last executing test programs: 16.929071898s ago: executing program 1 (id=1121): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000036cd007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x1000, 0xc00000000000000, 0x7fffffffffffffff, 0x7fff, 0x8000}, &(0x7f0000000100)={0xfffffffffffffffb, 0x13, 0x1, 0x8, 0x9, 0x3, 0x0, 0x3}, &(0x7f0000000140)={0xe1, 0x8000, 0x9, 0x3a6a, 0x9, 0x7, 0x101}, 0x0, 0x0) sendto$inet(r1, 0x0, 0x2, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 15.913991639s ago: executing program 1 (id=1123): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000036cd007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x1000, 0xc00000000000000, 0x7fffffffffffffff, 0x7fff, 0x8000}, &(0x7f0000000100)={0xfffffffffffffffb, 0x13, 0x1, 0x8, 0x9, 0x3, 0x0, 0x3}, &(0x7f0000000140)={0xe1, 0x8000, 0x9, 0x3a6a, 0x9, 0x7, 0x101}, &(0x7f00000001c0), 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x2, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 15.004781576s ago: executing program 1 (id=1127): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x0, 0x3, 0x3}, 0x10) socket$tipc(0x1e, 0x5, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = creat(&(0x7f00000001c0)='./file1\x00', 0x0) lseek(r2, 0x7ffffc, 0x0) write$binfmt_elf64(r2, &(0x7f0000001a40)=ANY=[], 0xfd14) fallocate(r2, 0x0, 0x0, 0x6) ioctl$BLKGETSIZE(r2, 0x1260, &(0x7f0000000040)) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) r3 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$TCFLSH(r3, 0x400455c8, 0x0) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)) r4 = gettid() r5 = socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x7, &(0x7f00000001c0)=0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080), &(0x7f00000000c0)=@v2={0x2000000, [{0x9, 0x5}, {0x8, 0x7}]}, 0x14, 0x3) io_submit(r6, 0x1, &(0x7f0000000600)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0xdd4ad65}]) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) readv(r7, &(0x7f0000001340)=[{&(0x7f0000001280)=""/151, 0x97}], 0x1) ioctl$TCSETS(r7, 0x5402, &(0x7f00000014c0)={0x0, 0x6b, 0x0, 0x0, 0x0, "076a1400"}) r8 = open(&(0x7f0000000140)='./file0\x00', 0x8100, 0x17) ioctl$VHOST_SET_VRING_ADDR(r8, 0x4028af11, &(0x7f0000001480)={0x3, 0x0, &(0x7f0000001200)=""/109, &(0x7f0000001380)=""/148, &(0x7f0000001440)=""/15}) ioctl$TCSETS(r7, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df000000a7d9de16c708db7200"}) syz_open_pts(r7, 0x42) 10.474235758s ago: executing program 2 (id=1142): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2018886, &(0x7f00000005c0)={[{@numtail}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp855'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@dmask={'dmask', 0x3d, 0xfffffffffffffffa}}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@utf8no}, {@shortname_lower}, {@uni_xlateno}, {@utf8no}, {@shortname_winnt}]}, 0x4, 0x331, &(0x7f00000006c0)="$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") prctl$PR_SET_NAME(0xf, &(0x7f0000000180)='\xbd\x11\x03\x93\xa9\x00\x00\b\xe3r\v\xee\xa2\x01\xc1\x96I\xdf\xed\r\xccoW\xc3\x88\xc6\xe9\xc6\xab\xf9\xd9\xb9K:\xb5\xcdZ\xbc\xc3\x01\x1e\xdaD\xa4\xd2v \xd8Y\x94\xd8]mTar\xee\x85\xed\xfd\x1f\x1e[\xe7u>\x94\x16\x89\x8cv\xe4\x89\xf3\n\xb8\x1f\x89\xfc\"\x1a\xb2}\xa5;7\x17\x8d\xff\xc1o\xf0,\x90~<\x03S\xe2\x9f-\x11\x93\r?\xf4|\xe8_\xc5NK\xa6\xfa\x02\xc4W\x17\x96\xe7Z\x18\xb1\x93\xe8\x1c)%J\x98 \x9f[\xb6|\xf1s|x\xb9\f\xa3[\xe3\xb7\x9b5\x92\xeb\x93|d\xc7y\x80\xe2\xcf\xa53\x067\xecH#\xe3\xb1\xeaM+r\xb4\xb4V]\x93[~\xb0\xa9:\xf9M+\xa9\xdd}[\xda\xbd\xea\x86^\xd6\xd0\x8b\xb5q\x8e\x8bN\xcc\x01\x84\xab\xf3j\x1a\xad\xa2a\xd9\xf8\x9f\xe2va\xa4yG\xaa\x01\xeb\xf6\xe0)\xec') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x13, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000000000061115a00000000008500000021000000950000000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001300010000000000000000000000000030e4d745cb19f056162b619644132e4b1d500f3d43fd", @ANYRES32=0x0, @ANYBLOB="0000000000000000180016801400018010000600faffffff000000000000000014000300626f6e645f736c6176655f3100000000"], 0x4c}}, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f0000000200)="3f040e000700000006001e0089e9aaa911d7c2290f0086dd1327c9167c64064a1b7880610cc9", 0x26, 0x0, &(0x7f0000000040)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000f80)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r7], 0x1d8}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="4400000010000108aaff00"/20, @ANYRES32=r9, @ANYBLOB="00000000000000001c0016801800018014000b000000008000000000000000000000000008000400ed080000"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000a00)=ANY=[@ANYBLOB="6c040000", @ANYRES16=r4, @ANYBLOB="000400000000fbdbdf25080000006000018008000100", @ANYRES32=r3, @ANYBLOB="1400020064756d6d7930000000000000000000001400020076657468305f746f5f6272696467650008000100", @ANYRES32=r9, @ANYBLOB="140002006970766c616e3000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="000053448bcdef72cbc42bcb99e9670000", @ANYRES32=r3, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="44000280400003803c000180040003000400030004000300130002002f6465762f736e642f74696d6572000004000300080001008100000009000200aaaaaaaaaa000000040001800400028028000180080003000000000014000200626f6e645f736c6176655f310000000008000100", @ANYRES32=r3, @ANYBLOB="3c000180080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000000800030002000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="0800030000000000"], 0x46c}, 0x1, 0x0, 0x0, 0x14}, 0x40) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x4, @mcast1, 0x80}, 0x1c) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) r11 = dup(r10) ioctl$TIOCL_SETSEL(r11, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}}) 10.094527783s ago: executing program 2 (id=1144): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0xb9, 0x1000, 0xc00000000000000, 0x7fffffffffffffff, 0x7fff, 0x8000}, &(0x7f0000000100)={0xfffffffffffffffb, 0x13, 0x1, 0x8, 0x9, 0x3, 0x0, 0x3}, &(0x7f0000000140)={0xe1, 0x8000, 0x9, 0x3a6a, 0x9, 0x7, 0x101, 0x80}, &(0x7f00000001c0), 0x0) sendto$inet(r1, 0x0, 0x2, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 9.138860341s ago: executing program 2 (id=1146): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000140)={0x60, 0x24, 0x41, {0x41, 0xd, "5b43b27b050d4493b972ebb5ff8e4c43bbd05601b2a9c81ef97ab14c5e0b49439b0ab33c3fc85769140fbebb8bbfac6a6841eac45bb30289ce16360044dcf9"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="e879d4"], &(0x7f0000000240)=ANY=[@ANYBLOB="0022180000009771e810fb2b019c706c75ed7a513078a38e62df4c000000"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xdb4}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x20, 0xd, 0xfe, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000500)={0x20, 0x1, 0x8, "3edaaa1515ae0157"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4}}) 7.93478354s ago: executing program 3 (id=1149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) creat(0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x38, r4, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'syzkaller0\x00'}}}}}, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 7.510329727s ago: executing program 4 (id=1151): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x20000510) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000140)={0x60, 0x24, 0x41, {0x41, 0xd, "5b43b27b050d4493b972ebb5ff8e4c43bbd05601b2a9c81ef97ab14c5e0b49439b0ab33c3fc85769140fbebb8bbfac6a6841eac45bb30289ce16360044dcf9"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="e879d4"], &(0x7f0000000240)=ANY=[@ANYBLOB="0022180000009771e810fb2b019c706c75ed7a513078a38e62df4c000000"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xdb4}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x20, 0xd, 0xfe, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000500)={0x20, 0x1, 0x8, "3edaaa1515ae0157"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4}}) 6.837542344s ago: executing program 2 (id=1152): r0 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x1, 0x0, &(0x7f0000000700)="c4", 0x0, 0xf0, 0x0, 0xc9, 0x67, &(0x7f0000000380)="7e1318c458eb5e92be66b7bd6d593935f32a6deacc257d2e378ed09beaf16b688f2a715ea34b3f5f7fe3e3e8b6fae89fd19b8ea47404388fda7e815d8f60340aade6fa8edf6d816fd6595c0e93053d7b86b95b198ff16e7d6ac4f3c1a6c397575f7cd06c484d8ac14fe64fc18b65b8b4d10168322785fe38b4026b1b6b6276673c99b6732d76fd0a86304270d818a0dcdc8902c465d653bb64d438785aa81a62ecf8ab0275bafed30286ce84046dae167e5608c0375a83ab764c2244f3b219e075421e82bd372f7ded", &(0x7f0000000180)="ac629d6fc02fd617b32078f874c7daf45c4f666f298301d20ac35f56c2ff0928b3747bdb2165f7b3bb2fd07ba23487ed256363aed57cab05cc62c552aaf139b7ab053e9da2c19bb0705a84deb315c04c9e979238f07f9b11389a8bd180555d94e141a9a914b79a"}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) sigaltstack(0x0, &(0x7f0000000300)={&(0x7f0000002380)=""/211, 0x0, 0xd3}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) 6.749373098s ago: executing program 0 (id=1153): syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000180), 0x1, 0x520, &(0x7f0000000900)="$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") r0 = creat(&(0x7f0000000380)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000000)) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) chdir(0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xfd14) creat(&(0x7f0000000040)='./bus\x00', 0x4) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[@ANYBLOB='1-2:5'], 0x23) 5.826672275s ago: executing program 0 (id=1154): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000036cd007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bind$inet(r0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0xb9, 0x1000, 0xc00000000000000, 0x7fffffffffffffff, 0x7fff, 0x8000}, &(0x7f0000000100)={0xfffffffffffffffb, 0x13, 0x1, 0x8, 0x9, 0x3, 0x0, 0x3}, &(0x7f0000000140)={0xe1, 0x8000, 0x9, 0x3a6a, 0x9, 0x7, 0x101, 0x80}, &(0x7f00000001c0), 0x0) sendto$inet(r0, 0x0, 0x2, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 5.780619137s ago: executing program 3 (id=1155): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r7 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1, &(0x7f0000000c40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32, @ANYBLOB="c702ba19a2fe26d597579b57149caee6746000cd13d85358811532f1e24c3b43e3f622de3a668c2a52dc7fbda8c3ae6b33531c51f95186469d6c93d19fa56171fc640a5489faa02cb9957b0d168d14ae7d46f0b1f217d738d68df478b128a6e09c022cb4224d2d7aa5e0f53c475cc8181293f914aa910f44c6af99691afead8c3a340e35f74e5b99ce38ebab1cb78267df028cbdeaf0c5300b53d869f931c636268136d0cba0e8de8668ab12bc5c89331e509d648dd01915cc029c9e2f5293347a25d8682b96782995fb673e304af423e28b4fe88dd31be9a4", @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="ea9346", @ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000400001000000020007000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xd8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32, @ANYBLOB="000000001e0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000006bf68e31ab373e", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES64=r1, @ANYRESDEC=r5, @ANYBLOB="000000002c00000000000000010000000100", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYBLOB, @ANYRES32, @ANYRES32], 0x100, 0x24000081}}], 0x2, 0x90) getpid() bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00') accept(r1, &(0x7f0000000500)=@ethernet={0x0, @local}, &(0x7f0000000700)=0x80) r8 = getpid() sched_setaffinity(r8, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() 4.993707729s ago: executing program 4 (id=1157): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2b63e16300000018000100b1f8611f0b0000000000000000af9e000d00000000050000", @ANYRES32=0x0, @ANYBLOB="08001e0000a380"], 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 4.980675739s ago: executing program 0 (id=1158): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2b63e16300000018000100b1f8611f0b0000000000000000af9e000d00000000050000", @ANYRES32=0x0, @ANYBLOB="08001e0000a380"], 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 4.884434003s ago: executing program 3 (id=1159): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2b63e16300000018000100b1f8611f0b0000000000000000af9e000d00000000050000", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r7 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1, &(0x7f0000000c40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32, @ANYBLOB="c702ba19a2fe26d597579b57149caee6746000cd13d85358811532f1e24c3b43e3f622de3a668c2a52dc7fbda8c3ae6b33531c51f95186469d6c93d19fa56171fc640a5489faa02cb9957b0d168d14ae7d46f0b1f217d738d68df478b128a6e09c022cb4224d2d7aa5e0f53c475cc8181293f914aa910f44c6af99691afead8c3a340e35f74e5b99ce38ebab1cb78267df028cbdeaf0c5300b53d869f931c636268136d0cba0e8de8668ab12bc5c89331e509d648dd01915cc029c9e2f5293347a25d8682b96782995fb673e304af423e28b4fe88dd31be9a4", @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="ea9346", @ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000400001000000020007000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xd8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32, @ANYBLOB="000000001e0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000006bf68e31ab373e", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES64=r1, @ANYRESDEC=r5, @ANYBLOB="000000002c00000000000000010000000100", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYBLOB, @ANYRES32, @ANYRES32], 0x100, 0x24000081}}], 0x2, 0x90) getpid() bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00') accept(r1, &(0x7f0000000500)=@ethernet={0x0, @local}, &(0x7f0000000700)=0x80) r8 = getpid() sched_setaffinity(r8, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() 4.064180366s ago: executing program 1 (id=1156): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e22, @private=0xa010102}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0xb9, 0x1000, 0xc00000000000000, 0x7fffffffffffffff, 0x7fff, 0x8000}, &(0x7f0000000100)={0xfffffffffffffffb, 0x13, 0x1, 0x8, 0x9, 0x3, 0x0, 0x3}, &(0x7f0000000140)={0xe1, 0x8000, 0x9, 0x3a6a, 0x9, 0x7, 0x101, 0x80}, &(0x7f00000001c0), 0x0) sendto$inet(r1, 0x0, 0x2, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 3.9786655s ago: executing program 3 (id=1160): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r7 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1, &(0x7f0000000c40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32, @ANYBLOB="c702ba19a2fe26d597579b57149caee6746000cd13d85358811532f1e24c3b43e3f622de3a668c2a52dc7fbda8c3ae6b33531c51f95186469d6c93d19fa56171fc640a5489faa02cb9957b0d168d14ae7d46f0b1f217d738d68df478b128a6e09c022cb4224d2d7aa5e0f53c475cc8181293f914aa910f44c6af99691afead8c3a340e35f74e5b99ce38ebab1cb78267df028cbdeaf0c5300b53d869f931c636268136d0cba0e8de8668ab12bc5c89331e509d648dd01915cc029c9e2f5293347a25d8682b96782995fb673e304af423e28b4fe88dd31be9a4", @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="ea9346", @ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000400001000000020007000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xd8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32, @ANYBLOB="000000001e0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000006bf68e31ab373e", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES64=r1, @ANYRESDEC=r5, @ANYBLOB="000000002c00000000000000010000000100", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYBLOB, @ANYRES32, @ANYRES32], 0x100, 0x24000081}}], 0x2, 0x90) getpid() bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) accept(r1, &(0x7f0000000500)=@ethernet={0x0, @local}, &(0x7f0000000700)=0x80) getpid() splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sync() 3.868601474s ago: executing program 4 (id=1161): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$loop(0x0, 0x0, 0x0) ioctl$BLKREPORTZONE(r0, 0xc0101282, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa20000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000036cd007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @private=0xa010102}, 0x10) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x1000, 0xc00000000000000, 0x7fffffffffffffff, 0x7fff, 0x8000}, &(0x7f0000000100)={0xfffffffffffffffb, 0x13, 0x1, 0x8, 0x9, 0x3, 0x0, 0x3}, &(0x7f0000000140)={0xe1, 0x8000, 0x9, 0x3a6a, 0x9, 0x7, 0x101}, &(0x7f00000001c0), 0x0) sendto$inet(r1, 0x0, 0x2, 0x0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 3.765803568s ago: executing program 2 (id=1162): socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x4, 0x60, 0xfe, 0x4, 0x39, @mcast1, @private1, 0x7841, 0x0, 0x4, 0x5}}) syz_usb_connect(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000410902"], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mknodat$null(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000000)={0x26, 0x3, 0x0, {0x0, 0x5, 0x0, 'fuse\x00'}}, 0x26) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002880)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6014110000482f00fe8d2c7888f4a6818bc156d8221b10618000000000000000000000000000bbfe8000000000000000000000000000aa24206558000000000000080000000000000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000"], 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x408600, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000180)=0x10000, 0x4) sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r3, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/227, 0xe3}}], 0x1, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x400454c9, 0x9) ioctl$TUNATTACHFILTER(r2, 0x401054d5, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000000)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) r5 = socket(0x10, 0x2, 0x0) write(r5, &(0x7f0000000000)="110000001a005f0414f9f4070009040081", 0x11) mknodat$null(0xffffffffffffffff, &(0x7f0000000000)='./bus\x00', 0x1, 0x103) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r6, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x2, 0x3}, 0x20) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETTXFILTER(r7, 0x400454d1, &(0x7f0000000300)=ANY=[@ANYRES16=0x0, @ANYRES8=r7]) 3.666822682s ago: executing program 0 (id=1163): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000140)={0x60, 0x24, 0x41, {0x41, 0xd, "5b43b27b050d4493b972ebb5ff8e4c43bbd05601b2a9c81ef97ab14c5e0b49439b0ab33c3fc85769140fbebb8bbfac6a6841eac45bb30289ce16360044dcf9"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="e879d4"], &(0x7f0000000240)=ANY=[@ANYBLOB="0022180000009771e810fb2b019c706c75ed7a513078a38e62df4c000000"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xdb4}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x20, 0xd, 0xfe, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000500)={0x20, 0x1, 0x8, "3edaaa1515ae0157"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4}}) 2.939362401s ago: executing program 4 (id=1164): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000e80)='./file0\x00', 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="726f6469722c64656275672c6572726f72733d72656d6f756e742d726f2c636f6465706167653d3836332c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c756e695f786c6174653d312c756e695f786c6174653d312c6e6f6e756d7461696c3d302c757466383d312c696f636861727365743d63703835372c73686f72746e616d653d77696e6e742c757466383d302c636865636b3d7374726963742c696f636861727365743d6d6163696e7569742c756e695f786c6174653d312c005205e1703b26f6042fb8b961806898b4355c2d073185dfdf9cb42e28ed429a65da1416893a087910ac31c6b9352e3f22a052231c8d6f8df6ef27ec2400363c368cbafe4ed6c71119c6fbfa8722c80816a06989db49fdede9664eaac0bd91ed2c1068c21c3569aafbceedb5961b236be89b68b6843ee2ed60eb3b2545608944f15f5d"], 0x2, 0x2a8, &(0x7f00000002c0)="$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") lstat(&(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000) unlinkat(r0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000000)={0x0, 0x0, 0x27f}) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r4 = accept$nfc_llcp(r2, 0x0, &(0x7f0000000100)) signalfd4(r4, &(0x7f00000001c0)={[0x7]}, 0x8, 0x80800) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x420, &(0x7f0000000900)="$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") mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) lseek(r6, 0x100, 0x0) getdents(r6, 0x0, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x4030582a, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) 2.851945645s ago: executing program 3 (id=1165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r5, 0x851, 0x0) 2.786822917s ago: executing program 1 (id=1166): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r7 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1, &(0x7f0000000c40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32, @ANYBLOB="c702ba19a2fe26d597579b57149caee6746000cd13d85358811532f1e24c3b43e3f622de3a668c2a52dc7fbda8c3ae6b33531c51f95186469d6c93d19fa56171fc640a5489faa02cb9957b0d168d14ae7d46f0b1f217d738d68df478b128a6e09c022cb4224d2d7aa5e0f53c475cc8181293f914aa910f44c6af99691afead8c3a340e35f74e5b99ce38ebab1cb78267df028cbdeaf0c5300b53d869f931c636268136d0cba0e8de8668ab12bc5c89331e509d648dd01915cc029c9e2f5293347a25d8682b96782995fb673e304af423e28b4fe88dd31be9a4", @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="ea9346", @ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000400001000000020007000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xd8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32, @ANYBLOB="000000001e0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000006bf68e31ab373e", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES64=r1, @ANYRESDEC=r5, @ANYBLOB="000000002c00000000000000010000000100", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYBLOB, @ANYRES32, @ANYRES32], 0x100, 0x24000081}}], 0x2, 0x90) getpid() bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) accept(r1, &(0x7f0000000500)=@ethernet={0x0, @local}, &(0x7f0000000700)=0x80) getpid() splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) sync() 1.97231763s ago: executing program 4 (id=1167): sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) ioctl$BLKREPORTZONE(0xffffffffffffffff, 0xc0101282, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000300)='./file0\x00', 0x2030, &(0x7f0000000340)=ANY=[@ANYRES32], 0x2, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000036cd007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) bind$inet(r0, 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x4, 0x0, 0xb9, 0x1000, 0xc00000000000000, 0x7fffffffffffffff, 0x7fff, 0x8000}, &(0x7f0000000100)={0xfffffffffffffffb, 0x13, 0x1, 0x8, 0x9, 0x3, 0x0, 0x3}, &(0x7f0000000140)={0xe1, 0x8000, 0x9, 0x3a6a, 0x9, 0x7, 0x101, 0x80}, &(0x7f00000001c0), 0x0) sendto$inet(r0, 0x0, 0x2, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 1.949428211s ago: executing program 1 (id=1168): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x20000510) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x101, @string={0x101, 0x3, "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"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000140)={0x60, 0x24, 0x41, {0x41, 0xd, "5b43b27b050d4493b972ebb5ff8e4c43bbd05601b2a9c81ef97ab14c5e0b49439b0ab33c3fc85769140fbebb8bbfac6a6841eac45bb30289ce16360044dcf9"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="e879d4"], &(0x7f0000000240)=ANY=[@ANYBLOB="0022180000009771e810fb2b019c706c75ed7a513078a38e62df4c000000"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xdb4}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x20, 0xd, 0xfe, "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"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000500)={0x20, 0x1, 0x8, "3edaaa1515ae0157"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4}}) 1.949066511s ago: executing program 3 (id=1169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a00009040000010301010009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 934.368472ms ago: executing program 0 (id=1171): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2b63e16300000018000100b1f8611f0b0000000000000000af9e000d00000000050000", @ANYRES32=0x0, @ANYBLOB="08001e0000a380"], 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) 551.375948ms ago: executing program 4 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="2b63e16300000018000100b1f8611f0b0000000000000000af9e000d00000000050000", @ANYRES32=0x0, @ANYBLOB="08001e00"], 0x30}}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r6, &(0x7f0000000000)={0x1f, 0x80, @any, 0x0, 0x2}, 0xe) r7 = getpid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000004580)=[{{0x0, 0x0, &(0x7f0000002b80)=[{0x0}], 0x1, &(0x7f0000000c40)=ANY=[@ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYRES32=0x0, @ANYBLOB="000000001c0000000000000001000000020000", @ANYRES32, @ANYBLOB="c702ba19a2fe26d597579b57149caee6746000cd13d85358811532f1e24c3b43e3f622de3a668c2a52dc7fbda8c3ae6b33531c51f95186469d6c93d19fa56171fc640a5489faa02cb9957b0d168d14ae7d46f0b1f217d738d68df478b128a6e09c022cb4224d2d7aa5e0f53c475cc8181293f914aa910f44c6af99691afead8c3a340e35f74e5b99ce38ebab1cb78267df028cbdeaf0c5300b53d869f931c636268136d0cba0e8de8668ab12bc5c89331e509d648dd01915cc029c9e2f5293347a25d8682b96782995fb673e304af423e28b4fe88dd31be9a4", @ANYRES32=0xee01, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYBLOB="ea9346", @ANYBLOB, @ANYRES64, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYRES16=r3, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000400001000000020007000000000000", @ANYRES32, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="0000000010000000000000000100000001000000"], 0xd8}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1400000000000000010000000100", @ANYRES32, @ANYBLOB="000000001e0000000000000001000000020000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="00000000006bf68e31ab373e", @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r7, @ANYRES64=r1, @ANYRESDEC=r5, @ANYBLOB="000000002c00000000000000010000000100", @ANYRES32, @ANYRES32=r5, @ANYRES32, @ANYRESHEX=r1, @ANYRES32=r4, @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=r0, @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRESDEC=r2, @ANYBLOB, @ANYRES32, @ANYRES32], 0x100, 0x24000081}}], 0x2, 0x90) getpid() bind$inet6(r5, &(0x7f00000004c0)={0xa, 0x8000002, 0x0, @empty}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f0000000400)='./file0\x00') accept(r1, &(0x7f0000000500)=@ethernet={0x0, @local}, &(0x7f0000000700)=0x80) r8 = getpid() sched_setaffinity(r8, 0x0, 0x0) shutdown(r5, 0x1) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sync() 66.953187ms ago: executing program 0 (id=1172): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = inotify_init1(0x0) inotify_add_watch(r1, &(0x7f00000000c0)='./file0\x00', 0x20000510) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000380)={0x0, 0x3, 0x101, @string={0x101, 0x3, "d3c5a4f19b59c757471b94b9a722970778f27a5a140a9afcb3c9f56c65c17281992edbce7a840b31160921b04594ebb894fbc2d08435eabef22ccb902d11eec2ef70b783098e9e7af254ad86873679cf5ff3e65b4aa051944744943ce164342b1cbe86dad209f9e3a444c3db18e520c3ddedf49250da8f9ed785105d064b5dee5006bcefdf33f960b84db23261116ee631481d6f3b5179e1c1d1147948f74a5e76ec142a05004bea4dc32866595d458dc71fad6f9b8d4ca84e31c46b1a96eb138adc8aa83dd0515e583f4c9bf11b75458118e0cfab98c96cd782a674650eb47026547c98037f65a704e6e0dbca6149d83f7429e50b78dad721178178ed4c80"}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f0000000140)={0x60, 0x24, 0x41, {0x41, 0xd, "5b43b27b050d4493b972ebb5ff8e4c43bbd05601b2a9c81ef97ab14c5e0b49439b0ab33c3fc85769140fbebb8bbfac6a6841eac45bb30289ce16360044dcf9"}}, &(0x7f00000001c0)=ANY=[@ANYBLOB="e879d4"], &(0x7f0000000240)=ANY=[@ANYBLOB="0022180000009771e810fb2b019c706c75ed7a513078a38e62df4c000000"], &(0x7f0000000280)={0x0, 0x21, 0x9, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0xdb4}}}}, &(0x7f0000000700)={0x2c, &(0x7f0000000580)={0x20, 0xd, 0xfe, "193d27b6e54a081da554d9ade4e736be24faffb7198683e3296b5b123e2cfc328f1e0d16c968e33bd52e4aac766f1f5651cd5f48936d8030dc7a16a57bce6862734e3464a295ab4d5e88ac48bc5eb5eb6f781417fa9241522b686605a51e04008b04e42e38730091311cabd221997c0fd9a11f03cf57276eba5f2955f78fd0869f9761a7d80ba1f1ad0779e91a3fcec963e76c7314af4c902cf29aa02b5e241fe0c71671018f9c68a18afcce5c94098d2ac807eb9ba191cf80bcf0251fce2bc905d86aa1cefa842c3650341d25426494ef9fac062fe104aa78e30a58a2d05324ce9d69b77cdb082b7d116d7287dafd06ce635f2d2c02921a72334185fd68"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x19}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0xbc}, &(0x7f0000000500)={0x20, 0x1, 0x8, "3edaaa1515ae0157"}, &(0x7f00000006c0)={0x20, 0x3, 0x1, 0x4}}) 0s ago: executing program 2 (id=1173): r0 = syz_usb_connect$hid(0x6, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x1, 0x0, &(0x7f0000000700)="c4", 0x0, 0xf0, 0x0, 0xc9, 0x67, &(0x7f0000000380)="7e1318c458eb5e92be66b7bd6d593935f32a6deacc257d2e378ed09beaf16b688f2a715ea34b3f5f7fe3e3e8b6fae89fd19b8ea47404388fda7e815d8f60340aade6fa8edf6d816fd6595c0e93053d7b86b95b198ff16e7d6ac4f3c1a6c397575f7cd06c484d8ac14fe64fc18b65b8b4d10168322785fe38b4026b1b6b6276673c99b6732d76fd0a86304270d818a0dcdc8902c465d653bb64d438785aa81a62ecf8ab0275bafed30286ce84046dae167e5608c0375a83ab764c2244f3b219e075421e82bd372f7ded", &(0x7f0000000180)="ac629d6fc02fd617b32078f874c7daf45c4f666f298301d20ac35f56c2ff0928b3747bdb2165f7b3bb2fd07ba23487ed256363aed57cab05cc62c552aaf139b7ab053e9da2c19bb0705a84deb315c04c9e979238f07f9b11389a8bd180555d94e141a9a914b79a"}, 0x50) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@multicast1}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0x0, 0x2}}, {{@in6=@loopback, 0x0, 0x6c}}}, 0xe8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(0xffffffffffffffff, 0x0) sigaltstack(0x0, &(0x7f0000000300)={&(0x7f0000002380)=""/211, 0x0, 0xd3}) mprotect(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) kernel console output (not intermixed with test programs): usb 4-1: USB disconnect, device number 37 [ 247.087646][ T626] usb 5-1: config 0 has no interfaces? [ 247.167669][ T626] usb 5-1: config 0 has no interfaces? [ 247.272565][ T4169] netlink: 20 bytes leftover after parsing attributes in process `syz.0.827'. [ 247.383027][ T594] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 247.467622][ T626] usb 5-1: config 0 has no interfaces? [ 247.473212][ T626] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 247.482658][ T626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.503742][ T626] usb 5-1: config 0 descriptor?? [ 247.577692][ T572] usb 2-1: USB disconnect, device number 42 [ 247.630230][ T594] usb 3-1: Using ep0 maxpacket: 32 [ 247.938101][ T594] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.959461][ T594] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.087848][ T594] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 248.115583][ T594] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 248.156062][ T594] usb 3-1: Product: syz [ 248.181625][ T594] usb 3-1: Manufacturer: syz [ 248.278305][ T594] hub 3-1:4.0: USB hub found [ 248.726905][ T594] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 249.077583][ T784] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 249.349423][ T784] usb 1-1: Using ep0 maxpacket: 32 [ 249.399035][ T594] usb 5-1: USB disconnect, device number 46 [ 249.527955][ T784] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.566534][ T784] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.717634][ T784] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 249.726682][ T784] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 249.734800][ T784] usb 1-1: Product: syz [ 249.738791][ T784] usb 1-1: Manufacturer: syz [ 249.778146][ T784] hub 1-1:4.0: USB hub found [ 249.947627][ T18] usb 3-1: reset high-speed USB device number 45 using dummy_hcd [ 249.987726][ T784] hub 1-1:4.0: 2 ports detected [ 250.007660][ T594] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 250.227697][ T18] usb 3-1: device firmware changed [ 250.233162][ T18] usb 3-1: USB disconnect, device number 45 [ 250.302038][ T4210] F2FS-fs (loop1): Found nat_bits in checkpoint [ 250.317695][ T594] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 250.338871][ T4210] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 250.437639][ T594] usb 5-1: config 0 has no interfaces? [ 250.507702][ T784] hub 1-1:4.0: set hub depth failed [ 250.517899][ T594] usb 5-1: config 0 has no interfaces? [ 250.563394][ T784] usb 1-1: USB disconnect, device number 49 [ 250.617640][ T594] usb 5-1: config 0 has no interfaces? [ 250.647558][ T18] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 250.697810][ T594] usb 5-1: config 0 has no interfaces? [ 250.721239][ T179] attempt to access beyond end of device [ 250.721239][ T179] loop1: rw=2049, want=45104, limit=40427 [ 250.797622][ T594] usb 5-1: config 0 has no interfaces? [ 250.877618][ T594] usb 5-1: config 0 has no interfaces? [ 250.967700][ T594] usb 5-1: config 0 has no interfaces? [ 251.047610][ T18] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.047615][ T594] usb 5-1: config 0 has no interfaces? [ 251.047641][ T594] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 251.062204][ T18] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 251.071537][ T594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.075668][ T18] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 251.097656][ T18] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.100138][ T594] usb 5-1: config 0 descriptor?? [ 251.121807][ T18] usb 3-1: config 0 descriptor?? [ 251.287739][ T572] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 251.526178][ T4230] FAT-fs (loop1): Directory bread(block 64) failed [ 251.527620][ T572] usb 1-1: Using ep0 maxpacket: 32 [ 251.532729][ T4230] FAT-fs (loop1): Directory bread(block 65) failed [ 251.544375][ T4230] FAT-fs (loop1): Directory bread(block 66) failed [ 251.550999][ T4230] FAT-fs (loop1): Directory bread(block 67) failed [ 251.557393][ T4230] FAT-fs (loop1): Directory bread(block 68) failed [ 251.563682][ T4230] FAT-fs (loop1): Directory bread(block 69) failed [ 251.570058][ T4230] FAT-fs (loop1): Directory bread(block 70) failed [ 251.576305][ T4230] FAT-fs (loop1): Directory bread(block 71) failed [ 251.582723][ T4230] FAT-fs (loop1): Directory bread(block 72) failed [ 251.589024][ T4230] FAT-fs (loop1): Directory bread(block 73) failed [ 251.604966][ T4230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.839'. [ 251.657786][ T572] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.668578][ T572] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 251.687601][ T18] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 251.797688][ T572] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 251.806848][ T572] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 251.815291][ T572] usb 1-1: Product: syz [ 251.819612][ T572] usb 1-1: Manufacturer: syz [ 251.858283][ T572] hub 1-1:4.0: USB hub found [ 251.927644][ T18] usb 4-1: Using ep0 maxpacket: 32 [ 252.047670][ T18] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.058424][ T18] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.067692][ T572] hub 1-1:4.0: 2 ports detected [ 252.187816][ T18] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 252.196730][ T18] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 252.204939][ T18] usb 4-1: Product: syz [ 252.208966][ T18] usb 4-1: Manufacturer: syz [ 252.248180][ T18] hub 4-1:4.0: USB hub found [ 252.428633][ T343] usb 3-1: USB disconnect, device number 46 [ 252.494617][ T594] usb 5-1: USB disconnect, device number 47 [ 252.587768][ T572] hub 1-1:4.0: set hub depth failed [ 252.651428][ T572] usb 1-1: USB disconnect, device number 50 [ 252.783848][ T18] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 253.247605][ T121] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 253.514026][ T121] usb 2-1: Using ep0 maxpacket: 32 [ 253.648004][ T121] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.700328][ T121] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.053458][ T121] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 254.102532][ T121] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 254.432798][ T121] usb 2-1: Product: syz [ 254.436884][ T121] usb 2-1: Manufacturer: syz [ 254.509280][ T121] hub 2-1:4.0: USB hub found [ 254.712691][ T121] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 254.777601][ T343] usb 4-1: reset high-speed USB device number 38 using dummy_hcd [ 255.027562][ T343] usb 4-1: Using ep0 maxpacket: 32 [ 255.187907][ T4277] F2FS-fs (loop2): Found nat_bits in checkpoint [ 255.222510][ T4277] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 255.587155][ T4291] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 255.596435][ T1789] attempt to access beyond end of device [ 255.596435][ T1789] loop2: rw=2049, want=45104, limit=40427 [ 256.217636][ T572] usb 2-1: reset high-speed USB device number 43 using dummy_hcd [ 256.497680][ T572] usb 2-1: device firmware changed [ 256.503613][ T572] usb 2-1: USB disconnect, device number 43 [ 256.772163][ T423] usb 4-1: USB disconnect, device number 38 [ 256.927557][ T572] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 257.167586][ T423] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 257.687697][ T572] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.697665][ T572] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 257.707411][ T572] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 257.717071][ T572] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.729675][ T572] usb 2-1: config 0 descriptor?? [ 257.993173][ T423] usb 5-1: Using ep0 maxpacket: 32 [ 258.067588][ T343] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 258.117661][ T423] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.128649][ T423] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.257621][ T423] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 258.269756][ T423] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 258.278267][ T423] usb 5-1: Product: syz [ 258.282387][ T423] usb 5-1: Manufacturer: syz [ 258.307794][ T343] usb 4-1: Using ep0 maxpacket: 32 [ 258.328136][ T423] hub 5-1:4.0: USB hub found [ 258.447096][ T343] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.458323][ T343] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 258.537634][ T423] hub 5-1:4.0: 2 ports detected [ 258.587704][ T343] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 258.596946][ T343] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 258.605470][ T343] usb 4-1: Product: syz [ 258.609808][ T343] usb 4-1: Manufacturer: syz [ 258.624675][ T4338] F2FS-fs (loop0): Found nat_bits in checkpoint [ 258.648328][ T343] hub 4-1:4.0: USB hub found [ 258.661852][ T4338] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 258.947612][ T343] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 259.067417][ T423] hub 5-1:4.0: set hub depth failed [ 259.315827][ T572] usb 2-1: USB disconnect, device number 44 [ 259.333409][ T423] usb 5-1: USB disconnect, device number 48 [ 259.371883][ T7] attempt to access beyond end of device [ 259.371883][ T7] loop0: rw=2049, want=45104, limit=40427 [ 259.462348][ T4357] EXT4-fs (loop1): Ignoring removed bh option [ 259.477014][ T4357] EXT4-fs (loop1): failed to open journal device unknown-block(0,0): -6 [ 259.704447][ T4362] tipc: Enabled bearer , priority 0 [ 259.731785][ T4362] €Â: renamed from syzkaller0 [ 259.741282][ T4362] tipc: Disabling bearer [ 260.568972][ T423] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 260.737672][ T572] usb 4-1: USB disconnect, device number 39 [ 260.877561][ T423] usb 2-1: Using ep0 maxpacket: 32 [ 261.208995][ T423] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 261.219795][ T423] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 261.347637][ T423] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 261.360949][ T423] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 261.377559][ T423] usb 2-1: Product: syz [ 261.383276][ T423] usb 2-1: Manufacturer: syz [ 261.428469][ T423] hub 2-1:4.0: USB hub found [ 261.685392][ T423] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 261.707689][ T572] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 261.846220][ T4402] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.880615][ T4402] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 261.967594][ T594] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 261.997667][ T572] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 262.077600][ T572] usb 5-1: config 0 has no interfaces? [ 262.157606][ T572] usb 5-1: config 0 has no interfaces? [ 262.237684][ T572] usb 5-1: config 0 has no interfaces? [ 262.317640][ T572] usb 5-1: config 0 has no interfaces? [ 262.327738][ T594] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.337782][ T594] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 262.350499][ T594] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 262.359434][ T594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.368271][ T594] usb 1-1: config 0 descriptor?? [ 262.397614][ T572] usb 5-1: config 0 has no interfaces? [ 262.408307][ T594] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 262.477622][ T572] usb 5-1: config 0 has no interfaces? [ 262.522963][ T3950] attempt to access beyond end of device [ 262.522963][ T3950] loop3: rw=2049, want=45104, limit=40427 [ 262.557625][ T572] usb 5-1: config 0 has no interfaces? [ 262.637643][ T572] usb 5-1: config 0 has no interfaces? [ 262.643001][ T572] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 262.652159][ T572] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.660882][ T572] usb 5-1: config 0 descriptor?? [ 263.017701][ T124] usb 2-1: USB disconnect, device number 45 [ 263.087601][ T572] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 263.127575][ T343] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 263.327566][ T572] usb 4-1: Using ep0 maxpacket: 32 [ 263.367567][ T343] usb 3-1: Using ep0 maxpacket: 32 [ 263.447658][ T572] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.458405][ T572] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.497711][ T343] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.508892][ T343] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 263.587641][ T572] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 263.596565][ T572] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 263.604717][ T572] usb 4-1: Product: syz [ 263.608682][ T572] usb 4-1: Manufacturer: syz [ 263.637702][ T343] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 263.647097][ T343] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 263.655380][ T343] usb 3-1: Product: syz [ 263.658617][ T572] hub 4-1:4.0: USB hub found [ 263.659585][ T343] usb 3-1: Manufacturer: syz [ 263.676629][ T423] usb 1-1: USB disconnect, device number 51 [ 263.708490][ T343] hub 3-1:4.0: USB hub found [ 263.868065][ T572] hub 4-1:4.0: 2 ports detected [ 264.236050][ T343] hub 3-1:4.0: 2 ports detected [ 264.387634][ T572] hub 4-1:4.0: set hub depth failed [ 264.430614][ T572] usb 4-1: USB disconnect, device number 40 [ 264.489575][ T594] usb 5-1: USB disconnect, device number 49 [ 264.617628][ T343] hub 3-1:4.0: set hub depth failed [ 264.659073][ T343] usb 3-1: USB disconnect, device number 47 [ 264.827587][ T535] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 264.897545][ T594] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 265.333451][ T4452] F2FS-fs (loop3): Found nat_bits in checkpoint [ 265.397553][ T594] usb 5-1: Using ep0 maxpacket: 32 [ 265.416392][ T4452] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 265.517646][ T535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 265.527692][ T535] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 265.536486][ T535] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 265.545390][ T535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.558007][ T535] usb 1-1: config 0 descriptor?? [ 265.567768][ T594] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 265.602354][ T594] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 265.848062][ T594] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 265.894270][ T594] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 265.926697][ T594] usb 5-1: Product: syz [ 265.931014][ T594] usb 5-1: Manufacturer: syz [ 265.978325][ T594] hub 5-1:4.0: bad descriptor, ignoring hub [ 265.984144][ T594] hub: probe of 5-1:4.0 failed with error -5 [ 265.990442][ T594] usbhid 5-1:4.0: couldn't find an input interrupt endpoint [ 266.055583][ T3950] attempt to access beyond end of device [ 266.055583][ T3950] loop3: rw=2049, want=45104, limit=40427 [ 266.217585][ T535] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 266.497676][ T535] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 266.577614][ T535] usb 2-1: config 0 has no interfaces? [ 266.657587][ T124] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 266.657702][ T535] usb 2-1: config 0 has no interfaces? [ 266.747616][ T535] usb 2-1: config 0 has no interfaces? [ 266.827664][ T535] usb 2-1: config 0 has no interfaces? [ 266.897566][ T124] usb 4-1: Using ep0 maxpacket: 32 [ 266.917646][ T535] usb 2-1: config 0 has no interfaces? [ 266.987293][ T930] usb 1-1: USB disconnect, device number 52 [ 267.003140][ T535] usb 2-1: config 0 has no interfaces? [ 267.017689][ T124] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.028805][ T124] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.097643][ T535] usb 2-1: config 0 has no interfaces? [ 267.157675][ T124] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 267.166638][ T124] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 267.174771][ T124] usb 4-1: Product: syz [ 267.178761][ T124] usb 4-1: Manufacturer: syz [ 267.187865][ T535] usb 2-1: config 0 has no interfaces? [ 267.193220][ T535] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 267.202238][ T535] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.210964][ T535] usb 2-1: config 0 descriptor?? [ 267.218230][ T124] hub 4-1:4.0: USB hub found [ 267.357649][ T930] usb 5-1: USB disconnect, device number 50 [ 267.427609][ T124] hub 4-1:4.0: 2 ports detected [ 267.947599][ T124] hub 4-1:4.0: set hub depth failed [ 267.988949][ T124] usb 4-1: USB disconnect, device number 41 [ 268.117552][ T930] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 268.430671][ T930] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 268.587764][ T930] usb 1-1: config 0 has no interfaces? [ 268.667606][ T930] usb 1-1: config 0 has no interfaces? [ 268.717683][ T594] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 268.747618][ T930] usb 1-1: config 0 has no interfaces? [ 268.827596][ T930] usb 1-1: config 0 has no interfaces? [ 268.907602][ T930] usb 1-1: config 0 has no interfaces? [ 268.949266][ T343] usb 2-1: USB disconnect, device number 46 [ 268.987607][ T930] usb 1-1: config 0 has no interfaces? [ 269.107599][ T594] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.117912][ T594] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 269.126679][ T594] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 269.136022][ T594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.147607][ T930] usb 1-1: config 0 has no interfaces? [ 269.149409][ T594] usb 4-1: config 0 descriptor?? [ 269.307913][ T930] usb 1-1: config 0 has no interfaces? [ 269.313732][ T930] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 269.361071][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.396330][ T930] usb 1-1: config 0 descriptor?? [ 269.468692][ T4513] F2FS-fs (loop4): Found nat_bits in checkpoint [ 269.524458][ T4513] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 269.883243][ T4526] F2FS-fs (loop2): Found nat_bits in checkpoint [ 269.930446][ T4526] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 269.996337][ T356] attempt to access beyond end of device [ 269.996337][ T356] loop4: rw=2049, want=45104, limit=40427 [ 270.177741][ T594] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 270.448630][ T1789] attempt to access beyond end of device [ 270.448630][ T1789] loop2: rw=2049, want=45104, limit=40427 [ 270.537670][ T594] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 270.548640][ T594] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 270.557398][ T594] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 270.566298][ T594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.575778][ T594] usb 2-1: config 0 descriptor?? [ 270.918945][ T930] usb 1-1: USB disconnect, device number 53 [ 270.997304][ T124] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 271.301135][ T4556] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 271.312726][ T4556] EXT4-fs error (device loop4): ext4_orphan_get:1236: inode #15: comm syz.4.907: iget: bad i_size value: -67835469387268086 [ 271.326055][ T4556] EXT4-fs error (device loop4): ext4_orphan_get:1240: comm syz.4.907: couldn't read orphan inode 15 (err -117) [ 271.338200][ T4556] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue [ 271.347282][ T4556] ext2 filesystem being mounted at /root/syzkaller.8pwAAS/174/file0 supports timestamps until 2038 (0x7fffffff) [ 271.397694][ T124] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.408234][ T124] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 271.421454][ T124] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 271.430729][ T124] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.441555][ T124] usb 3-1: config 0 descriptor?? [ 271.462427][ T930] usb 4-1: USB disconnect, device number 42 [ 271.488415][ T124] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 272.152963][ T594] usb 2-1: USB disconnect, device number 47 [ 273.543557][ T4590] F2FS-fs (loop1): Found nat_bits in checkpoint [ 273.580889][ T4590] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 273.607693][ T626] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 273.714481][ T535] usb 3-1: USB disconnect, device number 48 [ 273.721239][ T179] attempt to access beyond end of device [ 273.721239][ T179] loop1: rw=2049, want=45104, limit=40427 [ 273.977670][ T626] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 274.057889][ T626] usb 5-1: config 0 has no interfaces? [ 274.147643][ T626] usb 5-1: config 0 has no interfaces? [ 274.227779][ T626] usb 5-1: config 0 has no interfaces? [ 274.287816][ T124] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 274.317620][ T626] usb 5-1: config 0 has no interfaces? [ 274.399106][ T626] usb 5-1: config 0 has no interfaces? [ 274.414686][ T23] audit: type=1400 audit(1719867326.824:250): avc: denied { ioctl } for pid=4611 comm="syz.3.920" path="socket:[39005]" dev="sockfs" ino=39005 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 274.446008][ T23] audit: type=1400 audit(1719867326.854:251): avc: denied { setopt } for pid=4611 comm="syz.3.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 274.522478][ T626] usb 5-1: config 0 has no interfaces? [ 274.568802][ T124] usb 1-1: Using ep0 maxpacket: 32 [ 274.617676][ T626] usb 5-1: config 0 has no interfaces? [ 274.697651][ T124] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 274.707617][ T626] usb 5-1: config 0 has no interfaces? [ 274.708574][ T124] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 274.713642][ T626] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 274.732317][ T626] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.745163][ T626] usb 5-1: config 0 descriptor?? [ 274.837769][ T124] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 274.846962][ T124] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 274.855119][ T124] usb 1-1: Product: syz [ 274.859142][ T124] usb 1-1: Manufacturer: syz [ 274.868908][ T580] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 274.898092][ T124] hub 1-1:4.0: USB hub found [ 275.087559][ T626] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 275.117646][ T124] hub 1-1:4.0: 2 ports detected [ 275.237675][ T580] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 275.247696][ T580] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.256823][ T580] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 275.266677][ T580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.275815][ T580] usb 2-1: config 0 descriptor?? [ 275.337553][ T626] usb 3-1: Using ep0 maxpacket: 32 [ 275.457666][ T626] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 275.468555][ T626] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 275.607638][ T626] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 275.616560][ T626] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 275.624994][ T626] usb 3-1: Product: syz [ 275.627605][ T124] hub 1-1:4.0: set hub depth failed [ 275.629103][ T626] usb 3-1: Manufacturer: syz [ 275.678283][ T626] hub 3-1:4.0: USB hub found [ 275.679797][ T124] usb 1-1: USB disconnect, device number 54 [ 275.897676][ T626] hub 3-1:4.0: 2 ports detected [ 276.196307][ T4622] tipc: Enabled bearer , priority 0 [ 276.204310][ T4622] €Â: renamed from syzkaller0 [ 276.216348][ T4622] tipc: Disabling bearer [ 276.297660][ T626] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 276.304236][ T626] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 276.692368][ T423] usb 5-1: USB disconnect, device number 51 [ 276.996540][ T423] usb 2-1: USB disconnect, device number 48 [ 277.007984][ T626] usb 3-1: USB disconnect, device number 49 [ 277.307571][ T580] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 277.467553][ T535] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 277.547578][ T572] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 277.597564][ T626] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 277.667605][ T580] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.677821][ T580] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.690543][ T580] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 277.699462][ T580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.708143][ T580] usb 5-1: config 0 descriptor?? [ 277.748337][ T580] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 277.837650][ T535] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.847658][ T626] usb 3-1: Using ep0 maxpacket: 32 [ 277.852553][ T535] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 277.865247][ T535] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 277.874187][ T535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.882872][ T535] usb 1-1: config 0 descriptor?? [ 277.907765][ T572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.918486][ T572] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 277.928951][ T535] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 277.936685][ T572] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 277.945609][ T572] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.954439][ T572] usb 4-1: config 0 descriptor?? [ 277.967697][ T626] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 277.978521][ T626] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.107704][ T626] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 278.116633][ T626] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 278.124766][ T626] usb 3-1: Product: syz [ 278.128788][ T626] usb 3-1: Manufacturer: syz [ 278.168156][ T626] hub 3-1:4.0: USB hub found [ 278.387639][ T626] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 278.517943][ T572] hid (null): invalid report_count -82777999 [ 278.757645][ T572] usb 4-1: string descriptor 0 read error: -71 [ 278.777688][ T572] uclogic 0003:256C:006D.0036: failed retrieving string descriptor #200: -71 [ 278.786569][ T572] uclogic 0003:256C:006D.0036: failed retrieving pen parameters: -71 [ 278.794436][ T572] uclogic 0003:256C:006D.0036: failed probing pen v2 parameters: -71 [ 278.802426][ T572] uclogic 0003:256C:006D.0036: failed probing parameters: -71 [ 278.809735][ T572] uclogic: probe of 0003:256C:006D.0036 failed with error -71 [ 278.819418][ T572] usb 4-1: USB disconnect, device number 43 [ 279.194218][ T124] usb 1-1: USB disconnect, device number 55 [ 279.527541][ T572] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 279.767575][ T572] usb 4-1: Using ep0 maxpacket: 32 [ 279.767656][ T124] usb 3-1: USB disconnect, device number 50 [ 279.887628][ T572] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 279.898397][ T572] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 279.932224][ T4676] F2FS-fs (loop2): Found nat_bits in checkpoint [ 279.967679][ T4676] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 279.979720][ T535] usb 5-1: USB disconnect, device number 52 [ 280.094042][ T572] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 280.103876][ T572] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 280.112610][ T572] usb 4-1: Product: syz [ 280.116593][ T572] usb 4-1: Manufacturer: syz [ 280.137211][ T23] audit: type=1400 audit(1719867332.544:252): avc: denied { create } for pid=4686 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.161038][ T23] audit: type=1400 audit(1719867332.574:253): avc: denied { connect } for pid=4686 comm="syz.1.937" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.181123][ T572] hub 4-1:4.0: USB hub found [ 280.183345][ T23] audit: type=1400 audit(1719867332.574:254): avc: denied { read } for pid=4686 comm="syz.1.937" path="socket:[39278]" dev="sockfs" ino=39278 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 280.251542][ T23] audit: type=1400 audit(1719867332.644:255): avc: denied { mounton } for pid=4682 comm="syz.0.936" path=2F726F6F742F73797A6B616C6C65722E6571676D54712F3133392FE91F7189591E9233614B dev="sda1" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=sock_file permissive=1 [ 280.288725][ T4685] EXT4-fs error (device loop0): mb_free_blocks:1458: group 0, inode 16: block 41:freeing already freed block (bit 41); block bitmap corrupt. [ 280.303259][ T4685] EXT4-fs (loop0): Remounting filesystem read-only [ 280.310219][ T4685] EXT4-fs error (device loop0): ext4_mb_generate_buddy:748: group 0, block bitmap and bg descriptor inconsistent: 45 vs 56 free clusters [ 280.324430][ T4685] EXT4-fs (loop0): 1 orphan inode deleted [ 280.330080][ T4685] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,nolazytime,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x0000000000000005,usrquota, [ 280.363171][ T4685] ext4 filesystem being mounted at /root/syzkaller.eqgmTq/139/éq‰Y’3aK supports timestamps until 2038 (0x7fffffff) [ 280.397638][ T572] hub 4-1:4.0: 2 ports detected [ 280.427586][ T121] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 280.688516][ T23] audit: type=1400 audit(1719867333.104:256): avc: denied { mounton } for pid=4682 comm="syz.0.936" path="/root/syzkaller.eqgmTq/139/file0/file0" dev="ramfs" ino=40007 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 280.766400][ T1789] attempt to access beyond end of device [ 280.766400][ T1789] loop2: rw=2049, want=45104, limit=40427 [ 280.797705][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.809616][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 280.819441][ T121] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 280.832181][ T121] usb 2-1: New USB device found, idVendor=5543, idProduct=0003, bcdDevice= 0.00 [ 280.847564][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 280.863947][ T121] usb 2-1: config 0 descriptor?? [ 280.917687][ T572] hub 4-1:4.0: set hub depth failed [ 280.964200][ T572] usb 4-1: USB disconnect, device number 44 [ 281.157727][ T626] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 281.217625][ T121] usbhid 2-1:0.0: can't add hid device: -71 [ 281.223445][ T121] usbhid: probe of 2-1:0.0 failed with error -71 [ 281.230722][ T121] usb 2-1: USB disconnect, device number 49 [ 281.517611][ T535] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 281.887625][ T626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 281.898455][ T626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 281.908157][ T626] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 281.917045][ T626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.925815][ T626] usb 1-1: config 0 descriptor?? [ 282.007667][ T535] usb 3-1: Using ep0 maxpacket: 32 [ 282.020561][ T4722] FAT-fs (loop4): Directory bread(block 64) failed [ 282.026997][ T4722] FAT-fs (loop4): Directory bread(block 65) failed [ 282.033382][ T4722] FAT-fs (loop4): Directory bread(block 66) failed [ 282.039794][ T4722] FAT-fs (loop4): Directory bread(block 67) failed [ 282.046115][ T4722] FAT-fs (loop4): Directory bread(block 68) failed [ 282.052450][ T4722] FAT-fs (loop4): Directory bread(block 69) failed [ 282.058998][ T4722] FAT-fs (loop4): Directory bread(block 70) failed [ 282.065362][ T4722] FAT-fs (loop4): Directory bread(block 71) failed [ 282.071779][ T4722] FAT-fs (loop4): Directory bread(block 72) failed [ 282.078141][ T4722] FAT-fs (loop4): Directory bread(block 73) failed [ 282.099673][ T4722] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 282.127679][ T535] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.138376][ T535] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.207601][ T580] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 282.267660][ T535] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 282.276576][ T535] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 282.285078][ T535] usb 3-1: Product: syz [ 282.289011][ T535] usb 3-1: Manufacturer: syz [ 282.328268][ T535] hub 3-1:4.0: USB hub found [ 282.437718][ T572] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 282.539317][ T626] hid (null): invalid report_count -82777999 [ 282.547752][ T535] hub 3-1:4.0: 2 ports detected [ 282.687572][ T572] usb 5-1: Using ep0 maxpacket: 32 [ 282.777731][ T626] usb 1-1: string descriptor 0 read error: -71 [ 282.797717][ T626] uclogic 0003:256C:006D.0037: failed retrieving string descriptor #200: -71 [ 282.806516][ T626] uclogic 0003:256C:006D.0037: failed retrieving pen parameters: -71 [ 282.814599][ T572] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 282.825318][ T626] uclogic 0003:256C:006D.0037: failed probing pen v2 parameters: -71 [ 282.833270][ T572] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 282.838256][ T4701] tipc: Enabled bearer , priority 0 [ 282.842932][ T626] uclogic 0003:256C:006D.0037: failed probing parameters: -71 [ 282.849677][ T580] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.857064][ T626] uclogic: probe of 0003:256C:006D.0037 failed with error -71 [ 282.867935][ T4701] €Â: renamed from syzkaller0 [ 282.878682][ T580] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 282.881746][ T626] usb 1-1: USB disconnect, device number 56 [ 282.892074][ T580] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 282.906161][ T580] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.914994][ T4701] tipc: Disabling bearer [ 282.920853][ T580] usb 2-1: config 0 descriptor?? [ 282.947623][ T535] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 282.954159][ T535] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 282.958759][ T580] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 282.987831][ T535] usb 3-1: USB disconnect, device number 51 [ 282.997810][ T572] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 283.006738][ T572] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 283.015010][ T572] usb 5-1: Product: syz [ 283.019095][ T572] usb 5-1: Manufacturer: syz [ 283.058125][ T572] hub 5-1:4.0: USB hub found [ 283.278081][ T572] hub 5-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 283.627838][ T4742] FAT-fs (loop2): Directory bread(block 64) failed [ 283.634522][ T4742] FAT-fs (loop2): Directory bread(block 65) failed [ 283.640952][ T4742] FAT-fs (loop2): Directory bread(block 66) failed [ 283.647352][ T4742] FAT-fs (loop2): Directory bread(block 67) failed [ 283.653746][ T4742] FAT-fs (loop2): Directory bread(block 68) failed [ 283.660136][ T4742] FAT-fs (loop2): Directory bread(block 69) failed [ 283.666643][ T4742] FAT-fs (loop2): Directory bread(block 70) failed [ 283.673051][ T4742] FAT-fs (loop2): Directory bread(block 71) failed [ 283.679453][ T4742] FAT-fs (loop2): Directory bread(block 72) failed [ 283.685758][ T4742] FAT-fs (loop2): Directory bread(block 73) failed [ 283.707087][ T4742] netlink: 44 bytes leftover after parsing attributes in process `syz.2.949'. [ 283.817564][ T423] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 284.057530][ T423] usb 1-1: Using ep0 maxpacket: 32 [ 284.177713][ T423] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 284.281133][ T124] usb 2-1: USB disconnect, device number 50 [ 284.298709][ T423] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 284.307840][ T423] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 284.316311][ T423] usb 1-1: Product: syz [ 284.320647][ T423] usb 1-1: Manufacturer: syz [ 284.358156][ T423] hub 1-1:4.0: bad descriptor, ignoring hub [ 284.363967][ T423] hub: probe of 1-1:4.0 failed with error -5 [ 284.370078][ T423] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 284.777961][ T580] usb 5-1: USB disconnect, device number 53 [ 285.027590][ T124] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 285.326335][ T4770] EXT4-fs (loop4): Ignoring removed orlov option [ 285.339326][ T4770] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,errors=continue,,errors=continue [ 285.399264][ T4769] EXT4-fs error (device loop4): ext4_remount:5517: Abort forced by user [ 285.407442][ T4769] EXT4-fs (loop4): Remounting filesystem read-only [ 285.415888][ T23] audit: type=1400 audit(1719867337.824:257): avc: denied { rename } for pid=4767 comm="syz.4.954" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 285.437561][ T124] usb 3-1: Using ep0 maxpacket: 32 [ 285.748753][ T124] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.759564][ T124] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.808819][ T23] audit: type=1400 audit(1719867338.224:258): avc: denied { remount } for pid=4782 comm="syz.0.956" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 285.837781][ T535] usb 1-1: USB disconnect, device number 57 [ 285.857037][ T23] audit: type=1400 audit(1719867338.264:259): avc: denied { unmount } for pid=356 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 285.887702][ T124] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 285.896669][ T124] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 285.905166][ T124] usb 3-1: Product: syz [ 285.909570][ T124] usb 3-1: Manufacturer: syz [ 285.948650][ T124] hub 3-1:4.0: USB hub found [ 286.699388][ T124] hub 3-1:4.0: 2 ports detected [ 286.901366][ T4797] F2FS-fs (loop1): Found nat_bits in checkpoint [ 286.934456][ T4797] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 286.942248][ T23] audit: type=1400 audit(1719867339.354:260): avc: denied { mount } for pid=4795 comm="syz.1.960" name="/" dev="loop1" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 286.967590][ T580] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 286.987595][ T930] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 287.023987][ T626] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 287.217590][ T124] hub 3-1:4.0: set hub depth failed [ 287.260571][ T124] usb 3-1: USB disconnect, device number 52 [ 287.327675][ T626] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 287.327697][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.346076][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.355616][ T930] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.365466][ T580] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 287.374326][ T930] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 287.386979][ T580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.394894][ T930] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 287.404161][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.412254][ T580] usb 1-1: config 0 descriptor?? [ 287.418392][ T930] usb 5-1: config 0 descriptor?? [ 287.425769][ T626] usb 4-1: config 0 has no interfaces? [ 287.458340][ T930] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 287.507669][ T626] usb 4-1: config 0 has no interfaces? [ 287.584108][ T2774] attempt to access beyond end of device [ 287.584108][ T2774] loop1: rw=2049, want=45104, limit=40427 [ 287.587671][ T626] usb 4-1: config 0 has no interfaces? [ 287.677629][ T626] usb 4-1: config 0 has no interfaces? [ 287.757700][ T626] usb 4-1: config 0 has no interfaces? [ 287.837605][ T626] usb 4-1: config 0 has no interfaces? [ 287.917631][ T626] usb 4-1: config 0 has no interfaces? [ 287.967877][ T580] hid (null): invalid report_count -82777999 [ 287.997839][ T626] usb 4-1: config 0 has no interfaces? [ 288.003149][ T626] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 288.012198][ T626] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.022188][ T626] usb 4-1: config 0 descriptor?? [ 288.077535][ T535] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 288.197620][ T580] usb 1-1: string descriptor 0 read error: -71 [ 288.217668][ T580] uclogic 0003:256C:006D.0038: failed retrieving string descriptor #200: -71 [ 288.226435][ T580] uclogic 0003:256C:006D.0038: failed retrieving pen parameters: -71 [ 288.234401][ T580] uclogic 0003:256C:006D.0038: failed probing pen v2 parameters: -71 [ 288.242486][ T580] uclogic 0003:256C:006D.0038: failed probing parameters: -71 [ 288.249761][ T580] uclogic: probe of 0003:256C:006D.0038 failed with error -71 [ 288.258455][ T580] usb 1-1: USB disconnect, device number 58 [ 288.317602][ T535] usb 3-1: Using ep0 maxpacket: 32 [ 288.437706][ T535] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 288.448468][ T535] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 288.577672][ T535] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 288.586628][ T535] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 288.594907][ T535] usb 3-1: Product: syz [ 288.599248][ T535] usb 3-1: Manufacturer: syz [ 288.638195][ T535] hub 3-1:4.0: USB hub found [ 288.732466][ T594] usb 5-1: USB disconnect, device number 54 [ 288.743130][ T4820] FAT-fs (loop1): Directory bread(block 64) failed [ 288.757074][ T4820] FAT-fs (loop1): Directory bread(block 65) failed [ 288.764619][ T4820] FAT-fs (loop1): Directory bread(block 66) failed [ 288.771557][ T4820] FAT-fs (loop1): Directory bread(block 67) failed [ 288.778039][ T4820] FAT-fs (loop1): Directory bread(block 68) failed [ 288.784416][ T4820] FAT-fs (loop1): Directory bread(block 69) failed [ 288.790982][ T4820] FAT-fs (loop1): Directory bread(block 70) failed [ 288.797333][ T4820] FAT-fs (loop1): Directory bread(block 71) failed [ 288.803952][ T4820] FAT-fs (loop1): Directory bread(block 72) failed [ 288.810505][ T4820] FAT-fs (loop1): Directory bread(block 73) failed [ 288.857603][ T535] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 288.914658][ T4820] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 289.137543][ T594] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 289.387544][ T594] usb 5-1: Using ep0 maxpacket: 32 [ 289.507695][ T594] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.518698][ T594] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.678570][ T594] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 289.687953][ T594] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 289.698260][ T594] usb 5-1: Product: syz [ 289.702405][ T594] usb 5-1: Manufacturer: syz [ 289.748415][ T594] hub 5-1:4.0: USB hub found [ 289.762167][ T572] usb 4-1: USB disconnect, device number 45 [ 290.137614][ T594] hub 5-1:4.0: config failed, can't read hub descriptor (err -22) [ 290.257615][ T572] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 290.517101][ T580] usb 3-1: USB disconnect, device number 53 [ 290.527586][ T572] usb 4-1: Using ep0 maxpacket: 32 [ 290.657910][ T572] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 290.787640][ T572] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 290.796537][ T572] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 290.804700][ T572] usb 4-1: Product: syz [ 290.808798][ T572] usb 4-1: Manufacturer: syz [ 290.881212][ T572] hub 4-1:4.0: bad descriptor, ignoring hub [ 290.887104][ T572] hub: probe of 4-1:4.0 failed with error -5 [ 290.893295][ T572] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 291.096567][ T4856] F2FS-fs (loop1): Found nat_bits in checkpoint [ 291.134072][ T4856] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.153457][ T2774] attempt to access beyond end of device [ 291.153457][ T2774] loop1: rw=2049, want=45104, limit=40427 [ 291.888212][ T580] usb 5-1: USB disconnect, device number 55 [ 292.420251][ T4879] EXT4-fs (loop4): Ignoring removed orlov option [ 292.436942][ T4879] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,errors=continue,,errors=continue [ 292.477552][ T930] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 292.478114][ T594] usb 4-1: USB disconnect, device number 46 [ 292.505418][ T4885] FAT-fs (loop3): Directory bread(block 64) failed [ 292.519947][ T4885] FAT-fs (loop3): Directory bread(block 65) failed [ 292.526863][ T4885] FAT-fs (loop3): Directory bread(block 66) failed [ 292.537358][ T4885] FAT-fs (loop3): Directory bread(block 67) failed [ 292.552723][ T4878] EXT4-fs error (device loop4): ext4_remount:5517: Abort forced by user [ 292.559128][ T4885] FAT-fs (loop3): Directory bread(block 68) failed [ 292.560921][ T4878] EXT4-fs (loop4): Remounting filesystem read-only [ 292.567364][ T4885] FAT-fs (loop3): Directory bread(block 69) failed [ 292.596011][ T4885] FAT-fs (loop3): Directory bread(block 70) failed [ 292.603265][ T4885] FAT-fs (loop3): Directory bread(block 71) failed [ 292.615714][ T4885] FAT-fs (loop3): Directory bread(block 72) failed [ 292.623052][ T4885] FAT-fs (loop3): Directory bread(block 73) failed [ 292.656196][ T4885] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 292.793677][ T179] tipc: Left network mode [ 292.867734][ T930] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 292.887544][ T930] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 292.911903][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.928606][ T930] usb 2-1: config 0 descriptor?? [ 292.980849][ T930] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 293.038257][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.060301][ T4893] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.081841][ T4893] device bridge_slave_0 entered promiscuous mode [ 293.088389][ T594] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 293.109168][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.116200][ T4893] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.127959][ T4893] device bridge_slave_1 entered promiscuous mode [ 293.589747][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.596637][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.603763][ T4893] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.610630][ T4893] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.646870][ T626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 293.655618][ T626] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.663207][ T626] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.681783][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 293.690248][ T572] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.697085][ T572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.704884][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 293.713287][ T572] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.720148][ T572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.741684][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 293.750893][ T572] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 293.765830][ T4909] F2FS-fs (loop2): Found nat_bits in checkpoint [ 293.772713][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 293.773048][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 293.780074][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 293.782233][ T594] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 293.790897][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 293.817603][ T594] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 293.826639][ T179] device bridge_slave_1 left promiscuous mode [ 293.837594][ T594] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.857784][ T179] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.865157][ T179] device bridge_slave_0 left promiscuous mode [ 293.877633][ T179] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.889127][ T594] usb 4-1: config 0 descriptor?? [ 293.912440][ T4909] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 293.936226][ T1789] attempt to access beyond end of device [ 293.936226][ T1789] loop2: rw=2049, want=45104, limit=40427 [ 293.948263][ T594] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 294.269284][ T594] usb 2-1: USB disconnect, device number 51 [ 294.279880][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 294.288323][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 294.308811][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 294.317044][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 294.326320][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 294.334636][ T930] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 294.697560][ T580] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 294.767677][ T930] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 294.867536][ T594] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 294.977650][ T580] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 295.007544][ T930] usb 3-1: Using ep0 maxpacket: 32 [ 295.057649][ T580] usb 1-1: config 0 has no interfaces? [ 295.127589][ T594] usb 2-1: Using ep0 maxpacket: 32 [ 295.127650][ T930] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.143331][ T580] usb 1-1: config 0 has no interfaces? [ 295.148729][ T930] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.227611][ T580] usb 1-1: config 0 has no interfaces? [ 295.247666][ T594] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.258416][ T594] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.277653][ T930] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.286930][ T930] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 295.295217][ T930] usb 3-1: Product: syz [ 295.299207][ T930] usb 3-1: Manufacturer: syz [ 295.307629][ T580] usb 1-1: config 0 has no interfaces? [ 295.338155][ T930] hub 3-1:4.0: USB hub found [ 295.387690][ T580] usb 1-1: config 0 has no interfaces? [ 295.407688][ T594] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 295.416595][ T594] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 295.424876][ T594] usb 2-1: Product: syz [ 295.429019][ T594] usb 2-1: Manufacturer: syz [ 295.467731][ T580] usb 1-1: config 0 has no interfaces? [ 295.478165][ T594] hub 2-1:4.0: USB hub found [ 295.547684][ T580] usb 1-1: config 0 has no interfaces? [ 295.627663][ T580] usb 1-1: config 0 has no interfaces? [ 295.633105][ T580] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 295.642231][ T930] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 295.658881][ T580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.672918][ T580] usb 1-1: config 0 descriptor?? [ 295.691390][ T594] hub 2-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 295.948669][ T594] usb 4-1: USB disconnect, device number 47 [ 296.034484][ T4946] FAT-fs (loop3): Directory bread(block 64) failed [ 296.040992][ T4946] FAT-fs (loop3): Directory bread(block 65) failed [ 296.047389][ T4946] FAT-fs (loop3): Directory bread(block 66) failed [ 296.053751][ T4946] FAT-fs (loop3): Directory bread(block 67) failed [ 296.060059][ T4946] FAT-fs (loop3): Directory bread(block 68) failed [ 296.066383][ T4946] FAT-fs (loop3): Directory bread(block 69) failed [ 296.072755][ T4946] FAT-fs (loop3): Directory bread(block 70) failed [ 296.079065][ T4946] FAT-fs (loop3): Directory bread(block 71) failed [ 296.085353][ T4946] FAT-fs (loop3): Directory bread(block 72) failed [ 296.091715][ T4946] FAT-fs (loop3): Directory bread(block 73) failed [ 296.106865][ T4946] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 296.437580][ T580] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 296.677556][ T580] usb 4-1: Using ep0 maxpacket: 32 [ 296.797667][ T580] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 296.808457][ T580] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 296.937650][ T580] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 296.946583][ T580] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 296.954726][ T580] usb 4-1: Product: syz [ 296.958714][ T580] usb 4-1: Manufacturer: syz [ 296.998346][ T580] hub 4-1:4.0: USB hub found [ 297.127693][ T572] usb 2-1: USB disconnect, device number 52 [ 297.207608][ T580] hub 4-1:4.0: 2 ports detected [ 297.480503][ T423] usb 1-1: USB disconnect, device number 59 [ 297.637690][ T930] usb 3-1: USB disconnect, device number 54 [ 297.728091][ T580] hub 4-1:4.0: set hub depth failed [ 297.824793][ T580] usb 4-1: USB disconnect, device number 48 [ 298.255286][ T4962] F2FS-fs (loop2): Found nat_bits in checkpoint [ 298.292035][ T4962] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 298.311954][ T1789] attempt to access beyond end of device [ 298.311954][ T1789] loop2: rw=2049, want=45104, limit=40427 [ 298.424084][ T423] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 299.137657][ T423] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 299.156668][ T423] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 299.174344][ T423] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.192445][ T423] usb 2-1: config 0 descriptor?? [ 299.248414][ T423] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 299.837552][ T423] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 300.097636][ T580] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 300.117662][ T930] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 300.197627][ T423] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 300.210704][ T423] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 300.219689][ T423] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.228491][ T423] usb 1-1: config 0 descriptor?? [ 300.270765][ T423] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 300.397658][ T930] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 300.457627][ T580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.468341][ T580] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.477936][ T930] usb 5-1: config 0 has no interfaces? [ 300.483233][ T580] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 300.492029][ T580] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.517942][ T580] usb 3-1: config 0 descriptor?? [ 300.532008][ T594] usb 2-1: USB disconnect, device number 53 [ 300.557698][ T930] usb 5-1: config 0 has no interfaces? [ 300.637610][ T930] usb 5-1: config 0 has no interfaces? [ 300.717589][ T930] usb 5-1: config 0 has no interfaces? [ 300.797685][ T930] usb 5-1: config 0 has no interfaces? [ 300.860267][ T5013] F2FS-fs (loop1): Found nat_bits in checkpoint [ 300.877662][ T930] usb 5-1: config 0 has no interfaces? [ 300.897684][ T5013] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 300.920755][ T2774] attempt to access beyond end of device [ 300.920755][ T2774] loop1: rw=2049, want=45104, limit=40427 [ 300.957624][ T930] usb 5-1: config 0 has no interfaces? [ 301.037683][ T930] usb 5-1: config 0 has no interfaces? [ 301.043060][ T930] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 301.052120][ T930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 301.060861][ T930] usb 5-1: config 0 descriptor?? [ 301.247950][ T580] hid (null): invalid report_count -82777999 [ 301.507611][ T580] usb 3-1: string descriptor 0 read error: -71 [ 301.527619][ T580] uclogic 0003:256C:006D.0039: failed retrieving string descriptor #200: -71 [ 301.536289][ T580] uclogic 0003:256C:006D.0039: failed retrieving pen parameters: -71 [ 301.544138][ T580] uclogic 0003:256C:006D.0039: failed probing pen v2 parameters: -71 [ 301.552053][ T580] uclogic 0003:256C:006D.0039: failed probing parameters: -71 [ 301.559554][ T580] uclogic: probe of 0003:256C:006D.0039 failed with error -71 [ 301.568354][ T580] usb 3-1: USB disconnect, device number 55 [ 301.637538][ T930] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 301.877543][ T930] usb 2-1: Using ep0 maxpacket: 32 [ 302.060850][ T930] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 302.074697][ T930] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.283306][ T930] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 302.316180][ T930] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 302.378567][ T930] usb 2-1: Product: syz [ 302.404037][ T930] usb 2-1: Manufacturer: syz [ 302.407685][ T572] usb 1-1: USB disconnect, device number 60 [ 303.150771][ T930] hub 2-1:4.0: USB hub found [ 303.232277][ T535] usb 5-1: USB disconnect, device number 56 [ 303.301087][ T930] hub 2-1:4.0: 2 ports detected [ 303.803815][ T5025] tipc: Enabled bearer , priority 0 [ 303.845539][ T5025] €Â: renamed from syzkaller0 [ 303.877518][ T5025] tipc: Disabling bearer [ 303.947572][ T930] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 303.954014][ T930] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 303.997870][ T930] usb 2-1: USB disconnect, device number 54 [ 304.117540][ T572] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 304.357579][ T572] usb 1-1: Using ep0 maxpacket: 32 [ 304.478858][ T572] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.489703][ T572] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 304.557564][ T930] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 304.617610][ T572] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 304.626689][ T572] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 304.634962][ T572] usb 1-1: Product: syz [ 304.639086][ T572] usb 1-1: Manufacturer: syz [ 304.678646][ T572] hub 1-1:4.0: USB hub found [ 304.847520][ T930] usb 5-1: Using ep0 maxpacket: 32 [ 304.887618][ T572] hub 1-1:4.0: 2 ports detected [ 304.967597][ T930] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 304.981495][ T930] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.107724][ T930] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 305.117274][ T930] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 305.129223][ T930] usb 5-1: Product: syz [ 305.133256][ T930] usb 5-1: Manufacturer: syz [ 305.250707][ T930] hub 5-1:4.0: USB hub found [ 305.867623][ T930] hub 5-1:4.0: 2 ports detected [ 305.873729][ T5049] tipc: Started in network mode [ 305.883970][ T5049] tipc: Own node identity 265fb9dfd9b9, cluster identity 4711 [ 305.892220][ T5049] tipc: Enabled bearer , priority 0 [ 305.900265][ T5049] €Â: renamed from syzkaller0 [ 305.906466][ T5049] tipc: Disabling bearer [ 305.987635][ T572] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 305.993788][ T572] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 306.027929][ T572] usb 1-1: USB disconnect, device number 61 [ 306.147695][ T121] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 306.341192][ T5064] tipc: Enabled bearer , priority 0 [ 306.348080][ T5064] €Â: renamed from syzkaller0 [ 306.353392][ T5064] tipc: Disabling bearer [ 306.387687][ T930] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 306.394015][ T930] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 306.428131][ T930] usb 5-1: USB disconnect, device number 57 [ 306.439096][ T4353] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 306.517613][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.528396][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.538002][ T121] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 306.546823][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.555517][ T121] usb 2-1: config 0 descriptor?? [ 306.797679][ T4353] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.807340][ T4353] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 306.827302][ T4353] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.836129][ T4353] usb 3-1: config 0 descriptor?? [ 306.878490][ T4353] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 306.937716][ T930] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 307.121832][ T5098] F2FS-fs (loop4): Found nat_bits in checkpoint [ 307.155716][ T5098] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 307.174957][ T356] attempt to access beyond end of device [ 307.174957][ T356] loop4: rw=2049, want=45104, limit=40427 [ 307.287973][ T121] hid (null): invalid report_count -82777999 [ 307.317725][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.328781][ T930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.338513][ T930] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 307.347378][ T930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.356455][ T930] usb 1-1: config 0 descriptor?? [ 307.527704][ T121] usb 2-1: string descriptor 0 read error: -71 [ 307.547653][ T121] uclogic 0003:256C:006D.003A: failed retrieving string descriptor #200: -71 [ 307.556292][ T121] uclogic 0003:256C:006D.003A: failed retrieving pen parameters: -71 [ 307.564216][ T121] uclogic 0003:256C:006D.003A: failed probing pen v2 parameters: -71 [ 307.572127][ T121] uclogic 0003:256C:006D.003A: failed probing parameters: -71 [ 307.579429][ T121] uclogic: probe of 0003:256C:006D.003A failed with error -71 [ 307.587918][ T121] usb 2-1: USB disconnect, device number 55 [ 307.679994][ T535] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 308.078036][ T930] hid (null): invalid report_count -82777999 [ 308.137557][ T535] usb 5-1: device descriptor read/64, error 18 [ 308.317863][ T930] usb 1-1: string descriptor 0 read error: -71 [ 308.337775][ T930] uclogic 0003:256C:006D.003B: failed retrieving string descriptor #200: -71 [ 308.346796][ T930] uclogic 0003:256C:006D.003B: failed retrieving pen parameters: -71 [ 308.356364][ T930] uclogic 0003:256C:006D.003B: failed probing pen v2 parameters: -71 [ 308.365786][ T930] uclogic 0003:256C:006D.003B: failed probing parameters: -71 [ 308.374342][ T930] uclogic: probe of 0003:256C:006D.003B failed with error -71 [ 308.395881][ T930] usb 1-1: USB disconnect, device number 62 [ 308.607569][ T535] usb 5-1: device descriptor read/64, error 18 [ 308.877550][ T535] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 309.102471][ T930] usb 3-1: USB disconnect, device number 56 [ 309.388611][ T535] usb 5-1: device descriptor read/64, error 18 [ 310.207532][ T121] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 310.227573][ T535] usb 5-1: device descriptor read/64, error 18 [ 310.354684][ T535] usb usb5-port1: attempt power cycle [ 310.574410][ T121] usb 4-1: Using ep0 maxpacket: 32 [ 310.777600][ T121] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.789522][ T121] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.917634][ T121] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 310.926509][ T121] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 310.934726][ T121] usb 4-1: Product: syz [ 310.938684][ T121] usb 4-1: Manufacturer: syz [ 310.978192][ T121] hub 4-1:4.0: USB hub found [ 311.197609][ T121] hub 4-1:4.0: 2 ports detected [ 311.217551][ T535] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 311.307674][ T535] usb 5-1: Using ep0 maxpacket: 32 [ 311.427695][ T535] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.438631][ T535] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.448214][ T626] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 311.482658][ T5141] tipc: Enabled bearer , priority 0 [ 311.489162][ T930] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 311.490770][ T5141] €Â: renamed from syzkaller0 [ 311.501981][ T5141] tipc: Disabling bearer [ 311.537593][ T121] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 311.543799][ T121] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 311.567662][ T535] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 311.576691][ T535] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 311.585387][ T121] usb 4-1: USB disconnect, device number 49 [ 311.591973][ T535] usb 5-1: Product: syz [ 311.595937][ T535] usb 5-1: Manufacturer: syz [ 311.638274][ T535] hub 5-1:4.0: USB hub found [ 311.777671][ T930] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 311.807599][ T626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 311.818398][ T626] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.828065][ T626] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 311.836925][ T626] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 311.845727][ T626] usb 2-1: config 0 descriptor?? [ 311.857662][ T930] usb 3-1: config 0 has no interfaces? [ 311.857667][ T535] hub 5-1:4.0: 2 ports detected [ 311.947658][ T930] usb 3-1: config 0 has no interfaces? [ 311.987811][ T13] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 312.027642][ T930] usb 3-1: config 0 has no interfaces? [ 312.107652][ T930] usb 3-1: config 0 has no interfaces? [ 312.141443][ T5152] tipc: Enabled bearer , priority 0 [ 312.148694][ T5152] €Â: renamed from syzkaller0 [ 312.154037][ T5152] tipc: Disabling bearer [ 312.177619][ T535] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 312.183880][ T535] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 312.197682][ T930] usb 3-1: config 0 has no interfaces? [ 312.218004][ T535] usb 5-1: USB disconnect, device number 60 [ 312.277628][ T930] usb 3-1: config 0 has no interfaces? [ 312.347653][ T13] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.357280][ T13] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 312.366247][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.367616][ T930] usb 3-1: config 0 has no interfaces? [ 312.375354][ T13] usb 1-1: config 0 descriptor?? [ 312.380083][ T4353] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 312.428401][ T13] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 312.467647][ T930] usb 3-1: config 0 has no interfaces? [ 312.472989][ T930] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 312.482156][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.490920][ T930] usb 3-1: config 0 descriptor?? [ 312.577926][ T626] hid (null): invalid report_count -82777999 [ 312.627523][ T4353] usb 4-1: Using ep0 maxpacket: 32 [ 312.747680][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.758436][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.767945][ T4353] usb 4-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 312.776889][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.851694][ T4353] usb 4-1: config 0 descriptor?? [ 313.057635][ T626] usb 2-1: string descriptor 0 read error: -71 [ 313.077614][ T626] uclogic 0003:256C:006D.003C: failed retrieving string descriptor #200: -71 [ 313.086425][ T626] uclogic 0003:256C:006D.003C: failed retrieving pen parameters: -71 [ 313.095325][ T626] uclogic 0003:256C:006D.003C: failed probing pen v2 parameters: -71 [ 313.096380][ T23] audit: type=1400 audit(1719867365.504:261): avc: denied { bind } for pid=5170 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 313.103735][ T626] uclogic 0003:256C:006D.003C: failed probing parameters: -71 [ 313.129858][ T626] uclogic: probe of 0003:256C:006D.003C failed with error -71 [ 313.138662][ T626] usb 2-1: USB disconnect, device number 56 [ 313.358997][ T4353] apple 0003:05AC:022B.003D: unknown main item tag 0x0 [ 313.365822][ T4353] apple 0003:05AC:022B.003D: unknown main item tag 0x0 [ 313.373100][ T4353] apple 0003:05AC:022B.003D: unknown main item tag 0x0 [ 313.379835][ T4353] apple 0003:05AC:022B.003D: unknown main item tag 0x0 [ 313.387968][ T4353] apple 0003:05AC:022B.003D: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.3-1/input0 [ 313.568514][ T535] usb 4-1: USB disconnect, device number 50 [ 313.687565][ T626] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 313.947534][ T626] usb 2-1: Using ep0 maxpacket: 32 [ 314.067652][ T626] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.078456][ T626] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 314.207699][ T626] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 314.216570][ T626] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 314.224765][ T626] usb 2-1: Product: syz [ 314.229124][ T626] usb 2-1: Manufacturer: syz [ 314.268217][ T626] hub 2-1:4.0: USB hub found [ 314.299285][ T930] usb 3-1: USB disconnect, device number 57 [ 314.472230][ T23] audit: type=1400 audit(1719867366.884:262): avc: denied { write } for pid=5191 comm="syz.3.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 314.497603][ T626] hub 2-1:4.0: 2 ports detected [ 314.728617][ T930] usb 1-1: USB disconnect, device number 63 [ 315.657640][ T626] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 315.663846][ T626] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 315.735190][ T626] usb 2-1: USB disconnect, device number 57 [ 316.357546][ T930] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 316.887555][ T343] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 316.897684][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 316.907464][ T930] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 316.916447][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.925193][ T930] usb 3-1: config 0 descriptor?? [ 316.967604][ T4353] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 316.975782][ T930] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 317.127554][ T343] usb 4-1: Using ep0 maxpacket: 32 [ 317.247677][ T343] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.258533][ T4353] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 317.266087][ T343] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.367672][ T4353] usb 2-1: config 0 has no interfaces? [ 317.407679][ T343] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 317.416823][ T343] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 317.425124][ T343] usb 4-1: Product: syz [ 317.429140][ T343] usb 4-1: Manufacturer: syz [ 317.447695][ T4353] usb 2-1: config 0 has no interfaces? [ 317.502723][ T343] hub 4-1:4.0: USB hub found [ 317.547723][ T4353] usb 2-1: config 0 has no interfaces? [ 317.627652][ T4353] usb 2-1: config 0 has no interfaces? [ 317.637584][ T626] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 317.687691][ T343] hub 4-1:4.0: 2 ports detected [ 317.707818][ T4353] usb 2-1: config 0 has no interfaces? [ 317.777571][ T594] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 317.787733][ T4353] usb 2-1: config 0 has no interfaces? [ 317.867653][ T4353] usb 2-1: config 0 has no interfaces? [ 317.917657][ T626] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 317.957726][ T4353] usb 2-1: config 0 has no interfaces? [ 317.963089][ T4353] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 317.972066][ T4353] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.981612][ T4353] usb 2-1: config 0 descriptor?? [ 317.987866][ T5229] tipc: Enabled bearer , priority 0 [ 317.994498][ T5229] €Â: renamed from syzkaller0 [ 318.000022][ T5229] tipc: Disabling bearer [ 318.007849][ T626] usb 1-1: config 0 has no interfaces? [ 318.017549][ T594] usb 5-1: Using ep0 maxpacket: 32 [ 318.017737][ T343] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 318.029394][ T343] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 318.068101][ T343] usb 4-1: USB disconnect, device number 51 [ 318.097761][ T626] usb 1-1: config 0 has no interfaces? [ 318.137696][ T594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.148556][ T594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.158240][ T594] usb 5-1: New USB device found, idVendor=05ac, idProduct=022b, bcdDevice= 0.00 [ 318.167014][ T594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.175826][ T594] usb 5-1: config 0 descriptor?? [ 318.187704][ T626] usb 1-1: config 0 has no interfaces? [ 318.241911][ T535] usb 3-1: USB disconnect, device number 58 [ 318.267675][ T626] usb 1-1: config 0 has no interfaces? [ 318.347638][ T626] usb 1-1: config 0 has no interfaces? [ 318.427647][ T626] usb 1-1: config 0 has no interfaces? [ 318.507640][ T626] usb 1-1: config 0 has no interfaces? [ 318.587627][ T626] usb 1-1: config 0 has no interfaces? [ 318.593034][ T626] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 318.602211][ T626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.614062][ T626] usb 1-1: config 0 descriptor?? [ 318.647542][ T535] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 318.658942][ T594] apple 0003:05AC:022B.003E: unknown main item tag 0x0 [ 318.665633][ T594] apple 0003:05AC:022B.003E: unknown main item tag 0x0 [ 318.673130][ T594] apple 0003:05AC:022B.003E: unknown main item tag 0x0 [ 318.679936][ T594] apple 0003:05AC:022B.003E: unknown main item tag 0x0 [ 318.687999][ T594] apple 0003:05AC:022B.003E: hidraw0: USB HID v0.00 Device [HID 05ac:022b] on usb-dummy_hcd.4-1/input0 [ 318.864424][ T594] usb 5-1: USB disconnect, device number 61 [ 318.887589][ T535] usb 3-1: Using ep0 maxpacket: 32 [ 319.007696][ T535] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 319.018557][ T535] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 319.147636][ T535] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 319.156580][ T535] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 319.164808][ T535] usb 3-1: Product: syz [ 319.168944][ T535] usb 3-1: Manufacturer: syz [ 319.208123][ T535] hub 3-1:4.0: USB hub found [ 319.427716][ T535] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 319.682638][ T343] usb 1-1: USB disconnect, device number 64 [ 319.725294][ T4353] usb 2-1: USB disconnect, device number 58 [ 320.757563][ T535] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 320.816735][ T4353] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 320.828483][ T343] usb 3-1: USB disconnect, device number 59 [ 321.134465][ T535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.166111][ T535] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 321.177932][ T4353] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.195984][ T4353] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 321.208399][ T535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.306537][ T535] usb 1-1: config 0 descriptor?? [ 321.313456][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.328925][ T4353] usb 4-1: config 0 descriptor?? [ 321.348272][ T535] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 321.368181][ T4353] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 321.849440][ T580] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 322.207633][ T580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.218546][ T580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 322.228078][ T580] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 322.236892][ T580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 322.245583][ T580] usb 5-1: config 0 descriptor?? [ 322.669360][ T594] usb 4-1: USB disconnect, device number 52 [ 322.899739][ T580] hid (null): bogus close delimiter [ 323.357795][ T580] usb 5-1: string descriptor 0 read error: -71 [ 323.377624][ T580] uclogic 0003:256C:006D.003F: failed retrieving string descriptor #200: -71 [ 323.386318][ T580] uclogic 0003:256C:006D.003F: failed retrieving pen parameters: -71 [ 323.394192][ T580] uclogic 0003:256C:006D.003F: failed probing pen v2 parameters: -71 [ 323.402157][ T580] uclogic 0003:256C:006D.003F: failed probing parameters: -71 [ 323.409547][ T580] uclogic: probe of 0003:256C:006D.003F failed with error -71 [ 323.418264][ T580] usb 5-1: USB disconnect, device number 62 [ 323.479702][ T4353] usb 1-1: USB disconnect, device number 65 [ 323.507626][ T930] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 324.037603][ T930] usb 2-1: too many configurations: 65, using maximum allowed: 8 [ 324.097870][ T580] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 324.117622][ T930] usb 2-1: config 0 has no interfaces? [ 324.197724][ T930] usb 2-1: config 0 has no interfaces? [ 324.287869][ T930] usb 2-1: config 0 has no interfaces? [ 324.464178][ T930] usb 2-1: config 0 has no interfaces? [ 324.469778][ T580] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 324.577956][ T930] usb 2-1: config 0 has no interfaces? [ 324.627760][ T580] usb 4-1: config 0 has no interfaces? [ 324.657797][ T930] usb 2-1: config 0 has no interfaces? [ 324.707563][ T580] usb 4-1: config 0 has no interfaces? [ 324.737558][ T930] usb 2-1: config 0 has no interfaces? [ 324.787676][ T580] usb 4-1: config 0 has no interfaces? [ 324.817598][ T930] usb 2-1: config 0 has no interfaces? [ 324.823180][ T930] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 324.832565][ T930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.841295][ T930] usb 2-1: config 0 descriptor?? [ 325.145476][ T580] usb 4-1: config 0 has no interfaces? [ 325.163767][ T5343] FAT-fs (loop4): Directory bread(block 64) failed [ 325.170320][ T5343] FAT-fs (loop4): Directory bread(block 65) failed [ 325.176747][ T5343] FAT-fs (loop4): Directory bread(block 66) failed [ 325.183543][ T5343] FAT-fs (loop4): Directory bread(block 67) failed [ 325.190321][ T5343] FAT-fs (loop4): Directory bread(block 68) failed [ 325.196770][ T5343] FAT-fs (loop4): Directory bread(block 69) failed [ 325.203494][ T5343] FAT-fs (loop4): Directory bread(block 70) failed [ 325.210217][ T5343] FAT-fs (loop4): Directory bread(block 71) failed [ 325.216648][ T5343] FAT-fs (loop4): Directory bread(block 72) failed [ 325.223304][ T5343] FAT-fs (loop4): Directory bread(block 73) failed [ 325.229895][ T580] usb 4-1: config 0 has no interfaces? [ 325.246308][ T5343] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 325.307598][ T580] usb 4-1: config 0 has no interfaces? [ 325.387595][ T580] usb 4-1: config 0 has no interfaces? [ 325.467621][ T580] usb 4-1: config 0 has no interfaces? [ 325.472978][ T580] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 325.482099][ T580] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.490860][ T580] usb 4-1: config 0 descriptor?? [ 325.587570][ T930] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 325.677544][ T594] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 326.037536][ T930] usb 5-1: Using ep0 maxpacket: 32 [ 326.067731][ T594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.078721][ T594] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 326.088316][ T594] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 326.097277][ T594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.106071][ T594] usb 1-1: config 0 descriptor?? [ 326.167642][ T930] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 326.177688][ T930] usb 5-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 326.297683][ T930] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 326.306596][ T930] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 326.314739][ T930] usb 5-1: Product: syz [ 326.319033][ T930] usb 5-1: Manufacturer: syz [ 326.325357][ T13] usb 2-1: USB disconnect, device number 59 [ 326.727959][ T594] hid (null): invalid report_count -82777999 [ 326.957557][ T535] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 326.969751][ T594] usb 1-1: string descriptor 0 read error: -71 [ 326.987675][ T594] uclogic 0003:256C:006D.0040: failed retrieving string descriptor #200: -71 [ 326.996321][ T594] uclogic 0003:256C:006D.0040: failed retrieving pen parameters: -71 [ 327.004492][ T594] uclogic 0003:256C:006D.0040: failed probing pen v2 parameters: -71 [ 327.012479][ T594] uclogic 0003:256C:006D.0040: failed probing parameters: -71 [ 327.019786][ T594] uclogic: probe of 0003:256C:006D.0040 failed with error -71 [ 327.029526][ T594] usb 1-1: USB disconnect, device number 66 [ 327.031767][ T930] usb 4-1: USB disconnect, device number 53 [ 327.327784][ T535] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.337937][ T535] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 327.346895][ T535] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.915835][ T535] usb 3-1: config 0 descriptor?? [ 327.946262][ T121] usb 5-1: USB disconnect, device number 63 [ 327.958426][ T535] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 329.392986][ T5404] F2FS-fs (loop1): Found nat_bits in checkpoint [ 329.432100][ T5404] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 329.546091][ T2774] attempt to access beyond end of device [ 329.546091][ T2774] loop1: rw=2049, want=45104, limit=40427 [ 329.794494][ T13] usb 3-1: USB disconnect, device number 60 [ 329.997615][ T535] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 330.170995][ T121] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 330.397542][ T535] usb 1-1: Using ep0 maxpacket: 32 [ 330.487624][ T121] usb 5-1: too many configurations: 65, using maximum allowed: 8 [ 330.517666][ T535] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.528713][ T535] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.567624][ T121] usb 5-1: config 0 has no interfaces? [ 330.617602][ T13] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 330.647821][ T121] usb 5-1: config 0 has no interfaces? [ 330.658772][ T535] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 330.668079][ T535] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 330.676236][ T535] usb 1-1: Product: syz [ 330.680737][ T535] usb 1-1: Manufacturer: syz [ 330.718289][ T535] hub 1-1:4.0: USB hub found [ 330.727859][ T121] usb 5-1: config 0 has no interfaces? [ 330.807650][ T121] usb 5-1: config 0 has no interfaces? [ 330.887748][ T121] usb 5-1: config 0 has no interfaces? [ 330.937678][ T535] hub 1-1:4.0: 2 ports detected [ 330.947611][ T930] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 330.967653][ T121] usb 5-1: config 0 has no interfaces? [ 330.987581][ T343] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 330.987628][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.005734][ T13] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.015317][ T13] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 331.024224][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.032822][ T13] usb 4-1: config 0 descriptor?? [ 331.047633][ T121] usb 5-1: config 0 has no interfaces? [ 331.127600][ T121] usb 5-1: config 0 has no interfaces? [ 331.132973][ T121] usb 5-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 331.142071][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.150838][ T121] usb 5-1: config 0 descriptor?? [ 331.207542][ T930] usb 2-1: Using ep0 maxpacket: 32 [ 331.220999][ T5412] tipc: Enabled bearer , priority 0 [ 331.227895][ T5412] €Â: renamed from syzkaller0 [ 331.233174][ T5412] tipc: Disabling bearer [ 331.247638][ T343] usb 3-1: Using ep0 maxpacket: 32 [ 331.327775][ T930] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 331.337951][ T930] usb 2-1: config 4 has 0 interfaces, different from the descriptor's value: 1 [ 331.367656][ T343] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 331.378566][ T343] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 331.457646][ T930] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 331.466581][ T930] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 331.474906][ T930] usb 2-1: Product: syz [ 331.480014][ T930] usb 2-1: Manufacturer: syz [ 331.507661][ T343] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 331.507781][ T535] hub 1-1:4.0: set hub depth failed [ 331.516626][ T343] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 331.530425][ T343] usb 3-1: Product: syz [ 331.534443][ T343] usb 3-1: Manufacturer: syz [ 331.547969][ T13] hid (null): invalid report_count -82777999 [ 331.570715][ T535] usb 1-1: USB disconnect, device number 67 [ 331.578378][ T343] hub 3-1:4.0: USB hub found [ 331.777630][ T13] usb 4-1: string descriptor 0 read error: -71 [ 331.797628][ T343] hub 3-1:4.0: 2 ports detected [ 331.797636][ T13] uclogic 0003:256C:006D.0041: failed retrieving string descriptor #200: -71 [ 331.797659][ T13] uclogic 0003:256C:006D.0041: failed retrieving pen parameters: -71 [ 331.819235][ T13] uclogic 0003:256C:006D.0041: failed probing pen v2 parameters: -71 [ 331.827112][ T13] uclogic 0003:256C:006D.0041: failed probing parameters: -71 [ 331.834571][ T13] uclogic: probe of 0003:256C:006D.0041 failed with error -71 [ 331.843307][ T13] usb 4-1: USB disconnect, device number 54 [ 332.109280][ T5434] tipc: Enabling of bearer rejected, failed to enable media [ 332.127791][ T343] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 332.134049][ T343] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 332.178179][ T343] usb 3-1: USB disconnect, device number 61 [ 332.291822][ T5445] FAT-fs (loop3): Directory bread(block 64) failed [ 332.299042][ T5445] FAT-fs (loop3): Directory bread(block 65) failed [ 332.305415][ T5445] FAT-fs (loop3): Directory bread(block 66) failed [ 332.312047][ T5445] FAT-fs (loop3): Directory bread(block 67) failed [ 332.318575][ T5445] FAT-fs (loop3): Directory bread(block 68) failed [ 332.326264][ T5445] FAT-fs (loop3): Directory bread(block 69) failed [ 332.332950][ T5445] FAT-fs (loop3): Directory bread(block 70) failed [ 332.339568][ T5445] FAT-fs (loop3): Directory bread(block 71) failed [ 332.345922][ T5445] FAT-fs (loop3): Directory bread(block 72) failed [ 332.352500][ T5445] FAT-fs (loop3): Directory bread(block 73) failed [ 332.373542][ T5445] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 332.761149][ T5449] F2FS-fs (loop3): Found nat_bits in checkpoint [ 332.790606][ T535] usb 5-1: USB disconnect, device number 64 [ 332.798893][ T13] usb 2-1: USB disconnect, device number 60 [ 333.070197][ T5449] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 333.840279][ T3950] attempt to access beyond end of device [ 333.840279][ T3950] loop3: rw=2049, want=45104, limit=40427 [ 334.062140][ T13] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 334.557879][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 334.569622][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.318614][ T13] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 335.327552][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.336349][ T13] usb 2-1: config 0 descriptor?? [ 335.434231][ T5497] FAT-fs (loop3): Directory bread(block 64) failed [ 335.440706][ T5497] FAT-fs (loop3): Directory bread(block 65) failed [ 335.447101][ T5497] FAT-fs (loop3): Directory bread(block 66) failed [ 335.454416][ T5497] FAT-fs (loop3): Directory bread(block 67) failed [ 335.461386][ T5497] FAT-fs (loop3): Directory bread(block 68) failed [ 335.468219][ T5497] FAT-fs (loop3): Directory bread(block 69) failed [ 335.474939][ T5497] FAT-fs (loop3): Directory bread(block 70) failed [ 335.481377][ T5497] FAT-fs (loop3): Directory bread(block 71) failed [ 335.487786][ T5497] FAT-fs (loop3): Directory bread(block 72) failed [ 335.494142][ T5497] FAT-fs (loop3): Directory bread(block 73) failed [ 335.508381][ T5497] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 335.647575][ T580] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 335.657582][ T930] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 335.828102][ T13] hid (null): bogus close delimiter [ 335.857573][ T121] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 335.887543][ T580] usb 5-1: Using ep0 maxpacket: 32 [ 335.897741][ T930] usb 3-1: Using ep0 maxpacket: 32 [ 336.007612][ T580] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.018424][ T930] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.029131][ T580] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.038678][ T930] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.147722][ T121] usb 4-1: too many configurations: 65, using maximum allowed: 8 [ 336.167620][ T580] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.176478][ T580] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 336.184727][ T580] usb 5-1: Product: syz [ 336.188624][ T580] usb 5-1: Manufacturer: syz [ 336.197619][ T930] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 336.206490][ T930] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 336.215603][ T930] usb 3-1: Product: syz [ 336.219610][ T930] usb 3-1: Manufacturer: syz [ 336.227621][ T121] usb 4-1: config 0 has no interfaces? [ 336.228378][ T580] hub 5-1:4.0: USB hub found [ 336.258138][ T930] hub 3-1:4.0: USB hub found [ 336.277655][ T13] usb 2-1: string descriptor 0 read error: -71 [ 336.297610][ T13] uclogic 0003:256C:006D.0042: failed retrieving string descriptor #200: -71 [ 336.306236][ T13] uclogic 0003:256C:006D.0042: failed retrieving pen parameters: -71 [ 336.314343][ T121] usb 4-1: config 0 has no interfaces? [ 336.319672][ T13] uclogic 0003:256C:006D.0042: failed probing pen v2 parameters: -71 [ 336.327564][ T13] uclogic 0003:256C:006D.0042: failed probing parameters: -71 [ 336.334848][ T13] uclogic: probe of 0003:256C:006D.0042 failed with error -71 [ 336.344353][ T13] usb 2-1: USB disconnect, device number 61 [ 336.397607][ T121] usb 4-1: config 0 has no interfaces? [ 336.437591][ T535] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 336.447642][ T580] hub 5-1:4.0: 2 ports detected [ 336.467773][ T930] hub 3-1:4.0: 2 ports detected [ 336.477723][ T121] usb 4-1: config 0 has no interfaces? [ 336.557721][ T121] usb 4-1: config 0 has no interfaces? [ 336.637590][ T121] usb 4-1: config 0 has no interfaces? [ 336.717631][ T535] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 336.725284][ T121] usb 4-1: config 0 has no interfaces? [ 336.741108][ T5495] tipc: Enabled bearer , priority 0 [ 336.747821][ T5495] €Â: renamed from syzkaller0 [ 336.753063][ T5495] tipc: Disabling bearer [ 336.797603][ T535] usb 1-1: config 0 has no interfaces? [ 336.807809][ T121] usb 4-1: config 0 has no interfaces? [ 336.811476][ T5500] tipc: Enabling of bearer rejected, failed to enable media [ 336.813585][ T121] usb 4-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 336.831807][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.837631][ T930] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 336.840817][ T121] usb 4-1: config 0 descriptor?? [ 336.846254][ T930] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 336.877588][ T535] usb 1-1: config 0 has no interfaces? [ 336.939041][ T930] usb 3-1: USB disconnect, device number 62 [ 336.957606][ T535] usb 1-1: config 0 has no interfaces? [ 337.255576][ T535] usb 1-1: config 0 has no interfaces? [ 337.307577][ T580] hub 5-1:4.0: set hub depth failed [ 337.337594][ T535] usb 1-1: config 0 has no interfaces? [ 337.352068][ T580] usb 5-1: USB disconnect, device number 65 [ 337.427577][ T535] usb 1-1: config 0 has no interfaces? [ 337.512010][ T535] usb 1-1: config 0 has no interfaces? [ 337.592590][ T535] usb 1-1: config 0 has no interfaces? [ 337.597999][ T535] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 337.876214][ T535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.996715][ T535] usb 1-1: config 0 descriptor?? [ 338.473282][ T5524] F2FS-fs (loop4): Found nat_bits in checkpoint [ 338.517370][ T5524] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 338.639523][ T535] usb 4-1: USB disconnect, device number 55 [ 338.716985][ T23] audit: type=1400 audit(1719867391.124:263): avc: denied { setopt } for pid=5539 comm="syz.1.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 338.765618][ T376] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.772775][ T5540] Bluetooth: hci0: Frame reassembly failed (-84) [ 338.892171][ T356] attempt to access beyond end of device [ 338.892171][ T356] loop4: rw=2049, want=45104, limit=40427 [ 339.137545][ T535] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 339.471347][ T5550] FAT-fs (loop2): Directory bread(block 64) failed [ 339.477790][ T5550] FAT-fs (loop2): Directory bread(block 65) failed [ 339.484207][ T5550] FAT-fs (loop2): Directory bread(block 66) failed [ 339.490608][ T5550] FAT-fs (loop2): Directory bread(block 67) failed [ 339.497023][ T5550] FAT-fs (loop2): Directory bread(block 68) failed [ 339.503374][ T5550] FAT-fs (loop2): Directory bread(block 69) failed [ 339.511175][ T594] usb 1-1: USB disconnect, device number 68 [ 339.517190][ T5550] FAT-fs (loop2): Directory bread(block 70) failed [ 339.524131][ T5550] FAT-fs (loop2): Directory bread(block 71) failed [ 339.530824][ T5550] FAT-fs (loop2): Directory bread(block 72) failed [ 339.537151][ T5550] FAT-fs (loop2): Directory bread(block 73) failed [ 339.556627][ T5550] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 339.747757][ T535] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.759150][ T535] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.771749][ T535] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 339.815704][ T535] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.841096][ T535] usb 4-1: config 0 descriptor?? [ 340.317871][ T535] hid (null): bogus close delimiter [ 340.327548][ T343] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 340.577522][ T343] usb 5-1: Using ep0 maxpacket: 32 [ 340.787573][ T594] Bluetooth: hci0: command 0x1003 tx timeout [ 340.794586][ T2663] Bluetooth: hci0: sending frame failed (-49) [ 340.807765][ T535] usb 4-1: string descriptor 0 read error: -71 [ 340.827771][ T535] uclogic 0003:256C:006D.0043: failed retrieving string descriptor #200: -71 [ 340.837334][ T535] uclogic 0003:256C:006D.0043: failed retrieving pen parameters: -71 [ 340.846818][ T535] uclogic 0003:256C:006D.0043: failed probing pen v2 parameters: -71 [ 340.856357][ T535] uclogic 0003:256C:006D.0043: failed probing parameters: -71 [ 340.860233][ T580] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 340.864099][ T535] uclogic: probe of 0003:256C:006D.0043 failed with error -71 [ 340.880310][ T535] usb 4-1: USB disconnect, device number 56 [ 340.907683][ T343] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.918589][ T343] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.067817][ T343] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 341.076920][ T343] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 341.085089][ T343] usb 5-1: Product: syz [ 341.089154][ T343] usb 5-1: Manufacturer: syz [ 341.128448][ T343] hub 5-1:4.0: USB hub found [ 341.237636][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.248751][ T580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.258347][ T580] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 341.267185][ T580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.276033][ T580] usb 1-1: config 0 descriptor?? [ 341.347671][ T343] hub 5-1:4.0: 2 ports detected [ 341.567580][ T930] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 341.771032][ T580] hid (null): bogus close delimiter [ 341.839161][ T5567] tipc: Enabling of bearer rejected, failed to enable media [ 341.857599][ T343] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 341.863954][ T343] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 341.897914][ T343] usb 5-1: USB disconnect, device number 66 [ 341.967636][ T580] usb 1-1: string descriptor 0 read error: -22 [ 341.977589][ T930] usb 4-1: Using ep0 maxpacket: 32 [ 342.097748][ T930] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 342.108708][ T930] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 342.189949][ T580] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0044/input/input39 [ 342.202860][ T23] audit: type=1400 audit(1719867394.624:264): avc: denied { read } for pid=147 comm="acpid" name="event3" dev="devtmpfs" ino=43870 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.204489][ T580] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0044/input/input40 [ 342.233205][ T23] audit: type=1400 audit(1719867394.624:265): avc: denied { open } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=43870 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.245244][ T930] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 342.269440][ T23] audit: type=1400 audit(1719867394.684:266): avc: denied { ioctl } for pid=147 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=43870 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.269796][ T930] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 342.342830][ T930] usb 4-1: Product: syz [ 342.347177][ T930] usb 4-1: Manufacturer: syz [ 342.358414][ T580] uclogic 0003:256C:006D.0044: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 342.392989][ T580] usb 1-1: USB disconnect, device number 69 [ 342.418165][ T930] hub 4-1:4.0: USB hub found [ 342.579216][ T5586] F2FS-fs (loop2): Found nat_bits in checkpoint [ 342.613438][ T5586] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 342.637629][ T930] hub 4-1:4.0: 2 ports detected [ 342.867715][ T13] Bluetooth: hci0: command 0x1001 tx timeout [ 342.873708][ T2663] Bluetooth: hci0: sending frame failed (-49) [ 342.912547][ T5577] tipc: Enabled bearer , priority 0 [ 342.923986][ T5577] €Â: renamed from syzkaller0 [ 342.933308][ T5577] tipc: Disabling bearer [ 342.940043][ T5600] capability: warning: `syz.0.1140' uses 32-bit capabilities (legacy support in use) [ 342.956959][ T23] audit: type=1400 audit(1719867395.364:267): avc: denied { execute } for pid=5599 comm="syz.0.1140" name="file1" dev="tmpfs" ino=43915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 342.956985][ T5600] process 'syz.0.1140' launched './file1' with NULL argv: empty string added [ 342.988079][ T23] audit: type=1400 audit(1719867395.404:268): avc: denied { execute_no_trans } for pid=5599 comm="syz.0.1140" path="/root/syzkaller.mmnK7D/25/file0/file1" dev="tmpfs" ino=43915 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 343.217607][ T930] hub 4-1:4.0: set hub depth failed [ 343.240229][ T1789] attempt to access beyond end of device [ 343.240229][ T1789] loop2: rw=2049, want=45104, limit=40427 [ 343.265363][ T930] usb 4-1: USB disconnect, device number 57 [ 343.307633][ T535] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 343.518687][ T5607] FAT-fs (loop2): Directory bread(block 64) failed [ 343.525026][ T5607] FAT-fs (loop2): Directory bread(block 65) failed [ 343.531547][ T5607] FAT-fs (loop2): Directory bread(block 66) failed [ 343.537895][ T5607] FAT-fs (loop2): Directory bread(block 67) failed [ 343.544339][ T5607] FAT-fs (loop2): Directory bread(block 68) failed [ 343.550812][ T580] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 343.556643][ T5607] FAT-fs (loop2): Directory bread(block 69) failed [ 343.564752][ T5607] FAT-fs (loop2): Directory bread(block 70) failed [ 343.571108][ T5607] FAT-fs (loop2): Directory bread(block 71) failed [ 343.577430][ T5607] FAT-fs (loop2): Directory bread(block 72) failed [ 343.583910][ T5607] FAT-fs (loop2): Directory bread(block 73) failed [ 343.599033][ T5607] netlink: 44 bytes leftover after parsing attributes in process `½“©'. [ 343.599301][ T535] usb 1-1: too many configurations: 65, using maximum allowed: 8 [ 343.733630][ T535] usb 1-1: config 0 has no interfaces? [ 343.817567][ T535] usb 1-1: config 0 has no interfaces? [ 343.897618][ T535] usb 1-1: config 0 has no interfaces? [ 343.917634][ T580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.928764][ T580] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.939171][ T580] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 343.948311][ T580] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.966449][ T580] usb 5-1: config 0 descriptor?? [ 343.977567][ T535] usb 1-1: config 0 has no interfaces? [ 344.057580][ T535] usb 1-1: config 0 has no interfaces? [ 344.147655][ T535] usb 1-1: config 0 has no interfaces? [ 344.227698][ T535] usb 1-1: config 0 has no interfaces? [ 344.307601][ T535] usb 1-1: config 0 has no interfaces? [ 344.312896][ T535] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 344.321967][ T535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.330691][ T535] usb 1-1: config 0 descriptor?? [ 344.477921][ T580] hid (null): invalid report_count -82777999 [ 344.717628][ T580] usb 5-1: string descriptor 0 read error: -71 [ 344.743952][ T580] uclogic 0003:256C:006D.0045: failed retrieving string descriptor #200: -71 [ 344.752690][ T580] uclogic 0003:256C:006D.0045: failed retrieving pen parameters: -71 [ 344.760827][ T580] uclogic 0003:256C:006D.0045: failed probing pen v2 parameters: -71 [ 344.769644][ T580] uclogic 0003:256C:006D.0045: failed probing parameters: -71 [ 344.777317][ T580] uclogic: probe of 0003:256C:006D.0045 failed with error -71 [ 344.787184][ T580] usb 5-1: USB disconnect, device number 67 [ 344.807564][ T930] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 344.957599][ T535] Bluetooth: hci0: command 0x1009 tx timeout [ 345.317632][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.328635][ T930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.338593][ T930] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 345.347425][ T930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.356145][ T930] usb 3-1: config 0 descriptor?? [ 345.837968][ T930] hid (null): bogus close delimiter [ 346.057587][ T580] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 346.079028][ T124] usb 1-1: USB disconnect, device number 70 [ 346.327507][ T580] usb 4-1: Using ep0 maxpacket: 32 [ 346.337619][ T930] usb 3-1: string descriptor 0 read error: -71 [ 346.357560][ T930] uclogic 0003:256C:006D.0046: failed retrieving string descriptor #200: -71 [ 346.366157][ T930] uclogic 0003:256C:006D.0046: failed retrieving pen parameters: -71 [ 346.374267][ T930] uclogic 0003:256C:006D.0046: failed probing pen v2 parameters: -71 [ 346.382201][ T930] uclogic 0003:256C:006D.0046: failed probing parameters: -71 [ 346.389689][ T930] uclogic: probe of 0003:256C:006D.0046 failed with error -71 [ 346.402563][ T930] usb 3-1: USB disconnect, device number 63 [ 346.447674][ T580] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.458892][ T580] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.487554][ T343] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 346.587672][ T580] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 346.596547][ T580] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 346.604703][ T580] usb 4-1: Product: syz [ 346.608980][ T580] usb 4-1: Manufacturer: syz [ 346.648131][ T580] hub 4-1:4.0: USB hub found [ 346.847630][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 346.858852][ T343] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 346.869518][ T580] hub 4-1:4.0: 2 ports detected [ 346.876222][ T343] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 346.885633][ T343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.898154][ T343] usb 5-1: config 0 descriptor?? [ 347.068750][ T5647] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 347.244764][ T5633] tipc: Enabling of bearer rejected, failed to enable media [ 347.251594][ T5647] EXT4-fs error (device loop0): ext4_orphan_get:1236: inode #15: comm syz.0.1153: iget: bad i_size value: -67835469387268086 [ 347.267622][ T580] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 347.273784][ T580] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 347.285062][ T5647] EXT4-fs error (device loop0): ext4_orphan_get:1240: comm syz.0.1153: couldn't read orphan inode 15 (err -117) [ 347.297038][ T5647] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue [ 347.306671][ T5647] ext2 filesystem being mounted at /root/syzkaller.mmnK7D/28/file0 supports timestamps until 2038 (0x7fffffff) [ 347.318561][ T580] usb 4-1: USB disconnect, device number 58 [ 347.417930][ T343] hid (null): bogus close delimiter [ 347.637635][ T343] usb 5-1: string descriptor 0 read error: -22 [ 347.859796][ T343] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0047/input/input41 [ 347.873988][ T343] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0047/input/input42 [ 347.899215][ T343] uclogic 0003:256C:006D.0047: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 348.145646][ T535] usb 5-1: USB disconnect, device number 68 [ 348.859792][ T5669] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.866860][ T5669] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.875342][ T5669] device bridge_slave_0 entered promiscuous mode [ 348.882765][ T5669] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.890047][ T5669] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.984416][ T5669] device bridge_slave_1 entered promiscuous mode [ 349.237975][ T5669] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.244863][ T5669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.252002][ T5669] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.258868][ T5669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.328539][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.336090][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.344368][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 349.352606][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 349.382092][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 349.395937][ T580] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.402843][ T580] bridge0: port 1(bridge_slave_0) entered forwarding state [ 349.438615][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 349.455848][ T580] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.462751][ T580] bridge0: port 2(bridge_slave_1) entered forwarding state [ 349.480722][ T376] tipc: Left network mode [ 349.492519][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.505542][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.534123][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 349.549002][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 349.577281][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 349.600788][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 349.619552][ T580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 350.208583][ T376] device bridge_slave_1 left promiscuous mode [ 350.219261][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.273301][ T376] device bridge_slave_0 left promiscuous mode [ 350.316044][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.667531][ T13] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 350.747525][ T535] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 350.947633][ T13] usb 3-1: too many configurations: 65, using maximum allowed: 8 [ 351.158046][ T535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.174895][ T535] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.202316][ T535] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 351.254430][ T535] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.287984][ T13] usb 3-1: config 0 has no interfaces? [ 351.339964][ T535] usb 1-1: config 0 descriptor?? [ 351.377631][ T13] usb 3-1: config 0 has no interfaces? [ 351.467795][ T13] usb 3-1: config 0 has no interfaces? [ 351.547593][ T13] usb 3-1: config 0 has no interfaces? [ 351.627691][ T13] usb 3-1: config 0 has no interfaces? [ 351.681830][ T23] audit: type=1400 audit(1719867404.094:269): avc: denied { mounton } for pid=5701 comm="syz.4.1164" path="/root/syzkaller.8pwAAS/226/file0/file0" dev="loop4" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 351.706435][ T23] audit: type=1400 audit(1719867404.094:270): avc: denied { mount } for pid=5701 comm="syz.4.1164" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 351.707629][ T13] usb 3-1: config 0 has no interfaces? [ 351.807914][ T535] hid (null): bogus close delimiter [ 351.827721][ T13] usb 3-1: config 0 has no interfaces? [ 351.907615][ T13] usb 3-1: config 0 has no interfaces? [ 351.912906][ T13] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 351.927416][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.936698][ T13] usb 3-1: config 0 descriptor?? [ 352.067666][ T4353] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 352.087628][ T121] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 352.307632][ T535] usb 1-1: string descriptor 0 read error: -71 [ 352.317513][ T4353] usb 4-1: Using ep0 maxpacket: 32 [ 352.327553][ T535] uclogic 0003:256C:006D.0048: failed retrieving string descriptor #200: -71 [ 352.336287][ T535] uclogic 0003:256C:006D.0048: failed retrieving pen parameters: -71 [ 352.344215][ T535] uclogic 0003:256C:006D.0048: failed probing pen v2 parameters: -71 [ 352.352227][ T535] uclogic 0003:256C:006D.0048: failed probing parameters: -71 [ 352.359586][ T535] uclogic: probe of 0003:256C:006D.0048 failed with error -71 [ 352.373347][ T535] usb 1-1: USB disconnect, device number 71 [ 352.447610][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.447627][ T4353] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 352.467858][ T121] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.469987][ T4353] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 352.480172][ T121] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 352.499356][ T121] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.507984][ T121] usb 2-1: config 0 descriptor?? [ 352.607615][ T4353] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 352.616842][ T4353] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 352.627978][ T4353] usb 4-1: Product: syz [ 352.631976][ T4353] usb 4-1: Manufacturer: syz [ 352.678246][ T4353] hub 4-1:4.0: bad descriptor, ignoring hub [ 352.684347][ T4353] hub: probe of 4-1:4.0 failed with error -5 [ 352.690839][ T4353] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 352.729249][ T376] tipc: Left network mode [ 352.751455][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.758316][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.765784][ T5724] device bridge_slave_0 entered promiscuous mode [ 352.777985][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.786486][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.794551][ T5724] device bridge_slave_1 entered promiscuous mode [ 352.858174][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.865022][ T5724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.872192][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.879044][ T5724] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.923431][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.932178][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.939722][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.955485][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.965483][ T4353] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.972357][ T4353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.980723][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 352.988017][ T121] hid (null): bogus close delimiter [ 352.989259][ T4353] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.000508][ T4353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.022913][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 353.034809][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 353.060049][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 353.075545][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 353.096220][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 353.120280][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 353.136395][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 353.197662][ T121] usb 2-1: string descriptor 0 read error: -22 [ 353.449116][ T376] device bridge_slave_1 left promiscuous mode [ 353.494750][ T121] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0049/input/input43 [ 353.509893][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.523606][ T376] device bridge_slave_0 left promiscuous mode [ 353.539383][ T121] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0049/input/input44 [ 353.551851][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.570308][ T121] uclogic 0003:256C:006D.0049: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0 [ 353.661502][ T121] usb 2-1: USB disconnect, device number 62 [ 353.710087][ T535] usb 3-1: USB disconnect, device number 64 [ 353.902815][ T376] ================================================================== [ 353.910821][ T376] BUG: KASAN: null-ptr-deref in tcf_idrinfo_destroy+0xe2/0x280 [ 353.918174][ T376] Read of size 4 at addr 0000000000000010 by task kworker/u4:3/376 [ 353.925886][ T376] [ 353.928068][ T376] CPU: 0 PID: 376 Comm: kworker/u4:3 Not tainted 5.4.276-syzkaller-00020-g4275fce9fe94 #0 [ 353.937781][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 353.947691][ T376] Workqueue: netns cleanup_net [ 353.952272][ T376] Call Trace: [ 353.955412][ T376] dump_stack+0x1d8/0x241 [ 353.959582][ T376] ? panic+0x89d/0x89d [ 353.963488][ T376] ? tcf_idrinfo_destroy+0xe2/0x280 [ 353.968518][ T376] ? nf_ct_l4proto_log_invalid+0x258/0x258 [ 353.974153][ T376] ? tcf_idrinfo_destroy+0xe2/0x280 [ 353.979190][ T376] ? tcf_idrinfo_destroy+0xe2/0x280 [ 353.984220][ T376] __kasan_report+0xe9/0x120 [ 353.988647][ T376] ? tcf_idrinfo_destroy+0xe2/0x280 [ 353.993682][ T376] kasan_report+0x30/0x60 [ 353.997858][ T376] check_memory_region+0x272/0x280 [ 354.002803][ T376] tcf_idrinfo_destroy+0xe2/0x280 [ 354.007660][ T376] ? tcf_idr_check_alloc+0x370/0x370 [ 354.012787][ T376] ? netdev_refcnt_read+0x1c0/0x1c0 [ 354.017820][ T376] ? smp_irq_move_cleanup_interrupt+0x22c/0x22c [ 354.023895][ T376] police_exit_net+0xd7/0x140 [ 354.028428][ T376] ? police_init_net+0x1c0/0x1c0 [ 354.033182][ T376] cleanup_net+0x6e2/0xc90 [ 354.037435][ T376] ? ops_init+0x4a0/0x4a0 [ 354.041599][ T376] ? read_word_at_a_time+0xe/0x20 [ 354.046460][ T376] ? strscpy+0x89/0x220 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 354.050445][ T376] process_one_work+0x765/0xd20 [ 354.055147][ T376] worker_thread+0xaef/0x1470 [ 354.059657][ T376] kthread+0x2da/0x360 [ 354.063549][ T376] ? worker_clr_flags+0x170/0x170 [ 354.068428][ T376] ? kthread_blkcg+0xd0/0xd0 [ 354.072830][ T376] ret_from_fork+0x1f/0x30 [ 354.077081][ T376] ================================================================== [ 354.085175][ T376] Disabling lock debugging due to kernel taint [ 354.091227][ T343] usb 1-1: new high-speed USB device number 72 using dummy_hcd [