ 589.310000][ T3592] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 589.429370][ T3592] usb 4-1: device descriptor read/8, error -71 [ 589.739102][ T3592] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 589.863089][ T3592] usb 4-1: device descriptor read/8, error -71 [ 589.959351][T13293] loop1: detected capacity change from 0 to 256 [ 589.993586][ T3592] usb usb4-port1: unable to enumerate USB device [ 590.326581][ T26] audit: type=1326 audit(1719474719.121:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13290 comm="syz.1.3041" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x0 [ 590.836030][T13289] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 591.362939][ T26] audit: type=1326 audit(1719474720.081:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 591.404975][T13317] loop0: detected capacity change from 0 to 764 [ 591.440387][ T26] audit: type=1326 audit(1719474720.081:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 591.502715][ T3538] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 591.596385][ T26] audit: type=1326 audit(1719474720.081:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 591.746072][ T26] audit: type=1326 audit(1719474720.081:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 591.905681][ T26] audit: type=1326 audit(1719474720.081:2499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 591.996179][ T26] audit: type=1326 audit(1719474720.081:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 592.018637][ C0] vkms_vblank_simulate: vblank timer overrun [ 592.110873][ T26] audit: type=1326 audit(1719474720.081:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 592.160313][ T26] audit: type=1326 audit(1719474720.081:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13318 comm="syz.3.3048" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x7ffc0000 [ 592.804108][T13340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.906470][T13339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 593.021594][T13345] loop3: detected capacity change from 0 to 8 [ 593.677750][ T3592] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 594.111308][ T3592] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.132535][ T3592] usb 1-1: config 0 interface 0 has no altsetting 0 [ 594.143484][ T3592] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 594.152888][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.176458][ T3592] usb 1-1: config 0 descriptor?? [ 594.222003][ T3592] usb 1-1: selecting invalid altsetting 0 [ 594.291506][ T3592] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 594.370650][T13372] loop3: detected capacity change from 0 to 16 [ 594.427149][T13372] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 594.674702][ T7119] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 594.891521][ T7119] usb 5-1: device descriptor read/64, error -71 [ 594.915149][T13386] netlink: 860 bytes leftover after parsing attributes in process `syz.3.3058'. [ 595.184072][ T7119] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 595.400845][ T7119] usb 5-1: device descriptor read/64, error -71 [ 595.531102][ T7119] usb usb5-port1: attempt power cycle [ 595.975207][ T7119] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 596.073224][ T7119] usb 5-1: device descriptor read/8, error -71 [ 596.365397][ T7119] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 596.463086][ T7119] usb 5-1: device descriptor read/8, error -71 [ 596.483494][ T3592] usb 1-1: USB disconnect, device number 66 [ 596.593587][ T7119] usb usb5-port1: unable to enumerate USB device [ 596.701529][ T3615] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 597.026530][ T3615] usb 4-1: Using ep0 maxpacket: 16 [ 597.405892][ T3615] usb 4-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1 [ 597.423771][ T3615] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.432299][ T3615] usb 4-1: Product: syz [ 597.436633][ T3615] usb 4-1: Manufacturer: syz [ 597.441657][ T3615] usb 4-1: SerialNumber: syz [ 597.453581][ T3615] usb 4-1: config 0 descriptor?? [ 597.720153][ T3615] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware [ 597.730913][ T3615] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 597.739320][ T3615] dib0700: firmware download failed at 7 with -22 [ 597.855535][ T3615] usb 4-1: USB disconnect, device number 60 [ 598.145504][T13446] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.259692][T13442] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 598.309074][T13449] loop4: detected capacity change from 0 to 16 [ 598.336321][T13449] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 598.377600][T13450] loop1: detected capacity change from 0 to 8 [ 598.431698][T13452] loop3: detected capacity change from 0 to 256 [ 598.847931][ T26] kauditd_printk_skb: 22 callbacks suppressed [ 598.848044][ T26] audit: type=1326 audit(1719474726.909:2525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13451 comm="syz.3.3067" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x0 [ 599.358889][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 599.365222][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 599.430285][T13454] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 600.361518][T13464] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3071'. [ 602.103968][T13490] loop1: detected capacity change from 0 to 16 [ 602.131706][T13494] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.144470][T13490] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 602.198936][T13492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.384559][T13499] loop1: detected capacity change from 0 to 256 [ 602.501458][T13500] loop0: detected capacity change from 0 to 8 [ 602.510489][ T8689] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 602.752190][ T26] audit: type=1326 audit(1719474730.590:2526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13497 comm="syz.1.3081" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa399175ae9 code=0x0 [ 603.561962][ T8689] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 603.572888][ T8689] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 603.585843][ T8689] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 603.594936][ T8689] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 603.604261][ T8689] usb 4-1: config 0 descriptor?? [ 604.128897][ T8689] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 604.146164][ T8689] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 604.165613][ T8689] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 604.192672][ T8689] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 604.203236][ T26] audit: type=1800 audit(1719474731.938:2527): pid=13514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3084" name="bus" dev="sda1" ino=2008 res=0 errno=0 [ 604.233344][ T8689] plantronics 0003:047F:FFFF.0035: unknown main item tag 0x0 [ 604.253724][ T8689] plantronics 0003:047F:FFFF.0035: No inputs registered, leaving [ 604.295871][ T8689] plantronics 0003:047F:FFFF.0035: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 604.439754][ T7119] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 604.830537][ T7119] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 604.853693][ T7119] usb 2-1: config 0 interface 0 has no altsetting 0 [ 604.861894][ T7119] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 604.883033][ T7119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.902567][ T7119] usb 2-1: config 0 descriptor?? [ 604.951322][ T7119] usb 2-1: selecting invalid altsetting 0 [ 605.003383][T13511] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 605.023183][ T7119] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 605.181135][ T7119] usb 2-1: USB disconnect, device number 66 [ 605.936187][ T3592] usb 4-1: USB disconnect, device number 61 [ 606.492539][T13560] loop3: detected capacity change from 0 to 512 [ 606.503386][T13560] EXT4-fs: Ignoring removed oldalloc option [ 606.510017][T13560] ext4: Unknown parameter 'nog' [ 607.172713][ T3538] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 607.287271][T13563] syz.4.3091[13563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.287422][T13563] syz.4.3091[13563] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 607.714002][T13570] loop3: detected capacity change from 0 to 8 [ 609.279548][T13637] loop0: detected capacity change from 0 to 256 [ 609.633081][ T26] audit: type=1326 audit(1719474736.929:2528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13636 comm="syz.0.3093" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f045f375ae9 code=0x0 [ 610.203476][T13635] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 610.292652][ T8689] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 610.693142][ T8689] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 610.704138][ T8689] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 610.717084][ T8689] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 610.722169][ T8618] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 610.726167][ T8689] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.746023][ T8689] usb 5-1: config 0 descriptor?? [ 611.213235][ T8618] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.223395][ T8618] usb 2-1: config 0 interface 0 has no altsetting 0 [ 611.230190][ T8618] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 611.239466][ T8618] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.249257][ T8618] usb 2-1: config 0 descriptor?? [ 611.269274][ T8689] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 611.276751][ T8689] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 611.284743][ T8689] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 611.292217][ T8689] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 611.300318][ T8689] plantronics 0003:047F:FFFF.0036: unknown main item tag 0x0 [ 611.302334][ T8618] usb 2-1: selecting invalid altsetting 0 [ 611.308214][ T8689] plantronics 0003:047F:FFFF.0036: No inputs registered, leaving [ 611.340758][ T8689] plantronics 0003:047F:FFFF.0036: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 611.344320][ T8618] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 611.536702][ T8689] usb 2-1: USB disconnect, device number 67 [ 612.274216][T13682] ieee802154 phy0 wpan0: encryption failed: -22 [ 613.082880][ T8618] usb 5-1: USB disconnect, device number 65 [ 614.845713][T13709] loop3: detected capacity change from 0 to 256 [ 615.387398][ T936] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 615.398532][ T26] audit: type=1326 audit(1719474742.253:2529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13703 comm="syz.3.3108" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f60eb175ae9 code=0x0 [ 616.556184][ T936] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 616.566677][ T936] usb 5-1: config 0 interface 0 has no altsetting 0 [ 616.573968][ T936] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 616.583349][ T936] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 616.599711][ T936] usb 5-1: config 0 descriptor?? [ 616.656096][ T936] usb 5-1: selecting invalid altsetting 0 [ 616.709968][ T936] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 616.874969][ T936] usb 5-1: USB disconnect, device number 66 [ 617.046572][T13720] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 618.452226][T13730] loop3: detected capacity change from 0 to 2048 [ 618.544174][T13730] Alternate GPT is invalid, using primary GPT. [ 618.553291][T13730] loop3: p1 p2 p3 [ 620.319464][ T3536] I/O error, dev loop3, sector 105 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 620.319510][ T3671] I/O error, dev loop3, sector 56 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 620.319549][ T3538] I/O error, dev loop3, sector 34 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 620.398253][ T3538] I/O error, dev loop3, sector 34 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.422458][ T3671] I/O error, dev loop3, sector 56 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.435885][ T8164] __loop_clr_fd: partition scan of loop3 failed (rc=-16) [ 620.464015][ T3538] Buffer I/O error on dev loop3p1, logical block 0, async page read [ 620.472550][ T3671] Buffer I/O error on dev loop3p2, logical block 8, async page read [ 620.512014][ T3671] I/O error, dev loop3, sector 57 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.521276][ T3671] Buffer I/O error on dev loop3p2, logical block 9, async page read [ 620.577036][ T3538] I/O error, dev loop3, sector 36 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.588248][ T3536] I/O error, dev loop3, sector 105 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.625438][ T3671] I/O error, dev loop3, sector 58 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.635539][ T3671] Buffer I/O error on dev loop3p2, logical block 10, async page read [ 620.644287][ T3671] I/O error, dev loop3, sector 59 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 620.646964][ T3538] Buffer I/O error on dev loop3p1, logical block 1, async page read [ 620.663591][ T3671] Buffer I/O error on dev loop3p2, logical block 11, async page read [ 620.672709][ T3536] Buffer I/O error on dev loop3p3, logical block 8, async page read [ 620.674804][ T3671] Buffer I/O error on dev loop3p2, logical block 12, async page read [ 620.694195][ T3538] Buffer I/O error on dev loop3p1, logical block 2, async page read [ 620.713861][ T3536] Buffer I/O error on dev loop3p3, logical block 9, async page read [ 621.506727][T13758] syz.1.3122[13758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.507608][T13758] syz.1.3122[13758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 621.597903][ T3536] udevd[3536]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 621.599666][ T3538] udevd[3538]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 621.672228][ T3671] udevd[3671]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 621.771642][T13770] loop0: detected capacity change from 0 to 2048 [ 621.805550][T13770] Alternate GPT is invalid, using primary GPT. [ 621.819534][T13770] loop0: p1 p2 p3 [ 622.170494][ T8618] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 622.550890][T13765] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 622.622646][ T8618] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 622.655095][ T8618] usb 5-1: config 0 interface 0 has no altsetting 0 [ 622.673906][ T8618] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice= 9.99 [ 622.712800][ T8618] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 622.742205][ T8618] usb 5-1: config 0 descriptor?? [ 622.812284][ T8618] usb 5-1: selecting invalid altsetting 0 [ 622.884208][ T8618] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 623.029713][ T936] usb 5-1: USB disconnect, device number 67 [ 624.755429][T13788] loop4: detected capacity change from 0 to 764 [ 624.801063][T13791] loop0: detected capacity change from 0 to 8 [ 625.932714][T13799] syz.1.3136[13799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 625.932862][T13799] syz.1.3136[13799] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 628.472494][T13813] loop3: detected capacity change from 0 to 2048 [ 628.570567][T13813] Alternate GPT is invalid, using primary GPT. [ 628.579050][T13813] loop3: p1 p2 p3 [ 628.737954][ T22] usb 2-1: new high-speed USB device number 68 using dummy_hcd remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) remote cover enable write trace failed (errno 17) SYZFAIL: repeatedly failed to execute the program proc=2 req=3016 state=1 status=1 (errno 9: Bad file descriptor) [ 629.333847][T13810] Bluetooth: hci0: Opcode 0x0c03 failed: -4