last executing test programs: 25m33.263391863s ago: executing program 32 (id=719): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) write$vhost_msg_v2(r0, &(0x7f0000002b00)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x2}}, 0x48) 19m8.175346348s ago: executing program 33 (id=10331): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000000)='/proc\x00\x00\x00\x00\x00\x00\x00\x00D\x00\x00v4\x00\x00s/\x92Ync_\x00le\xf44.\xab%nN\xd4\xfc\x11\x00\xd1l,'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x120) lseek(r1, 0x3, 0x3) 16m52.504902871s ago: executing program 34 (id=13515): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) splice(r0, 0x0, r2, 0x0, 0x8, 0x0) fcntl$setpipe(r1, 0x407, 0x3000000) write$eventfd(r1, &(0x7f0000000040)=0x400000009, 0x8) 16m7.947323748s ago: executing program 5 (id=14371): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003340)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="af8d", 0x2}], 0x1}}], 0x1, 0x44008090) recvmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x12102) 16m7.877344843s ago: executing program 5 (id=14374): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0xf4ff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 16m7.428878678s ago: executing program 5 (id=14384): syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x32b, @tick=0x440, 0xd8, {}, 0x0, 0x0, 0x4b}) 16m7.007129735s ago: executing program 5 (id=14397): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, 0x0) 16m6.827247806s ago: executing program 5 (id=14398): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f000074f000/0x400000)=nil) read(r0, &(0x7f0000001600)=""/233, 0xe9) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000818000/0x2000)=nil, 0x2000}}) 16m5.90717101s ago: executing program 5 (id=14419): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) 16m5.486012785s ago: executing program 35 (id=14419): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) ioctl$SNDCTL_DSP_GETODELAY(r1, 0x80045017, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) write$snddsp(r2, &(0x7f0000000200), 0x0) 15m23.222904802s ago: executing program 7 (id=15312): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) syz_usb_connect$uac1(0x6, 0x71, &(0x7f0000000200)=ANY=[@ANYBLOB="12015103000000086b1d010140000102030109025f000301be40500904000000010100000a240101006602010209040100000102000009070001"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 15m22.548454706s ago: executing program 7 (id=15328): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xff48, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c0001800600060008"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 15m22.354474037s ago: executing program 7 (id=15333): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x13ec, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000007300007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') syz_usb_control_io(r0, &(0x7f00000013c0)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB="201170"], 0x0, 0x0, 0x0, 0x0}, 0x0) 15m20.525080789s ago: executing program 7 (id=15363): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x4) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f00000001c0)='./file0\x00') 15m20.371547616s ago: executing program 7 (id=15367): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4008840) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a030200020000000000000200000009000200"], 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000003000000040001000500000000000000", @ANYBLOB="fc0000ff00004400"/19, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00'}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c000380140001"], 0x110}}, 0x0) 15m19.141473968s ago: executing program 7 (id=15390): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000002480)=0x49cc) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 15m18.53010516s ago: executing program 36 (id=15390): r0 = creat(&(0x7f0000000200)='./file0\x00', 0x100) close(r0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = dup(r1) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000002480)=0x49cc) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x200400, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 15m5.315286133s ago: executing program 9 (id=15607): r0 = socket$inet(0x2, 0xa, 0x0) r1 = fanotify_init(0x200, 0x0) r2 = dup(r0) fanotify_mark(r1, 0x1, 0x48000053, r2, 0x0) r3 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) 15m4.682974853s ago: executing program 9 (id=15621): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x707c, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) 15m4.228245006s ago: executing program 9 (id=15631): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x80200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x2, r3}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000000)={0xc, r1}) ioctl$IOMMU_VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4) 15m3.966994814s ago: executing program 9 (id=15637): r0 = landlock_create_ruleset(&(0x7f0000000200)={0xe249, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) landlock_restrict_self(r1, 0x5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 15m3.750647406s ago: executing program 9 (id=15642): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1a, &(0x7f0000000000)='/\x00\x02\x00\x00/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2\xbe\xf0\x81x\x97'}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000780)='./file0/../file0\x00', 0x0, 0xa06002, 0x0) 15m3.547756377s ago: executing program 9 (id=15649): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 15m0.058151377s ago: executing program 0 (id=15697): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000440)={0x28, 0x7, r1, 0x0, &(0x7f0000000480)='LLL', 0x3, 0x2}) ioctl$IOMMU_IOAS_UNMAP(r0, 0x3b86, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000006c0)={0x48, 0x1, r1, 0x0, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1004000}) 14m59.938398596s ago: executing program 0 (id=15700): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x303}, "0587a06a93f2aad4", "9b84f987950ff3df25fa8f46983d34157e047d27ae4a66a6d15608a32cbaa5bc", '\x00', "be0ea450d5a50003"}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f00000003c0)={0x0, 0x0}) 14m58.747266332s ago: executing program 0 (id=15717): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0xfcffffffffffffff, &(0x7f0000000140)="cc"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000440)=[@request_death], 0x0, 0x0, 0x0}) 14m58.472752309s ago: executing program 0 (id=15722): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xfc5, 0xb080, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x3, 0x5, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x33, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000002300)={0x2c, &(0x7f0000000040)={0x40, 0x23, 0x2f, {0x2f, 0x6, "25f4e4e9f494c657ebb4910a7d1e160d0e3c2199b77bb91ea647ba8c686a59370f60a1d38ebb6f07b1b1461dd1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00', r1}, 0x18) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300), 0x0}) 14m55.119159079s ago: executing program 0 (id=15781): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x40, 0x1) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40015}, 0x24004880) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40086602, &(0x7f0000000000)) linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0) 14m54.999023976s ago: executing program 0 (id=15785): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 14m47.397296573s ago: executing program 37 (id=15649): r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @broadcast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000000)={0x20, 0x31, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) 14m38.829692846s ago: executing program 38 (id=15785): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x4ee59ce4, 0xfffffffffffffffe, 0xfffffffc}, 0x0) ioprio_set$pid(0x3, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x33, 0x0, 0x0) 10m55.302518834s ago: executing program 4 (id=18584): socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0xa82, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000003c0)={'\x00', 0x9, 0x8, 0xffffff80, 0x41, 0x2, 0xffffffffffffffff}) sched_setscheduler(r1, 0x2, &(0x7f0000000440)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) syz_open_procfs$namespace(r2, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x922, 0x12) 10m52.802007229s ago: executing program 4 (id=18592): r0 = socket$inet(0xa, 0x801, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_open_procfs$namespace(r1, 0x0) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, &(0x7f0000000100)) listen(r0, 0x8) accept4(r0, 0x0, 0x0, 0x0) syz_usb_connect(0x2, 0x2f, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100135d82108262f634f428d7002030109021d800d0904501001ef0101"], 0x0) 10m48.697411754s ago: executing program 4 (id=18612): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000300), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x1, 0x5) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r6, &(0x7f0000000200)=0x1, 0x12) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x5) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r7, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 10m47.002428989s ago: executing program 4 (id=18620): r0 = dup(0xffffffffffffffff) write$binfmt_aout(r0, &(0x7f0000000580)=ANY=[], 0xfffffeb7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000480)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xe) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r4, 0x40085112, &(0x7f0000000040)=@e={0xff, 0xa, 0x0, 0x40, @SEQ_NOTEON=@note=0x7}) 10m45.702734327s ago: executing program 4 (id=18627): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0xfffffffffffffeef, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) ppoll(0x0, 0x0, &(0x7f0000000100)={0x0, 0x989680}, 0x0, 0x0) 10m42.119588391s ago: executing program 4 (id=18642): socket$nl_route(0x10, 0x3, 0x0) close(0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x3084422, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 10m25.481367336s ago: executing program 39 (id=18642): socket$nl_route(0x10, 0x3, 0x0) close(0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x3084422, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) 7.365852196s ago: executing program 3 (id=26637): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xd, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000280)) ioctl$SIOCX25SCALLUSERDATA(0xffffffffffffffff, 0x89e7, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) 7.174927096s ago: executing program 3 (id=26641): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f00000010c0)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}, 0x0, 0x0, 0x1b, 0x0, "61a1ed8439cde8054f2ada6fcd5fe76b933e8bb0ac60081e33dffa150835f7519d5f73b4e1d80eb4881a5b98cb9fb96d225d602392f816d0bdcc09b5063087117502d8c24f1fe97f61fd27a06d6a38a7"}, 0xd8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000100)=0x7, 0x4) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r7, &(0x7f0000004280)={0x2020}, 0xffe7) syz_fuse_handle_req(r7, &(0x7f00000082c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x9c, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r6, r7, 0x0) 5.752956171s ago: executing program 3 (id=26649): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}]}, 0x1c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x0) connect$rose(r6, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 3.523848594s ago: executing program 3 (id=26666): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}]}, 0x1c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r6, 0x0) connect$rose(r6, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 3.319186971s ago: executing program 6 (id=26670): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_INPUT(r0, 0x0, 0x0) 3.236197367s ago: executing program 8 (id=26671): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/freeze_filesystems', 0x20202, 0xa4) sendfile(r0, r0, 0x0, 0x68) 3.129944787s ago: executing program 6 (id=26673): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000080)=0x83) 2.153356853s ago: executing program 3 (id=26679): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="9500000000724bf3a4a49074c800000085100000feffffff9500000000000000"], &(0x7f0000000280)='GPL\x00', 0x4, 0xdf, &(0x7f00000002c0)=""/223, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0xc, 0x0, 0x2, 0x10, &(0x7f00000004c0), 0x10}, 0x80) 2.143154368s ago: executing program 8 (id=26680): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) 2.062228262s ago: executing program 2 (id=26682): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$tty1(0xc, 0x4, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000280)) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e7, 0x0) 2.047704154s ago: executing program 6 (id=26683): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0x0, 0x1, 0x8, 0x2, 0x0, 0x7fd1fc28, 0x0}) 1.967236221s ago: executing program 8 (id=26684): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x24, 0x3, 0x1, 0x201, 0x0, 0x0, {}, [@CTA_STATUS={0x8}, @CTA_STATUS_MASK={0x8}]}, 0x24}}, 0x0) 1.955053596s ago: executing program 3 (id=26686): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r4, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000001c0)="00b6ca", 0x3}], 0x1}}], 0x1, 0x4040840) 1.909668663s ago: executing program 8 (id=26687): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4075}, 0x4880) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC, @ANYRESDEC, @ANYRES8], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000940)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x7}]}, 0x1c}}, 0x64000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x110) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030"]) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) 1.859100713s ago: executing program 2 (id=26688): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newsa={0x154, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@broadcast, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x33}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0x3fc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2b, 0x70bd2c, 0x70bd27, 0x70bd27}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x844) 1.843694634s ago: executing program 6 (id=26689): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f0000000040)={0x4, 0x5, 0x0, 0xfffffffc, 'syz0\x00'}) 1.726322243s ago: executing program 6 (id=26691): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a40)={r0, 0x27, 0xe, 0x0, &(0x7f0000000440)="f8ad48cc02cb29dcc8007f5b0800", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.725489039s ago: executing program 1 (id=26692): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xd, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000280)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e7, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x15, 0x0) 1.611270135s ago: executing program 2 (id=26693): r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x40400) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000500)={0x1, 0x5, 0x4, 0x40, 0x400, {0x77359400}, {0x1, 0x8, 0x8, 0x7, 0x2, 0x4, "64e70af0"}, 0x200, 0x4, {}, 0x8a}) 1.591211271s ago: executing program 1 (id=26694): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) pipe(0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xfff3, 0xb}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x281e}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.553001815s ago: executing program 6 (id=26695): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) pread64(r0, &(0x7f00000001c0)=""/200, 0xc8, 0x0) 699.274444ms ago: executing program 2 (id=26696): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xb, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000ffffffe600000000000000008500000027000000850000002300000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0xe, 0x0, &(0x7f0000000340)="348b4d157b8ab1d21f8218e3c736", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 698.753265ms ago: executing program 1 (id=26697): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) fcntl$getflags(r0, 0xb) 498.443025ms ago: executing program 8 (id=26698): r0 = syz_open_dev$video4linux(&(0x7f0000001d80), 0x3, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r0, 0xc040564a, &(0x7f0000000000)={0x0, 0x0, 0x3001}) 380.768187ms ago: executing program 2 (id=26699): r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mq_getsetattr(r0, 0x0, 0x0) 247.402436ms ago: executing program 1 (id=26700): r0 = socket(0x400000000010, 0x3, 0x0) fsetxattr$smack_xattr_label(r0, &(0x7f00000000c0)='security.SMACK64IPOUT\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="73797a6b616c6c65723000931b3a78cb4a6ed0"], 0xc, 0x1) 196.102891ms ago: executing program 8 (id=26701): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x22902, 0x0) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 165.835791ms ago: executing program 2 (id=26702): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680)) chmod(0x0, 0x88) 59.308643ms ago: executing program 1 (id=26703): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KIOCSOUND(r0, 0x4b2f, 0xc) 0s ago: executing program 1 (id=26704): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000000)=0xd, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x5) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x3, 0x0, &(0x7f0000000300)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) arch_prctl$ARCH_GET_XCOMP_SUPP(0x1021, &(0x7f0000000280)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e7, 0x0) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x15, 0x0) kernel console output (not intermixed with test programs): T25622] usb 9-1: new full-speed USB device number 23 using dummy_hcd [ 1157.141184][T25622] usb 9-1: config 0 has an invalid interface number: 172 but max is 0 [ 1157.141212][T25622] usb 9-1: config 0 has no interface number 0 [ 1157.144323][T25622] usb 9-1: New USB device found, idVendor=16d5, idProduct=650a, bcdDevice=83.b1 [ 1157.144349][T25622] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.144377][T25622] usb 9-1: Product: syz [ 1157.144391][T25622] usb 9-1: Manufacturer: syz [ 1157.144404][T25622] usb 9-1: SerialNumber: syz [ 1157.152687][T25622] usb 9-1: config 0 descriptor?? [ 1157.156790][T25622] qmi_wwan 9-1:0.172: bogus CDC Union: master=0, slave=0 [ 1157.391330][T25622] qmi_wwan 9-1:0.172: probe with driver qmi_wwan failed with error -22 [ 1157.617342][T25622] usb 9-1: USB disconnect, device number 23 [ 1158.004667][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1158.287654][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1160.291852][ T44] team0 (unregistering): Port device macvlan1 removed [ 1163.606236][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1164.042527][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1167.289231][ T44] team0 (unregistering): Port device dummy0 removed [ 1169.208070][T15790] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.208759][T15790] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.208919][T15790] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.345147][T14345] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1169.432312][T14345] 8021q: adding VLAN 0 to HW filter on device team0 [ 1169.478696][ T3492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1169.480627][ T3492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1169.509153][T30277] bridge0: port 2(bridge_slave_1) entered blocking state [ 1169.509604][T30277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1169.916900][T16314] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1170.095706][T16322] qrtr: Invalid version 195 [ 1170.402137][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1170.402210][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1170.549515][T14345] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1170.745036][T16348] erspan0: entered promiscuous mode [ 1171.174463][T16364] netlink: 7064 bytes leftover after parsing attributes in process `syz.8.20152'. [ 1171.174499][T16364] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 1173.777606][T16398] overlayfs: failed to clone lowerpath [ 1174.775546][T11273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1174.807900][T11273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1174.811681][T11273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1174.813041][T11273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1174.814647][T11273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1180.622283][T11273] Bluetooth: hci0: command tx timeout [ 1181.166690][T16444] unsupported nla_type 52263 [ 1182.018822][ T5797] Bluetooth: hci4: unexpected event for opcode 0x2041 [ 1182.648266][T16512] ieee802154 phy0 wpan0: encryption failed: -90 [ 1183.000835][ T5797] Bluetooth: hci0: command tx timeout [ 1185.191399][ T5797] Bluetooth: hci0: command tx timeout [ 1186.751621][T16413] chnl_net:caif_netlink_parms(): no params data found [ 1187.392007][ T5797] Bluetooth: hci0: command tx timeout [ 1187.709741][T16413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.709954][T16413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.710187][T16413] bridge_slave_0: entered allmulticast mode [ 1187.724624][T16413] bridge_slave_0: entered promiscuous mode [ 1187.732691][T16413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1187.732835][T16413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.733076][T16413] bridge_slave_1: entered allmulticast mode [ 1187.740483][T16413] bridge_slave_1: entered promiscuous mode [ 1187.783892][ T5797] Bluetooth: hci5: unexpected event for opcode 0x080d [ 1187.837745][T16680] netlink: 4 bytes leftover after parsing attributes in process `syz.8.20292'. [ 1187.895951][ T44] bridge_slave_1: left allmulticast mode [ 1187.895979][ T44] bridge_slave_1: left promiscuous mode [ 1187.896221][ T44] bridge0: port 2(bridge_slave_1) entered disabled state [ 1187.932752][ T37] audit: type=1326 audit(1761633595.120:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16684 comm="syz.8.20294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1187.934120][ T37] audit: type=1326 audit(1761633595.120:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16684 comm="syz.8.20294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1187.934167][ T37] audit: type=1326 audit(1761633595.120:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16684 comm="syz.8.20294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1187.934207][ T37] audit: type=1326 audit(1761633595.120:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16684 comm="syz.8.20294" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1188.093098][ T44] bridge_slave_0: left allmulticast mode [ 1188.093127][ T44] bridge_slave_0: left promiscuous mode [ 1188.093371][ T44] bridge0: port 1(bridge_slave_0) entered disabled state [ 1191.799675][ T44] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1191.894422][ T44] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1191.967151][ T44] bond0 (unregistering): Released all slaves [ 1192.095924][ T5797] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1192.096254][ T5797] Bluetooth: hci5: Injecting HCI hardware error event [ 1192.105412][T11273] Bluetooth: hci5: hardware error 0x00 [ 1192.292351][T16753] veth0_to_bridge: entered promiscuous mode [ 1192.293401][T16753] A link change request failed with some changes committed already. Interface veth0_to_bridge may have been left with an inconsistent configuration, please check. [ 1192.388904][T16413] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1192.414294][T16413] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1192.630983][ T44] hsr_slave_0: left promiscuous mode [ 1192.695734][ T44] hsr_slave_1: left promiscuous mode [ 1192.696735][ T44] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1192.749036][ T44] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1194.333139][T11273] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1194.887352][ T44] team0 (unregistering): Port device team_slave_1 removed [ 1195.347235][ T44] team0 (unregistering): Port device team_slave_0 removed [ 1200.114427][T16968] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check. [ 1200.449990][T16413] team0: Port device team_slave_0 added [ 1200.453955][T16413] team0: Port device team_slave_1 added [ 1201.690386][T16413] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1201.690404][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.690426][T16413] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1201.693085][T16413] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1201.693099][T16413] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1201.693122][T16413] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1201.904312][T25622] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1202.118955][T16413] hsr_slave_0: entered promiscuous mode [ 1202.120410][T16413] hsr_slave_1: entered promiscuous mode [ 1202.121439][T16413] debugfs: 'hsr0' already exists in 'hsr' [ 1202.121464][T16413] Cannot create hsr debugfs directory [ 1202.210218][T25622] usb 9-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.210283][T25622] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1202.210311][T25622] usb 9-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1202.210352][T25622] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1202.210373][T25622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.281762][T25622] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 1202.282878][T25622] usb 9-1: invalid MIDI out EP 0 [ 1202.465779][T25622] snd-usb-audio 9-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1202.472763][T25622] usb 9-1: USB disconnect, device number 24 [ 1203.578816][T17359] netlink: 'syz.3.20625': attribute type 1 has an invalid length. [ 1204.268201][T17402] netlink: 'syz.3.20647': attribute type 46 has an invalid length. [ 1204.493151][T17413] netlink: 'syz.3.20650': attribute type 1 has an invalid length. [ 1205.053462][ T37] audit: type=1326 audit(1761633611.144:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17436 comm="syz.3.20664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1205.053505][ T37] audit: type=1326 audit(1761633611.144:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17436 comm="syz.3.20664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1205.059514][ T37] audit: type=1326 audit(1761633611.144:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17436 comm="syz.3.20664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=97 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1205.059571][ T37] audit: type=1326 audit(1761633611.144:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17436 comm="syz.3.20664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1205.059611][ T37] audit: type=1326 audit(1761633611.144:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=17436 comm="syz.3.20664" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1205.170442][ T1928] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 1205.198507][T16413] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1205.264826][T16413] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1205.315256][T16413] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1205.347433][ T1928] usb 9-1: Using ep0 maxpacket: 32 [ 1205.358963][T16413] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1205.362376][ T1928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.368773][ T1928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.370562][ T1928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.371953][ T1928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.377084][ T1928] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1205.377142][ T1928] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1205.377164][ T1928] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.391416][ T1928] usb 9-1: config 0 descriptor?? [ 1205.401269][ T1928] hub 9-1:0.0: Invalid hub with more than one config or interface [ 1205.401309][ T1928] hub 9-1:0.0: probe with driver hub failed with error -22 [ 1205.637055][T25622] usb 9-1: USB disconnect, device number 25 [ 1205.697363][T16413] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1205.748840][T16413] 8021q: adding VLAN 0 to HW filter on device team0 [ 1205.759645][T30242] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.763277][T30242] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1205.809205][T30255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.809529][T30255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.479415][T16413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1207.298646][T16413] veth0_vlan: entered promiscuous mode [ 1207.372217][T16413] veth1_vlan: entered promiscuous mode [ 1207.653817][T16413] veth0_macvtap: entered promiscuous mode [ 1207.687226][T16413] veth1_macvtap: entered promiscuous mode [ 1207.758396][T16413] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.793049][T16413] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1207.862295][T30224] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.862736][T30224] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.863154][T30224] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.864979][T30224] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1209.257135][ T44] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.257156][ T44] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.315858][T30224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.315884][T30224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.014328][T17639] IPv6: Can't replace route, no match found [ 1211.374833][T17679] netlink: 532 bytes leftover after parsing attributes in process `syz.8.20775'. [ 1211.862995][ T5947] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1212.025705][ T5947] usb 7-1: Using ep0 maxpacket: 16 [ 1212.033594][ T5947] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1212.048715][ T5947] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.048740][ T5947] usb 7-1: Product: syz [ 1212.048755][ T5947] usb 7-1: Manufacturer: syz [ 1212.048768][ T5947] usb 7-1: SerialNumber: syz [ 1212.054169][ T5947] usb 7-1: config 0 descriptor?? [ 1212.101611][ T5947] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1212.727423][ T5947] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 1212.750291][ T5947] usb 7-1: USB disconnect, device number 19 [ 1214.369597][T17796] netlink: 12 bytes leftover after parsing attributes in process `syz.8.20830'. [ 1214.603798][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.603844][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.603869][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.603894][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.603917][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.603941][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.603966][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.603988][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.604012][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.604034][ T1237] hid-generic 00A0:0006:0003.0042: unknown main item tag 0x0 [ 1214.608121][ T1237] hid-generic 00A0:0006:0003.0042: hidraw0: HID v0.05 Device [syz1] on syz0 [ 1216.141984][T17830] netlink: 'syz.3.20841': attribute type 2 has an invalid length. [ 1216.532941][T17862] netlink: 24 bytes leftover after parsing attributes in process `syz.8.20861'. [ 1217.870338][T17877] hpfs: Bad magic ... probably not HPFS [ 1217.892199][T17878] /dev/nullb0: Can't open blockdev [ 1221.571039][T18022] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 1221.571057][T18022] overlayfs: missing 'lowerdir' [ 1221.779657][T18033] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20938'. [ 1223.544091][T18081] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.20963'. [ 1224.025186][T18102] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20972'. [ 1224.981013][T18120] netlink: 8 bytes leftover after parsing attributes in process `syz.6.20979'. [ 1225.251641][ T37] audit: type=1326 audit(1761633630.029:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18139 comm="syz.8.20990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1225.258951][ T37] audit: type=1326 audit(1761633630.029:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18139 comm="syz.8.20990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1225.259714][ T37] audit: type=1326 audit(1761633630.039:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18139 comm="syz.8.20990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1225.259979][ T37] audit: type=1326 audit(1761633630.039:503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18139 comm="syz.8.20990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1225.260255][ T37] audit: type=1326 audit(1761633630.039:504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18139 comm="syz.8.20990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1225.260874][ T37] audit: type=1326 audit(1761633630.039:505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18139 comm="syz.8.20990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1225.261154][ T37] audit: type=1326 audit(1761633630.039:506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18139 comm="syz.8.20990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1225.261404][ T37] audit: type=1326 audit(1761633630.039:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18139 comm="syz.8.20990" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1225.676698][T18156] netlink: 40 bytes leftover after parsing attributes in process `syz.8.20999'. [ 1227.097972][ T37] audit: type=1326 audit(1761633631.760:508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18252 comm="syz.8.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1227.098022][ T37] audit: type=1326 audit(1761633631.760:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18252 comm="syz.8.21045" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1227.866612][ T5891] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1228.027009][ T5891] usb 9-1: Using ep0 maxpacket: 16 [ 1228.029725][ T5891] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1228.029749][ T5891] usb 9-1: config 0 has no interface number 0 [ 1228.032864][ T5891] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1228.032891][ T5891] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.032910][ T5891] usb 9-1: Product: syz [ 1228.032924][ T5891] usb 9-1: Manufacturer: syz [ 1228.032938][ T5891] usb 9-1: SerialNumber: syz [ 1228.049501][ T5891] usb 9-1: config 0 descriptor?? [ 1228.071941][ T5891] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1228.773802][ T5891] gspca_spca1528: reg_w err -71 [ 1228.786688][ T5891] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71 [ 1228.791946][ T5891] usb 9-1: USB disconnect, device number 26 [ 1231.170129][T18437] netlink: 'syz.3.21136': attribute type 2 has an invalid length. [ 1231.747313][T25622] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1231.915997][T25622] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1231.917505][T25622] usb 7-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1231.939086][T25622] usb 7-1: string descriptor 0 read error: -22 [ 1231.939241][T25622] usb 7-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1231.939264][T25622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.228496][T25622] usb 7-1: reset high-speed USB device number 20 using dummy_hcd [ 1232.782880][T25622] usb 7-1: device descriptor read/64, error -71 [ 1232.935398][T18535] netlink: 24 bytes leftover after parsing attributes in process `syz.8.21182'. [ 1233.040989][T25622] usb 7-1: reset high-speed USB device number 20 using dummy_hcd [ 1233.231907][T25622] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1233.269170][T25622] usb 7-1: device firmware changed [ 1233.303607][T25622] usb 7-1: USB disconnect, device number 20 [ 1233.490228][ T1237] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1233.650380][ T1237] usb 9-1: Using ep0 maxpacket: 32 [ 1233.666485][ T1237] usb 9-1: config 0 has an invalid interface number: 83 but max is 0 [ 1233.666512][ T1237] usb 9-1: config 0 has no interface number 0 [ 1233.669035][ T1237] usb 9-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice=d8.11 [ 1233.669064][ T1237] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.669084][ T1237] usb 9-1: Product: syz [ 1233.669099][ T1237] usb 9-1: Manufacturer: syz [ 1233.669113][ T1237] usb 9-1: SerialNumber: syz [ 1233.686014][ T1237] usb 9-1: config 0 descriptor?? [ 1233.709072][ T1237] redrat3 9-1:0.83: Couldn't find all endpoints [ 1233.932759][ T1237] usb 9-1: USB disconnect, device number 27 [ 1235.689212][T18644] erspan0: entered promiscuous mode [ 1236.064999][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1236.065069][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1236.095521][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.8.21245'. [ 1236.812187][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1236.812205][ T37] audit: type=1326 audit(1761633640.843:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.812254][ T37] audit: type=1326 audit(1761633640.843:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.812887][ T37] audit: type=1326 audit(1761633640.843:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.815809][ T37] audit: type=1326 audit(1761633640.852:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.816305][ T37] audit: type=1326 audit(1761633640.852:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.819936][ T37] audit: type=1326 audit(1761633640.852:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.819984][ T37] audit: type=1326 audit(1761633640.852:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.820343][ T37] audit: type=1326 audit(1761633640.852:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.823893][ T37] audit: type=1326 audit(1761633640.852:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1236.824388][ T37] audit: type=1326 audit(1761633640.852:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=18696 comm="syz.3.21259" exe="/root/syz-executor" sig=0 arch=c000003e syscall=264 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1237.078949][T18705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21263'. [ 1238.392917][T18757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1238.456945][T18757] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1243.637448][T19021] rdma_op ffff8880613f1a70 conn xmit_rdma 0000000000000000 [ 1243.704567][T19024] netlink: 'syz.3.21397': attribute type 36 has an invalid length. [ 1244.560644][T19066] [U] 4Ocߖp=fD6lgE_bLdR [ 1244.560664][T19066] [U] !=UmsSV$ <ɔ:1dA0}Yr򲏄&̫3O2Ͽ@ [ 1244.560677][T19066] [U] #`t%R`.*S0{"v=>'|F/}L;yZc]d}B [敏*c'w&.嶑HRv!H;9WM [ 1244.560793][T19066] [U] fŚ)Š]ef5a#tR9ƨAnkXAN [ 1244.560900][T19066] [U] R^p7)Ys!!AF=K<{6qRː(V]s>_SݬEMYVD] ;W=g(nm$n [ 1244.564507][T19064] [U] bcsV\+ ҄i1m$eMk^)WNiLTt(y>yj8vbc [ 1245.027149][T19085] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21424'. [ 1245.365303][T19109] netlink: 156 bytes leftover after parsing attributes in process `syz.8.21434'. [ 1245.365341][T19109] netlink: 71 bytes leftover after parsing attributes in process `syz.8.21434'. [ 1245.549361][T19116] xt_limit: Overflow, try lower: 324382443/0 [ 1245.995301][T25622] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1246.158233][T25622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1246.158268][T25622] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1246.158309][T25622] usb 9-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 1246.158333][T25622] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.168409][T25622] usb 9-1: config 0 descriptor?? [ 1246.273249][ T993] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1246.454865][ T993] usb 7-1: Using ep0 maxpacket: 8 [ 1246.463061][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 1246.463154][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1246.463176][ T993] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1246.463201][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1246.463222][ T993] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 1246.463335][ T993] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 1246.463358][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1246.564784][ T993] usb 7-1: config 0 descriptor?? [ 1246.634093][T11273] Bluetooth: hci2: urb ffff8880216b7200 submission failed (90) [ 1246.655814][T25622] hid_parser_main: 5 callbacks suppressed [ 1246.655839][T25622] hid-steam 0003:28DE:1142.0043: unknown main item tag 0x0 [ 1246.655872][T25622] hid-steam 0003:28DE:1142.0043: unknown main item tag 0x0 [ 1246.655899][T25622] hid-steam 0003:28DE:1142.0043: unknown main item tag 0x0 [ 1246.687490][T25622] hid-steam 0003:28DE:1142.0043: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.8-1/input0 [ 1246.813698][ T5948] usb 7-1: USB disconnect, device number 21 [ 1246.952397][ T1237] usb 9-1: USB disconnect, device number 28 [ 1247.961335][ T993] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1248.121630][ T993] usb 9-1: Using ep0 maxpacket: 32 [ 1248.124059][ T993] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1248.124115][ T993] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.124143][ T993] usb 9-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.124165][ T993] usb 9-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1248.124193][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1248.124227][ T993] usb 9-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1248.124250][ T993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.200169][ T993] usb 9-1: config 0 descriptor?? [ 1248.652773][ T993] hid-thrustmaster 0003:044F:B65D.0044: unknown main item tag 0x0 [ 1248.652812][ T993] hid-thrustmaster 0003:044F:B65D.0044: unknown main item tag 0x0 [ 1248.652841][ T993] hid-thrustmaster 0003:044F:B65D.0044: unknown main item tag 0x0 [ 1248.652869][ T993] hid-thrustmaster 0003:044F:B65D.0044: unknown main item tag 0x0 [ 1248.652895][ T993] hid-thrustmaster 0003:044F:B65D.0044: unknown main item tag 0x0 [ 1248.701139][ T993] hid-thrustmaster 0003:044F:B65D.0044: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.8-1/input0 [ 1248.701446][ T993] hid-thrustmaster 0003:044F:B65D.0044: Wrong number of endpoints? [ 1248.878761][ C0] hid-thrustmaster 0003:044F:B65D.0044: URB to get model id failed with error -71 [ 1248.880064][ T993] usb 9-1: USB disconnect, device number 29 [ 1249.234266][ T5948] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1249.393545][ T5948] usb 7-1: Using ep0 maxpacket: 16 [ 1249.396261][ T5948] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.396334][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1249.396361][ T5948] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1249.396382][ T5948] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1249.396413][ T5948] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1249.397954][ T5948] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1249.397978][ T5948] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1249.397998][ T5948] usb 7-1: Manufacturer: syz [ 1249.406222][ T5948] usb 7-1: config 0 descriptor?? [ 1249.799761][ T5948] rc_core: IR keymap rc-hauppauge not found [ 1249.799783][ T5948] Registered IR keymap rc-empty [ 1249.799969][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1249.822745][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1249.846115][ T5948] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1249.849222][ T5948] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input52 [ 1249.896166][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1249.920516][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1249.938578][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1249.960080][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1249.980891][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1250.002329][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1250.024205][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1250.045175][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1250.066414][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1250.088579][ T5948] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1250.119226][ T5948] mceusb 7-1:0.0: Registered 艣閦뙿瑞ۨﻃˣઍ with mce emulator interface version 1 [ 1250.119254][ T5948] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1250.184496][ T5948] usb 7-1: USB disconnect, device number 22 [ 1251.743871][T19382] comedi comedi0: reset error (fatal) [ 1254.463805][T19487] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21618'. [ 1256.616134][ T10] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1256.779047][ T10] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1256.779080][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.811726][ T10] usb 7-1: config 0 descriptor?? [ 1257.030555][ T10] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1257.245720][ T10] [drm:udl_init] *ERROR* Selecting channel failed [ 1257.277256][ T10] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1257.277281][ T10] [drm] Initialized udl on minor 2 [ 1257.310292][ T10] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1257.337459][ T10] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1257.368616][ T10] usb 7-1: USB disconnect, device number 23 [ 1257.373173][T25621] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1257.373934][T25621] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1258.044682][T19632] program syz.8.21680 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1258.645520][T19665] netlink: 240 bytes leftover after parsing attributes in process `syz.6.21696'. [ 1259.846169][T19741] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1261.981400][T19835] 9pnet_fd: Insufficient options for proto=fd [ 1262.066416][T19838] Bluetooth: MGMT ver 1.23 [ 1262.116572][T19844] netlink: 'syz.3.21781': attribute type 1 has an invalid length. [ 1262.364604][ T5948] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1262.525124][ T5948] usb 7-1: Using ep0 maxpacket: 32 [ 1262.527789][ T5948] usb 7-1: config 0 has an invalid interface number: 8 but max is 0 [ 1262.527816][ T5948] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.527835][ T5948] usb 7-1: config 0 has no interface number 0 [ 1262.527888][ T5948] usb 7-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 1262.527913][ T5948] usb 7-1: config 0 interface 8 has no altsetting 0 [ 1262.532258][ T5948] usb 7-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 1262.532290][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1262.534511][ T5948] usb 7-1: Product: syz [ 1262.534533][ T5948] usb 7-1: Manufacturer: syz [ 1262.534548][ T5948] usb 7-1: SerialNumber: syz [ 1262.550298][ T5948] usb 7-1: config 0 descriptor?? [ 1262.632732][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 1262.632801][ T37] audit: type=1800 audit(1761633672.002:540): pid=19871 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz.3.21794" name="nullb0" dev="tmpfs" ino=2466 res=0 errno=0 [ 1262.793058][ T5948] ath6kl: Failed to submit usb control message: -71 [ 1262.793150][ T5948] ath6kl: unable to send the bmi data to the device: -71 [ 1262.793165][ T5948] ath6kl: Unable to send get target info: -71 [ 1262.798850][ T5948] ath6kl: Failed to init ath6kl core: -71 [ 1262.800258][ T5948] ath6kl_usb 7-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 1262.868168][ T5948] usb 7-1: USB disconnect, device number 24 [ 1263.615492][T19921] netlink: 28 bytes leftover after parsing attributes in process `syz.8.21817'. [ 1263.615529][T19921] netlink: 16 bytes leftover after parsing attributes in process `syz.8.21817'. [ 1264.526274][T19968] 9pnet_fd: Insufficient options for proto=fd [ 1267.984927][ T10] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1268.145064][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 1268.175845][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.175877][ T10] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.175915][ T10] usb 9-1: New USB device found, idVendor=0458, idProduct=5012, bcdDevice= 0.00 [ 1268.175937][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1268.227845][ T10] usb 9-1: config 0 descriptor?? [ 1268.691878][ T10] hid (null): unknown global tag 0xd [ 1268.727400][ T10] input: HID 0458:5012 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5012.0045/input/input53 [ 1268.752777][ T10] input: HID 0458:5012 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:0458:5012.0045/input/input54 [ 1268.832282][ T10] kye 0003:0458:5012.0045: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5012] on usb-dummy_hcd.8-1/input0 [ 1268.967261][ T5948] usb 9-1: USB disconnect, device number 30 [ 1269.367310][T20169] smc: net device bond0 applied user defined pnetid SYZ0 [ 1269.384305][T20169] smc: net device bond0 erased user defined pnetid SYZ0 [ 1270.002828][T20213] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21956'. [ 1270.017044][T20213] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 1270.037127][T20213] macvtap2: entered allmulticast mode [ 1270.037154][T20213] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 1270.280370][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21963'. [ 1270.280416][T20227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.21963'. [ 1271.382828][T17606] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1271.543842][T17606] usb 7-1: Using ep0 maxpacket: 8 [ 1271.551381][T17606] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1271.551410][T17606] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1271.551429][T17606] usb 7-1: Product: syz [ 1271.551443][T17606] usb 7-1: Manufacturer: syz [ 1271.551457][T17606] usb 7-1: SerialNumber: syz [ 1271.582560][T17606] usb 7-1: config 0 descriptor?? [ 1271.867303][T20279] program syz.6.21988 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1271.881297][T17606] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1271.900275][T17606] gspca_sunplus: reg_w_riv err -71 [ 1271.900375][T17606] sunplus 7-1:0.0: probe with driver sunplus failed with error -71 [ 1271.904869][T17606] usb 7-1: USB disconnect, device number 25 [ 1273.263602][T20344] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.22017'. [ 1273.885903][T30277] tipc: Subscription rejected, illegal request [ 1275.520966][T20423] dvmrp0: left allmulticast mode [ 1276.158774][ T993] usb 9-1: new high-speed USB device number 31 using dummy_hcd [ 1276.319415][ T993] usb 9-1: Using ep0 maxpacket: 32 [ 1276.323534][ T993] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 1276.323561][ T993] usb 9-1: config 0 has no interface number 0 [ 1276.326249][ T993] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1276.326278][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.326298][ T993] usb 9-1: Product: syz [ 1276.326312][ T993] usb 9-1: Manufacturer: syz [ 1276.326326][ T993] usb 9-1: SerialNumber: syz [ 1276.381780][ T993] usb 9-1: config 0 descriptor?? [ 1276.401133][ T993] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1276.613910][ T993] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1276.638763][ T993] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1276.819011][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 48 [ 1277.033433][ C0] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1277.035734][ T1237] usb 9-1: USB disconnect, device number 31 [ 1277.057382][ T1237] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1277.074828][ T1237] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1277.078126][ T1237] quatech2 9-1:0.51: device disconnected [ 1277.494432][ T993] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1277.656046][ T993] usb 7-1: Using ep0 maxpacket: 16 [ 1277.658544][ T993] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1277.658576][ T993] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1277.661643][ T993] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1277.661671][ T993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.661692][ T993] usb 7-1: Product: syz [ 1277.661705][ T993] usb 7-1: Manufacturer: syz [ 1277.661720][ T993] usb 7-1: SerialNumber: syz [ 1277.731537][ T993] usb 7-1: config 0 descriptor?? [ 1277.751747][ T993] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1277.751784][ T993] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 1278.409795][ T993] em28xx 7-1:0.0: chip ID is em2860 [ 1278.624250][ T993] em28xx 7-1:0.0: Config register raw data: 0xfffffffb [ 1278.624687][ T993] em28xx 7-1:0.0: AC97 chip type couldn't be determined [ 1278.624702][ T993] em28xx 7-1:0.0: No AC97 audio processor [ 1278.673179][ T993] usb 7-1: USB disconnect, device number 26 [ 1278.675446][ T993] em28xx 7-1:0.0: Disconnecting em28xx [ 1278.676947][ T993] em28xx 7-1:0.0: Freeing device [ 1280.115142][T20646] netlink: 'syz.3.22163': attribute type 14 has an invalid length. [ 1280.145055][ T993] usb 9-1: new full-speed USB device number 32 using dummy_hcd [ 1280.319283][ T993] usb 9-1: config 0 has an invalid interface number: 133 but max is 0 [ 1280.319310][ T993] usb 9-1: config 0 has no interface number 0 [ 1280.324946][ T993] usb 9-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 1280.324976][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1280.324997][ T993] usb 9-1: Product: syz [ 1280.325011][ T993] usb 9-1: Manufacturer: syz [ 1280.325026][ T993] usb 9-1: SerialNumber: syz [ 1280.393625][ T993] usb 9-1: config 0 descriptor?? [ 1280.617117][ T993] keyspan 9-1:0.133: Keyspan 1 port adapter converter detected [ 1280.642328][ T993] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 81 [ 1280.642484][ T993] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 1 [ 1280.642807][ T993] keyspan 9-1:0.133: found no endpoint descriptor for endpoint 2 [ 1280.682314][ T993] usb 9-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 1281.066388][ T993] usb 9-1: USB disconnect, device number 32 [ 1281.073659][ T993] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 1281.089975][ T993] keyspan 9-1:0.133: device disconnected [ 1284.599954][ T993] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1284.762690][ T993] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.762731][ T993] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1284.766310][ T993] usb 9-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=b1.f9 [ 1284.766338][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.766356][ T993] usb 9-1: Product: syz [ 1284.766369][ T993] usb 9-1: Manufacturer: syz [ 1284.766383][ T993] usb 9-1: SerialNumber: syz [ 1284.821355][ T993] usb 9-1: config 0 descriptor?? [ 1284.839076][ T993] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state. [ 1284.844793][ T993] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1284.864928][ T993] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0) [ 1284.864994][ T993] usb 9-1: media controller created [ 1284.910439][ T993] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1285.177016][ T993] DVB: Unable to find symbol tda10046_attach() [ 1285.177031][ T993] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0' [ 1285.177045][ T993] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected. [ 1285.552273][T20826] ptrace attach of "./syz-executor exec"[6881] was attempted by ""[20826] [ 1285.829393][ T993] dvb_usb_m920x 9-1:0.0: probe with driver dvb_usb_m920x failed with error -71 [ 1285.834310][ T993] usb 9-1: USB disconnect, device number 33 [ 1287.025329][ T5948] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1287.188281][ T5948] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1287.188309][ T5948] usb 9-1: config 0 has no interface number 0 [ 1287.193298][ T5948] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1287.193329][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1287.193349][ T5948] usb 9-1: Product: syz [ 1287.193364][ T5948] usb 9-1: Manufacturer: syz [ 1287.193378][ T5948] usb 9-1: SerialNumber: syz [ 1287.204943][ T5948] usb 9-1: config 0 descriptor?? [ 1287.487841][ T5948] usb 9-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 1287.508311][ T5948] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1287.508667][ T5948] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 1287.508730][ T5948] usb 9-1: media controller created [ 1287.585533][ T5948] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1287.722161][ T5948] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 1287.813312][T20938] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22303'. [ 1287.850679][ T5948] usb 9-1: USB disconnect, device number 34 [ 1289.931603][ T993] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1290.102750][ T993] usb 7-1: Using ep0 maxpacket: 8 [ 1290.106027][ T993] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 1290.106085][ T993] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1290.106107][ T993] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1290.106131][ T993] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1290.106154][ T993] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1290.106195][ T993] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1290.106218][ T993] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1290.334151][ T993] usb 7-1: GET_CAPABILITIES returned 0 [ 1290.334203][ T993] usbtmc 7-1:16.0: can't read capabilities [ 1290.551665][ T993] usb 7-1: USB disconnect, device number 27 [ 1290.655050][T21109] sock: sock_set_timeout: `syz.3.22386' (pid 21109) tries to set negative timeout [ 1292.290573][T21191] netlink: 44 bytes leftover after parsing attributes in process `syz.8.22425'. [ 1292.580475][T21208] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22432'. [ 1292.920925][T21233] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1293.238822][ T37] audit: type=1326 audit(1761633706.640:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efc3165b099 code=0x7ffc0000 [ 1293.238875][ T37] audit: type=1326 audit(1761633706.640:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1293.238916][ T37] audit: type=1326 audit(1761633706.640:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1293.238954][ T37] audit: type=1326 audit(1761633706.640:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1293.238996][ T37] audit: type=1326 audit(1761633706.640:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1293.239035][ T37] audit: type=1326 audit(1761633706.640:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1293.239073][ T37] audit: type=1326 audit(1761633706.640:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1293.239111][ T37] audit: type=1326 audit(1761633706.640:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1293.239149][ T37] audit: type=1326 audit(1761633706.640:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1293.239187][ T37] audit: type=1326 audit(1761633706.649:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=21243 comm="syz.6.22453" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1295.405257][ T10] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 1295.495978][T21305] netlink: 104 bytes leftover after parsing attributes in process `syz.3.22482'. [ 1295.576282][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 1295.579581][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.579612][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.579635][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1295.579676][ T10] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1295.579698][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.584617][ T10] usb 7-1: config 0 descriptor?? [ 1296.059995][ T10] microsoft 0003:045E:07DA.0046: unbalanced collection at end of report description [ 1296.060979][ T10] microsoft 0003:045E:07DA.0046: parse failed [ 1296.061091][ T10] microsoft 0003:045E:07DA.0046: probe with driver microsoft failed with error -22 [ 1296.264960][ T993] usb 7-1: USB disconnect, device number 28 [ 1296.985007][T21380] netlink: 56 bytes leftover after parsing attributes in process `syz.6.22517'. [ 1297.068767][T21388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22522'. [ 1297.730044][T21416] Context (ID=0x1) not attached to queue pair (handle=0xffffffff:0x2) [ 1298.408351][T21451] netlink: 92 bytes leftover after parsing attributes in process `syz.8.22550'. [ 1299.368712][T21452] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22552'. [ 1300.579398][ T993] usb 9-1: new full-speed USB device number 35 using dummy_hcd [ 1300.742166][ T993] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1300.742195][ T993] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1300.747491][ T993] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1300.747520][ T993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1300.747541][ T993] usb 9-1: SerialNumber: syz [ 1301.031048][ T993] usb 9-1: 0:2 : does not exist [ 1301.065160][ T993] usb 9-1: USB disconnect, device number 35 [ 1301.720020][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1301.720092][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1302.132393][T21621] input: syz0 as /devices/virtual/input/input55 [ 1302.160891][T21628] overlayfs: failed to clone upperpath [ 1303.358966][T25621] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 1303.519298][T25621] usb 7-1: Using ep0 maxpacket: 8 [ 1303.524151][T25621] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 1303.524178][T25621] usb 7-1: config 0 has no interface number 0 [ 1303.524221][T25621] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1303.524244][T25621] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1303.524269][T25621] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1303.524294][T25621] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1303.524336][T25621] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1303.524357][T25621] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1303.618697][T25621] usb 7-1: config 0 descriptor?? [ 1303.647733][T25621] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1303.887097][T25621] usb 7-1: USB disconnect, device number 29 [ 1303.892593][T25621] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 1304.365281][T25621] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1304.531814][T25621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.531846][T25621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.531884][T25621] usb 9-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1304.531908][T25621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.581908][T25621] usb 9-1: config 0 descriptor?? [ 1305.036211][T25621] cp2112 0003:10C4:EA90.0047: unknown main item tag 0x0 [ 1305.047737][T25621] cp2112 0003:10C4:EA90.0047: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.8-1/input0 [ 1305.134163][T11273] Bluetooth: hci1: command 0x0406 tx timeout [ 1305.134990][ T1237] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 1305.135021][ T1237] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 1305.238862][T25621] cp2112 0003:10C4:EA90.0047: Part Number: 0x82 Device Version: 0xFE [ 1305.668727][T25621] cp2112 0003:10C4:EA90.0047: error setting SMBus config [ 1305.671633][T25621] cp2112 0003:10C4:EA90.0047: probe with driver cp2112 failed with error -71 [ 1305.704559][T25621] usb 9-1: USB disconnect, device number 36 [ 1307.443078][T11273] Bluetooth: hci3: command 0x0406 tx timeout [ 1307.446621][ T1237] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 1307.446646][ T1237] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 1309.051225][T21960] overlayfs: failed to clone lowerpath [ 1311.444181][T22070] batadv_slave_0: entered promiscuous mode [ 1311.445266][T22069] batadv_slave_0: left promiscuous mode [ 1312.777397][T19095] usb 7-1: new full-speed USB device number 30 using dummy_hcd [ 1312.941098][T19095] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1312.941154][T19095] usb 7-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 1312.941177][T19095] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1312.952034][T19095] usb 7-1: config 0 descriptor?? [ 1312.953045][T22126] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1313.405208][T19095] uclogic 0003:5543:0522.0048: unknown main item tag 0x0 [ 1313.405246][T19095] uclogic 0003:5543:0522.0048: item fetching failed at offset 3/5 [ 1313.405899][T19095] uclogic 0003:5543:0522.0048: parse failed [ 1313.405986][T19095] uclogic 0003:5543:0522.0048: probe with driver uclogic failed with error -22 [ 1313.601583][T22133] Bluetooth: hci4: command 0x0406 tx timeout [ 1313.601655][ T1237] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1313.601671][ T1237] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 1313.627891][T21651] usb 7-1: USB disconnect, device number 30 [ 1314.885504][T22133] Bluetooth: hci0: command 0x0406 tx timeout [ 1317.494971][T22273] netlink: 'syz.3.22904': attribute type 12 has an invalid length. [ 1317.495000][T22273] netlink: 'syz.3.22904': attribute type 29 has an invalid length. [ 1317.495015][T22273] netlink: 148 bytes leftover after parsing attributes in process `syz.3.22904'. [ 1317.495059][T22273] netlink: 'syz.3.22904': attribute type 2 has an invalid length. [ 1317.495073][T22273] netlink: 23 bytes leftover after parsing attributes in process `syz.3.22904'. [ 1318.109213][T22302] syzkaller1: entered promiscuous mode [ 1318.109240][T22302] syzkaller1: entered allmulticast mode [ 1318.478494][T19095] kernel write not supported for file bpf-prog (pid: 19095 comm: kworker/1:4) [ 1318.990580][T11273] Bluetooth: hci0: command 0x0406 tx timeout [ 1318.990981][ T1237] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 1318.991000][ T1237] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 1319.479511][T22387] netlink: 136 bytes leftover after parsing attributes in process `syz.3.22960'. [ 1320.993579][ T37] kauditd_printk_skb: 135 callbacks suppressed [ 1320.993597][ T37] audit: type=1326 audit(1761633732.597:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=22476 comm="syz.3.23007" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff176c1efc9 code=0x0 [ 1321.811944][T22133] Bluetooth: hci2: command 0x1003 tx timeout [ 1321.812332][T11273] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 1323.392445][T22630] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23081'. [ 1323.441850][T22630] hsr_slave_0: left promiscuous mode [ 1323.505316][T22630] hsr_slave_1: left promiscuous mode [ 1323.753010][T22648] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23090'. [ 1323.885140][T22648] gretap0: entered promiscuous mode [ 1323.885257][T22648] macsec1: entered promiscuous mode [ 1323.885490][T22648] macsec1: entered allmulticast mode [ 1323.885506][T22648] gretap0: entered allmulticast mode [ 1323.942519][T22648] gretap0: left allmulticast mode [ 1323.942727][T22648] gretap0: left promiscuous mode [ 1324.246400][ T993] kernel read not supported for file /587/wchan (pid: 993 comm: kworker/0:2) [ 1325.707160][T22730] netlink: 8 bytes leftover after parsing attributes in process `syz.6.23131'. [ 1325.707194][T22730] netlink: 'syz.6.23131': attribute type 29 has an invalid length. [ 1325.707208][T22730] netlink: 4 bytes leftover after parsing attributes in process `syz.6.23131'. [ 1326.108700][T22751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23141'. [ 1326.116866][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23141'. [ 1326.140847][T22751] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23141'. [ 1327.322365][T22810] netlink: 'syz.6.23170': attribute type 27 has an invalid length. [ 1327.322388][T22810] netlink: 164 bytes leftover after parsing attributes in process `syz.6.23170'. [ 1327.359787][T22812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23169'. [ 1328.109746][T25621] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1329.064331][T25621] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1329.064361][T25621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1329.093259][T25621] usb 9-1: config 0 descriptor?? [ 1329.112047][T25621] cp210x 9-1:0.0: cp210x converter detected [ 1329.587238][T25621] cp210x 9-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 1329.590865][T25621] cp210x 9-1:0.0: GPIO initialisation failed: -524 [ 1329.628735][T25621] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1329.823003][ T1237] usb 9-1: USB disconnect, device number 37 [ 1329.843091][ T1237] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1329.843600][ T1237] cp210x 9-1:0.0: device disconnected [ 1329.872523][T22878] netlink: 'syz.6.23201': attribute type 6 has an invalid length. [ 1331.183967][T22936] netlink: 14560 bytes leftover after parsing attributes in process `syz.3.23229'. [ 1333.497679][ T5882] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1333.710556][ T5882] usb 9-1: Using ep0 maxpacket: 8 [ 1333.712963][ T5882] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1333.712989][ T5882] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1333.713011][ T5882] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1333.713033][ T5882] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1333.713073][ T5882] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1333.713096][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1333.959025][ T5882] usb 9-1: GET_CAPABILITIES returned 0 [ 1333.959076][ T5882] usbtmc 9-1:16.0: can't read capabilities [ 1334.176372][ T5882] usb 9-1: USB disconnect, device number 38 [ 1334.980129][T23111] netlink: 292 bytes leftover after parsing attributes in process `syz.3.23313'. [ 1335.099469][T21651] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1335.271376][T21651] usb 9-1: Using ep0 maxpacket: 32 [ 1335.273755][T21651] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1335.273782][T21651] usb 9-1: config 0 has no interface number 0 [ 1335.312631][T21651] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1335.312660][T21651] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.312680][T21651] usb 9-1: Product: syz [ 1335.312693][T21651] usb 9-1: Manufacturer: syz [ 1335.312706][T21651] usb 9-1: SerialNumber: syz [ 1335.338221][T21651] usb 9-1: config 0 descriptor?? [ 1335.343609][T21651] smsc95xx v2.0.0 [ 1336.219903][T21651] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1336.219933][T21651] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1336.220454][T21651] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1336.220740][T21651] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 1336.227546][T21651] usb 9-1: USB disconnect, device number 39 [ 1336.638821][ T5882] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1336.811671][ T5882] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 1336.811702][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1336.817211][ T5882] usb 7-1: config 0 descriptor?? [ 1337.173357][ T5882] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 1337.428114][ T5882] [drm:udl_init] *ERROR* Selecting channel failed [ 1338.004663][ T5882] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 2 [ 1338.004689][ T5882] [drm] Initialized udl on minor 2 [ 1338.120803][ T5882] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1338.121149][ T5882] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1338.143184][ T993] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1338.151629][ T5882] usb 7-1: USB disconnect, device number 31 [ 1338.152938][ T993] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 1338.153111][ T993] udl 7-1:0.0: [drm] Cannot find any crtc or sizes [ 1338.450839][T23226] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1338.940824][T23252] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1339.182971][T23263] loop6: detected capacity change from 0 to 7 [ 1339.189904][T23263] Dev loop6: unable to read RDB block 7 [ 1339.189945][T23263] loop6: AHDI p1 p2 p3 [ 1339.189972][T23263] loop6: partition table partially beyond EOD, truncated [ 1339.193150][T23263] loop6: p1 start 368115439 is beyond EOD, truncated [ 1339.193174][T23263] loop6: p2 size 108 extends beyond EOD, truncated [ 1341.056224][T23343] loop6: detected capacity change from 0 to 7 [ 1341.057341][T23343] Dev loop6: unable to read RDB block 7 [ 1341.057386][T23343] loop6: unable to read partition table [ 1341.057634][T23343] loop6: partition table beyond EOD, truncated [ 1341.057652][T23343] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1345.172999][T23513] netlink: 12 bytes leftover after parsing attributes in process `syz.8.23499'. [ 1345.397440][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23503'. [ 1345.397466][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23503'. [ 1345.444995][T23520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.23503'. [ 1345.445021][T23520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.23503'. [ 1345.733609][T23534] netlink: 'syz.8.23510': attribute type 16 has an invalid length. [ 1345.733633][T23534] netlink: 'syz.8.23510': attribute type 21 has an invalid length. [ 1345.733647][T23534] netlink: 'syz.8.23510': attribute type 25 has an invalid length. [ 1345.733660][T23534] netlink: 'syz.8.23510': attribute type 27 has an invalid length. [ 1345.733673][T23534] netlink: 'syz.8.23510': attribute type 28 has an invalid length. [ 1345.733686][T23534] netlink: 'syz.8.23510': attribute type 29 has an invalid length. [ 1345.733698][T23534] netlink: 'syz.8.23510': attribute type 30 has an invalid length. [ 1346.508050][T23562] netlink: 'syz.8.23524': attribute type 6 has an invalid length. [ 1346.829168][T30286] tipc: Subscription rejected, illegal request [ 1346.966664][T23593] sctp: [Deprecated]: syz.6.23535 (pid 23593) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1346.966664][T23593] Use struct sctp_sack_info instead [ 1347.393581][ T5882] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1347.564014][ T5882] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1347.564041][ T5882] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1347.570154][ T5882] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1347.570183][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1347.570202][ T5882] usb 9-1: SerialNumber: syz [ 1347.861610][ T5882] usb 9-1: 0:2 : does not exist [ 1347.880117][ T5882] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1347.934033][ T5882] usb 9-1: USB disconnect, device number 40 [ 1348.620439][T23663] netlink: 'syz.8.23571': attribute type 6 has an invalid length. [ 1349.699745][T23720] netlink: 35 bytes leftover after parsing attributes in process `syz.3.23599'. [ 1349.699780][T23720] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23599'. [ 1350.119715][ T5882] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1350.314184][ T5882] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1350.314212][ T5882] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1350.315574][ T5882] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1350.315601][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1350.315620][ T5882] usb 7-1: SerialNumber: syz [ 1350.566589][ T5882] usb 7-1: 0:2 : does not exist [ 1350.695980][ T5882] usb 7-1: USB disconnect, device number 32 [ 1351.610273][T23820] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23648'. [ 1351.840058][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23658'. [ 1351.840095][T23836] netlink: 'syz.3.23658': attribute type 30 has an invalid length. [ 1351.860241][T30286] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.860500][T30286] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.860536][T30286] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.860568][T30286] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1351.860770][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23658'. [ 1351.860800][T23836] netlink: 'syz.3.23658': attribute type 30 has an invalid length. [ 1351.992322][T11273] block nbd8: Receive control failed (result -32) [ 1352.039270][T23800] block nbd8: shutting down sockets [ 1352.409348][T23868] sctp: [Deprecated]: syz.6.23671 (pid 23868) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1352.409348][T23868] Use struct sctp_sack_info instead [ 1353.068770][T23898] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1355.734688][T24030] netlink: 63503 bytes leftover after parsing attributes in process `syz.8.23748'. [ 1357.219150][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23776'. [ 1357.219176][T24091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.23776'. [ 1360.367829][T24262] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1362.226157][T24352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23899'. [ 1362.226559][T24352] bridge_slave_0: default FDB implementation only supports local addresses [ 1362.227584][T24352] netlink: 12 bytes leftover after parsing attributes in process `syz.6.23899'. [ 1362.227617][T24352] bridge_slave_0: default FDB implementation only supports local addresses [ 1364.881916][T24459] overlayfs: failed to clone upperpath [ 1366.007765][T24528] netlink: 14 bytes leftover after parsing attributes in process `syz.8.23985'. [ 1367.067685][T24566] kvm: apic: phys broadcast and lowest prio [ 1367.403925][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.403992][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1368.858821][T24528] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1368.937020][T24528] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1368.943286][T24634] netlink: 'syz.6.24036': attribute type 1 has an invalid length. [ 1368.943309][T24634] netlink: 56 bytes leftover after parsing attributes in process `syz.6.24036'. [ 1369.121631][T24528] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1369.252214][T24528] bond0 (unregistering): Released all slaves [ 1370.684292][T24703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24067'. [ 1370.707323][T24703] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24067'. [ 1370.835426][T24709] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24071'. [ 1370.836949][T24709] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24071'. [ 1371.363882][T24715] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.829190][T24715] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.251496][T24715] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1372.302832][ T5882] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1372.497642][ T5882] usb 9-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00 [ 1372.497674][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1372.503122][ T5882] usb 9-1: config 0 descriptor?? [ 1372.614739][T24715] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1373.026962][ T5882] kye 0003:0458:0153.0049: collection stack underflow [ 1373.026985][ T5882] kye 0003:0458:0153.0049: item 0 4 0 12 parsing failed [ 1373.027436][ T5882] kye 0003:0458:0153.0049: parse failed [ 1373.027471][ T5882] kye 0003:0458:0153.0049: probe with driver kye failed with error -22 [ 1373.077857][ T44] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.160925][T30220] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.203507][T30220] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.203746][T30220] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1373.243689][ T5882] usb 9-1: USB disconnect, device number 41 [ 1376.177259][T24902] netlink: 52 bytes leftover after parsing attributes in process `syz.6.24162'. [ 1376.222864][T24902] netlink: 4 bytes leftover after parsing attributes in process `syz.6.24162'. [ 1376.383684][T24910] loop6: detected capacity change from 0 to 7 [ 1376.419260][T24910] Dev loop6: unable to read RDB block 7 [ 1376.419308][T24910] loop6: unable to read partition table [ 1376.419529][T24910] loop6: partition table beyond EOD, truncated [ 1376.419550][T24910] loop_reread_partitions: partition scan of loop6 (被x ) failed (rc=-5) [ 1376.633837][T24922] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1378.807589][T24930] netlink: 'syz.3.24178': attribute type 12 has an invalid length. [ 1379.755843][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 1379.756049][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 1379.756572][ T5882] libceph: connect (1)[c::]:6789 error -101 [ 1379.756748][ T5882] libceph: mon0 (1)[c::]:6789 connect error [ 1379.808426][T25018] ceph: No mds server is up or the cluster is laggy [ 1380.377681][T25049] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24232'. [ 1380.454277][T25049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1381.413536][T25089] loop2: detected capacity change from 0 to 7 [ 1381.414330][T25089] Dev loop2: unable to read RDB block 7 [ 1381.414372][T25089] loop2: unable to read partition table [ 1381.414512][T25089] loop2: partition table beyond EOD, truncated [ 1381.414522][T25089] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 1381.757810][T25110] overlayfs: failed to clone upperpath [ 1382.373344][ T1237] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1382.578968][ T1237] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.579027][ T1237] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1382.579051][ T1237] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.584455][ T1237] usb 7-1: config 0 descriptor?? [ 1382.590520][ T1237] pwc: Askey VC010 type 2 USB webcam detected. [ 1383.021751][ T1237] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1383.022616][ T1237] pwc: recv_control_msg error -32 req 02 val 2700 [ 1383.023918][ T1237] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1383.024809][ T1237] pwc: recv_control_msg error -32 req 04 val 1000 [ 1383.250690][ T1237] pwc: recv_control_msg error -71 req 04 val 1400 [ 1383.251210][ T1237] pwc: recv_control_msg error -71 req 02 val 2000 [ 1383.251691][ T1237] pwc: recv_control_msg error -71 req 02 val 2100 [ 1383.252190][ T1237] pwc: recv_control_msg error -71 req 04 val 1500 [ 1383.252679][ T1237] pwc: recv_control_msg error -71 req 02 val 2500 [ 1383.253164][ T1237] pwc: recv_control_msg error -71 req 02 val 2400 [ 1383.253677][ T1237] pwc: recv_control_msg error -71 req 02 val 2600 [ 1383.254171][ T1237] pwc: recv_control_msg error -71 req 02 val 2900 [ 1383.257175][ T1237] pwc: recv_control_msg error -71 req 02 val 2800 [ 1383.257858][ T1237] pwc: recv_control_msg error -71 req 04 val 1100 [ 1383.258364][ T1237] pwc: recv_control_msg error -71 req 04 val 1200 [ 1383.277556][ T1237] pwc: Registered as video103. [ 1383.280558][ T1237] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input56 [ 1383.306402][ T1237] usb 7-1: USB disconnect, device number 33 [ 1383.962168][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24316'. [ 1383.963337][T25236] netlink: 12 bytes leftover after parsing attributes in process `syz.8.24316'. [ 1384.239510][ T5882] hid-generic 0008:0001:0000.004A: unknown main item tag 0x5 [ 1384.293909][ T5882] hid-generic 0008:0001:0000.004A: hidraw0: HID v66.49 Device [syz1] on syz0 [ 1386.264808][ T5882] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1386.424986][ T5882] usb 9-1: Using ep0 maxpacket: 8 [ 1386.442222][ T5882] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1386.442259][ T5882] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1386.442285][ T5882] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1386.442308][ T5882] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1386.442350][ T5882] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1386.442373][ T5882] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1386.738490][ T5882] usb 9-1: GET_CAPABILITIES returned 0 [ 1386.738538][ T5882] usbtmc 9-1:16.0: can't read capabilities [ 1387.018999][ T5882] usb 9-1: USB disconnect, device number 42 [ 1387.630095][T25404] trusted_key: syz.8.24394 sent an empty control message without MSG_MORE. [ 1387.894255][T25419] 9pnet_fd: Insufficient options for proto=fd [ 1389.260075][T25495] overlayfs: failed to clone upperpath [ 1389.707066][ T993] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1389.867469][ T993] usb 9-1: Using ep0 maxpacket: 8 [ 1389.869986][ T993] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1389.870023][ T993] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 1389.870063][ T993] usb 9-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 1389.870085][ T993] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1389.875099][ T993] usb 9-1: config 0 descriptor?? [ 1390.326595][ T993] cmedia_hs100b 0003:0D8C:0014.004B: item fetching failed at offset 0/3 [ 1390.339746][ T993] cmedia_hs100b 0003:0D8C:0014.004B: probe with driver cmedia_hs100b failed with error -22 [ 1390.537938][ T1237] usb 9-1: USB disconnect, device number 43 [ 1392.735819][T25634] netlink: 96 bytes leftover after parsing attributes in process `syz.6.24499'. [ 1393.247543][T25658] overlayfs: failed to clone upperpath [ 1394.466578][T25706] overlayfs: failed to clone upperpath [ 1397.168858][T25820] overlayfs: failed to clone upperpath [ 1398.009906][ T37] audit: type=1326 audit(1761633804.651:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.010218][ T37] audit: type=1326 audit(1761633804.651:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.011175][ T37] audit: type=1326 audit(1761633804.651:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.011446][ T37] audit: type=1326 audit(1761633804.651:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.012270][ T37] audit: type=1326 audit(1761633804.651:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.012576][ T37] audit: type=1326 audit(1761633804.651:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.014617][ T37] audit: type=1326 audit(1761633804.651:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.015136][ T37] audit: type=1326 audit(1761633804.660:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.015999][ T37] audit: type=1326 audit(1761633804.660:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.017029][ T37] audit: type=1326 audit(1761633804.660:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=25860 comm="syz.3.24607" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1398.601599][T25621] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1398.772708][T25621] usb 9-1: Using ep0 maxpacket: 8 [ 1398.775426][T25621] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1398.775474][T25621] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1398.775497][T25621] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1398.820181][T25621] usb 9-1: config 0 descriptor?? [ 1399.073251][T25621] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1399.284996][T25873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.285348][T25873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.305405][T25873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1399.305848][T25873] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1399.551220][ T5891] usb 9-1: USB disconnect, device number 44 [ 1401.222574][T25993] pim6reg1: entered promiscuous mode [ 1401.222662][T25993] pim6reg1: entered allmulticast mode [ 1401.965372][T26033] bond2: entered allmulticast mode [ 1401.998517][T26038] ip6gretap1: entered allmulticast mode [ 1401.998982][T26038] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1403.875599][T26092] overlayfs: failed to clone upperpath [ 1405.298686][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 1405.298705][ T37] audit: type=1326 audit(1761633811.470:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.310721][ T37] audit: type=1326 audit(1761633811.470:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.310774][ T37] audit: type=1326 audit(1761633811.470:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.310815][ T37] audit: type=1326 audit(1761633811.470:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.310855][ T37] audit: type=1326 audit(1761633811.470:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.310895][ T37] audit: type=1326 audit(1761633811.470:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.310934][ T37] audit: type=1326 audit(1761633811.470:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.310974][ T37] audit: type=1326 audit(1761633811.470:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.311014][ T37] audit: type=1326 audit(1761633811.470:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1405.311069][ T37] audit: type=1326 audit(1761633811.470:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26142 comm="syz.3.24737" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1409.174734][ T5882] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1409.334975][ T5882] usb 9-1: Using ep0 maxpacket: 8 [ 1409.343608][ T5882] usb 9-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1409.343635][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1409.343653][ T5882] usb 9-1: Product: syz [ 1409.343666][ T5882] usb 9-1: Manufacturer: syz [ 1409.343679][ T5882] usb 9-1: SerialNumber: syz [ 1409.387244][ T5882] usb 9-1: config 0 descriptor?? [ 1409.409890][ T5882] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1409.587185][T26307] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1410.537114][ T5882] gspca_sonixj: reg_w1 err -71 [ 1410.618052][ T5882] sonixj 9-1:0.0: probe with driver sonixj failed with error -71 [ 1410.622281][ T5882] usb 9-1: USB disconnect, device number 45 [ 1413.784081][T26518] netlink: 2028 bytes leftover after parsing attributes in process `syz.8.24912'. [ 1413.784106][T26518] netlink: 24 bytes leftover after parsing attributes in process `syz.8.24912'. [ 1414.770923][T26565] netlink: 64 bytes leftover after parsing attributes in process `syz.8.24935'. [ 1415.921860][T26615] netlink: zone id is out of range [ 1415.921882][T26615] netlink: zone id is out of range [ 1415.921891][T26615] netlink: zone id is out of range [ 1417.588596][ C1] vkms_vblank_simulate: vblank timer overrun [ 1418.606721][ C1] vkms_vblank_simulate: vblank timer overrun [ 1422.163689][ T5882] usb 7-1: new low-speed USB device number 34 using dummy_hcd [ 1422.850326][ T5882] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1422.850411][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1423.170398][ T5882] usb 7-1: config 0 descriptor?? [ 1424.039134][T26833] overlayfs: failed to clone upperpath [ 1424.919752][T26862] binder: 26861:26862 ioctl c0306201 200000000080 returned -14 [ 1425.389419][ T5882] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1425.389695][ T5882] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1425.421456][ T5882] usb 7-1: USB disconnect, device number 34 [ 1428.318854][ T37] kauditd_printk_skb: 75 callbacks suppressed [ 1428.318871][ T37] audit: type=1326 audit(1761633833.003:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26972 comm="syz.8.25123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1428.319810][ T37] audit: type=1326 audit(1761633833.003:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26972 comm="syz.8.25123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1428.320449][ T37] audit: type=1326 audit(1761633833.003:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26972 comm="syz.8.25123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1428.381440][T26974] zonefs (nullb0) ERROR: Not a zoned block device [ 1428.403435][ T37] audit: type=1326 audit(1761633833.003:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26972 comm="syz.8.25123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1428.404932][ T37] audit: type=1326 audit(1761633833.078:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26972 comm="syz.8.25123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1428.818017][ T37] audit: type=1326 audit(1761633833.471:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26972 comm="syz.8.25123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1428.818140][ T37] audit: type=1326 audit(1761633833.471:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26972 comm="syz.8.25123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1433.007169][ T37] audit: type=1326 audit(1761633837.390:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27060 comm="syz.3.25160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1433.007224][ T37] audit: type=1326 audit(1761633837.390:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27060 comm="syz.3.25160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1433.011346][ T37] audit: type=1326 audit(1761633837.390:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27060 comm="syz.3.25160" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff176c1efc9 code=0x7ffc0000 [ 1433.164843][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1433.164918][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.324683][ T1237] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 1433.528459][ T1237] usb 7-1: Using ep0 maxpacket: 16 [ 1433.530700][ T1237] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1433.530716][ T1237] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1433.532872][ T1237] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1433.532899][ T1237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.532966][ T1237] usb 7-1: Product: syz [ 1433.532975][ T1237] usb 7-1: Manufacturer: syz [ 1433.532982][ T1237] usb 7-1: SerialNumber: syz [ 1433.801038][ T1237] usb 7-1: 0:2 : does not exist [ 1433.811947][ T1237] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 1433.836850][ T1237] usb 7-1: USB disconnect, device number 35 [ 1435.804956][T25622] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1435.968641][T25622] usb 7-1: Using ep0 maxpacket: 32 [ 1435.971658][T25622] usb 7-1: config 0 has an invalid interface number: 12 but max is 0 [ 1435.971685][T25622] usb 7-1: config 0 has no interface number 0 [ 1435.971723][T25622] usb 7-1: config 0 interface 12 has no altsetting 0 [ 1435.974449][T25622] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1435.974476][T25622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1435.974497][T25622] usb 7-1: Product: syz [ 1435.974512][T25622] usb 7-1: Manufacturer: syz [ 1435.974526][T25622] usb 7-1: SerialNumber: syz [ 1436.037464][T25622] usb 7-1: config 0 descriptor?? [ 1438.583797][T25622] f81534 7-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 1438.583831][T25622] f81534 7-1:0.12: f81534_find_config_idx: read failed: -71 [ 1438.583840][T25622] f81534 7-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 1438.583895][T25622] f81534 7-1:0.12: probe with driver f81534 failed with error -71 [ 1438.658736][T25622] usb 7-1: USB disconnect, device number 36 [ 1440.992201][T27211] netlink: 'syz.6.25229': attribute type 1 has an invalid length. [ 1441.778124][T27214] macvlan2: entered promiscuous mode [ 1441.778150][T27214] macvlan2: entered allmulticast mode [ 1441.781740][T27214] bond1: entered promiscuous mode [ 1441.788247][T27214] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1442.397101][T27214] bond1: left promiscuous mode [ 1459.530031][ T37] kauditd_printk_skb: 29 callbacks suppressed [ 1459.530049][ T37] audit: type=1326 audit(1761633862.197:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.530508][ T37] audit: type=1326 audit(1761633862.197:834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.536911][ T37] audit: type=1326 audit(1761633862.197:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.536960][ T37] audit: type=1326 audit(1761633862.197:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.537000][ T37] audit: type=1326 audit(1761633862.197:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.537044][ T37] audit: type=1326 audit(1761633862.197:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.544868][ T37] audit: type=1326 audit(1761633862.216:839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.545261][ T37] audit: type=1326 audit(1761633862.216:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.548859][ T37] audit: type=1326 audit(1761633862.216:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1459.548910][ T37] audit: type=1326 audit(1761633862.216:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27403 comm="syz.8.25309" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1465.824847][T21651] usb 9-1: new low-speed USB device number 46 using dummy_hcd [ 1465.987876][T21651] usb 9-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1465.987908][T21651] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1465.992958][T21651] usb 9-1: config 0 descriptor?? [ 1466.298393][T21651] asix 9-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1469.297760][T21651] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1469.297792][T21651] asix 9-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1469.298072][T21651] asix 9-1:0.0: probe with driver asix failed with error -71 [ 1469.350137][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 1469.350155][ T37] audit: type=1326 audit(1761633871.383:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=27581 comm="syz.3.25383" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff176c1efc9 code=0x0 [ 1469.362750][T21651] usb 9-1: USB disconnect, device number 46 [ 1469.758666][ T5891] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 1469.925114][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.925148][ T5891] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1469.926456][ T5891] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1469.926484][ T5891] usb 7-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1469.926504][ T5891] usb 7-1: Manufacturer: syz [ 1469.978417][ T5891] usb 7-1: config 0 descriptor?? [ 1471.204645][ T5891] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.004C/input/input57 [ 1471.209595][ T5891] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.004C/input/input58 [ 1471.245746][ T5891] uclogic 0003:256C:006D.004C: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.6-1/input0 [ 1473.294417][ T5882] usb 7-1: USB disconnect, device number 37 [ 1476.137006][T27685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.25423'. [ 1476.528732][T27685] veth3: entered promiscuous mode [ 1476.528751][T27685] veth3: entered allmulticast mode [ 1476.532868][T27685] bridge1: port 1(veth3) entered blocking state [ 1476.533084][T27685] bridge1: port 1(veth3) entered disabled state [ 1476.580163][T27685] bridge1: port 1(veth3) entered blocking state [ 1476.580255][T27685] bridge1: port 1(veth3) entered forwarding state [ 1476.644714][T30276] bridge1: port 1(veth3) entered disabled state [ 1477.334555][T27692] veth5: entered promiscuous mode [ 1477.334689][T27692] veth5: entered allmulticast mode [ 1477.842545][T27692] bridge1: port 2(veth5) entered blocking state [ 1477.857076][T27692] bridge1: port 2(veth5) entered disabled state [ 1478.271529][T27692] bridge1: port 2(veth5) entered blocking state [ 1478.271685][T27692] bridge1: port 2(veth5) entered forwarding state [ 1478.324600][T30276] bridge1: port 2(veth5) entered disabled state [ 1479.272917][ T5882] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1479.444060][ T5882] usb 9-1: Using ep0 maxpacket: 16 [ 1479.447508][ T5882] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.447532][ T5882] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1479.452012][ T5882] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1479.452041][ T5882] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1479.452060][ T5882] usb 9-1: Product: syz [ 1479.452075][ T5882] usb 9-1: Manufacturer: syz [ 1479.452089][ T5882] usb 9-1: SerialNumber: syz [ 1479.771201][ T5882] usb 9-1: 0:2 : does not exist [ 1479.855365][ T5882] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1479.907026][ T5882] usb 9-1: USB disconnect, device number 47 [ 1482.523483][ T993] usb 9-1: new full-speed USB device number 48 using dummy_hcd [ 1482.695751][ T993] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1482.695778][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1482.695797][ T993] usb 9-1: Product: syz [ 1482.695810][ T993] usb 9-1: Manufacturer: syz [ 1482.695823][ T993] usb 9-1: SerialNumber: syz [ 1482.700525][ T993] usb 9-1: config 0 descriptor?? [ 1482.984959][ T993] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1486.155395][ T993] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1486.164191][ T993] usb 9-1: USB disconnect, device number 48 [ 1488.494695][ C1] vkms_vblank_simulate: vblank timer overrun [ 1489.252175][ C1] vkms_vblank_simulate: vblank timer overrun [ 1489.708466][ C1] vkms_vblank_simulate: vblank timer overrun [ 1490.548570][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.096554][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.266261][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.617759][ C1] vkms_vblank_simulate: vblank timer overrun [ 1492.788092][T27963] netlink: 76 bytes leftover after parsing attributes in process `syz.6.25540'. [ 1493.658811][T27967] netlink: 28 bytes leftover after parsing attributes in process `syz.8.25542'. [ 1493.659157][T27967] netlink: 28 bytes leftover after parsing attributes in process `syz.8.25542'. [ 1499.367266][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1499.367337][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1505.121753][T28086] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1510.018639][T21651] usb 9-1: new full-speed USB device number 49 using dummy_hcd [ 1522.826512][ T993] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1523.129508][ T993] usb 9-1: Using ep0 maxpacket: 16 [ 1523.163399][ T993] usb 9-1: config 0 has an invalid interface number: 214 but max is 0 [ 1523.163427][ T993] usb 9-1: config 0 has no interface number 0 [ 1523.163479][ T993] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1523.191767][ T993] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1523.191797][ T993] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1523.191816][ T993] usb 9-1: Product: syz [ 1523.191830][ T993] usb 9-1: Manufacturer: syz [ 1523.191843][ T993] usb 9-1: SerialNumber: syz [ 1523.208282][ T993] usb 9-1: config 0 descriptor?? [ 1524.294415][T28238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1524.294839][T28238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1525.108007][ T993] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1525.128746][ T993] usb 9-1: USB disconnect, device number 50 [ 1530.475917][T28339] kvm: kvm [28338]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x5a [ 1530.475989][T28339] kvm: kvm [28338]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x405a [ 1530.476097][T28339] kvm: kvm [28338]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x1 [ 1530.476141][T28339] kvm: kvm [28338]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc2) = 0x4001 [ 1530.479889][T28339] kvm: kvm [28338]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x4a [ 1530.479933][T28339] kvm: kvm [28338]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x404a [ 1534.717641][T28405] tipc: Enabling of bearer rejected, failed to enable media [ 1536.676243][T28438] overlayfs: failed to resolve './file0': -2 [ 1540.655493][T28511] netlink: 16 bytes leftover after parsing attributes in process `syz.8.25745'. [ 1543.117199][ T37] audit: type=1326 audit(1761633940.378:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.117250][ T37] audit: type=1326 audit(1761633940.378:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.149390][ T37] audit: type=1326 audit(1761633940.415:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.149443][ T37] audit: type=1326 audit(1761633940.415:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.149484][ T37] audit: type=1326 audit(1761633940.415:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.149521][ T37] audit: type=1326 audit(1761633940.415:864): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=197 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.149561][ T37] audit: type=1326 audit(1761633940.415:865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.149600][ T37] audit: type=1326 audit(1761633940.415:866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.149640][ T37] audit: type=1326 audit(1761633940.415:867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1543.149681][ T37] audit: type=1326 audit(1761633940.415:868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=28549 comm="syz.8.25761" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe179feefc9 code=0x7ffc0000 [ 1546.620734][T28602] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1546.620767][T28602] overlayfs: failed to set xattr on upper [ 1546.620776][T28602] overlayfs: ...falling back to redirect_dir=nofollow. [ 1546.620785][T28602] overlayfs: ...falling back to index=off. [ 1546.620794][T28602] overlayfs: ...falling back to uuid=null. [ 1552.235196][T28654] netlink: 12 bytes leftover after parsing attributes in process `syz.3.25803'. [ 1562.513740][T28806] tipc: Started in network mode [ 1562.513772][T28806] tipc: Node identity 46ca7cda2261, cluster identity 4711 [ 1562.514647][T28806] tipc: Enabled bearer , priority 0 [ 1562.515649][T28806] syzkaller0: entered promiscuous mode [ 1562.515672][T28806] syzkaller0: entered allmulticast mode [ 1562.596688][T28804] tipc: Resetting bearer [ 1563.679251][ T5948] tipc: Node number set to 1688960218 [ 1563.844476][T28804] tipc: Disabling bearer [ 1564.453004][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1564.453090][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1566.277608][ C0] vkms_vblank_simulate: vblank timer overrun [ 1566.874126][T28873] tipc: Enabled bearer , priority 0 [ 1566.875388][T28873] syzkaller0: entered promiscuous mode [ 1566.875412][T28873] syzkaller0: entered allmulticast mode [ 1567.035270][ C0] vkms_vblank_simulate: vblank timer overrun [ 1567.062291][T28872] tipc: Resetting bearer [ 1568.055424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.140864][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.330310][ C0] vkms_vblank_simulate: vblank timer overrun [ 1568.531662][T28872] tipc: Disabling bearer [ 1568.864069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.020137][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.597236][ C0] vkms_vblank_simulate: vblank timer overrun [ 1569.859046][ C0] vkms_vblank_simulate: vblank timer overrun [ 1573.438027][T28946] tipc: Enabled bearer , priority 0 [ 1573.440559][T28946] syzkaller0: entered promiscuous mode [ 1573.440584][T28946] syzkaller0: entered allmulticast mode [ 1573.479468][T28945] tipc: Resetting bearer [ 1575.045441][T28945] tipc: Disabling bearer [ 1575.300215][T28969] tipc: Enabled bearer , priority 0 [ 1575.354064][T28964] tipc: Resetting bearer [ 1576.370112][T28963] tipc: Disabling bearer [ 1579.646690][T29065] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25971'. [ 1579.660098][T29065] netlink: 12 bytes leftover after parsing attributes in process `syz.8.25971'. [ 1585.959148][T29135] overlayfs: failed to resolve './file1': -2 [ 1586.554934][T29139] tipc: Enabled bearer , priority 0 [ 1586.557192][T29139] syzkaller0: entered promiscuous mode [ 1586.557217][T29139] syzkaller0: entered allmulticast mode [ 1586.927713][T29138] tipc: Resetting bearer [ 1588.579683][T29138] tipc: Disabling bearer [ 1590.058375][T29191] netlink: 32 bytes leftover after parsing attributes in process `syz.8.26013'. [ 1592.080118][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.472670][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.732913][ C0] vkms_vblank_simulate: vblank timer overrun [ 1592.996805][T29217] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 1592.996906][T29217] ref_ctr increment failed for inode: 0x170e offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88803533dc00 [ 1593.295133][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.401032][ C0] vkms_vblank_simulate: vblank timer overrun [ 1593.455399][ T37] kauditd_printk_skb: 8 callbacks suppressed [ 1593.455444][ T37] audit: type=1804 audit(1761633986.932:877): pid=29217 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz.8.26026" name="/newroot/1128/file0" dev="tmpfs" ino=5902 res=1 errno=0 [ 1593.888533][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.360148][ C0] vkms_vblank_simulate: vblank timer overrun [ 1594.731012][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.104708][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.352944][ C0] vkms_vblank_simulate: vblank timer overrun [ 1595.941841][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.269240][ C0] vkms_vblank_simulate: vblank timer overrun [ 1596.416154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1597.147095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1612.382490][T21651] IPVS: starting estimator thread 0... [ 1612.488754][T29462] IPVS: using max 9 ests per chain, 21600 per kthread [ 1614.303928][T21651] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1614.455751][T21651] usb 9-1: Using ep0 maxpacket: 8 [ 1614.473610][T21651] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 1614.489393][T21651] usb 9-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 1614.489727][T21651] usb 9-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 1614.489753][T21651] usb 9-1: Product: syz [ 1614.489768][T21651] usb 9-1: Manufacturer: syz [ 1614.489783][T21651] usb 9-1: SerialNumber: syz [ 1615.487468][T21651] usb 9-1: palm_os_3_probe - error -110 getting connection information [ 1615.487575][T21651] visor 9-1:1.0: probe with driver visor failed with error -110 [ 1615.952444][T21651] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 1616.113062][T21651] usb 7-1: Using ep0 maxpacket: 16 [ 1616.115987][T21651] usb 7-1: config 252 has an invalid interface number: 15 but max is 0 [ 1616.116014][T21651] usb 7-1: config 252 has no interface number 0 [ 1616.119763][T21651] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=2b.29 [ 1616.119793][T21651] usb 7-1: New USB device strings: Mfr=1, Product=10, SerialNumber=131 [ 1616.119815][T21651] usb 7-1: Product: syz [ 1616.119830][T21651] usb 7-1: Manufacturer: syz [ 1616.119844][T21651] usb 7-1: SerialNumber: syz [ 1616.231153][T21651] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1617.566031][ T1178] usb 7-1: Failed to submit usb control message: -110 [ 1617.566068][ T1178] usb 7-1: unable to send the bmi data to the device: -110 [ 1617.566085][ T1178] usb 7-1: unable to get target info from device [ 1617.566100][ T1178] usb 7-1: could not get target info (-110) [ 1617.566118][ T1178] usb 7-1: could not probe fw (-110) [ 1617.825251][T21651] usb 9-1: USB disconnect, device number 51 [ 1618.787210][ T1237] usb 7-1: USB disconnect, device number 38 [ 1623.236840][T29637] can0: slcan on ttyS3. [ 1623.363868][T29637] can0 (unregistered): slcan off ttyS3. [ 1623.453575][T29644] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.26191'. [ 1625.095458][T29670] netlink: 24 bytes leftover after parsing attributes in process `syz.8.26205'. [ 1625.370173][T29673] comedi comedi3: comedi_test: 6 microvolt, 2047 microsecond waveform attached [ 1625.420176][T29673] comedi comedi3: bad chanlist[0]=0x00001000 chan=4096 range length=2 [ 1625.558093][ T37] audit: type=1326 audit(1761634017.501:878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.558146][ T37] audit: type=1326 audit(1761634017.501:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.558885][ T37] audit: type=1326 audit(1761634017.501:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.558944][ T37] audit: type=1326 audit(1761634017.501:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.558985][ T37] audit: type=1326 audit(1761634017.501:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.559026][ T37] audit: type=1326 audit(1761634017.501:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.559069][ T37] audit: type=1326 audit(1761634017.501:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.559232][ T37] audit: type=1326 audit(1761634017.501:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.702705][ T37] audit: type=1326 audit(1761634017.501:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1625.702752][ T37] audit: type=1326 audit(1761634017.557:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=29682 comm="syz.6.26210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efc316befc9 code=0x7ffc0000 [ 1630.346075][T29702] block device autoloading is deprecated and will be removed. [ 1630.504452][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 1630.504519][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 1630.995042][T29719] netlink: 16 bytes leftover after parsing attributes in process `syz.6.26221'. [ 1632.369604][T29745] overlayfs: failed to clone upperpath [ 1633.741588][ T1237] usb 7-1: new low-speed USB device number 39 using dummy_hcd [ 1633.905430][ T1237] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1633.907239][ T1237] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 1633.907264][ T1237] usb 7-1: config 0 has no interface number 0 [ 1633.907312][ T1237] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 10 [ 1633.907338][ T1237] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid maxpacket 178, setting to 8 [ 1633.907365][ T1237] usb 7-1: config 0 interface 88 has no altsetting 0 [ 1633.908175][ T1237] usb 7-1: language id specifier not provided by device, defaulting to English [ 1633.997018][ T1237] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 1633.997050][ T1237] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 1633.997070][ T1237] usb 7-1: Manufacturer: 莾뗦젷䲳댿콗Ҟ仜鉼홹඿옋臲딺滣ꅓ薋䢁辷ꚴ땿橚믬이༖寠땽䶟賳툃䡒鿍櫸愣䂠罪믭 [ 1634.042454][ T1237] usb 7-1: config 0 descriptor?? [ 1634.044297][T29810] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1634.294786][ T1237] input: 莾뗦젷䲳댿콗Ҟ仜鉼홹඿옋臲딺滣ꅓ薋䢁辷ꚴ땿橚믬이༖寠땽䶟賳툃䡒鿍櫸愣䂠罪믭 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input62 [ 1634.328582][ T1237] usb 7-1: USB disconnect, device number 39 [ 1635.858956][ T1237] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 1635.952523][T29879] syzkaller0: entered promiscuous mode [ 1635.952548][T29879] syzkaller0: entered allmulticast mode [ 1636.061494][ T1237] usb 7-1: Using ep0 maxpacket: 32 [ 1636.068851][ T1237] usb 7-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=e0.b8 [ 1636.068883][ T1237] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1636.068904][ T1237] usb 7-1: Product: syz [ 1636.068918][ T1237] usb 7-1: Manufacturer: syz [ 1636.068933][ T1237] usb 7-1: SerialNumber: syz [ 1636.111894][ T1237] usb 7-1: config 0 descriptor?? [ 1636.123071][ T1237] empeg 7-1:0.0: empeg converter detected [ 1636.123149][ T1237] usb 7-1: active config #0 != 1 ?? [ 1636.342988][ T1237] usb 7-1: USB disconnect, device number 40 [ 1636.432065][T29900] overlayfs: failed to clone upperpath [ 1638.082168][ T5948] usb 7-1: new full-speed USB device number 41 using dummy_hcd [ 1638.244908][ T5948] usb 7-1: config 150 has an invalid interface number: 204 but max is 2 [ 1638.244937][ T5948] usb 7-1: config 150 has an invalid descriptor of length 0, skipping remainder of the config [ 1638.244956][ T5948] usb 7-1: config 150 has 1 interface, different from the descriptor's value: 3 [ 1638.244977][ T5948] usb 7-1: config 150 has no interface number 0 [ 1638.245010][ T5948] usb 7-1: config 150 interface 204 has no altsetting 0 [ 1638.249330][ T5948] usb 7-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 1638.249359][ T5948] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.249379][ T5948] usb 7-1: Product: syz [ 1638.249394][ T5948] usb 7-1: Manufacturer: syz [ 1638.249408][ T5948] usb 7-1: SerialNumber: syz [ 1638.586006][ T5948] usb 7-1: USB disconnect, device number 41 [ 1639.485263][T30022] syzkaller0: entered promiscuous mode [ 1639.485288][T30022] syzkaller0: entered allmulticast mode [ 1640.156670][T21651] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1640.327112][T21651] usb 9-1: Using ep0 maxpacket: 32 [ 1640.330134][T21651] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1640.358449][T21651] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1640.358481][T21651] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1640.358502][T21651] usb 9-1: Product: syz [ 1640.358517][T21651] usb 9-1: Manufacturer: syz [ 1640.358532][T21651] usb 9-1: SerialNumber: syz [ 1640.548098][T30084] overlayfs: failed to clone upperpath [ 1640.636054][T21651] usb 9-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 1640.636083][T21651] usb 9-1: 2:1 : sample bitwidth 196 in over sample bytes 2 [ 1640.636110][T21651] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 1640.687472][T21651] usb 9-1: USB disconnect, device number 52 [ 1647.992293][T21651] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1648.155949][T21651] usb 9-1: Using ep0 maxpacket: 32 [ 1648.158194][T21651] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 1648.158219][T21651] usb 9-1: config 0 has no interface number 0 [ 1648.160773][T21651] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1648.160809][T21651] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.160830][T21651] usb 9-1: Product: syz [ 1648.160845][T21651] usb 9-1: Manufacturer: syz [ 1648.160860][T21651] usb 9-1: SerialNumber: syz [ 1648.224138][T21651] usb 9-1: config 0 descriptor?? [ 1648.242997][T21651] smsc95xx v2.0.0 [ 1648.243015][T21651] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1648.243276][T21651] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -22 [ 1649.789022][ T5948] usb 9-1: USB disconnect, device number 53 [ 1650.082088][T25622] kernel read not supported for file /vcs (pid: 25622 comm: kworker/0:4) [ 1650.333382][ T5948] usb 9-1: new full-speed USB device number 54 using dummy_hcd [ 1650.496684][ T5948] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1650.497453][ T5948] usb 9-1: not running at top speed; connect to a high speed hub [ 1650.499003][ T5948] usb 9-1: config 2 has an invalid interface number: 254 but max is 0 [ 1650.499028][ T5948] usb 9-1: config 2 has no interface number 0 [ 1650.499060][ T5948] usb 9-1: config 2 interface 254 has no altsetting 0 [ 1650.502242][ T5948] usb 9-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=20.52 [ 1650.502270][ T5948] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.502291][ T5948] usb 9-1: Product: syz [ 1650.502306][ T5948] usb 9-1: Manufacturer: syz [ 1650.502320][ T5948] usb 9-1: SerialNumber: syz [ 1650.515153][T25622] usb 7-1: new full-speed USB device number 42 using dummy_hcd [ 1650.689059][T25622] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1650.689088][T25622] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 1650.689113][T25622] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64 [ 1650.689140][T25622] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1650.692244][T25622] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1650.692273][T25622] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1650.692294][T25622] usb 7-1: Product: syz [ 1650.692308][T25622] usb 7-1: Manufacturer: syz [ 1650.692323][T25622] usb 7-1: SerialNumber: syz [ 1650.774751][T25622] usb 7-1: config 0 descriptor?? [ 1650.783271][ T5948] ims_pcu 9-1:2.254: probe with driver ims_pcu failed with error -22 [ 1650.814893][T25622] input: KB Gear Tablet as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input63 [ 1650.851535][ T5948] usb 9-1: USB disconnect, device number 54 [ 1651.001470][T25622] usb 7-1: USB disconnect, device number 42 [ 1651.670514][T21651] usb 9-1: new full-speed USB device number 55 using dummy_hcd [ 1651.835988][T21651] usb 9-1: config 162 has an invalid interface number: 96 but max is 1 [ 1651.836016][T21651] usb 9-1: config 162 has an invalid interface number: 136 but max is 1 [ 1651.836037][T21651] usb 9-1: config 162 has no interface number 0 [ 1651.836053][T21651] usb 9-1: config 162 has no interface number 1 [ 1651.836119][T21651] usb 9-1: config 162 interface 96 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1651.836225][T21651] usb 9-1: config 162 interface 136 altsetting 1 has a duplicate endpoint with address 0x9, skipping [ 1651.836251][T21651] usb 9-1: config 162 interface 136 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 1651.836278][T21651] usb 9-1: config 162 interface 136 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 1651.836304][T21651] usb 9-1: config 162 interface 136 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 1651.836328][T21651] usb 9-1: config 162 interface 136 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64 [ 1651.836356][T21651] usb 9-1: config 162 interface 136 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4 [ 1651.836382][T21651] usb 9-1: config 162 interface 96 has no altsetting 0 [ 1651.836401][T21651] usb 9-1: config 162 interface 136 has no altsetting 0 [ 1651.839541][T21651] usb 9-1: New USB device found, idVendor=040d, idProduct=3801, bcdDevice=c1.63 [ 1651.839569][T21651] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1651.839588][T21651] usb 9-1: Product: syz [ 1651.839603][T21651] usb 9-1: Manufacturer: syz [ 1651.839618][T21651] usb 9-1: SerialNumber: syz [ 1652.258193][T30433] 9pnet_fd: Insufficient options for proto=fd [ 1652.308875][T30433] 9pnet: Unknown protocol version 9p200 [ 1652.875517][T21651] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1652.910258][T21651] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones [ 1653.001879][T21651] usb 9-1: USB disconnect, device number 55 [ 1653.560959][T30458] syzkaller0: entered promiscuous mode [ 1653.560985][T30458] syzkaller0: entered allmulticast mode [ 1654.552134][T30494] 9pnet_fd: Insufficient options for proto=fd [ 1654.600110][T30494] 9pnet: Unknown protocol version 9p200 [ 1655.788338][T30512] 9pnet_fd: Insufficient options for proto=fd [ 1655.837164][T30512] 9pnet: Unknown protocol version 9p200 [ 1657.135602][T30538] 9pnet_fd: Insufficient options for proto=fd [ 1657.177938][T30538] 9pnet: Unknown protocol version 9p200 [ 1659.213118][T30575] 9pnet_fd: Insufficient options for proto=fd [ 1659.260501][T30575] 9pnet: Unknown protocol version 9p200 [ 1660.490215][ T1237] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1660.757154][T30603] 9pnet_fd: Insufficient options for proto=fd [ 1660.760364][T30603] 9pnet: Unknown protocol version 9p200 [ 1660.864620][ T1237] usb 9-1: Using ep0 maxpacket: 8 [ 1660.982221][T30617] 9pnet_fd: Insufficient options for proto=fd [ 1661.035567][T30617] 9pnet: Unknown protocol version 9p200 [ 1661.230231][ T1237] usb 9-1: config 0 has an invalid interface number: 65 but max is 5 [ 1661.237358][ T1237] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 6 [ 1661.237436][ T1237] usb 9-1: config 0 has no interface number 0 [ 1661.285495][ T1237] usb 9-1: config 0 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1661.285607][ T1237] usb 9-1: config 0 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1661.285684][ T1237] usb 9-1: config 0 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1661.285732][ T1237] usb 9-1: config 0 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1661.286178][ T1237] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1661.286268][ T1237] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.541559][ T1237] usb 9-1: config 0 descriptor?? [ 1661.803641][ T5948] usb 9-1: USB disconnect, device number 56 [ 1663.512462][T30647] 9pnet_fd: Insufficient options for proto=fd [ 1663.558223][T30647] 9pnet: Unknown protocol version 9p200 [ 1664.739667][T30670] 9pnet_fd: Insufficient options for proto=fd [ 1666.109304][T30700] 9pnet_fd: Insufficient options for proto=fd [ 1666.934936][ C0] vkms_vblank_simulate: vblank timer overrun [ 1667.841923][T30745] 9pnet_fd: Insufficient options for proto=fd [ 1667.908383][T30745] 9pnet: Unknown protocol version 9p200 [ 1668.291626][ C0] vkms_vblank_simulate: vblank timer overrun [ 1668.599774][ C0] vkms_vblank_simulate: vblank timer overrun [ 1669.139064][T30761] ------------[ cut here ]------------ [ 1669.139080][T30761] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 1669.139637][T30761] WARNING: CPU: 1 PID: 30761 at drivers/gpu/drm/drm_vblank.c:1308 drm_wait_one_vblank+0x571/0x5b0 [ 1669.139688][T30761] Modules linked in: [ 1669.139711][T30761] CPU: 1 UID: 0 PID: 30761 Comm: syz.8.26701 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1669.139736][T30761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1669.139749][T30761] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 1669.139780][T30761] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 e9 66 fb fc 4d 8b 2c 24 48 c7 c7 a0 49 51 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 60 f6 5d fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 1669.139799][T30761] RSP: 0018:ffffc9000e42fac0 EFLAGS: 00010246 [ 1669.139818][T30761] RAX: 3ad227767970f200 RBX: 1ffff11028569401 RCX: 0000000000080000 [ 1669.139834][T30761] RDX: ffffc90005942000 RSI: 00000000000006fd RDI: 00000000000006fe [ 1669.139849][T30761] RBP: ffffc9000e42fbc0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.139864][T30761] R10: dffffc0000000000 R11: ffffed101712487b R12: ffff888023f39000 [ 1669.139880][T30761] R13: ffffffff8b54f9e0 R14: 0000000000000000 R15: ffffffff8b569700 [ 1669.139896][T30761] FS: 00007fe1782566c0(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 1669.139915][T30761] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1669.139930][T30761] CR2: 00007f812159c470 CR3: 000000004f2ba000 CR4: 00000000003526f0 [ 1669.139949][T30761] Call Trace: [ 1669.139958][T30761] [ 1669.139974][T30761] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1669.140005][T30761] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1669.140038][T30761] ? rt_spin_unlock+0x161/0x200 [ 1669.140064][T30761] ? drm_vblank_get+0x148/0x260 [ 1669.140094][T30761] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1669.140126][T30761] drm_fb_helper_ioctl+0x116/0x140 [ 1669.140160][T30761] do_fb_ioctl+0x45c/0x750 [ 1669.140188][T30761] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1669.140208][T30761] ? smack_log+0xef/0x3f0 [ 1669.140253][T30761] ? smk_tskacc+0x2fc/0x370 [ 1669.140291][T30761] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1669.140333][T30761] ? __fget_files+0x3a6/0x420 [ 1669.140360][T30761] ? __fget_files+0x2a/0x420 [ 1669.140390][T30761] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1669.140418][T30761] ? __pfx_fb_ioctl+0x10/0x10 [ 1669.140442][T30761] __se_sys_ioctl+0xff/0x170 [ 1669.140469][T30761] do_syscall_64+0xfa/0xfa0 [ 1669.140494][T30761] ? lockdep_hardirqs_on+0x9c/0x150 [ 1669.140520][T30761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.140541][T30761] ? clear_bhb_loop+0x60/0xb0 [ 1669.140566][T30761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.140586][T30761] RIP: 0033:0x7fe179feefc9 [ 1669.140605][T30761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.140622][T30761] RSP: 002b:00007fe178256038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.140644][T30761] RAX: ffffffffffffffda RBX: 00007fe17a245fa0 RCX: 00007fe179feefc9 [ 1669.140659][T30761] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 1669.140673][T30761] RBP: 00007fe17a071f91 R08: 0000000000000000 R09: 0000000000000000 [ 1669.140686][T30761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1669.140699][T30761] R13: 00007fe17a246038 R14: 00007fe17a245fa0 R15: 00007fff908ff9c8 [ 1669.140736][T30761] [ 1669.140754][T30761] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1669.140769][T30761] CPU: 1 UID: 0 PID: 30761 Comm: syz.8.26701 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1669.140792][T30761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1669.140804][T30761] Call Trace: [ 1669.140813][T30761] [ 1669.140821][T30761] dump_stack_lvl+0x99/0x250 [ 1669.140853][T30761] ? __asan_memcpy+0x40/0x70 [ 1669.140877][T30761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1669.140906][T30761] ? __pfx__printk+0x10/0x10 [ 1669.140947][T30761] vpanic+0x237/0x6d0 [ 1669.140967][T30761] ? __pfx_vpanic+0x10/0x10 [ 1669.140999][T30761] panic+0xb9/0xc0 [ 1669.141018][T30761] ? __pfx_panic+0x10/0x10 [ 1669.141055][T30761] __warn+0x31b/0x4b0 [ 1669.141074][T30761] ? drm_wait_one_vblank+0x571/0x5b0 [ 1669.141106][T30761] ? drm_wait_one_vblank+0x571/0x5b0 [ 1669.141135][T30761] report_bug+0x2be/0x4f0 [ 1669.141159][T30761] ? drm_wait_one_vblank+0x571/0x5b0 [ 1669.141189][T30761] ? drm_wait_one_vblank+0x571/0x5b0 [ 1669.141218][T30761] ? drm_wait_one_vblank+0x573/0x5b0 [ 1669.141248][T30761] handle_bug+0x84/0x160 [ 1669.141277][T30761] exc_invalid_op+0x1a/0x50 [ 1669.141305][T30761] asm_exc_invalid_op+0x1a/0x20 [ 1669.141324][T30761] RIP: 0010:drm_wait_one_vblank+0x571/0x5b0 [ 1669.141353][T30761] Code: ff df 80 3c 08 00 74 08 4c 89 e7 e8 e9 66 fb fc 4d 8b 2c 24 48 c7 c7 a0 49 51 8b 4c 89 fe 4c 89 ea 44 89 f1 e8 60 f6 5d fc 90 <0f> 0b 90 90 49 bd 00 00 00 00 00 fc ff df e9 a7 fc ff ff 44 89 f9 [ 1669.141371][T30761] RSP: 0018:ffffc9000e42fac0 EFLAGS: 00010246 [ 1669.141388][T30761] RAX: 3ad227767970f200 RBX: 1ffff11028569401 RCX: 0000000000080000 [ 1669.141404][T30761] RDX: ffffc90005942000 RSI: 00000000000006fd RDI: 00000000000006fe [ 1669.141424][T30761] RBP: ffffc9000e42fbc0 R08: 0000000000000000 R09: 0000000000000000 [ 1669.141437][T30761] R10: dffffc0000000000 R11: ffffed101712487b R12: ffff888023f39000 [ 1669.141453][T30761] R13: ffffffff8b54f9e0 R14: 0000000000000000 R15: ffffffff8b569700 [ 1669.141493][T30761] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 1669.141524][T30761] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1669.141555][T30761] ? rt_spin_unlock+0x161/0x200 [ 1669.141581][T30761] ? drm_vblank_get+0x148/0x260 [ 1669.141609][T30761] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 1669.141640][T30761] drm_fb_helper_ioctl+0x116/0x140 [ 1669.141673][T30761] do_fb_ioctl+0x45c/0x750 [ 1669.141699][T30761] ? __pfx_do_fb_ioctl+0x10/0x10 [ 1669.141720][T30761] ? smack_log+0xef/0x3f0 [ 1669.141764][T30761] ? smk_tskacc+0x2fc/0x370 [ 1669.141801][T30761] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1669.141841][T30761] ? __fget_files+0x3a6/0x420 [ 1669.141868][T30761] ? __fget_files+0x2a/0x420 [ 1669.141900][T30761] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1669.141919][T30761] ? __pfx_fb_ioctl+0x10/0x10 [ 1669.141942][T30761] __se_sys_ioctl+0xff/0x170 [ 1669.141968][T30761] do_syscall_64+0xfa/0xfa0 [ 1669.141993][T30761] ? lockdep_hardirqs_on+0x9c/0x150 [ 1669.142017][T30761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.142038][T30761] ? clear_bhb_loop+0x60/0xb0 [ 1669.142063][T30761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1669.142083][T30761] RIP: 0033:0x7fe179feefc9 [ 1669.142100][T30761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1669.142117][T30761] RSP: 002b:00007fe178256038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1669.142137][T30761] RAX: ffffffffffffffda RBX: 00007fe17a245fa0 RCX: 00007fe179feefc9 [ 1669.142152][T30761] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 1669.142165][T30761] RBP: 00007fe17a071f91 R08: 0000000000000000 R09: 0000000000000000 [ 1669.142178][T30761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1669.142191][T30761] R13: 00007fe17a246038 R14: 00007fe17a245fa0 R15: 00007fff908ff9c8 [ 1669.142227][T30761] [ 1669.142492][T30761] Kernel Offset: disabled