last executing test programs: 23.5114009s ago: executing program 0 (id=1094): r0 = syz_usb_connect$hid(0x0, 0x90, &(0x7f0000000200)=ANY=[@ANYBLOB="12010000000000105804165000000000000109022400010000c04009040000010300000009210900000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="0000d2"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, 0x0, 0x78) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1}) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_disconnect(r2) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x80) ioctl$HIDIOCSUSAGES(r3, 0x501c4814, 0x0) 19.312023676s ago: executing program 0 (id=1106): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40081}, 0x8d0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0) mremap(&(0x7f00007f1000/0x4000)=nil, 0x4000, 0x800000, 0x0, &(0x7f0000130000/0x800000)=nil) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/mem_sleep', 0xa0502, 0x49) io_setup(0x1, &(0x7f00000016c0)) clock_getres(0xeaffffff, 0x0) r4 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000980)}, 0x4000000) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r8, 0x0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000800)=""/189, 0xbd}, {0x0}], 0x2}, 0x0, 0x40000103}) io_uring_enter(r4, 0x46f3, 0x0, 0x0, 0x0, 0x0) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r9, 0xc0045627, &(0x7f00000001c0)=0x1) ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x4009}) write$binfmt_elf32(r0, &(0x7f00000008c0)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x7, 0x0, 0x3, 0x7, 0x2, 0x3, 0x3, 0x309, 0x38, 0xfffffffc, 0xe, 0x0, 0x20, 0x1, 0x5}, [{0x3, 0x8, 0xf3, 0x7f, 0x4, 0x200004, 0xc, 0x400}]}, 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 16.733541986s ago: executing program 1 (id=1112): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = socket$packet(0x11, 0x3, 0x300) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x0, 0x8000}, 0x4) socket$packet(0x11, 0x3, 0x300) 15.060300849s ago: executing program 1 (id=1115): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 13.960885911s ago: executing program 0 (id=1120): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1000000, &(0x7f0000006680)) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xfffffffe) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) r5 = syz_usb_connect(0x7, 0x9dd, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x250, 0x7e, 0xff, 0x88, 0x20, 0xfd}, 0x19, 0x0, 0xa, [{0x4, &(0x7f0000000200)=@lang_id={0x4, 0x3, 0x4001}}, {0x51, &(0x7f0000000880)=ANY=[@ANYRES8=r4]}, {0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0a}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x5b, &(0x7f0000000600)=@string={0x5b, 0x3, "86ddf6fcc2029f9cbf6de18d28ede96a56ae3dfb15ecc05897e4627507175cdddee1b50c0ae2791dec8778c1bbfc11e9e1a5616ef24371004b7de15aad1f681afc5186ff1fe8415c0fc213842219d36aa4a0f94fe07da8d32c"}}, {0x2, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00\x00']}, {0x11, &(0x7f0000000140)=ANY=[@ANYRESDEC=r0]}, {0x4, &(0x7f0000001500)=@lang_id={0x4, 0x3, 0x44a}}, {0x2, &(0x7f0000001580)=ANY=[@ANYBLOB]}, {0xc8, &(0x7f0000001680)=ANY=[@ANYBLOB="c8034fd180c2e2596dc5b7f6a04871216ded9810b28b86ec97275bf708861965327c201555c5647aa277cec3e4e2ab0ff36f5a5183af1003380e8a86393d21ae6a20c4257ffd2f7628b0db2756bf21f78594a63042862d659eb9bfdcd82dac4eddaaeb478b31ca952e47cff96ebbe3dc2b6d29c4dc411e41b57d05a504e32a71b366a0d26ee763ea27948df5ec4ce8de27e06b24fb9f"]}]}) syz_usb_control_io$hid(r5, &(0x7f0000000380)={0x24, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYRES16=r0], 0x0}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="5c00000014006b030231a6080c000af32c00000000f800250502000f00e5aa000017d34460bc24eab556bd05251e6182949a2756f475ce36c2d13b48df000000000000ecb8f6ec63c9f4d4938037e786a6d1bdd700e6657594f1817d", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) r8 = open(0x0, 0x145142, 0x0) sendfile(r8, r8, 0x0, 0x800000009) kcmp(r0, 0x0, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0) fcntl$setsig(r8, 0xa, 0x9) unshare(0x2a040500) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0x12a, 0xfffffffffffffffe}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1be8ff0000000000000000000080000000000000367e359b3a90e56435e2128edaacb70fe2a3be16bc0ec5877f71b71a3f750bb9fd6bace4eccd0c4e0e170e", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) 11.687705285s ago: executing program 3 (id=1123): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCDFWD(r1, 0xb101, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a400000023"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='task_rename\x00', r2}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000080)='task_rename\x00') 11.537299548s ago: executing program 3 (id=1124): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x3}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) r3 = dup3(r2, r0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_enter(0xffffffffffffffff, 0x5c53, 0x154b, 0x20, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) write$FUSE_DIRENT(r3, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 10.045934555s ago: executing program 1 (id=1125): getitimer(0x2, 0x0) r0 = getpgrp(0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() r3 = fsopen(&(0x7f0000000040)='hugetlbfs\x00', 0x0) fsmount(r3, 0x1, 0x86) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000040)=0x6, 0x4) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000f00)=0x196, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8001, @loopback, 0x627bcafb}, 0x1c) sendto$inet6(r6, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f00000000c0)="4435c61bc9a1f1ed51c7b06188c682bd59fde0261c9bc2b1f66724ea0287fb6effd2c318abfa442135afa8ca2b68dacbb4a1aa65f9c177dc50967e99edcce6e8900d450fcd9980371cd431b9c1ad0766a9cb142c1ac79715905c856c9e549753967a92c7024ac039", 0xffffffffffffff1d, 0x850, 0x0, 0x0) 9.915940294s ago: executing program 3 (id=1126): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 9.749898307s ago: executing program 3 (id=1127): bpf$PROG_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000092ddee10030410600200050003010902120001000000000904"], 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0xfffffffffffffde7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15", 0x4) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000005c0)=@security={'security\x00', 0xe, 0x4, 0x468, 0xffffffff, 0x0, 0x0, 0x208, 0xffffffff, 0xffffffff, 0x398, 0x398, 0x398, 0xffffffff, 0x4, &(0x7f0000000040), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, [0xff, 0xffffff00, 0xffffffff, 0xff], [0xff, 0x0, 0xffffffff], 'batadv0\x00', 'wlan0\x00', {}, {0xff}, 0x3a, 0x2, 0x1, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x2, 0x5, 0x3}}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@common=@inet=@length={{0x28}, {0x3}}, @common=@eui64={{0x28}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0x3, 0x2, 0xb4, 0x8, 0x0, 0xffffffff, 0x3]}}}, {{@uncond, 0x0, 0x168, 0x190, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0x8], 0x1000, 0x22, 0x2}}, @common=@srh1={{0x90}, {0x73, 0x5, 0x6, 0x1, 0x97e, @dev={0xfe, 0x80, '\x00', 0x1e}, @empty, @empty, [0x0, 0xff000000, 0x0, 0xffffff00], [0x0, 0xffffff00, 0x0, 0xffffffff], [0x0, 0xff000000, 0x0, 0xffffffff], 0x2000, 0x930}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x3, 0x4}, {0x3, 0x1, 0x1}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) r1 = accept4$alg(r0, 0x0, 0x0, 0x80000) io_setup(0x42, &(0x7f0000000100)=0x0) io_submit(r2, 0x1, &(0x7f0000000580)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, r1, &(0x7f0000000000)='e', 0x3f}]) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000007c0), 0x10) r4 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_DEL(r4, 0x0, 0x484, &(0x7f0000000000)={0x16, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e24, 0x0, 'rr\x00', 0x4, 0x5, 0x10}, 0x2c) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x23) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x1f00, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x54, 0x10, 0x1, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xffe0}, {0xf}, {0xe}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x1}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x4, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4040c00) sendmmsg$inet6(r5, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ce", 0x1}], 0x1}}], 0x1, 0x20040001) sendmmsg$inet_sctp(r5, &(0x7f000000a840)=[{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000007c0)='N', 0x1}], 0x1, 0x0, 0x0, 0x4040044}], 0x1, 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f00000003c0)={'erspan0\x00', 0x0, 0x40, 0x700, 0x8, 0x246c, {{0xe, 0x4, 0x1, 0x6, 0x38, 0x64, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x7, 0xbf, [@private=0xa010101]}, @timestamp_addr={0x44, 0x14, 0x48, 0x1, 0x7, [{@private=0xa010102, 0x97}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x10000}]}, @timestamp_prespec={0x44, 0x4, 0xa3, 0x3, 0xe}, @lsrr={0x83, 0x3, 0xe8}]}}}}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 8.9408527s ago: executing program 0 (id=1129): ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) unshare(0x8000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r4}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000040)={@private2, r4}, 0x14) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="3a8d04005a10000008000400440000003cfeca652dfefec1385909000000000000003aa5e5f0f3e1f7e2472f9a08e572ef2ccbd659b1625497a86055c72dc96e4face0c53925144eb419e65095d7ff820db18efd6343bf4dee7057c7cd194a9b62bc29cf448cdfe8081c8279d0d88efb3fedbf14bf3a5548c13ef27ba9245ea03a23b9a6670e90e0462a0117bb8a60c37c691aa6d6e7dff8c9ebe9d00c0bbe444be32859af1d01da6b981c98c00c5b35f1be8b76885e573392c70f2d024a5f0ca3416bef8cff18b6fc60f70b68bd51b3ac11cb265cc3db6df4d8d116fe95851c4bde2d6a8fbd8532775105d47e707bff8a78b81cb63e8dd16806000000018a6005921846a9a70c0000000000000003353cd39b05d92817aeaa2291553bd9111cbd4451b1e23ead553350be3e34e33e376f73d7f07151e366dc3a3360c0d69ff0d6ae345448c15ed70e355a8a983dd553a499d61d45546d37727d53313a7ceade325a86ecb2761b00524c7e13c79c159686e6a23d885d0dc81d22c5f50a4c6e25e6f383627d9450618b3570145b354f3c12422afb60d06c65a63ccf7ed97f820d30864f116ce26cbc8f2475b2aed7eb167baed836bf0178fb8b49a30f5e55a376ec4bbb71037299762010de70f89342811062b46604daece4cf5cb612b9cc1ad0030957dfa73fcadf7352ebc40e9f6f9081f5c0fd46938fe80c51fd8e33797100ed613d4064be4e37cfc3198fab8ff71afbb522f58224381750020dda2ac2deb90318cca274e3f3356d29ac4828bc5ebe7f487b1d96687ae8a06ab30d73479c6446172b0242fb867ac7991fcf8da7d10294b522d623c7d749471b0addea188e551327de191a11e896a2"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 7.238412962s ago: executing program 1 (id=1132): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 5.120808193s ago: executing program 2 (id=1143): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9831fef0d631e6d8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x40810) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='status\x00') fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d52a6a16"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e", 0x65, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x1790, &(0x7f0000000080)={0x0, 0x2d7f, 0x10100, 0x20800000}, &(0x7f00000001c0), &(0x7f0000000380)) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x810, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 4.372584186s ago: executing program 1 (id=1144): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140080001600010000000000000000000a00ffe9"], 0x14}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x12, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "60d2af86", {0x3, 0x1, 0x0, 0x3, 0xfff9, 0x7, 0x8}}) r2 = syz_create_resource$binfmt(&(0x7f0000000040)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3, 0x3, 0x5, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xef8b2c2d03833171, 0xfffffffe}}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x11) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap$IORING_OFF_SQES(&(0x7f0000a0b000/0x4000)=nil, 0x4000, 0x5, 0x10010, r6, 0x10000000) socket$nl_route(0x10, 0x3, 0x0) 4.282326547s ago: executing program 2 (id=1145): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0xfffffee0, {0xab8, 0x401}}, @cpuid={0x2, 0x18, {0x6, 0x3e}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x10d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) 4.033831021s ago: executing program 2 (id=1149): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@binder={0x73622a85, 0xa, 0x1}, @flat=@binder={0x73622a85, 0x1000}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000c40)={0x10, 0x0, &(0x7f0000000100)=[@clear_death], 0x0, 0x0, 0x0}) read(r0, &(0x7f0000000380)=""/144, 0x90) pwrite64(r0, &(0x7f0000000440)="7de2b30dc1", 0x5, 0x4) syz_usb_connect$cdc_ecm(0x2, 0xbf, &(0x7f0000000200)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xad, 0x1, 0x1, 0x4, 0x40, 0x3, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0xe, {{0x8, 0x24, 0x6, 0x0, 0x0, "2983a4"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x8, 0x3}, [@mdlm_detail={0x5f, 0x24, 0x13, 0x7, "228f89a14887cefde1d87373503a9de44e80e078f2122941f3dd3148378093a4b321abf36969e9033aec47f4045ffde038ac6f3a8b22cb80e937751f596e7c45b7454e1e90262004f6ca4746b3e4df0f3fa1069cf04e6757aa3495"}, @network_terminal={0x7, 0x24, 0xa, 0x8, 0x8, 0x6, 0x3}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2, 0x4, 0x27}}], {{0x9, 0x5, 0x82, 0x2, 0x18, 0x3, 0x80, 0x80}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x9, 0xa0, 0x9}}}}}]}}]}}, &(0x7f0000000340)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0xd9, 0x3, 0xf, 0x556917983bc23231, 0x57}, 0xbd, &(0x7f0000001480)={0x5, 0xf, 0xbd, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x6, 0xc2, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x10, "cdf022fabed4e780c333ee1b8d4f24a0"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x1, 0xf, 0xffff}, @generic={0x90, 0x10, 0xb, "360f3199d739a7a1df9475cdfeabb58677ab03cd1ae16ca00ac0d69be4901305629020bc50f00f7007a67df40686f6434f6590658258b5b7c9f060392781bbfa4d705291251f56dbe4f78057fbf241a91027d6f2df9779e90e77acbf8f2a8111a0f138d8dffbbe3d3389f0cb1f10e6de6ae49c77fd214542b53b3d05f00ad5ddd0eec451bb9fd4cfcc644b5cda"}, @ptm_cap={0x3}]}, 0x2, [{0x0, 0x0}, {0x0, 0x0}]}) r4 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCSREPORT(r4, 0x400c4808, 0x0) syz_open_procfs(0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x94, 0x7fff0000}]}) r6 = open(0x0, 0x14927e, 0xa0) ioctl$KVM_GET_XSAVE(r6, 0x9000aea4, &(0x7f0000000480)) close_range(r5, 0xffffffffffffffff, 0x0) 3.875849644s ago: executing program 4 (id=1151): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x3}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) r3 = dup3(r2, r0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_enter(0xffffffffffffffff, 0x5c53, 0x154b, 0x20, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) write$FUSE_DIRENT(r3, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 3.584936625s ago: executing program 4 (id=1152): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x17c, 0x1e1082) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1003}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x16, 0x32, &(0x7f0000000200)="6eb70a4701bc939c9bb75a00ddecdb95a604b4cb01a1f23a59ad748acd02c9133a8c1e109621ab84b6407be41c159ba4f7299c0a6484d3f7af2c6ae3cdc997867614001c66a9248237bf"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) link(0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500001db20000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f00000002c0)="dcd8a7", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000340)='\xff\x0f\xf0OY\x05\xc7g\x8c\x83H\xf1 9mr?\x1b\xeaE\xd1I\x0f}\xc4\xb23\ne\x03\x13\x19\tHt2\xebz2\x93\xfd\xda\xb7\xaf\"\xb6SHk\xff\x8d\xdbh1\x8b_\xae\x02\r\x87\xd1\x9a\xcd\xd3\xcc#C\v\xf1K\xd8\xb9\bl\xbep\t\x80\x0f\x89F\xd8u\x14_{}\xb8\xf5\xd3\xa8\x97\x92?l\x9e\xc9\x149[j$\x05&G\xdc\x16d\xdbX*\xe0MB+\xc7\xbfC\x90\x0f\xca\xb9\xefI\xb1\xfcT\xb91\xec\xd7c\x99\xd6\xa1\xbbu+t\xe5\xd5CP\x88F.\xa3\"\xc9\x11\xe5\xd2\xb2y\x86X\x17\xa8C\xb5\x99\xdd\x83\x8a!\x9b\xa6y\xec\xa5C\x1a\xfa\x05,\x03d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7ob\x14\xe4\xeb\x15\x1ac\xb7.\x1f\x87\b\x981\xb1\xba|s\xbd,\xf0\xb3R.\xbe\x06\x9e\xdbu8\xaf\x1fL=~j\xf6\xb1\x166\xa7\x0f\a\xcb\xcdc77\xafr\xbe\x16jY\x82\xf3R1\x86\x8f\xe9a\x18\xb2G\xb4@\n\xe4\x1d\xd7F\x8dCaXv\xd2\x8c\a\x99G\x89\xecs\x02F\x12\xfem\xae\xb0\xfcJ\x04\x11\x95\x10T\xf2\x82\x03\xa0?\vy5\xe6\x9b\x1998\xadM\xda\xbf\x89\xcd!\x83(\t\xbf#\xc09K$~\xd0b\x9a\xf45\xdeC\xdf}\x8f|\x95\xbdP\xf6\xfc\xf5\x17u\xec\xff,z\x0e\"\xbe7\x16\x89\xeb\xe4T&*\xfb1\xc6\xb9\x97\xc9\x89\xa5^\xbb\xe5\x92]\xd9,}\xc4\xdcX\xf8*\xdc\xc1\xb6\\|,\xd41\xa3t\xcbC\xf3CN\xbe\f\xa8W\xf5\x86\xb1k^\x01\a[\xfah\\\x9c\xe8W\x90\xb0jb|L2\xe5r\xee?\x15s\xd7#|\xef2spR\xb5\x8e\xec_\xe8\\\xebY\x95N\x87\x8b\xa0\xcfuO\xa3\xa3\xb8\xfc\xc2v\xaf\xcao\xe9og\x8f\x17\x029r\x84W$\b\'\x87\xc9h\xe0\xe0\x91\nD\x17\xc6\xfe2\x90\xc1\x01w\'\x0eD\n)\xab\xef\xe4\xef3JI\v\xfd\xa1', 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x1ea}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) 3.449875188s ago: executing program 4 (id=1153): r0 = syz_open_dev$cec(&(0x7f0000008280), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000082c0)=0xf1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r8 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc02864cf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r7}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, 0x0) 3.083875533s ago: executing program 4 (id=1154): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet6(r0, &(0x7f0000000240)={0xa, 0xffff, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 2.918000847s ago: executing program 3 (id=1155): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) fanotify_mark(0xffffffffffffffff, 0x105, 0x40009975, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x9831fef0d631e6d8}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0xffff}}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x40810) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(r1, &(0x7f0000000040)='status\x00') fcntl$setown(0xffffffffffffffff, 0x8, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x24, 0x2c, 0x107, 0x0, 0x25dfdbff, {0x1, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="d52a6a16"]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x2}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xc010) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e", 0x65, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x604ab000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='io_uring_cqe_overflow\x00', r3}, 0x10) r4 = syz_io_uring_setup(0x1790, &(0x7f0000000080)={0x0, 0x2d7f, 0x10100, 0x20800000}, &(0x7f00000001c0), &(0x7f0000000380)) io_uring_enter(r4, 0xa3d, 0x0, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @local}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x810, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 2.629467612s ago: executing program 0 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace$ARCH_MAP_VDSO_64(0x1e, 0x0, 0x8, 0x2003) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000240)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2.569148989s ago: executing program 4 (id=1157): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r0, &(0x7f0000001500), 0x0, 0xc040) 1.090867988s ago: executing program 0 (id=1158): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x20000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x8003, 0x18080}}, 0x20}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) syz_usb_connect$cdc_ncm(0x4, 0xd1, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e24, 0x0, @rand_addr, 0xd}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) socket$isdn(0x22, 0x3, 0x3) ptrace(0x10, r0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) 933.304816ms ago: executing program 2 (id=1159): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0xfffffee0, {0xab8, 0x401}}, @cpuid={0x2, 0x18, {0x6, 0x3e}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x10d}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={0x0, 0x0, 0x3e}, 0x28) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @random="a538ae464632", @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x7c, 0x0, @multicast1}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2193, 0xd000}}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x4040) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x2d8) 712.950581ms ago: executing program 4 (id=1160): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r2, 0x5509, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000200)={r3, 0xff}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r4, 0x5, 0x4, 0x401, 0xfffffffb, 0x4}, 0x14) syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000100)={0x0, 0x3}, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000400)={&(0x7f0000000200)=[0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x1, 0x1, 0x3, 0x5}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, &(0x7f0000000440)) 581.861117ms ago: executing program 3 (id=1161): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000862000/0x3000)=nil, &(0x7f000053f000/0x4000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f00000c2000/0x1000)=nil, &(0x7f00000bf000/0x4000)=nil, &(0x7f00004e5000/0x1000)=nil, &(0x7f000065e000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f00004e3000/0x3000)=nil, &(0x7f00004e3000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x801, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0xc, 0x9, 0x7ffd, 0x0, 0xf, 0x0, 0xfffffe0000000001, 0xfa11, 0x9eb9}, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="3103000000000000000008000000080003", @ANYRES32=r5, @ANYRES64=r4], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000}) read$FUSE(r7, &(0x7f00000025c0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@gettclass={0x24, 0x2a, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x3, 0x9}, {0x5, 0xffe9}, {0xf, 0x6}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x94}, 0x4000c00) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0x40000, 0x4, 0xe, 0xf1, 0x5, 0xfd, 0xd4, 0xd4, 0x0, 0xd7, 0x7, 0x4f}, {0x0, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0x8080000, 0xdddd1000, 0xb, 0x2, 0x2, 0x0, 0x24, 0x1, 0x5, 0x0, 0xc4, 0x5}, {0xd000, 0x2000, 0x4, 0xf8, 0x3, 0x68, 0x2, 0xd, 0x6, 0x3, 0x8, 0x1}, {0x100000, 0xa000, 0x9, 0x1, 0x3, 0x9, 0xd, 0x6, 0x5, 0x4, 0x2e, 0x4b}, {0x6000, 0x8000000, 0xb, 0x0, 0x3, 0x1, 0x1, 0xc3, 0x4, 0x90, 0x1, 0xfc}, {0x70000, 0x4000, 0xa, 0xff, 0x3, 0xfb, 0x0, 0xb, 0x5, 0x7, 0x80, 0xf8}, {0xf7f63004, 0x1, 0xf, 0x70, 0xfc, 0x3, 0xa, 0x1, 0x54, 0x1, 0xff, 0x5}, {0x0, 0x5}, {0x80a0000, 0x9}, 0x4001000e, 0x0, 0xffff1000, 0x300, 0x5, 0x2100, 0xe6e70c00, [0x3, 0x20000401, 0x7, 0xc5]}) memfd_create(&(0x7f0000000000)='-&:{-\xaa]{\x00', 0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r8, 0x4400ae8f, &(0x7f0000000140)=@x86={0x9, 0x4, 0xd7, 0x0, 0x9, 0x4, 0x4, 0x6, 0xe8, 0x69, 0x5, 0x8, 0x0, 0x856c, 0x2, 0xd4, 0x4, 0x9, 0x0, '\x00', 0x9, 0xffffffffffff8001}) ioctl$UI_GET_VERSION(r2, 0x8004552d, &(0x7f0000000200)) 310.998114ms ago: executing program 1 (id=1162): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101801, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'nr0\x00', 0x3}) ioctl$TUNSETDEBUG(r1, 0x400454c9, 0xffffffffffffffff) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) r3 = dup3(r2, r0, 0x80000) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') bpf$MAP_CREATE(0x0, 0x0, 0x48) io_uring_enter(0xffffffffffffffff, 0x5c53, 0x154b, 0x20, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) write$FUSE_DIRENT(r3, 0x0, 0x10) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 210.353492ms ago: executing program 2 (id=1163): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x17c, 0x1e1082) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x1003}, 0x38) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000000180)={0x16, 0x32, &(0x7f0000000200)="6eb70a4701bc939c9bb75a00ddecdb95a604b4cb01a1f23a59ad748acd02c9133a8c1e109621ab84b6407be41c159ba4f7299c0a6484d3f7af2c6ae3cdc997867614001c66a9248237bf"}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) link(0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) r2 = fsopen(&(0x7f0000000040)='cifs\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000fdffffff00000000000000008500001db20000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000040)=0x7, 0x4) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e21, @multicast1}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000200)="08001efbb0", 0x5}, {&(0x7f00000002c0)="dcd8a7", 0x3}], 0x2, 0x0, 0x0, 0x60000000}, 0x20000004) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@uuid_null}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000080)='iocharset', &(0x7f0000000340)='\xff\x0f\xf0OY\x05\xc7g\x8c\x83H\xf1 9mr?\x1b\xeaE\xd1I\x0f}\xc4\xb23\ne\x03\x13\x19\tHt2\xebz2\x93\xfd\xda\xb7\xaf\"\xb6SHk\xff\x8d\xdbh1\x8b_\xae\x02\r\x87\xd1\x9a\xcd\xd3\xcc#C\v\xf1K\xd8\xb9\bl\xbep\t\x80\x0f\x89F\xd8u\x14_{}\xb8\xf5\xd3\xa8\x97\x92?l\x9e\xc9\x149[j$\x05&G\xdc\x16d\xdbX*\xe0MB+\xc7\xbfC\x90\x0f\xca\xb9\xefI\xb1\xfcT\xb91\xec\xd7c\x99\xd6\xa1\xbbu+t\xe5\xd5CP\x88F.\xa3\"\xc9\x11\xe5\xd2\xb2y\x86X\x17\xa8C\xb5\x99\xdd\x83\x8a!\x9b\xa6y\xec\xa5C\x1a\xfa\x05,\x03d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7ob\x14\xe4\xeb\x15\x1ac\xb7.\x1f\x87\b\x981\xb1\xba|s\xbd,\xf0\xb3R.\xbe\x06\x9e\xdbu8\xaf\x1fL=~j\xf6\xb1\x166\xa7\x0f\a\xcb\xcdc77\xafr\xbe\x16jY\x82\xf3R1\x86\x8f\xe9a\x18\xb2G\xb4@\n\xe4\x1d\xd7F\x8dCaXv\xd2\x8c\a\x99G\x89\xecs\x02F\x12\xfem\xae\xb0\xfcJ\x04\x11\x95\x10T\xf2\x82\x03\xa0?\vy5\xe6\x9b\x1998\xadM\xda\xbf\x89\xcd!\x83(\t\xbf#\xc09K$~\xd0b\x9a\xf45\xdeC\xdf}\x8f|\x95\xbdP\xf6\xfc\xf5\x17u\xec\xff,z\x0e\"\xbe7\x16\x89\xeb\xe4T&*\xfb1\xc6\xb9\x97\xc9\x89\xa5^\xbb\xe5\x92]\xd9,}\xc4\xdcX\xf8*\xdc\xc1\xb6\\|,\xd41\xa3t\xcbC\xf3CN\xbe\f\xa8W\xf5\x86\xb1k^\x01\a[\xfah\\\x9c\xe8W\x90\xb0jb|L2\xe5r\xee?\x15s\xd7#|\xef2spR\xb5\x8e\xec_\xe8\\\xebY\x95N\x87\x8b\xa0\xcfuO\xa3\xa3\xb8\xfc\xc2v\xaf\xcao\xe9og\x8f\x17\x029r\x84W$\b\'\x87\xc9h\xe0\xe0\x91\nD\x17\xc6\xfe2\x90\xc1\x01w\'\x0eD\n)\xab\xef\xe4\xef3JI\v\xfd\xa1', 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x800, 0x1, 0x1ea}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x133d, 0x0, 0x8, 0x0, 0x0) 0s ago: executing program 2 (id=1164): r0 = syz_open_dev$cec(&(0x7f0000008280), 0x0, 0x0) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f00000082c0)=0xf1) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NL80211_CMD_STOP_AP(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x4, 0x0, &(0x7f0000002040)) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000001c0)={&(0x7f0000000200), 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) r8 = syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x0) ioctl$DRM_IOCTL_GET_CLIENT(r8, 0xc02864cf, &(0x7f00000001c0)) ioctl$DRM_IOCTL_MODE_GETENCODER(r6, 0xc01464a6, &(0x7f0000000180)={r7}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x0}) r9 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_DQEVENT(r9, 0x80885659, 0x0) kernel console output (not intermixed with test programs): info (-110) [ 212.502805][ T1102] usb 4-1: could not probe fw (-110) [ 212.629337][ T7212] tipc: Started in network mode [ 212.629355][ T7212] tipc: Node identity 5ed59701d564, cluster identity 4711 [ 212.629471][ T7212] tipc: Enabled bearer , priority 0 [ 212.630248][ T7212] syzkaller0: entered promiscuous mode [ 212.630261][ T7212] syzkaller0: entered allmulticast mode [ 212.679750][ T7212] tipc: Resetting bearer [ 212.699486][ T7211] tipc: Resetting bearer [ 212.817792][ T7211] tipc: Disabling bearer [ 213.562388][ T6652] usb 4-1: USB disconnect, device number 8 [ 215.607278][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 215.858555][ T9] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 215.904322][ T9] usb 5-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 215.904340][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.904350][ T9] usb 5-1: Product: syz [ 215.904357][ T9] usb 5-1: Manufacturer: syz [ 215.904364][ T9] usb 5-1: SerialNumber: syz [ 215.950067][ T9] usb 5-1: config 0 descriptor?? [ 218.627251][ T6187] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 218.788762][ T6187] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 218.788782][ T6187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 218.790801][ T6187] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 218.790828][ T6187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.790845][ T6187] usb 4-1: Product: syz [ 218.790852][ T6187] usb 4-1: Manufacturer: syz [ 218.790860][ T6187] usb 4-1: SerialNumber: syz [ 218.793867][ T6187] usb 4-1: config 0 descriptor?? [ 218.806401][ T6187] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0) [ 218.806437][ T6187] em28xx 4-1:0.0: Device initialization failed. [ 218.806450][ T6187] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port. [ 218.834280][ T9] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 219.000930][ T9] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 219.000947][ T9] usb 2-1: config 252 has no interface number 0 [ 219.000973][ T9] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 219.000987][ T9] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 219.006820][ T9] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 219.006848][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.006868][ T9] usb 2-1: Product: syz [ 219.006881][ T9] usb 2-1: Manufacturer: syz [ 219.006903][ T9] usb 2-1: SerialNumber: syz [ 219.320666][ T6186] usb 5-1: USB disconnect, device number 5 [ 220.364584][ T7292] libceph: resolve '4.' (ret=-3): failed [ 221.375152][ T5817] usb 4-1: USB disconnect, device number 9 [ 221.689872][ T6259] usb 2-1: USB disconnect, device number 10 [ 222.068889][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.397'. [ 222.122450][ T7310] vlan2: entered promiscuous mode [ 222.122465][ T7310] batadv0: entered promiscuous mode [ 223.742533][ T7332] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 225.006948][ T6259] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 225.304337][ T6259] usb 1-1: config 252 has an invalid interface number: 107 but max is 0 [ 225.304357][ T6259] usb 1-1: config 252 has no interface number 0 [ 225.304386][ T6259] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 225.304400][ T6259] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 225.308282][ T6259] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 225.308300][ T6259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.308310][ T6259] usb 1-1: Product: syz [ 225.308318][ T6259] usb 1-1: Manufacturer: syz [ 225.308325][ T6259] usb 1-1: SerialNumber: syz [ 226.162066][ T7357] binder: 7355:7357 ioctl c0306201 200000000180 returned -14 [ 227.380843][ T6259] usb 1-1: USB disconnect, device number 4 [ 227.404298][ T7368] netlink: 12 bytes leftover after parsing attributes in process `syz.2.412'. [ 227.413128][ T7368] vlan2: entered promiscuous mode [ 227.413147][ T7368] batadv0: entered promiscuous mode [ 227.634193][ T7380] libceph: resolve '4.' (ret=-3): failed [ 228.568781][ T43] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 228.760813][ T43] usb 4-1: config index 0 descriptor too short (expected 1307, got 27) [ 228.760842][ T43] usb 4-1: config 0 has an invalid interface number: 0 but max is -1 [ 228.760861][ T43] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 228.760894][ T43] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 228.760943][ T43] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 228.760962][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 228.764908][ T43] usb 4-1: language id specifier not provided by device, defaulting to English [ 228.785244][ T43] usb 4-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 228.785274][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.797408][ T43] usb 4-1: config 0 descriptor?? [ 228.805882][ T43] hub 4-1:0.0: bad descriptor, ignoring hub [ 228.805917][ T43] hub 4-1:0.0: probe with driver hub failed with error -5 [ 232.287402][ T5925] usb 4-1: USB disconnect, device number 10 [ 232.633511][ T7432] tipc: Started in network mode [ 232.633541][ T7432] tipc: Node identity 6e0718246e26, cluster identity 4711 [ 232.635001][ T7432] tipc: Enabled bearer , priority 0 [ 232.662765][ T7428] syzkaller0: entered promiscuous mode [ 232.662792][ T7428] syzkaller0: entered allmulticast mode [ 233.244062][ T7427] tipc: Resetting bearer [ 233.592857][ T7427] tipc: Disabling bearer [ 233.945390][ T6259] tipc: Node number set to 2168868 [ 234.457132][ T43] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 234.692322][ T7463] libceph: resolve '4.' (ret=-3): failed [ 234.714811][ T43] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 234.714839][ T43] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.714849][ T43] usb 4-1: Product: syz [ 234.714856][ T43] usb 4-1: Manufacturer: syz [ 234.714864][ T43] usb 4-1: SerialNumber: syz [ 234.726845][ T43] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 235.203810][ T5925] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 236.820401][ T5925] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 236.822118][ T5925] ath9k_htc: Failed to initialize the device [ 237.384658][ T5925] usb 4-1: ath9k_htc: USB layer deinitialized [ 238.484960][ T7487] binder: 7485:7487 ioctl c0306201 200000000180 returned -14 [ 238.545101][ T6186] usb 4-1: USB disconnect, device number 11 [ 239.507157][ T6259] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 239.673597][ T6259] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 239.673653][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.673667][ T6259] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.673680][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.673693][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.675018][ T6259] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 239.675067][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.675093][ T6259] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.675109][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.675122][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.676769][ T6259] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 239.676802][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 239.676816][ T6259] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 239.676828][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 239.676841][ T6259] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 239.684085][ T6259] usb 5-1: string descriptor 0 read error: -22 [ 239.684219][ T6259] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 239.684242][ T6259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.924265][ T6259] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 240.103486][ T6259] usb 5-1: USB disconnect, device number 6 [ 240.444589][ T7517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.451'. [ 241.500418][ T7538] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 243.607976][ T7571] netlink: 'syz.2.462': attribute type 1 has an invalid length. [ 243.804048][ T7571] 8021q: adding VLAN 0 to HW filter on device bond2 [ 244.299065][ T7573] bond2: (slave dummy0): making interface the new active one [ 244.302127][ T7573] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 244.547831][ T7587] netlink: 8 bytes leftover after parsing attributes in process `syz.3.467'. [ 246.181758][ T7612] capability: warning: `syz.1.473' uses deprecated v2 capabilities in a way that may be insecure [ 248.455232][ T7621] random: crng reseeded on system resumption [ 248.457507][ T37] audit: type=1326 audit(1768153405.951:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.457548][ T37] audit: type=1326 audit(1768153405.961:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.457569][ T37] audit: type=1326 audit(1768153405.961:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.457589][ T37] audit: type=1326 audit(1768153405.961:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.457609][ T37] audit: type=1326 audit(1768153405.961:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.457628][ T37] audit: type=1326 audit(1768153405.961:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.457649][ T37] audit: type=1326 audit(1768153405.961:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.457669][ T37] audit: type=1326 audit(1768153405.961:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.683415][ T7623] usb usb8: usbfs: process 7623 (syz.1.475) did not claim interface 0 before use [ 248.814374][ T37] audit: type=1326 audit(1768153406.321:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 248.824545][ T37] audit: type=1326 audit(1768153406.321:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7616 comm="syz.1.475" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc46787f749 code=0x7ffc0000 [ 249.814953][ T7632] binder: 7629:7632 ioctl 4018620d 0 returned -22 [ 250.331068][ T7647] libceph: resolve '4.' (ret=-3): failed [ 251.561432][ T7670] netlink: 1100 bytes leftover after parsing attributes in process `syz.4.490'. [ 251.653289][ T7673] loop5: detected capacity change from 0 to 4096 [ 252.437196][ T5925] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 252.617142][ T5925] usb 5-1: Using ep0 maxpacket: 16 [ 252.619411][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.619441][ T5925] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.619478][ T5925] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 252.619500][ T5925] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.680901][ T5925] usb 5-1: config 0 descriptor?? [ 253.123194][ T5925] kye 0003:0458:5016.0002: control desc unexpectedly large [ 253.213431][ T5925] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0002/input/input14 [ 253.344584][ T5925] input: HID 0458:5016 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0458:5016.0002/input/input15 [ 253.704138][ T7694] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 253.704646][ T7694] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 253.726542][ T5925] kye 0003:0458:5016.0002: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.4-1/input0 [ 254.059259][ T7701] libceph: resolve '4.' (ret=-3): failed [ 254.348022][ C1] kye 0003:0458:5016.0002: usb_submit_urb(ctrl) failed: -1 [ 254.351261][ T7714] random: crng reseeded on system resumption [ 255.323720][ T7614] usb 5-1: USB disconnect, device number 7 [ 255.557191][ T5990] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 255.724596][ T7738] process 'syz.0.512' launched './file0' with NULL argv: empty string added [ 255.728499][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.728564][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.755130][ T5990] usb 4-1: Using ep0 maxpacket: 8 [ 255.763308][ T5990] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 255.763339][ T5990] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 255.763362][ T5990] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 255.763384][ T5990] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 255.763425][ T5990] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 255.763446][ T5990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.047835][ T5990] usb 4-1: usb_control_msg returned -32 [ 256.047881][ T5990] usbtmc 4-1:16.0: can't read capabilities [ 256.073295][ T5990] usb 4-1: USB disconnect, device number 12 [ 257.789659][ T7764] input: syz0 as /devices/virtual/input/input16 [ 258.039072][ T7614] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 258.248218][ T7614] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.248234][ T7614] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 258.248619][ T7614] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 258.248643][ T7614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.298998][ T7614] usb 2-1: config 0 descriptor?? [ 258.305993][ T7614] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 258.306243][ T7614] dvb-usb: bulk message failed: -22 (3/0) [ 258.445881][ T7614] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 258.464723][ T7614] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 258.464811][ T7614] usb 2-1: media controller created [ 258.498822][ T7614] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 258.587211][ T7614] dvb-usb: bulk message failed: -22 (6/0) [ 258.587291][ T7614] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 258.665764][ T7614] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 258.714261][ T7614] dvb-usb: schedule remote query interval to 150 msecs. [ 258.714285][ T7614] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 258.903360][ T7614] dvb-usb: bulk message failed: -22 (1/0) [ 258.903390][ T7614] dvb-usb: error while querying for an remote control event. [ 259.057293][ T7614] dvb-usb: bulk message failed: -22 (1/0) [ 259.057323][ T7614] dvb-usb: error while querying for an remote control event. [ 259.217177][ T7614] dvb-usb: bulk message failed: -22 (1/0) [ 259.219193][ T7614] dvb-usb: error while querying for an remote control event. [ 259.247696][ T7614] usb 2-1: USB disconnect, device number 11 [ 259.619729][ T7614] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 261.564495][ T7801] loop5: detected capacity change from 0 to 4096 [ 261.648842][ T7806] loop5: detected capacity change from 0 to 7 [ 261.817834][ T5965] loop5: [ 261.817858][ T5965] loop5: partition table partially beyond EOD, truncated [ 261.895301][ T7806] loop5: [ 261.895437][ T7806] loop5: partition table partially beyond EOD, truncated [ 261.990310][ T7813] random: crng reseeded on system resumption [ 265.367207][ T5925] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 265.405786][ T7841] binder: 7840:7841 ioctl c0306201 0 returned -14 [ 265.407760][ T7841] binder: BINDER_SET_CONTEXT_MGR already set [ 265.407772][ T7841] binder: 7840:7841 ioctl 4018620d 2000000002c0 returned -16 [ 265.518801][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 265.518837][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.518851][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.518863][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.518877][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.519721][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 265.519749][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.519763][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.519776][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.519789][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.520631][ T5925] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 265.520658][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 265.520671][ T5925] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 265.520684][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 265.520697][ T5925] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 265.523291][ T5925] usb 5-1: string descriptor 0 read error: -22 [ 265.523369][ T5925] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 265.523381][ T5925] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.746491][ T5925] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 265.791599][ T7832] binder: 7831:7832 ioctl 4018620d 0 returned -22 [ 265.817424][ T7832] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 265.817791][ T7832] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 265.864872][ T5925] usb 5-1: USB disconnect, device number 8 [ 266.448573][ T7847] mmap: syz.3.548 (7847) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 267.187277][ T7860] random: crng reseeded on system resumption [ 267.205292][ T5817] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 267.420155][ T5817] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 267.420613][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.420682][ T5817] usb 2-1: Product: syz [ 267.421158][ T5817] usb 2-1: Manufacturer: syz [ 267.421172][ T5817] usb 2-1: SerialNumber: syz [ 267.472684][ T5817] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 267.504023][ T5990] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 268.577866][ T5990] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 268.581482][ T5990] ath9k_htc: Failed to initialize the device [ 268.673897][ T5990] usb 2-1: ath9k_htc: USB layer deinitialized [ 270.210256][ T6186] usb 2-1: USB disconnect, device number 12 [ 271.077146][ T6186] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 271.247436][ T6186] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 271.247463][ T6186] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 271.247482][ T6186] usb 2-1: config 220 has no interface number 2 [ 271.247554][ T6186] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 271.247580][ T6186] usb 2-1: config 220 interface 0 has no altsetting 0 [ 271.247597][ T6186] usb 2-1: config 220 interface 76 has no altsetting 0 [ 271.247615][ T6186] usb 2-1: config 220 interface 1 has no altsetting 0 [ 271.253854][ T6186] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 271.253871][ T6186] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.253881][ T6186] usb 2-1: Product: syz [ 271.253888][ T6186] usb 2-1: Manufacturer: syz [ 271.253895][ T6186] usb 2-1: SerialNumber: syz [ 271.287159][ T5957] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 271.462496][ T5957] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 271.462670][ T5957] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 271.462825][ T5957] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 271.462989][ T5957] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 271.463331][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 271.463489][ T5957] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 271.528395][ T5957] usb 3-1: language id specifier not provided by device, defaulting to English [ 271.561487][ T5957] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 271.561590][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.576442][ T5957] usb 3-1: config 0 descriptor?? [ 271.594505][ T5957] hub 3-1:0.0: bad descriptor, ignoring hub [ 271.594541][ T5957] hub 3-1:0.0: probe with driver hub failed with error -5 [ 274.867451][ T6186] usb 2-1: selecting invalid altsetting 0 [ 274.868016][ T6186] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 274.868047][ T6186] uvcvideo 2-1:220.0: No valid video chain found. [ 274.926858][ T6186] usb 2-1: selecting invalid altsetting 0 [ 274.926880][ T6186] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 274.999171][ T6186] usb 2-1: USB disconnect, device number 13 [ 275.316185][ T6186] usb 3-1: USB disconnect, device number 13 [ 276.214401][ T7931] random: crng reseeded on system resumption [ 276.300846][ T6186] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 276.449015][ T6186] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 276.449050][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 276.449063][ T6186] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.449076][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 276.449089][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 276.449971][ T6186] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 276.450000][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 276.450014][ T6186] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.450026][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 276.450039][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 276.450911][ T6186] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 276.450950][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 276.450964][ T6186] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 276.450976][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 276.450989][ T6186] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 276.453620][ T6186] usb 4-1: string descriptor 0 read error: -22 [ 276.453700][ T6186] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 276.453712][ T6186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.649372][ T6186] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 276.687801][ T7924] binder: 7922:7924 ioctl 4018620d 0 returned -22 [ 276.689728][ T7937] loop5: detected capacity change from 0 to 7 [ 276.723105][ T6186] usb 4-1: USB disconnect, device number 13 [ 276.792886][ T6147] Dev loop5: unable to read RDB block 7 [ 276.792919][ T6147] loop5: AHDI p1 p2 p3 [ 276.792937][ T6147] loop5: partition table partially beyond EOD, truncated [ 276.835612][ T6147] loop5: p1 start 1601398130 is beyond EOD, truncated [ 276.835644][ T6147] loop5: p2 start 1702059890 is beyond EOD, truncated [ 276.850006][ T7937] Dev loop5: unable to read RDB block 7 [ 276.850036][ T7937] loop5: AHDI p1 p2 p3 [ 276.850061][ T7937] loop5: partition table partially beyond EOD, truncated [ 276.850625][ T7937] loop5: p1 start 1601398130 is beyond EOD, truncated [ 276.850644][ T7937] loop5: p2 start 1702059890 is beyond EOD, truncated [ 277.193475][ T7942] libceph: resolve '4.' (ret=-3): failed [ 277.502380][ T7946] netlink: 'syz.3.577': attribute type 4 has an invalid length. [ 277.511929][ T7946] netlink: 'syz.3.577': attribute type 4 has an invalid length. [ 278.247407][ T5925] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 278.434479][ T5925] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 278.434514][ T5925] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 278.434531][ T5925] usb 2-1: config 220 has no interface number 2 [ 278.434596][ T5925] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 278.434620][ T5925] usb 2-1: config 220 interface 0 has no altsetting 0 [ 278.434637][ T5925] usb 2-1: config 220 interface 76 has no altsetting 0 [ 278.434653][ T5925] usb 2-1: config 220 interface 1 has no altsetting 0 [ 278.446347][ T5925] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 278.446364][ T5925] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.446375][ T5925] usb 2-1: Product: syz [ 278.446382][ T5925] usb 2-1: Manufacturer: syz [ 278.446389][ T5925] usb 2-1: SerialNumber: syz [ 278.528172][ T6186] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 278.683819][ T6186] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 278.683837][ T6186] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.683847][ T6186] usb 4-1: Product: syz [ 278.683854][ T6186] usb 4-1: Manufacturer: syz [ 278.683862][ T6186] usb 4-1: SerialNumber: syz [ 278.762109][ T6186] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 278.884295][ T6187] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 280.198412][ T6187] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 280.200570][ T6187] ath9k_htc: Failed to initialize the device [ 280.295687][ T6187] usb 4-1: ath9k_htc: USB layer deinitialized [ 281.574763][ T6187] usb 4-1: USB disconnect, device number 14 [ 283.265037][ T5925] usb 2-1: selecting invalid altsetting 0 [ 283.278573][ T5925] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 283.278608][ T5925] uvcvideo 2-1:220.0: No valid video chain found. [ 283.293964][ T5925] usb 2-1: selecting invalid altsetting 0 [ 283.294000][ T5925] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 283.311473][ T5990] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 283.330632][ T5925] usb 2-1: USB disconnect, device number 14 [ 283.728373][ T5990] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 283.728432][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 283.728457][ T5990] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.728481][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 283.729183][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 283.786147][ T5990] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 283.786201][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 283.786227][ T5990] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.786250][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 283.786275][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 283.807170][ T5990] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 283.807224][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 283.807251][ T5990] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 283.807276][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 283.807301][ T5990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 283.938066][ T5990] usb 5-1: string descriptor 0 read error: -22 [ 283.938212][ T5990] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 283.938235][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.013078][ T7983] netlink: 'syz.0.588': attribute type 4 has an invalid length. [ 284.032091][ T5990] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 284.070603][ T7983] netlink: 'syz.0.588': attribute type 4 has an invalid length. [ 284.157591][ T7975] binder: 7974:7975 ioctl 4018620d 0 returned -22 [ 285.180465][ T7999] random: crng reseeded on system resumption [ 286.021387][ T9] usb 5-1: USB disconnect, device number 9 [ 286.622734][ T5957] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 286.756695][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 286.805870][ T5957] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 286.805900][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.805918][ T5957] usb 3-1: Product: syz [ 286.805927][ T5957] usb 3-1: Manufacturer: syz [ 286.805934][ T5957] usb 3-1: SerialNumber: syz [ 286.820412][ T5957] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 286.858555][ T5990] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 286.944409][ T9] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 286.944438][ T9] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 286.944456][ T9] usb 5-1: config 220 has no interface number 2 [ 286.944614][ T9] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 286.944645][ T9] usb 5-1: config 220 interface 0 has no altsetting 0 [ 286.944725][ T9] usb 5-1: config 220 interface 76 has no altsetting 0 [ 286.944743][ T9] usb 5-1: config 220 interface 1 has no altsetting 0 [ 286.951775][ T9] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 286.951792][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 286.951803][ T9] usb 5-1: Product: syz [ 286.951810][ T9] usb 5-1: Manufacturer: syz [ 286.951817][ T9] usb 5-1: SerialNumber: syz [ 288.102914][ T5990] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 288.103077][ T5990] ath9k_htc: Failed to initialize the device [ 288.324326][ T5990] usb 3-1: ath9k_htc: USB layer deinitialized [ 289.456078][ T9] usb 5-1: selecting invalid altsetting 0 [ 289.458657][ T9] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 289.458689][ T9] uvcvideo 5-1:220.0: No valid video chain found. [ 289.475928][ T5817] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 289.612743][ T9] usb 5-1: selecting invalid altsetting 0 [ 289.612781][ T9] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 289.709541][ T9] usb 5-1: USB disconnect, device number 10 [ 289.734875][ T5817] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 289.736688][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 289.736719][ T5817] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.736744][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.736769][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 289.808489][ T5817] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 289.808543][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 289.808593][ T5817] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.808606][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.808619][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 289.809644][ T5817] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 289.809697][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 289.809759][ T5817] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 289.809772][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 289.809784][ T5817] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 289.816367][ T5817] usb 1-1: string descriptor 0 read error: -22 [ 289.943926][ T5817] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 289.946444][ T5817] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.221373][ T5817] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 290.342264][ T5817] usb 3-1: USB disconnect, device number 14 [ 290.389203][ T8026] binder: 8025:8026 ioctl 4018620d 0 returned -22 [ 290.498201][ T8040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.498697][ T8040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.549320][ T5890] usb 1-1: USB disconnect, device number 5 [ 290.550243][ T8038] usb 1-1: Couldn't submit interrupt_out_urb -19 [ 291.600325][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 291.600364][ T8056] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 292.820439][ T8069] random: crng reseeded on system resumption [ 294.617979][ T5817] usb 3-1: new low-speed USB device number 15 using dummy_hcd [ 294.812262][ T5817] usb 3-1: config index 0 descriptor too short (expected 1307, got 27) [ 294.812280][ T5817] usb 3-1: config 0 has an invalid interface number: 0 but max is -1 [ 294.812290][ T5817] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 294.812309][ T5817] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 294.812329][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 294.812340][ T5817] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 294.842409][ T5817] usb 3-1: language id specifier not provided by device, defaulting to English [ 294.953750][ T5817] usb 3-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 294.953769][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.990863][ T5817] usb 3-1: config 0 descriptor?? [ 295.013944][ T5817] hub 3-1:0.0: bad descriptor, ignoring hub [ 295.013968][ T5817] hub 3-1:0.0: probe with driver hub failed with error -5 [ 296.277173][ T9] usb 4-1: new low-speed USB device number 15 using dummy_hcd [ 296.480871][ T8104] libceph: resolve '4.' (ret=-3): failed [ 296.508818][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 296.508851][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 296.508865][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.508878][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 296.508891][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 296.510460][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 296.510495][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 296.510510][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.510522][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 296.510535][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 296.511516][ T9] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 296.511548][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 296.511561][ T9] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 296.511574][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 296.511587][ T9] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 296.514977][ T9] usb 4-1: string descriptor 0 read error: -22 [ 296.515063][ T9] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 296.515074][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.557484][ T5817] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 296.603620][ T9] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 296.883989][ T5817] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 296.884051][ T5817] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 296.884105][ T5817] usb 2-1: Product: syz [ 296.884118][ T5817] usb 2-1: Manufacturer: syz [ 296.884173][ T5817] usb 2-1: SerialNumber: syz [ 296.897474][ T8097] binder: 8096:8097 ioctl 4018620d 0 returned -22 [ 296.949808][ T8097] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.950093][ T8097] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.962071][ T5817] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 296.990290][ T804] usb 4-1: USB disconnect, device number 15 [ 297.010295][ T5957] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 297.111974][ T8106] netlink: 'syz.4.624': attribute type 1 has an invalid length. [ 297.168452][ T8108] netlink: 28 bytes leftover after parsing attributes in process `syz.4.624'. [ 297.287913][ T8106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 297.381065][ T804] usb 3-1: USB disconnect, device number 15 [ 297.472686][ T8109] bond1: (slave dummy0): making interface the new active one [ 297.510939][ T8109] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 298.105900][ T5957] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 298.166723][ T5957] ath9k_htc: Failed to initialize the device [ 298.388644][ T5957] usb 2-1: ath9k_htc: USB layer deinitialized [ 300.389494][ T5890] usb 2-1: USB disconnect, device number 15 [ 300.924592][ T8140] loop1: detected capacity change from 0 to 7 [ 300.961039][ T8140] loop1: p1 [ 300.961075][ T8140] loop1: partition table partially beyond EOD, truncated [ 300.965820][ T8140] loop1: p1 size 1919251295 extends beyond EOD, truncated [ 301.850246][ T8149] random: crng reseeded on system resumption [ 303.702002][ T8161] syz.3.637 (8161) used greatest stack depth: 18064 bytes left [ 304.029487][ T8177] loop2: detected capacity change from 0 to 7 [ 304.043249][ T8177] Dev loop2: unable to read RDB block 7 [ 304.043322][ T8177] loop2: unable to read partition table [ 304.043645][ T8177] loop2: partition table beyond EOD, truncated [ 304.043662][ T8177] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 304.878324][ T804] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 305.118946][ T804] usb 4-1: Using ep0 maxpacket: 16 [ 305.212914][ T804] usb 4-1: config 8 has an invalid interface number: 159 but max is 0 [ 305.212932][ T804] usb 4-1: config 8 has no interface number 0 [ 305.212950][ T804] usb 4-1: config 8 interface 159 has no altsetting 0 [ 305.224546][ T804] usb 4-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 305.224564][ T804] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.224573][ T804] usb 4-1: Product: syz [ 305.224580][ T804] usb 4-1: Manufacturer: syz [ 305.224588][ T804] usb 4-1: SerialNumber: syz [ 305.520011][ T8177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.523696][ T8177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.075516][ T5172] Dev loop2: unable to read RDB block 7 [ 307.075546][ T5172] loop2: unable to read partition table [ 307.075741][ T5172] loop2: partition table beyond EOD, truncated [ 309.911710][ T804] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 309.937230][ T804] gspca_sonixj: reg_w1 err -71 [ 309.937294][ T804] sonixj 4-1:8.159: probe with driver sonixj failed with error -71 [ 309.971094][ T804] usb 4-1: USB disconnect, device number 16 [ 309.993991][ T5172] Dev loop2: unable to read RDB block 7 [ 309.994022][ T5172] loop2: unable to read partition table [ 309.994142][ T5172] loop2: partition table beyond EOD, truncated [ 317.151719][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.151761][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.517406][ T8318] random: crng reseeded on system resumption [ 318.817339][ T5990] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 319.098273][ T5990] usb 2-1: Using ep0 maxpacket: 32 [ 319.280966][ T5990] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 319.280993][ T5990] usb 2-1: config 0 has no interface number 0 [ 319.281022][ T5990] usb 2-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 319.281033][ T5990] usb 2-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 319.289656][ T5990] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 319.289682][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.289701][ T5990] usb 2-1: Product: syz [ 319.289714][ T5990] usb 2-1: Manufacturer: syz [ 319.289727][ T5990] usb 2-1: SerialNumber: syz [ 319.359313][ T5990] usb 2-1: config 0 descriptor?? [ 319.403647][ T5990] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 319.667785][ T5990] usb 2-1: qt2_setup_urbs - submit read urb failed -90 [ 319.667963][ T5990] quatech2 2-1:0.51: probe with driver quatech2 failed with error -90 [ 320.407150][ T804] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 321.209778][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 321.209798][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 321.222150][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 321.222189][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 321.223800][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 321.223824][ T804] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 321.227226][ T804] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 321.227279][ T804] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.227431][ T804] usb 1-1: Product: syz [ 321.227446][ T804] usb 1-1: Manufacturer: syz [ 321.227460][ T804] usb 1-1: SerialNumber: syz [ 321.232495][ T804] usb 1-1: config 0 descriptor?? [ 321.243292][ T804] ti_usb_3410_5052 1-1:0.0: TI USB 5052 2 port adapter converter detected [ 321.243534][ T804] ti_usb_3410_5052 1-1:0.0: missing endpoints [ 322.402799][ T5925] usb 2-1: USB disconnect, device number 16 [ 322.646405][ T8371] binder: 8366:8371 ioctl c0306201 0 returned -14 [ 324.474440][ T5925] usb 1-1: USB disconnect, device number 6 [ 325.399322][ T8405] loop5: detected capacity change from 0 to 7 [ 325.405078][ T8405] loop5: [ 325.405098][ T8405] loop5: partition table partially beyond EOD, truncated [ 326.230277][ T8412] usb usb8: usbfs: process 8412 (syz.4.702) did not claim interface 0 before use [ 327.892442][ T8441] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 328.039015][ T6187] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 328.191301][ T5925] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 328.219417][ T6187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 328.219445][ T6187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 328.228573][ T6187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 328.228601][ T6187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 328.257651][ T6187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 328.257680][ T6187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 328.269779][ T6187] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 328.269807][ T6187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.269825][ T6187] usb 2-1: Product: syz [ 328.269837][ T6187] usb 2-1: Manufacturer: syz [ 328.269851][ T6187] usb 2-1: SerialNumber: syz [ 328.284029][ T6187] usb 2-1: config 0 descriptor?? [ 328.290747][ T6187] ti_usb_3410_5052 2-1:0.0: TI USB 5052 2 port adapter converter detected [ 328.290971][ T6187] ti_usb_3410_5052 2-1:0.0: missing endpoints [ 328.389543][ T5925] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 328.389575][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.389589][ T5925] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.389602][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.389615][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.393472][ T5925] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 328.393502][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.393515][ T5925] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.393528][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.393541][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.394357][ T5925] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 328.394384][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 328.394398][ T5925] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 328.394416][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 328.394429][ T5925] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 328.404811][ T5925] usb 1-1: string descriptor 0 read error: -22 [ 328.404941][ T5925] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 328.404964][ T5925] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.768172][ T8443] binder: 8439:8443 ioctl 4018620d 0 returned -22 [ 328.774152][ T5925] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 328.808935][ T8443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 328.809469][ T8443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 328.933052][ T5891] usb 1-1: USB disconnect, device number 7 [ 329.563644][ T37] kauditd_printk_skb: 26 callbacks suppressed [ 329.563661][ T37] audit: type=1326 audit(1768153487.061:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 329.574887][ T37] audit: type=1326 audit(1768153487.061:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 329.574931][ T37] audit: type=1326 audit(1768153487.061:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 329.574967][ T37] audit: type=1326 audit(1768153487.061:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 329.575144][ T37] audit: type=1326 audit(1768153487.061:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 329.575181][ T37] audit: type=1326 audit(1768153487.061:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 329.575216][ T37] audit: type=1326 audit(1768153487.071:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 329.575251][ T37] audit: type=1326 audit(1768153487.071:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 330.692396][ T8457] usb usb8: usbfs: process 8457 (syz.2.716) did not claim interface 0 before use [ 330.699084][ T37] audit: type=1326 audit(1768153488.201:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 330.699130][ T37] audit: type=1326 audit(1768153488.201:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8451 comm="syz.2.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 331.526612][ T8476] libceph: resolve '4.' (ret=-3): failed [ 331.579961][ T804] usb 2-1: USB disconnect, device number 17 [ 331.945425][ T8482] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 332.246439][ T8491] input: syz0 as /devices/virtual/input/input18 [ 332.507667][ T804] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 332.805755][ T804] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 332.805780][ T804] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 332.805831][ T804] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 332.805849][ T804] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.817752][ T804] usb 1-1: config 0 descriptor?? [ 332.826767][ T804] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 332.826813][ T804] dvb-usb: bulk message failed: -22 (3/0) [ 332.858943][ T804] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 332.865106][ T804] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 332.865157][ T804] usb 1-1: media controller created [ 332.874807][ T804] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.043545][ T804] dvb-usb: bulk message failed: -22 (6/0) [ 333.043632][ T804] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 333.126142][ T804] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 333.182820][ T804] dvb-usb: schedule remote query interval to 150 msecs. [ 333.182835][ T804] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 333.219201][ T804] usb 1-1: USB disconnect, device number 8 [ 333.502207][ T804] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 334.047202][ T5990] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 334.054676][ T8512] kernel read not supported for file /eth0 (pid: 8512 comm: syz.4.735) [ 334.097219][ T5817] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 334.199671][ T5990] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.199746][ T5990] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 334.199804][ T5990] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 334.199827][ T5990] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.205767][ T5990] usb 1-1: config 0 descriptor?? [ 334.293813][ T5990] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 334.293862][ T5990] dvb-usb: bulk message failed: -22 (3/0) [ 334.316496][ T5990] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 334.322355][ T5990] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 334.322408][ T5990] usb 1-1: media controller created [ 334.327865][ T5817] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 334.327891][ T5817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.327909][ T5817] usb 3-1: Product: syz [ 334.327922][ T5817] usb 3-1: Manufacturer: syz [ 334.327936][ T5817] usb 3-1: SerialNumber: syz [ 334.336653][ T5817] usb 3-1: config 0 descriptor?? [ 334.344864][ T6187] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 334.351029][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 334.488664][ T6187] usb 5-1: device descriptor read/64, error -71 [ 334.513655][ T5990] dvb-usb: bulk message failed: -22 (6/0) [ 334.515720][ T5990] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 334.542383][ T5990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 334.575463][ T5990] dvb-usb: schedule remote query interval to 150 msecs. [ 334.575486][ T5990] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 334.610516][ T5990] usb 1-1: USB disconnect, device number 9 [ 334.621029][ T5817] usb-storage 3-1:0.0: USB Mass Storage device detected [ 334.719387][ T5817] usb 3-1: USB disconnect, device number 16 [ 334.727213][ T6187] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 334.792753][ T5990] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 334.857354][ T6187] usb 5-1: device descriptor read/64, error -71 [ 334.967594][ T6187] usb usb5-port1: attempt power cycle [ 335.374793][ T6187] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 335.397684][ T6187] usb 5-1: device descriptor read/8, error -71 [ 335.537488][ T8538] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µ [ 335.647191][ T6187] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 335.668010][ T6187] usb 5-1: device descriptor read/8, error -71 [ 335.778969][ T6187] usb usb5-port1: unable to enumerate USB device [ 338.200453][ T8560] libceph: resolve '4.' (ret=-3): failed [ 338.973190][ T8562] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 339.577137][ T5990] usb 3-1: new full-speed USB device number 17 using dummy_hcd [ 339.741570][ T5990] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.741586][ T5990] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 339.741615][ T5990] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 339.741627][ T5990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.745465][ T5990] usb 3-1: config 0 descriptor?? [ 339.751002][ T5990] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 339.751049][ T5990] dvb-usb: bulk message failed: -22 (3/0) [ 339.782539][ T5990] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 339.831190][ T5990] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 339.831224][ T5990] usb 3-1: media controller created [ 339.865428][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 339.908352][ T5990] dvb-usb: bulk message failed: -22 (6/0) [ 339.908409][ T5990] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 339.940790][ T5990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 339.980066][ T5990] dvb-usb: schedule remote query interval to 150 msecs. [ 339.980081][ T5990] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 339.981791][ T5990] usb 3-1: USB disconnect, device number 17 [ 340.124902][ T5990] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 343.435298][ T8602] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹uÂ' already exists in 'ieee80211' [ 343.603098][ T8598] vlan2: entered promiscuous mode [ 343.603149][ T8598] bridge0: entered promiscuous mode [ 345.853958][ T8616] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 345.891010][ T5891] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 346.076674][ T8619] evm: overlay not supported [ 347.608511][ T5891] usb 4-1: device descriptor read/all, error -71 [ 351.961681][ T8653] libceph: resolve '4.' (ret=-3): failed [ 355.537244][ T6186] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 355.837150][ T6186] usb 1-1: device descriptor read/64, error -71 [ 356.109757][ T6186] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 356.237540][ T6186] usb 1-1: device descriptor read/64, error -71 [ 356.277909][ T8680] debugfs: '1ùà^!‚lü1Ü*ø$pOcÚÉ”ÎÜr$åG—•µt:‹uÂ' already exists in 'ieee80211' [ 356.347544][ T6186] usb usb1-port1: attempt power cycle [ 357.098019][ T6186] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 357.762868][ T6186] usb 1-1: device descriptor read/8, error -71 [ 358.577232][ T6186] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 358.636169][ T6186] usb 1-1: device descriptor read/8, error -71 [ 358.738023][ T6186] usb usb1-port1: unable to enumerate USB device [ 359.068356][ T8702] loop5: detected capacity change from 0 to 7 [ 359.115201][ T5965] Dev loop5: unable to read RDB block 7 [ 359.115243][ T5965] loop5: unable to read partition table [ 359.115467][ T5965] loop5: partition table beyond EOD, truncated [ 359.152710][ T8702] Dev loop5: unable to read RDB block 7 [ 359.152759][ T8702] loop5: unable to read partition table [ 359.152951][ T8702] loop5: partition table beyond EOD, truncated [ 359.174571][ T8702] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 359.241774][ T8707] random: crng reseeded on system resumption [ 359.734352][ T8711] libceph: resolve '4.' (ret=-3): failed [ 363.687192][ T6187] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 363.828677][ T6187] usb 3-1: device descriptor read/64, error -71 [ 364.067153][ T6187] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 364.217166][ T6187] usb 3-1: device descriptor read/64, error -71 [ 364.327584][ T6187] usb usb3-port1: attempt power cycle [ 364.678777][ T6187] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 364.697648][ T6187] usb 3-1: device descriptor read/8, error -71 [ 364.957225][ T6187] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 364.978395][ T6187] usb 3-1: device descriptor read/8, error -71 [ 365.087569][ T6187] usb usb3-port1: unable to enumerate USB device [ 366.857374][ T8781] netlink: 1104 bytes leftover after parsing attributes in process `syz.1.809'. [ 366.857420][ T8781] netlink: 1104 bytes leftover after parsing attributes in process `syz.1.809'. [ 366.928019][ T8782] random: crng reseeded on system resumption [ 367.301325][ T8786] batadv_slave_1: entered promiscuous mode [ 367.307811][ T8785] batadv_slave_1: left promiscuous mode [ 368.217239][ T5891] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 368.378994][ T5891] usb 5-1: Using ep0 maxpacket: 16 [ 368.394047][ T5891] usb 5-1: config 252 has an invalid interface number: 15 but max is 0 [ 368.394074][ T5891] usb 5-1: config 252 has no interface number 0 [ 368.394123][ T5891] usb 5-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 368.459039][ T5891] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 368.459057][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.459067][ T5891] usb 5-1: Product: syz [ 368.459074][ T5891] usb 5-1: Manufacturer: syz [ 368.459082][ T5891] usb 5-1: SerialNumber: syz [ 368.742367][ T8790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 368.742655][ T8790] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 368.854130][ T5891] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 370.019757][ T8828] usb 5-1: Failed to submit usb control message: -110 [ 370.019780][ T8828] usb 5-1: unable to send the bmi data to the device: -110 [ 370.019789][ T8828] usb 5-1: unable to get target info from device [ 370.019807][ T8828] usb 5-1: could not get target info (-110) [ 370.019866][ T8828] usb 5-1: could not probe fw (-110) [ 370.427189][ T5890] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 370.468227][ T5990] usb 5-1: USB disconnect, device number 15 [ 370.557187][ T5890] usb 4-1: device descriptor read/64, error -71 [ 370.807148][ T5890] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 370.947216][ T5890] usb 4-1: device descriptor read/64, error -71 [ 371.067533][ T5890] usb usb4-port1: attempt power cycle [ 371.096013][ T8861] batadv_slave_1: entered promiscuous mode [ 371.096732][ T8860] batadv_slave_1: left promiscuous mode [ 371.467728][ T5890] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 371.487774][ T5890] usb 4-1: device descriptor read/8, error -71 [ 371.570023][ T8865] loop2: detected capacity change from 0 to 7 [ 371.753880][ T5890] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 371.812925][ T5890] usb 4-1: device descriptor read/8, error -71 [ 371.888004][ T8865] Dev loop2: unable to read RDB block 7 [ 371.888118][ T8865] loop2: AHDI p2 p3 [ 371.888226][ T8865] loop2: partition table partially beyond EOD, truncated [ 371.952135][ T8865] loop2: p2 start 1702059890 is beyond EOD, truncated [ 371.969024][ T5890] usb usb4-port1: unable to enumerate USB device [ 372.117171][ T5990] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 372.267217][ T5990] usb 5-1: Using ep0 maxpacket: 16 [ 372.292742][ T5990] usb 5-1: config 8 has an invalid interface number: 159 but max is 0 [ 372.292768][ T5990] usb 5-1: config 8 has no interface number 0 [ 372.292799][ T5990] usb 5-1: config 8 interface 159 has no altsetting 0 [ 372.296659][ T5990] usb 5-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 372.296695][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.296714][ T5990] usb 5-1: Product: syz [ 372.296729][ T5990] usb 5-1: Manufacturer: syz [ 372.296743][ T5990] usb 5-1: SerialNumber: syz [ 372.548912][ T8865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.550074][ T8865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 373.551302][ T5172] Dev loop2: unable to read RDB block 7 [ 373.551322][ T5172] loop2: AHDI p2 p3 [ 373.551346][ T5172] loop2: partition table partially beyond EOD, truncated [ 373.551553][ T5172] loop2: p2 start 1702059890 is beyond EOD, truncated [ 373.941601][ T8896] netlink: 'syz.2.833': attribute type 1 has an invalid length. [ 374.022818][ T8898] netlink: 28 bytes leftover after parsing attributes in process `syz.2.833'. [ 374.254646][ T8896] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.269545][ T8898] bond3: entered promiscuous mode [ 374.269564][ T8898] bond3: entered allmulticast mode [ 374.409394][ T5172] Dev loop2: unable to read RDB block 7 [ 374.409422][ T5172] loop2: AHDI p2 p3 [ 374.409447][ T5172] loop2: partition table partially beyond EOD, truncated [ 374.409666][ T5172] loop2: p2 start 1702059890 is beyond EOD, truncated [ 374.427104][ T5942] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 374.577778][ T5942] usb 2-1: Using ep0 maxpacket: 16 [ 374.580707][ T5942] usb 2-1: config 252 has an invalid interface number: 15 but max is 0 [ 374.580757][ T5942] usb 2-1: config 252 has no interface number 0 [ 374.580787][ T5942] usb 2-1: config 252 interface 15 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 374.634558][ T5942] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 374.634656][ T5942] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.634669][ T5942] usb 2-1: Product: syz [ 374.634677][ T5942] usb 2-1: Manufacturer: syz [ 374.634684][ T5942] usb 2-1: SerialNumber: syz [ 374.830021][ T5942] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 374.927389][ T5890] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 374.985255][ T8892] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 374.986483][ T8892] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.087249][ T5890] usb 3-1: Using ep0 maxpacket: 32 [ 375.096639][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 375.096789][ T5890] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 375.096906][ T5890] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 375.096930][ T5890] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 375.158962][ T5890] usb 3-1: config 0 descriptor?? [ 375.865216][ T1123] usb 2-1: Failed to submit usb control message: -110 [ 375.865245][ T1123] usb 2-1: unable to send the bmi data to the device: -110 [ 375.865255][ T1123] usb 2-1: unable to get target info from device [ 375.865263][ T1123] usb 2-1: could not get target info (-110) [ 375.866573][ T1123] usb 2-1: could not probe fw (-110) [ 375.939106][ T5890] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 376.594200][ T5891] usb 2-1: USB disconnect, device number 18 [ 376.962976][ T5990] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 376.967150][ T5990] gspca_sonixj: reg_w1 err -71 [ 376.967245][ T5990] sonixj 5-1:8.159: probe with driver sonixj failed with error -71 [ 376.993845][ T5990] usb 5-1: USB disconnect, device number 16 [ 377.246345][ T8913] batadv_slave_1: entered promiscuous mode [ 377.331795][ T8911] batadv_slave_1: left promiscuous mode [ 377.709013][ T5942] usb 3-1: USB disconnect, device number 22 [ 377.977241][ T5990] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 378.137219][ T5990] usb 4-1: device descriptor read/64, error -71 [ 378.397169][ T5990] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 378.591228][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.591271][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.612356][ T5990] usb 4-1: device descriptor read/64, error -71 [ 378.717649][ T5990] usb usb4-port1: attempt power cycle [ 379.178075][ T5990] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 379.207650][ T5990] usb 4-1: device descriptor read/8, error -71 [ 379.447182][ T5990] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 379.482050][ T5990] usb 4-1: device descriptor read/8, error -71 [ 379.590083][ T5990] usb usb4-port1: unable to enumerate USB device [ 379.609084][ T8943] netlink: 'syz.0.844': attribute type 1 has an invalid length. [ 379.732657][ T8946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.844'. [ 379.733286][ T8943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 379.780576][ T8946] bond1: entered promiscuous mode [ 379.780597][ T8946] bond1: entered allmulticast mode [ 379.927244][ T5891] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 380.080710][ T5891] usb 5-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 380.080764][ T5891] usb 5-1: config 17 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.080803][ T5891] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 380.080824][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.947263][ T5890] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 381.282368][ T5890] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 381.282397][ T5890] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 381.282416][ T5890] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 381.282505][ T5890] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 381.350435][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 381.350464][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 381.351912][ T5890] usb 1-1: language id specifier not provided by device, defaulting to English [ 381.367176][ T5890] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 381.367204][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.386616][ T5890] usb 1-1: config 0 descriptor?? [ 381.396709][ T5890] hub 1-1:0.0: bad descriptor, ignoring hub [ 381.396792][ T5890] hub 1-1:0.0: probe with driver hub failed with error -5 [ 382.197805][ T5891] usb 5-1: language id specifier not provided by device, defaulting to English [ 382.392994][ T8978] binder: 8977:8978 ioctl 4018620d 0 returned -22 [ 382.414590][ T5891] aiptek 5-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 382.612632][ T5990] usb 5-1: USB disconnect, device number 17 [ 383.433705][ T8986] netlink: 'syz.1.856': attribute type 1 has an invalid length. [ 383.520738][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.856'. [ 383.563307][ T8986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.565182][ T8988] bond1: entered promiscuous mode [ 383.565197][ T8988] bond1: entered allmulticast mode [ 384.019969][ T5804] usb 1-1: USB disconnect, device number 14 [ 385.338962][ T5890] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 385.467160][ T5890] usb 4-1: device descriptor read/64, error -71 [ 385.707231][ T5890] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 386.041269][ T5890] usb 4-1: device descriptor read/64, error -71 [ 386.149029][ T5890] usb usb4-port1: attempt power cycle [ 386.271020][ T9045] binder: 9044:9045 ioctl 4018620d 0 returned -22 [ 386.327458][ T9047] loop5: detected capacity change from 0 to 7 [ 386.335660][ T9047] Dev loop5: unable to read RDB block 7 [ 386.335689][ T9047] loop5: unable to read partition table [ 386.335804][ T9047] loop5: partition table beyond EOD, truncated [ 386.335964][ T9047] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 386.507204][ T5890] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 386.527931][ T5890] usb 4-1: device descriptor read/8, error -71 [ 386.998740][ T5890] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 387.035194][ T5890] usb 4-1: device descriptor read/8, error -71 [ 387.139133][ T5890] usb usb4-port1: unable to enumerate USB device [ 391.459723][ T9089] loop2: detected capacity change from 0 to 7 [ 391.468199][ T9089] Dev loop2: unable to read RDB block 7 [ 391.468225][ T9089] loop2: AHDI p2 p3 [ 391.468247][ T9089] loop2: partition table partially beyond EOD, truncated [ 391.468984][ T9089] loop2: p2 start 1702059890 is beyond EOD, truncated [ 391.837125][ T5891] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 392.007190][ T5891] usb 1-1: Using ep0 maxpacket: 16 [ 392.050868][ T5891] usb 1-1: config 8 has an invalid interface number: 159 but max is 0 [ 392.050931][ T5891] usb 1-1: config 8 has no interface number 0 [ 392.051052][ T5891] usb 1-1: config 8 interface 159 has no altsetting 0 [ 392.057203][ T5891] usb 1-1: New USB device found, idVendor=0c45, idProduct=612a, bcdDevice=29.9c [ 392.057230][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.057249][ T5891] usb 1-1: Product: syz [ 392.057262][ T5891] usb 1-1: Manufacturer: syz [ 392.057276][ T5891] usb 1-1: SerialNumber: syz [ 392.322761][ T9089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 392.323785][ T9089] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 392.414213][ T5990] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 392.616520][ T5990] usb 5-1: config index 0 descriptor too short (expected 1307, got 27) [ 392.616549][ T5990] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 392.616570][ T5990] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 392.616609][ T5990] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 392.616639][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 392.616650][ T5990] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 392.618988][ T5990] usb 5-1: language id specifier not provided by device, defaulting to English [ 392.674025][ T5990] usb 5-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 392.674049][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.688554][ T5990] usb 5-1: config 0 descriptor?? [ 392.797690][ T5990] hub 5-1:0.0: bad descriptor, ignoring hub [ 392.797723][ T5990] hub 5-1:0.0: probe with driver hub failed with error -5 [ 393.227582][ T5990] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 393.387194][ T5990] usb 2-1: Using ep0 maxpacket: 32 [ 393.388212][ T5990] usb 2-1: no configurations [ 393.388229][ T5990] usb 2-1: can't read configurations, error -22 [ 393.527797][ T5990] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 393.707106][ T5990] usb 2-1: Using ep0 maxpacket: 32 [ 393.715001][ T5990] usb 2-1: no configurations [ 393.715019][ T5990] usb 2-1: can't read configurations, error -22 [ 393.715792][ T5990] usb usb2-port1: attempt power cycle [ 394.107176][ T5990] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 394.128058][ T5990] usb 2-1: Using ep0 maxpacket: 32 [ 394.128854][ T5990] usb 2-1: no configurations [ 394.128870][ T5990] usb 2-1: can't read configurations, error -22 [ 394.277631][ T5990] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 394.308095][ T5990] usb 2-1: Using ep0 maxpacket: 32 [ 394.308863][ T5990] usb 2-1: no configurations [ 394.308880][ T5990] usb 2-1: can't read configurations, error -22 [ 394.309187][ T5990] usb usb2-port1: unable to enumerate USB device [ 395.000210][ T5172] Dev loop2: unable to read RDB block 7 [ 395.000230][ T5172] loop2: AHDI p2 p3 [ 395.000246][ T5172] loop2: partition table partially beyond EOD, truncated [ 395.000781][ T5172] loop2: p2 start 1702059890 is beyond EOD, truncated [ 395.047262][ T5990] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 395.208743][ T5990] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 395.208794][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 395.208809][ T5990] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.208825][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 395.208846][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 395.213159][ T5990] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 395.213577][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 395.213600][ T5990] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.215273][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 395.215303][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 395.329650][ T5990] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 395.329725][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 395.329751][ T5990] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 395.329774][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 395.329799][ T5990] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 395.392905][ T5990] usb 4-1: string descriptor 0 read error: -22 [ 395.393134][ T5990] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 395.393157][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.448405][ T5990] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 395.449420][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 395.449441][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.886'. [ 395.657605][ T9115] binder: 9114:9115 ioctl 4018620d 0 returned -22 [ 395.791939][ T9120] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.813376][ T9120] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.837384][ T5990] usb 4-1: USB disconnect, device number 31 [ 395.846639][ T9119] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 395.854444][ T5891] gspca_main: sonixj-2.14.0 probing 0c45:612a [ 395.870103][ T5891] gspca_sonixj: reg_w1 err -71 [ 395.870187][ T5891] sonixj 1-1:8.159: probe with driver sonixj failed with error -71 [ 395.921795][ T5891] usb 1-1: USB disconnect, device number 15 [ 397.687658][ T5891] usb 5-1: USB disconnect, device number 18 [ 400.284344][ T9160] batadv_slave_1: entered promiscuous mode [ 400.301590][ T9159] batadv_slave_1: left promiscuous mode [ 401.942755][ T6187] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 402.827136][ T6187] usb 3-1: Using ep0 maxpacket: 32 [ 402.828935][ T6187] usb 3-1: no configurations [ 402.828953][ T6187] usb 3-1: can't read configurations, error -22 [ 402.957164][ T6187] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 403.107159][ T6187] usb 3-1: Using ep0 maxpacket: 32 [ 403.108773][ T6187] usb 3-1: no configurations [ 403.108784][ T6187] usb 3-1: can't read configurations, error -22 [ 403.109505][ T6187] usb usb3-port1: attempt power cycle [ 404.946545][ T9196] netlink: 28 bytes leftover after parsing attributes in process `syz.3.898'. [ 405.116345][ T9203] loop5: detected capacity change from 0 to 7 [ 405.128400][ T9203] Dev loop5: unable to read RDB block 7 [ 405.128438][ T9203] loop5: unable to read partition table [ 405.128623][ T9203] loop5: partition table beyond EOD, truncated [ 405.128643][ T9203] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 405.147185][ T5817] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 405.227161][ T5990] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 405.317190][ T5817] usb 2-1: Using ep0 maxpacket: 32 [ 405.328015][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.328047][ T5817] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.328083][ T5817] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 405.328105][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.332855][ T5817] usb 2-1: config 0 descriptor?? [ 405.399278][ T5990] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 405.399305][ T5990] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 405.399325][ T5990] usb 5-1: config 220 has no interface number 2 [ 405.399612][ T5990] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 405.399641][ T5990] usb 5-1: config 220 interface 0 has no altsetting 0 [ 405.400205][ T5990] usb 5-1: config 220 interface 76 has no altsetting 0 [ 405.400226][ T5990] usb 5-1: config 220 interface 1 has no altsetting 0 [ 405.405460][ T5990] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 405.405703][ T5990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.405724][ T5990] usb 5-1: Product: syz [ 405.405739][ T5990] usb 5-1: Manufacturer: syz [ 405.405753][ T5990] usb 5-1: SerialNumber: syz [ 406.058776][ T5817] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 406.647885][ T10] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 406.818787][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 406.826778][ T10] usb 3-1: no configurations [ 406.826791][ T10] usb 3-1: can't read configurations, error -22 [ 407.007720][ T10] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 407.227112][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 407.227873][ T10] usb 3-1: no configurations [ 407.227883][ T10] usb 3-1: can't read configurations, error -22 [ 407.230865][ T10] usb usb3-port1: attempt power cycle [ 407.627169][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 407.647950][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 407.648542][ T10] usb 3-1: no configurations [ 407.648552][ T10] usb 3-1: can't read configurations, error -22 [ 407.807182][ T10] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 407.843478][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 407.844773][ T10] usb 3-1: no configurations [ 407.844784][ T10] usb 3-1: can't read configurations, error -22 [ 407.845108][ T10] usb usb3-port1: unable to enumerate USB device [ 408.064961][ T5817] usb 2-1: USB disconnect, device number 23 [ 408.108485][ T5990] usb 5-1: selecting invalid altsetting 0 [ 408.108854][ T5990] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 408.108874][ T5990] uvcvideo 5-1:220.0: No valid video chain found. [ 408.214435][ T5990] usb 5-1: selecting invalid altsetting 0 [ 408.214459][ T5990] usbtest 5-1:220.1: probe with driver usbtest failed with error -22 [ 408.319031][ T5990] usb 5-1: USB disconnect, device number 19 [ 408.597264][ T9238] netlink: 28 bytes leftover after parsing attributes in process `syz.4.923'. [ 409.107340][ T5891] usb 5-1: new low-speed USB device number 20 using dummy_hcd [ 409.259361][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 409.259419][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.259447][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.259473][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.259499][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.261036][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 409.265526][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.265557][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.265584][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.265609][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.266902][ T5891] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 409.266954][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 409.266973][ T5891] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 409.266986][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 409.266999][ T5891] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 409.460685][ T5891] usb 5-1: string descriptor 0 read error: -22 [ 409.460829][ T5891] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 409.460852][ T5891] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.550765][ T9242] binder: 9241:9242 ioctl 4018620d 0 returned -22 [ 410.577575][ T5891] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 410.595296][ T5891] usb 5-1: USB disconnect, device number 20 [ 410.694803][ T9251] binder: 9250:9251 ioctl c0306201 0 returned -14 [ 410.695170][ T9251] binder: 9250:9251 ioctl c0306201 200000000240 returned -11 [ 412.007302][ T9270] random: crng reseeded on system resumption [ 412.017939][ T9270] smk_cipso_doi:692 cipso add rc = -22 [ 412.179749][ T9274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.935'. [ 412.637290][ T6187] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 412.797212][ T6187] usb 2-1: Using ep0 maxpacket: 32 [ 412.799003][ T6187] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 412.799018][ T6187] usb 2-1: config 0 has no interfaces? [ 412.801016][ T6187] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 412.801031][ T6187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.801042][ T6187] usb 2-1: Product: syz [ 412.801049][ T6187] usb 2-1: Manufacturer: syz [ 412.801056][ T6187] usb 2-1: SerialNumber: syz [ 412.807431][ T6187] usb 2-1: config 0 descriptor?? [ 413.012298][ T6187] usb 2-1: USB disconnect, device number 24 [ 413.949861][ T5990] usb 2-1: new low-speed USB device number 25 using dummy_hcd [ 414.037136][ T6187] usb 4-1: new low-speed USB device number 32 using dummy_hcd [ 414.100071][ T5990] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 414.100162][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.100189][ T5990] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.100214][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.100239][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.101659][ T5990] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 414.101710][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.101742][ T5990] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.101768][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.101792][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.103185][ T5990] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 414.103235][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.103263][ T5990] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.103288][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.103313][ T5990] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.199298][ T6187] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 414.199350][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.199378][ T6187] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.199401][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.199427][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.247777][ T6187] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 414.247841][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.247867][ T6187] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.247891][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.247917][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.263473][ T6187] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 414.263528][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 414.263553][ T6187] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 414.263578][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 414.263602][ T6187] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 414.272355][ T5990] usb 2-1: string descriptor 0 read error: -22 [ 414.272525][ T5990] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 414.272548][ T5990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.274472][ T6187] usb 4-1: string descriptor 0 read error: -22 [ 414.274600][ T6187] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 414.274621][ T6187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.565245][ T6187] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 414.578930][ T5990] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 414.728872][ T9294] binder: 9293:9294 ioctl 4018620d 0 returned -22 [ 414.822191][ T9290] binder: 9289:9290 ioctl 4018620d 0 returned -22 [ 414.849304][ T10] usb 2-1: USB disconnect, device number 25 [ 414.985919][ T9311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 414.986442][ T9311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 415.001845][ T6187] usb 4-1: USB disconnect, device number 32 [ 415.002077][ T9308] usb 4-1: Couldn't submit interrupt_out_urb -19 [ 415.272366][ T9316] netlink: 'syz.0.948': attribute type 1 has an invalid length. [ 415.410112][ T9321] netlink: 28 bytes leftover after parsing attributes in process `syz.0.948'. [ 415.419459][ T9316] 8021q: adding VLAN 0 to HW filter on device bond2 [ 415.420221][ T9321] bond2: entered promiscuous mode [ 415.420243][ T9321] bond2: entered allmulticast mode [ 416.438336][ T9329] overlayfs: overlapping lowerdir path [ 417.139821][ T6187] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 417.317130][ T6187] usb 2-1: Using ep0 maxpacket: 32 [ 417.318939][ T6187] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.319666][ T6187] usb 2-1: config 0 has no interfaces? [ 417.397862][ T6187] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 417.397887][ T6187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.397897][ T6187] usb 2-1: Product: syz [ 417.397905][ T6187] usb 2-1: Manufacturer: syz [ 417.397912][ T6187] usb 2-1: SerialNumber: syz [ 417.400784][ T6187] usb 2-1: config 0 descriptor?? [ 417.611514][ T5817] usb 2-1: USB disconnect, device number 26 [ 419.757980][ T9354] netlink: 28 bytes leftover after parsing attributes in process `syz.4.961'. [ 419.767180][ T5890] usb 3-1: new low-speed USB device number 30 using dummy_hcd [ 419.893083][ T9356] netlink: 'syz.4.963': attribute type 1 has an invalid length. [ 419.941801][ T5890] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 419.941856][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 419.941883][ T5890] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.941907][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 419.941934][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 420.015651][ T5890] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 420.015712][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 420.015740][ T5890] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.015766][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 420.015792][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 420.035435][ T5890] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 420.035490][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 420.035517][ T5890] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.035542][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 420.035568][ T5890] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 420.126084][ T9356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 420.151032][ T5890] usb 3-1: string descriptor 0 read error: -22 [ 420.151143][ T5890] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 420.151165][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.227292][ T5890] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 420.428319][ T9352] binder: 9351:9352 ioctl 4018620d 0 returned -22 [ 420.696510][ T9367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.706433][ T9367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.729632][ T5990] usb 3-1: USB disconnect, device number 30 [ 420.737551][ T9364] usb 3-1: Couldn't submit interrupt_out_urb -19 [ 421.447171][ T5890] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 421.627135][ T5890] usb 5-1: Using ep0 maxpacket: 32 [ 421.634991][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.635017][ T5890] usb 5-1: config 0 has no interfaces? [ 421.637872][ T5890] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 421.637899][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.638039][ T5890] usb 5-1: Product: syz [ 421.638054][ T5890] usb 5-1: Manufacturer: syz [ 421.638133][ T5890] usb 5-1: SerialNumber: syz [ 421.671738][ T5890] usb 5-1: config 0 descriptor?? [ 421.876238][ T5890] usb 5-1: USB disconnect, device number 21 [ 422.429585][ T9389] loop5: detected capacity change from 0 to 7 [ 422.430977][ T9389] Dev loop5: unable to read RDB block 7 [ 422.431003][ T9389] loop5: unable to read partition table [ 422.431119][ T9389] loop5: partition table beyond EOD, truncated [ 422.431129][ T9389] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 423.107534][ T9399] netlink: 'syz.2.974': attribute type 1 has an invalid length. [ 423.112018][ T9401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.974'. [ 423.178693][ T9399] 8021q: adding VLAN 0 to HW filter on device bond4 [ 423.179197][ T9401] bond4: entered promiscuous mode [ 423.179219][ T9401] bond4: entered allmulticast mode [ 423.187361][ T5890] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 423.357204][ T5890] usb 4-1: Using ep0 maxpacket: 32 [ 423.412127][ T5890] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 423.412146][ T5890] usb 4-1: config 0 has no interface number 0 [ 423.412173][ T5890] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 423.412184][ T5890] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 423.492045][ T5890] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 423.492065][ T5890] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.492075][ T5890] usb 4-1: Product: syz [ 423.492082][ T5890] usb 4-1: Manufacturer: syz [ 423.492090][ T5890] usb 4-1: SerialNumber: syz [ 423.495057][ T5890] usb 4-1: config 0 descriptor?? [ 423.760376][ T5890] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 423.981267][ T5890] usb 4-1: qt2_setup_urbs - submit read urb failed -90 [ 423.981563][ T5890] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90 [ 425.679420][ T9429] loop5: detected capacity change from 0 to 7 [ 425.684281][ T9429] Dev loop5: unable to read RDB block 7 [ 425.684326][ T9429] loop5: unable to read partition table [ 425.684531][ T9429] loop5: partition table beyond EOD, truncated [ 425.684612][ T9429] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 426.120246][ T9445] random: crng reseeded on system resumption [ 427.866513][ T7614] usb 4-1: USB disconnect, device number 33 [ 428.673311][ T9482] libceph: resolve '4.' (ret=-3): failed [ 431.537238][ T7614] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 431.707181][ T7614] usb 1-1: Using ep0 maxpacket: 32 [ 431.733133][ T7614] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 431.733159][ T7614] usb 1-1: config 0 has no interface number 0 [ 431.733204][ T7614] usb 1-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 431.733233][ T7614] usb 1-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 431.748507][ T7614] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 431.748538][ T7614] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.748559][ T7614] usb 1-1: Product: syz [ 431.748573][ T7614] usb 1-1: Manufacturer: syz [ 431.748588][ T7614] usb 1-1: SerialNumber: syz [ 431.826495][ T7614] usb 1-1: config 0 descriptor?? [ 431.838074][ T7614] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 432.071856][ T7614] usb 1-1: qt2_setup_urbs - submit read urb failed -90 [ 432.072148][ T7614] quatech2 1-1:0.51: probe with driver quatech2 failed with error -90 [ 435.337667][ T9545] overlay: Unknown parameter '/' [ 436.034008][ T5990] usb 1-1: USB disconnect, device number 16 [ 436.458735][ T9559] netlink: 'syz.1.1021': attribute type 16 has an invalid length. [ 436.458757][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1021'. [ 436.782104][ T9568] binder: 9567:9568 ioctl 4018620d 0 returned -22 [ 436.819795][ T9564] libceph: resolve '4.' (ret=-3): failed [ 437.035661][ T9576] random: crng reseeded on system resumption [ 439.670791][ T9610] netlink: 'syz.4.1036': attribute type 16 has an invalid length. [ 439.670805][ T9610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1036'. [ 441.347214][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.347284][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.267138][ T5804] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 443.427331][ T5804] usb 5-1: Using ep0 maxpacket: 16 [ 443.429407][ T5804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 443.429456][ T5804] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 443.429495][ T5804] usb 5-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 443.429517][ T5804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.495121][ T5804] usb 5-1: config 0 descriptor?? [ 443.519420][ T9649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1048'. [ 443.521134][ T5804] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 443.884215][ T9661] libceph: resolve '4.' (ret=-3): failed [ 444.280936][ T5804] usb 5-1: USB disconnect, device number 22 [ 444.519756][ T5990] usb 1-1: new low-speed USB device number 17 using dummy_hcd [ 444.521490][ T9667] loop5: detected capacity change from 0 to 7 [ 444.526546][ T9128] Dev loop5: unable to read RDB block 7 [ 444.526579][ T9128] loop5: unable to read partition table [ 444.526772][ T9128] loop5: partition table beyond EOD, truncated [ 444.588489][ T9667] Dev loop5: unable to read RDB block 7 [ 444.588558][ T9667] loop5: unable to read partition table [ 444.588735][ T9667] loop5: partition table beyond EOD, truncated [ 444.588747][ T9667] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 444.909458][ T5990] usb 1-1: config index 0 descriptor too short (expected 1307, got 27) [ 444.909545][ T5990] usb 1-1: config 0 has an invalid interface number: 0 but max is -1 [ 444.909605][ T5990] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 444.909645][ T5990] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 444.909683][ T5990] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 444.909704][ T5990] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 444.911304][ T5990] usb 1-1: language id specifier not provided by device, defaulting to English [ 444.934851][ T5990] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 444.934880][ T5990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.031505][ T5990] usb 1-1: config 0 descriptor?? [ 445.046417][ T5990] hub 1-1:0.0: bad descriptor, ignoring hub [ 445.046454][ T5990] hub 1-1:0.0: probe with driver hub failed with error -5 [ 446.204510][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1060'. [ 447.277216][ T5817] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 447.427235][ T5817] usb 2-1: Using ep0 maxpacket: 16 [ 447.429509][ T5817] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 447.429565][ T5817] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 447.429607][ T5817] usb 2-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 447.429630][ T5817] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 447.434814][ T5817] usb 2-1: config 0 descriptor?? [ 447.519903][ T5817] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 447.589999][ T9711] random: crng reseeded on system resumption [ 448.107579][ T7614] usb 1-1: USB disconnect, device number 17 [ 449.625932][ T9741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 449.626435][ T9741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 449.855025][ T9738] libceph: resolve '4.' (ret=-3): failed [ 451.335152][ T6187] usb 2-1: USB disconnect, device number 27 [ 452.266929][ T9779] binder: 9778:9779 ioctl c0306201 0 returned -14 [ 454.224772][ T9789] netlink: 'syz.2.1089': attribute type 17 has an invalid length. [ 454.224786][ T9789] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1089'. [ 454.494262][ T37] kauditd_printk_skb: 11 callbacks suppressed [ 454.494278][ T37] audit: type=1326 audit(1768153612.001:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.494746][ T37] audit: type=1326 audit(1768153612.001:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.557408][ T37] audit: type=1326 audit(1768153612.071:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.557685][ T37] audit: type=1326 audit(1768153612.071:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.557939][ T37] audit: type=1326 audit(1768153612.071:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.558365][ T37] audit: type=1326 audit(1768153612.071:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.558784][ T37] audit: type=1326 audit(1768153612.071:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.559039][ T37] audit: type=1326 audit(1768153612.071:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.559498][ T37] audit: type=1326 audit(1768153612.071:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.560220][ T37] audit: type=1326 audit(1768153612.071:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9792 comm="syz.2.1092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52ad30f749 code=0x7ffc0000 [ 454.830759][ T9793] netlink: 'syz.2.1092': attribute type 2 has an invalid length. [ 455.177355][ T5942] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 455.327125][ T5942] usb 1-1: Using ep0 maxpacket: 16 [ 455.330690][ T5942] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 455.330744][ T5942] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 455.330784][ T5942] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 455.330809][ T5942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.335911][ T5942] usb 1-1: config 0 descriptor?? [ 455.435802][ T5942] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 455.830251][ T9813] loop5: detected capacity change from 0 to 7 [ 455.835544][ T9813] Dev loop5: unable to read RDB block 7 [ 455.835589][ T9813] loop5: unable to read partition table [ 455.835794][ T9813] loop5: partition table beyond EOD, truncated [ 455.836499][ T9813] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 457.785625][ T9825] netlink: 'syz.4.1102': attribute type 17 has an invalid length. [ 457.785645][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1102'. [ 457.952038][ T7614] usb 1-1: USB disconnect, device number 18 [ 459.619398][ T9847] input: syz0 as /devices/virtual/input/input23 [ 459.928429][ T5817] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 460.092612][ T5817] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.092640][ T5817] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 460.119442][ T5817] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 460.119473][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 460.177086][ T5817] usb 5-1: config 0 descriptor?? [ 460.194161][ T9851] tmpfs: Unknown parameter 'mpoÀl' [ 460.372661][ T5817] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 460.372693][ T5817] dvb-usb: bulk message failed: -22 (3/0) [ 461.682480][ T5817] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 461.683390][ T5817] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 461.683443][ T5817] usb 5-1: media controller created [ 461.685351][ T5817] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.735928][ T5817] dvb-usb: bulk message failed: -22 (6/0) [ 461.736011][ T5817] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 461.755199][ T5817] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 461.783009][ T5817] dvb-usb: schedule remote query interval to 150 msecs. [ 461.783032][ T5817] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 463.062414][ T5990] dvb-usb: bulk message failed: -22 (1/0) [ 463.062447][ T5990] dvb-usb: error while querying for an remote control event. [ 463.126832][ T5817] usb 5-1: USB disconnect, device number 23 [ 463.302322][ T5817] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 465.728134][ T9883] random: crng reseeded on system resumption [ 466.787794][ T9893] input: syz0 as /devices/virtual/input/input25 [ 468.599693][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1113'. [ 468.967223][ T5990] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 469.147176][ T5990] usb 4-1: Using ep0 maxpacket: 16 [ 469.151212][ T5990] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 0.02 [ 469.151242][ T5990] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=3 [ 469.151262][ T5990] usb 4-1: Manufacturer: syz [ 469.151276][ T5990] usb 4-1: SerialNumber: syz [ 469.191847][ T5990] usb 4-1: config 0 descriptor?? [ 469.201163][ T5990] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 469.203423][ T5990] usb 4-1: Detected SIO [ 469.229528][ T5990] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 469.434787][ T9903] IPVS: set_ctl: invalid protocol: 22 172.30.1.4:20004 [ 469.454719][ T9909] ======================================================= [ 469.454719][ T9909] WARNING: The mand mount option has been deprecated and [ 469.454719][ T9909] and is ignored by this kernel. Remove the mand [ 469.454719][ T9909] option from the mount to silence this warning. [ 469.454719][ T9909] ======================================================= [ 471.202470][ T37] kauditd_printk_skb: 49 callbacks suppressed [ 471.202488][ T37] audit: type=1326 audit(1768153628.711:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.204869][ T37] audit: type=1326 audit(1768153628.711:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.210278][ T37] audit: type=1326 audit(1768153628.721:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.210556][ T37] audit: type=1326 audit(1768153628.721:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.210784][ T37] audit: type=1326 audit(1768153628.721:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.211220][ T37] audit: type=1326 audit(1768153628.721:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.212592][ T37] audit: type=1326 audit(1768153628.721:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.213034][ T37] audit: type=1326 audit(1768153628.721:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.214733][ T37] audit: type=1326 audit(1768153628.721:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.215199][ T37] audit: type=1326 audit(1768153628.721:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9924 comm="syz.4.1130" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4d039f749 code=0x7ffc0000 [ 471.440434][ T9903] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.443662][ T9903] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.027257][ T9939] input: syz0 as /devices/virtual/input/input26 [ 472.625453][ T9903] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 472.685702][ T9903] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 472.844440][ T9959] CIFS: iocharset name too long [ 473.981640][ T9971] netlink: 'syz.2.1143': attribute type 2 has an invalid length. [ 474.307236][ T5804] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 474.474766][ T5804] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 474.474795][ T5804] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.474812][ T5804] usb 2-1: Product: syz [ 474.474825][ T5804] usb 2-1: Manufacturer: syz [ 474.474839][ T5804] usb 2-1: SerialNumber: syz [ 474.533188][ T9993] input: syz0 as /devices/virtual/input/input27 [ 474.546134][ T5804] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 474.567594][ T5990] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 474.602206][ T7614] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 474.721127][ T5990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 474.721183][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 474.721210][ T5990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.721234][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 474.721259][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 474.722724][ T5990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 474.722776][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 474.722803][ T5990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.722826][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 474.722852][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 474.724597][ T5990] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 474.724649][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 474.724676][ T5990] usb 3-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 474.724700][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 474.724727][ T5990] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 474.759725][ T5990] usb 3-1: string descriptor 0 read error: -22 [ 474.759862][ T5990] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 474.759885][ T5990] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.765855][ T9996] CIFS: iocharset name too long [ 474.795999][ T5990] adutux 3-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 474.978216][ T3564] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.983154][ T3564] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.983197][ T3564] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.983231][ T3564] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.991142][ T9987] binder: BINDER_SET_CONTEXT_MGR already set [ 474.991156][ T9987] binder: 9986:9987 ioctl 4018620d 2000000000c0 returned -16 [ 474.992804][ T9987] binder: 9986:9987 ioctl 4018620d 0 returned -22 [ 475.366322][ T5990] usb 4-1: USB disconnect, device number 34 [ 475.385987][ T5990] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 475.392649][ T5990] ftdi_sio 4-1:0.0: device disconnected [ 475.697145][ T7614] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 475.702234][ T7614] ath9k_htc: Failed to initialize the device [ 475.883132][ T7614] usb 2-1: ath9k_htc: USB layer deinitialized [ 477.218111][ T37] kauditd_printk_skb: 81 callbacks suppressed [ 477.218128][ T37] audit: type=1326 audit(1768153634.731:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.219695][ T37] audit: type=1326 audit(1768153634.731:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.223518][ T37] audit: type=1326 audit(1768153634.731:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.224022][ T37] audit: type=1326 audit(1768153634.731:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.224504][ T37] audit: type=1326 audit(1768153634.731:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.224928][ T37] audit: type=1326 audit(1768153634.731:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.226216][ T37] audit: type=1326 audit(1768153634.731:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.267240][ T37] audit: type=1326 audit(1768153634.731:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.267300][ T37] audit: type=1326 audit(1768153634.731:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.298729][ T5817] usb 3-1: USB disconnect, device number 31 [ 477.299560][ T37] audit: type=1326 audit(1768153634.731:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10008 comm="syz.3.1155" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd1069ff749 code=0x7ffc0000 [ 477.556450][T10011] netlink: 'syz.3.1155': attribute type 2 has an invalid length. [ 477.762914][T10024] kernel read not supported for file /eth0 (pid: 10024 comm: syz.4.1160) [ 478.037384][ T5817] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 478.096320][ T5990] usb 2-1: USB disconnect, device number 28 [ 478.167326][ T5817] usb 5-1: device descriptor read/64, error -71 [ 478.220467][T10034] CIFS: iocharset name too long [ 478.407210][ T5817] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 478.473365][ T5990] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 478.546923][ T5817] usb 5-1: device descriptor read/64, error -71 [ 478.631347][ T5990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 478.631437][ T5990] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 478.631493][ T5990] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 478.631505][ T5990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.635462][ T5990] usb 2-1: config 0 descriptor?? [ 478.640921][ T5990] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 478.640967][ T5990] dvb-usb: bulk message failed: -22 (3/0) [ 478.649644][ T5817] usb usb5-port1: attempt power cycle [ 478.714711][ T5990] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 478.720722][ T5990] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 478.720776][ T5990] usb 2-1: media controller created [ 478.722608][ T5990] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 478.776317][ T5990] dvb-usb: bulk message failed: -22 (6/0) [ 478.776369][ T5990] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 478.784419][ T5990] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input29 [ 478.826988][ T5990] dvb-usb: schedule remote query interval to 150 msecs. [ 478.835124][ T5990] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 478.982673][ T5990] usb 2-1: USB disconnect, device number 29 [ 478.988359][ T5942] dvb-usb: bulk message failed: -22 (1/0) [ 478.988392][ T5942] dvb-usb: error while querying for an remote control event. [ 479.047201][ T5817] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 479.078295][ T5817] usb 5-1: device descriptor read/8, error -71 [ 479.179939][ T5990] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 479.317132][ T5817] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 479.337857][ T5817] usb 5-1: device descriptor read/8, error -71 [ 479.450193][ T5817] usb usb5-port1: unable to enumerate USB device [ 479.491111][T10031] ------------[ cut here ]------------ [ 479.491130][T10031] WARNING: kernel/kcov.c:477 at kcov_task_exit+0xf5/0x160, CPU#1: syz.1.1162/10031 [ 479.491176][T10031] Modules linked in: [ 479.491208][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.1.1162 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.491233][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.491251][T10031] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 479.491278][T10031] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 24 51 00 48 89 df 5b 41 5e 41 5f e9 f9 c8 56 00 7c 1c 5b 41 5e 41 5f e9 8d ca 15 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 cb 64 14 09 48 89 df be 03 00 [ 479.491295][T10031] RSP: 0018:ffffc9001e64fd20 EFLAGS: 00010287 [ 479.491313][T10031] RAX: 2c285472e9fc4700 RBX: ffff888026f2bc00 RCX: 0000000000000000 [ 479.491326][T10031] RDX: 00000000705f4a1b RSI: ffffffff8b3f57c0 RDI: 00000000ffffffff [ 479.491341][T10031] RBP: ffffc9001e64fe78 R08: ffffffff8ad41021 R09: ffffffff8d5ae940 [ 479.491355][T10031] R10: dffffc0000000000 R11: fffffbfff1db66cf R12: 1ffff110047edc4d [ 479.491370][T10031] R13: 0000000000000000 R14: ffff888026f2bc08 R15: ffff88802aa2bc80 [ 479.491384][T10031] FS: 000055555c0c4500(0000) GS:ffff888126def000(0000) knlGS:0000000000000000 [ 479.491400][T10031] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 479.491414][T10031] CR2: 0000200000015000 CR3: 0000000062380000 CR4: 00000000003526f0 [ 479.491430][T10031] Call Trace: [ 479.491442][T10031] [ 479.491452][T10031] do_exit+0xd1/0x22f0 [ 479.491484][T10031] ? lockdep_hardirqs_on+0x7b/0x110 [ 479.491505][T10031] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 479.491526][T10031] ? rt_mutex_slowunlock+0x493/0x8a0 [ 479.491550][T10031] ? reacquire_held_locks+0x104/0x190 [ 479.491576][T10031] ? rt_spin_lock+0x1c1/0x3e0 [ 479.491600][T10031] ? __pfx_do_exit+0x10/0x10 [ 479.491626][T10031] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 479.491654][T10031] ? rt_spin_unlock+0x150/0x200 [ 479.491684][T10031] ? rt_spin_unlock+0x161/0x200 [ 479.491709][T10031] do_group_exit+0x21c/0x2d0 [ 479.491740][T10031] __x64_sys_exit_group+0x3f/0x40 [ 479.491785][T10031] x64_sys_call+0x2210/0x2210 [ 479.491814][T10031] do_syscall_64+0xec/0xf80 [ 479.491834][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.491854][T10031] ? trace_irq_disable+0x37/0x100 [ 479.491874][T10031] ? clear_bhb_loop+0x60/0xb0 [ 479.491898][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.491917][T10031] RIP: 0033:0x7fc46787f749 [ 479.491940][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.491957][T10031] RSP: 002b:00007ffc17aeba78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 479.491976][T10031] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc46787f749 [ 479.491989][T10031] RDX: 00007fc466ae9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.492002][T10031] RBP: 00007ffc17aebadc R08: 000000000000a5ac R09: 000055555c0d7590 [ 479.492016][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000cb [ 479.492029][T10031] R13: 000055555c0d7590 R14: 0000000000074214 R15: 00007ffc17aebb30 [ 479.492062][T10031] [ 479.492081][T10031] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 479.492094][T10031] CPU: 1 UID: 0 PID: 10031 Comm: syz.1.1162 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 479.492110][T10031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.492117][T10031] Call Trace: [ 479.492122][T10031] [ 479.492126][T10031] vpanic+0x1e0/0x670 [ 479.492143][T10031] panic+0xb9/0xc0 [ 479.492158][T10031] ? __pfx_panic+0x10/0x10 [ 479.492180][T10031] __warn+0x317/0x4b0 [ 479.492193][T10031] ? kcov_task_exit+0xf5/0x160 [ 479.492205][T10031] ? kcov_task_exit+0xf5/0x160 [ 479.492215][T10031] __report_bug+0x288/0x500 [ 479.492226][T10031] ? kcov_task_exit+0xf5/0x160 [ 479.492239][T10031] ? __pfx___report_bug+0x10/0x10 [ 479.492251][T10031] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 479.492273][T10031] ? rt_spin_lock+0x1c1/0x3e0 [ 479.492288][T10031] ? rt_spin_lock+0x1c1/0x3e0 [ 479.492303][T10031] ? kcov_task_exit+0xf5/0x160 [ 479.492313][T10031] report_bug+0x16a/0x220 [ 479.492323][T10031] ? kcov_task_exit+0xf5/0x160 [ 479.492332][T10031] ? kcov_task_exit+0xf7/0x160 [ 479.492342][T10031] handle_bug+0x98/0x200 [ 479.492355][T10031] exc_invalid_op+0x1a/0x50 [ 479.492367][T10031] asm_exc_invalid_op+0x1a/0x20 [ 479.492378][T10031] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 479.492388][T10031] Code: 10 00 00 48 8b bb 90 00 00 00 e8 e6 24 51 00 48 89 df 5b 41 5e 41 5f e9 f9 c8 56 00 7c 1c 5b 41 5e 41 5f e9 8d ca 15 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 cb 64 14 09 48 89 df be 03 00 [ 479.492397][T10031] RSP: 0018:ffffc9001e64fd20 EFLAGS: 00010287 [ 479.492406][T10031] RAX: 2c285472e9fc4700 RBX: ffff888026f2bc00 RCX: 0000000000000000 [ 479.492414][T10031] RDX: 00000000705f4a1b RSI: ffffffff8b3f57c0 RDI: 00000000ffffffff [ 479.492421][T10031] RBP: ffffc9001e64fe78 R08: ffffffff8ad41021 R09: ffffffff8d5ae940 [ 479.492429][T10031] R10: dffffc0000000000 R11: fffffbfff1db66cf R12: 1ffff110047edc4d [ 479.492437][T10031] R13: 0000000000000000 R14: ffff888026f2bc08 R15: ffff88802aa2bc80 [ 479.492448][T10031] ? rt_spin_lock+0x1c1/0x3e0 [ 479.492466][T10031] do_exit+0xd1/0x22f0 [ 479.492480][T10031] ? lockdep_hardirqs_on+0x7b/0x110 [ 479.492490][T10031] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 479.492501][T10031] ? rt_mutex_slowunlock+0x493/0x8a0 [ 479.492514][T10031] ? reacquire_held_locks+0x104/0x190 [ 479.492531][T10031] ? rt_spin_lock+0x1c1/0x3e0 [ 479.492544][T10031] ? __pfx_do_exit+0x10/0x10 [ 479.492558][T10031] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 479.492572][T10031] ? rt_spin_unlock+0x150/0x200 [ 479.492588][T10031] ? rt_spin_unlock+0x161/0x200 [ 479.492602][T10031] do_group_exit+0x21c/0x2d0 [ 479.492619][T10031] __x64_sys_exit_group+0x3f/0x40 [ 479.492633][T10031] x64_sys_call+0x2210/0x2210 [ 479.492647][T10031] do_syscall_64+0xec/0xf80 [ 479.492661][T10031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.492670][T10031] ? trace_irq_disable+0x37/0x100 [ 479.492681][T10031] ? clear_bhb_loop+0x60/0xb0 [ 479.492693][T10031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.492703][T10031] RIP: 0033:0x7fc46787f749 [ 479.492711][T10031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.492720][T10031] RSP: 002b:00007ffc17aeba78 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 479.492731][T10031] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fc46787f749 [ 479.492738][T10031] RDX: 00007fc466ae9000 RSI: 0000000000000000 RDI: 0000000000000000 [ 479.492745][T10031] RBP: 00007ffc17aebadc R08: 000000000000a5ac R09: 000055555c0d7590 [ 479.492752][T10031] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000000000cb [ 479.492758][T10031] R13: 000055555c0d7590 R14: 0000000000074214 R15: 00007ffc17aebb30 [ 479.492774][T10031] [ 479.493123][T10031] Kernel Offset: disabled