last executing test programs: 25m22.917219424s ago: executing program 32 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open$dir(0x0, 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x641, 0x1021, r3, 0x0) fanotify_mark(0xffffffffffffffff, 0x90, 0x20, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000400)={0xa, 0x2, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}, 0x100d}, 0x43) setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r4, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_ASSOCIATE_REQ(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x60d98fb2e92cfb81) fsync(0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) write(r5, &(0x7f00000002c0)='#\x00\x00\x00', 0x4) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, 0x0, 0x40c0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") writev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000080)="76e5eac907f9ccf7a251ceddcec7d6aa45cffe2c63a56077123a276d3ba4e9d17eb3eb5db12a3783a8e0620d357de1fe04fa9465b5bd1286e9624dec06a00c222f", 0x41}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 24m52.651410445s ago: executing program 33 (id=78): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) setresuid(0xee01, 0xee00, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee00) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48010) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0182101, &(0x7f00000004c0)) 20m46.322776591s ago: executing program 34 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0xe0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setsig(r2, 0xa, 0x12) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) pipe2$9p(0x0, 0x0) poll(&(0x7f0000b2c000)=[{r3}], 0x2c, 0xffffffffffbffff8) dup2(r2, r3) fcntl$setown(r2, 0x8, r1) tkill(r1, 0x13) 20m37.890815488s ago: executing program 35 (id=512): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0xff, 0x328, &(0x7f00000000c0)="$eJzs3M9r22YYwPHHP+LYDrF8GBsbjLxsl20HkXg7D8xIYMywkMRjyWCgJPJmrNnBMhkeY8ku7bX0P+ilh5BjboG295JLb+2ll95yKfTQUEJVLEuJnchOq8R10nw/EPRKz/so74ts87zG0v6vt/6qlGy9ZDQkmlRy46GIHIhkJSq+iLeNuu2EdNqUr8dePP58fnHpp3yhMD2n1Ex+4ducUiozce/vf1Net91R2cv+vv8892zv471P918v/Fm2VdlW1VpDGWq59rRhLFumWi3bFV2pWcs0bFOVq7ZZb8dr7XjJqq2tNZVRXR1Pr9VN21ZGtakqZlM1aqpRbyrjD6NcVbquq/G0BEkEHr2uiltzc0Y+ZPLKBQ8GYb1yHKdP2InkjZiIpE5FilsDHRcAALiUTtT/MbekD1X/S8at/1udj+v/7S8eNMZ+2cl49f9uIqj+/+5J+1xd9X9SRC60/k8GzP50RXTlbbxL53PV/7gcJk6vaSNde/V63kh771/X/79tT7oN6n8AAAAAAAAAAAAAAAAAAAAAAK6CA8fRHMfR/K33981xj/axwOSgW2pwpfS4/tqod3n9/WGPE4Mxv7gkSffGvXhGxLq5Xlwvtrde3O84KZocuq8HT6vt33mkWrJy39rw8jfWizE3ki9JWSwxZUo0yZ7Md5yZHwvTU6qtO39E0p35OdHko+D8XGB+Qr76siNfF00erUhNLFltva4PnaP8/6aU+uHnwon8lNsPAAAAAIAPga6OBK7fdb1XvJ1/tL7u/n5ApGN9Phm4Po9rn8WHO3cAAAAAAK4Lu/lPxbAss96nkZKz+4RvxMOlj/TrE+uYYVdINntOOeH9nGlwM+3T8H9IUUl0hJJyxzsc5sz+/Acz5qiEyZoQZ/T46bRh/7v/tVGvPjI76OsV7xH65Pbdl+HOHPGe2tsZ+n4necZMB9YYeasPDyd2vg8fAAAAAO+VX/SnbHc3MuzxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwHfV5DFj8oh4nNuw5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJfFmwAAAP//26H/kQ==") mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) futex(&(0x7f00000005c0), 0x1, 0x2, 0x0, 0x0, 0xfffffff8) 20m34.717978527s ago: executing program 36 (id=518): sched_setscheduler(0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='contention_end\x00', r0}, 0x18) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000000)=0x81) ppoll(&(0x7f0000000080)=[{r2, 0x80}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x6, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r3 = syz_open_pts(r2, 0x440) r4 = dup3(r3, r2, 0x0) ioctl$TCSETSW2(r4, 0x5437, 0x0) 18m54.648896908s ago: executing program 37 (id=652): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r3, @ANYBLOB="0c009900ff070000700000001400040073797a6b616c6c6572300000000000000800050006"], 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r6) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) 18m43.680647572s ago: executing program 38 (id=659): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x801) socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f00006ac000/0x4000)=nil, 0x4000, 0x2000002, 0x4052, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x38, r2, 0x1, 0x80000000, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_AUTO_OPEN_PLINKS={0x5, 0x7, 0x1}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x44}, @NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0x2}]}]}, 0x38}}, 0x0) 15m31.002965594s ago: executing program 1 (id=742): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x759, &(0x7f0000000240)={[{@noinit_itable}, {@jqfmt_vfsv1}, {@noload}, {@errors_remount}, {@errors_continue, 0x0}, {@test_dummy_encryption}, {@usrquota}, {@grpquota}, {@resuid={'resuid', 0x3d, 0xffffffffffffffff}}, {@acl}, {@bsdgroups}, {@jqfmt_vfsold}], [], 0x2c}, 0x0, 0x4f6, &(0x7f0000000c00)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x6a400, 0x60) 15m30.509860137s ago: executing program 1 (id=743): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180)=0x700, &(0x7f00000001c0)=r0}, 0x20) 15m29.875116971s ago: executing program 1 (id=744): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) r3 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 15m27.970900853s ago: executing program 1 (id=745): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000002c0)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x22}}, @address_request={0x11, 0x0, 0x0, 0x1}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYBLOB], 0x30}}, 0x0) 15m24.549795527s ago: executing program 1 (id=746): r0 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) keyctl$update(0x2, r0, 0x0, 0x0) 15m23.669351438s ago: executing program 1 (id=747): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB="14005a8010000080040001000500020051000000"], 0x30}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f00000047c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002140)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) lgetxattr(&(0x7f00000021c0)='./file1\x00', &(0x7f0000002200)=@known='trusted.syz\x00', &(0x7f0000002300)=""/204, 0xcc) 15m7.708592574s ago: executing program 39 (id=747): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002580)=ANY=[@ANYRESOCT=r2, @ANYRES16=r1, @ANYRESHEX, @ANYRES32=r5, @ANYBLOB="14005a8010000080040001000500020051000000"], 0x30}}, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r6, &(0x7f00000047c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000002140)={0x50, 0x0, r7, {0x7, 0x27, 0x0, 0x1dd8a0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xfffffb96}}, 0x50) lgetxattr(&(0x7f00000021c0)='./file1\x00', &(0x7f0000002200)=@known='trusted.syz\x00', &(0x7f0000002300)=""/204, 0xcc) 5m50.485439459s ago: executing program 3 (id=2195): socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 5m48.533357303s ago: executing program 3 (id=2202): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r6], 0x54}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r6], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5m47.567136265s ago: executing program 2 (id=2206): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x70, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xc}, {0xfff2}, {0xfff1, 0xfff3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x44}}]}, 0x70}}, 0x0) 5m46.989375503s ago: executing program 9 (id=2209): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_tid_address(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000740)={[{@journal_dev={'journal_dev', 0x3d, 0x25}}, {@dioread_lock}, {@journal_checksum}, {@noblock_validity}, {@bh}, {@dioread_nolock}]}, 0x0, 0x64a, &(0x7f0000002380)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc11000012000102000000009200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010009c01c"], 0x11fc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000900000000000000cf0700001811000011a5f27b984cb37aecc8d7afeb090c9bc6f202e43cd2d31dd4494e4ffa5adffe2387403bc62f4ef4ea0fc88da79c971ade6b03a77ea2226fb955d0630dcdf4d022c25841da856a3178ec5cd408ba5be39a1c38c7d7edeaf1486d919356dd3479dd14ef059fa4280511025535f65f562c7c255b5b886a0000da5ae43919a6f93313e01889b99abc452888b09a0c73a26be2283e1882bca20d8f6107069741a63b91f83989cd48c3d04a1b132e35a3ed9300df8a9737c9a89c9676fb74a49576e13a34ced9b6ef1576ce6286fe3f59cb", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186200000c000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x10, 0x7, 0x782}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x4, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x1, &(0x7f0000000380), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) getdents64(r1, &(0x7f0000003f80)=""/4113, 0x1011) r6 = openat2(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={0x80000, 0x132}, 0x18) getsockname$packet(r6, 0x0, &(0x7f0000000700)) 5m46.69961753s ago: executing program 2 (id=2211): syz_usb_connect$hid(0x0, 0x6c, &(0x7f0000000500)=ANY=[@ANYBLOB="1201010000002340b827ed01000095fb221e090289f68ecf9826672101"], 0x0) 5m44.623900519s ago: executing program 9 (id=2213): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) timer_create(0x3, &(0x7f0000533fa0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f00000001c0)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, 0x0, 0x0) 5m44.552921636s ago: executing program 3 (id=2214): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x15, r3, 0x0, r1}) 5m43.626373937s ago: executing program 3 (id=2217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f0000000300), &(0x7f0000000040)=ANY=[], 0xfe37, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002d00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830"], 0x20}}, 0x800) 5m43.528794783s ago: executing program 9 (id=2218): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54", 0xe) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$key(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)={0x2, 0x10, 0x1, 0x7, 0x7, 0x0, 0x70bd2c, 0x25dfdbfb, [@sadb_x_filter={0x5, 0x1a, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@local, 0xb, 0x0, 0x4}]}, 0x38}}, 0x800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 5m42.72489026s ago: executing program 2 (id=2219): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000010}, 0x14) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="18000000700001000000000000000000070000000804"], 0x18}}, 0x0) 5m42.526681744s ago: executing program 9 (id=2220): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000012008f35"], 0x20}, 0x1, 0x0, 0x0, 0x4081}, 0x4040800) recvmmsg(0xffffffffffffffff, &(0x7f0000005ac0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000014c0)=""/217, 0xd9}, {&(0x7f0000013100)=""/4127, 0x101f}, {&(0x7f00000002c0)=""/96, 0x60}, {&(0x7f0000001780)=""/223, 0xdf}, {&(0x7f0000001600)=""/260, 0x104}, {0x0}], 0x6}, 0x5}], 0x1, 0x40000002, 0x0) recvmmsg(r0, &(0x7f0000005840), 0x4000000000000ef, 0x2000, 0x0) 5m40.488639427s ago: executing program 9 (id=2225): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_tid_address(0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000740)={[{@journal_dev={'journal_dev', 0x3d, 0x25}}, {@dioread_lock}, {@journal_checksum}, {@noblock_validity}, {@bh}, {@dioread_nolock}]}, 0x0, 0x64a, &(0x7f0000002380)="$eJzs3c9vFG8ZAPBnZrfd/kC3EKPiQRqNgURpaQFDjAn04okQ/HHzVGkhyEIJrdEiiW2CFxPjxYOJJw/if6EkXj158+DFkyEhxnAQQ77sN7M7W7a73Xa77Xbp9vNJls7Muzvvs2SffWfefd+ZAE6s6eyfNOJsRDxOIspNZcXIC6frz3vz32d3skcS1er3/5PEs18kG837SvK/k/mLPynXt5wptNe7uv70wWKlsvwkX59de/h4dnX96cX7DxfvLd9bfjT/zflrV69cvTZ36UDvL4tgJF+++fzHPy3/6tYP//j7d8ncn/55K4kb8T6PLXtfra8tHajm7P9sOqp1b7cVpBHXDrjvj8X/yo3PSU0p+0AkxUFGxH6kEXE9z5EvRDkK8SFZy/HL7w40OKCvqknU2qjpKnDyJNGx6P5Y/iXRbqyvMQFHoXEc0Di33+k8uF3az0MS4Ii8Xqj31dVzfyQiGvlfrPcNxlitb2DiTdLcz1PrVztYz1xdVsff/nrrefaIDv1wQH9sbDZ6uVvb/6SWm1NRPweYeJNuy/+F/CggzX8n+F7rjrvsPJ9uWZf/cHQ2NiPii3n7Pxpd53+a524j/3/UY/095v+pHqsDAAAAAACAofZyISK+sdP4v3Rr/M9ooX38z2RE3DiE+vf+/S99lS8kh1Ad0OT1QsS3dxz/uzXGd6qQr32mNh5gJLl7v7J8KSI+GxEXYqSUrc+17Ld5hPDFX5/5Xaf6m8f/ZY+s/sZYwHxPr4otY4mWFtcWD/q+gYjXmxFfqo3/PZdv2T7+J2v/k63xvx+G3WT5/bjLOs587cXtTmV75z/QL9U/RJzfsf3/cLid7H59jtna8cBs46ig3Zd//ps/d6pf/sPgZO3/xO75X0qar9ezur/9j0bE5fVitVN5r8f/o8kPCo39Z362uLb2ZC5iNLnZvn1+fzHDsGrkQyNfsvy/8NXd+/+2jv+b8nA8Ija6rPPz7yf/1alM+w+Dk+X/0u7tf3l7+7//hfkXU3/pVP/trtr/K7U2/UK+Rf8fNGu/Hke3CTqQcAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmEsj4lQk6czWcprOzERMRsTnYiKtrKyuff3uyk8eLUXt7t9TMZI27vRbrq8njfv/TzWtz7esX46I0xHx28J4bX3mzkpladBvHgAAAAAAAAAAAAAAAAAAAD4Sk7U5/9VS6/z/zL8Lg44O6Lti/le+w8lT7PmV1dKhBgIcud7zHzjONveV/yN9jQU4ep3z/+27ak3L5u98pe8xAUej6/b/7073Ydj0eP7v5wIYAvr/4KTqsk9vrN9xAIOg/QcAAAAAgKFy+tzLfyQRsfGt8dojM5qXjQ80MqDf0j3KfQfA8DKGF06u4sqgIwAGxYR+INla+n/rZP+azqP/k/4EBAAAAAAAAAAAAAC0OX+28/x/cwNguO06/3+viwMAx9ou8/93mtjjcgEwRDrf+sO8Phh2zvGBvVp78/8BAAAAAAAAAAAA4CMw9vTBYqWy/GR1/fgtXO/pVYWIGGDwG4sH20+1NKjgx6JT0fv+VDoSEYP+jB3aQpZslcpytRqx95Mbl+AYYMx7f3WU+vzVBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1H0aAAD///UvHMY=") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=ANY=[@ANYBLOB="fc11000012000102000000009200"/56, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000f504010009c01c"], 0x11fc}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000900000000000000cf0700001811000011a5f27b984cb37aecc8d7afeb090c9bc6f202e43cd2d31dd4494e4ffa5adffe2387403bc62f4ef4ea0fc88da79c971ade6b03a77ea2226fb955d0630dcdf4d022c25841da856a3178ec5cd408ba5be39a1c38c7d7edeaf1486d919356dd3479dd14ef059fa4280511025535f65f562c7c255b5b886a0000da5ae43919a6f93313e01889b99abc452888b09a0c73a26be2283e1882bca20d8f6107069741a63b91f83989cd48c3d04a1b132e35a3ed9300df8a9737c9a89c9676fb74a49576e13a34ced9b6ef1576ce6286fe3f59cb", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186200000c000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x10, 0x7, 0x782}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x4, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x1, &(0x7f0000000380), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) fstat(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) getdents64(r1, &(0x7f0000003f80)=""/4113, 0x1011) r6 = openat2(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={0x80000, 0x132}, 0x18) getsockname$packet(r6, 0x0, &(0x7f0000000700)) 5m39.456994284s ago: executing program 3 (id=2228): syncfs(0xffffffffffffffff) syz_usb_connect(0x0, 0x51, 0x0, 0x0) 5m37.890019668s ago: executing program 9 (id=2229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b050000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) close(0x3) r2 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="f9ad0453a539"}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 5m36.129070538s ago: executing program 3 (id=2231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r6, 0x705, 0x400000, 0x4, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x24}}, 0x0) 5m35.801697993s ago: executing program 2 (id=2233): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bind$vsock_stream(r1, &(0x7f0000000000)={0x10}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x24, 0x1e, 0x400, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_VLAN={0x6, 0x5, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0xff, 0x0, 0x0, 0x0, 0x3}}) 5m34.488884188s ago: executing program 2 (id=2235): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x2000000, 0x0) r0 = syz_io_uring_setup(0x507d, &(0x7f0000000480)={0x0, 0x0, 0x10100, 0x3, 0xfffffffb}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB='6'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m33.376548503s ago: executing program 2 (id=2238): socket$kcm(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, 0x0, 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 5m22.429963222s ago: executing program 40 (id=2229): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000002c0), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b050000"], 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x50) close(0x3) r2 = userfaultfd(0x80001) mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) rename(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000140)) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r5) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @random="f9ad0453a539"}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r8, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) 5m21.00655892s ago: executing program 41 (id=2231): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00'}) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x24, r6, 0x705, 0x400000, 0x4, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}]}, 0x24}}, 0x0) 5m18.018706756s ago: executing program 42 (id=2238): socket$kcm(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) openat$nullb(0xffffff9c, 0x0, 0x800, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$xdp(0x2c, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2d, 0x2, 0x0) socket(0x10, 0x3, 0x0) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x8, 0x5ac, 0x24e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x1, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x2, 0xaa, {0x9, 0x21, 0xff00, 0xa, 0x1, {0x22, 0xfa4}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7f, 0x3, 0x3a}}}}}]}}]}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 16.728324494s ago: executing program 6 (id=3159): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c}}, 0x8000) recvmmsg$unix(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 16.724259711s ago: executing program 4 (id=3160): socket$netlink(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2000000, &(0x7f0000000380)={[{@inlinecrypt}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x3f7, &(0x7f0000003080)="$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") syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080)) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c}) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24004004}, 0xc000) chdir(&(0x7f00000001c0)='./file0\x00') ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000200)=0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) preadv(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0xd8c1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f00000004c0)=@rnullb, &(0x7f0000000440)='./file1\x00', &(0x7f0000000500)='debugfs\x00', 0x36c3450, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)={0x42, 0x60, 0x3f}, 0x18) setxattr$security_capability(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000100), 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00'}, 0x10) 15.582234892s ago: executing program 4 (id=3164): syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='net/mcfilter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = semget(0x2, 0x4, 0x200) semop(r1, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}], 0x2) semop(r1, &(0x7f0000000500)=[{0x0, 0x0, 0x1800}, {0x0, 0x3, 0x1800}, {0x1, 0x3}, {0x1, 0x7, 0x1000}], 0x4) 15.525166105s ago: executing program 6 (id=3166): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock2(&(0x7f0000658000/0x4000)=nil, 0x4000, 0x0) syz_clone(0x40004000, &(0x7f0000000140), 0x0, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)="48bb081dcd98b3ababd2f86978623fc18fbfb3449694b4220ef04a39abbf") r1 = socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(&(0x7f0000000240)='cgroup2\x00', 0x0) syz_open_dev$amidi(&(0x7f00000006c0), 0x3e0, 0x123e81) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) syz_usb_connect(0x2, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000206030004000000000000000000000005000100070000000900020073797a30000000001400078005001500040000000800124000000000050005000a000000050004000000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x10000) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x101b, 0x0, 0x0, 0x6, 0x2, 0x1}}) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x4, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0xba}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) 14.423438807s ago: executing program 5 (id=3167): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 13.744059652s ago: executing program 7 (id=3169): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x9, {0x9, 0x11, "46ff4490d70a1e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000100)) 12.107520961s ago: executing program 4 (id=3173): socket$qrtr(0x2a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_ifreq(r0, 0x89f0, &(0x7f00000000c0)={'bond0\x00', @ifru_names='gre0\x00'}) 11.220619975s ago: executing program 5 (id=3174): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 11.120041073s ago: executing program 6 (id=3176): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000000c0)=[{r0, 0x2004}], 0x1, 0x0, 0x0, 0x0) 11.080891949s ago: executing program 4 (id=3178): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10.322180522s ago: executing program 7 (id=3180): socket$tipc(0x1e, 0x2, 0x0) socket$tipc(0x1e, 0x5, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000600)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d00000000802110000010802110000005050505050500000", @ANYRES8=r1], 0x3c}}, 0x10) 10.246806127s ago: executing program 8 (id=3181): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 9.45984951s ago: executing program 7 (id=3183): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xc, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000580)="1400000016000b63d25a80648c2594f90f24fc6083c8d9250b92cf9a817a6aa8724e6c3a0ec73217f300bfcf6d0b3570ab6a5c3bdf75cd8ff41f8a97a968d068342bb5e5f5b7fca4207f2462e8", 0x4d}], 0x1}, 0x4004) mkdir(0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000100), 0x0, 0xffffffffffffffff) mknodat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) chdir(0x0) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) 9.424677504s ago: executing program 5 (id=3184): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 9.372064916s ago: executing program 0 (id=3185): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x17b}, {"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"}}}}, 0xfdef) 8.096251848s ago: executing program 6 (id=3186): r0 = semget(0x2, 0x4, 0x200) semop(r0, &(0x7f0000000040)=[{0x0, 0x7fff, 0x1800}, {0x0, 0x8001}], 0x2) semop(r0, &(0x7f0000000500)=[{0x0, 0x0, 0x1800}, {0x0, 0x3, 0x1800}, {0x1, 0x3}, {0x1, 0x7, 0x1000}], 0x4) 7.87589759s ago: executing program 8 (id=3187): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.729844873s ago: executing program 7 (id=3188): unshare(0x66000080) r0 = socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = gettid() sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005f00)=ANY=[@ANYBLOB="2800000010000100"/20, @ANYRES32=r1, @ANYBLOB="6d3082610000000008001300", @ANYRES32=r2], 0x28}}, 0x0) 7.528535565s ago: executing program 6 (id=3189): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) set_tid_address(0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000140)='./file0\x00', 0x4011, &(0x7f0000000740)={[{@journal_dev={'journal_dev', 0x3d, 0x25}}, {@dioread_lock}, {@journal_checksum}, {@noblock_validity}, {@bh}, {@dioread_nolock}]}, 0x0, 0x64a, &(0x7f0000002380)="$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") r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x15, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000900000000000000cf0700001811000011a5f27b984cb37aecc8d7afeb090c9bc6f202e43cd2d31dd4494e4ffa5adffe2387403bc62f4ef4ea0fc88da79c971ade6b03a77ea2226fb955d0630dcdf4d022c25841da856a3178ec5cd408ba5be39a1c38c7d7edeaf1486d919356dd3479dd14ef059fa4280511025535f65f562c7c255b5b886a0000da5ae43919a6f93313e01889b99abc452888b09a0c73a26be2283e1882bca20d8f6107069741a63b91f83989cd48c3d04a1b132e35a3ed9300df8a9737c9a89c9676fb74a49576e13a34ced9b6ef1576ce6286fe3f59cb", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000186200000c000000000000000000000018110000", @ANYRESDEC=r1, @ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f0000000180)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x0, 0x10, 0x7, 0x782}, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x10, 0x4, @void, @value}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_xfrm(0x10, 0x3, 0x6) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setitimer(0x1, &(0x7f0000000380), 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) fstat(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r4, 0x0) getdents64(r1, &(0x7f0000003f80)=""/4113, 0x1011) r5 = openat2(r0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000540)={0x80000, 0x132}, 0x18) getsockname$packet(r5, 0x0, &(0x7f0000000700)) 7.360201663s ago: executing program 0 (id=3190): getdents(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x601c2, 0xe6) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x578410e9) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0xfffffffe, 0x298, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f8) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000280), 0x208e24b) ioctl$sock_qrtr_TIOCINQ(r5, 0x541b, &(0x7f0000000080)) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r6, 0x89f1, &(0x7f0000000000)={'bond0\x00', @ifru_names='ip6tnl0\x00'}) 6.896904103s ago: executing program 8 (id=3191): r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) write$nbd(r0, &(0x7f0000000240)={0x1000000, 0x0, 0x2, 0xffff, 0x3, "82b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf70000000000"}, 0x3a) 4.828851529s ago: executing program 5 (id=3192): syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)={{0x12, 0x1, 0x250, 0x76, 0x48, 0x26, 0x8, 0x6f8, 0xb000, 0x34d6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xdb, 0x3, 0x80, 0xe6, [{{0x9, 0x4, 0xe, 0x2, 0x1, 0xa3, 0x8d, 0x2f, 0xa, [], [{{0x9, 0x5, 0x4, 0x4, 0x8, 0x9, 0x2, 0x9}}]}}]}}]}}, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) 4.595662375s ago: executing program 4 (id=3193): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000080)={0x0, 0x6, 0x9, {0x9, 0x11, "46ff4490d70a1e"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000100)) 3.826059615s ago: executing program 0 (id=3194): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r5], 0x54}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r8, @ANYBLOB="01"], 0x20}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c000000110001002dbd7000fbdbdf2500000000", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.561126477s ago: executing program 7 (id=3195): landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x4, 0x2) r1 = gettid() timer_create(0x0, &(0x7f00000003c0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) ioctl$SG_BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000240)={'\x00', 0x60, 0x2, 0x401, 0x100000001, 0x0, r1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)='\\', 0x1) r3 = syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009047dbe"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, 0x0, 0x0) syz_usb_control_io$printer(r3, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000200)=ANY=[@ANYBLOB="0000000000000008bf"], 0x0, 0x0, 0x0, 0x0, 0x0}) 3.37275215s ago: executing program 8 (id=3196): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000300)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.123763358s ago: executing program 6 (id=3197): socket$pppoe(0x18, 0x1, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) 2.848862592s ago: executing program 8 (id=3198): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x2, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) ppoll(&(0x7f00000000c0)=[{r0, 0x2004}], 0x1, 0x0, 0x0, 0x0) 1.921524174s ago: executing program 5 (id=3199): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f00000000c0)}, 0x10) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) 1.403444781s ago: executing program 0 (id=3200): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.151161774s ago: executing program 0 (id=3201): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r0 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40088a01, &(0x7f0000000000)) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000040)={0x1}) 1.037136064s ago: executing program 8 (id=3202): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x300, 0x14}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x3c, 0x61, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, {{0x2200, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x17b}, {"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"}}}}, 0xfdef) 738.83649ms ago: executing program 5 (id=3203): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffff"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r2], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002ac0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x109140, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYRES32, @ANYBLOB='\x00'/15, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000021000001"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES32=r3], 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, &(0x7f0000000500)=""/64}, 0x20) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 724.905277ms ago: executing program 0 (id=3204): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x4004010) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x4004804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x10100, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$bcachefs(&(0x7f0000000100), &(0x7f0000000180)='./file0\x00', 0x10112, &(0x7f0000000040)=ANY=[@ANYRES8], 0x1, 0x5a12, &(0x7f00000079c0)="$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") prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x40, 0xfd, 0x7ffc0002}]}) inotify_rm_watch(0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x8cff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) lseek(r3, 0x0, 0x3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000000)=0xb1ac, 0x4) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x44, @time={0x6, 0x5}, 0x7f, {0x8, 0x6}, 0x80, 0x0, 0x7}) socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000000)="580000001400192340834b80043f679a10ff3d425f9cc3f4ff7f4e32f61bcdf1e422000000000100804824cabecc4b381eaadc28f23457e792945f64009400050028925aaa000000c600000000000000feff2c70", 0x54}], 0x1) 528.875123ms ago: executing program 4 (id=3205): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r3, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000", @ANYRES32=r1], 0x7c}}, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 0s ago: executing program 7 (id=3206): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000161000/0xf000)=nil, &(0x7f00001df000/0x3000)=nil, 0xf000, 0x2, 0x2}) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): riptor with address 0xF3, changing to 0x83 [ 1436.527869][ T6212] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1436.630625][ T6212] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1436.681074][ T6212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.704209][ T6212] usb 9-1: Product: syz [ 1436.708697][ T9913] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1436.729949][ T6212] usb 9-1: Manufacturer: syz [ 1436.740076][ T9913] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1436.752186][ T6212] usb 9-1: SerialNumber: syz [ 1436.801042][ T9913] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1436.809543][ T6212] usb 9-1: config 0 descriptor?? [ 1436.866528][ T6212] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1436.907904][ T6212] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1438.049089][ T6212] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1438.062786][ T9913] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 1438.074360][ T6212] em28xx 9-1:0.0: Config register raw data: 0x00 [ 1438.095550][ T9913] usb 1-1: USB disconnect, device number 13 [ 1440.722439][ T1223] usb 9-1: USB disconnect, device number 32 [ 1440.744260][ T1223] em28xx 9-1:0.0: Disconnecting em28xx [ 1440.833265][ T1223] em28xx 9-1:0.0: Freeing device [ 1442.082208][ T9913] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1442.308327][T16852] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2550'. [ 1442.317916][ T9913] usb 5-1: Using ep0 maxpacket: 32 [ 1442.452247][ T9913] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9 [ 1442.552301][ T9913] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1442.561411][ T9913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.602723][ T9913] usb 5-1: Product: syz [ 1442.606966][ T9913] usb 5-1: Manufacturer: syz [ 1442.611591][ T9913] usb 5-1: SerialNumber: syz [ 1442.673462][ T9913] usb 5-1: config 0 descriptor?? [ 1442.692624][T16839] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1442.751887][ T9913] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 1442.761830][T16862] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2553'. [ 1442.843330][T16864] netlink: 'syz.8.2555': attribute type 4 has an invalid length. [ 1443.145854][ T1223] usb 5-1: USB disconnect, device number 26 [ 1443.146893][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 1443.202375][T16871] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2557'. [ 1443.585318][ T9913] usb 9-1: new full-speed USB device number 33 using dummy_hcd [ 1444.300620][T16883] loop0: detected capacity change from 0 to 1024 [ 1444.346948][T16883] EXT4-fs: Ignoring removed bh option [ 1444.434095][T16883] EXT4-fs: Mount option(s) incompatible with ext2 [ 1444.481629][ T1223] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1444.699720][ T1223] usb 6-1: Using ep0 maxpacket: 16 [ 1444.765265][ T1223] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1444.952582][ T9913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1445.052515][ T9913] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1445.116454][ T9913] usb 9-1: New USB device found, idVendor=04f3, idProduct=0754, bcdDevice= 0.00 [ 1445.126601][ T1223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1445.141047][ T1223] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1445.151109][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1445.164750][ T1223] usb 6-1: Product: syz [ 1445.168973][ T1223] usb 6-1: Manufacturer: syz [ 1445.173790][ T1223] usb 6-1: SerialNumber: syz [ 1445.187915][ T1223] usb 6-1: config 0 descriptor?? [ 1446.182198][ T9913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1446.216715][ T1223] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1446.376439][ T9913] usb 9-1: config 0 descriptor?? [ 1446.427859][ T1223] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1446.584538][ T9913] usb 9-1: can't set config #0, error -71 [ 1446.643391][ T9913] usb 9-1: USB disconnect, device number 33 [ 1446.802539][ T1223] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1446.832019][ T1223] em28xx 6-1:0.0: Config register raw data: 0x00 [ 1446.919646][T16905] netlink: 'syz.7.2547': attribute type 1 has an invalid length. [ 1446.973106][T16905] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2547'. [ 1447.162920][ T9913] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1447.347900][ T9913] usb 9-1: Using ep0 maxpacket: 32 [ 1447.370399][ T9913] usb 9-1: config 0 has an invalid interface number: 146 but max is 0 [ 1447.399746][ T9913] usb 9-1: config 0 has no interface number 0 [ 1447.449780][ T9913] usb 9-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1447.461368][T16914] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2567'. [ 1447.511037][ T9913] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1447.542680][T16912] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2567'. [ 1447.562293][ T9913] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1447.642070][ T9913] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1447.685119][ T9913] usb 9-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1447.751135][ T9913] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1447.761264][ T9913] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1447.832200][ T9913] usb 9-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1447.852429][ T43] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1447.862360][ T9913] usb 9-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1447.904946][ T9913] usb 9-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1447.996406][ T9913] usb 9-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1448.052185][ T9913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.077094][ T43] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1448.102191][ T9913] usb 9-1: Product: syz [ 1448.106419][ T9913] usb 9-1: Manufacturer: syz [ 1448.157035][ T43] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1448.182161][ T9913] usb 9-1: SerialNumber: syz [ 1448.183686][ T1223] usb 6-1: USB disconnect, device number 14 [ 1448.206341][ T9913] usb 9-1: config 0 descriptor?? [ 1448.208002][ T1223] em28xx 6-1:0.0: Disconnecting em28xx [ 1448.252602][ T43] usb 1-1: Product: syz [ 1448.268379][T16906] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1448.276173][ T43] usb 1-1: Manufacturer: syz [ 1448.292877][T16906] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1448.293402][ T43] usb 1-1: SerialNumber: syz [ 1448.304192][ T9913] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1448.316643][T16926] netlink: 'syz.6.2571': attribute type 4 has an invalid length. [ 1448.325485][ T1223] em28xx 6-1:0.0: Freeing device [ 1448.376090][ T9913] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1448.383362][ T43] usb 1-1: config 0 descriptor?? [ 1448.473844][ T9913] scsi host1: microtekX6 [ 1448.587620][ T9913] usb 9-1: USB disconnect, device number 34 [ 1448.612260][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 1448.698077][ T1223] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 1449.147059][ T1223] usb 6-1: config index 0 descriptor too short (expected 31, got 27) [ 1449.155919][ T1223] usb 6-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 15616, setting to 64 [ 1449.192246][ T1223] usb 6-1: config 1 interface 0 has no altsetting 0 [ 1449.490100][ T1223] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.97 [ 1449.832687][ T1223] usb 6-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1450.162317][ T43] usb 1-1: f81604_read: reg: 100f failed: -EREMOTEIO [ 1450.192325][ T1223] usb 6-1: Product: syz [ 1450.196574][ T1223] usb 6-1: Manufacturer: syz [ 1450.201205][ T1223] usb 6-1: SerialNumber: syz [ 1450.989059][T16928] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1451.222382][ T43] usb 1-1: f81604_read: reg: 200e failed: -EPROTO [ 1451.304945][ T43] usb 1-1: USB disconnect, device number 14 [ 1452.560908][ T1223] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1452.624074][ T1223] usb 6-1: USB disconnect, device number 15 [ 1452.703776][ T1223] usblp0: removed [ 1453.164420][ T43] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1453.724216][ T43] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1453.886532][T16978] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2582'. [ 1453.924079][T16973] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2582'. [ 1454.152286][ T1213] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 1454.363974][ T1213] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1454.387424][T16988] netlink: 'syz.5.2586': attribute type 4 has an invalid length. [ 1454.402220][ T1213] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1454.459225][ T1213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1454.532248][ T1213] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1454.572176][ T1213] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1454.737884][ T1213] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1454.768068][ T1213] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1454.810296][ T1213] usb 7-1: Product: syz [ 1454.830690][ T1213] usb 7-1: Manufacturer: syz [ 1454.857105][ T1213] usb 7-1: SerialNumber: syz [ 1454.894353][ T1213] usb 7-1: config 0 descriptor?? [ 1455.043783][ T1223] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1455.180031][ T1213] radio-si470x 7-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1455.222542][ T1213] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1455.232704][ T1223] usb 1-1: Using ep0 maxpacket: 8 [ 1455.277062][ T1223] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1455.306752][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1455.343787][ T1213] usb 7-1: USB disconnect, device number 15 [ 1455.376268][ T1223] usb 1-1: Product: syz [ 1455.420627][ T1223] usb 1-1: Manufacturer: syz [ 1455.430725][ T1223] usb 1-1: SerialNumber: syz [ 1455.475296][ T1223] usb 1-1: config 0 descriptor?? [ 1455.782575][ T1223] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1458.112703][T17020] netlink: 'syz.8.2581': attribute type 1 has an invalid length. [ 1459.104080][ T1223] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1459.213846][T17019] netlink: 'syz.5.2592': attribute type 6 has an invalid length. [ 1459.225983][T17025] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2581'. [ 1459.242610][T17019] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2592'. [ 1459.514028][ T6212] usb 1-1: USB disconnect, device number 15 [ 1459.542233][ T9913] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 1460.846873][ T9913] usb 7-1: config index 0 descriptor too short (expected 31, got 27) [ 1460.855533][ T9913] usb 7-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 15616, setting to 64 [ 1461.724372][ T9913] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1461.734948][ T9913] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.97 [ 1461.747243][ T9913] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1461.755751][ T9913] usb 7-1: Product: syz [ 1461.764555][ T9913] usb 7-1: Manufacturer: syz [ 1461.769180][ T9913] usb 7-1: SerialNumber: syz [ 1461.787568][T17028] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1462.340830][ T9913] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1462.363120][ T6212] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1462.423361][ T9913] usb 7-1: USB disconnect, device number 16 [ 1462.453144][ T9913] usblp0: removed [ 1462.554089][T17053] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2598'. [ 1462.564658][ T6212] usb 9-1: Using ep0 maxpacket: 32 [ 1462.602688][ T6212] usb 9-1: config 0 has an invalid interface number: 136 but max is 0 [ 1462.652781][T17050] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2598'. [ 1462.661962][ T6212] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.729261][ T6212] usb 9-1: config 0 has no interface number 0 [ 1462.767605][ T6212] usb 9-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 1462.812279][ T6212] usb 9-1: config 0 interface 136 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 1462.842863][ T6212] usb 9-1: config 0 interface 136 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 1462.898060][ T6212] usb 9-1: config 0 interface 136 altsetting 0 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 1462.948576][ T6212] usb 9-1: config 0 interface 136 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1462.978911][ T6212] usb 9-1: config 0 interface 136 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 5 [ 1463.034803][ T6212] usb 9-1: New USB device found, idVendor=0763, idProduct=1021, bcdDevice=8e.c0 [ 1463.078706][ T6212] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1463.115584][ T6212] usb 9-1: config 0 descriptor?? [ 1463.165603][ T6212] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1463.415085][T16671] udevd[16671]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.136/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1463.478257][ T6212] snd-usb-audio 9-1:0.136: probe with driver snd-usb-audio failed with error -2 [ 1464.319329][ T6212] usb 9-1: USB disconnect, device number 35 [ 1464.462603][ T8474] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1464.792348][ T8474] usb 1-1: Using ep0 maxpacket: 32 [ 1465.496451][T17065] Bluetooth: hci2: command 0x0406 tx timeout [ 1465.503494][T17065] Bluetooth: hci4: command 0x0406 tx timeout [ 1465.645303][ T8474] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1465.662675][ T8474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1465.671099][ T8474] usb 1-1: Product: syz [ 1465.678118][ T8474] usb 1-1: Manufacturer: syz [ 1465.683113][ T8474] usb 1-1: SerialNumber: syz [ 1465.698684][ T8474] usb 1-1: config 0 descriptor?? [ 1465.810052][T17084] netlink: 'syz.4.2609': attribute type 1 has an invalid length. [ 1465.828203][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2609'. [ 1466.042813][T17085] netlink: 'syz.6.2608': attribute type 6 has an invalid length. [ 1466.069808][T17085] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2608'. [ 1466.270340][ T30] audit: type=1326 audit(1749761024.177:971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17089 comm="syz.8.2610" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91a6f8e929 code=0x0 [ 1466.385877][ T8474] peak_usb 1-1:0.0: PEAK-System PCAN-USB Pro hwrev 0 serial 00000000.00000000 (2 channels) [ 1466.428620][ T8474] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1466.465026][ T8474] peak_usb 1-1:0.0 can0: sending command failure: -22 [ 1466.633161][ T8474] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -22 [ 1466.717230][ T8474] usb 1-1: USB disconnect, device number 16 [ 1469.135350][T17106] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2615'. [ 1469.529779][T17117] fuse: Bad value for 'fd' [ 1469.534497][ T1223] usb 1-1: new full-speed USB device number 17 using dummy_hcd [ 1469.775609][ T1223] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 1469.808626][ T1223] usb 1-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 15616, setting to 64 [ 1469.854143][ T1223] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1469.880905][ T1223] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.97 [ 1469.924145][ T1223] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1469.932956][ T1223] usb 1-1: Product: syz [ 1469.937226][ T1223] usb 1-1: Manufacturer: syz [ 1469.941904][ T1223] usb 1-1: SerialNumber: syz [ 1469.957900][T17110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1470.302185][ T1213] usb 9-1: new full-speed USB device number 36 using dummy_hcd [ 1470.612280][ T8794] Bluetooth: hci3: command 0x0406 tx timeout [ 1470.747212][ T1213] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1470.762166][ T1213] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1470.803473][ T1223] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1470.828443][ T1213] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1470.848259][ T1223] usb 1-1: USB disconnect, device number 17 [ 1470.874894][ T1223] usblp0: removed [ 1470.885844][ T1213] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1470.919319][ T1213] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1470.963014][ T1213] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1470.983631][ T1213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1470.991808][ T1213] usb 9-1: Product: syz [ 1471.009871][ T1213] usb 9-1: Manufacturer: syz [ 1471.032406][ T1213] usb 9-1: SerialNumber: syz [ 1471.043459][ T1213] usb 9-1: config 0 descriptor?? [ 1471.387854][ T1213] radio-si470x 9-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1471.442338][ T1213] radio-si470x 9-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1471.522213][ T6212] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1471.531754][ T1213] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1471.557467][ T1213] radio-si470x 9-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 1471.576973][ T1213] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 1471.669301][ T1213] usb 9-1: USB disconnect, device number 36 [ 1471.684462][T17143] netlink: 'syz.5.2625': attribute type 1 has an invalid length. [ 1471.692264][ T6212] usb 5-1: Using ep0 maxpacket: 32 [ 1471.694564][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.763783][ T6212] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1471.799790][T17143] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2625'. [ 1471.808880][ T6212] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1471.808930][ T6212] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1471.877473][ T6212] usb 5-1: config 0 descriptor?? [ 1472.012373][ T30] audit: type=1326 audit(1749761029.927:972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17149 comm="syz.7.2627" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd61ef8e929 code=0x0 [ 1472.308552][ T6212] usbhid 5-1:0.0: can't add hid device: -71 [ 1472.338926][ T6212] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1472.390483][ T6212] usb 5-1: USB disconnect, device number 27 [ 1472.790939][T17168] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2631'. [ 1473.650303][T17181] fuse: Bad value for 'fd' [ 1476.571599][T17224] netlink: 'syz.6.2643': attribute type 1 has an invalid length. [ 1476.622602][T17224] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2643'. [ 1477.072601][ T30] audit: type=1326 audit(1749761034.987:973): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17232 comm="syz.8.2647" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f91a6f8e929 code=0x0 [ 1477.268852][T17237] fuse: Bad value for 'fd' [ 1477.362181][ T1223] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1477.562580][ T1223] usb 6-1: Using ep0 maxpacket: 32 [ 1477.571419][ T1223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1477.610745][ T1223] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1477.742477][ T1223] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1477.751596][ T1223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1477.870951][ T1223] usb 6-1: config 0 descriptor?? [ 1478.353362][ T1223] usbhid 6-1:0.0: can't add hid device: -71 [ 1478.359450][ T1223] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1478.463391][ T1223] usb 6-1: USB disconnect, device number 16 [ 1478.972808][ T30] audit: type=1326 audit(1749761036.877:974): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13258e929 code=0x7ffc0000 [ 1479.212848][ T30] audit: type=1326 audit(1749761036.877:975): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13258e929 code=0x7ffc0000 [ 1479.402245][ T30] audit: type=1326 audit(1749761036.907:976): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7ff13258e929 code=0x7ffc0000 [ 1479.506366][ T30] audit: type=1326 audit(1749761036.907:977): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13258e929 code=0x7ffc0000 [ 1479.641243][ T30] audit: type=1326 audit(1749761036.907:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13258e929 code=0x7ffc0000 [ 1479.794963][ T30] audit: type=1326 audit(1749761037.037:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff13258e929 code=0x7ffc0000 [ 1479.948279][ T30] audit: type=1326 audit(1749761037.037:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13258e929 code=0x7ffc0000 [ 1480.304171][ T30] audit: type=1326 audit(1749761037.037:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff13258e929 code=0x7ffc0000 [ 1480.327236][ T30] audit: type=1326 audit(1749761037.047:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17258 comm="syz.6.2654" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff13258d290 code=0x7ffc0000 [ 1482.245372][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2660'. [ 1482.341226][T17286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2660'. [ 1482.787774][T17292] netlink: 'syz.4.2661': attribute type 1 has an invalid length. [ 1482.833291][T17292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2661'. [ 1483.588099][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 1483.588126][ T30] audit: type=1326 audit(1749761041.497:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17309 comm="syz.5.2664" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff16678e929 code=0x0 [ 1483.900700][T17320] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2666'. [ 1483.980912][T17318] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2666'. [ 1484.572320][ T1213] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 1484.772275][ T1213] usb 5-1: Using ep0 maxpacket: 32 [ 1484.789670][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1484.831904][ T1213] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1484.863775][ T1213] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1484.904966][ T1213] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1484.949082][ T1213] usb 5-1: config 0 descriptor?? [ 1485.172324][ T6212] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1485.196115][ T1223] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1485.283682][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2675'. [ 1485.326775][T17351] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2675'. [ 1485.352316][ T6212] usb 1-1: Using ep0 maxpacket: 32 [ 1485.364781][ T6212] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1485.395983][ T6212] usb 1-1: config 0 has no interface number 0 [ 1485.412354][ T1223] usb 6-1: Using ep0 maxpacket: 8 [ 1485.426940][ T1223] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1485.442657][ T1213] usbhid 5-1:0.0: can't add hid device: -71 [ 1485.448335][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1485.448737][ T1213] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1485.476472][ T6212] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1485.500442][ T1223] usb 6-1: Product: syz [ 1485.516690][ T1223] usb 6-1: Manufacturer: syz [ 1485.521491][ T1223] usb 6-1: SerialNumber: syz [ 1485.522294][ T6212] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1485.559997][ T1213] usb 5-1: USB disconnect, device number 28 [ 1485.590256][ T6212] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1485.678128][ T6212] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1485.688911][ T1223] usb 6-1: config 0 descriptor?? [ 1485.719288][ T6212] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1485.748575][ T6212] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1485.791238][ T6212] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1485.852316][ T6212] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1485.924427][ T6212] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1485.932135][ T1223] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1485.994541][ T6212] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1487.142821][ T6212] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1487.151958][ T6212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1487.211144][ T6212] usb 1-1: Product: syz [ 1487.230382][ T6212] usb 1-1: Manufacturer: syz [ 1487.255626][ T6212] usb 1-1: SerialNumber: syz [ 1487.317193][ T6212] usb 1-1: config 0 descriptor?? [ 1487.360682][T17342] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1487.412715][T17342] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1487.443194][ T6212] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1487.483313][ T6212] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1487.524297][ T6212] scsi host1: microtekX6 [ 1487.726909][ T5951] usb 1-1: USB disconnect, device number 18 [ 1487.732689][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 1488.143504][ T1223] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 1488.678343][ T6212] usb 6-1: USB disconnect, device number 17 [ 1488.872444][ T30] audit: type=1326 audit(1749761046.777:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17388 comm="syz.5.2683" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff16678e929 code=0x0 [ 1489.497310][ T43] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1489.619740][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2688'. [ 1489.630079][T17412] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2688'. [ 1489.676465][ T43] usb 9-1: Using ep0 maxpacket: 8 [ 1489.712561][ T43] usb 9-1: config 0 has an invalid interface number: 46 but max is 0 [ 1489.728358][ T43] usb 9-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 1489.752435][ T43] usb 9-1: config 0 has no interface number 0 [ 1489.762166][ T43] usb 9-1: too many endpoints for config 0 interface 46 altsetting 34: 166, using maximum allowed: 30 [ 1489.801785][ T43] usb 9-1: config 0 interface 46 altsetting 34 has 0 endpoint descriptors, different from the interface descriptor's value: 166 [ 1489.833067][ T43] usb 9-1: config 0 interface 46 has no altsetting 0 [ 1489.884591][ T43] usb 9-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1489.927557][ T43] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1489.974313][ T43] usb 9-1: config 0 descriptor?? [ 1490.206833][ T43] usb 9-1: string descriptor 0 read error: -32 [ 1490.249191][ T43] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1490.312280][ T5903] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1490.332483][ T6212] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1490.482643][ T5903] usb 7-1: Using ep0 maxpacket: 32 [ 1490.503462][ T43] gspca_vc032x: reg_w err -71 [ 1490.507473][ T5903] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1490.508265][ T43] vc032x 9-1:0.46: probe with driver vc032x failed with error -71 [ 1490.523346][ T6212] usb 6-1: config 0 has no interfaces? [ 1490.533810][ T5903] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1490.553443][ T6212] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1490.569564][ T6212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.579307][ T5903] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1490.588047][ T6212] usb 6-1: Product: syz [ 1490.602176][ T5903] usb 7-1: Product: syz [ 1490.606595][ T6212] usb 6-1: Manufacturer: syz [ 1490.614709][ T6212] usb 6-1: SerialNumber: syz [ 1490.626602][ T43] usb 9-1: USB disconnect, device number 37 [ 1490.627446][ T5903] usb 7-1: Manufacturer: syz [ 1490.647687][ T5903] usb 7-1: SerialNumber: syz [ 1490.653710][ T6212] usb 6-1: config 0 descriptor?? [ 1490.685990][ T5903] usb 7-1: config 0 descriptor?? [ 1491.275863][ T5903] gs_usb 7-1:0.0: Couldn't get device config: (err=-121) [ 1491.301129][ T5903] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 1491.632624][ T43] usb 6-1: USB disconnect, device number 18 [ 1491.643952][T17439] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2693'. [ 1493.163394][ T5951] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1493.244217][ T43] usb 7-1: USB disconnect, device number 17 [ 1493.406595][ T5951] usb 9-1: Using ep0 maxpacket: 8 [ 1493.687997][ T5951] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1493.702234][ T5951] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.806568][ T5951] usb 9-1: Product: syz [ 1493.810904][ T5951] usb 9-1: Manufacturer: syz [ 1493.852206][ T5951] usb 9-1: SerialNumber: syz [ 1493.896334][ T5951] usb 9-1: config 0 descriptor?? [ 1494.161431][ T5951] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1494.164529][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1494.176563][ T5903] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1494.184238][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1494.345204][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 1494.386524][ T5903] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1494.421040][ T5903] usb 6-1: config 0 has no interface number 0 [ 1494.481789][ T5903] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1494.543115][ T5903] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1494.612122][ T5903] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1494.659360][ T5903] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1494.752784][ T5903] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1494.806508][ T5903] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1494.855821][ T5903] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1494.899044][ T5903] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1494.947915][ T5903] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1494.988448][ T5903] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1495.067720][ T5903] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1495.089637][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1495.115559][ T5903] usb 6-1: Product: syz [ 1495.141128][ T5903] usb 6-1: Manufacturer: syz [ 1495.170917][ T5903] usb 6-1: SerialNumber: syz [ 1495.214793][ T5903] usb 6-1: config 0 descriptor?? [ 1495.230159][T17463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1495.242563][T17463] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1495.542904][ T5903] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1495.572594][ T5903] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1496.391168][ T5903] scsi host1: microtekX6 [ 1496.464560][ T5903] usb 6-1: USB disconnect, device number 19 [ 1496.472237][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 1496.509674][ T30] audit: type=1326 audit(1749761054.417:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17482 comm="syz.4.2701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3e018e929 code=0x0 [ 1496.562230][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 1496.602252][ T11] microtek usb (rev 0.4.3): error -19 submitting URB [ 1496.906586][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'. [ 1496.932354][T17490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2703'. [ 1497.185564][ T5951] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1497.322533][ T5951] usb 9-1: USB disconnect, device number 38 [ 1497.922272][ T5951] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1498.132227][ T5951] usb 5-1: Using ep0 maxpacket: 16 [ 1498.157939][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1498.202182][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1498.258467][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1498.310365][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1498.361271][ T5951] usb 5-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1498.415903][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.453666][ T5951] usb 5-1: config 0 descriptor?? [ 1498.910454][ T5951] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x0 [ 1498.955816][ T5951] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x0 [ 1499.046972][ T5951] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x0 [ 1499.140976][ T5951] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x0 [ 1499.277029][ T5951] hid-u2fzero 0003:10C4:8ACF.000C: unknown main item tag 0x0 [ 1499.432701][ T5951] hid-u2fzero 0003:10C4:8ACF.000C: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.4-1/input0 [ 1499.511545][ T5951] hid-u2fzero 0003:10C4:8ACF.000C: U2F Zero LED initialised [ 1499.539577][ T5951] hid-u2fzero 0003:10C4:8ACF.000C: U2F Zero RNG initialised [ 1499.639429][ T5951] usb 5-1: USB disconnect, device number 29 [ 1499.889629][T17526] fido_id[17526]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1500.220643][T17535] tc_dump_action: action bad kind [ 1501.163110][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2718'. [ 1501.262262][T17552] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2718'. [ 1501.596029][ T30] audit: type=1326 audit(1749761059.497:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17554 comm="syz.6.2719" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff13258e929 code=0x0 [ 1501.932233][ T5903] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1502.092287][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 1502.139605][ T5903] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1502.206996][ T5903] usb 6-1: config 0 has no interface number 0 [ 1502.256223][ T5903] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1502.312373][ T5903] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1502.359011][ T5903] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1502.399890][ T5903] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1502.449075][ T5903] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1502.482861][ T5903] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1502.536212][ T5903] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1502.601344][ T5903] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1502.647125][ T5903] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1502.684370][ T5903] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1502.833585][ T5903] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1502.906150][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1502.940581][ T5903] usb 6-1: Product: syz [ 1502.960558][ T5903] usb 6-1: Manufacturer: syz [ 1502.970982][ T5903] usb 6-1: SerialNumber: syz [ 1503.347606][ T5903] usb 6-1: config 0 descriptor?? [ 1503.403078][T17557] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1503.410516][T17557] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1503.519359][ T5903] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1503.595011][ T5903] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1503.669838][ T5903] scsi host1: microtekX6 [ 1503.833667][ T5903] usb 6-1: USB disconnect, device number 20 [ 1503.844607][ T92] microtek usb (rev 0.4.3): error -19 submitting URB [ 1503.883743][T17592] tc_dump_action: action bad kind [ 1503.903728][ T92] microtek usb (rev 0.4.3): error -19 submitting URB [ 1504.988565][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'. [ 1504.988618][T17606] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2732'. [ 1508.014863][ T5903] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1508.812196][ T5903] usb 6-1: Using ep0 maxpacket: 32 [ 1509.048854][ T5903] usb 6-1: device descriptor read/all, error -71 [ 1509.362415][ T9913] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1509.551308][ T9913] usb 9-1: device descriptor read/64, error -71 [ 1509.823747][ T9913] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1510.031563][ T9913] usb 9-1: device descriptor read/64, error -71 [ 1510.174346][ T9913] usb usb9-port1: attempt power cycle [ 1510.612211][ T9913] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1510.681904][ T9913] usb 9-1: device descriptor read/8, error -71 [ 1510.932209][ T9913] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1510.994602][ T9913] usb 9-1: device descriptor read/8, error -71 [ 1511.113502][ T9913] usb usb9-port1: unable to enumerate USB device [ 1511.195350][T17648] tc_dump_action: action bad kind [ 1511.704533][ T5951] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1511.841281][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2746'. [ 1511.882242][T17668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2746'. [ 1511.893290][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 1511.919072][ T5951] usb 6-1: config 0 has an invalid interface number: 146 but max is 0 [ 1511.934765][ T5951] usb 6-1: config 0 has no interface number 0 [ 1511.951956][ T5951] usb 6-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1511.972179][ T5951] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1513.963675][ T5951] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1513.975980][ T5951] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1513.986308][ T5951] usb 6-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1513.998042][ T5951] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1514.114187][ T43] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1514.132536][ T5951] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1514.147533][ T5951] usb 6-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1514.159013][ T5951] usb 6-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1514.169511][ T5951] usb 6-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1514.752226][ T43] usb 5-1: Using ep0 maxpacket: 32 [ 1514.818672][ T43] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1514.872558][ T43] usb 5-1: config 0 has no interface number 0 [ 1514.956781][ T5951] usb 6-1: string descriptor 0 read error: -71 [ 1514.993914][ T5951] usb 6-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1515.003312][ T43] usb 5-1: string descriptor 0 read error: -71 [ 1515.009653][ T43] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1515.056912][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.081827][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1515.112834][ T5951] usb 6-1: config 0 descriptor?? [ 1515.130157][T17688] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2752'. [ 1515.133519][ T43] usb 5-1: config 0 descriptor?? [ 1515.152320][ T5951] usb 6-1: can't set config #0, error -71 [ 1515.181371][ T5951] usb 6-1: USB disconnect, device number 23 [ 1515.193205][ T43] usb 5-1: can't set config #0, error -71 [ 1515.324227][ T43] usb 5-1: USB disconnect, device number 30 [ 1516.549328][T17706] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2756'. [ 1516.902522][ T6212] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1517.064874][T17717] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2760'. [ 1517.105833][ T6212] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1517.122796][T17715] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2760'. [ 1517.144188][ T6212] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1517.180999][ T6212] usb 9-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 1517.204614][ T6212] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1517.224984][ T6212] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1517.246957][ T6212] usb 9-1: Product: syz [ 1517.261763][ T6212] usb 9-1: Manufacturer: syz [ 1517.280671][ T6212] usb 9-1: SerialNumber: syz [ 1517.292278][ T8474] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1517.349930][T17722] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2761'. [ 1517.496611][ T8474] usb 1-1: Using ep0 maxpacket: 32 [ 1517.519063][ T8474] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1517.540194][ T6212] usb 9-1: USB disconnect, device number 43 [ 1517.549180][ T8474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1518.588004][ T8474] usb 1-1: Product: syz [ 1519.607001][ T8474] usb 1-1: Manufacturer: syz [ 1519.611691][ T8474] usb 1-1: SerialNumber: syz [ 1519.636059][ T8474] usb 1-1: config 0 descriptor?? [ 1520.509510][ T8474] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=1] err=-71 [ 1520.554174][ T8474] peak_usb 1-1:0.0: unable to read PCAN-USB Pro firmware info (err -71) [ 1520.569844][ T5903] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1520.716973][ T8474] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -71 [ 1520.734650][ T5903] usb 6-1: device descriptor read/64, error -71 [ 1520.791405][ T8474] usb 1-1: USB disconnect, device number 19 [ 1520.962346][ T6212] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1520.993953][ T9913] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1521.003366][ T5903] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1521.152178][ T5903] usb 6-1: device descriptor read/64, error -71 [ 1521.162402][ T6212] usb 7-1: Using ep0 maxpacket: 32 [ 1521.203241][ T9913] usb 9-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1521.221886][ T6212] usb 7-1: config 0 has an invalid interface number: 146 but max is 0 [ 1521.244952][ T9913] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1521.255313][ T6212] usb 7-1: config 0 has no interface number 0 [ 1521.261446][ T6212] usb 7-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1521.287506][ T9913] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1521.299558][ T6212] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1521.311987][ T5903] usb usb6-port1: attempt power cycle [ 1521.334719][ T6212] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1521.346456][ T9913] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1521.369414][ T9913] usb 9-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1521.388420][ T6212] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1521.400633][ T9913] usb 9-1: Product: syz [ 1521.410571][ T9913] usb 9-1: Manufacturer: syz [ 1521.416018][ T6212] usb 7-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1521.438221][ T9913] usb 9-1: SerialNumber: syz [ 1521.452553][ T6212] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1521.464022][ T9913] usb 9-1: config 0 descriptor?? [ 1521.490298][ T6212] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1521.501388][ T9913] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1521.521488][ T6212] usb 7-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1521.558335][ T6212] usb 7-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1521.595276][ T6212] usb 7-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1521.640866][ T6212] usb 7-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1521.668338][ T6212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1521.677095][ T5903] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1521.735116][ T6212] usb 7-1: Product: syz [ 1521.747947][ T5903] usb 6-1: device descriptor read/8, error -71 [ 1521.758865][ T6212] usb 7-1: Manufacturer: syz [ 1521.770642][ T6212] usb 7-1: SerialNumber: syz [ 1521.795896][ T9913] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1521.811707][ T6212] usb 7-1: config 0 descriptor?? [ 1521.840559][T17739] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1521.862632][ T9913] usb 9-1: USB disconnect, device number 44 [ 1521.865173][T17739] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1521.914730][ T6212] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1521.955040][ T6212] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1521.955817][T17625] udevd[17625]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1522.002363][ T5903] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1522.030908][ T6212] scsi host1: microtekX6 [ 1522.036243][ T5903] usb 6-1: device descriptor read/8, error -71 [ 1522.182910][ T5903] usb usb6-port1: unable to enumerate USB device [ 1522.256360][ T5951] usb 7-1: USB disconnect, device number 18 [ 1522.535658][T17779] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2772'. [ 1523.212571][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1523.266134][T17784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2773'. [ 1523.666591][ T30] audit: type=1326 audit(1749761081.557:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17792 comm="syz.4.2779" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3e018e929 code=0x0 [ 1523.733332][T17798] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2778'. [ 1523.952167][ T5903] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1524.132271][ T5903] usb 5-1: Using ep0 maxpacket: 16 [ 1524.166781][ T5903] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1524.197639][ T5903] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1524.244061][ T5903] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1524.268086][ T5903] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1524.304422][ T5903] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1524.342800][ T9913] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1524.353384][ T5903] usb 5-1: config 0 has no interface number 0 [ 1524.381905][ T5903] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1524.429879][ T5903] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1524.479479][ T5903] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1524.525673][ T5903] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1524.584951][ T9913] usb 1-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1524.671034][ T9913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.705923][ T5903] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1524.719438][ T9913] usb 1-1: Product: syz [ 1524.728554][ T5903] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1524.739707][ T9913] usb 1-1: Manufacturer: syz [ 1524.750654][ T9913] usb 1-1: SerialNumber: syz [ 1524.767813][ T5903] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1524.787323][ T5903] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1524.800442][ T9913] usb 1-1: config 0 descriptor?? [ 1524.818705][ T5903] usb 5-1: Product: syz [ 1524.839907][ T5903] usb 5-1: Manufacturer: syz [ 1524.866897][ T5903] usb 5-1: SerialNumber: syz [ 1524.891856][ T5903] usb 5-1: config 0 descriptor?? [ 1524.911730][ T5903] usb 5-1: selecting invalid altsetting 2 [ 1526.041050][ T9913] usb 1-1: f81604_read: reg: 100e failed: -EPIPE [ 1526.053260][ T43] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1526.091539][ T9913] usb 1-1: f81604_read: reg: 200f failed: -EPROTO [ 1526.125803][ T9913] usb 1-1: USB disconnect, device number 20 [ 1526.151616][ T9913] usb 1-1: f81604_read: reg: 100f failed: -ENODEV [ 1526.212956][ T43] usb 9-1: Using ep0 maxpacket: 32 [ 1526.226520][ T43] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.240320][ T9913] usb 1-1: f81604_read: reg: 200f failed: -ENODEV [ 1526.253954][ T43] usb 9-1: config 0 has no interfaces? [ 1526.272435][ T43] usb 9-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1526.291516][ T43] usb 9-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1526.305993][ T43] usb 9-1: Product: syz [ 1526.310215][ T43] usb 9-1: Manufacturer: syz [ 1526.318194][ T43] usb 9-1: SerialNumber: syz [ 1526.341087][ T43] usb 9-1: config 0 descriptor?? [ 1526.594661][ T9913] usb 9-1: USB disconnect, device number 45 [ 1526.714983][T17880] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2789'. [ 1527.042721][ T9913] usb 5-1: USB disconnect, device number 31 [ 1527.072440][ T8474] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 1527.280033][ T8474] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 1527.289347][ T8474] usb 1-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 15616, setting to 64 [ 1527.307165][T17891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2792'. [ 1527.331452][ T8474] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1527.505571][ T8474] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.97 [ 1527.515782][ T8474] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1527.532265][ T8474] usb 1-1: Product: syz [ 1527.536519][ T8474] usb 1-1: Manufacturer: syz [ 1527.541158][ T8474] usb 1-1: SerialNumber: syz [ 1527.591724][T17884] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1528.075849][ T8474] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 21 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1528.125080][ T8474] usb 1-1: USB disconnect, device number 21 [ 1528.151113][ T8474] usblp0: removed [ 1528.922244][ T9913] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1529.002834][T17926] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2802'. [ 1529.115656][ T9913] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1529.167606][ T9913] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1529.202529][ T8474] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1529.232603][ T9913] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1529.294629][ T9913] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1529.332242][ T9913] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1529.382349][ T9913] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1529.403709][ T8474] usb 1-1: Using ep0 maxpacket: 16 [ 1529.408625][T17932] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2804'. [ 1529.416364][ T8474] usb 1-1: config 0 has no interfaces? [ 1529.425690][ T9913] usb 9-1: invalid MIDI out EP 0 [ 1529.449559][ T8474] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1529.470436][ T8474] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.507056][ T8474] usb 1-1: Product: syz [ 1529.539424][ T8474] usb 1-1: Manufacturer: syz [ 1529.575243][ T8474] usb 1-1: SerialNumber: syz [ 1529.613318][ T43] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1529.632978][ T8474] usb 1-1: config 0 descriptor?? [ 1529.871496][T17623] udevd[17623]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1529.961598][ T9913] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1529.984558][ T43] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1530.032746][ T43] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.042396][ T9913] usb 9-1: USB disconnect, device number 46 [ 1530.072672][ T43] usb 6-1: Product: syz [ 1530.076895][ T43] usb 6-1: Manufacturer: syz [ 1530.128614][ T43] usb 6-1: SerialNumber: syz [ 1530.146809][ T43] usb 6-1: config 0 descriptor?? [ 1530.234739][ T1223] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1530.394274][ T1223] usb 5-1: Using ep0 maxpacket: 32 [ 1530.414297][ T1223] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1530.434095][ T1223] usb 5-1: config 0 has no interfaces? [ 1530.443581][ T1223] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1530.462256][ T1223] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1530.479021][ T1223] usb 5-1: Product: syz [ 1530.485920][ T1223] usb 5-1: Manufacturer: syz [ 1530.490990][ T1223] usb 5-1: SerialNumber: syz [ 1530.507031][ T1223] usb 5-1: config 0 descriptor?? [ 1530.622393][ T8474] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1530.762858][ T1223] usb 5-1: USB disconnect, device number 32 [ 1530.796820][ T8474] usb 7-1: config 0 has no interfaces? [ 1530.828751][ T8474] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1530.848905][ T8474] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1530.860723][T17955] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2808'. [ 1530.893494][ T8474] usb 7-1: Product: syz [ 1530.898160][ T8474] usb 7-1: Manufacturer: syz [ 1530.912166][ T8474] usb 7-1: SerialNumber: syz [ 1530.934201][ T8474] usb 7-1: config 0 descriptor?? [ 1531.105510][ T30] audit: type=1326 audit(1749761089.017:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17958 comm="syz.7.2809" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd61ef8e929 code=0x0 [ 1531.195548][ T9913] usb 7-1: USB disconnect, device number 19 [ 1531.415510][ T43] usb 6-1: f81604_read: reg: 100e failed: -EPIPE [ 1531.432864][T17965] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2810'. [ 1531.460558][ T43] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 1531.473638][T17964] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2810'. [ 1531.476872][ T43] usb 6-1: USB disconnect, device number 28 [ 1531.539436][ T43] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1531.639454][T17973] program syz.4.2812 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1531.656256][ T43] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1532.148334][ T9913] usb 1-1: USB disconnect, device number 22 [ 1532.172746][ T1213] usb 7-1: new full-speed USB device number 20 using dummy_hcd [ 1532.330420][T17994] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2819'. [ 1532.360202][ T1213] usb 7-1: config index 0 descriptor too short (expected 31, got 27) [ 1532.381059][ T1213] usb 7-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 15616, setting to 64 [ 1532.432400][T17999] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2818'. [ 1532.452007][ T1213] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1532.502541][ T1213] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.97 [ 1532.513577][ T1213] usb 7-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1532.559373][ T1213] usb 7-1: Product: syz [ 1532.571265][ T1213] usb 7-1: Manufacturer: syz [ 1532.587761][ T1213] usb 7-1: SerialNumber: syz [ 1532.614679][T17982] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1532.722764][T18007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2821'. [ 1532.842197][ T9913] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1533.018188][ T9913] usb 6-1: Using ep0 maxpacket: 32 [ 1533.042713][ T9913] usb 6-1: config 0 interface 0 has no altsetting 0 [ 1533.055373][ T9913] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1533.082275][ T9913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1533.110130][ T9913] usb 6-1: Product: syz [ 1533.124924][ T9913] usb 6-1: Manufacturer: syz [ 1533.159980][ T9913] usb 6-1: SerialNumber: syz [ 1533.189167][ T9913] usb 6-1: config 0 descriptor?? [ 1533.307996][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1533.329414][ T1213] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1533.375989][ T1213] usb 7-1: USB disconnect, device number 20 [ 1533.396043][T18023] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2826'. [ 1533.428225][ T1213] usblp0: removed [ 1533.451835][T18022] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2826'. [ 1533.619004][ T30] audit: type=1326 audit(1749761091.527:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18029 comm="syz.4.2828" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3e018e929 code=0x0 [ 1533.653699][ T9913] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 1533.660836][ T9913] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 1534.262820][ T43] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1534.466558][ T43] usb 9-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1534.475960][ T43] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1534.504802][ T43] usb 9-1: Product: syz [ 1534.512712][ T43] usb 9-1: Manufacturer: syz [ 1534.522945][ T43] usb 9-1: SerialNumber: syz [ 1534.555736][ T43] usb 9-1: config 0 descriptor?? [ 1534.829179][T18065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2836'. [ 1535.100153][T18076] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2837'. [ 1535.697681][ T6212] usb 6-1: USB disconnect, device number 29 [ 1535.808027][ T43] usb 9-1: f81604_read: reg: 100e failed: -EPIPE [ 1535.877218][ T43] usb 9-1: f81604_read: reg: 200f failed: -EPROTO [ 1535.893198][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 1535.923816][T18098] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2841'. [ 1535.930682][ T43] usb 9-1: USB disconnect, device number 47 [ 1536.030060][T18085] syzkaller1: entered promiscuous mode [ 1536.042246][T18085] syzkaller1: entered allmulticast mode [ 1536.096585][ T43] usb 9-1: f81604_read: reg: 100f failed: -ENODEV [ 1536.205282][ T43] usb 9-1: f81604_read: reg: 200f failed: -ENODEV [ 1536.432708][ T30] audit: type=1326 audit(1749761094.347:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18110 comm="syz.6.2844" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff13258e929 code=0x0 [ 1536.722433][ T9913] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1536.842502][ T6212] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1536.893336][ T9913] usb 7-1: Using ep0 maxpacket: 16 [ 1536.934384][ T9913] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 1536.952624][ T9913] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1536.968955][ T9913] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1537.010311][ T6212] usb 9-1: device descriptor read/64, error -71 [ 1537.028550][ T9913] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 1537.053646][ T9913] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1537.077795][ T9913] usb 7-1: config 0 has no interface number 0 [ 1537.099172][ T9913] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1537.112222][ T43] usb 5-1: new full-speed USB device number 33 using dummy_hcd [ 1537.124048][ T9913] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1537.143187][ T9913] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1537.155645][ T9913] usb 7-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1537.169434][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2850'. [ 1537.179468][ T9913] usb 7-1: config 0 interface 125 has no altsetting 0 [ 1537.188832][ T9913] usb 7-1: config 0 interface 125 has no altsetting 2 [ 1537.235092][ T9913] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1537.246024][ T9913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1537.270503][ T6212] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1537.278467][ T9913] usb 7-1: Product: syz [ 1537.284097][ T9913] usb 7-1: Manufacturer: syz [ 1537.297645][ T43] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1537.301561][ T9913] usb 7-1: SerialNumber: syz [ 1537.314973][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1537.335382][ T43] usb 5-1: config 0 descriptor?? [ 1537.363704][ T9913] usb 7-1: config 0 descriptor?? [ 1537.391007][ T9913] usb 7-1: selecting invalid altsetting 2 [ 1537.435635][ T6212] usb 9-1: device descriptor read/64, error -71 [ 1537.484667][T18138] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2852'. [ 1537.712492][ T6212] usb usb9-port1: attempt power cycle [ 1538.062986][ T6212] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1538.140076][ T6212] usb 9-1: device descriptor read/8, error -71 [ 1538.402520][ T6212] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1538.433174][ T6212] usb 9-1: device descriptor read/8, error -71 [ 1538.463354][ T9913] get_1284_register timeout [ 1538.468006][ T9913] uss720 7-1:0.125: probe with driver uss720 failed with error -5 [ 1538.468144][ C0] usb 7-1: async_complete: urb error -104 [ 1538.542715][ T6212] usb usb9-port1: unable to enumerate USB device [ 1539.404259][ T1223] usb 7-1: USB disconnect, device number 21 [ 1539.648302][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2855'. [ 1539.950479][ T8474] usb 5-1: USB disconnect, device number 33 [ 1540.192262][ T1223] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1540.352152][ T1223] usb 6-1: Using ep0 maxpacket: 8 [ 1540.374546][ T1223] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1540.416119][ T5951] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1540.424177][ T1223] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1540.452719][ T1223] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1540.487690][ T1223] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1540.519190][T18193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2864'. [ 1540.538766][ T1223] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1540.616448][ T1223] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1540.652520][ T1223] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.652677][ T5951] usb 1-1: config 0 has no interfaces? [ 1540.725376][ T5951] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1540.767688][ T5951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.827312][ T5951] usb 1-1: Product: syz [ 1540.831939][ T5951] usb 1-1: Manufacturer: syz [ 1540.868909][ T5951] usb 1-1: SerialNumber: syz [ 1540.896376][ T5951] usb 1-1: config 0 descriptor?? [ 1540.912495][ T1223] usb 6-1: usb_control_msg returned -32 [ 1540.921016][ T1223] usbtmc 6-1:16.0: can't read capabilities [ 1542.948928][ T5951] usb 1-1: USB disconnect, device number 23 [ 1543.144758][T18210] usbtmc 6-1:16.0: usb_bulk_msg returned -71 [ 1543.674398][ T1223] usb 6-1: USB disconnect, device number 30 [ 1543.739705][ T30] audit: type=1326 audit(1749761101.647:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18212 comm="syz.7.2868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd61ef8e929 code=0x0 [ 1543.829203][T18216] capability: warning: `syz.4.2870' uses deprecated v2 capabilities in a way that may be insecure [ 1543.896233][T18220] Cannot find add_set index 1 as target [ 1545.287632][T18229] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2869'. [ 1545.477984][T18229] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2869'. [ 1547.797454][T18266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2878'. [ 1553.082278][ T1223] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1553.339063][ T1223] usb 6-1: config 0 has no interfaces? [ 1553.349973][ T1223] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1553.415661][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1553.452349][ T1223] usb 6-1: Product: syz [ 1553.456590][ T1223] usb 6-1: Manufacturer: syz [ 1553.551883][ T1223] usb 6-1: SerialNumber: syz [ 1553.573390][ T1223] usb 6-1: config 0 descriptor?? [ 1553.846855][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2893'. [ 1553.865763][ T6212] usb 6-1: USB disconnect, device number 31 [ 1555.909515][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1555.916443][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1558.582185][ T9913] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 1558.772550][ T6212] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1558.803519][ T9913] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1558.907719][ T9913] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.937758][ T9913] usb 7-1: config 0 descriptor?? [ 1559.018421][ T6212] usb 6-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 1559.028553][ T6212] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1559.070250][ T6212] usb 6-1: Product: syz [ 1559.076466][ T6212] usb 6-1: Manufacturer: syz [ 1559.081387][ T6212] usb 6-1: SerialNumber: syz [ 1559.118269][ T6212] usb 6-1: config 0 descriptor?? [ 1559.168124][ T9913] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1559.187022][ T9913] [drm:udl_init] *ERROR* Selecting channel failed [ 1559.287174][ T9913] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1559.302251][ T9913] [drm] Initialized udl on minor 2 [ 1559.432403][ T9913] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1559.477197][ T9913] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1559.533732][ T1213] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1559.573079][ T9913] usb 7-1: USB disconnect, device number 22 [ 1559.605807][ T1213] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1560.075786][T18393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2911'. [ 1560.357420][ T6212] usb 6-1: f81604_read: reg: 100e failed: -EREMOTEIO [ 1560.563626][ T6212] usb 6-1: f81604_read: reg: 200f failed: -EPROTO [ 1560.634208][ T6212] usb 6-1: USB disconnect, device number 32 [ 1560.726431][ T6212] usb 6-1: f81604_read: reg: 100f failed: -ENODEV [ 1561.202809][ T6212] usb 6-1: f81604_read: reg: 200f failed: -ENODEV [ 1561.512499][T18416] syzkaller1: entered promiscuous mode [ 1561.518469][T18416] syzkaller1: entered allmulticast mode [ 1562.664906][ T6212] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1562.903386][ T6212] usb 7-1: Using ep0 maxpacket: 16 [ 1562.923829][ T6212] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.942381][ T6212] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1562.989835][ T6212] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1563.026576][ T6212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.054521][ T6212] usb 7-1: Product: syz [ 1563.082193][ T6212] usb 7-1: Manufacturer: syz [ 1563.109736][ T6212] usb 7-1: SerialNumber: syz [ 1563.149224][ T6212] usb 7-1: config 0 descriptor?? [ 1563.946849][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2922'. [ 1564.186806][T18452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2925'. [ 1564.302284][ T1223] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1564.392216][ T6212] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1564.502190][ T1223] usb 6-1: Using ep0 maxpacket: 32 [ 1564.537621][ T1223] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1564.582167][ T6212] usb 5-1: Using ep0 maxpacket: 32 [ 1564.615433][ T6212] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 1564.618285][ T1223] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1564.642456][ T6212] usb 5-1: config 0 has no interface number 0 [ 1564.659225][ T6212] usb 5-1: config 0 interface 89 has no altsetting 0 [ 1564.707951][ T6212] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1564.742669][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.750819][ T1223] usb 6-1: Product: syz [ 1564.779329][ T1223] usb 6-1: Manufacturer: syz [ 1564.798363][ T1223] usb 6-1: SerialNumber: syz [ 1564.802121][ T6212] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1564.843396][ T6212] usb 5-1: Product: syz [ 1564.848190][ T1223] usb 6-1: config 0 descriptor?? [ 1564.861689][ T6212] usb 5-1: Manufacturer: syz [ 1564.902763][T18464] af_packet: tpacket_rcv: packet too big, clamped from 18 to 4294967272. macoff=96 [ 1564.916367][ T6212] usb 5-1: SerialNumber: syz [ 1564.982230][ T9913] usb 7-1: USB disconnect, device number 23 [ 1564.994442][ T6212] usb 5-1: config 0 descriptor?? [ 1565.196159][ T6212] usb 6-1: USB disconnect, device number 33 [ 1565.408229][ T9913] usb 5-1: USB disconnect, device number 34 [ 1565.450187][T18477] vlan2: entered promiscuous mode [ 1565.485918][T18477] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1565.523261][T18477] vlan2: entered allmulticast mode [ 1565.531769][T18477] netdevsim netdevsim8 netdevsim0: entered allmulticast mode [ 1565.551095][T18477] team0: Device vlan2 is up. Set it down before adding it as a team port [ 1566.329019][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2938'. [ 1567.162488][ T1223] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 1567.402688][ T1223] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.479856][ T1223] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1567.502746][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1567.542249][ T1223] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1567.694998][ T1223] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1567.855314][ T1223] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1567.875007][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1567.895241][ T1223] usb 1-1: Product: syz [ 1567.925274][ T1223] usb 1-1: Manufacturer: syz [ 1567.936406][ T1223] usb 1-1: SerialNumber: syz [ 1567.978507][ T1223] usb 1-1: config 0 descriptor?? [ 1568.218729][ T1223] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 1568.260259][ T1223] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 1568.428368][ T1223] radio-si470x 1-1:0.0: software version 0, hardware version 0 [ 1568.471196][ T1223] radio-si470x 1-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 1568.586787][ T1223] radio-si470x 1-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 1568.644952][ T1223] radio-si470x 1-1:0.0: submitting int urb failed (-90) [ 1570.360515][ T1223] radio-si470x 1-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 1570.447590][ T1223] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 1570.578257][ T1223] usb 1-1: USB disconnect, device number 24 [ 1571.152455][ T9913] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1571.352329][ T9913] usb 9-1: Using ep0 maxpacket: 32 [ 1571.376294][ T9913] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1571.403609][ T9913] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1571.475108][ T9913] usb 9-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1571.509241][ T9913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1571.546639][ T9913] usb 9-1: Product: syz [ 1571.570734][ T9913] usb 9-1: Manufacturer: syz [ 1571.602893][T18553] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2952'. [ 1571.616455][ T9913] usb 9-1: SerialNumber: syz [ 1571.650542][ T9913] usb 9-1: config 0 descriptor?? [ 1571.978793][ T9913] usb 9-1: USB disconnect, device number 52 [ 1573.892164][ T9913] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1574.162686][ T9913] usb 5-1: Using ep0 maxpacket: 32 [ 1574.208105][ T9913] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1574.281715][ T9913] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1574.342798][ T9913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.381301][ T9913] usb 5-1: Product: syz [ 1574.422497][ T9913] usb 5-1: Manufacturer: syz [ 1574.427181][ T9913] usb 5-1: SerialNumber: syz [ 1574.486925][ T9913] usb 5-1: config 0 descriptor?? [ 1574.929039][ T9913] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 1575.138307][ T9913] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1575.156717][ T9913] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -32 [ 1575.198094][T18588] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2961'. [ 1575.211239][ T9913] usb 5-1: USB disconnect, device number 35 [ 1575.402151][ T6212] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1575.587549][ T6212] usb 9-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1575.616699][ T6212] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.658903][ T6212] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1575.707840][ T6212] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1575.721517][ T6212] usb 9-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1575.750396][ T6212] usb 9-1: Product: syz [ 1575.772222][ T6212] usb 9-1: Manufacturer: syz [ 1575.795672][ T6212] usb 9-1: SerialNumber: syz [ 1575.815162][ T6212] usb 9-1: config 0 descriptor?? [ 1575.822171][ T9913] usb 1-1: new full-speed USB device number 25 using dummy_hcd [ 1575.846963][ T6212] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1575.994533][ T9913] usb 1-1: config index 0 descriptor too short (expected 31, got 27) [ 1576.054544][ T5903] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1576.813332][ T9913] usb 1-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 15616, setting to 64 [ 1576.840951][ T6212] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1576.850096][ T9913] usb 1-1: config 1 interface 0 has no altsetting 0 [ 1576.859527][ T9913] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.97 [ 1576.871369][ T6212] usb 9-1: USB disconnect, device number 53 [ 1576.886268][ T9913] usb 1-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1577.174139][ T9913] usb 1-1: Product: syz [ 1577.178358][ T9913] usb 1-1: Manufacturer: syz [ 1577.212043][ T5903] usb 6-1: config 0 has an invalid interface number: 187 but max is 0 [ 1577.228106][T17625] udevd[17625]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1577.230908][ T5903] usb 6-1: config 0 has no interface number 0 [ 1577.265438][ T9913] usb 1-1: SerialNumber: syz [ 1577.289926][T18591] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1577.318773][ T5903] usb 6-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1577.407946][ T5903] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1577.447710][ T5903] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1577.482499][ T5903] usb 6-1: Product: syz [ 1577.504035][ T5903] usb 6-1: Manufacturer: syz [ 1577.519055][ T5903] usb 6-1: SerialNumber: syz [ 1577.544899][ T5903] usb 6-1: config 0 descriptor?? [ 1577.551509][T18597] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 1578.776816][ T9913] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1578.871113][ T9913] usb 1-1: USB disconnect, device number 25 [ 1578.905806][ T6212] usb 6-1: USB disconnect, device number 34 [ 1578.929657][ T9913] usblp0: removed [ 1579.329580][T18636] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2975'. [ 1579.962307][T18650] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2976'. [ 1580.000268][ T1223] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1580.190511][ T1223] usb 9-1: Using ep0 maxpacket: 32 [ 1580.243944][ T1223] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1580.291201][ T1223] usb 9-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1580.726883][ T1223] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1580.765600][ T1223] usb 9-1: Product: syz [ 1580.790507][ T1223] usb 9-1: Manufacturer: syz [ 1580.797275][ T1223] usb 9-1: SerialNumber: syz [ 1580.855864][ T1223] usb 9-1: config 0 descriptor?? [ 1580.882192][ T5951] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1581.324296][ T1223] gs_usb 9-1:0.0: Configuring for 1 interfaces [ 1581.334525][ T5951] usb 6-1: Using ep0 maxpacket: 32 [ 1581.379623][ T5951] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1581.496711][ T5951] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.557099][ T1223] gs_usb 9-1:0.0: Couldn't get bit timing const for channel 0 (-EPIPE) [ 1582.211644][ T1223] gs_usb 9-1:0.0: probe with driver gs_usb failed with error -32 [ 1582.331587][ T5951] usb 6-1: Product: syz [ 1582.340560][ T5951] usb 6-1: Manufacturer: syz [ 1582.354784][ T5951] usb 6-1: SerialNumber: syz [ 1582.399279][ T5951] usb 6-1: config 0 descriptor?? [ 1582.409070][ T1223] usb 9-1: USB disconnect, device number 54 [ 1582.625076][ T5951] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=1] err=-32 [ 1582.651533][ T5951] peak_usb 6-1:0.0: unable to read PCAN-USB Pro firmware info (err -32) [ 1582.963048][ T5951] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -32 [ 1582.972548][ T1223] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1583.186183][ T1223] usb 9-1: config 0 has too many interfaces: 202, using maximum allowed: 32 [ 1583.230047][ T1223] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.294630][ T1223] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 202 [ 1583.355525][ T1223] usb 9-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1583.409741][ T1223] usb 9-1: New USB device strings: Mfr=33, Product=2, SerialNumber=3 [ 1583.437726][ T1223] usb 9-1: Product: syz [ 1583.466792][ T1223] usb 9-1: Manufacturer: syz [ 1584.620158][ T1223] usb 9-1: SerialNumber: syz [ 1584.643760][ T1223] usb 9-1: config 0 descriptor?? [ 1584.668635][ T1223] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1584.707312][ T9913] usb 6-1: USB disconnect, device number 35 [ 1585.045080][ T1223] snd-usb-audio 9-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 1585.152281][ T1223] usb 9-1: USB disconnect, device number 55 [ 1585.285846][T17625] udevd[17625]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1586.382223][ T9913] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1586.390097][ T6212] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 1586.401372][T18709] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2991'. [ 1586.478660][T18711] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2994'. [ 1586.556943][ T6212] usb 5-1: config index 0 descriptor too short (expected 31, got 27) [ 1586.566354][ T9913] usb 6-1: config 0 has an invalid interface number: 187 but max is 0 [ 1586.582155][ T6212] usb 5-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 15616, setting to 64 [ 1586.622312][ T9913] usb 6-1: config 0 has no interface number 0 [ 1586.643162][ T9913] usb 6-1: config 0 interface 187 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1586.664617][ T6212] usb 5-1: config 1 interface 0 has no altsetting 0 [ 1586.686278][ T6212] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= b.97 [ 1586.696370][ T9913] usb 6-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1586.708062][ T6212] usb 5-1: New USB device strings: Mfr=28, Product=37, SerialNumber=3 [ 1586.716418][ T9913] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1586.756359][ T6212] usb 5-1: Product: syz [ 1586.760699][ T6212] usb 5-1: Manufacturer: syz [ 1586.772221][ T9913] usb 6-1: Product: syz [ 1586.785130][ T9913] usb 6-1: Manufacturer: syz [ 1586.800107][ T6212] usb 5-1: SerialNumber: syz [ 1586.804958][ T9913] usb 6-1: SerialNumber: syz [ 1586.836877][T18702] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1586.853511][ T9913] usb 6-1: config 0 descriptor?? [ 1586.863051][T18718] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2996'. [ 1586.887145][T18704] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1586.925494][T18724] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2996'. [ 1587.685097][ T9913] usb 6-1: USB disconnect, device number 36 [ 1588.516193][ T6212] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 1588.700658][ T6212] usb 5-1: USB disconnect, device number 36 [ 1588.725194][T18738] netlink: 'syz.6.3000': attribute type 1 has an invalid length. [ 1588.730642][ T6212] usblp0: removed [ 1588.991096][T18745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1589.272811][ T1223] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1589.460044][ T1223] usb 9-1: Using ep0 maxpacket: 32 [ 1589.506382][ T1223] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1589.558265][ T1223] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.594943][ T1223] usb 9-1: Product: syz [ 1589.599181][ T1223] usb 9-1: Manufacturer: syz [ 1589.625521][ T1223] usb 9-1: SerialNumber: syz [ 1589.674700][ T1223] usb 9-1: config 0 descriptor?? [ 1590.003522][ T9913] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1590.133790][ T1223] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1590.150618][ T1223] peak_usb 9-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1590.181898][T18767] fuse: Bad value for 'user_id' [ 1590.192249][ T9913] usb 6-1: Using ep0 maxpacket: 8 [ 1590.201292][T18767] fuse: Bad value for 'user_id' [ 1590.231317][ T9913] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1590.261102][ T9913] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1590.291395][ T9913] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1590.312567][ T1223] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -32 [ 1590.322450][ T9913] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1590.362116][ T9913] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1590.433519][ T9913] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1592.069164][ T9913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1592.463261][ T6212] usb 9-1: USB disconnect, device number 56 [ 1592.650648][ T9913] usb 6-1: usb_control_msg returned -32 [ 1592.688299][ T9913] usbtmc 6-1:16.0: can't read capabilities [ 1592.734918][T18776] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3008'. [ 1592.759094][T18777] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3009'. [ 1592.784180][ T9913] usb 6-1: USB disconnect, device number 37 [ 1593.423827][T18792] Cannot find map_set index 0 as target [ 1594.507027][T18795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3014'. [ 1594.656822][T18806] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3014'. [ 1594.927651][T18799] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3016'. [ 1595.032027][T18813] fuse: Bad value for 'user_id' [ 1595.048436][T18813] fuse: Bad value for 'user_id' [ 1596.054506][ T6212] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1597.011160][T18825] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3023'. [ 1597.202610][ T6212] usb 1-1: Using ep0 maxpacket: 32 [ 1597.295369][ T6212] usb 1-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1597.353189][T18830] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3025'. [ 1597.368544][ T6212] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1597.404947][ T6212] usb 1-1: Product: syz [ 1597.455188][ T6212] usb 1-1: Manufacturer: syz [ 1597.497185][ T6212] usb 1-1: SerialNumber: syz [ 1597.535682][ T6212] usb 1-1: config 0 descriptor?? [ 1597.852164][ T9913] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1598.006962][ T6212] peak_usb 1-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1598.255781][ T9913] usb 6-1: Using ep0 maxpacket: 8 [ 1598.273152][ T6212] peak_usb 1-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1598.504215][ T9913] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1598.520561][ T9913] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1598.561675][ T9913] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1598.572943][ T6212] peak_usb 1-1:0.0: probe with driver peak_usb failed with error -32 [ 1598.621191][ T9913] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1598.650299][ T9913] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1598.709641][ T9913] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1598.752179][ T9913] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1599.100555][T18846] Cannot find add_set index 0 as target [ 1599.872325][ T9913] usb 6-1: usb_control_msg returned -32 [ 1599.922331][ T9913] usbtmc 6-1:16.0: can't read capabilities [ 1599.984432][ T9913] usb 6-1: USB disconnect, device number 38 [ 1600.033886][ T1223] usb 1-1: USB disconnect, device number 26 [ 1602.942310][T18873] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3036'. [ 1603.056586][T18879] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3036'. [ 1603.154681][T18872] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3033'. [ 1603.460649][T18886] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3039'. [ 1604.486283][T18891] ptrace attach of "./syz-executor exec"[15509] was attempted by ""[18891] [ 1606.525580][ T1223] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1606.543290][ T6212] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1606.591241][T18906] xt_CT: No such helper "snmp_trap" [ 1606.782013][ T1223] usb 6-1: Using ep0 maxpacket: 32 [ 1606.824317][ T1223] usb 6-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1606.852613][ T1223] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1606.860700][ T1223] usb 6-1: Product: syz [ 1606.879152][ T1223] usb 6-1: Manufacturer: syz [ 1606.885954][ T1223] usb 6-1: SerialNumber: syz [ 1606.897584][ T6212] usb 7-1: Using ep0 maxpacket: 8 [ 1606.932907][ T1223] usb 6-1: config 0 descriptor?? [ 1606.955352][ T6212] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1607.025734][ T6212] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1607.056163][ T6212] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1607.101336][ T6212] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1607.111775][T18913] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1607.112589][T18913] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1607.162168][ T6212] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1607.202162][ T6212] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1607.232289][T18913] bond0: (slave gre0): Error -95 calling set_mac_address [ 1607.240254][ T6212] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1607.311119][T18919] loop0: detected capacity change from 0 to 1024 [ 1607.415864][ T1223] peak_usb 6-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1607.423140][T18919] EXT4-fs: Ignoring removed bh option [ 1607.781846][ T6212] usb 7-1: usb_control_msg returned -32 [ 1607.802933][ T1223] peak_usb 6-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1607.810238][ T6212] usbtmc 7-1:16.0: can't read capabilities [ 1607.831911][T18919] EXT4-fs: Mount option(s) incompatible with ext2 [ 1607.899681][ T6212] usb 7-1: USB disconnect, device number 24 [ 1608.471536][ T1223] peak_usb 6-1:0.0: probe with driver peak_usb failed with error -32 [ 1608.575144][ T6212] usb 6-1: USB disconnect, device number 39 [ 1609.458597][T18938] netlink: 44 bytes leftover after parsing attributes in process `syz.6.3053'. [ 1609.512953][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3053'. [ 1609.812312][ T9913] usb 9-1: new high-speed USB device number 57 using dummy_hcd [ 1609.979117][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3056'. [ 1609.988309][ T9913] usb 9-1: device descriptor read/64, error -71 [ 1611.111344][T18950] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3054'. [ 1611.165408][ T9913] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1612.064067][ T6212] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1612.105358][T18946] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1612.122166][ T9913] usb 9-1: device descriptor read/64, error -71 [ 1612.730076][ T9913] usb usb9-port1: attempt power cycle [ 1612.752114][ T6212] usb 7-1: Using ep0 maxpacket: 32 [ 1612.759784][ T6212] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 1612.768088][ T6212] usb 7-1: config 0 has no interface number 0 [ 1612.782435][ T6212] usb 7-1: config 0 interface 89 has no altsetting 0 [ 1612.813266][ T6212] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 1612.834894][ T6212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1612.872129][ T6212] usb 7-1: Product: syz [ 1612.912103][ T6212] usb 7-1: Manufacturer: syz [ 1612.925822][ T6212] usb 7-1: SerialNumber: syz [ 1612.958661][ T6212] usb 7-1: config 0 descriptor?? [ 1613.102278][ T6212] usb 7-1: can't set config #0, error -71 [ 1613.140810][ T6212] usb 7-1: USB disconnect, device number 25 [ 1614.292927][ T9908] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1614.443043][ T9913] usb usb9-port1: Cannot enable. Maybe the USB cable is bad? [ 1614.547241][ T9908] usb 6-1: Using ep0 maxpacket: 32 [ 1614.603543][ T1223] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1614.868867][T18982] overlayfs: workdir and upperdir must be separate subtrees [ 1614.877504][ T1223] usb 7-1: Using ep0 maxpacket: 16 [ 1615.051127][ T1223] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1615.180178][ T1223] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1615.431028][ T1223] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1615.498602][ T9908] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1615.502549][ T1223] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.508668][ T9908] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1615.529503][ T9908] usb 6-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 1615.538986][ T9908] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.557264][ T9908] usb 6-1: Product: syz [ 1615.561509][ T9908] usb 6-1: Manufacturer: syz [ 1615.583127][ T9908] usb 6-1: SerialNumber: syz [ 1615.587538][ T1223] usb 7-1: Product: syz [ 1615.594370][ T9908] usb 6-1: config 0 descriptor?? [ 1615.628016][ T1223] usb 7-1: Manufacturer: syz [ 1615.641212][ T9908] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input25 [ 1615.651037][ T9913] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1615.661730][ T1223] usb 7-1: SerialNumber: syz [ 1615.673809][ T9908] usbtouchscreen 6-1:0.0: usbtouch_probe - usb_submit_urb failed with result: -90 [ 1615.692308][ T9913] usb 9-1: Using ep0 maxpacket: 32 [ 1615.711047][ T1223] usb 7-1: config 0 descriptor?? [ 1615.726836][ T9913] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 1615.738317][ T9913] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1615.742930][ T1223] em28xx 7-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1615.788453][ T9913] usb 9-1: Product: syz [ 1615.799281][ T9913] usb 9-1: Manufacturer: syz [ 1615.832217][ T9913] usb 9-1: SerialNumber: syz [ 1615.870576][ T9908] usbtouchscreen 6-1:0.0: probe with driver usbtouchscreen failed with error -90 [ 1615.885317][ T9913] usb 9-1: config 0 descriptor?? [ 1615.954888][ T9908] usb 6-1: USB disconnect, device number 40 [ 1616.278258][T18950] bond4 (unregistering): Released all slaves [ 1616.557218][ T9913] peak_usb 9-1:0.0 can0: unable to request usb[type=0 value=0] err=-32 [ 1616.582118][ T9913] peak_usb 9-1:0.0: unable to read PCAN-USB Pro bootloader info (err -32) [ 1616.738161][ T9913] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -32 [ 1616.829944][T19004] netlink: 92 bytes leftover after parsing attributes in process `syz.5.3067'. [ 1617.020219][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 1617.026896][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 1617.100586][T19008] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1617.169574][T19008] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3068'. [ 1617.479620][ T43] usb 7-1: USB disconnect, device number 26 [ 1617.662637][ T1223] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1617.832120][ T1223] usb 1-1: Using ep0 maxpacket: 32 [ 1617.887684][ T1223] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1617.923332][ T1223] usb 1-1: config 0 has no interface number 0 [ 1617.970180][ T1223] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1618.029945][ T1223] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1618.034311][ T9913] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1618.121092][ T1223] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1618.360133][ T43] usb 9-1: USB disconnect, device number 60 [ 1618.405030][ T1223] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1618.641618][ T1223] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1618.730962][ T1223] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1618.790429][ T1223] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1618.876773][ T1223] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1618.922626][ T9913] usb 5-1: device descriptor read/64, error -71 [ 1618.953878][ T1223] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1618.999388][ T1223] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1619.277573][ T1223] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1619.308816][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.759558][ T1223] usb 1-1: Product: syz [ 1619.788851][ T1223] usb 1-1: Manufacturer: syz [ 1619.828282][ T1223] usb 1-1: SerialNumber: syz [ 1619.862865][ T1223] usb 1-1: config 0 descriptor?? [ 1619.899584][T19019] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1619.960983][T19019] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1620.022132][ T9913] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1620.064240][ T1223] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1620.112095][ T1223] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1620.174493][ T1223] scsi host1: microtekX6 [ 1620.183860][ T9913] usb 5-1: device descriptor read/64, error -71 [ 1620.409406][ T9913] usb usb5-port1: attempt power cycle [ 1620.655728][ T9908] usb 1-1: USB disconnect, device number 27 [ 1620.686374][T19053] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1620.734984][T19056] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3082'. [ 1620.952440][ T6212] usb 7-1: new full-speed USB device number 27 using dummy_hcd [ 1621.144097][ T9913] usb usb5-port1: Cannot enable. Maybe the USB cable is bad? [ 1621.177260][ T6212] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1621.187629][ T6212] usb 7-1: not running at top speed; connect to a high speed hub [ 1621.227280][ T6212] usb 7-1: config 129 has an invalid interface number: 135 but max is 0 [ 1621.252114][ T6212] usb 7-1: config 129 has an invalid interface number: 5 but max is 0 [ 1621.266284][ T6212] usb 7-1: config 129 descriptor has 1 excess byte, ignoring [ 1621.302188][ T6212] usb 7-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1621.315752][ T9913] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1621.332847][ T6212] usb 7-1: config 129 has no interface number 0 [ 1621.383629][ T6212] usb 7-1: config 129 has no interface number 1 [ 1621.391081][ T9913] usb 5-1: Using ep0 maxpacket: 16 [ 1621.417627][ T6212] usb 7-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 1621.441285][ T6212] usb 7-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1621.453401][ T9913] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1621.466097][ T9913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1621.478170][ T6212] usb 7-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1621.479039][ T9913] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1621.502952][ T6212] usb 7-1: config 129 interface 135 has no altsetting 0 [ 1621.511321][ T9913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.529882][ T6212] usb 7-1: config 129 interface 5 has no altsetting 0 [ 1621.536868][ T9913] usb 5-1: Product: syz [ 1621.542643][ T9913] usb 5-1: Manufacturer: syz [ 1621.551929][ T6212] usb 7-1: string descriptor 0 read error: -22 [ 1621.558525][ T6212] usb 7-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 1621.571286][ T9913] usb 5-1: SerialNumber: syz [ 1621.580434][ T6212] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.659609][ T9913] usb 5-1: config 0 descriptor?? [ 1621.688087][ T9913] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1621.765169][ T6212] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1621.784965][ T6212] usb 7-1: MIDIStreaming interface descriptor not found [ 1622.100883][T19056] bond5 (unregistering): Released all slaves [ 1622.127097][ T6212] usb 7-1: USB disconnect, device number 27 [ 1623.511303][T19084] syzkaller1: entered promiscuous mode [ 1623.517101][T19084] syzkaller1: entered allmulticast mode [ 1624.380548][ T6212] usb 5-1: USB disconnect, device number 40 [ 1624.469616][T19092] netlink: 'syz.6.3091': attribute type 1 has an invalid length. [ 1624.689081][T19092] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1625.212411][ T6212] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1625.342772][ T6212] usb 9-1: device descriptor read/64, error -71 [ 1625.466676][T19123] overlayfs: failed to resolve './file0': -2 [ 1625.622191][ T6212] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1625.722182][ T9913] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1625.802160][ T6212] usb 9-1: device descriptor read/64, error -71 [ 1625.912141][ T9913] usb 7-1: Using ep0 maxpacket: 32 [ 1625.922953][ T6212] usb usb9-port1: attempt power cycle [ 1625.962342][ T9913] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1625.984793][ T9913] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 1626.012692][ T9913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1626.041285][ T9913] usb 7-1: Product: syz [ 1626.051609][ T9913] usb 7-1: Manufacturer: syz [ 1626.061543][ T9913] usb 7-1: SerialNumber: syz [ 1626.114196][ T9913] usb 7-1: config 0 descriptor?? [ 1626.272698][T19129] loop0: detected capacity change from 0 to 8192 [ 1626.333028][ T6212] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1626.357790][T19070] loop0: p1 p2 p4 [ 1626.369148][T19070] loop0: p1 size 108920841 extends beyond EOD, truncated [ 1626.389192][ T6212] usb 9-1: device descriptor read/8, error -71 [ 1626.538273][ T9913] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 1626.647679][T19070] loop0: p2 start 861536256 is beyond EOD, truncated [ 1626.654977][T19070] loop0: p4 size 65536 extends beyond EOD, truncated [ 1626.702381][ T6212] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1626.753410][ T9913] gs_usb 7-1:0.0: Couldn't get bit timing const for channel 0 (-EREMOTEIO) [ 1626.821063][ T6212] usb 9-1: device descriptor read/8, error -71 [ 1626.839320][ T9913] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -121 [ 1627.098678][ T6212] usb usb9-port1: unable to enumerate USB device [ 1627.227525][ T9913] usb 7-1: USB disconnect, device number 28 [ 1627.808268][T19070] udevd[19070]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 1627.827196][T17625] udevd[17625]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 1628.969190][T19165] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1629.387214][T19172] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3113'. [ 1630.680862][T19183] overlayfs: failed to resolve './file0': -2 [ 1630.696067][ T30] audit: type=1326 audit(1749761188.608:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19180 comm="syz.4.3116" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb3e018e929 code=0x0 [ 1630.982202][ T43] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1631.158986][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 1631.166537][ T43] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1631.195776][ T43] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1631.207924][ T43] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1631.239556][ T43] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1631.268558][ T43] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1631.296405][ T43] usb 5-1: config 0 has no interface number 0 [ 1631.312244][ T43] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1631.341243][ T30] audit: type=1326 audit(1749761189.228:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19198 comm="syz.6.3119" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff13258e929 code=0x0 [ 1631.387109][ T43] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1631.409512][ T43] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1631.430084][ T43] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1631.460890][ T43] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1631.468506][ T43] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1631.478610][ T43] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1631.491133][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1631.499571][ T43] usb 5-1: Product: syz [ 1631.504158][ T43] usb 5-1: Manufacturer: syz [ 1631.508869][ T43] usb 5-1: SerialNumber: syz [ 1631.541560][ T43] usb 5-1: config 0 descriptor?? [ 1631.570528][ T43] usb 5-1: selecting invalid altsetting 2 [ 1632.312316][ T1223] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 1632.432315][T19222] netlink: 'syz.5.3124': attribute type 1 has an invalid length. [ 1632.440350][T19222] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3124'. [ 1633.062132][ T1223] usb 1-1: Using ep0 maxpacket: 32 [ 1633.070525][ T1223] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 1633.113459][ T1223] usb 1-1: config 0 has no interface number 0 [ 1633.119660][ T1223] usb 1-1: config 0 interface 146 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1633.182120][ T1223] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 1633.240190][ T1223] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 1633.300481][ T1223] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 1633.380092][ T1223] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xF2, changing to 0x82 [ 1633.432659][ T1223] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1633.467102][ T1223] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1633.489278][ T1223] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid maxpacket 19968, setting to 1024 [ 1633.532246][ T1223] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1633.554489][ T1223] usb 1-1: config 0 interface 146 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 1633.582110][ T5951] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1633.607965][ T1223] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 1633.658114][ T1223] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.674375][ T1223] usb 1-1: Product: syz [ 1633.678593][ T1223] usb 1-1: Manufacturer: syz [ 1633.708583][ T1223] usb 1-1: SerialNumber: syz [ 1633.725527][ T1223] usb 1-1: config 0 descriptor?? [ 1633.731447][T19213] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1633.732251][ T5951] usb 7-1: Using ep0 maxpacket: 16 [ 1633.761067][T19213] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 1633.761503][ T5951] usb 7-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1633.824118][ T1223] microtek usb (rev 0.4.3): will this work? Response EP is not usually 3 [ 1633.842131][ T5951] usb 7-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 1633.862131][ T1223] microtek usb (rev 0.4.3): will this work? Image data EP is not usually 2 [ 1633.879260][ T5951] usb 7-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1633.904984][ T5951] usb 7-1: config 1 interface 0 has no altsetting 0 [ 1633.922416][ T1223] scsi host1: microtekX6 [ 1633.946779][ T5951] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 1633.972077][ T5951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1633.980155][ T5951] usb 7-1: Product: syz [ 1634.002500][ T5951] usb 7-1: Manufacturer: syz [ 1634.007180][ T5951] usb 7-1: SerialNumber: syz [ 1634.140565][ T8474] usb 1-1: USB disconnect, device number 28 [ 1634.165306][ T1223] usb 5-1: USB disconnect, device number 41 [ 1634.233141][T19244] overlayfs: failed to resolve './file0': -2 [ 1634.361596][ T5951] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 29 if 0 alt 255 proto 1 vid 0x0525 pid 0xA4A8 [ 1634.676524][ T1223] usb 7-1: USB disconnect, device number 29 [ 1634.867995][T19228] usblp0: removed [ 1636.283199][ T30] audit: type=1326 audit(1749761194.198:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19269 comm="syz.5.3137" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff16678e929 code=0x0 [ 1637.892658][T19294] Device name cannot be null; rc = [-22] [ 1637.900303][T19294] ieee802154 phy1 wpan1: encryption failed: -22 [ 1638.298985][T19293] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3141'. [ 1639.212543][ T9908] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 1639.409233][ T9908] usb 1-1: config 0 has an invalid interface number: 187 but max is 0 [ 1639.427823][ T9908] usb 1-1: config 0 has no interface number 0 [ 1639.469348][ T9908] usb 1-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=22.4e [ 1639.494292][ T9908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1639.548091][ T9908] usb 1-1: Product: syz [ 1639.567940][ T9908] usb 1-1: Manufacturer: syz [ 1639.588324][ T9908] usb 1-1: SerialNumber: syz [ 1639.687204][T19317] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1639.711394][ T8474] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1640.014410][ T8474] usb 6-1: Using ep0 maxpacket: 8 [ 1640.184157][ T8474] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1640.284075][ T8474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.401061][ T8474] usb 6-1: Product: syz [ 1640.448358][ T8474] usb 6-1: Manufacturer: syz [ 1640.522901][ T8474] usb 6-1: SerialNumber: syz [ 1640.662116][ T9908] usb 1-1: config 0 descriptor?? [ 1640.672911][ T8474] usb 6-1: config 0 descriptor?? [ 1640.681633][ T9908] peak_usb 1-1:0.187 can0: sending cmd f=0x6 n=0x1 failure: -22 [ 1640.689396][ T9908] peak_usb 1-1:0.187: unable to read PCAN-USB serial number (err -22) [ 1640.942592][ T9908] peak_usb 1-1:0.187: probe with driver peak_usb failed with error -22 [ 1640.987933][ T8474] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1641.003327][ T9908] usb 1-1: USB disconnect, device number 29 [ 1641.531527][ T30] audit: type=1326 audit(1749761199.438:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19331 comm="syz.6.3155" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff13258e929 code=0x0 [ 1642.383641][T19343] ceph: No source [ 1642.389167][T19343] kAFS: unable to lookup cell '\/' [ 1642.843613][T19345] lo speed is unknown, defaulting to 1000 [ 1642.850608][T19345] lo speed is unknown, defaulting to 1000 [ 1642.872298][T19345] lo speed is unknown, defaulting to 1000 [ 1642.939565][T19345] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1643.081453][T19345] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1643.601450][ T8474] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1643.623037][ T8474] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1643.630944][ T8474] usb 6-1: media controller created [ 1643.670808][ T8474] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1643.824058][T19345] lo speed is unknown, defaulting to 1000 [ 1643.832253][T19345] lo speed is unknown, defaulting to 1000 [ 1643.840063][T19345] lo speed is unknown, defaulting to 1000 [ 1643.848582][T19345] lo speed is unknown, defaulting to 1000 [ 1643.856447][T19345] lo speed is unknown, defaulting to 1000 [ 1643.864152][T19345] lo speed is unknown, defaulting to 1000 [ 1643.872245][T19345] lo speed is unknown, defaulting to 1000 [ 1644.979273][T19364] netlink: 'syz.8.3163': attribute type 1 has an invalid length. [ 1644.989112][ T8474] i2c i2c-1: Added multiplexed i2c bus 2 [ 1645.023602][ T8474] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1645.092640][T19364] netlink: 224 bytes leftover after parsing attributes in process `syz.8.3163'. [ 1645.168629][ T8474] usb 6-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1645.386891][ T8474] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1646.688502][T19379] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3166'. [ 1646.744769][T19376] lo speed is unknown, defaulting to 1000 [ 1646.832590][ T8474] DVB: Unable to find symbol r820t_attach() [ 1647.050354][T19373] lo speed is unknown, defaulting to 1000 [ 1647.979207][ T8474] usb 6-1: USB disconnect, device number 41 [ 1648.554280][ T8474] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1648.727608][T19404] bond0: (slave gre0): The slave device specified does not support setting the MAC address [ 1648.762398][ T8474] usb 6-1: device descriptor read/64, error -71 [ 1649.114931][T19404] bond0: (slave gre0): Error -95 calling set_mac_address [ 1649.232225][ T8474] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1649.822153][ T5923] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1650.009731][ T5923] usb 5-1: Using ep0 maxpacket: 8 [ 1650.042379][ T5923] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1650.102403][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.190358][ T5923] usb 5-1: Product: syz [ 1650.207594][ T5923] usb 5-1: Manufacturer: syz [ 1650.237988][ T5923] usb 5-1: SerialNumber: syz [ 1650.275997][ T5923] usb 5-1: config 0 descriptor?? [ 1650.527234][ T5923] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1652.213437][T19444] syzkaller1: entered promiscuous mode [ 1652.219062][ T8474] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1652.274781][T19444] syzkaller1: entered allmulticast mode [ 1652.462566][ T8474] usb 6-1: Using ep0 maxpacket: 16 [ 1652.474350][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1652.528992][ T5923] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1652.542331][ T5923] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1652.557372][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.588042][ T5923] usb 5-1: media controller created [ 1652.618403][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 1652.652513][ T8474] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1652.671390][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1652.694317][ T8474] usb 6-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 1652.747338][ T8474] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.785931][ T8474] usb 6-1: config 0 descriptor?? [ 1653.070760][ T5923] i2c i2c-1: Added multiplexed i2c bus 2 [ 1653.117329][T19460] lo speed is unknown, defaulting to 1000 [ 1653.117392][ T5923] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1653.171634][ T5923] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1653.218650][ T5923] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1653.239657][ T8474] usbhid 6-1:0.0: can't add hid device: -71 [ 1653.460464][ T8474] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1653.479759][ T8474] usb 6-1: USB disconnect, device number 44 [ 1653.899109][T19466] loop0: detected capacity change from 0 to 40427 [ 1653.973072][T19466] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1653.981330][T19466] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1654.528752][T19466] F2FS-fs (loop0): invalid crc value [ 1655.485689][ T5923] DVB: Unable to find symbol r820t_attach() [ 1655.496441][T19466] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1655.503742][T19466] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1656.698998][ T5923] usb 5-1: USB disconnect, device number 42 [ 1657.052307][ T8474] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 1657.098107][ T5923] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1657.260076][ T8474] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1657.272944][ T5923] usb 5-1: device descriptor read/64, error -71 [ 1657.310231][ T8474] usb 6-1: not running at top speed; connect to a high speed hub [ 1657.343035][ T8474] usb 6-1: config 219 has an invalid interface number: 14 but max is 0 [ 1657.357167][ T8474] usb 6-1: config 219 has no interface number 0 [ 1657.396892][ T8474] usb 6-1: config 219 interface 14 has no altsetting 0 [ 1657.427963][ T8474] usb 6-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=34.d6 [ 1657.466253][ T8474] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1657.503914][ T8474] usb 6-1: Product: syz [ 1657.519288][ T8474] usb 6-1: Manufacturer: syz [ 1657.532161][ T8474] usb 6-1: SerialNumber: syz [ 1657.558146][ T5923] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1657.742341][ T5923] usb 5-1: device descriptor read/64, error -71 [ 1657.833314][ T8474] usb 6-1: USB disconnect, device number 45 [ 1657.855602][ T5923] usb usb5-port1: attempt power cycle [ 1658.237602][ T5923] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1658.287857][ T5923] usb 5-1: device descriptor read/8, error -71 [ 1658.572160][ T5923] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 1658.603138][ T5923] usb 5-1: device descriptor read/8, error -71 [ 1658.723027][ T5923] usb usb5-port1: unable to enumerate USB device [ 1659.795549][T19525] syzkaller1: entered promiscuous mode [ 1659.818416][T19525] syzkaller1: entered allmulticast mode [ 1660.215687][T19531] loop0: detected capacity change from 0 to 32768 [ 1660.364468][T19531] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names [ 1660.364468][T19531] allowing incompatible features above 0.0: (unknown version) [ 1660.364468][T19531] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 1660.402785][T19531] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 1660.411053][T19531] bcachefs (loop0): initializing new filesystem [ 1660.427306][T19531] bcachefs (loop0): going read-write [ 1660.464620][T19536] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3205'. [ 1660.575378][T19545] ODEBUG: object ffffc9000adb7a98 is on stack ffffc9000adb0000, but NOT annotated. [ 1660.576844][T19545] [ 1660.576854][T19545] ====================================================== [ 1660.576864][T19545] WARNING: possible circular locking dependency detected [ 1660.576875][T19545] 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 Not tainted [ 1660.576891][T19545] ------------------------------------------------------ [ 1660.576901][T19545] bch-copygc/loop/19545 is trying to acquire lock: [ 1660.576915][T19545] ffffffff8e4d1dc0 (console_owner){..-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 1660.576983][T19545] [ 1660.576983][T19545] but task is already holding lock: [ 1660.576992][T19545] ffffffff9af8a1a8 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 1660.577062][T19545] [ 1660.577062][T19545] which lock already depends on the new lock. [ 1660.577062][T19545] [ 1660.577071][T19545] [ 1660.577071][T19545] the existing dependency chain (in reverse order) is: [ 1660.577082][T19545] [ 1660.577082][T19545] -> #4 (&obj_hash[i].lock){-.-.}-{2:2}: [ 1660.577117][T19545] _raw_spin_lock_irqsave+0x3a/0x60 [ 1660.577157][T19545] debug_object_activate+0x14c/0x4c0 [ 1660.577185][T19545] insert_work+0x2e/0x230 [ 1660.577218][T19545] __queue_work+0x97e/0x10f0 [ 1660.577259][T19545] queue_work_on+0x15f/0x1f0 [ 1660.577294][T19545] start_poll_synchronize_rcu_expedited+0x113/0x190 [ 1660.577345][T19545] rcu_init+0xe95/0x1630 [ 1660.577383][T19545] start_kernel+0x1df/0x4d0 [ 1660.577415][T19545] x86_64_start_reservations+0x18/0x30 [ 1660.577450][T19545] x86_64_start_kernel+0x130/0x190 [ 1660.577484][T19545] common_startup_64+0x13e/0x148 [ 1660.577528][T19545] [ 1660.577528][T19545] -> #3 (&pool->lock){-.-.}-{2:2}: [ 1660.577564][T19545] _raw_spin_lock+0x2e/0x40 [ 1660.577600][T19545] __queue_work+0x26b/0x10f0 [ 1660.577625][T19545] queue_work_on+0x15f/0x1f0 [ 1660.577650][T19545] rpm_suspend+0xeba/0x11d0 [ 1660.577690][T19545] rpm_idle+0x5b4/0x730 [ 1660.577729][T19545] __pm_runtime_idle+0xba/0x1a0 [ 1660.577769][T19545] __device_attach+0x37e/0x4b0 [ 1660.577810][T19545] bus_probe_device+0x17f/0x1c0 [ 1660.577845][T19545] device_add+0x1148/0x1a70 [ 1660.577871][T19545] serial_base_port_add+0x357/0x4b0 [ 1660.577900][T19545] serial_core_register_port+0x13c/0x2570 [ 1660.577927][T19545] serial8250_register_8250_port+0x159b/0x23c0 [ 1660.577963][T19545] serial_pnp_probe+0x431/0x910 [ 1660.578002][T19545] pnp_device_probe+0x2a8/0x4d0 [ 1660.578030][T19545] really_probe+0x241/0xa90 [ 1660.578069][T19545] __driver_probe_device+0x1de/0x440 [ 1660.578109][T19545] driver_probe_device+0x4c/0x1b0 [ 1660.578149][T19545] __driver_attach+0x283/0x580 [ 1660.578189][T19545] bus_for_each_dev+0x13e/0x1d0 [ 1660.578221][T19545] bus_add_driver+0x2e9/0x690 [ 1660.578257][T19545] driver_register+0x15c/0x4b0 [ 1660.578284][T19545] serial8250_init+0xc9/0x1e0 [ 1660.578330][T19545] do_one_initcall+0x123/0x6e0 [ 1660.578364][T19545] kernel_init_freeable+0x5c2/0x900 [ 1660.578412][T19545] kernel_init+0x1c/0x2b0 [ 1660.578446][T19545] ret_from_fork+0x5d7/0x6f0 [ 1660.578484][T19545] ret_from_fork_asm+0x1a/0x30 [ 1660.578512][T19545] [ 1660.578512][T19545] -> #2 (&dev->power.lock){-...}-{3:3}: [ 1660.578547][T19545] _raw_spin_lock_irqsave+0x3a/0x60 [ 1660.578586][T19545] __pm_runtime_resume+0xa9/0x170 [ 1660.578628][T19545] __uart_start+0x1b0/0x4c0 [ 1660.578662][T19545] uart_write+0x218/0xb30 [ 1660.578684][T19545] n_tty_write+0x412/0x1160 [ 1660.578713][T19545] file_tty_write.constprop.0+0x504/0x9b0 [ 1660.578756][T19545] redirected_tty_write+0xd4/0x150 [ 1660.578820][T19545] vfs_write+0x6c7/0x1150 [ 1660.578847][T19545] ksys_write+0x12a/0x250 [ 1660.578873][T19545] do_syscall_64+0xcd/0x4c0 [ 1660.578897][T19545] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1660.578925][T19545] [ 1660.578925][T19545] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 1660.578960][T19545] _raw_spin_lock_irqsave+0x3a/0x60 [ 1660.579002][T19545] serial8250_console_write+0x181/0x1890 [ 1660.579034][T19545] console_flush_all+0x801/0xc60 [ 1660.579064][T19545] console_unlock+0xd8/0x210 [ 1660.579094][T19545] vprintk_emit+0x418/0x6d0 [ 1660.579124][T19545] _printk+0xc7/0x100 [ 1660.579165][T19545] register_console+0xc2d/0x11b0 [ 1660.579198][T19545] univ8250_console_init+0x5f/0x90 [ 1660.579232][T19545] console_init+0x14f/0x680 [ 1660.579267][T19545] start_kernel+0x29f/0x4d0 [ 1660.579299][T19545] x86_64_start_reservations+0x18/0x30 [ 1660.579334][T19545] x86_64_start_kernel+0x130/0x190 [ 1660.579369][T19545] common_startup_64+0x13e/0x148 [ 1660.579426][T19545] [ 1660.579426][T19545] -> #0 (console_owner){..-.}-{0:0}: [ 1660.579474][T19545] __lock_acquire+0x126f/0x1c90 [ 1660.579527][T19545] lock_acquire+0x179/0x350 [ 1660.579567][T19545] console_lock_spinning_enable+0xb0/0xd0 [ 1660.579598][T19545] console_flush_all+0x7aa/0xc60 [ 1660.579628][T19545] console_unlock+0xd8/0x210 [ 1660.579657][T19545] vprintk_emit+0x418/0x6d0 [ 1660.579688][T19545] _printk+0xc7/0x100 [ 1660.579727][T19545] lookup_object_or_alloc.part.0+0x3d7/0x590 [ 1660.579762][T19545] __debug_object_init+0x2a9/0x3d0 [ 1660.579790][T19545] __init_work+0x4c/0x60 [ 1660.579827][T19545] rhashtable_init_noprof+0x49f/0x7e0 [ 1660.579865][T19545] bch2_copygc_thread+0xf6/0xdd0 [ 1660.579901][T19545] kthread+0x3c5/0x780 [ 1660.579943][T19545] ret_from_fork+0x5d7/0x6f0 [ 1660.579981][T19545] ret_from_fork_asm+0x1a/0x30 [ 1660.580013][T19545] [ 1660.580013][T19545] other info that might help us debug this: [ 1660.580013][T19545] [ 1660.580022][T19545] Chain exists of: [ 1660.580022][T19545] console_owner --> &pool->lock --> &obj_hash[i].lock [ 1660.580022][T19545] [ 1660.580062][T19545] Possible unsafe locking scenario: [ 1660.580062][T19545] [ 1660.580071][T19545] CPU0 CPU1 [ 1660.580079][T19545] ---- ---- [ 1660.580086][T19545] lock(&obj_hash[i].lock); [ 1660.580103][T19545] lock(&pool->lock); [ 1660.580122][T19545] lock(&obj_hash[i].lock); [ 1660.580142][T19545] lock(console_owner); [ 1660.580159][T19545] [ 1660.580159][T19545] *** DEADLOCK *** [ 1660.580159][T19545] [ 1660.580166][T19545] 3 locks held by bch-copygc/loop/19545: [ 1660.580182][T19545] #0: ffffffff9af8a1a8 (&obj_hash[i].lock){-.-.}-{2:2}, at: __debug_object_init+0xec/0x3d0 [ 1660.580248][T19545] #1: ffffffff8e5b2200 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 1660.580324][T19545] #2: ffffffff8e5b2270 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 1660.580390][T19545] [ 1660.580390][T19545] stack backtrace: [ 1660.580402][T19545] CPU: 0 UID: 0 PID: 19545 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1660.580438][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1660.580454][T19545] Call Trace: [ 1660.580463][T19545] [ 1660.580475][T19545] dump_stack_lvl+0x116/0x1f0 [ 1660.580538][T19545] print_circular_bug+0x275/0x350 [ 1660.580590][T19545] check_noncircular+0x14c/0x170 [ 1660.580637][T19545] __lock_acquire+0x126f/0x1c90 [ 1660.580687][T19545] lock_acquire+0x179/0x350 [ 1660.580729][T19545] ? console_lock_spinning_enable+0x9f/0xd0 [ 1660.580762][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.580801][T19545] console_lock_spinning_enable+0xb0/0xd0 [ 1660.580833][T19545] ? console_lock_spinning_enable+0x9f/0xd0 [ 1660.580870][T19545] console_flush_all+0x7aa/0xc60 [ 1660.580920][T19545] ? __pfx_console_flush_all+0x10/0x10 [ 1660.580958][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.580992][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.581032][T19545] ? is_printk_cpu_sync_owner+0x32/0x40 [ 1660.581073][T19545] console_unlock+0xd8/0x210 [ 1660.581104][T19545] ? __pfx_console_unlock+0x10/0x10 [ 1660.581135][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.581168][T19545] ? do_raw_spin_unlock+0x100/0x230 [ 1660.581199][T19545] ? _printk+0xc7/0x100 [ 1660.581241][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.581276][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.581311][T19545] vprintk_emit+0x418/0x6d0 [ 1660.581346][T19545] ? __pfx_vprintk_emit+0x10/0x10 [ 1660.581382][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.581419][T19545] _printk+0xc7/0x100 [ 1660.581461][T19545] ? __pfx__printk+0x10/0x10 [ 1660.581506][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.581540][T19545] ? do_raw_spin_lock+0x12c/0x2b0 [ 1660.581569][T19545] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1660.581612][T19545] lookup_object_or_alloc.part.0+0x3d7/0x590 [ 1660.581661][T19545] __debug_object_init+0x2a9/0x3d0 [ 1660.581690][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.581726][T19545] ? __pfx___debug_object_init+0x10/0x10 [ 1660.581766][T19545] __init_work+0x4c/0x60 [ 1660.581806][T19545] rhashtable_init_noprof+0x49f/0x7e0 [ 1660.581848][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1660.581886][T19545] bch2_copygc_thread+0xf6/0xdd0 [ 1660.581927][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1660.581974][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.582018][T19545] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 1660.582088][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.582122][T19545] ? rcu_is_watching+0x12/0xc0 [ 1660.582155][T19545] ? finish_task_switch.isra.0+0x221/0xc10 [ 1660.582190][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.582224][T19545] ? lockdep_hardirqs_on+0x7c/0x110 [ 1660.582269][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.582302][T19545] ? finish_task_switch.isra.0+0x221/0xc10 [ 1660.582361][T19545] ? rcu_is_watching+0x12/0xc0 [ 1660.582394][T19545] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1660.582435][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.582469][T19545] ? lockdep_hardirqs_on+0x7c/0x110 [ 1660.582512][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.582546][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.582580][T19545] ? __kthread_parkme+0x19e/0x250 [ 1660.582619][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1660.582658][T19545] kthread+0x3c5/0x780 [ 1660.582714][T19545] ? __pfx_kthread+0x10/0x10 [ 1660.582770][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1660.582805][T19545] ? rcu_is_watching+0x12/0xc0 [ 1660.582838][T19545] ? __pfx_kthread+0x10/0x10 [ 1660.582883][T19545] ret_from_fork+0x5d7/0x6f0 [ 1660.582923][T19545] ? __pfx_kthread+0x10/0x10 [ 1660.582967][T19545] ret_from_fork_asm+0x1a/0x30 [ 1660.583011][T19545] [ 1661.597696][T19545] ------------[ cut here ]------------ [ 1661.603150][T19545] WARNING: CPU: 0 PID: 19545 at lib/debugobjects.c:655 lookup_object_or_alloc.part.0+0x2b1/0x590 [ 1661.613688][T19545] Modules linked in: [ 1661.617594][T19545] CPU: 0 UID: 0 PID: 19545 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1661.630103][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1661.640168][T19545] RIP: 0010:lookup_object_or_alloc.part.0+0x2b1/0x590 [ 1661.646955][T19545] Code: 0e 48 8d 7d 20 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 58 02 00 00 48 8b 55 20 4c 89 e6 48 c7 c7 60 67 15 8c e8 00 d9 bb fc 90 <0f> 0b 90 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 31 [ 1661.666589][T19545] RSP: 0018:ffffc9000adb77b0 EFLAGS: 00010086 [ 1661.672669][T19545] RAX: 0000000000000050 RBX: ffff888069cd3ce8 RCX: ffffffff819af1d9 [ 1661.680642][T19545] RDX: 0000000000000000 RSI: ffffffff819b7066 RDI: 0000000000000005 [ 1661.688614][T19545] RBP: ffff88801dee0000 R08: 0000000000000005 R09: 0000000000000000 [ 1661.696618][T19545] R10: 0000000080000001 R11: 6f72665f74657220 R12: ffffc9000adb7a98 [ 1661.704593][T19545] R13: ffff88801dee0000 R14: 0000000000000000 R15: 0000000000000000 [ 1661.712571][T19545] FS: 0000000000000000(0000) GS:ffff88812475b000(0000) knlGS:0000000000000000 [ 1661.721507][T19545] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1661.728101][T19545] CR2: 00007fd61fce56c0 CR3: 000000003f4a8000 CR4: 0000000000350ef0 [ 1661.736077][T19545] Call Trace: [ 1661.739351][T19545] [ 1661.742292][T19545] __debug_object_init+0x2a9/0x3d0 [ 1661.747432][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.753087][T19545] ? __pfx___debug_object_init+0x10/0x10 [ 1661.758783][T19545] __init_work+0x4c/0x60 [ 1661.763049][T19545] rhashtable_init_noprof+0x49f/0x7e0 [ 1661.768446][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1661.774019][T19545] bch2_copygc_thread+0xf6/0xdd0 [ 1661.778980][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1661.784567][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.790215][T19545] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 1661.795716][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.801363][T19545] ? rcu_is_watching+0x12/0xc0 [ 1661.806141][T19545] ? finish_task_switch.isra.0+0x221/0xc10 [ 1661.811962][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.817618][T19545] ? lockdep_hardirqs_on+0x7c/0x110 [ 1661.822843][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.828486][T19545] ? finish_task_switch.isra.0+0x221/0xc10 [ 1661.834338][T19545] ? rcu_is_watching+0x12/0xc0 [ 1661.839118][T19545] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1661.844946][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.850597][T19545] ? lockdep_hardirqs_on+0x7c/0x110 [ 1661.855825][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.861469][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.867124][T19545] ? __kthread_parkme+0x19e/0x250 [ 1661.872183][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1661.877758][T19545] kthread+0x3c5/0x780 [ 1661.881852][T19545] ? __pfx_kthread+0x10/0x10 [ 1661.886468][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1661.892115][T19545] ? rcu_is_watching+0x12/0xc0 [ 1661.896909][T19545] ? __pfx_kthread+0x10/0x10 [ 1661.901523][T19545] ret_from_fork+0x5d7/0x6f0 [ 1661.906268][T19545] ? __pfx_kthread+0x10/0x10 [ 1661.910893][T19545] ret_from_fork_asm+0x1a/0x30 [ 1661.915689][T19545] [ 1661.918742][T19545] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1661.926040][T19545] CPU: 0 UID: 0 PID: 19545 Comm: bch-copygc/loop Not tainted 6.16.0-rc1-syzkaller-00010-g2c4a1f3fe03e #0 PREEMPT(full) [ 1661.938563][T19545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1661.948628][T19545] Call Trace: [ 1661.951909][T19545] [ 1661.954848][T19545] dump_stack_lvl+0x3d/0x1f0 [ 1661.959491][T19545] panic+0x71c/0x800 [ 1661.963418][T19545] ? __pfx_panic+0x10/0x10 [ 1661.967871][T19545] ? show_trace_log_lvl+0x29b/0x3e0 [ 1661.973147][T19545] ? check_panic_on_warn+0x1f/0xb0 [ 1661.978299][T19545] ? lookup_object_or_alloc.part.0+0x2b1/0x590 [ 1661.984475][T19545] check_panic_on_warn+0xab/0xb0 [ 1661.989454][T19545] __warn+0xf6/0x3c0 [ 1661.993408][T19545] ? lookup_object_or_alloc.part.0+0x2b1/0x590 [ 1661.999574][T19545] report_bug+0x3c3/0x580 [ 1662.003926][T19545] ? lookup_object_or_alloc.part.0+0x2b1/0x590 [ 1662.010101][T19545] handle_bug+0x184/0x210 [ 1662.014444][T19545] exc_invalid_op+0x17/0x50 [ 1662.018956][T19545] asm_exc_invalid_op+0x1a/0x20 [ 1662.023818][T19545] RIP: 0010:lookup_object_or_alloc.part.0+0x2b1/0x590 [ 1662.030600][T19545] Code: 0e 48 8d 7d 20 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 58 02 00 00 48 8b 55 20 4c 89 e6 48 c7 c7 60 67 15 8c e8 00 d9 bb fc 90 <0f> 0b 90 48 83 c4 18 48 89 d8 5b 5d 41 5c 41 5d 41 5e 41 5f e9 31 [ 1662.050227][T19545] RSP: 0018:ffffc9000adb77b0 EFLAGS: 00010086 [ 1662.056833][T19545] RAX: 0000000000000050 RBX: ffff888069cd3ce8 RCX: ffffffff819af1d9 [ 1662.064813][T19545] RDX: 0000000000000000 RSI: ffffffff819b7066 RDI: 0000000000000005 [ 1662.072820][T19545] RBP: ffff88801dee0000 R08: 0000000000000005 R09: 0000000000000000 [ 1662.080794][T19545] R10: 0000000080000001 R11: 6f72665f74657220 R12: ffffc9000adb7a98 [ 1662.088774][T19545] R13: ffff88801dee0000 R14: 0000000000000000 R15: 0000000000000000 [ 1662.096762][T19545] ? __wake_up_klogd.part.0+0x99/0xf0 [ 1662.102172][T19545] ? vprintk_emit+0x1e6/0x6d0 [ 1662.106888][T19545] __debug_object_init+0x2a9/0x3d0 [ 1662.112034][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.117706][T19545] ? __pfx___debug_object_init+0x10/0x10 [ 1662.123370][T19545] __init_work+0x4c/0x60 [ 1662.127643][T19545] rhashtable_init_noprof+0x49f/0x7e0 [ 1662.133048][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1662.138622][T19545] bch2_copygc_thread+0xf6/0xdd0 [ 1662.143588][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1662.149164][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.154823][T19545] ? __pfx_rhashtable_jhash2+0x10/0x10 [ 1662.160341][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.166020][T19545] ? rcu_is_watching+0x12/0xc0 [ 1662.170795][T19545] ? finish_task_switch.isra.0+0x221/0xc10 [ 1662.176614][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.182267][T19545] ? lockdep_hardirqs_on+0x7c/0x110 [ 1662.187515][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.193161][T19545] ? finish_task_switch.isra.0+0x221/0xc10 [ 1662.199020][T19545] ? rcu_is_watching+0x12/0xc0 [ 1662.203808][T19545] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1662.209645][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.215298][T19545] ? lockdep_hardirqs_on+0x7c/0x110 [ 1662.220526][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.226169][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.232048][T19545] ? __kthread_parkme+0x19e/0x250 [ 1662.237114][T19545] ? __pfx_bch2_copygc_thread+0x10/0x10 [ 1662.242675][T19545] kthread+0x3c5/0x780 [ 1662.246763][T19545] ? __pfx_kthread+0x10/0x10 [ 1662.251375][T19545] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1662.257030][T19545] ? rcu_is_watching+0x12/0xc0 [ 1662.261815][T19545] ? __pfx_kthread+0x10/0x10 [ 1662.266441][T19545] ret_from_fork+0x5d7/0x6f0 [ 1662.271062][T19545] ? __pfx_kthread+0x10/0x10 [ 1662.275684][T19545] ret_from_fork_asm+0x1a/0x30 [ 1662.280470][T19545] [ 1662.283590][T19545] Kernel Offset: disabled [ 1662.287914][T19545] Rebooting in 86400 seconds..