last executing test programs: 23.716856311s ago: executing program 2 (id=1272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 22.518200809s ago: executing program 2 (id=1274): r0 = userfaultfd(0x801) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xfffe, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x1000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x128}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) 20.833783859s ago: executing program 2 (id=1277): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0x2}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x9e, &(0x7f0000000080)={&(0x7f00000007c0)={0x3f0, r3, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x3a4, 0x8, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "eff93d58460ea431f2cb4a6894ddb2834088d7445bf5afdd0619ce173f1db717"}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "491bc0be1dc1f88092e741a88b64f6dd9218ad21b44b472e44f1d0807ee6675c"}]}, {0x2e8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x9, 0x7, @empty, 0x3}}, @WGPEER_A_ALLOWEDIPS={0x2a0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x4}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2c}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x3f0}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 16.46938776s ago: executing program 4 (id=1283): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 16.363345789s ago: executing program 4 (id=1284): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000240)='./file1\x00', 0x2004018, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc15, &(0x7f0000001940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x400, 0x0, 0x344}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x82041, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0086a86560d7a7139bfec06d8179223a7aaa0d6687600530c2258f6a6b0000a30beafdc704e7eb450bf60e2ff3523fa87bf175679ff4c339739281537659b382812635688684e22ae938c5da2c3392a823d551b36881d57849772b735fe1340f8d16b85ace69da518dea8e610ce0213c4661ce86cd97f9c7e1340f6600c6c462bbcdd7cde7003cc16b5a6a4a51e8cdb2fb8544bfdd89c48af27759acc524ad7bc9626d14d434d75d9bd787091c5e80efe9225753f28f4823d59b233406a404c9edafb263c671"], 0x1, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") 16.180705742s ago: executing program 4 (id=1287): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 15.904679016s ago: executing program 2 (id=1288): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 14.937897421s ago: executing program 4 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000a00)='\x00', 0xa89a5489e6a765d0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80), 0x21820, &(0x7f0000000940)=ANY=[@ANYRES32, @ANYRESDEC=r0, @ANYRES16=r0, @ANYRES8=r1]) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r5, &(0x7f0000000400)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$UI_ABS_SETUP(r4, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r4, 0x0, 0x0) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x3) ioctl$INCFS_IOC_CREATE_FILE(r2, 0xc058671e, &(0x7f0000000980)={{}, {0x7}, 0x8, 0x0, 0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000800)="4f525f1af43876e17212c725d35923e788274abfbc3207d86fc5f94a179acc7f5d19ba6274b3004b349db4b321e337448f320d8dd862f034108f6d6f518fe12880fb9f13cd631b58dff6e20a203fab759c7557a6d27bea867452", 0x5a, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0200000049000000000000000c3c0000ea9102d9a7b26f04e28590070986c27d5d0a0300a97687671e8f60c60172f2609e9a69dca2e79572bedecd32a06b20bd0c41401fe82c86db887f679f8c000000"], 0xaa}) ioctl$UI_DEV_CREATE(r4, 0x5501) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) sendto(r1, &(0x7f0000000ac0)="d551856fbc3cc2d57c01a3496f3aa4a26170f812315b6dde0914f8624c59a3bc854d629a931039ea1d0f9d4d04815ecf9ff4a58cf726c9e765ad12b771ac68a0", 0x40, 0x80, &(0x7f0000000180)=@phonet={0x23, 0x0, 0x4, 0x18}, 0x80) r6 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x308, 0x130, 0x12, 0x60a, 0x600, 0x202, 0x238, 0x2e8, 0x2e8, 0x238, 0x2c0, 0x4, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @dev}, @mcast2, [0x4000000], [0x4000000], 'veth1_to_bond\x00', 'xfrm0\x00'}, 0x0, 0x108, 0x130, 0x0, {}, [@common=@unspec=@statistic={{0x38}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0xffffffffffffffff}, {0xffffffffffffffff, 0xf9}}}}, {{@ipv6={@private2, @loopback, [], [], 'vxcan1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@empty}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) mq_open(&(0x7f0000000000)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xd6_\xa0\xf6\xdf\xdf\xfd\xcb;\xa5\xe7:L\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\x03\xff\x1c.TT\x01\x00\x00\x00a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\x9f~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|\x00\x17\xc0\xa3\xd5\xf9\xaa\x98/\xa4v\xe4\xc5\xd3\\T\xf0\x1a|5\xfff\xff\x99\xa4\xbb\x9e#oR\xa4\xc9\xe1\x9a#+\xcf7\x98\xb85\xb5\xdb\xe9?\xfa/\xdf\xb4R\xbfx=\v_j\x8e\xb0\'\xf4\xe5\xff!\xe1\xbf\x82e\xb1\x9b\x8d\xf3L\t\xd21\x9cbwV\xc8\xcc\xe4\x96M_w\xbc\xdf9\b\r\xf6\x95\xae\xb5,\x92\x8c\xc0DQm\x80\xd1w\xa2\x1aD\n\x96J\x93\xfb\xf0$\x9f\xf7\xa2\xae$O\xa3\xb6\xf5\x98\xd3\v\x00\x86\xa5\x8b\x81\x04\xaf\x03s\xe5\x86>\x0e\xa6\xe6\x1aV\x17\x8b\xed\xa7\'\xd0\r_\xe8,XVR\x13\xe5%\xb9\x88\xb8W`D\'\x17A\xc8\x80\x02J\xd4V\x00wH(\xc5v\f\xc9\xb6\xdf..$\xe6P(_\xf1\'\xc1:\xa3\xcb\xd9\xd1\xc7\x13\x99Md\x1dc\xf1\'j\x03!\x13\xd1\xb8\xbf\xe6\xb2M\b/\rp\xa5\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\\\x03\xb3a%\xb9\xe9\x9ag+\xb3&\x19\xd20\r\xcd>\x1d\x1ac\xa4\xc1\x18\xd8\xbf=~\xcd\x0em\xd5;\xf6|\xca6\xde@e\x96ru\x87|s\xe3\xee\x1d\x83\x91&}\xa9\xa3\xb7\xba\'y/\xf6\a\x92\v\xb9\\0[\xc3(\xa4UH\xc9<\xa7:\x9f1\xa3\xd7\xb4&\xd2(\xa1\x1b|\x81\x8c\x86]\x1e\xb4\x84\xcc6U\x06\xcb\xbd\\R\nh\xc9\xa9F\x83|{\xc8ukgf!\x91\xfb\xf2\x1f\xffMpgB\xbc\xabPN\x9e\xd9\x9fc\xfd\x19X\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe0\x88a[\xa2QO\xd7\x10\xdb\x8d\x03\xee\x7fj\xf6b7\xb3\x05\x96\x8d\"r\xe0\x18723\xf2F\x026\xe3\x95Y9\xe4\xff\x0e\xf7\xcd\x9d\x9e\xc0\xfe\x17m\x12\xb3\xdc\x1b.\xf3\xd6\xec\x93\xecP\xef#\x9e>\x84\x15DF\xdd\xf5z\xca\xd2\x8d\x9e\xbeD\xb7\x94[\v\xee\x8b\x15N\xae\x1e', 0x40, 0xa8, 0x0) r7 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x2c05) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r7, 0xc0145401, &(0x7f0000001200)={0x1, 0x1, 0x0, 0x1, 0x4}) 13.310012183s ago: executing program 0 (id=1292): socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x5e4b, &(0x7f0000000040)={0x0, 0x4b70, 0x20, 0x0, 0x1c4}) mmap(&(0x7f00004e9000/0x2000)=nil, 0x2000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000880)={"84ca18eaa852b1a3bb3e80fe4eee1e4efbe55b52637d7e57c6f18b1d38286e1e4f37d997fe32fe60b40690718c3efe462c935f0d40f1aeeffa2cf8101f28571b6dfc5560095636dd10ace18ee9c6b5b854d8d974d1c26b1a3b9900a365d717934bb0a489f0cebb1597f4e2bb5cfd0c5629f0a6a86e104c0b6c74dd41f07312910c778d23ee7e0c3a8c94ed8226925f0f05f288604684d76c58a0c09601ce1f11a06333743f6997026ef3edbcb9f3adc11f921bc91f7f9e8715fb886e1ff8544885de0da0b5fcd763e5539dd92ae1a27b5cda25329f8577cec548db45330209382208cd9e77998ccd3eb075cdf236c2166b13b7caf92272da52deb450f8544e3a4b95f3dead6c76ccd8943dff073a601d53b43d9394a9552ab9f78023b2b6b3db61d3d8ed662359066df8f0d398307ba15450c47bb2b97fd48f8e4a59c997b7d15d790978d3352ec552310bd219e72f997b04cc0d8c7afb392a36cc9b17fb5ab09647fc59984c2ee3a882d102cfe3bf29aeab03813d822cb9b1997876e0e603a099aed4dad75b83669b90dd808302b7c0bf5f88d020aa3d9beba2374670572ad0de5e4c78067e74f96a2baa3ec401520e7e4c2ff4cdb809b16d376fa622ebee5db6b8670ed68706e179b58de0aaaa3e43fb5d2a45582196aaf3aa232151aafbf7265d7c339a4f3b9d3f942aae8a4397db047abad9dfa7cd220a105e6d8faf25ff9312228b287db69b0f4f50b092f80e4336a2e327ba613f221e1fc859305b1b0b04c450952852653e200e6bd0293a1e1921b1292fa09dfba00cae70a01b590189f6a391fd4445abeea55e9c54d9f975227021d08b1861b8279edf51612e238cb36494ef745f3e1eb778ab341a8a36495695f29a60d717a4f5d534a00a2a3d020e61884201b33ce2e1c0420a05b5de2d3034f8bc14cc864b7d9394a1fda8db1e24bd14bf912656874e47cd30210c25107ea9b8d21d3b7198b0936acf0f15db949dbf22d51fc289cda1a550f3cba42e42184e5d61d61f2293735557f67d54bc3b4aba898119c3645c233ee02c4ab4b1b900e9aebdc2b772bb933d002a2b7ca954373e37eefa4377a93b16f8cd17613d714592afdc410ac705cb9798be70a8e64193214342992392c42475bbf9f33ad2d678e62af6f01b9f202a86fc549ed233724021ef50a0c82c6b3a51817c63d6dd706d9dae6e8b1fb61ffdcd59af94a92733c1b763007ef78e2d90bbdcde589b8f40e067a127841eb469d8aff8cee7d03d11ab2a6ddf0184301e11eec507393aa6df565e2503f5bb3210726f0b9bd49c6caf8ba93e709049fb4c9eaf9f66bae4d8749a2989214c0c2290b2841368481d67d5a6c6a6126b696a554132656c9ef3d4054349c2a312a1ef427f3b1ec6d3b2a8cfdbc722373932a2892f0333d879800b7cfaa94259a2c301ff48c575279da1de8198"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) recvmmsg(0xffffffffffffffff, &(0x7f00000033c0), 0x0, 0x2, 0x0) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x110, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x19, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1, 0x1, {0x6}}) syz_emit_ethernet(0x7e, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x141802, 0x0) socket$tipc(0x1e, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r1, &(0x7f0000000200), 0x12) 11.80888021s ago: executing program 0 (id=1295): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x2, 0x0, @empty}, 0x1c) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 11.348352988s ago: executing program 0 (id=1297): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x106f) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r4, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r4, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 10.21756947s ago: executing program 0 (id=1298): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3f7c6dacd1aa77a72b6ee", 0x2b}, {&(0x7f0000000500)}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7cc424cf", 0x3b}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9f75c7a93c7c1647d0c2e7776210db3e8877ce7a800658357b6e35c", 0x6e}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6be53d89866", 0xaf}, {&(0x7f0000000940)}], 0x6, 0x0, 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f50539", 0x23}, {&(0x7f0000000ac0)}], 0x5, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.997113304s ago: executing program 2 (id=1299): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000001c0)='./bus\x00', 0x77) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) 8.567994327s ago: executing program 4 (id=1300): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000001c0)='./bus\x00', 0x77) open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10) truncate(&(0x7f00000000c0)='./bus\x00', 0x9471) 8.429634329s ago: executing program 0 (id=1301): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000027c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r3, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 8.429246539s ago: executing program 3 (id=1302): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlink(&(0x7f0000000100)='./file0/file1\x00') 7.462598074s ago: executing program 3 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 6.455165581s ago: executing program 4 (id=1305): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 6.115758523s ago: executing program 3 (id=1306): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 4.402518147s ago: executing program 1 (id=1307): r0 = userfaultfd(0x801) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xfffe, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x1000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x128}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) 3.9678436s ago: executing program 3 (id=1308): r0 = userfaultfd(0x801) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x1, 0x0, 0xfffe, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x10, 0x32}, 0x0, @in=@multicast1, 0x0, 0x0, 0x3}}, 0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x41}, @in=@remote, 0x3, 0x7, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0xfffffffffffffffe, 0x1000000000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x3, 0x0, 0x80000, 0x9, 0x3}}, 0xe8) close(r1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, &(0x7f0000000040)}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') sendmsg$nl_xfrm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0x128}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r7, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5}}, './file1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000001340)={0x2020}, 0x2020) 2.938118983s ago: executing program 1 (id=1309): sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000340)="f15f380fbc4d4b99b7604d79a24a087355ae47dbff3c64bc6f1a514a3a614d89e3", 0x21}, {&(0x7f0000000500)='m', 0x1}, {&(0x7f0000000540)="69789b3e68b6bb468a00301326eab0eda05e1be62b5f5a509f60c33bf2b169e796c15793c71a66f06e415678d406f12f546a15d50a514b7cc424cf", 0x3b}, {&(0x7f0000000680)="c60978ea1f7353652d7d7af312204f1e4701a9446e1e305f9db167e1dc5b6d0065641add82dcfb44bbd1bf442617fe5120399a68217d236df5328d80026c6fb0c31a9631b2886ff395811916849b48b48b46b9f75c7a93c7c1647d0c2e7776210db3e8877ce7a800658357b6e35c", 0x6e}, {&(0x7f0000000880)="e3d83bc2e8ef11477817c33bf43a6dc7601e7240c2a40e5c2f5afaf76e7852dd78cdc6862e4e34705fc1e797599a00a77236f7505824cdebbc3485a382a7138007c497bc80c246bfcc79d9928d22cc5c7bbec7190e82ba9ca106b78fe38a06f7de1ef35b4bd939065bf85002f0a4791b82fcc99e223417515bfde1bcae74cbf1338437ce59d009b5d9862a685186e47c6670b327ae679f99eac336919a4e0c736a264324a93f885b14a6be53d89866", 0xaf}, {&(0x7f0000000940)="fb83fe63ca93cec41f552d76065d983e7cda6bb2f21aaa05a9ee7d75ed14a140f329d12d530ea154d7d21d0aa5517808ef38b13d6189f619adbf33ba19eb2180096e", 0x42}], 0x6, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x188}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x11, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-aes-neonbs\x00'}, 0x58) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x0, 0xcf6, 0x20493859, 0x0, 0x0, 0xffffffff, 0x0, 0x80000000, 0x0, 0x1}}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000100)={0x400, 0x40, 0x3e000000, 0x800, 0xbbba, 0x2, 0x18, 0x0, {0x0, 0x2007}, {0x9, 0x3, 0xfffffffe}, {0x0, 0xffff0000}, {0x1000000, 0x0, 0x20001}, 0x0, 0x0, 0xa, 0x4d612, 0x0, 0x0, 0x0, 0x4000008, 0xfffffffd, 0x0, 0x0, 0x0, 0x39, 0x100, 0x1, 0x1}) removexattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='user.incfs.size\x00') setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60", 0x9b}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaabeb7a27d1418376394238ae0a1ca9cc4187957fdca8dfa1151a311e577e1461a24", 0x3b}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8", 0x1c}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f50539", 0x23}, {&(0x7f0000000ac0)}], 0x7, 0x4d9e, 0x8) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.632918791s ago: executing program 1 (id=1310): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0xc2200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$vimc0(0xffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0xf, 0x80000002}, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x4f49, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r2, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x323800) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000005c0)='fd', 0x0, r3) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x2) mkdirat(r5, &(0x7f0000000040)='./file0\x00', 0x0) setpgid(0x0, 0x0) setpgid(0x0, 0x0) fchdir(r5) symlinkat(0x0, 0xffffffffffffff9c, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0) 1.867169557s ago: executing program 3 (id=1311): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, &(0x7f0000000340)={@desc={0x1, 0x0, @desc3}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xc, &(0x7f0000000300)) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) creat(&(0x7f0000000440)='./file0\x00', 0x0) syz_clone(0x1010000, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r3, r3, 0x0, 0x40008) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x1c, r5, 0x1, 0x100, 0x40000, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) 1.668470386s ago: executing program 0 (id=1312): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000003c0)={0x2c, &(0x7f0000000180)={0x0, 0x14, 0x5, "35abdaa7ee"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 189.429669ms ago: executing program 1 (id=1313): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @rand_addr, 0x5}, 0x1c) 188.240108ms ago: executing program 1 (id=1314): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000780)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) unlink(&(0x7f0000000100)='./file0/file1\x00') 84.854257ms ago: executing program 1 (id=1315): sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f0000000240)='./file1\x00', 0x2004018, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc15, &(0x7f0000001940)="$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") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) connect$inet6(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) r1 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, &(0x7f0000000580)={&(0x7f0000002580)=[0x2, 0x9, 0x7554, 0x7, 0x1, 0x4, 0xf4a, 0x6, 0x6, 0x6, 0x2, 0x6, 0x6, 0x1, 0x0, 0x5, 0x1, 0xc, 0x9, 0x800, 0x6, 0x10000, 0x380, 0x8, 0x1, 0x0, 0x6, 0xe9c, 0x3, 0x1, 0x2, 0x800, 0xea, 0x7, 0xfffffff8, 0x7, 0x4, 0x101, 0x9, 0x10, 0x80000000, 0x7, 0x1, 0x9, 0x2, 0x0, 0x8, 0x1a86, 0x2, 0x8088, 0x1, 0x1, 0x3, 0x5, 0xc, 0x7fffffff, 0x7f, 0x9, 0x3, 0xcf16, 0xffff, 0xbf7, 0x9, 0x7, 0x1, 0x7, 0x4, 0x8, 0x7, 0xa44, 0x1c8, 0x8, 0x7, 0xdcf5, 0x6259, 0x4, 0x6, 0x0, 0x5, 0x5, 0x8, 0x1000, 0x6, 0x10, 0xb, 0x8, 0x0, 0xd, 0x7fffffff, 0x800, 0x8, 0x0, 0x1, 0x0, 0x7, 0x80000001, 0x1, 0xfffffff6, 0x8001, 0x9, 0x4, 0x8, 0x8, 0x4, 0x2, 0x8, 0xffff, 0x9, 0xa, 0x77, 0x80000000, 0xd, 0x8, 0x19bc, 0x8, 0x99de1dd, 0x8, 0x3, 0x6, 0xfffffff9, 0x7, 0x1ed, 0x81, 0x8, 0x4, 0x7, 0x1000, 0x9e, 0x4, 0x6, 0x7, 0x0, 0x200, 0x8, 0xe, 0x2, 0x8, 0x8, 0xce3, 0x1, 0x7, 0x7, 0x9, 0x81, 0x9, 0x6, 0x7, 0x7f, 0x5, 0x6, 0x4, 0x8, 0x8000, 0x38280595, 0x3, 0x10, 0xfffff000, 0x6, 0xfffffff6, 0x3a54a52e, 0x1, 0x4, 0xffffffea, 0x10000, 0xff, 0x7f, 0x5, 0xffffffff, 0x8, 0x1, 0x6, 0x5, 0x9, 0x5, 0xa6f1, 0xff, 0xfffffffe, 0x1, 0x7, 0x9, 0x5, 0x7f, 0x6f12, 0x7, 0x8, 0x401, 0x5, 0xd, 0x3935, 0x0, 0xd68, 0x3, 0xc, 0x4, 0x6, 0x3, 0x7, 0x6, 0x3, 0x1, 0xba3, 0x1000, 0x6, 0x10000, 0x3, 0x3, 0x8, 0xfffffffe, 0x8000, 0x8, 0x4, 0x8, 0x6, 0x9, 0x4, 0xf9, 0xcbe, 0x2c5a, 0x7, 0x2, 0x0, 0x2f8bebfc, 0x6782, 0x2f9, 0x8, 0xdd2, 0x10000, 0x8, 0x6, 0x8001, 0x4, 0x6, 0x1, 0x2, 0x4, 0x8, 0x7, 0x7, 0x1, 0x52e4, 0x4197, 0x1, 0x1, 0xfffffffe, 0x8, 0x2, 0x1, 0x9, 0xde8, 0x2, 0x1, 0x7ff, 0x8001, 0x6, 0x2, 0x95d, 0x2, 0xe4b2, 0x0, 0x80000000, 0x4, 0x0, 0x10000, 0x7, 0x9, 0x9, 0x23a, 0x3, 0x3be440c8, 0xd, 0x4, 0x6, 0x4e, 0x8, 0x2, 0xb4c, 0xda0, 0xfffff801, 0x7, 0xfffffffe, 0x7, 0x2, 0x8, 0xe0f6, 0x0, 0x4, 0x2, 0x4, 0xfffffffa, 0x9, 0xfffffffa, 0x6, 0x5, 0x7f, 0x7fff, 0x4bcb, 0x5, 0x51b9, 0x2, 0x6a, 0x1, 0x6ec4, 0x95f8, 0x80, 0x3ff, 0x9, 0x2, 0xda6, 0x0, 0x27, 0x9, 0x5, 0x3, 0x7, 0x8, 0x10, 0x7, 0x6, 0xff, 0x6, 0x6, 0x7f, 0x89ff, 0x5, 0x2, 0x2, 0x5, 0x200, 0xdf, 0x3ff, 0x73c4, 0x4, 0x5, 0x5, 0x0, 0x0, 0x1000, 0xfffff000, 0x5, 0x7fff, 0x101, 0x3, 0x1, 0x0, 0x32f, 0xdec, 0x4, 0x2dd, 0x401, 0x6, 0x5, 0x5c12, 0x7, 0x4, 0x8, 0x991, 0x800, 0x5, 0x6, 0x1, 0x4, 0x3a, 0x80000000, 0x4, 0x400, 0x101, 0x3, 0xffff, 0x0, 0x104f, 0x2b6, 0xffffffff, 0xfffffe00, 0x7, 0x2, 0x1, 0xd0, 0x7fff, 0x2, 0x1e10, 0x4, 0x1, 0x7, 0x7fff, 0x1, 0xf6f, 0x1ff, 0x8, 0x5b, 0x7, 0x7, 0x6349376b, 0x4, 0x1, 0x1ff, 0x8, 0x0, 0x26, 0x80000001, 0x7, 0x3, 0x7, 0x4, 0x401, 0x0, 0x10001, 0x4d4, 0x200, 0xfffffff8, 0x2, 0x8, 0xff, 0x58, 0xd3, 0x5, 0xfffffff8, 0xfffffffa, 0x6, 0x9, 0x4, 0x1, 0x7, 0xfff, 0x145, 0x2, 0x85d, 0x5, 0x3, 0x401, 0x8000, 0xb, 0x6, 0x7ff, 0x7, 0x7, 0x3, 0x4, 0x7, 0x100000, 0x7, 0x6, 0x1, 0xffff8000, 0x8, 0x90000000, 0x4, 0x1, 0x1, 0x6, 0x8, 0x401, 0x9, 0x3, 0x0, 0x6, 0x200, 0x9, 0x5, 0x0, 0xffffffff, 0x5, 0x3, 0xfffffff4, 0xfffffeff, 0xfffffff7, 0x2, 0x1, 0x2, 0x6, 0xfffffffe, 0x7fffffff, 0x6, 0x88, 0x1, 0x5, 0x0, 0x80, 0x6, 0x7, 0x16c, 0x9, 0x8, 0x3, 0x1000, 0x4, 0x7fffffff, 0x3b2, 0x3, 0x3ff, 0x9, 0x1, 0xa, 0x7, 0x3, 0x4, 0x8, 0x7ff, 0x3, 0x25b6, 0xff800000, 0x7f, 0x5, 0x10001, 0x1, 0xc6, 0x1, 0x8000, 0x8001, 0x3ff, 0x80, 0x8, 0xe, 0x3, 0x3, 0x0, 0x17, 0x5, 0x73, 0x8227, 0x37, 0x3ff, 0x9, 0x2, 0xd, 0xa4e9, 0x400, 0x0, 0xfce2, 0x0, 0x8, 0x3, 0x6, 0x9, 0x800, 0x21c, 0x8cd, 0xa8, 0x7fff, 0xf4, 0x5, 0x6, 0x4, 0x2798, 0xba63, 0x1, 0x92e, 0x2d, 0x6, 0x4, 0x7, 0xfce, 0xa, 0xfb9, 0x60000, 0xfffffffb, 0x4, 0x7, 0x7, 0xf4c, 0xfffffffb, 0x0, 0x1, 0x101, 0x1, 0x6, 0x8, 0xa, 0xf, 0xaf6b, 0x5, 0x6, 0x2, 0x4, 0x1, 0x13e, 0xffffffff, 0x56a3c811, 0x7, 0xc0, 0xfffffffb, 0x2779ec6a, 0x9, 0xf, 0x3, 0x1, 0x1, 0x3, 0x7fffffff, 0x2d, 0x4, 0x2, 0x6, 0x80000000, 0x8, 0x4dd, 0x6, 0x42ee, 0x3, 0x5, 0x7, 0xfff, 0x3, 0x2, 0x3, 0x7, 0x1, 0x2, 0x4, 0x5, 0xe, 0x0, 0x4ea, 0x3, 0x4, 0xfffffffc, 0x8, 0x2, 0x2a29, 0x5, 0x1, 0x0, 0x8000, 0xffffffff, 0x7, 0x3, 0x0, 0x1, 0x401, 0x1, 0x7fffffff, 0x7ff, 0x6, 0x7, 0x7, 0xe, 0x3f0, 0x9d, 0xe, 0x100, 0x4, 0x3, 0x8, 0x4, 0x0, 0x48c, 0x4, 0x3cee, 0xfffffff8, 0x2c, 0xffffff7f, 0x3, 0x0, 0x9, 0x6, 0x1, 0xb781, 0x1, 0x7ff, 0x3, 0x10001, 0x6, 0x5, 0xdd4, 0x3, 0x100, 0x1, 0x7, 0x10, 0x616, 0x3, 0xf, 0x2, 0x89800000, 0x5, 0x9, 0x7, 0x5, 0x2, 0x1, 0x5, 0x6, 0x5, 0x6, 0x9, 0x0, 0x1000, 0x4, 0x3, 0x7, 0x80000000, 0xb79, 0xfffffbff, 0x1, 0x3, 0x8001, 0x9, 0x90b, 0x5, 0xc2, 0x4, 0xffffffff, 0xb, 0x8, 0x9, 0xd, 0xec2, 0x0, 0xd, 0x7, 0xffffffff, 0x5d, 0xfffffff9, 0x7, 0x1ff, 0x0, 0x7fe, 0x7ff, 0x5, 0x6, 0x9, 0x80, 0x7a, 0x401, 0x3, 0x2, 0x7, 0xdd13, 0x0, 0x8, 0xffffff80, 0x2, 0x9, 0x3, 0x7, 0x7fffffff, 0x8, 0x80000000, 0x101, 0x8, 0x92, 0x9, 0xeb4, 0xffff, 0x8, 0x7fff, 0x910a, 0x1, 0xfffffffb, 0x0, 0x0, 0x1, 0x1, 0x3, 0x1, 0x7, 0x2, 0x100, 0x0, 0x150, 0x8, 0x7fff, 0x1, 0x0, 0x9, 0x48b, 0x7, 0xd79, 0x8, 0x6, 0x9, 0x8, 0x97, 0x8, 0x2, 0x53, 0xfd, 0xffffffff, 0xc, 0x8, 0x1, 0x5, 0x99, 0xb, 0x5, 0x7, 0x7, 0x7fffffff, 0x2, 0xcb1, 0x6, 0x5, 0x4, 0xea68, 0x7, 0x100, 0x9, 0x3, 0x7, 0x8000, 0x8, 0x9, 0xf0, 0x2, 0x2, 0xa, 0x6, 0x5, 0xa, 0x1, 0x4, 0x8, 0x753, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x1, 0x2, 0x57, 0x7, 0xffff, 0x3ff, 0x80000001, 0x9, 0x3, 0x8, 0x9, 0x5, 0x40, 0x0, 0x0, 0x1, 0x100, 0x7, 0xea61, 0x47c9, 0x2, 0xffff, 0xffffff7f, 0xa6, 0x5, 0x7f, 0x1, 0x81, 0x1, 0x1, 0x2, 0x2, 0x7, 0x400, 0x15c36d8, 0x6, 0x2, 0x80, 0x2, 0x15f71324, 0x5, 0x2, 0xed, 0xfffffffe, 0xc, 0x80000001, 0x7fffffff, 0x9, 0x3, 0x81, 0x4, 0x4, 0x3ff, 0x94a8, 0x9, 0x9, 0x6c51fc7, 0x1, 0xfffffffb, 0x7, 0xfff, 0x5, 0x0, 0x4, 0x2, 0x5, 0x9c, 0xff, 0x8, 0x5, 0xb, 0x9, 0x100, 0x7, 0x7, 0xa6, 0x101, 0x81, 0x3, 0x4, 0x3, 0x57c, 0x80000000, 0x1, 0x8001, 0x7, 0x6, 0x3ef0, 0xb, 0x3, 0x0, 0x0, 0x2, 0x8e43, 0x1, 0x625, 0xfffffff8, 0x8, 0x3, 0x80, 0x10000, 0x29, 0x3, 0x7fff, 0x2, 0x6, 0x0, 0x6, 0xfffff18e, 0x7, 0x1, 0xfffffe9f, 0xa8d, 0x5, 0x7, 0x5382fe45, 0x52f6, 0x2, 0x533, 0xcf, 0x9, 0x7, 0x9, 0x1ff, 0x4, 0xfffffffd, 0x4, 0x2, 0x3, 0x3, 0x7d, 0x6, 0xc5d4, 0x81, 0x4, 0x10001, 0x401, 0x10001, 0x80000001, 0x5, 0x786, 0xffffffff, 0x1, 0x20, 0xffffffff, 0x1, 0x0, 0xfffffffa, 0x4, 0x3, 0x6, 0x8, 0xd0000000, 0x5, 0x1, 0x6, 0x2, 0xf4303dd0, 0x7, 0xa31, 0xfff, 0x4, 0x8, 0x14000, 0x2, 0xfbf3, 0x1, 0xc6, 0x2, 0x4, 0x3, 0xfffffff3, 0x7, 0xb74e, 0x8, 0x2, 0x7, 0x1000, 0x8, 0xfffffffc, 0x0, 0x6, 0xc, 0x7fff, 0x80000001, 0x9, 0x2, 0x400, 0x0, 0xffffff7f, 0x0, 0x3, 0x9, 0x7, 0x2de7000, 0x3, 0xfff, 0x8, 0xb6e4000, 0xb, 0x3, 0x9, 0x7f, 0x9, 0x80000001, 0x8000, 0x7], 0x3, 0x400}) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x9e, &(0x7f0000000300)={0x0, 0x5867, 0x400, 0x0, 0x344}, &(0x7f0000000380)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f00000002c0)=0xfffffffc, 0x0, 0x4) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x82041, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0086a86560d7a7139bfec06d8179223a7aaa0d6687600530c2258f6a6b0000a30beafdc704e7eb450bf60e2ff3523fa87bf175679ff4c339739281537659b382812635688684e22ae938c5da2c3392a823d551b36881d57849772b735fe1340f8d16b85ace69da518dea8e610ce0213c4661ce86cd97f9c7e1340f6600c6c462bbcdd7cde7003cc16b5a6a4a51e8cdb2fb8544bfdd89c48af27759acc524ad7bc9626d14d434d75d9bd787091c5e80efe9225753f28f4823d59b233406a404c9edafb263c671"], 0x1, 0x13a, &(0x7f0000000200)="$eJzs2r9Kw0AcB/DfIAgdHZ0ClSho/mtddRQ33yC0uTR4Z0oiSPsC4iQonIMvIfgEPkJGN10EfYnI2au2qWgnD+H7Wfqlv+RyuYPL8nOKXASsdIi2BldHLytFLqxOtNtlAYtp7ICILBWqur5xac7TZ72qyf3mArPW3sa/7Y1UHl6wjCeh6SkBAAAAAAAAAAAAAAAAAAAAAMCC7JYOrb4U5yzjSTBVLYej45jzpCgNTc8429I9XMQkv1XrE83UN1+J7D2VMrlfqLo/e/+1Dut9yZ+b6+udioFXDkdOJuI0SZOTMIw6/rbv74Tex1hec0T7Ts+Jqvren28ns6f6zR4X6TfT+7+0msnLs+bTvvYfAQEBYRJ+PVf+i8n3r7cctR/U+ed2c97Tf/7Fchp8dwD4wXsAAAD//7SlOms=") 20.624454ms ago: executing program 2 (id=1316): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/tty/drivers\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) sendmsg$rds(r5, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) 0s ago: executing program 3 (id=1317): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat$loop(0xffffffffffffff9c, 0x0, 0x20, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r0, &(0x7f0000001680)={0x2020}, 0x2020) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(0xffffffffffffffff, 0x110, 0x2, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x3) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) r1 = userfaultfd(0x801) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x34}}, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000000, 0x5d032, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000100)) ioctl$F2FS_IOC_GARBAGE_COLLECT(0xffffffffffffffff, 0x4004f506, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x401, 0x381d, 0x4, 0x7f, 0x5}, &(0x7f0000000040)=0x14) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f0000000200)={r4, 0xfff}, 0x8) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) kernel console output (not intermixed with test programs): pvrusb2: Invalid write control endpoint [ 178.837880][ T5937] SET target dimension over the limit! [ 178.841861][ T2420] pvrusb2: Invalid write control endpoint [ 178.852386][ T2420] pvrusb2: Invalid write control endpoint [ 178.875688][ T2420] pvrusb2: Invalid write control endpoint [ 178.881926][ T2420] pvrusb2: Invalid write control endpoint [ 178.894670][ T2420] pvrusb2: Invalid write control endpoint [ 178.901572][ T2420] pvrusb2: Invalid write control endpoint [ 178.912159][ T2420] pvrusb2: Invalid write control endpoint [ 178.926632][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.948556][ T5939] loop4: detected capacity change from 0 to 512 [ 178.965342][ T2420] pvrusb2: Invalid write control endpoint [ 178.965346][ T4230] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.986460][ T4230] usb 3-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 178.995611][ T4230] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.039754][ T2420] pvrusb2: Invalid write control endpoint [ 179.083556][ T4230] usb 3-1: config 0 descriptor?? [ 179.108778][ T5939] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: inode #11: comm syz.4.505: ea_inode with extended attributes [ 179.139399][ T2420] pvrusb2: Module ID 3 (saa7115) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 179.220551][ T5939] EXT4-fs (loop4): Remounting filesystem read-only [ 179.239791][ T5939] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.505: error while reading EA inode 11 err=-117 [ 179.282689][ T5939] EXT4-fs (loop4): Remounting filesystem read-only [ 179.294116][ T5939] EXT4-fs (loop4): 1 orphan inode deleted [ 179.322048][ T5939] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodioread_nolock,noload,debug_want_extra_isize=0x000000000000004c,errors=remount-ro,delalloc,journal_ioprio=0x0000000000000001,init_itable=0x0000000000008d55,. Quota mode: none. [ 179.393013][ T2420] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_b) [ 179.401023][ T2420] pvrusb2: Invalid write control endpoint [ 179.477929][ T2420] pvrusb2: Invalid write control endpoint [ 179.483720][ T2420] pvrusb2: Invalid write control endpoint [ 179.514302][ T2420] pvrusb2: Invalid write control endpoint [ 179.530439][ T2420] pvrusb2: Invalid write control endpoint [ 179.560879][ T2420] pvrusb2: Invalid write control endpoint [ 179.580426][ T2420] pvrusb2: Invalid write control endpoint [ 179.581304][ T7] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 179.597081][ T2420] pvrusb2: Invalid write control endpoint [ 179.620641][ T4230] logitech-djreceiver 0003:046D:C71F.0009: unknown main item tag 0x7 [ 179.621240][ T2420] pvrusb2: Invalid write control endpoint [ 179.665356][ T4230] logitech-djreceiver 0003:046D:C71F.0009: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.2-1/input0 [ 179.678471][ T2420] pvrusb2: Invalid write control endpoint [ 179.739452][ T2420] pvrusb2: Invalid write control endpoint [ 179.767149][ T2420] pvrusb2: Invalid write control endpoint [ 179.793823][ T2420] pvrusb2: Invalid write control endpoint [ 179.799748][ T2420] pvrusb2: Invalid write control endpoint [ 179.815983][ T2420] pvrusb2: Invalid write control endpoint [ 179.825045][ T4230] usb 3-1: USB disconnect, device number 14 [ 179.828805][ T2420] pvrusb2: Invalid write control endpoint [ 179.847176][ T2420] pvrusb2: Invalid write control endpoint [ 179.866273][ T2420] pvrusb2: Invalid write control endpoint [ 179.894498][ T2420] pvrusb2: Invalid write control endpoint [ 179.913044][ T2420] pvrusb2: Invalid write control endpoint [ 179.935594][ T2420] pvrusb2: Invalid write control endpoint [ 179.965446][ T2420] pvrusb2: Attached sub-driver cs53l32a [ 179.979073][ T5951] fido_id[5951]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 180.026564][ T7] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 180.050404][ T2420] pvrusb2: Invalid write control endpoint [ 180.061870][ T2420] pvrusb2: Invalid write control endpoint [ 180.067939][ T7] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 180.070121][ T2420] pvrusb2: Invalid write control endpoint [ 180.097167][ T2420] pvrusb2: Invalid write control endpoint [ 180.115175][ T2420] pvrusb2: Module ID 4 (tuner) for device OnAir Creator Hybrid USB tuner failed to load. Possible missing sub-device kernel module or initialization failure within module. [ 180.132671][ T7] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 180.132704][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.158573][ T2420] pvrusb2: Device being rendered inoperable [ 180.164679][ T2420] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules. [ 180.182988][ T2420] pvrusb2: You need to resolve the failing condition before this driver can function. There should be some earlier messages giving more information about the problem. [ 180.326443][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 180.546654][ T7] usb 2-1: usb_control_msg returned -32 [ 180.552742][ T7] usbtmc 2-1:16.0: can't read capabilities [ 180.566574][ T4184] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 180.826447][ T4184] usb 1-1: Using ep0 maxpacket: 16 [ 180.946909][ T4184] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 181.046356][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 181.054733][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 181.156631][ T4184] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 181.163434][ T5960] loop3: detected capacity change from 0 to 64 [ 181.195853][ T4184] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.255063][ T4184] usb 1-1: Product: syz [ 181.295391][ T4184] usb 1-1: Manufacturer: syz [ 181.333394][ T4184] usb 1-1: SerialNumber: syz [ 181.456952][ T4184] usb 1-1: config 0 descriptor?? [ 181.986941][ T4184] usb 1-1: can't set config #0, error -71 [ 182.082795][ T4184] usb 1-1: USB disconnect, device number 9 [ 182.155494][ T5968] loop2: detected capacity change from 0 to 4096 [ 182.343863][ T7] usb 2-1: USB disconnect, device number 16 [ 182.418138][ T5981] loop0: detected capacity change from 0 to 1024 [ 182.553262][ T5978] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 182.653818][ T5983] overlayfs: upper fs does not support tmpfile. [ 182.690878][ T5968] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 182.755010][ T5983] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 182.773112][ T5983] overlayfs: failed to set xattr on upper [ 182.806379][ T5983] overlayfs: ...falling back to index=off,metacopy=off. [ 182.846485][ T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 182.888074][ T5989] SET target dimension over the limit! [ 183.221659][ T4194] Bluetooth: hci0: ACL packet too small [ 183.228517][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.270261][ T21] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 183.298334][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.315096][ T21] usb 5-1: config 0 descriptor?? [ 183.384903][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 183.796504][ T7] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 183.826377][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 183.876338][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 183.926508][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 183.976434][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 184.134225][ T6007] loop0: detected capacity change from 0 to 256 [ 184.146326][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 184.167282][ T7] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 184.211024][ T7] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 184.221794][ T6007] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 184.236376][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 184.336420][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 184.336555][ T7] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 184.376158][ T6007] attempt to access beyond end of device [ 184.376158][ T6007] loop0: rw=524288, want=34359738496, limit=256 [ 184.399070][ T6007] attempt to access beyond end of device [ 184.399070][ T6007] loop0: rw=0, want=34359738496, limit=256 [ 184.410988][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 184.422668][ T26] audit: type=1800 audit(1772395092.914:11): pid=6007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.528" name="file1" dev="loop0" ino=1048598 res=0 errno=0 [ 184.453090][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 184.476492][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 184.527552][ T7] usb 3-1: SerialNumber: syz [ 184.536422][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 184.839674][ T7] usb 3-1: 0:2 : does not exist [ 184.926404][ T21] pwc: recv_control_msg error -71 req 02 val 2600 [ 184.956503][ T21] pwc: recv_control_msg error -71 req 02 val 2900 [ 185.006557][ T21] pwc: recv_control_msg error -71 req 02 val 2800 [ 185.019237][ T7] usb 3-1: USB disconnect, device number 15 [ 185.036450][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 185.066954][ T6017] loop1: detected capacity change from 0 to 512 [ 185.077004][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 185.101842][ T21] pwc: Registered as video103. [ 185.110082][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 185.178532][ T21] usb 5-1: USB disconnect, device number 10 [ 185.236676][ T6017] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.532: couldn't read orphan inode 26 (err -116) [ 185.249478][ T6017] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 185.262721][ T6017] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.286341][ T4474] Bluetooth: hci0: command 0x2016 tx timeout [ 185.318243][ T4270] udevd[4270]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.344174][ T6028] ODEBUG: Out of memory. ODEBUG disabled [ 185.422998][ T6031] loop2: detected capacity change from 0 to 512 [ 187.668726][ T6080] loop0: detected capacity change from 0 to 512 [ 187.719781][ T6080] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 187.790702][ T6080] EXT4-fs error (device loop0): ext4_orphan_get:1426: comm syz.0.553: bad orphan inode 131083 [ 187.814915][ T6080] EXT4-fs (loop0): mounted filesystem without journal. Opts: sysvgroups,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 188.370905][ T6099] netlink: 84 bytes leftover after parsing attributes in process `syz.1.561'. [ 188.646350][ T4184] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 188.716355][ T4474] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 188.886568][ T4184] usb 4-1: Using ep0 maxpacket: 8 [ 189.006653][ T4184] usb 4-1: config 6 has an invalid interface number: 2 but max is 0 [ 189.022136][ T4184] usb 4-1: config 6 has no interface number 0 [ 189.047242][ T4184] usb 4-1: config 6 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 189.082087][ T4184] usb 4-1: config 6 interface 2 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 189.116380][ T21] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 189.236648][ T4474] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.254057][ T4474] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 189.265731][ T4474] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.266461][ T4184] usb 4-1: New USB device found, idVendor=0af0, idProduct=7271, bcdDevice=88.91 [ 189.281179][ T4474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.306376][ T4184] usb 4-1: New USB device strings: Mfr=17, Product=2, SerialNumber=3 [ 189.314498][ T4184] usb 4-1: Product: syz [ 189.326972][ T6103] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 189.336280][ T4184] usb 4-1: Manufacturer: syz [ 189.340966][ T4184] usb 4-1: SerialNumber: syz [ 189.376368][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 189.398767][ T4184] hso 4-1:6.2: Failed to find INT IN ep [ 189.506608][ T21] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 189.518969][ T21] usb 3-1: config 0 has no interface number 0 [ 189.525412][ T21] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 189.543373][ T21] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 189.561603][ T21] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 189.578122][ T21] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 189.606134][ T6095] udc-core: couldn't find an available UDC or it's busy [ 189.607693][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.621674][ T6095] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 189.625009][ T6112] loop0: detected capacity change from 0 to 128 [ 189.634454][ T4184] usb 4-1: USB disconnect, device number 12 [ 189.703312][ T21] usb 3-1: config 0 descriptor?? [ 189.757924][ T21] ldusb 3-1:0.55: Interrupt in endpoint not found [ 189.776745][ T6114] netlink: 76 bytes leftover after parsing attributes in process `syz.4.567'. [ 189.806971][ T6112] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 189.832620][ T6112] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 189.862737][ T26] audit: type=1800 audit(1772395098.354:12): pid=6112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.566" name="file2" dev="loop0" ino=12 res=0 errno=0 [ 189.964653][ T21] usb 3-1: USB disconnect, device number 16 [ 190.191930][ T6134] 9pnet_virtio: no channels available for device syz [ 190.970122][ T4184] usb 2-1: USB disconnect, device number 17 [ 191.534874][ T6161] overlayfs: failed to clone upperpath [ 191.664244][ T6166] fuse: Bad value for 'fd' [ 192.049464][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 192.129635][ T6186] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 192.141765][ T6186] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.212862][ T6227] loop3: detected capacity change from 0 to 128 [ 194.333824][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.340211][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.444108][ T6254] netlink: 'syz.4.617': attribute type 9 has an invalid length. [ 197.502777][ T6254] netlink: 'syz.4.617': attribute type 6 has an invalid length. [ 197.889273][ T6271] loop3: detected capacity change from 0 to 256 [ 197.981908][ T6271] FAT-fs (loop3): Directory bread(block 64) failed [ 198.067257][ T6271] FAT-fs (loop3): Directory bread(block 65) failed [ 198.101907][ T6271] FAT-fs (loop3): Directory bread(block 66) failed [ 198.135415][ T6271] FAT-fs (loop3): Directory bread(block 67) failed [ 198.157820][ T6271] FAT-fs (loop3): Directory bread(block 68) failed [ 198.181290][ T6271] FAT-fs (loop3): Directory bread(block 69) failed [ 198.188139][ T6271] FAT-fs (loop3): Directory bread(block 70) failed [ 198.194721][ T6271] FAT-fs (loop3): Directory bread(block 71) failed [ 198.201441][ T6271] FAT-fs (loop3): Directory bread(block 72) failed [ 198.216488][ T6271] FAT-fs (loop3): Directory bread(block 73) failed [ 198.424324][ T6293] IPv6: addrconf: prefix option has invalid lifetime [ 200.643280][ T6317] loop1: detected capacity change from 0 to 128 [ 202.130402][ T6349] kvm: apic: phys broadcast and lowest prio [ 202.136997][ T6349] Disabled LAPIC found during irq injection [ 202.923121][ T26] audit: type=1326 audit(1772395111.404:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6356 comm="syz.1.652" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6ec925799 code=0x0 [ 204.193759][ T6371] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.202573][ T6371] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.588592][ T26] audit: type=1326 audit(1772395115.084:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x7ffc0000 [ 206.657573][ T26] audit: type=1326 audit(1772395115.084:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x7ffc0000 [ 206.706275][ T26] audit: type=1326 audit(1772395115.114:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fb4948d9799 code=0x7ffc0000 [ 206.746243][ T26] audit: type=1326 audit(1772395115.114:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x7ffc0000 [ 206.806322][ T26] audit: type=1326 audit(1772395115.114:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6441 comm="syz.4.686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x7ffc0000 [ 210.954222][ T6501] team0: No ports can be present during mode change [ 214.137947][ T6552] fuse: Bad value for 'fd' [ 215.290915][ T26] audit: type=1326 audit(1772395123.784:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371d9a5799 code=0x7ffc0000 [ 215.456912][ T26] audit: type=1326 audit(1772395123.814:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f371d9a5799 code=0x7ffc0000 [ 215.972252][ T26] audit: type=1326 audit(1772395123.814:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6565 comm="syz.2.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371d9a5799 code=0x7ffc0000 [ 219.257036][ T6615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.496704][ T6627] loop1: detected capacity change from 0 to 1764 [ 219.661504][ T6631] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 220.150103][ T6645] device batadv_slave_1 entered promiscuous mode [ 220.395010][ T6644] device batadv_slave_1 left promiscuous mode [ 220.404476][ T26] audit: type=1326 audit(1772395128.894:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x7ffc0000 [ 220.434306][ T26] audit: type=1326 audit(1772395128.924:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=77 compat=0 ip=0x7fb4948d9799 code=0x7ffc0000 [ 220.494437][ T26] audit: type=1326 audit(1772395128.924:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6653 comm="syz.4.760" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x7ffc0000 [ 222.640522][ T6689] syz.2.773 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 222.709983][ T6692] SET target dimension over the limit! [ 224.017694][ T6705] loop0: detected capacity change from 0 to 8192 [ 224.510782][ T1324] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 225.172230][ T1324] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 226.399394][ T6755] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 227.649340][ T6763] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 228.110457][ T6764] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 230.487248][ T4361] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 230.577137][ T6776] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 230.946688][ T4361] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.972480][ T4361] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.027247][ T4361] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.036419][ T4474] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 231.113687][ T4361] usb 1-1: config 0 descriptor?? [ 231.416360][ T4474] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 231.919060][ T4474] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 231.971611][ T4474] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.008499][ T4361] pwc: Askey VC010 type 2 USB webcam detected. [ 232.049852][ T4474] usb 4-1: config 0 descriptor?? [ 232.218581][ T4474] pwc: Askey VC010 type 2 USB webcam detected. [ 233.026599][ T4361] pwc: recv_control_msg error -32 req 02 val 2b00 [ 233.106448][ T4361] pwc: recv_control_msg error -32 req 02 val 2700 [ 233.166501][ T4361] pwc: recv_control_msg error -32 req 02 val 2c00 [ 233.326310][ T4474] pwc: recv_control_msg error -32 req 02 val 2b00 [ 234.046343][ T4474] pwc: recv_control_msg error -32 req 02 val 2700 [ 234.052940][ T4361] pwc: recv_control_msg error -32 req 04 val 1000 [ 234.106359][ T4361] pwc: recv_control_msg error -32 req 04 val 1300 [ 234.113004][ T4474] pwc: recv_control_msg error -32 req 02 val 2c00 [ 234.156523][ T4474] pwc: recv_control_msg error -32 req 04 val 1000 [ 234.206354][ T4361] pwc: recv_control_msg error -32 req 02 val 2000 [ 234.213018][ T4474] pwc: recv_control_msg error -32 req 04 val 1300 [ 234.256339][ T4474] pwc: recv_control_msg error -32 req 04 val 1400 [ 234.263003][ T4361] pwc: recv_control_msg error -32 req 02 val 2100 [ 234.302170][ T6798] SET target dimension over the limit! [ 234.308126][ T4361] pwc: recv_control_msg error -32 req 04 val 1500 [ 234.314857][ T4474] pwc: recv_control_msg error -32 req 02 val 2000 [ 234.446342][ T4361] pwc: recv_control_msg error -32 req 02 val 2500 [ 234.452821][ T4474] pwc: recv_control_msg error -32 req 02 val 2100 [ 234.506425][ T4361] pwc: recv_control_msg error -32 req 02 val 2400 [ 234.512946][ T4474] pwc: recv_control_msg error -32 req 04 val 1500 [ 234.648673][ T4474] pwc: recv_control_msg error -32 req 02 val 2500 [ 234.696337][ T4474] pwc: recv_control_msg error -32 req 02 val 2400 [ 234.866370][ T4361] pwc: recv_control_msg error -71 req 02 val 2900 [ 234.906340][ T4361] pwc: recv_control_msg error -71 req 02 val 2800 [ 234.936436][ T4361] pwc: recv_control_msg error -71 req 04 val 1100 [ 234.956533][ T4474] pwc: recv_control_msg error -71 req 02 val 2900 [ 234.986360][ T4474] pwc: recv_control_msg error -71 req 02 val 2800 [ 234.993196][ T4361] pwc: recv_control_msg error -71 req 04 val 1200 [ 235.040286][ T4474] pwc: recv_control_msg error -71 req 04 val 1100 [ 235.057888][ T4361] pwc: Registered as video103. [ 235.094861][ T4361] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input26 [ 235.106823][ T4474] pwc: recv_control_msg error -71 req 04 val 1200 [ 235.191851][ T4474] pwc: Registered as video104. [ 235.242306][ T6808] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 235.320074][ T4361] usb 1-1: USB disconnect, device number 10 [ 235.333294][ T4474] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input27 [ 235.501676][ T4474] usb 4-1: USB disconnect, device number 13 [ 236.767545][ T6822] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 238.291561][ T6834] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 239.626356][ T4474] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 240.866543][ T4474] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 240.875724][ T4474] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.884262][ T4361] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 240.963913][ T4474] usb 2-1: config 0 descriptor?? [ 241.024676][ T4474] cp210x 2-1:0.0: cp210x converter detected [ 241.358247][ T4361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.376538][ T4361] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.385791][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.656451][ T4474] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 241.688720][ T4361] usb 4-1: config 0 descriptor?? [ 241.706708][ T4474] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 241.722452][ T4474] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 241.733720][ T4361] pwc: Askey VC010 type 2 USB webcam detected. [ 241.790433][ T4474] usb 2-1: cp210x converter now attached to ttyUSB0 [ 241.843526][ T4474] usb 2-1: USB disconnect, device number 18 [ 242.029982][ T4474] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 242.040483][ T4474] cp210x 2-1:0.0: device disconnected [ 242.166367][ T4361] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.211323][ T4361] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.256476][ T4361] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.309913][ T4361] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.366294][ T4361] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.486080][ T4361] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.536352][ T4361] pwc: recv_control_msg error -32 req 02 val 2000 [ 243.536650][ T4361] pwc: recv_control_msg error -32 req 02 val 2100 [ 243.675430][ T4361] pwc: recv_control_msg error -71 req 04 val 1500 [ 243.856326][ T4361] pwc: recv_control_msg error -71 req 02 val 2500 [ 243.942998][ T6880] overlayfs: failed to clone upperpath [ 244.024974][ T4361] pwc: recv_control_msg error -71 req 02 val 2400 [ 244.166304][ T4361] pwc: recv_control_msg error -71 req 02 val 2600 [ 244.196423][ T4361] pwc: recv_control_msg error -71 req 02 val 2900 [ 244.218824][ T4361] pwc: recv_control_msg error -71 req 02 val 2800 [ 244.256500][ T4361] pwc: recv_control_msg error -71 req 04 val 1100 [ 244.286352][ T4361] pwc: recv_control_msg error -71 req 04 val 1200 [ 244.312134][ T4361] pwc: Registered as video103. [ 244.330924][ T4361] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input28 [ 244.381450][ T4361] usb 4-1: USB disconnect, device number 14 [ 244.818623][ T6898] SET target dimension over the limit! [ 245.797603][ T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 245.967595][ T6914] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 246.056324][ T4184] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 246.169834][ T7] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.221400][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.364016][ T4184] usb 4-1: Using ep0 maxpacket: 8 [ 246.836716][ T7] usb 1-1: config 0 descriptor?? [ 246.886391][ T4184] usb 4-1: unable to get BOS descriptor or descriptor too short [ 246.997264][ T7] cp210x 1-1:0.0: cp210x converter detected [ 247.016411][ T4184] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 247.024289][ T4184] usb 4-1: can't read configurations, error -71 [ 247.436467][ T7] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 247.694386][ T23] Bluetooth: hci3: command 0x0406 tx timeout [ 247.754878][ T7] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 247.901780][ T7] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 247.910299][ T7] usb 1-1: cp210x converter now attached to ttyUSB0 [ 247.931431][ T7] usb 1-1: USB disconnect, device number 11 [ 249.099225][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.319000][ T7] cp210x 1-1:0.0: device disconnected [ 249.746341][ T4230] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 250.086251][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 250.337028][ T4230] usb 4-1: config 109 has an invalid interface number: 123 but max is 0 [ 250.352922][ T4230] usb 4-1: config 109 has no interface number 0 [ 250.369770][ T4230] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 250.384224][ T4230] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 250.399829][ T4230] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 250.414541][ T4230] usb 4-1: config 109 interface 123 has no altsetting 0 [ 250.786356][ T4230] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 250.786391][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.786413][ T4230] usb 4-1: Product: 絏ଇᗒ [ 250.786426][ T4230] usb 4-1: SerialNumber: 次낔銗⮬◙ロⳤᖎ쿭礴﨎⫅ѡ쎤똼ᬆ捭婹啘Ꭸቶꭢ飶搢遄禕὿鍢옹칷␰톲쒘쉖눿筶먴䦦쐷ೢᎌ烲᪇閐凎黡돀运⧬ꍼ趎㚳౥鲵핲쐚㝵ỳ튓蚶ꙙ똠稓뜤磈띬蘿耀歸ﯘ傫鉕㳜펶怅ဒ뻍繈眘駱着鲈 [ 250.807946][ T6925] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 250.956289][ T1324] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 250.967386][ T4230] option 4-1:109.123: GSM modem (1-port) converter detected [ 251.037459][ T4230] usb 4-1: USB disconnect, device number 17 [ 251.045260][ T4230] option 4-1:109.123: device disconnected [ 251.326449][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.346442][ T1324] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 251.356127][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.424344][ T1324] usb 3-1: config 0 descriptor?? [ 251.664011][ T1324] pwc: Askey VC010 type 2 USB webcam detected. [ 252.049154][ T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 252.106515][ T1324] pwc: recv_control_msg error -32 req 02 val 2b00 [ 252.146509][ T1324] pwc: recv_control_msg error -32 req 02 val 2700 [ 252.196490][ T1324] pwc: recv_control_msg error -32 req 02 val 2c00 [ 252.251628][ T1324] pwc: recv_control_msg error -32 req 04 val 1000 [ 252.416410][ T1324] pwc: recv_control_msg error -32 req 04 val 1300 [ 252.446429][ T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 252.472277][ T1324] pwc: recv_control_msg error -32 req 04 val 1400 [ 252.476213][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.523568][ T23] usb 2-1: config 0 descriptor?? [ 252.526355][ T1324] pwc: recv_control_msg error -32 req 02 val 2000 [ 252.577552][ T23] cp210x 2-1:0.0: cp210x converter detected [ 252.821176][ T1324] pwc: recv_control_msg error -32 req 04 val 1500 [ 252.866394][ T1324] pwc: recv_control_msg error -32 req 02 val 2500 [ 252.916369][ T1324] pwc: recv_control_msg error -32 req 02 val 2400 [ 252.956348][ T1324] pwc: recv_control_msg error -32 req 02 val 2600 [ 253.016439][ T23] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: 0 [ 253.216350][ T1324] pwc: recv_control_msg error -71 req 02 val 2800 [ 253.239198][ T1324] pwc: recv_control_msg error -71 req 04 val 1100 [ 253.246333][ T23] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 253.254375][ T23] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 253.264692][ T23] usb 2-1: cp210x converter now attached to ttyUSB0 [ 253.268179][ T1324] pwc: recv_control_msg error -71 req 04 val 1200 [ 253.274556][ T23] usb 2-1: USB disconnect, device number 19 [ 253.293985][ T1324] pwc: Registered as video103. [ 253.297719][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 253.310016][ T1324] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 253.321328][ T23] cp210x 2-1:0.0: device disconnected [ 253.336682][ T1324] usb 3-1: USB disconnect, device number 17 [ 253.406415][ T7] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 253.596443][ T7] usb 1-1: device descriptor read/64, error -71 [ 253.846424][ T4474] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 253.876353][ T7] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 254.045660][ T7006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.866'. [ 254.046230][ T23] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 254.086486][ T4474] usb 4-1: Using ep0 maxpacket: 32 [ 254.106531][ T7] usb 1-1: device descriptor read/64, error -71 [ 254.251115][ T7] usb usb1-port1: attempt power cycle [ 254.346306][ T4474] usb 4-1: config 109 has an invalid interface number: 123 but max is 0 [ 254.354857][ T4474] usb 4-1: config 109 has no interface number 0 [ 254.373243][ T4474] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 254.486591][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 254.497865][ T4474] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 254.559728][ T4474] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 254.623831][ T4474] usb 4-1: config 109 interface 123 has no altsetting 0 [ 255.446363][ T7] usb 1-1: new low-speed USB device number 14 using dummy_hcd [ 255.536407][ T7] usb 1-1: device descriptor read/8, error -71 [ 255.586355][ T4361] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 255.606862][ T4474] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 255.616089][ T4474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 255.626321][ T4474] usb 4-1: Product: 絏ଇᗒ [ 255.631025][ T4474] usb 4-1: SerialNumber: 次낔銗⮬◙ロⳤᖎ쿭礴﨎⫅ѡ쎤똼ᬆ捭婹啘Ꭸቶꭢ飶搢遄禕὿鍢옹칷␰톲쒘쉖눿筶먴䦦쐷ೢᎌ烲᪇閐凎黡돀运⧬ꍼ趎㚳౥鲵핲쐚㝵ỳ튓蚶ꙙ똠稓뜤磈띬蘿耀歸ﯘ傫鉕㳜펶怅ဒ뻍繈眘駱着鲈 [ 255.686694][ T6997] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 255.766433][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 255.768857][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.780968][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.806280][ T7] usb 1-1: new low-speed USB device number 15 using dummy_hcd [ 255.846382][ T23] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 255.854148][ T23] usb 3-1: can't read configurations, error -71 [ 255.899406][ T7] usb 1-1: device descriptor read/8, error -71 [ 256.016543][ T4361] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 256.033645][ T4361] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 256.044886][ T4361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.073293][ T4361] usb 2-1: config 0 descriptor?? [ 256.118609][ T7] usb usb1-port1: unable to enumerate USB device [ 256.126628][ T7021] overlayfs: failed to clone upperpath [ 256.132434][ T4361] pwc: Askey VC010 type 2 USB webcam detected. [ 256.182286][ T4474] option 4-1:109.123: GSM modem (1-port) converter detected [ 256.241334][ T4474] usb 4-1: USB disconnect, device number 18 [ 256.280669][ T4474] option 4-1:109.123: device disconnected [ 256.646297][ T4361] pwc: recv_control_msg error -32 req 02 val 2b00 [ 256.716318][ T4361] pwc: recv_control_msg error -32 req 02 val 2700 [ 256.786290][ T4361] pwc: recv_control_msg error -32 req 02 val 2c00 [ 256.807940][ T7] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 256.836301][ T4361] pwc: recv_control_msg error -32 req 04 val 1000 [ 256.876302][ T4361] pwc: recv_control_msg error -32 req 04 val 1300 [ 257.061476][ T7032] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 257.126762][ T4361] pwc: recv_control_msg error -32 req 02 val 2000 [ 257.312244][ T4361] pwc: recv_control_msg error -32 req 02 val 2100 [ 257.357744][ T7] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 257.387947][ T7039] xt_CONNSECMARK: invalid mode: 0 [ 257.676353][ T4361] pwc: recv_control_msg error -32 req 04 val 1500 [ 257.720507][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.742732][ T7] usb 1-1: config 0 descriptor?? [ 257.776522][ T4361] pwc: recv_control_msg error -32 req 02 val 2500 [ 257.787988][ T7] cp210x 1-1:0.0: cp210x converter detected [ 257.846520][ T4361] pwc: recv_control_msg error -32 req 02 val 2400 [ 257.906768][ T4361] pwc: recv_control_msg error -32 req 02 val 2600 [ 258.176694][ T4361] pwc: recv_control_msg error -71 req 02 val 2800 [ 258.196583][ T4361] pwc: recv_control_msg error -71 req 04 val 1100 [ 258.196668][ T4230] usb 4-1: new full-speed USB device number 19 using dummy_hcd [ 258.216834][ T4361] pwc: recv_control_msg error -71 req 04 val 1200 [ 258.231590][ T4361] pwc: Registered as video103. [ 258.246830][ T7] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: 0 [ 258.267679][ T4361] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 258.430790][ T4361] usb 2-1: USB disconnect, device number 20 [ 258.466484][ T7] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 258.493383][ T7] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 258.567566][ T7] usb 1-1: cp210x converter now attached to ttyUSB0 [ 258.631139][ T7] usb 1-1: USB disconnect, device number 16 [ 258.710172][ T7047] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 258.844364][ T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 258.852412][ T4230] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 259.166573][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.622735][ T7] cp210x 1-1:0.0: device disconnected [ 259.645411][ T4230] usb 4-1: Product: syz [ 259.659295][ T4230] usb 4-1: Manufacturer: syz [ 259.665205][ T4230] usb 4-1: SerialNumber: syz [ 259.782640][ T4230] usb 4-1: config 0 descriptor?? [ 259.996755][ T4361] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 260.069772][ T4230] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 260.206401][ T7] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 260.294623][ T4361] usb 3-1: device descriptor read/64, error -71 [ 260.446321][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 260.566475][ T4361] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 260.606597][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 260.766654][ T7] usb 1-1: config 8 has an invalid interface number: 46 but max is 0 [ 260.780099][ T7] usb 1-1: config 8 has no interface number 0 [ 260.787035][ T7] usb 1-1: config 8 interface 46 has no altsetting 0 [ 260.826309][ T4361] usb 3-1: device descriptor read/64, error -71 [ 260.946336][ T7] usb 1-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 260.956918][ T4361] usb usb3-port1: attempt power cycle [ 260.962426][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 260.971298][ T7] usb 1-1: Product: syz [ 260.975780][ T7] usb 1-1: Manufacturer: syz [ 260.985058][ T7] usb 1-1: SerialNumber: syz [ 261.406257][ T4361] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 261.526777][ T4361] usb 3-1: device descriptor read/8, error -71 [ 261.746386][ T7] kaweth 1-1:8.46: Firmware present in device. [ 261.811999][ T4361] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 261.921083][ T4361] usb 3-1: device descriptor read/8, error -71 [ 262.056423][ T4361] usb usb3-port1: unable to enumerate USB device [ 262.086442][ T4230] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 262.147115][ T4230] usb 4-1: USB disconnect, device number 19 [ 262.348249][ T7] kaweth 1-1:8.46: Statistics collection: 0 [ 262.354215][ T7] kaweth 1-1:8.46: Multicast filter limit: 0 [ 262.361255][ T7] kaweth 1-1:8.46: MTU: 0 [ 262.365620][ T7] kaweth 1-1:8.46: Read MAC address 00:00:00:00:00:00 [ 262.582216][ T23] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 262.705724][ T7] kaweth: probe of 1-1:8.46 failed with error -5 [ 262.716834][ T7] usb 1-1: USB disconnect, device number 17 [ 262.723817][ T7090] overlayfs: failed to clone upperpath [ 263.206522][ T23] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 263.245705][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.264793][ T23] usb 3-1: config 0 descriptor?? [ 263.536344][ T7] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 263.856402][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 264.257260][ T7] usb 1-1: config 109 has an invalid interface number: 123 but max is 0 [ 264.321490][ T7] usb 1-1: config 109 has no interface number 0 [ 264.459088][ T7] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 264.609986][ T23] cp210x 3-1:0.0: cp210x converter detected [ 264.745575][ T7] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 264.827371][ T7] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 264.886938][ T7] usb 1-1: config 109 interface 123 has no altsetting 0 [ 265.036624][ T23] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: 0 [ 265.090681][ T7] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 265.151700][ T23] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 265.154034][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.160530][ T23] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 265.177032][ T23] usb 3-1: cp210x converter now attached to ttyUSB0 [ 265.188210][ T23] usb 3-1: USB disconnect, device number 24 [ 265.198108][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 265.207532][ T23] cp210x 3-1:0.0: device disconnected [ 265.279115][ T7] usb 1-1: Product: syz [ 265.283795][ T7] usb 1-1: Manufacturer: syz [ 265.288649][ T7] usb 1-1: SerialNumber: syz [ 265.336684][ T7102] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 265.766767][ T23] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 265.837650][ T7] option 1-1:109.123: GSM modem (1-port) converter detected [ 265.869919][ T7] usb 1-1: USB disconnect, device number 18 [ 265.894430][ T7] option 1-1:109.123: device disconnected [ 266.026341][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 266.240477][ T23] usb 3-1: config 109 has an invalid interface number: 123 but max is 2 [ 266.249482][ T23] usb 3-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 266.266373][ T23] usb 3-1: config 109 has an invalid interface number: 251 but max is 2 [ 266.280313][ T23] usb 3-1: config 109 has an invalid interface number: 4 but max is 2 [ 266.290210][ T23] usb 3-1: config 109 has an invalid interface number: 205 but max is 2 [ 266.299063][ T23] usb 3-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 266.309614][ T23] usb 3-1: config 109 has 4 interfaces, different from the descriptor's value: 3 [ 266.319561][ T23] usb 3-1: config 109 has no interface number 0 [ 266.325920][ T23] usb 3-1: config 109 has no interface number 1 [ 266.333265][ T23] usb 3-1: config 109 has no interface number 2 [ 266.339781][ T23] usb 3-1: config 109 has no interface number 3 [ 266.346093][ T23] usb 3-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 266.358292][ T23] usb 3-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 266.380669][ T23] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 266.412940][ T23] usb 3-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 266.424991][ T23] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 266.440400][ T23] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 266.451444][ T23] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 266.466543][ T23] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 266.481718][ T23] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 266.494742][ T23] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 266.683393][ T23] usb 3-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 266.715240][ T23] usb 3-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 266.730770][ T23] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 266.746323][ T23] usb 3-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 266.770157][ T23] usb 3-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 266.793276][ T23] usb 3-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 266.809405][ T23] usb 3-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 266.826337][ T23] usb 3-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 266.841794][ T23] usb 3-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 266.854282][ T23] usb 3-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 266.886451][ T23] usb 3-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 266.902626][ T23] usb 3-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0x1, skipping [ 266.919309][ T23] usb 3-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 266.932774][ T23] usb 3-1: config 109 interface 205 altsetting 55 has 9 endpoint descriptors, different from the interface descriptor's value: 67 [ 266.947139][ T23] usb 3-1: config 109 interface 123 has no altsetting 0 [ 266.954306][ T23] usb 3-1: config 109 interface 251 has no altsetting 0 [ 266.964679][ T23] usb 3-1: config 109 interface 4 has no altsetting 0 [ 267.003662][ T23] usb 3-1: config 109 interface 205 has no altsetting 0 [ 267.226413][ T7] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 267.446388][ T23] usb 3-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 267.915802][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.926434][ T23] usb 3-1: Product: 絏ଇᗒ [ 267.931526][ T23] usb 3-1: SerialNumber: 次낔銗⮬◙ロⳤᖎ쿭礴﨎⫅ѡ쎤똼ᬆ捭婹啘Ꭸቶꭢ飶搢遄禕὿鍢옹칷␰톲쒘쉖눿筶먴䦦쐷ೢᎌ烲᪇閐凎黡돀运⧬ꍼ趎㚳౥鲵핲쐚㝵ỳ튓蚶ꙙ똠稓뜤磈띬蘿耀歸ﯘ傫鉕㳜펶怅ဒ뻍繈眘駱着鲈 [ 267.976994][ T7117] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 268.086390][ T4361] Bluetooth: hci1: command 0x0406 tx timeout [ 268.176318][ T7] usb 2-1: Using ep0 maxpacket: 8 [ 268.268592][ T23] option 3-1:109.123: GSM modem (1-port) converter detected [ 268.288637][ T23] usb 3-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 268.358105][ T23] option 3-1:109.251: GSM modem (1-port) converter detected [ 268.422646][ T23] option 3-1:109.4: GSM modem (1-port) converter detected [ 268.476323][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 268.497800][ T23] option 3-1:109.205: GSM modem (1-port) converter detected [ 268.553877][ T23] usb 3-1: USB disconnect, device number 25 [ 268.566342][ T7] usb 2-1: config 8 has an invalid interface number: 46 but max is 0 [ 268.596488][ T23] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 268.607722][ T7] usb 2-1: config 8 has no interface number 0 [ 268.610403][ T23] option 3-1:109.123: device disconnected [ 268.613846][ T7] usb 2-1: config 8 interface 46 has no altsetting 0 [ 268.644938][ T23] option 3-1:109.251: device disconnected [ 268.657482][ T23] option 3-1:109.4: device disconnected [ 268.672018][ T23] option 3-1:109.205: device disconnected [ 268.816539][ T7] usb 2-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 268.851770][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.694133][ T7] usb 2-1: Product: syz [ 269.698667][ T7] usb 2-1: Manufacturer: syz [ 269.703290][ T7] usb 2-1: SerialNumber: syz [ 269.976300][ T4361] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 270.098719][ T7] kaweth 2-1:8.46: Firmware present in device. [ 270.132604][ T7] kaweth 2-1:8.46: Error reading configuration (-71), no net device created [ 270.149580][ T7] kaweth: probe of 2-1:8.46 failed with error -5 [ 270.226271][ T4184] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 270.250245][ T7] usb 2-1: USB disconnect, device number 21 [ 270.597439][ T4184] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.250012][ T7183] sched: RT throttling activated [ 271.274184][ T4184] usb 3-1: config 0 has no interfaces? [ 271.290002][ T4184] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 271.461498][ T4361] usb 4-1: Using ep0 maxpacket: 32 [ 271.507810][ T4184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.596308][ T4361] usb 4-1: config 109 has an invalid interface number: 123 but max is 0 [ 273.324919][ T4361] usb 4-1: config 109 has no interface number 0 [ 273.325809][ T4184] usb 3-1: config 0 descriptor?? [ 273.331431][ T4361] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 273.348332][ T4361] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 273.358942][ T4361] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 273.370138][ T4361] usb 4-1: config 109 interface 123 has no altsetting 0 [ 273.416324][ T4361] usb 4-1: string descriptor 0 read error: -71 [ 273.423317][ T4361] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 273.433433][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.446710][ T4184] usb 3-1: can't set config #0, error -71 [ 273.456346][ T4361] usb 4-1: can't set config #109, error -71 [ 273.483072][ T4361] usb 4-1: USB disconnect, device number 20 [ 273.499479][ T4184] usb 3-1: USB disconnect, device number 26 [ 273.958981][ T4361] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 274.596264][ T4361] usb 4-1: Using ep0 maxpacket: 32 [ 274.826416][ T4361] usb 4-1: config 109 has an invalid interface number: 123 but max is 2 [ 274.846310][ T4361] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 274.886548][ T4361] usb 4-1: config 109 has an invalid interface number: 251 but max is 2 [ 274.895123][ T4361] usb 4-1: config 109 has an invalid interface number: 4 but max is 2 [ 274.905568][ T4361] usb 4-1: config 109 has an invalid interface number: 205 but max is 2 [ 274.914406][ T4361] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 274.924590][ T4361] usb 4-1: config 109 has 4 interfaces, different from the descriptor's value: 3 [ 274.944993][ T4361] usb 4-1: config 109 has no interface number 0 [ 274.951660][ T4361] usb 4-1: config 109 has no interface number 1 [ 274.958118][ T4361] usb 4-1: config 109 has no interface number 2 [ 274.966038][ T4361] usb 4-1: config 109 has no interface number 3 [ 274.972552][ T4361] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 274.984706][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 275.020939][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 275.046863][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 275.086766][ T4184] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 275.093034][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 275.111517][ T7223] autofs4:pid:7223:autofs_fill_super: called with bogus options [ 275.136839][ T4361] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 275.173919][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 275.215940][ T4361] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 275.242238][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 275.279611][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 275.325198][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 275.362556][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 275.408771][ T4361] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 275.442545][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 275.480049][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 275.572240][ T4361] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 275.673187][ T4361] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 275.731994][ T4361] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 275.783669][ T4361] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 275.841023][ T4361] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 275.883122][ T4361] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 275.975739][ T4361] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0x1, skipping [ 276.120098][ T4361] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 276.136302][ T4361] usb 4-1: config 109 interface 205 altsetting 55 has 9 endpoint descriptors, different from the interface descriptor's value: 67 [ 276.150457][ T4361] usb 4-1: config 109 interface 123 has no altsetting 0 [ 276.158817][ T4361] usb 4-1: config 109 interface 251 has no altsetting 0 [ 276.166379][ T4361] usb 4-1: config 109 interface 4 has no altsetting 0 [ 276.173174][ T4361] usb 4-1: config 109 interface 205 has no altsetting 0 [ 276.217948][ T7233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.936'. [ 276.298937][ T4184] usb 3-1: Using ep0 maxpacket: 8 [ 276.475426][ T7236] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 276.486002][ T4184] usb 3-1: unable to get BOS descriptor or descriptor too short [ 276.586307][ T4361] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 276.638447][ T4184] usb 3-1: config 8 has an invalid interface number: 46 but max is 0 [ 276.648102][ T4184] usb 3-1: config 8 has no interface number 0 [ 276.654416][ T4184] usb 3-1: config 8 interface 46 has no altsetting 0 [ 276.697771][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.576535][ T4184] usb 3-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 277.658936][ T4361] usb 4-1: Product: 絏ଇᗒ [ 277.729957][ T4184] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.180513][ T4184] usb 3-1: Product: syz [ 278.184829][ T4184] usb 3-1: Manufacturer: syz [ 278.279165][ T4361] usb 4-1: can't set config #109, error -71 [ 278.280507][ T4184] usb 3-1: SerialNumber: syz [ 278.290699][ T4361] usb 4-1: USB disconnect, device number 21 [ 278.481820][ T4184] usb 3-1: can't set config #8, error -71 [ 278.563608][ T4184] usb 3-1: USB disconnect, device number 27 [ 280.113755][ T7278] autofs4:pid:7278:autofs_fill_super: called with bogus options [ 282.516313][ T4231] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 283.496263][ T4231] usb 3-1: Using ep0 maxpacket: 8 [ 284.298810][ T4184] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 284.346605][ T4231] usb 3-1: unable to get BOS descriptor or descriptor too short [ 284.426440][ T4231] usb 3-1: config 8 has an invalid interface number: 46 but max is 0 [ 284.434532][ T4231] usb 3-1: config 8 has no interface number 0 [ 284.520909][ T7311] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 284.605064][ T4231] usb 3-1: config 8 interface 46 has no altsetting 0 [ 284.686511][ T4184] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 284.766339][ T4231] usb 3-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 284.846349][ T4184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.985433][ T4231] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.209657][ T4184] usb 1-1: config 0 descriptor?? [ 285.304636][ T4231] usb 3-1: Product: syz [ 285.336312][ T4231] usb 3-1: Manufacturer: syz [ 285.361596][ T4231] usb 3-1: SerialNumber: syz [ 285.377825][ T4184] cp210x 1-1:0.0: cp210x converter detected [ 285.516712][ T4231] usb 3-1: can't set config #8, error -71 [ 285.572149][ T4231] usb 3-1: USB disconnect, device number 28 [ 286.036382][ T4184] cp210x 1-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 286.063113][ T4184] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 286.161395][ T4184] usb 1-1: cp210x converter now attached to ttyUSB0 [ 286.295711][ T4184] usb 1-1: USB disconnect, device number 19 [ 286.460002][ T4184] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 286.671838][ T4184] cp210x 1-1:0.0: device disconnected [ 286.933923][ T7348] autofs4:pid:7348:autofs_fill_super: called with bogus options [ 287.892417][ T7351] netlink: 4 bytes leftover after parsing attributes in process `syz.1.974'. [ 288.249989][ T21] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 288.398432][ T7363] SET target dimension over the limit! [ 288.496337][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 288.506337][ T23] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 288.616391][ T21] usb 1-1: config 109 has an invalid interface number: 123 but max is 0 [ 288.631782][ T21] usb 1-1: config 109 has no interface number 0 [ 288.656065][ T21] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 288.683321][ T21] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 288.712187][ T21] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 288.746728][ T21] usb 1-1: config 109 interface 123 has no altsetting 0 [ 288.806323][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 288.986325][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 288.994109][ T21] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 289.206350][ T4361] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 289.814238][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.827762][ T21] usb 1-1: Product: syz [ 289.833224][ T21] usb 1-1: Manufacturer: syz [ 289.838204][ T21] usb 1-1: SerialNumber: syz [ 289.866666][ T7352] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 289.896328][ T23] usb 4-1: config 8 has an invalid interface number: 46 but max is 0 [ 289.916303][ T23] usb 4-1: config 8 has no interface number 0 [ 289.926577][ T23] usb 4-1: config 8 interface 46 has no altsetting 0 [ 290.041515][ T7371] overlayfs: failed to resolve './bus': -2 [ 290.217681][ T4361] usb 2-1: Using ep0 maxpacket: 32 [ 290.266449][ T23] usb 4-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 290.282789][ T23] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.301228][ T23] usb 4-1: Product: syz [ 290.305451][ T23] usb 4-1: Manufacturer: syz [ 290.327860][ T21] option 1-1:109.123: GSM modem (1-port) converter detected [ 290.338741][ T23] usb 4-1: SerialNumber: syz [ 290.356295][ T4361] usb 2-1: config 109 has an invalid interface number: 123 but max is 3 [ 290.368442][ T21] usb 1-1: USB disconnect, device number 20 [ 290.376671][ T4361] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 290.388119][ T21] option 1-1:109.123: device disconnected [ 290.393990][ T4361] usb 2-1: config 109 has an invalid interface number: 251 but max is 3 [ 290.406366][ T4361] usb 2-1: config 109 has an invalid interface number: 4 but max is 3 [ 290.415666][ T4361] usb 2-1: config 109 has an invalid interface number: 205 but max is 3 [ 290.424298][ T4361] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 290.433396][ T4361] usb 2-1: config 109 has an invalid interface number: 27 but max is 3 [ 290.442362][ T4361] usb 2-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 290.451772][ T4361] usb 2-1: config 109 has no interface number 0 [ 290.458284][ T4361] usb 2-1: config 109 has no interface number 1 [ 290.464564][ T4361] usb 2-1: config 109 has no interface number 2 [ 290.470964][ T4361] usb 2-1: config 109 has no interface number 3 [ 290.478400][ T4361] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 290.489981][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 290.501633][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 290.513856][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 290.524741][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 290.536285][ T4361] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 290.566300][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 290.577662][ T4361] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 290.588488][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 290.599576][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 290.613113][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 290.624247][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 290.637530][ T4361] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 290.648876][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 290.659847][ T4361] usb 2-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 290.673493][ T4361] usb 2-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 290.687400][ T4361] usb 2-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 290.698651][ T4361] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 290.710791][ T4361] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 290.721870][ T4361] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 290.733298][ T4361] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 290.744334][ T4361] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0x1, skipping [ 290.755840][ T4361] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 290.767159][ T4361] usb 2-1: config 109 interface 205 altsetting 55 has 9 endpoint descriptors, different from the interface descriptor's value: 67 [ 290.781222][ T4361] usb 2-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 290.792386][ T4361] usb 2-1: config 109 interface 123 has no altsetting 0 [ 290.799914][ T4361] usb 2-1: config 109 interface 251 has no altsetting 0 [ 290.807026][ T4361] usb 2-1: config 109 interface 4 has no altsetting 0 [ 290.813855][ T4361] usb 2-1: config 109 interface 205 has no altsetting 0 [ 290.820921][ T4361] usb 2-1: config 109 interface 27 has no altsetting 0 [ 291.246336][ T4361] usb 2-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 291.255442][ T4361] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.264326][ T4361] usb 2-1: Product: 絏ଇᗒ [ 291.269134][ T4361] usb 2-1: SerialNumber: 次낔銗⮬◙ロⳤᖎ쿭礴﨎⫅ѡ쎤똼ᬆ捭婹啘Ꭸቶꭢ飶搢遄禕὿鍢옹칷␰톲쒘쉖눿筶먴䦦쐷ೢᎌ烲᪇閐凎黡돀运⧬ꍼ趎㚳౥鲵핲쐚㝵ỳ튓蚶ꙙ똠稓뜤磈띬蘿耀歸ﯘ傫鉕㳜펶怅ဒ뻍繈眘駱着鲈 [ 291.337090][ T7365] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 291.536361][ T23] kaweth 4-1:8.46: Firmware present in device. [ 291.636528][ T21] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 291.736587][ T23] kaweth 4-1:8.46: Error reading configuration (-71), no net device created [ 291.746422][ T23] kaweth: probe of 4-1:8.46 failed with error -5 [ 291.841898][ T23] usb 4-1: USB disconnect, device number 22 [ 291.881918][ T4361] option 2-1:109.123: GSM modem (1-port) converter detected [ 292.076816][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.104718][ T4361] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 292.199327][ T21] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 292.512235][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.528584][ T21] usb 1-1: config 0 descriptor?? [ 292.542904][ T7396] udc-core: couldn't find an available UDC or it's busy [ 292.559362][ T4361] option 2-1:109.251: GSM modem (1-port) converter detected [ 292.570492][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 292.570874][ T7396] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.827289][ T7365] udc-core: couldn't find an available UDC or it's busy [ 292.941962][ T7365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 292.965927][ T7365] udc-core: couldn't find an available UDC or it's busy [ 292.983468][ T7365] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 293.357504][ T4361] option 2-1:109.4: GSM modem (1-port) converter detected [ 293.887669][ T4361] option 2-1:109.205: GSM modem (1-port) converter detected [ 293.896425][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 293.954957][ T4361] option 2-1:109.27: GSM modem (1-port) converter detected [ 293.962402][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 294.078571][ T7418] overlayfs: failed to resolve './bus': -2 [ 294.090521][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 294.164750][ T4361] usb 2-1: USB disconnect, device number 22 [ 294.226610][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 294.306574][ T4361] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 294.336643][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 294.356843][ T7422] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 294.406336][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 294.444966][ T4361] option 2-1:109.123: device disconnected [ 294.469307][ T7426] autofs4:pid:7426:autofs_fill_super: called with bogus options [ 294.509663][ T4361] option 2-1:109.251: device disconnected [ 294.526330][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 294.534423][ T4361] option 2-1:109.4: device disconnected [ 294.558812][ T4361] option 2-1:109.205: device disconnected [ 294.575817][ T4361] option 2-1:109.27: device disconnected [ 294.596352][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 294.696509][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 294.756396][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 294.816866][ T21] pwc: recv_control_msg error -32 req 02 val 2400 [ 294.876550][ T21] pwc: recv_control_msg error -32 req 02 val 2600 [ 294.926291][ T21] pwc: recv_control_msg error -32 req 02 val 2900 [ 295.136240][ T1324] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 295.196316][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 295.236542][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 295.247881][ T21] pwc: Registered as video103. [ 295.276971][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 295.441723][ T21] usb 1-1: USB disconnect, device number 21 [ 295.536416][ T1324] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 295.701800][ T1324] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 295.755609][ T1324] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.817455][ T1324] usb 3-1: config 0 descriptor?? [ 295.872212][ T1324] pwc: Askey VC010 type 2 USB webcam detected. [ 296.306267][ T1324] pwc: recv_control_msg error -32 req 02 val 2b00 [ 297.656313][ T1324] pwc: recv_control_msg error -32 req 02 val 2700 [ 297.706308][ T1324] pwc: recv_control_msg error -32 req 02 val 2c00 [ 297.796364][ T1324] pwc: recv_control_msg error -71 req 04 val 1000 [ 297.826320][ T1324] pwc: recv_control_msg error -71 req 04 val 1300 [ 297.853347][ T1324] pwc: recv_control_msg error -71 req 04 val 1400 [ 298.052334][ T7457] overlayfs: failed to clone upperpath [ 299.094894][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 299.335500][ T1324] pwc: recv_control_msg error -71 req 02 val 2000 [ 299.357494][ T1324] pwc: recv_control_msg error -71 req 02 val 2100 [ 299.386284][ T1324] pwc: recv_control_msg error -71 req 04 val 1500 [ 299.413772][ T1324] pwc: recv_control_msg error -71 req 02 val 2500 [ 299.477662][ T1324] pwc: recv_control_msg error -71 req 02 val 2400 [ 299.520354][ T1324] pwc: recv_control_msg error -71 req 02 val 2600 [ 299.624669][ T7475] autofs4:pid:7475:autofs_fill_super: called with bogus options [ 299.666219][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 300.526335][ T1324] pwc: recv_control_msg error -71 req 02 val 2900 [ 300.596437][ T23] usb 2-1: config 109 has an invalid interface number: 123 but max is 3 [ 300.605563][ T23] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 301.426307][ T1324] pwc: recv_control_msg error -71 req 02 val 2800 [ 301.444923][ T23] usb 2-1: config 109 has an invalid interface number: 251 but max is 3 [ 301.447063][ T1324] pwc: recv_control_msg error -71 req 04 val 1100 [ 301.486423][ T1324] pwc: recv_control_msg error -71 req 04 val 1200 [ 301.503140][ T1324] pwc: Registered as video103. [ 301.511685][ T23] usb 2-1: config 109 has an invalid interface number: 4 but max is 3 [ 301.526093][ T23] usb 2-1: config 109 has an invalid interface number: 205 but max is 3 [ 301.535399][ T23] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 301.553365][ T23] usb 2-1: config 109 has an invalid interface number: 27 but max is 3 [ 301.554404][ T1324] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 301.562002][ T23] usb 2-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 301.562031][ T23] usb 2-1: config 109 has no interface number 0 [ 301.562048][ T23] usb 2-1: config 109 has no interface number 1 [ 301.562064][ T23] usb 2-1: config 109 has no interface number 2 [ 301.562131][ T23] usb 2-1: config 109 has no interface number 3 [ 301.572328][ T4269] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 301.587007][ T23] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 301.801025][ T1324] usb 3-1: USB disconnect, device number 29 [ 301.866054][ T7493] loop2: detected capacity change from 0 to 2048 [ 302.018796][ T23] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 302.030128][ T23] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 302.041415][ T23] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 302.053101][ T23] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 302.106388][ T23] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 302.127614][ T23] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 302.714315][ T4269] usb 4-1: Using ep0 maxpacket: 8 [ 302.721889][ T23] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 302.734550][ T23] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 302.758407][ T23] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 302.776342][ T4269] usb 4-1: device descriptor read/all, error -71 [ 302.796734][ T7493] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 302.819160][ T23] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 302.830273][ T23] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 302.842391][ T23] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 302.852924][ T23] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 302.940772][ T23] usb 2-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 302.954471][ T23] usb 2-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 302.968131][ T23] usb 2-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 302.979691][ T23] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 302.991152][ T23] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 303.010976][ T23] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 303.062898][ T23] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 303.105359][ T23] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0x1, skipping [ 303.289806][ T23] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 303.301934][ T23] usb 2-1: config 109 interface 205 altsetting 55 has 9 endpoint descriptors, different from the interface descriptor's value: 67 [ 303.316260][ T23] usb 2-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 303.328313][ T23] usb 2-1: config 109 interface 123 has no altsetting 0 [ 303.436286][ T23] usb 2-1: config 109 interface 251 has no altsetting 0 [ 303.516350][ T23] usb 2-1: config 109 interface 4 has no altsetting 0 [ 303.730440][ T23] usb 2-1: config 109 interface 205 has no altsetting 0 [ 303.737731][ T23] usb 2-1: config 109 interface 27 has no altsetting 0 [ 303.848068][ T23] usb 2-1: string descriptor 0 read error: -71 [ 303.854447][ T23] usb 2-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 304.015758][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.177430][ T23] usb 2-1: can't set config #109, error -71 [ 304.192454][ T23] usb 2-1: USB disconnect, device number 23 [ 306.926333][ T4361] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 307.896304][ T4361] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 307.906600][ T21] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 308.631719][ T4361] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 308.646939][ T4361] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.659315][ T4361] usb 4-1: config 0 descriptor?? [ 308.698403][ T4361] pwc: Askey VC010 type 2 USB webcam detected. [ 308.826407][ T21] usb 1-1: Using ep0 maxpacket: 32 [ 308.868550][ T7545] autofs4:pid:7545:autofs_fill_super: called with bogus options [ 308.946376][ T21] usb 1-1: config 109 has an invalid interface number: 123 but max is 3 [ 308.960861][ T21] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 308.994329][ T21] usb 1-1: config 109 has an invalid interface number: 251 but max is 3 [ 309.028162][ T21] usb 1-1: config 109 has an invalid interface number: 4 but max is 3 [ 309.057907][ T21] usb 1-1: config 109 has an invalid interface number: 205 but max is 3 [ 309.089660][ T21] usb 1-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 309.122058][ T21] usb 1-1: config 109 has an invalid interface number: 27 but max is 3 [ 309.146748][ T4361] pwc: recv_control_msg error -32 req 02 val 2b00 [ 309.162584][ T21] usb 1-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 309.186422][ T4361] pwc: recv_control_msg error -32 req 02 val 2700 [ 309.210195][ T21] usb 1-1: config 109 has no interface number 0 [ 309.233494][ T21] usb 1-1: config 109 has no interface number 1 [ 309.240768][ T4361] pwc: recv_control_msg error -32 req 02 val 2c00 [ 309.263751][ T21] usb 1-1: config 109 has no interface number 2 [ 309.286305][ T4361] pwc: recv_control_msg error -32 req 04 val 1000 [ 309.300337][ T21] usb 1-1: config 109 has no interface number 3 [ 309.324258][ T21] usb 1-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 309.336087][ T4361] pwc: recv_control_msg error -32 req 04 val 1300 [ 309.396578][ T4361] pwc: recv_control_msg error -32 req 04 val 1400 [ 309.424629][ T21] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 309.446815][ T4361] pwc: recv_control_msg error -32 req 02 val 2000 [ 309.519277][ T21] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 309.613895][ T21] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 309.716491][ T4361] pwc: recv_control_msg error -32 req 04 val 1500 [ 309.776929][ T21] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 309.808979][ T4361] pwc: recv_control_msg error -32 req 02 val 2500 [ 309.845677][ T21] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 309.863060][ T4361] pwc: recv_control_msg error -32 req 02 val 2400 [ 309.936469][ T4361] pwc: recv_control_msg error -32 req 02 val 2600 [ 309.965457][ T7556] autofs4:pid:7556:autofs_fill_super: called with bogus options [ 310.024690][ T21] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 310.116254][ T4231] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 310.251932][ T21] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 310.276564][ T4361] pwc: recv_control_msg error -71 req 02 val 2800 [ 310.310447][ T4361] pwc: recv_control_msg error -71 req 04 val 1100 [ 310.329233][ T21] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 310.346355][ T4361] pwc: recv_control_msg error -71 req 04 val 1200 [ 310.404501][ T4361] pwc: Registered as video103. [ 310.429898][ T21] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 310.482449][ T4361] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input35 [ 310.517820][ T21] usb 1-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 310.594228][ T4361] usb 4-1: USB disconnect, device number 25 [ 310.619025][ T21] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 310.839944][ T21] usb 1-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 310.927992][ T21] usb 1-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 310.943816][ T21] usb 1-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 311.128438][ T21] usb 1-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 311.151506][ T21] usb 1-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 311.171920][ T21] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 312.349965][ T21] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 312.572253][ T21] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 312.605251][ T21] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 312.620783][ T21] usb 1-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0x1, skipping [ 312.650578][ T21] usb 1-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 312.696279][ T4231] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 313.514889][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.527811][ T4231] usb 2-1: config 0 descriptor?? [ 313.546334][ T4231] usb 2-1: can't set config #0, error -71 [ 313.556496][ T4231] usb 2-1: USB disconnect, device number 24 [ 313.576540][ T21] usb 1-1: config 109 interface 205 altsetting 55 has 9 endpoint descriptors, different from the interface descriptor's value: 67 [ 313.740269][ T21] usb 1-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 313.752146][ T21] usb 1-1: config 109 interface 123 has no altsetting 0 [ 313.759479][ T21] usb 1-1: config 109 interface 251 has no altsetting 0 [ 313.766742][ T21] usb 1-1: config 109 interface 4 has no altsetting 0 [ 313.773552][ T21] usb 1-1: config 109 interface 205 has no altsetting 0 [ 313.781053][ T21] usb 1-1: config 109 interface 27 has no altsetting 0 [ 314.046476][ T4231] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 314.464772][ T21] usb 1-1: string descriptor 0 read error: -71 [ 314.471176][ T21] usb 1-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 314.489294][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.607295][ T21] usb 1-1: can't set config #109, error -71 [ 314.615917][ T21] usb 1-1: USB disconnect, device number 22 [ 314.736338][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 315.056265][ T4361] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 316.220681][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 316.316603][ T4231] usb 2-1: config 8 has an invalid interface number: 46 but max is 0 [ 316.363403][ T4231] usb 2-1: config 8 has no interface number 0 [ 316.376243][ T4361] usb 4-1: Using ep0 maxpacket: 32 [ 316.501197][ T7601] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 316.536305][ T4361] usb 4-1: config 109 has an invalid interface number: 123 but max is 3 [ 316.553182][ T4361] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 316.688513][ T7604] autofs4:pid:7604:autofs_fill_super: called with bogus options [ 317.209628][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.217041][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.447513][ T4231] usb 2-1: config 8 interface 46 has no altsetting 0 [ 317.456445][ T4361] usb 4-1: config 109 has an invalid interface number: 251 but max is 3 [ 317.566331][ T4231] usb 2-1: string descriptor 0 read error: -71 [ 317.578657][ T4231] usb 2-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 317.602057][ T4361] usb 4-1: config 109 has an invalid interface number: 4 but max is 3 [ 317.611231][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.668758][ T7606] binder: BINDER_SET_CONTEXT_MGR already set [ 317.700454][ T4361] usb 4-1: config 109 has an invalid interface number: 205 but max is 3 [ 317.706299][ T7606] binder: 7605:7606 ioctl 4018620d 200000004a80 returned -16 [ 317.753067][ T4361] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 317.779121][ T7610] binder: 7605:7610 ioctl c0306201 0 returned -14 [ 317.896375][ T4231] usb 2-1: can't set config #8, error -71 [ 317.957116][ T4361] usb 4-1: config 109 has an invalid interface number: 27 but max is 3 [ 317.996918][ T4361] usb 4-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 317.998237][ T4231] usb 2-1: USB disconnect, device number 25 [ 318.047065][ T4361] usb 4-1: config 109 has no interface number 0 [ 318.079175][ T4361] usb 4-1: config 109 has no interface number 1 [ 318.108738][ T4361] usb 4-1: config 109 has no interface number 2 [ 318.126474][ T4361] usb 4-1: config 109 has no interface number 3 [ 318.158565][ T4361] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 318.476231][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 318.488845][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 318.645579][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 318.656967][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 318.726713][ T4361] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 318.753529][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 318.793728][ T4361] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 318.834367][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 318.848654][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 318.861025][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 319.769547][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 319.968163][ T4361] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 320.003919][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 320.353369][ T4361] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 320.806467][ T4361] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 320.830506][ T4361] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 320.843700][ T4361] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 320.856965][ T4361] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 320.868712][ T4361] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 320.880668][ T4361] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 320.892228][ T4361] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0x1, skipping [ 320.904206][ T4361] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 320.915855][ T4361] usb 4-1: config 109 interface 205 altsetting 55 has 9 endpoint descriptors, different from the interface descriptor's value: 67 [ 320.929791][ T4361] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 320.941336][ T4361] usb 4-1: config 109 interface 123 has no altsetting 0 [ 320.948560][ T4361] usb 4-1: config 109 interface 251 has no altsetting 0 [ 320.962221][ T4361] usb 4-1: config 109 interface 4 has no altsetting 0 [ 320.969455][ T4361] usb 4-1: config 109 interface 205 has no altsetting 0 [ 320.976747][ T4361] usb 4-1: config 109 interface 27 has no altsetting 0 [ 321.185490][ T4361] usb 4-1: string descriptor 0 read error: -71 [ 321.192304][ T4361] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 321.205777][ T4361] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.428947][ T4231] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 321.466422][ T4361] usb 4-1: can't set config #109, error -71 [ 321.514404][ T4361] usb 4-1: USB disconnect, device number 26 [ 321.806289][ T4231] usb 2-1: Using ep0 maxpacket: 8 [ 321.966430][ T4231] usb 2-1: unable to get BOS descriptor or descriptor too short [ 322.046461][ T4231] usb 2-1: config 8 has an invalid interface number: 46 but max is 0 [ 322.886192][ T4231] usb 2-1: config 8 has no interface number 0 [ 322.892335][ T4231] usb 2-1: config 8 interface 46 has no altsetting 0 [ 324.496295][ T4231] usb 2-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 324.513927][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.526243][ T4231] usb 2-1: Product: syz [ 324.530579][ T4231] usb 2-1: Manufacturer: syz [ 324.566432][ T4231] usb 2-1: can't set config #8, error -71 [ 324.582050][ T4231] usb 2-1: USB disconnect, device number 26 [ 325.936286][ T4231] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 326.381646][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 327.206337][ T7713] binder: 7709:7713 ioctl c0306201 0 returned -14 [ 327.236615][ T4231] usb 2-1: config 109 has an invalid interface number: 123 but max is 3 [ 327.456839][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 328.104604][ T4231] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 328.113926][ T4231] usb 2-1: config 109 has an invalid interface number: 251 but max is 3 [ 328.122821][ T4231] usb 2-1: config 109 has an invalid interface number: 4 but max is 3 [ 328.131964][ T4231] usb 2-1: config 109 has an invalid interface number: 205 but max is 3 [ 328.140635][ T4231] usb 2-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 328.150475][ T4231] usb 2-1: config 109 has an invalid interface number: 27 but max is 3 [ 328.160605][ T4231] usb 2-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 328.170719][ T4231] usb 2-1: config 109 has no interface number 0 [ 328.177178][ T4231] usb 2-1: config 109 has no interface number 1 [ 328.186417][ T4231] usb 2-1: config 109 has no interface number 2 [ 328.192691][ T4231] usb 2-1: config 109 has no interface number 3 [ 328.199771][ T4231] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 328.211614][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 328.227178][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 328.238560][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 328.249693][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 328.267261][ T4231] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 328.278863][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 328.290402][ T4231] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 329.752802][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 329.915530][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 330.031172][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 330.135674][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 330.231358][ T4231] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 330.271991][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 330.324711][ T4231] usb 2-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 330.345048][ T4231] usb 2-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 330.366244][ T4231] usb 2-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 330.381602][ T4231] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 330.393003][ T4231] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 330.414587][ T4231] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 330.441880][ T4231] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 330.456262][ T4231] usb 2-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0x1, skipping [ 330.467723][ T4231] usb 2-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 330.480169][ T4231] usb 2-1: config 109 interface 205 altsetting 55 has 9 endpoint descriptors, different from the interface descriptor's value: 67 [ 330.493744][ T4231] usb 2-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 330.504816][ T4231] usb 2-1: config 109 interface 123 has no altsetting 0 [ 330.511781][ T4231] usb 2-1: config 109 interface 251 has no altsetting 0 [ 330.518807][ T4231] usb 2-1: config 109 interface 4 has no altsetting 0 [ 330.525756][ T4231] usb 2-1: config 109 interface 205 has no altsetting 0 [ 330.532755][ T4231] usb 2-1: config 109 interface 27 has no altsetting 0 [ 330.578201][ T4231] usb 2-1: string descriptor 0 read error: -71 [ 330.593572][ T4231] usb 2-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 330.603095][ T4231] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.774995][ T4231] usb 2-1: can't set config #109, error -71 [ 330.878265][ T4269] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 331.707446][ T4231] usb 2-1: USB disconnect, device number 27 [ 331.988314][ T4269] usb 1-1: Using ep0 maxpacket: 8 [ 332.115074][ T7749] loop1: detected capacity change from 0 to 24 [ 332.756428][ T4269] usb 1-1: unable to get BOS descriptor or descriptor too short [ 332.794429][ T7749] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 332.821309][ T7749] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 332.867176][ T4269] usb 1-1: config 8 has an invalid interface number: 46 but max is 0 [ 332.888248][ T4269] usb 1-1: config 8 has no interface number 0 [ 332.951037][ T7763] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 333.018675][ T4269] usb 1-1: config 8 interface 46 has no altsetting 0 [ 333.116328][ T4269] usb 1-1: string descriptor 0 read error: -71 [ 333.854547][ T4269] usb 1-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 333.890703][ T4269] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.941050][ T4269] usb 1-1: can't set config #8, error -71 [ 334.037394][ T4269] usb 1-1: USB disconnect, device number 23 [ 334.244367][ T4474] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 335.106276][ T4474] usb 4-1: Using ep0 maxpacket: 32 [ 336.057374][ T4269] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 336.187079][ T4474] usb 4-1: config 109 has an invalid interface number: 123 but max is 3 [ 336.195577][ T4474] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 336.214282][ T4474] usb 4-1: config 109 has an invalid interface number: 251 but max is 3 [ 336.223377][ T4474] usb 4-1: config 109 has an invalid interface number: 4 but max is 3 [ 336.235519][ T4474] usb 4-1: config 109 has an invalid interface number: 205 but max is 3 [ 336.260695][ T4474] usb 4-1: config 109 contains an unexpected descriptor of type 0x1, skipping [ 336.270128][ T4474] usb 4-1: config 109 has an invalid interface number: 27 but max is 3 [ 336.386423][ T26] audit: type=1326 audit(1772395244.844:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7799 comm="syz.4.1107" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x0 [ 336.409789][ T4269] usb 3-1: Using ep0 maxpacket: 8 [ 337.140891][ T4474] usb 4-1: config 109 has 5 interfaces, different from the descriptor's value: 4 [ 337.226418][ T4269] usb 3-1: unable to get BOS descriptor or descriptor too short [ 337.360371][ T4474] usb 4-1: config 109 has no interface number 0 [ 337.368120][ T4474] usb 4-1: config 109 has no interface number 1 [ 337.381472][ T4474] usb 4-1: config 109 has no interface number 2 [ 337.405527][ T4474] usb 4-1: config 109 has no interface number 3 [ 337.417316][ T4474] usb 4-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 337.426445][ T4269] usb 3-1: config 8 has an invalid interface number: 46 but max is 0 [ 337.452560][ T4269] usb 3-1: config 8 has no interface number 0 [ 337.491852][ T4269] usb 3-1: config 8 interface 46 has no altsetting 0 [ 337.500805][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 337.548971][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 337.612091][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 337.641006][ T26] audit: type=1326 audit(1772395246.134:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7815 comm="syz.3.1113" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feae9603799 code=0x0 [ 337.739910][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 338.109766][ T4474] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 338.761456][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 338.772724][ T4474] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0xF has invalid maxpacket 8 [ 338.786626][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 338.866540][ T4269] usb 3-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 338.922586][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.073246][ T4269] usb 3-1: Product: syz [ 339.276599][ T4269] usb 3-1: can't set config #8, error -71 [ 339.428757][ T4269] usb 3-1: USB disconnect, device number 30 [ 339.756437][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 339.767434][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has a duplicate endpoint with address 0xC, skipping [ 339.778464][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint descriptor of length 2, skipping [ 339.789857][ T4474] usb 4-1: config 109 interface 123 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 1024 [ 339.800797][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 339.811737][ T4474] usb 4-1: config 109 interface 123 altsetting 8 has 15 endpoint descriptors, different from the interface descriptor's value: 14 [ 339.825190][ T4474] usb 4-1: config 109 interface 4 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 339.838464][ T4474] usb 4-1: too many endpoints for config 109 interface 205 altsetting 55: 67, using maximum allowed: 30 [ 339.850391][ T4474] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0xD has invalid maxpacket 96, setting to 64 [ 339.861626][ T4474] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xD, skipping [ 339.872643][ T4474] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 339.883957][ T4474] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0xF, skipping [ 339.894993][ T4474] usb 4-1: config 109 interface 205 altsetting 55 has a duplicate endpoint with address 0x1, skipping [ 339.915160][ T4474] usb 4-1: config 109 interface 205 altsetting 55 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 339.930849][ T4474] usb 4-1: config 109 interface 205 altsetting 55 has 9 endpoint descriptors, different from the interface descriptor's value: 67 [ 339.944730][ T4474] usb 4-1: config 109 interface 27 altsetting 24 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 339.956032][ T4474] usb 4-1: config 109 interface 123 has no altsetting 0 [ 339.963171][ T4474] usb 4-1: config 109 interface 251 has no altsetting 0 [ 339.970404][ T4474] usb 4-1: config 109 interface 4 has no altsetting 0 [ 339.977552][ T4474] usb 4-1: config 109 interface 205 has no altsetting 0 [ 339.984715][ T4474] usb 4-1: config 109 interface 27 has no altsetting 0 [ 340.116340][ T4474] usb 4-1: string descriptor 0 read error: -71 [ 340.134817][ T4474] usb 4-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 340.154383][ T4474] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.197670][ T4474] usb 4-1: can't set config #109, error -71 [ 340.206263][ T4269] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 340.223675][ T4474] usb 4-1: USB disconnect, device number 27 [ 340.422483][ T7847] autofs4:pid:7847:autofs_fill_super: called with bogus options [ 340.466321][ T4269] usb 1-1: Using ep0 maxpacket: 16 [ 340.586766][ T4269] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 340.641473][ T4269] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 340.758843][ T4269] usb 1-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 340.898033][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.044936][ T4269] usb 1-1: config 0 descriptor?? [ 342.515059][ T4269] usb 1-1: USB disconnect, device number 24 [ 342.736367][ T4474] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 342.964707][ T7871] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 342.986265][ T4474] usb 3-1: Using ep0 maxpacket: 8 [ 343.146820][ T4474] usb 3-1: unable to get BOS descriptor or descriptor too short [ 343.198645][ T7870] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 343.266737][ T4474] usb 3-1: config 8 has an invalid interface number: 46 but max is 0 [ 343.289000][ T4474] usb 3-1: config 8 has no interface number 0 [ 343.316642][ T4474] usb 3-1: config 8 interface 46 has no altsetting 0 [ 343.646710][ T4474] usb 3-1: New USB device found, idVendor=1668, idProduct=0323, bcdDevice=13.5c [ 343.687810][ T4474] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.749756][ T4474] usb 3-1: Product: syz [ 343.778170][ T4474] usb 3-1: Manufacturer: syz [ 343.783288][ T4474] usb 3-1: SerialNumber: syz [ 344.606877][ T4474] kaweth 3-1:8.46: Firmware present in device. [ 345.146668][ T7880] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 345.186459][ T4474] kaweth 3-1:8.46: Statistics collection: 0 [ 345.192519][ T4474] kaweth 3-1:8.46: Multicast filter limit: 0 [ 345.202451][ T4474] kaweth 3-1:8.46: MTU: 0 [ 345.356330][ T26] audit: type=1326 audit(1772395509.865:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7878 comm="syz.1.1132" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6ec925799 code=0x0 [ 345.770240][ T4474] kaweth 3-1:8.46: Read MAC address 00:00:00:00:00:00 [ 345.816917][ T4474] kaweth: probe of 3-1:8.46 failed with error -5 [ 345.857957][ T4474] usb 3-1: USB disconnect, device number 31 [ 345.889443][ T7885] autofs4:pid:7885:autofs_fill_super: called with bogus options [ 347.029423][ T7887] loop2: detected capacity change from 0 to 2048 [ 347.105400][ T7887] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 347.606020][ T7892] autofs4:pid:7892:autofs_fill_super: called with bogus options [ 350.718810][ T26] audit: type=1326 audit(1772395514.565:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7919 comm="syz.0.1144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b6661799 code=0x0 [ 350.957230][ T7924] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 351.076970][ T7925] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 353.000860][ T7934] autofs4:pid:7934:autofs_fill_super: called with bogus options [ 354.396291][ T4269] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 354.776431][ T4269] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.960962][ T4269] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 355.012381][ T4269] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.098122][ T4269] usb 3-1: config 0 descriptor?? [ 355.140669][ T4269] pwc: Askey VC010 type 2 USB webcam detected. [ 355.373773][ T7955] loop0: detected capacity change from 0 to 2048 [ 355.413468][ T7955] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 355.599709][ T4269] pwc: recv_control_msg error -32 req 02 val 2b00 [ 355.936523][ T4269] pwc: recv_control_msg error -32 req 02 val 2700 [ 356.046324][ T4269] pwc: recv_control_msg error -32 req 02 val 2c00 [ 356.418993][ T4269] pwc: recv_control_msg error -32 req 04 val 1000 [ 356.497872][ T4269] pwc: recv_control_msg error -32 req 04 val 1300 [ 356.566336][ T4269] pwc: recv_control_msg error -32 req 04 val 1400 [ 356.626341][ T4269] pwc: recv_control_msg error -32 req 02 val 2000 [ 356.909237][ T4269] pwc: recv_control_msg error -32 req 04 val 1500 [ 356.933477][ T7976] autofs4:pid:7976:autofs_fill_super: called with bogus options [ 356.966392][ T4269] pwc: recv_control_msg error -32 req 02 val 2500 [ 357.503749][ T26] audit: type=1326 audit(1772395522.055:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7972 comm="syz.1.1158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6ec925799 code=0x0 [ 357.534096][ T4269] pwc: recv_control_msg error -32 req 02 val 2400 [ 357.562384][ T26] audit: type=1326 audit(1772395522.085:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7971 comm="syz.0.1157" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b6661799 code=0x0 [ 357.596448][ T4269] pwc: recv_control_msg error -32 req 02 val 2600 [ 357.906231][ T4269] pwc: recv_control_msg error -71 req 02 val 2800 [ 357.926390][ T4269] pwc: recv_control_msg error -71 req 04 val 1100 [ 357.946894][ T4269] pwc: recv_control_msg error -71 req 04 val 1200 [ 357.989412][ T4269] pwc: Registered as video103. [ 358.007380][ T4269] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input36 [ 358.147690][ T4269] usb 3-1: USB disconnect, device number 32 [ 358.199970][ T26] audit: type=1326 audit(1772395522.665:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7982 comm="syz.0.1160" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b6661799 code=0x0 [ 359.242466][ T7993] autofs4:pid:7993:autofs_fill_super: called with bogus options [ 360.286661][ T26] audit: type=1326 audit(1772395524.515:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8000 comm="syz.4.1166" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x0 [ 360.358047][ T8003] loop1: detected capacity change from 0 to 24 [ 360.386472][ T8007] loop2: detected capacity change from 0 to 2048 [ 360.441004][ T8003] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 361.390395][ T8003] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 361.424386][ T8007] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 361.672160][ T8015] loop3: detected capacity change from 0 to 32768 [ 364.374831][ T8040] autofs4:pid:8040:autofs_fill_super: called with bogus options [ 365.796192][ T4474] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 366.217959][ T4474] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 366.229838][ T4474] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 366.244022][ T4474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.400492][ T4474] usb 3-1: config 0 descriptor?? [ 366.441802][ T4474] pwc: Askey VC010 type 2 USB webcam detected. [ 366.801028][ T8054] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 366.876532][ T4474] pwc: recv_control_msg error -32 req 02 val 2b00 [ 366.916312][ T4474] pwc: recv_control_msg error -32 req 02 val 2700 [ 366.966283][ T4474] pwc: recv_control_msg error -32 req 02 val 2c00 [ 367.016233][ T4474] pwc: recv_control_msg error -32 req 04 val 1000 [ 367.106538][ T4474] pwc: recv_control_msg error -32 req 04 val 1300 [ 367.146532][ T4474] pwc: recv_control_msg error -32 req 04 val 1400 [ 367.196514][ T4474] pwc: recv_control_msg error -32 req 02 val 2000 [ 367.246547][ T4474] pwc: recv_control_msg error -32 req 02 val 2100 [ 367.297284][ T4474] pwc: recv_control_msg error -32 req 04 val 1500 [ 367.336542][ T4474] pwc: recv_control_msg error -32 req 02 val 2500 [ 367.397395][ T4474] pwc: recv_control_msg error -32 req 02 val 2400 [ 367.436514][ T4474] pwc: recv_control_msg error -32 req 02 val 2600 [ 367.716501][ T4474] pwc: recv_control_msg error -71 req 02 val 2800 [ 367.746334][ T4474] pwc: recv_control_msg error -71 req 04 val 1100 [ 367.778900][ T4474] pwc: recv_control_msg error -71 req 04 val 1200 [ 367.806758][ T4474] pwc: Registered as video103. [ 367.812737][ T4474] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input37 [ 367.946292][ T4474] usb 3-1: USB disconnect, device number 33 [ 368.188115][ T8057] loop0: detected capacity change from 0 to 32768 [ 368.628020][ T26] audit: type=1326 audit(1772395533.185:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8059 comm="syz.4.1182" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4948d9799 code=0x0 [ 369.894801][ T8069] loop0: detected capacity change from 0 to 2048 [ 370.799564][ T8069] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 370.898880][ T8079] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 373.485265][ T26] audit: type=1326 audit(1772395538.035:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8087 comm="syz.3.1190" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feae9603799 code=0x0 [ 373.507265][ C0] vkms_vblank_simulate: vblank timer overrun [ 374.344977][ T8098] loop3: detected capacity change from 0 to 2048 [ 374.346198][ T23] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 374.414232][ T26] audit: type=1326 audit(1772395538.965:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.0.1191" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f58b6661799 code=0x0 [ 374.468148][ T8098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 374.666381][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 374.886518][ T23] usb 2-1: config 109 has an invalid interface number: 123 but max is 0 [ 374.906413][ T23] usb 2-1: config 109 has no interface number 0 [ 374.913183][ T23] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 374.926316][ T23] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 374.937810][ T23] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 374.949529][ T23] usb 2-1: config 109 interface 123 has no altsetting 0 [ 375.386330][ T23] usb 2-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 375.402491][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.421907][ T23] usb 2-1: Product: syz [ 375.426361][ T23] usb 2-1: Manufacturer: syz [ 375.431034][ T23] usb 2-1: SerialNumber: syz [ 375.466452][ T8089] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 375.788809][ T23] option 2-1:109.123: GSM modem (1-port) converter detected [ 375.839731][ T23] usb 2-1: USB disconnect, device number 28 [ 375.868008][ T23] option 2-1:109.123: device disconnected [ 378.170291][ T8120] loop3: detected capacity change from 0 to 2048 [ 378.249103][ T8120] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.393945][ T8126] autofs4:pid:8126:autofs_fill_super: called with bogus options [ 378.473724][ T8127] loop2: detected capacity change from 0 to 2048 [ 378.542087][ T8127] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.707606][ T8130] loop1: detected capacity change from 0 to 32768 [ 378.716544][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.722862][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.381050][ T8130] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 379.390197][ T8130] BTRFS info (device loop1): enabling disk space caching [ 379.397324][ T8130] BTRFS info (device loop1): force clearing of disk cache [ 379.404673][ T8130] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 379.414100][ T8130] BTRFS info (device loop1): use zstd compression, level 3 [ 379.421368][ T8130] BTRFS info (device loop1): disk space caching is enabled [ 379.429150][ T8130] BTRFS info (device loop1): has skinny extents [ 379.712575][ T8130] BTRFS info (device loop1): enabling ssd optimizations [ 379.722053][ T8130] BTRFS info (device loop1): clearing free space tree [ 379.729057][ T8130] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 379.739463][ T8130] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 379.811090][ T8155] loop0: detected capacity change from 0 to 2048 [ 379.966066][ T8155] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 381.043970][ T26] audit: type=1804 audit(1772395545.595:36): pid=8166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1200" name="/newroot/231/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 383.031007][ T8176] i2c i2c-0: dvb_frontend_start: failed to start kthread (-4) [ 384.966239][ T8189] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 386.299505][ T8187] loop3: detected capacity change from 0 to 24 [ 387.232828][ T8187] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 387.246841][ T8187] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 388.463127][ T8210] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 389.039415][ T8212] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 391.683430][ T8231] loop1: detected capacity change from 0 to 24 [ 391.861272][ T8231] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 391.920479][ T8231] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 391.989130][ T8236] autofs4:pid:8236:autofs_fill_super: called with bogus options [ 392.144468][ T8238] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 394.868460][ T8248] loop3: detected capacity change from 0 to 24 [ 395.463179][ T8248] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 396.037037][ T8248] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 396.943587][ T8270] loop1: detected capacity change from 0 to 2048 [ 396.996239][ T8224] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 397.020302][ T8270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.124321][ T8274] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 397.246298][ T8224] usb 3-1: Using ep0 maxpacket: 32 [ 397.396360][ T8224] usb 3-1: config 109 has an invalid interface number: 123 but max is 0 [ 398.118216][ T8224] usb 3-1: config 109 has no interface number 0 [ 398.124720][ T8224] usb 3-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 398.155048][ T8224] usb 3-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 398.168608][ T8224] usb 3-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 398.184105][ T8224] usb 3-1: config 109 interface 123 has no altsetting 0 [ 398.346461][ T8224] usb 3-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 398.506298][ T8224] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.520340][ T8283] autofs4:pid:8283:autofs_fill_super: called with bogus options [ 398.528319][ T8224] usb 3-1: Product: syz [ 398.532608][ T8224] usb 3-1: Manufacturer: syz [ 398.558180][ T8224] usb 3-1: SerialNumber: syz [ 398.586431][ T8264] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 398.887372][ T8224] option 3-1:109.123: GSM modem (1-port) converter detected [ 398.938591][ T8224] usb 3-1: USB disconnect, device number 34 [ 399.109194][ T8224] option 3-1:109.123: device disconnected [ 401.205466][ T8308] autofs4:pid:8308:autofs_fill_super: called with bogus options [ 401.276338][ T8224] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 401.514398][ T8312] loop0: detected capacity change from 0 to 2048 [ 401.555092][ T8312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 402.056444][ T8224] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 402.174078][ T8320] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 403.450963][ T8224] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 403.516329][ T8224] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.537591][ T8224] usb 4-1: config 0 descriptor?? [ 403.600677][ T8224] pwc: Askey VC010 type 2 USB webcam detected. [ 404.146359][ T8224] pwc: recv_control_msg error -32 req 02 val 2b00 [ 404.188588][ T8224] pwc: recv_control_msg error -32 req 02 val 2700 [ 404.356269][ T8224] pwc: recv_control_msg error -32 req 02 val 2c00 [ 404.399922][ T8224] pwc: recv_control_msg error -32 req 04 val 1000 [ 404.456255][ T8224] pwc: recv_control_msg error -32 req 04 val 1300 [ 404.506237][ T8224] pwc: recv_control_msg error -32 req 04 val 1400 [ 404.586224][ T4184] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 404.766272][ T8224] pwc: recv_control_msg error -32 req 02 val 2100 [ 404.806370][ T8224] pwc: recv_control_msg error -32 req 04 val 1500 [ 404.826266][ T4184] usb 2-1: Using ep0 maxpacket: 32 [ 404.846477][ T8224] pwc: recv_control_msg error -32 req 02 val 2500 [ 404.886552][ T8224] pwc: recv_control_msg error -32 req 02 val 2400 [ 404.926531][ T8224] pwc: recv_control_msg error -32 req 02 val 2600 [ 404.946455][ T4184] usb 2-1: config 109 has an invalid interface number: 123 but max is 0 [ 404.961980][ T4184] usb 2-1: config 109 has no interface number 0 [ 404.972670][ T4184] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 404.991327][ T4184] usb 2-1: config 109 interface 123 altsetting 8 bulk endpoint 0x88 has invalid maxpacket 1024 [ 405.003850][ T4184] usb 2-1: config 109 interface 123 altsetting 8 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 405.025873][ T4184] usb 2-1: config 109 interface 123 has no altsetting 0 [ 405.186459][ T4184] usb 2-1: New USB device found, idVendor=257a, idProduct=1604, bcdDevice=85.c7 [ 405.216251][ T8224] pwc: recv_control_msg error -71 req 02 val 2800 [ 405.223276][ T4184] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.239281][ T8224] pwc: recv_control_msg error -71 req 04 val 1100 [ 405.260184][ T8224] pwc: recv_control_msg error -71 req 04 val 1200 [ 405.269327][ T4184] usb 2-1: Product: syz [ 405.273533][ T4184] usb 2-1: Manufacturer: syz [ 405.292734][ T8224] pwc: Registered as video103. [ 405.305754][ T4184] usb 2-1: SerialNumber: syz [ 405.316384][ T8224] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input38 [ 405.356508][ T8338] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 405.379973][ T8224] usb 4-1: USB disconnect, device number 28 [ 405.717775][ T4184] option 2-1:109.123: GSM modem (1-port) converter detected [ 405.782251][ T4184] usb 2-1: USB disconnect, device number 29 [ 405.940902][ T4184] option 2-1:109.123: device disconnected [ 409.105707][ T8378] loop3: detected capacity change from 0 to 2048 [ 410.291753][ T8378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.587673][ T8368] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 411.594141][ T8398] loop1: detected capacity change from 0 to 24 [ 411.944382][ T8398] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 412.004350][ T8398] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 416.082051][ T8432] loop1: detected capacity change from 0 to 2048 [ 416.134483][ T8418] fuse: Unknown parameter 'fd0xffffffffffffffff00000000000000000000' [ 416.155925][ T8432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 419.543560][ T8455] autofs4:pid:8455:autofs_fill_super: called with bogus options [ 421.037926][ T8473] autofs4:pid:8473:autofs_fill_super: called with bogus options [ 424.581881][ T8499] loop1: detected capacity change from 0 to 2048 [ 425.536252][ T8499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 426.893531][ T8510] loop2: detected capacity change from 0 to 32768 [ 426.976318][ T8510] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.1299 (8510) [ 427.004129][ T8510] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 427.012972][ T8510] BTRFS info (device loop2): enabling disk space caching [ 427.020407][ T8510] BTRFS info (device loop2): force clearing of disk cache [ 427.027672][ T8510] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 427.037336][ T8510] BTRFS info (device loop2): use zstd compression, level 3 [ 427.044904][ T8510] BTRFS info (device loop2): disk space caching is enabled [ 427.052339][ T8510] BTRFS info (device loop2): has skinny extents [ 427.589745][ T8510] BTRFS info (device loop2): enabling ssd optimizations [ 427.599269][ T8510] BTRFS info (device loop2): clearing free space tree [ 427.606478][ T8510] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 427.616405][ T8510] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 429.821948][ T26] audit: type=1804 audit(1772395594.375:37): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1299" name="/newroot/242/file1/bus" dev="loop2" ino=263 res=1 errno=0 [ 433.971003][ T8577] autofs4:pid:8577:autofs_fill_super: called with bogus options [ 435.687248][ T4474] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 435.813141][ T8589] ================================================================== [ 435.821512][ T8589] BUG: KASAN: use-after-free in dvb_device_open+0xc6/0x370 [ 435.828714][ T8589] Read of size 8 at addr ffff888028b39418 by task syz.3.1317/8589 [ 435.836517][ T8589] [ 435.838845][ T8589] CPU: 0 PID: 8589 Comm: syz.3.1317 Not tainted syzkaller #0 [ 435.846476][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 435.856884][ T8589] Call Trace: [ 435.860213][ T8589] [ 435.863155][ T8589] dump_stack_lvl+0x188/0x250 [ 435.868050][ T8589] ? show_regs_print_info+0x20/0x20 [ 435.873257][ T8589] ? _printk+0xda/0x130 [ 435.877451][ T8589] ? dvb_device_open+0xc6/0x370 [ 435.882302][ T8589] ? load_image+0x400/0x400 [ 435.886889][ T8589] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 435.892464][ T8589] print_address_description+0x60/0x2d0 [ 435.898004][ T8589] ? dvb_device_open+0xc6/0x370 [ 435.902863][ T8589] kasan_report+0xdf/0x130 [ 435.907296][ T8589] ? dvb_device_open+0xc6/0x370 [ 435.912361][ T8589] dvb_device_open+0xc6/0x370 [ 435.917144][ T8589] ? do_raw_spin_unlock+0x11d/0x230 [ 435.922345][ T8589] chrdev_open+0x5c5/0x6a0 [ 435.926775][ T8589] ? cd_forget+0x160/0x160 [ 435.931225][ T8589] ? fsnotify_perm+0x3a7/0x560 [ 435.936006][ T8589] ? cd_forget+0x160/0x160 [ 435.940421][ T8589] do_dentry_open+0x7ff/0xf80 [ 435.945113][ T8589] path_openat+0x26f5/0x2fa0 [ 435.949729][ T8589] ? verify_lock_unused+0x140/0x140 [ 435.955045][ T8589] ? slab_post_alloc_hook+0x4c/0x380 [ 435.960342][ T8589] ? do_filp_open+0x410/0x410 [ 435.965117][ T8589] do_filp_open+0x1e2/0x410 [ 435.969636][ T8589] ? vfs_tmpfile+0x300/0x300 [ 435.974253][ T8589] ? _raw_spin_unlock+0x24/0x40 [ 435.979096][ T8589] ? alloc_fd+0x598/0x630 [ 435.983535][ T8589] do_sys_openat2+0x150/0x4b0 [ 435.988234][ T8589] ? __lock_acquire+0x7d10/0x7d10 [ 435.993257][ T8589] ? do_sys_open+0xe0/0xe0 [ 435.997667][ T8589] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 436.003767][ T8589] ? lock_chain_count+0x20/0x20 [ 436.008653][ T8589] ? vtime_user_exit+0x2c8/0x3e0 [ 436.013597][ T8589] __x64_sys_openat+0x135/0x160 [ 436.018464][ T8589] do_syscall_64+0x4c/0xa0 [ 436.023082][ T8589] ? clear_bhb_loop+0x30/0x80 [ 436.027768][ T8589] ? clear_bhb_loop+0x30/0x80 [ 436.032541][ T8589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.038451][ T8589] RIP: 0033:0x7feae95c3fce [ 436.042984][ T8589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.062796][ T8589] RSP: 002b:00007feae785cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.071319][ T8589] RAX: ffffffffffffffda RBX: 00007feae785d6c0 RCX: 00007feae95c3fce [ 436.079304][ T8589] RDX: 0000000000000002 RSI: 00007feae785cc00 RDI: ffffffffffffff9c [ 436.087354][ T8589] RBP: 00007feae785cc00 R08: 0000000000000000 R09: 0000000000000000 [ 436.095521][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 436.103486][ T8589] R13: 00007feae987d038 R14: 00007feae987cfa0 R15: 00007ffc67f662c8 [ 436.111581][ T8589] [ 436.117395][ T8589] [ 436.119716][ T8589] Allocated by task 1: [ 436.123866][ T8589] __kasan_kmalloc+0xb5/0xf0 [ 436.128462][ T8589] dvb_register_device+0x311/0x2170 [ 436.133755][ T8589] dvb_register_frontend+0x645/0x920 [ 436.139037][ T8589] vidtv_bridge_probe+0x9a1/0xf70 [ 436.144061][ T8589] platform_probe+0x137/0x1c0 [ 436.148730][ T8589] really_probe+0x284/0xc80 [ 436.153520][ T8589] __driver_probe_device+0x18c/0x330 [ 436.158891][ T8589] driver_probe_device+0x4f/0x420 [ 436.164108][ T8589] __driver_attach+0x46b/0x670 [ 436.168874][ T8589] bus_for_each_dev+0x182/0x1f0 [ 436.173725][ T8589] bus_add_driver+0x30a/0x5a0 [ 436.178425][ T8589] driver_register+0x32d/0x430 [ 436.183418][ T8589] vidtv_bridge_init+0x39/0x70 [ 436.188173][ T8589] do_one_initcall+0x272/0x730 [ 436.192934][ T8589] do_initcall_level+0x137/0x1f0 [ 436.197858][ T8589] do_initcalls+0x4b/0x90 [ 436.202172][ T8589] kernel_init_freeable+0x3e9/0x570 [ 436.207359][ T8589] kernel_init+0x19/0x1b0 [ 436.211684][ T8589] ret_from_fork+0x1f/0x30 [ 436.216264][ T8589] [ 436.218588][ T8589] The buggy address belongs to the object at ffff888028b39400 [ 436.218588][ T8589] which belongs to the cache kmalloc-256 of size 256 [ 436.232731][ T8589] The buggy address is located 24 bytes inside of [ 436.232731][ T8589] 256-byte region [ffff888028b39400, ffff888028b39500) [ 436.246193][ T8589] The buggy address belongs to the page: [ 436.251837][ T8589] page:ffffea0000a2ce00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888028b39400 pfn:0x28b38 [ 436.263278][ T8589] head:ffffea0000a2ce00 order:1 compound_mapcount:0 [ 436.269852][ T8589] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 436.277864][ T8589] raw: 00fff00000010200 ffffea0001e78c88 ffffea00007d8088 ffff888016c41b40 [ 436.286536][ T8589] raw: ffff888028b39400 000000000010000d 00000001ffffffff 0000000000000000 [ 436.295382][ T8589] page dumped because: kasan: bad access detected [ 436.301893][ T8589] page_owner tracks the page as allocated [ 436.307645][ T8589] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, ts 13140076588, free_ts 0 [ 436.325690][ T8589] get_page_from_freelist+0x1bbd/0x1ca0 [ 436.331235][ T8589] __alloc_pages+0x1ee/0x480 [ 436.335817][ T8589] alloc_page_interleave+0x24/0x1e0 [ 436.341011][ T8589] new_slab+0xc0/0x4b0 [ 436.345138][ T8589] ___slab_alloc+0x80a/0xdd0 [ 436.349805][ T8589] __kmalloc_node+0x200/0x3b0 [ 436.354560][ T8589] kvmalloc_node+0x84/0x130 [ 436.359080][ T8589] v4l2_ctrl_new+0x70f/0x1310 [ 436.363821][ T8589] v4l2_ctrl_new_std+0x247/0x300 [ 436.368782][ T8589] handler_new_ref+0x14a/0x950 [ 436.373538][ T8589] v4l2_ctrl_add_handler+0x197/0x280 [ 436.378987][ T8589] vivid_create_controls+0x2720/0x3460 [ 436.384607][ T8589] vivid_probe+0x3c47/0x67a0 [ 436.389360][ T8589] platform_probe+0x137/0x1c0 [ 436.394046][ T8589] really_probe+0x284/0xc80 [ 436.398652][ T8589] __driver_probe_device+0x18c/0x330 [ 436.404455][ T8589] page_owner free stack trace missing [ 436.409824][ T8589] [ 436.412141][ T8589] Memory state around the buggy address: [ 436.417856][ T8589] ffff888028b39300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 436.425935][ T8589] ffff888028b39380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 436.434085][ T8589] >ffff888028b39400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 436.442152][ T8589] ^ [ 436.447115][ T8589] ffff888028b39480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 436.455167][ T8589] ffff888028b39500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 436.463221][ T8589] ================================================================== [ 436.471274][ T8589] Disabling lock debugging due to kernel taint [ 436.478189][ T8589] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 436.485373][ T8589] CPU: 0 PID: 8589 Comm: syz.3.1317 Tainted: G B syzkaller #0 [ 436.494120][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 436.504183][ T8589] Call Trace: [ 436.507460][ T8589] [ 436.510391][ T8589] dump_stack_lvl+0x188/0x250 [ 436.515240][ T8589] ? show_regs_print_info+0x20/0x20 [ 436.520531][ T8589] ? load_image+0x400/0x400 [ 436.525042][ T8589] panic+0x2e5/0x810 [ 436.528936][ T8589] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 436.535476][ T8589] ? bpf_jit_dump+0xd0/0xd0 [ 436.539986][ T8589] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 436.545884][ T8589] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 436.552047][ T8589] ? _raw_spin_unlock+0x40/0x40 [ 436.556892][ T8589] ? dvb_device_open+0xc6/0x370 [ 436.561736][ T8589] check_panic_on_warn+0x80/0xa0 [ 436.566682][ T8589] ? dvb_device_open+0xc6/0x370 [ 436.571610][ T8589] end_report+0x6d/0xf0 [ 436.575800][ T8589] kasan_report+0x102/0x130 [ 436.580326][ T8589] ? dvb_device_open+0xc6/0x370 [ 436.585222][ T8589] dvb_device_open+0xc6/0x370 [ 436.590014][ T8589] ? do_raw_spin_unlock+0x11d/0x230 [ 436.595209][ T8589] chrdev_open+0x5c5/0x6a0 [ 436.599753][ T8589] ? cd_forget+0x160/0x160 [ 436.604172][ T8589] ? fsnotify_perm+0x3a7/0x560 [ 436.608937][ T8589] ? cd_forget+0x160/0x160 [ 436.613523][ T8589] do_dentry_open+0x7ff/0xf80 [ 436.618199][ T8589] path_openat+0x26f5/0x2fa0 [ 436.622780][ T8589] ? verify_lock_unused+0x140/0x140 [ 436.628065][ T8589] ? slab_post_alloc_hook+0x4c/0x380 [ 436.633336][ T8589] ? do_filp_open+0x410/0x410 [ 436.638018][ T8589] do_filp_open+0x1e2/0x410 [ 436.642620][ T8589] ? vfs_tmpfile+0x300/0x300 [ 436.647203][ T8589] ? _raw_spin_unlock+0x24/0x40 [ 436.652036][ T8589] ? alloc_fd+0x598/0x630 [ 436.656349][ T8589] do_sys_openat2+0x150/0x4b0 [ 436.661086][ T8589] ? __lock_acquire+0x7d10/0x7d10 [ 436.666185][ T8589] ? do_sys_open+0xe0/0xe0 [ 436.670593][ T8589] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 436.676562][ T8589] ? lock_chain_count+0x20/0x20 [ 436.681636][ T8589] ? vtime_user_exit+0x2c8/0x3e0 [ 436.686560][ T8589] __x64_sys_openat+0x135/0x160 [ 436.691487][ T8589] do_syscall_64+0x4c/0xa0 [ 436.695893][ T8589] ? clear_bhb_loop+0x30/0x80 [ 436.700854][ T8589] ? clear_bhb_loop+0x30/0x80 [ 436.705551][ T8589] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 436.711450][ T8589] RIP: 0033:0x7feae95c3fce [ 436.716203][ T8589] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 436.735794][ T8589] RSP: 002b:00007feae785cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 436.744196][ T8589] RAX: ffffffffffffffda RBX: 00007feae785d6c0 RCX: 00007feae95c3fce [ 436.752153][ T8589] RDX: 0000000000000002 RSI: 00007feae785cc00 RDI: ffffffffffffff9c [ 436.760112][ T8589] RBP: 00007feae785cc00 R08: 0000000000000000 R09: 0000000000000000 [ 436.768279][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 436.776255][ T8589] R13: 00007feae987d038 R14: 00007feae987cfa0 R15: 00007ffc67f662c8 [ 436.784390][ T8589] [ 436.787486][ T8589] Kernel Offset: disabled [ 436.791981][ T8589] Rebooting in 86400 seconds..