last executing test programs: 21.63020197s ago: executing program 0 (id=1465): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000010c0)=@abs, 0x38) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000005) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000000c0)=""/4096, 0x1000) getdents(r8, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="b15801ff2fceaaaaaaaafc61015d45000078000000000011907800000000e00000014e211b59006490780200000000000000000000000000000108653904030405ffffff09c56a3000000000000000000000000000009384bbeb3018ad591b661fe808b21b77694c875dfb1be5d2a0057a62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) 13.46286291s ago: executing program 0 (id=1484): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000045, 0x8) bind$vsock_stream(r3, &(0x7f0000000940), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x1) 13.293365112s ago: executing program 4 (id=1487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 11.873768355s ago: executing program 0 (id=1488): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000500)=ANY=[@ANYBLOB="e3a4955a4df1c4ffb1bdba4a1d321318657633ed09c48d8f2d0278fea5c0cd600d05de5b44e4039d5843ed562c96ce537fce6c0dd5034e087cdf190a76b905eb33b03877a7b76666baf3ef1700bedd7010579c0891ffa6d269fcb92ac04c00d91642a310f02f33bec170e23f677a6cc987973272e6193add"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008014}, 0x10004080) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) connect$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x40010, 0xffffffffffffffff, 0x3000) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000940)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0), &(0x7f00000190c0), 0x0, 0x0, 0x0, 0x0, r3}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10002, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x8, 0x0) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x400720) 11.828507358s ago: executing program 4 (id=1489): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x8, 0x1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x3f}) truncate(&(0x7f0000000000)='./mnt\x00', 0x5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x8}}}}}, 0x0) 10.784631257s ago: executing program 1 (id=1492): socket$unix(0x1, 0x5, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000001c0)={0x1, 0x6}, 0x8) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000500)={0x1, @pix={0x9, 0x5, 0x41565559, 0x9, 0xa, 0x4cb5cf38, 0x5, 0x8001, 0x0, 0x8, 0x2, 0x2}}) 10.74951395s ago: executing program 1 (id=1493): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8800) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7e, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 10.601925629s ago: executing program 1 (id=1494): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000010c0)=@abs, 0x38) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x8417f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4000005) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2c, &(0x7f0000000000)='/proc/sys/net/\x00\x00v4\x00\x00s/\x92ync_\x00le\xf44.\x00\x00\x00\x00\xd4\xa2\x88\x00\xd1l,'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r8, &(0x7f00000000c0)=""/4096, 0x1000) getdents(r8, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="b15801ff2fceaaaaaaaafc61015d45000078000000000011907800000000e00000014e211b59006490780200000000000000000000000000000108653904030405ffffff09c56a3000000000000000000000000000009384bbeb3018ad591b661fe808b21b77694c875dfb1be5d2a0057a62022a1564a329d3a13bd5b6cc6a9471314a1d8c69"], 0x0) 10.274781281s ago: executing program 0 (id=1495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b0000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 8.674371787s ago: executing program 0 (id=1497): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff3}}}, 0x24}}, 0x0) 8.47792207s ago: executing program 3 (id=1499): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r3}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x84) shutdown(r7, 0x0) setsockopt$sock_linger(r7, 0x1, 0xd, 0x0, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x7b}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 7.691923732s ago: executing program 3 (id=1500): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x20000001, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xb, 0x0, &(0x7f0000000100)="e09f547ed3f02dc1fd3d64", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000180)="a090", 0x2}], 0x1}, 0xd0a0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, 0x0) keyctl$session_to_parent(0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xd, 0x1, 'connmark\x00'}, @NFTA_MATCH_INFO={0x10, 0x3, "a62a1a4094b2c56d78942e97"}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x8c}}, 0x0) 7.526146663s ago: executing program 2 (id=1501): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0x0, &(0x7f0000000140)='environ\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000004}, 0x50) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYRES32=0x0], 0x1, 0xd99, &(0x7f0000006900)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r2, r3, 0x0, 0x20fffe82) read$alg(r2, &(0x7f0000000e00)=""/4096, 0x1000) 6.532488329s ago: executing program 3 (id=1502): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10000880}, 0x0) 6.260250667s ago: executing program 3 (id=1503): syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@grpquota}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x10) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f00000002c0)={0x80}) 6.108670927s ago: executing program 4 (id=1504): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@textreal={0x8, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000040)={[0x4, 0x2, 0x80, 0x5, 0x4, 0x7f, 0x4232, 0x0, 0x81, 0x9c1, 0x8001, 0x5, 0x7, 0x4db6, 0x0, 0xfffffdfffffffffd], 0xdddd1000, 0x80300}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x8800) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x7e, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.940186898s ago: executing program 2 (id=1505): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001000010700009c0000"], 0x1c}}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) 5.208456266s ago: executing program 1 (id=1506): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20a00, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f00000030c0)={0x0, 0x0, &(0x7f0000003080)={&(0x7f0000003040)={0x2c, 0x1, 0x4, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0x8}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40084}, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000001000010700009c0000"], 0x1c}}, 0x0) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r7, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r6}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r8}, &(0x7f0000000040)=0x2, &(0x7f0000000240)=r6}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r7, &(0x7f0000000040)}, 0x20) 5.120719372s ago: executing program 4 (id=1507): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b0000"], &(0x7f0000000100)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) bind$alg(r2, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4b, 0x0, 0x0, 0x0, 0x4000}}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) accept4(r2, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.876080688s ago: executing program 2 (id=1508): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000008300)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="e2", 0x1}], 0x1}}], 0x1, 0x1) 4.594933906s ago: executing program 2 (id=1509): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x8) r0 = getpid() accept$netrom(0xffffffffffffffff, &(0x7f0000000180)={{}, [@default, @bcast, @netrom, @rose, @default, @null, @bcast]}, &(0x7f0000000040)=0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) unshare(0x22020600) r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) connect$unix(r1, &(0x7f0000000380)=@abs, 0x26) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) fchdir(r4) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x200000, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) socket$nl_route(0x10, 0x3, 0x0) 3.374612498s ago: executing program 1 (id=1510): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='children\x00') lseek(r2, 0x5a, 0x2) ioctl$PTP_PIN_SETFUNC(r2, 0x40603d07, &(0x7f0000000040)={'\x00', 0x2, 0x1, 0xd9}) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) socket$igmp(0x2, 0x3, 0x2) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r5, 0x40047211, &(0x7f0000000200)=0x1) connect$pppoe(r4, 0x0, 0x0) ioctl$PPPIOCGCHAN(r5, 0x80047437, &(0x7f00000001c0)) sendmmsg(r4, &(0x7f0000003dc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)="a0a4a4e3a27dfd4f181259301443247d3b3591e54fc507298a3da79ffbd306007d6a6f24fd454d9225e2d1df91e83d7fec5d71cd7304f9e941c29a66c5f2059c62ca1df9043975e25f278a4ee71acb4107c4412f74bd3ccfe3ac75c2e5641769e8eaf42cf26ddbd906fd267f21b05c55a68701ac41b6d45057dd179c29", 0x7d}, {&(0x7f00000002c0)="f85933688da2b2e22d4098f5ed99af85e00e13696d5c6911bf9a7a451a5b1cc2f1af7b6b47b6ac67f84b3cb6fdc99f9ab2b9149b278e6c9160caa734472e0dd820165f6dc36e8b433f82969566b44308099e36efea369d16e214d391e2e5f4c91b060a5158eaca03906dda58a2644f19b9", 0x71}], 0x2}}], 0x1, 0x20004841) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) fremovexattr(r6, &(0x7f0000000440)=ANY=[@ANYBLOB="73656375726974792e73ff4d00c1f63f090ea3049149a2b37af4f6f71820f8cd08a9b076d50abc4652288dfc7452e9a1443f0c07c2d1945044e0406c1640d11826bf70398d1fb34367492846cbb7464bcee412f44ae2d74d6915a58000000000000000743bf8c7eae5c3f2f296168975e42704259c1454572a6b3f650a6004f3b17389e2b2920a5132e5e8ca68376894b904a7966362f766a66d326e491d9e2261aed3a4"]) syz_open_dev$video(&(0x7f00000000c0), 0x10001, 0xc100) setsockopt$TIPC_MCAST_BROADCAST(0xffffffffffffffff, 0x10f, 0x85) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x159b43, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'tunl0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000001340)=[{&(0x7f0000001200)=""/75, 0x4b}, {&(0x7f0000001140)=""/21, 0x15}, {&(0x7f0000001280)=""/182, 0xb6}], 0x3, &(0x7f0000001380)=""/155, 0x9b}, 0x40000101) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) 3.048517069s ago: executing program 2 (id=1511): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x3}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="2e2e014010ff"}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd5c}, 0x24048414) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0xfffffffffffffd2e, 0x8000, 0x3}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x141301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f00000000c0)={0x1, 0x1}) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) syz_open_dev$usbfs(0x0, 0x77, 0x41141) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000002800070000"], 0x14}}, 0x4040040) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x5) r7 = socket$kcm(0x29, 0x5, 0x0) sendmsg(r7, &(0x7f0000002ec0)={0x0, 0x0, &(0x7f0000002c40)=[{&(0x7f0000002b80)="b2", 0x1}], 0x1}, 0x4000) syz_open_dev$vim2m(0x0, 0x10100a, 0x2) 2.900552749s ago: executing program 3 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) 2.822842804s ago: executing program 4 (id=1513): r0 = userfaultfd(0x80001) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$NFT_BATCH(r1, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) move_pages(0x0, 0x1, &(0x7f0000000140)=[&(0x7f0000000000/0x1000)=nil], &(0x7f0000000040)=[0x1], 0x0, 0x2) 2.373675214s ago: executing program 0 (id=1514): fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) read$msr(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) keyctl$session_to_parent(0x12) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0x8acf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) 1.348187552s ago: executing program 3 (id=1515): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$FBIOPAN_DISPLAY(r2, 0x4606, &(0x7f0000000200)={0x190, 0x640, 0x3c0, 0x280, 0x0, 0xc0e4, 0x18, 0x1, {0x5, 0x8001}, {0x0, 0x7}, {0xb, 0x2000}, {0x29, 0x10001}, 0x1, 0x80, 0x7e, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x6, 0x8, 0xd, 0x7fff, 0x0, 0x0, 0x3, 0x5}) r3 = inotify_init1(0x800) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x17, 0x0, 0x0) inotify_rm_watch(r3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) lseek(r4, 0x8, 0x1) truncate(&(0x7f0000000200)='./mnt\x00', 0x4) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r5, 0x40045567, 0x0) ioctl$UI_ABS_SETUP(r5, 0x401c5504, &(0x7f00000002c0)={0x3f}) truncate(&(0x7f0000000000)='./mnt\x00', 0x5) ioctl$UI_SET_EVBIT(r5, 0x40045564, 0x3) write$uinput_user_dev(r5, &(0x7f0000001740)={'syz0\x00', {0x8000}, 0x0, [0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0xc0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x1000, 0x10], [0x0, 0xffffffff, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x400, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x806, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x28000000], [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x681, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x8}}}}}, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@broadcast, @random="67eaa8fce250", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x0, 0x1c, 0x0, 0xe000, 0x3, 0x11, 0x0, @empty, @empty}, {0x4, 0x0, 0x8}}}}}, 0x0) 1.257837398s ago: executing program 4 (id=1516): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x17, 0x1e, "539e2dddcaea99049df8130c40a64afb83bf334c19aa63bf69c3b55eed4a"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, &(0x7f0000000580)={0x14, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 368.604516ms ago: executing program 1 (id=1517): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) creat(&(0x7f0000000180)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[], 0x15) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 0s ago: executing program 2 (id=1518): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xb, &(0x7f0000000180)=ANY=[@ANYRESDEC], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) getsockopt$WPAN_WANTLQI(0xffffffffffffffff, 0x0, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) kernel console output (not intermixed with test programs): FS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 98.715973][ T4565] Remounting filesystem read-only [ 98.738942][ T4272] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 99.219968][ T4583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.63'. [ 99.241098][ T4583] netlink: 28 bytes leftover after parsing attributes in process `syz.4.63'. [ 99.572988][ T4341] usb 1-1: USB disconnect, device number 7 [ 99.890648][ T4599] loop3: detected capacity change from 0 to 2048 [ 100.191492][ T4609] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 100.910263][ T4609] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 100.957812][ T4606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.68'. [ 100.987784][ T4609] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 101.025716][ T4609] Remounting filesystem read-only [ 101.043105][ T4272] NILFS (loop3): disposed unprocessed dirty file(s) when stopping log writer [ 101.185220][ T4621] loop1: detected capacity change from 0 to 4096 [ 101.227077][ T4621] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512) [ 101.871758][ T4626] syz.1.75 (4626) used greatest stack depth: 20624 bytes left [ 102.971072][ T4341] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.182838][ T4341] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 103.221100][ T4341] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.254149][ T4341] usb 2-1: config 0 descriptor?? [ 103.474499][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 103.482224][ T4341] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 103.494367][ T4341] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 103.507301][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 103.514792][ T4341] [drm:udl_init] *ERROR* Selecting channel failed [ 104.267601][ T4341] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 104.275288][ T4341] [drm] Initialized udl on minor 2 [ 104.283940][ T4341] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 104.298208][ T4341] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 104.307016][ T4341] usb 2-1: USB disconnect, device number 5 [ 104.317082][ T7] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 104.333408][ T7] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 104.341834][ T7] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 104.569351][ T4644] loop1: detected capacity change from 0 to 128 [ 104.611339][ T4644] ======================================================= [ 104.611339][ T4644] WARNING: The mand mount option has been deprecated and [ 104.611339][ T4644] and is ignored by this kernel. Remove the mand [ 104.611339][ T4644] option from the mount to silence this warning. [ 104.611339][ T4644] ======================================================= [ 104.701403][ T14] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 104.901121][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 104.901857][ T4644] FAT-fs (loop1): error, invalid FAT chain (i_pos 548, last_block 8) [ 104.920477][ T14] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 104.934637][ T4644] FAT-fs (loop1): Filesystem has been set read-only [ 104.956514][ T14] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.976174][ T14] usb 5-1: Product: syz [ 104.985149][ T14] usb 5-1: Manufacturer: syz [ 105.002242][ T14] usb 5-1: SerialNumber: syz [ 105.046183][ T14] usb 5-1: config 0 descriptor?? [ 105.089215][ T14] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 105.230006][ T4653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'. [ 105.253218][ T4653] netlink: 28 bytes leftover after parsing attributes in process `syz.2.86'. [ 105.370305][ T4638] loop3: detected capacity change from 0 to 40427 [ 105.471336][ T4638] F2FS-fs (loop3): invalid crc value [ 105.507964][ T4638] F2FS-fs (loop3): Found nat_bits in checkpoint [ 105.636334][ T4638] F2FS-fs (loop3): Start checkpoint disabled! [ 105.681874][ T4642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.704790][ T4642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.730173][ T4638] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 105.748571][ T14] gspca_vc032x: reg_r err -71 [ 105.754380][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.765213][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.841288][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.860434][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.886865][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.924500][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.929872][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 105.940076][ T4614] kworker/u4:9: attempt to access beyond end of device [ 105.940076][ T4614] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 105.981089][ T2184] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 106.052037][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.059105][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.064980][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.075890][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.082697][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.088118][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.093819][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.099199][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.105075][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.110420][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.122420][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.135859][ T14] gspca_vc032x: I2c Bus Busy Wait 00 [ 106.146968][ T14] gspca_vc032x: Unknown sensor... [ 106.154675][ T14] vc032x: probe of 5-1:0.0 failed with error -22 [ 106.171137][ T2184] usb 3-1: Using ep0 maxpacket: 8 [ 106.178184][ T14] usb 5-1: USB disconnect, device number 4 [ 106.211087][ T2184] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 106.237699][ T2184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 106.302902][ T2184] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 106.389649][ T2184] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.540470][ T2184] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 106.572236][ T2184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.864645][ T2184] usb 3-1: GET_CAPABILITIES returned 0 [ 106.874458][ T2184] usbtmc 3-1:16.0: can't read capabilities [ 107.511289][ T2184] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.701136][ T2184] usb 4-1: Using ep0 maxpacket: 32 [ 107.711530][ T2184] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 107.761178][ T2184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.789168][ T2184] usb 4-1: Product: syz [ 107.801242][ T2184] usb 4-1: Manufacturer: syz [ 107.820796][ T2184] usb 4-1: SerialNumber: syz [ 107.855164][ T2184] usb 4-1: config 0 descriptor?? [ 107.921384][ T2184] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 109.216312][ T4697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.100'. [ 109.252908][ T4697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.100'. [ 109.312752][ T2184] gspca_ov534_9: reg_r err -71 [ 109.861093][ T2184] gspca_ov534_9: Unknown sensor 0000 [ 109.861174][ T2184] ov534_9: probe of 4-1:0.0 failed with error -22 [ 109.897378][ T2184] usb 4-1: USB disconnect, device number 3 [ 109.966652][ T14] usb 3-1: USB disconnect, device number 4 [ 110.447566][ T4723] loop3: detected capacity change from 0 to 2048 [ 110.609156][ T4724] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 111.861076][ T951] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 112.101325][ T951] usb 4-1: Using ep0 maxpacket: 8 [ 112.116509][ T951] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 112.152206][ T4717] loop2: detected capacity change from 0 to 65536 [ 112.158764][ T951] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 112.175780][ T951] usb 4-1: config 0 has no interface number 0 [ 112.222480][ T951] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 112.244927][ T951] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.267153][ T951] usb 4-1: Product: syz [ 112.311119][ T951] usb 4-1: Manufacturer: syz [ 112.315785][ T951] usb 4-1: SerialNumber: syz [ 112.389154][ T951] usb 4-1: config 0 descriptor?? [ 112.420051][ T4717] XFS (loop2): Mounting V5 Filesystem [ 112.595531][ T4717] XFS (loop2): Ending clean mount [ 112.683337][ T4717] XFS (loop2): Quotacheck needed: Please wait. [ 112.728532][ T951] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x3a/0xd0, xfs_bnobt block 0x4 [ 112.760416][ T951] XFS (loop2): Unmount and run xfs_repair [ 112.803265][ T951] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 112.816466][ T951] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff AB3B............ [ 112.855244][ T951] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10 ................ [ 112.884955][ T951] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 112.916146][ T951] 00000030: 00 00 00 00 ac fb 87 b1 00 00 00 0d 00 00 00 03 ................ [ 112.935206][ T951] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00 ...9..?......... [ 112.950058][ T4754] tipc: Enabling of bearer rejected, failed to enable media [ 112.951094][ T951] 00000050: 00 00 00 00 00 00 08 00 00 00 00 00 00 00 00 00 ................ [ 112.980483][ T951] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.016931][ T951] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 113.044296][ T4358] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1d3/0x2c0" at daddr 0x4 len 2 error 74 [ 113.085416][ T4717] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 113.167195][ T4270] XFS (loop2): Unmounting Filesystem [ 113.257053][ T4758] 9pnet_fd: Insufficient options for proto=fd [ 113.311095][ T7] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 113.491102][ T7] usb 1-1: Using ep0 maxpacket: 16 [ 113.500953][ T7] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 113.537154][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.553495][ T7] usb 1-1: Product: syz [ 113.568102][ T7] usb 1-1: Manufacturer: syz [ 113.589688][ T7] usb 1-1: SerialNumber: syz [ 113.638754][ T7] usb 1-1: config 0 descriptor?? [ 113.694924][ T4766] tipc: Enabling of bearer rejected, failed to enable media [ 113.951077][ T22] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 114.060656][ T7] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 114.090182][ T7] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.105167][ T7] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 114.118312][ T7] usb 1-1: media controller created [ 114.152624][ T22] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 114.166360][ T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.179074][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.193187][ T22] usb 3-1: config 0 descriptor?? [ 114.326453][ T4772] fuse: Bad value for 'fd' [ 114.599563][ T14] usb 4-1: USB disconnect, device number 4 [ 114.606257][ T22] [drm] vendor descriptor length:b9 data:02 03 00 00 00 00 00 00 00 00 00 [ 114.678327][ T22] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 114.708711][ T22] [drm:udl_init] *ERROR* Selecting channel failed [ 114.772004][ T7] zl10353_read_register: readreg error (reg=127, ret==0) [ 114.783885][ T22] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 114.787205][ T7] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 114.820883][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 114.829151][ T22] [drm] Initialized udl on minor 2 [ 114.838780][ T22] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 114.855111][ T22] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 114.906782][ T22] usb 3-1: USB disconnect, device number 5 [ 114.925832][ T41] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 114.954675][ T41] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed [ 114.970046][ T7] usb 1-1: USB disconnect, device number 8 [ 114.983920][ T41] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 115.083462][ T7] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 115.452771][ T4784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.123'. [ 115.511860][ T4784] netlink: 20 bytes leftover after parsing attributes in process `syz.2.123'. [ 115.611531][ T4773] netlink: 20 bytes leftover after parsing attributes in process `syz.4.121'. [ 115.881144][ T4780] netlink: 'syz.4.121': attribute type 21 has an invalid length. [ 115.937465][ T4780] netlink: 156 bytes leftover after parsing attributes in process `syz.4.121'. [ 116.179560][ T4773] netlink: 'syz.4.121': attribute type 21 has an invalid length. [ 116.207725][ T4773] netlink: 156 bytes leftover after parsing attributes in process `syz.4.121'. [ 116.827277][ T4804] loop2: detected capacity change from 0 to 256 [ 118.841313][ T41] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.052679][ T41] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.071250][ T41] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00 [ 119.117455][ T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.147768][ T41] usb 1-1: config 0 descriptor?? [ 119.681631][ T41] logitech-djreceiver 0003:046D:C71F.0002: hidraw0: USB HID v0.00 Device [HID 046d:c71f] on usb-dummy_hcd.0-1/input0 [ 120.810570][ T41] usb 1-1: USB disconnect, device number 9 [ 121.268465][ T4835] loop3: detected capacity change from 0 to 64 [ 121.389566][ T4833] fido_id[4833]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 121.590987][ C0] sched: RT throttling activated [ 122.305047][ T4855] loop3: detected capacity change from 0 to 512 [ 123.619375][ T26] kauditd_printk_skb: 32 callbacks suppressed [ 123.619391][ T26] audit: type=1326 audit(1759850659.689:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4850 comm="syz.1.145" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee38eec9 code=0x0 [ 126.036925][ T4870] binder: 4860:4870 ioctl c0306201 0 returned -14 [ 126.080599][ T4874] loop2: detected capacity change from 0 to 128 [ 126.104807][ T4874] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 126.196790][ T4874] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 126.376960][ T4876] loop3: detected capacity change from 0 to 2048 [ 126.480946][ T4876] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 126.741110][ T4870] mkiss: ax0: crc mode is auto. [ 127.138654][ T26] audit: type=1326 audit(1759850663.209:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4888 comm="syz.0.158" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x0 [ 127.160908][ C1] vkms_vblank_simulate: vblank timer overrun [ 129.434007][ T951] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 129.714480][ T951] usb 1-1: Using ep0 maxpacket: 32 [ 129.957086][ T951] usb 1-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 129.996785][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.017448][ T951] usb 1-1: Product: syz [ 130.027326][ T951] usb 1-1: Manufacturer: syz [ 130.037893][ T951] usb 1-1: SerialNumber: syz [ 130.055380][ T951] usb 1-1: config 0 descriptor?? [ 130.083131][ T951] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 130.595690][ T4911] loop2: detected capacity change from 0 to 32768 [ 130.618689][ T4911] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.164 (4911) [ 130.668541][ T4911] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 130.698315][ T4911] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 130.731391][ T4911] BTRFS info (device loop2): using free space tree [ 130.917097][ T4911] BTRFS info (device loop2): enabling ssd optimizations [ 131.101546][ T22] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 131.283601][ T22] usb 5-1: Using ep0 maxpacket: 8 [ 131.301437][ T22] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 131.338122][ T22] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.376156][ T22] usb 5-1: config 0 has no interface number 0 [ 131.397028][ T4270] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 131.427030][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 131.495850][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.508051][ T22] usb 5-1: Product: syz [ 131.510279][ T951] gspca_ov534_9: reg_r err -71 [ 131.568287][ T22] usb 5-1: Manufacturer: syz [ 131.594883][ T22] usb 5-1: SerialNumber: syz [ 131.665576][ T22] usb 5-1: config 0 descriptor?? [ 131.692110][ T22] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 131.791966][ T22] usb 5-1: No valid video chain found. [ 131.871068][ T951] gspca_ov534_9: Unknown sensor 0000 [ 131.871137][ T951] ov534_9: probe of 1-1:0.0 failed with error -22 [ 131.923987][ T951] usb 1-1: USB disconnect, device number 10 [ 133.023892][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.030343][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.185193][ T26] audit: type=1326 audit(1759850669.259:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4964 comm="syz.0.173" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x0 [ 133.882201][ T2184] usb 5-1: USB disconnect, device number 5 [ 134.291215][ T4978] binder: 4972:4978 ioctl c0306201 0 returned -14 [ 134.420676][ T4978] loop3: detected capacity change from 0 to 2048 [ 134.453217][ T4990] netlink: 4 bytes leftover after parsing attributes in process `syz.2.181'. [ 134.475233][ T4978] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 134.544545][ T4978] mkiss: ax0: crc mode is auto. [ 134.611248][ T2184] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.811316][ T2184] usb 5-1: Using ep0 maxpacket: 16 [ 134.820749][ T2184] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 64 [ 134.844086][ T2184] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 134.880176][ T2184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.910481][ T4995] netlink: 'syz.0.184': attribute type 39 has an invalid length. [ 134.920625][ T2184] usb 5-1: Product: syz [ 134.929148][ T2184] usb 5-1: Manufacturer:   [ 134.941509][ T2184] usb 5-1: SerialNumber: syz [ 135.182260][ T2184] cdc_ncm 5-1:1.0: bind() failure [ 135.240712][ T2184] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 135.260153][ T2184] cdc_ncm 5-1:1.1: bind() failure [ 135.350389][ T2184] usb 5-1: USB disconnect, device number 6 [ 135.651250][ T1169] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 135.811147][ T1169] usb 1-1: device descriptor read/64, error -71 [ 136.091173][ T1169] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 136.251067][ T1169] usb 1-1: device descriptor read/64, error -71 [ 136.371260][ T1169] usb usb1-port1: attempt power cycle [ 136.521216][ T951] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 136.716972][ T951] usb 4-1: unable to get BOS descriptor or descriptor too short [ 136.734418][ T951] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 136.755603][ T951] usb 4-1: can't read configurations, error -71 [ 136.801090][ T1169] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 136.841731][ T1169] usb 1-1: device descriptor read/8, error -71 [ 137.121144][ T1169] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 137.171761][ T1169] usb 1-1: device descriptor read/8, error -71 [ 137.301201][ T1169] usb usb1-port1: unable to enumerate USB device [ 137.754123][ T1169] libceph: connect (1)[c::]:6789 error -101 [ 137.760887][ T1169] libceph: mon0 (1)[c::]:6789 connect error [ 137.807337][ T5019] ceph: No mds server is up or the cluster is laggy [ 139.417650][ T5042] tipc: Enabling of bearer rejected, failed to enable media [ 139.876140][ T5061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.204'. [ 139.921206][ T5061] device bridge_slave_1 left promiscuous mode [ 139.947952][ T5061] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.989202][ T5061] device bridge_slave_0 left promiscuous mode [ 140.004276][ T5061] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.045303][ T5063] loop3: detected capacity change from 0 to 8192 [ 140.116005][ T5063] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 140.305049][ T5063] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal [ 140.320669][ T5063] REISERFS (device loop3): using ordered data mode [ 140.334615][ T5063] reiserfs: using flush barriers [ 140.373541][ T5063] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 140.452828][ T5063] REISERFS (device loop3): checking transaction log (loop3) [ 140.503294][ T5063] REISERFS (device loop3): Using r5 hash to sort names [ 140.536242][ T5063] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 142.141299][ T1169] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 142.519754][ T1169] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 142.567201][ T1169] usb 3-1: config 0 has no interface number 0 [ 142.847433][ T1169] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 142.978289][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.038615][ T1169] usb 3-1: config 0 descriptor?? [ 143.047131][ T5085] loop0: detected capacity change from 0 to 128 [ 143.105433][ T1169] usb 3-1: selecting invalid altsetting 1 [ 143.163979][ T1169] dvb_ttusb_budget: ttusb_init_controller: error [ 143.195934][ T1169] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 143.231674][ T5085] syz.0.211: attempt to access beyond end of device [ 143.231674][ T5085] loop0: rw=1, sector=138, nr_sectors = 2 limit=128 [ 143.290250][ T5085] Buffer I/O error on dev loop0, logical block 69, lost async page write [ 143.398552][ T1169] DVB: Unable to find symbol cx22700_attach() [ 143.526662][ T1169] DVB: Unable to find symbol tda10046_attach() [ 143.547388][ T1169] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 143.567962][ T1169] usb 3-1: USB disconnect, device number 6 [ 143.688627][ T5102] netlink: 28 bytes leftover after parsing attributes in process `syz.4.217'. [ 143.720613][ T5102] netlink: 60 bytes leftover after parsing attributes in process `syz.4.217'. [ 143.790316][ T5104] loop0: detected capacity change from 0 to 8192 [ 143.851142][ T5104] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 143.871217][ T5104] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 143.921359][ T5104] REISERFS (device loop0): using ordered data mode [ 143.951624][ T5104] reiserfs: using flush barriers [ 143.986667][ T5104] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 144.016256][ T5104] REISERFS (device loop0): checking transaction log (loop0) [ 144.212512][ T5104] REISERFS (device loop0): Using r5 hash to sort names [ 144.231331][ T5104] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 144.992362][ T5124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.224'. [ 145.528185][ T5134] loop3: detected capacity change from 0 to 256 [ 145.540756][ T5134] exfat: Deprecated parameter 'utf8' [ 145.881353][ T5136] loop0: detected capacity change from 0 to 256 [ 145.921008][ T5136] exfat: Deprecated parameter 'utf8' [ 145.927021][ T5136] exfat: Bad value for 'allow_utime' [ 145.946672][ T5134] exfat: Bad value for 'allow_utime' [ 146.402601][ T4420] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.421824][ T4949] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 146.790154][ T5141] netlink: 28 bytes leftover after parsing attributes in process `syz.3.231'. [ 146.831167][ T5141] netlink: 60 bytes leftover after parsing attributes in process `syz.3.231'. [ 148.811370][ T5177] loop2: detected capacity change from 0 to 512 [ 148.977423][ T5177] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 149.045088][ T5177] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 149.055281][ T5177] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.245: Failed to acquire dquot type 1 [ 149.082853][ T5177] EXT4-fs (loop2): 1 truncate cleaned up [ 149.114852][ T5177] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 149.164202][ T5177] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 149.225203][ T5194] tipc: Enabling of bearer rejected, failed to enable media [ 149.438464][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 152.279837][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.256'. [ 152.299631][ T5221] device bridge_slave_1 left promiscuous mode [ 152.308798][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.394118][ T5221] device bridge_slave_0 left promiscuous mode [ 152.413770][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.000012][ T5225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.259'. [ 153.781552][ T4341] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 154.011193][ T4341] usb 5-1: Using ep0 maxpacket: 8 [ 154.021309][ T4341] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 154.052828][ T4341] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 154.075803][ T5250] loop2: detected capacity change from 0 to 4096 [ 154.086637][ T4341] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.121138][ T4326] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 154.137586][ T4341] usb 5-1: config 0 descriptor?? [ 154.156838][ T5250] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 154.206087][ T5250] ntfs3: loop2: Failed to load $Extend. [ 154.291207][ T4326] usb 4-1: device descriptor read/64, error -71 [ 154.350185][ T4341] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 154.561240][ T4326] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 154.740727][ T4326] usb 4-1: device descriptor read/64, error -71 [ 154.871296][ T4326] usb usb4-port1: attempt power cycle [ 155.150764][ T4380] usb 5-1: USB disconnect, device number 7 [ 155.421226][ T4326] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 155.462265][ T4326] usb 4-1: device descriptor read/8, error -71 [ 155.751333][ T4326] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 155.791776][ T4326] usb 4-1: device descriptor read/8, error -71 [ 155.833963][ T5271] loop4: detected capacity change from 0 to 512 [ 155.923516][ T4326] usb usb4-port1: unable to enumerate USB device [ 155.986561][ T5271] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 155.986656][ T5271] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 156.148981][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 157.611218][ T1169] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 157.819208][ T1169] usb 4-1: unable to get BOS descriptor or descriptor too short [ 157.856206][ T1169] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 157.913309][ T1169] usb 4-1: can't read configurations, error -71 [ 158.005194][ T5313] loop4: detected capacity change from 0 to 256 [ 158.050835][ T5313] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 158.380851][ T5324] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 158.611040][ T4326] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 159.435259][ T4326] usb 3-1: device descriptor read/64, error -71 [ 159.746600][ T4326] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 159.814458][ T5320] loop4: detected capacity change from 0 to 32768 [ 159.858941][ T5338] syz.0.295 (5338) used greatest stack depth: 20456 bytes left [ 159.911371][ T4326] usb 3-1: device descriptor read/64, error -71 [ 159.940139][ T5320] XFS (loop4): Mounting V5 Filesystem [ 160.017307][ T5320] XFS (loop4): Ending clean mount [ 160.037288][ T4326] usb usb3-port1: attempt power cycle [ 160.120559][ T4273] XFS (loop4): Unmounting Filesystem [ 160.451239][ T4326] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 160.492671][ T4326] usb 3-1: device descriptor read/8, error -71 [ 160.881094][ T4326] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 161.281202][ T4341] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 161.669072][ T4341] usb 1-1: unable to get BOS descriptor or descriptor too short [ 161.697754][ T4341] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 161.717093][ T4341] usb 1-1: can't read configurations, error -71 [ 161.985935][ T4326] usb 3-1: device not accepting address 10, error -71 [ 161.993611][ T4326] usb usb3-port1: unable to enumerate USB device [ 164.182131][ T5405] tipc: Enabling of bearer rejected, failed to enable media [ 164.194764][ T5401] input: syz0 as /devices/virtual/input/input6 [ 164.920205][ T26] audit: type=1326 audit(1759850700.989:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5419 comm="syz.1.315" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee38eec9 code=0x0 [ 166.221055][ T951] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 166.290841][ T5432] netlink: 'syz.1.319': attribute type 10 has an invalid length. [ 166.391152][ T951] usb 4-1: device descriptor read/64, error -71 [ 166.414658][ T5432] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 166.751073][ T951] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 167.651084][ T951] usb 4-1: device descriptor read/64, error -71 [ 167.679115][ T5440] netlink: 28 bytes leftover after parsing attributes in process `syz.4.321'. [ 167.796007][ T951] usb usb4-port1: attempt power cycle [ 167.813787][ T5440] netlink: 44 bytes leftover after parsing attributes in process `syz.4.321'. [ 170.181049][ T951] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 170.407117][ T951] usb 4-1: device not accepting address 15, error -71 [ 171.879178][ T5462] netlink: 4 bytes leftover after parsing attributes in process `syz.4.329'. [ 172.016044][ T5467] tipc: Enabling of bearer rejected, failed to enable media [ 172.248500][ T5479] netlink: 28 bytes leftover after parsing attributes in process `syz.3.334'. [ 172.284640][ T5479] netlink: 44 bytes leftover after parsing attributes in process `syz.3.334'. [ 172.721031][ T4341] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 172.901029][ T4341] usb 3-1: device descriptor read/64, error -71 [ 173.111089][ T951] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 173.191051][ T4341] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 173.311103][ T951] usb 4-1: Using ep0 maxpacket: 8 [ 173.347527][ T951] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 173.358931][ T4341] usb 3-1: device descriptor read/64, error -71 [ 173.379986][ T951] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 173.429115][ T951] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 173.458261][ T951] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 173.481179][ T4341] usb usb3-port1: attempt power cycle [ 173.521057][ T2184] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 173.537615][ T951] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 173.567416][ T951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.738404][ T2184] usb 5-1: config index 0 descriptor too short (expected 8192, got 18) [ 173.770591][ T2184] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 173.809322][ T2184] usb 5-1: config 0 has no interfaces? [ 173.836095][ T951] usb 4-1: GET_CAPABILITIES returned 0 [ 173.841827][ T951] usbtmc 4-1:16.0: can't read capabilities [ 173.886151][ T2184] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 173.901121][ T4341] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 173.915934][ T2184] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.951829][ T4341] usb 3-1: device descriptor read/8, error -71 [ 173.965286][ T2184] usb 5-1: Product: syz [ 173.969645][ T2184] usb 5-1: Manufacturer: syz [ 174.001998][ T2184] usb 5-1: SerialNumber: syz [ 174.084368][ T2184] usb 5-1: config 0 descriptor?? [ 174.261091][ T4341] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 174.311862][ T4341] usb 3-1: device descriptor read/8, error -71 [ 174.441780][ T4341] usb usb3-port1: unable to enumerate USB device [ 176.318925][ T4326] usb 4-1: USB disconnect, device number 17 [ 176.637734][ T5506] loop0: detected capacity change from 0 to 32768 [ 176.695211][ T5506] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.339 (5506) [ 176.773404][ T5506] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 176.857955][ T5506] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 176.889509][ T5524] tipc: Enabling of bearer rejected, failed to enable media [ 176.925962][ T5506] BTRFS info (device loop0): turning off barriers [ 177.009573][ T5506] BTRFS info (device loop0): enabling ssd optimizations [ 177.029677][ T5521] input: syz0 as /devices/virtual/input/input7 [ 177.061278][ T5506] BTRFS info (device loop0): using spread ssd allocation scheme [ 177.069007][ T5506] BTRFS info (device loop0): using free space tree [ 177.180816][ T5531] netlink: 28 bytes leftover after parsing attributes in process `syz.1.346'. [ 177.208674][ T5531] netlink: 44 bytes leftover after parsing attributes in process `syz.1.346'. [ 178.576039][ T5506] BTRFS error (device loop0): open_ctree failed: -12 [ 178.822651][ T2184] usb 5-1: USB disconnect, device number 8 [ 180.031176][ T5570] tipc: Enabling of bearer rejected, failed to enable media [ 180.648338][ T5579] loop0: detected capacity change from 0 to 32768 [ 181.397513][ T5593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.358'. [ 181.438942][ T5593] netlink: 44 bytes leftover after parsing attributes in process `syz.0.358'. [ 183.540132][ T26] audit: type=1326 audit(1759850719.609:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5632 comm="syz.2.371" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x0 [ 184.533504][ T5567] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 184.731098][ T5567] usb 1-1: Using ep0 maxpacket: 8 [ 184.739535][ T5567] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 184.762125][ T5567] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.818065][ T5567] usb 1-1: config 0 has no interface number 0 [ 184.849618][ T5567] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 185.761041][ T5567] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.771536][ T5567] usb 1-1: Product: syz [ 185.775807][ T5567] usb 1-1: Manufacturer: syz [ 185.818034][ T5567] usb 1-1: SerialNumber: syz [ 185.871402][ T5567] usb 1-1: config 0 descriptor?? [ 185.890880][ T5567] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 185.927482][ T5567] usb 1-1: No valid video chain found. [ 187.687472][ T5668] ubi31: attaching mtd0 [ 188.046953][ T5566] usb 1-1: USB disconnect, device number 17 [ 188.421188][ T5562] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 188.591807][ T5567] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 188.621083][ T5562] usb 3-1: Using ep0 maxpacket: 32 [ 188.630478][ T5562] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 188.766849][ T5562] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.831018][ T5567] usb 4-1: Using ep0 maxpacket: 8 [ 188.866560][ T5567] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 188.886976][ T5562] usb 3-1: Product: syz [ 188.929210][ T5562] usb 3-1: Manufacturer: syz [ 188.963141][ T5567] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 188.987786][ T5562] usb 3-1: SerialNumber: syz [ 189.057236][ T5562] usb 3-1: config 0 descriptor?? [ 189.095274][ T5567] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 189.277582][ T5562] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 189.291431][ T5567] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.141946][ T5567] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.191850][ T26] audit: type=1326 audit(1759850726.269:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.4.385" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03d3d8eec9 code=0x0 [ 190.245225][ T5567] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.509602][ T5567] usb 4-1: GET_CAPABILITIES returned 0 [ 190.519355][ T5567] usbtmc 4-1:16.0: can't read capabilities [ 191.146259][ T5562] gspca_ov534_9: reg_r err -71 [ 191.981382][ T5705] netlink: 'syz.4.391': attribute type 10 has an invalid length. [ 192.241475][ T5705] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 193.004792][ T5562] gspca_ov534_9: Unknown sensor 0000 [ 193.004860][ T5562] ov534_9: probe of 3-1:0.0 failed with error -22 [ 193.026628][ T5562] usb 3-1: USB disconnect, device number 15 [ 194.367066][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.375695][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.838435][ T26] audit: type=1326 audit(1759850730.909:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5733 comm="syz.2.401" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x0 [ 194.904342][ T5734] loop0: detected capacity change from 0 to 2048 [ 194.913284][ T5734] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 194.974946][ T4420] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 195.158334][ T5562] usb 4-1: USB disconnect, device number 18 [ 195.286585][ T5734] mkiss: ax0: crc mode is auto. [ 195.701069][ T5562] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 195.971278][ T5562] usb 4-1: Using ep0 maxpacket: 32 [ 196.009792][ T5562] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 196.146015][ T5562] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.290029][ T5562] usb 4-1: Product: syz [ 196.305056][ T5743] ceph: No mds server is up or the cluster is laggy [ 196.382104][ T5562] usb 4-1: Manufacturer: syz [ 196.447759][ T5562] usb 4-1: SerialNumber: syz [ 196.562996][ T5562] usb 4-1: config 0 descriptor?? [ 196.632882][ T5562] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 198.064030][ T5562] gspca_ov534_9: reg_r err -32 [ 198.422172][ T5562] gspca_ov534_9: Unknown sensor 0000 [ 198.424930][ T5562] ov534_9: probe of 4-1:0.0 failed with error -22 [ 198.461395][ T5567] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 198.660374][ T5562] usb 4-1: USB disconnect, device number 19 [ 198.715699][ T5567] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.851538][ T5567] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 198.993314][ T5567] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 199.186853][ T5567] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.199031][ T5567] usb 3-1: config 0 descriptor?? [ 199.241944][ T26] audit: type=1326 audit(1759850735.319:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5779 comm="syz.3.417" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f597898eec9 code=0x0 [ 199.765829][ T5786] tipc: Enabling of bearer rejected, failed to enable media [ 199.850760][ T5790] loop0: detected capacity change from 0 to 256 [ 199.876046][ T5790] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 200.822413][ T5809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.426'. [ 201.187340][ T5811] loop4: detected capacity change from 0 to 2048 [ 201.205677][ T5566] usb 3-1: USB disconnect, device number 16 [ 201.296442][ T5811] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 201.400025][ T5811] mkiss: ax0: crc mode is auto. [ 201.621709][ T4276] Bluetooth: hci2: command 0x0406 tx timeout [ 201.630918][ T4276] Bluetooth: hci3: command 0x0406 tx timeout [ 201.638574][ T4276] Bluetooth: hci1: command 0x0406 tx timeout [ 201.646193][ T4276] Bluetooth: hci4: command 0x0406 tx timeout [ 201.653628][ T4284] Bluetooth: hci0: command 0x0406 tx timeout [ 203.686034][ T5842] tipc: Enabling of bearer rejected, failed to enable media [ 204.951023][ T5566] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 205.155075][ T5854] trusted_key: encrypted_key: insufficient parameters specified [ 205.230562][ T5566] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 205.300155][ T5566] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 205.474594][ T5566] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 205.752469][ T5566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.872020][ T5566] usb 1-1: config 0 descriptor?? [ 207.737799][ T4392] usb 1-1: USB disconnect, device number 18 [ 207.829200][ T5882] loop3: detected capacity change from 0 to 2048 [ 207.836612][ T5882] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 207.863076][ T5883] syz.4.448 uses obsolete (PF_INET,SOCK_PACKET) [ 207.888203][ T4420] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 208.135969][ T5882] mkiss: ax0: crc mode is auto. [ 208.493289][ T5891] loop4: detected capacity change from 0 to 2048 [ 208.666772][ T5895] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 210.284610][ T5912] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 212.601274][ T41] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 212.791174][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 212.797984][ T41] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 212.844302][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.893286][ T41] usb 4-1: config 0 has no interface number 0 [ 212.919578][ T41] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 212.945702][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.976770][ T41] usb 4-1: Product: syz [ 212.990030][ T41] usb 4-1: Manufacturer: syz [ 213.008453][ T41] usb 4-1: SerialNumber: syz [ 213.036898][ T41] usb 4-1: config 0 descriptor?? [ 213.257313][ T41] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 213.283322][ T41] usb 4-1: No valid video chain found. [ 213.332120][ T41] usb 4-1: USB disconnect, device number 20 [ 214.039818][ T5954] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 214.088766][ T5952] loop2: detected capacity change from 0 to 2048 [ 214.211074][ T5952] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 215.058767][ T5952] mkiss: ax0: crc mode is auto. [ 215.498253][ T5970] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 217.600634][ T6006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 217.883570][ T6008] loop4: detected capacity change from 0 to 256 [ 218.030409][ T6008] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 219.581040][ T5567] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 219.741077][ T5567] usb 1-1: device descriptor read/64, error -71 [ 220.011100][ T5567] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 220.161023][ T5567] usb 1-1: device descriptor read/64, error -71 [ 220.281169][ T5567] usb usb1-port1: attempt power cycle [ 220.381594][ T6041] netlink: 'syz.4.494': attribute type 10 has an invalid length. [ 220.389158][ T6037] loop3: detected capacity change from 0 to 32768 [ 220.426878][ T6037] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.492 (6037) [ 220.513125][ T6037] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 220.571074][ T6037] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 220.580568][ T6037] BTRFS info (device loop3): turning off barriers [ 220.611095][ T6037] BTRFS error (device loop3): support for check_integrity* not compiled in! [ 220.628397][ T6037] BTRFS error (device loop3): open_ctree failed: -22 [ 220.691053][ T5567] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 220.731750][ T5567] usb 1-1: device descriptor read/8, error -71 [ 220.767896][ T4420] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by udevd (4420) [ 220.911542][ T6048] loop2: detected capacity change from 0 to 128 [ 220.965285][ T6048] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 220.993470][ T6048] ext4 filesystem being mounted at /98/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 221.025766][ T5567] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 221.061776][ T5567] usb 1-1: device descriptor read/8, error -71 [ 221.191320][ T5567] usb usb1-port1: unable to enumerate USB device [ 222.280800][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 222.922669][ T6066] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 223.216064][ T6077] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 224.919541][ T6097] loop0: detected capacity change from 0 to 2048 [ 225.053126][ T6097] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 225.190803][ T6097] mkiss: ax0: crc mode is auto. [ 225.521275][ T6102] loop2: detected capacity change from 0 to 512 [ 225.749858][ T6102] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 225.782330][ T6102] ext4 filesystem being mounted at /101/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 226.860547][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 227.981397][ T6115] tipc: Enabling of bearer rejected, failed to enable media [ 228.101074][ T2184] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 228.234135][ T6129] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 228.292714][ T2184] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.340665][ T2184] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 228.384087][ T2184] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 228.429712][ T2184] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 228.463949][ T2184] usb 3-1: SerialNumber: syz [ 228.700440][ T2184] usb 3-1: cannot find UAC_HEADER [ 228.903093][ T6124] ceph: No mds server is up or the cluster is laggy [ 228.934891][ T2184] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 229.062037][ T2184] usb 3-1: USB disconnect, device number 17 [ 229.825354][ T4420] udevd[4420]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 229.895658][ T6150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.520'. [ 230.010154][ T6152] netlink: 112 bytes leftover after parsing attributes in process `syz.1.522'. [ 230.233953][ T6158] loop0: detected capacity change from 0 to 256 [ 230.875724][ T6164] loop0: detected capacity change from 0 to 4096 [ 230.961688][ T6164] EXT4-fs (loop0): Test dummy encryption mode enabled [ 231.853657][ T6164] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 231.904587][ T6164] System zones: 0-5 [ 231.928997][ T6176] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 231.948624][ T6164] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 232.884607][ T6183] loop4: detected capacity change from 0 to 2048 [ 233.331703][ T6183] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 233.401056][ T41] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 233.507788][ T6183] mkiss: ax0: crc mode is auto. [ 233.772888][ T41] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 234.511034][ T41] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 234.531476][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 234.601138][ T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.671883][ T41] usb 3-1: config 0 descriptor?? [ 234.991103][ T41] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 235.111127][ T5566] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 235.192409][ T6205] netlink: 112 bytes leftover after parsing attributes in process `syz.1.534'. [ 235.202097][ T41] usb 4-1: Using ep0 maxpacket: 8 [ 235.209085][ T41] usb 4-1: config 0 has an invalid interface number: 31 but max is 0 [ 235.223549][ T41] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.237391][ T41] usb 4-1: config 0 has no interface number 0 [ 235.268510][ T41] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 235.293152][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.312464][ T41] usb 4-1: Product: syz [ 235.316704][ T41] usb 4-1: Manufacturer: syz [ 235.322035][ T41] usb 4-1: SerialNumber: syz [ 235.334444][ T5566] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 235.340778][ T41] usb 4-1: config 0 descriptor?? [ 235.354219][ T5566] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 235.365550][ T6208] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 235.379813][ T5566] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 235.399340][ T5566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 235.425402][ T5566] usb 1-1: SerialNumber: syz [ 235.586185][ T41] usb 4-1: Found UVC 0.04 device syz (046d:08c3) [ 235.597202][ T41] usb 4-1: No valid video chain found. [ 235.624170][ T41] usb 4-1: USB disconnect, device number 21 [ 235.646912][ T5566] usb 1-1: cannot find UAC_HEADER [ 235.674526][ T6217] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 235.731102][ T5566] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 235.750240][ T5566] usb 1-1: USB disconnect, device number 23 [ 235.961312][ T4392] usb 3-1: USB disconnect, device number 18 [ 236.048059][ T4420] udevd[4420]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 237.107000][ T6242] netlink: 112 bytes leftover after parsing attributes in process `syz.4.545'. [ 237.879183][ T6252] loop4: detected capacity change from 0 to 2048 [ 237.948113][ T6252] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 238.025398][ T6252] mkiss: ax0: crc mode is auto. [ 238.648956][ T5564] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 238.881143][ T5564] usb 3-1: Using ep0 maxpacket: 8 [ 238.892881][ T5564] usb 3-1: config 0 has an invalid interface number: 31 but max is 0 [ 238.950473][ T5564] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 238.972653][ T6269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.555'. [ 238.984633][ T5564] usb 3-1: config 0 has no interface number 0 [ 239.014258][ T5564] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 239.041113][ T5564] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.059451][ T5564] usb 3-1: Product: syz [ 239.069621][ T5564] usb 3-1: Manufacturer: syz [ 239.077153][ T5564] usb 3-1: SerialNumber: syz [ 239.112564][ T5564] usb 3-1: config 0 descriptor?? [ 239.331266][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 239.338801][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 239.346263][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 239.353765][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 239.361243][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 239.369966][ T5564] usb 3-1: Found UVC 0.04 device syz (046d:08c3) [ 239.380800][ T5564] usb 3-1: No valid video chain found. [ 239.419047][ T5564] usb 3-1: USB disconnect, device number 19 [ 239.523817][ T6271] netlink: 112 bytes leftover after parsing attributes in process `syz.3.556'. [ 240.358714][ T6291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.562'. [ 240.861153][ T5567] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 241.276536][ T5567] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 241.310521][ T5567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.360457][ T5567] usb 1-1: config 0 descriptor?? [ 241.396827][ T5567] cp210x 1-1:0.0: cp210x converter detected [ 241.596449][ T5567] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 241.628964][ T5567] cp210x 1-1:0.0: querying part number failed [ 241.642373][ T6306] netlink: 112 bytes leftover after parsing attributes in process `syz.1.568'. [ 241.669639][ T5567] usb 1-1: cp210x converter now attached to ttyUSB0 [ 241.901068][ T41] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 242.209760][ T41] usb 5-1: Using ep0 maxpacket: 32 [ 242.227233][ T41] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.788198][ T41] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 243.039329][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.060304][ T41] usb 5-1: Product: syz [ 243.083158][ T41] usb 5-1: Manufacturer: syz [ 243.094882][ T41] usb 5-1: SerialNumber: syz [ 243.126088][ T41] usb 5-1: config 0 descriptor?? [ 243.675573][ T5567] usb 1-1: USB disconnect, device number 24 [ 243.694399][ T5567] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 243.765551][ T5567] cp210x 1-1:0.0: device disconnected [ 244.058296][ T6335] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.085355][ T6335] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.712788][ T6341] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 245.865622][ T41] usb 5-1: USB disconnect, device number 9 [ 245.918594][ T6352] netlink: 'syz.3.582': attribute type 10 has an invalid length. [ 245.974440][ T6352] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 246.175502][ T6360] input: syz0 as /devices/virtual/input/input8 [ 246.392596][ T5564] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 246.592651][ T5564] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 246.608722][ T5564] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.667735][ T5564] usb 1-1: config 0 descriptor?? [ 246.701929][ T5564] cp210x 1-1:0.0: cp210x converter detected [ 246.944428][ T5564] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -32 [ 246.962998][ T5564] cp210x 1-1:0.0: querying part number failed [ 246.981404][ T5564] usb 1-1: cp210x converter now attached to ttyUSB0 [ 248.729480][ T6397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.595'. [ 249.228236][ T5567] usb 1-1: USB disconnect, device number 25 [ 249.264257][ T5567] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 249.357601][ T6401] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 249.412870][ T5567] cp210x 1-1:0.0: device disconnected [ 250.129615][ T6416] netlink: 'syz.4.601': attribute type 10 has an invalid length. [ 251.599380][ T6436] loop0: detected capacity change from 0 to 2048 [ 251.668255][ T6436] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 251.875898][ T6435] mkiss: ax0: crc mode is auto. [ 255.814637][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.821814][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.483638][ T6519] netlink: 4 bytes leftover after parsing attributes in process `syz.2.628'. [ 258.681412][ T5566] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 258.910995][ T5566] usb 1-1: Using ep0 maxpacket: 8 [ 259.034402][ T5566] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 259.051720][ T5566] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 259.119475][ T5566] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 259.748708][ T5566] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.848157][ T5566] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 259.895324][ T5566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.995766][ T6532] netlink: 112 bytes leftover after parsing attributes in process `syz.1.633'. [ 260.162043][ T5566] usb 1-1: GET_CAPABILITIES returned 0 [ 260.167773][ T5566] usbtmc 1-1:16.0: can't read capabilities [ 262.671832][ T4392] usb 1-1: USB disconnect, device number 26 [ 263.093904][ T6572] trusted_key: encrypted_key: insufficient parameters specified [ 264.220998][ T4392] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 264.565046][ T4392] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.596524][ T4392] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.610101][ T6584] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 264.645716][ T4392] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 264.863497][ T4392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 264.896765][ T4392] usb 1-1: SerialNumber: syz [ 265.119972][ T4392] usb 1-1: 0:2 : does not exist [ 265.186593][ T4392] usb 1-1: USB disconnect, device number 27 [ 265.493136][ T4420] udevd[4420]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.182642][ T6614] trusted_key: encrypted_key: insufficient parameters specified [ 267.951413][ T6615] tipc: Enabling of bearer rejected, failed to enable media [ 268.931527][ T26] audit: type=1326 audit(1759850805.009:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.069760][ T26] audit: type=1326 audit(1759850805.039:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.091903][ C0] vkms_vblank_simulate: vblank timer overrun [ 269.126059][ T26] audit: type=1326 audit(1759850805.039:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.153838][ T26] audit: type=1326 audit(1759850805.039:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.177680][ T26] audit: type=1326 audit(1759850805.039:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.201076][ T26] audit: type=1326 audit(1759850805.039:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.240462][ T26] audit: type=1326 audit(1759850805.039:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.276939][ T26] audit: type=1326 audit(1759850805.039:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.303616][ T26] audit: type=1326 audit(1759850805.039:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.329799][ T26] audit: type=1326 audit(1759850805.039:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6635 comm="syz.0.667" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7ff212b8eec9 code=0x7ffc0000 [ 269.358442][ T6636] loop0: detected capacity change from 0 to 128 [ 269.415732][ T6636] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 269.430538][ T6636] hpfs: filesystem error: improperly stopped [ 269.454545][ T6636] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 269.464781][ T6636] hpfs: You really don't want any checks? You are crazy... [ 269.481992][ T6636] hpfs: hpfs_map_sector(): read error [ 269.487762][ T6636] hpfs: code page support is disabled [ 269.502337][ T6636] hpfs: hpfs_map_4sectors(): unaligned read [ 269.509810][ T6636] hpfs: hpfs_map_4sectors(): unaligned read [ 269.521288][ T6636] hpfs: filesystem error: unable to find root dir [ 273.160319][ T6679] loop4: detected capacity change from 0 to 8192 [ 273.243867][ T6679] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 273.282574][ T6679] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 273.297681][ T6679] REISERFS (device loop4): using ordered data mode [ 273.327781][ T6679] reiserfs: using flush barriers [ 273.430734][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.3.685'. [ 273.494414][ T6679] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 273.551657][ T6679] REISERFS (device loop4): checking transaction log (loop4) [ 273.568551][ T6679] REISERFS (device loop4): Using r5 hash to sort names [ 273.606656][ T6679] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 274.425465][ T6706] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 276.236862][ T6719] fuse: Bad value for 'fd' [ 277.173682][ T6734] loop2: detected capacity change from 0 to 8192 [ 277.228672][ T6734] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 277.259739][ T6734] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 277.279257][ T6734] REISERFS (device loop2): using ordered data mode [ 277.293194][ T6734] reiserfs: using flush barriers [ 277.302207][ T6734] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 277.319954][ T6734] REISERFS (device loop2): checking transaction log (loop2) [ 277.368907][ T6734] REISERFS (device loop2): Using r5 hash to sort names [ 277.380846][ T6734] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 279.001098][ T5566] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 279.221030][ T5566] usb 5-1: Using ep0 maxpacket: 32 [ 279.231546][ T5566] usb 5-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice= d.65 [ 279.251110][ T5566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.273713][ T5566] usb 5-1: Product: syz [ 279.281308][ T5566] usb 5-1: Manufacturer: syz [ 279.286036][ T5566] usb 5-1: SerialNumber: syz [ 279.303730][ T5566] usb 5-1: config 0 descriptor?? [ 279.319461][ T5566] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 279.915969][ T5566] gspca_vc032x: reg_r err -71 [ 279.924484][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.929825][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.975323][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 279.999815][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.017490][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.036088][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.066317][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.127133][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.144311][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.170100][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.190325][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.200595][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.210560][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.235446][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.251003][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.256616][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.281147][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.301082][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.306466][ T5566] gspca_vc032x: I2c Bus Busy Wait 00 [ 280.340949][ T5566] gspca_vc032x: Unknown sensor... [ 280.346100][ T5566] vc032x: probe of 5-1:0.0 failed with error -22 [ 280.402097][ T5566] usb 5-1: USB disconnect, device number 10 [ 281.321194][ T126] usb 1-1: new full-speed USB device number 28 using dummy_hcd [ 281.523945][ T126] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 281.545204][ T126] usb 1-1: config 0 has no interface number 0 [ 281.570366][ T126] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 281.616983][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.669683][ T126] usb 1-1: config 0 descriptor?? [ 281.694866][ T126] usb 1-1: selecting invalid altsetting 1 [ 281.715834][ T126] dvb_ttusb_budget: ttusb_init_controller: error [ 281.750881][ T126] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 282.010232][ T126] DVB: Unable to find symbol cx22700_attach() [ 282.114959][ T126] DVB: Unable to find symbol tda10046_attach() [ 282.122513][ T126] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 282.175599][ T126] usb 1-1: USB disconnect, device number 28 [ 282.664319][ T6799] loop0: detected capacity change from 0 to 128 [ 282.893325][ T6799] qnx6: unable to read the first superblock [ 284.081081][ T5566] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 284.441082][ T5566] usb 3-1: Using ep0 maxpacket: 16 [ 284.449791][ T5566] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.496629][ T5566] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 284.528424][ T5566] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 284.541178][ T5566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.569703][ T5566] usb 3-1: config 0 descriptor?? [ 284.733064][ T5566] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 284.865993][ T6820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.723'. [ 287.231910][ T5566] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 287.422956][ T5566] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 287.442183][ T5566] usb 4-1: config 0 has no interface number 0 [ 287.479598][ T5566] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 287.540338][ T5566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.615389][ T5566] usb 4-1: config 0 descriptor?? [ 287.674074][ T5566] usb 4-1: selecting invalid altsetting 1 [ 287.729178][ T5566] dvb_ttusb_budget: ttusb_init_controller: error [ 287.784126][ T5566] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 288.000178][ T5566] DVB: Unable to find symbol cx22700_attach() [ 288.093695][ T26] kauditd_printk_skb: 82 callbacks suppressed [ 288.093711][ T26] audit: type=1326 audit(1759850824.159:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 288.173451][ T22] usb 3-1: USB disconnect, device number 20 [ 288.228868][ T26] audit: type=1326 audit(1759850824.169:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 288.287803][ T5566] DVB: Unable to find symbol tda10046_attach() [ 288.294704][ T5566] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 288.337286][ T5566] usb 4-1: USB disconnect, device number 22 [ 288.353513][ T26] audit: type=1326 audit(1759850824.209:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 288.506969][ T26] audit: type=1326 audit(1759850824.209:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 288.605183][ T26] audit: type=1326 audit(1759850824.209:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 288.660547][ T26] audit: type=1326 audit(1759850824.209:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 288.737256][ T26] audit: type=1326 audit(1759850824.209:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff5ee38d710 code=0x7ffc0000 [ 288.741134][ T6861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 288.809097][ T26] audit: type=1326 audit(1759850824.209:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 288.892989][ T26] audit: type=1326 audit(1759850824.209:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 288.966888][ T26] audit: type=1326 audit(1759850824.209:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6844 comm="syz.1.732" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff5ee38eec9 code=0x7ffc0000 [ 291.561603][ T6875] tipc: Enabling of bearer rejected, failed to enable media [ 292.781012][ T2184] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 292.983207][ T2184] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 293.016880][ T2184] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 293.079767][ T2184] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 293.135967][ T2184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 293.200358][ T2184] usb 5-1: SerialNumber: syz [ 293.440408][ T2184] usb 5-1: 0:2 : does not exist [ 293.490449][ T2184] usb 5-1: USB disconnect, device number 11 [ 293.577822][ T4420] udevd[4420]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 297.044315][ T6941] loop2: detected capacity change from 0 to 512 [ 297.197375][ T6941] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.755: iget: bad i_size value: 38620345925642 [ 297.264993][ T6941] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.755: couldn't read orphan inode 15 (err -117) [ 297.277478][ T6941] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 297.321388][ T6945] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 297.551976][ T4270] EXT4-fs (loop2): unmounting filesystem. [ 297.923888][ T5566] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 298.163760][ T5566] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 298.177167][ T5566] usb 3-1: config 0 has no interface number 0 [ 298.410973][ T5566] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 298.507286][ T5566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.561827][ T5566] usb 3-1: config 0 descriptor?? [ 298.590241][ T5566] usb 3-1: selecting invalid altsetting 1 [ 298.624166][ T5566] dvb_ttusb_budget: ttusb_init_controller: error [ 298.630586][ T5566] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 298.640651][ T6959] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 298.834597][ T5566] DVB: Unable to find symbol cx22700_attach() [ 298.995748][ T5566] DVB: Unable to find symbol tda10046_attach() [ 299.012736][ T5566] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 299.041365][ T5566] usb 3-1: USB disconnect, device number 21 [ 299.965494][ T6973] netlink: 4 bytes leftover after parsing attributes in process `syz.0.763'. [ 302.586534][ T6986] loop2: detected capacity change from 0 to 2048 [ 302.628034][ T6986] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 303.052528][ T6986] mkiss: ax0: crc mode is auto. [ 304.111014][ T126] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 304.313752][ T126] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 304.340952][ T126] usb 1-1: config 0 has no interface number 0 [ 304.347248][ T126] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 304.377595][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.416629][ T126] usb 1-1: config 0 descriptor?? [ 304.428009][ T126] usb 1-1: selecting invalid altsetting 1 [ 304.445202][ T126] dvb_ttusb_budget: ttusb_init_controller: error [ 304.461212][ T126] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 304.672654][ T126] DVB: Unable to find symbol cx22700_attach() [ 304.859874][ T126] DVB: Unable to find symbol tda10046_attach() [ 304.866356][ T126] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 304.896059][ T126] usb 1-1: USB disconnect, device number 29 [ 308.258011][ T7052] loop4: detected capacity change from 0 to 256 [ 308.707837][ T7054] loop0: detected capacity change from 0 to 2048 [ 308.919934][ T7054] UDF-fs: bad mount option "rootdir=00000000000000004095" or missing value [ 309.749025][ T7054] mkiss: ax0: crc mode is auto. [ 310.490984][ T126] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 310.693080][ T126] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 310.720975][ T126] usb 5-1: config 0 has no interface number 0 [ 310.727341][ T126] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 310.768094][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.806705][ T126] usb 5-1: config 0 descriptor?? [ 310.840001][ T126] usb 5-1: selecting invalid altsetting 1 [ 310.861092][ T126] dvb_ttusb_budget: ttusb_init_controller: error [ 310.888073][ T126] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 311.398451][ T126] DVB: Unable to find symbol cx22700_attach() [ 311.643720][ T7075] capability: warning: `syz.3.791' uses deprecated v2 capabilities in a way that may be insecure [ 311.750251][ T7075] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 311.760344][ T7075] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 313.243154][ T126] DVB: Unable to find symbol tda10046_attach() [ 313.249389][ T126] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 313.259332][ T126] usb 5-1: USB disconnect, device number 12 [ 313.911057][ T126] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 313.973072][ T7100] block device autoloading is deprecated and will be removed. [ 314.100983][ T126] usb 5-1: Using ep0 maxpacket: 8 [ 314.108265][ T126] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.173318][ T126] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 314.212371][ T126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.256190][ T126] usb 5-1: config 0 descriptor?? [ 314.279719][ T126] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 314.496858][ T7082] loop2: detected capacity change from 0 to 32768 [ 315.258557][ T7082] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode. [ 315.632735][ T4270] ocfs2: Unmounting device (7,2) on (node local) [ 315.895783][ T126] gspca_vc032x: reg_w err -71 [ 315.902112][ T126] vc032x: probe of 5-1:0.0 failed with error -71 [ 315.931383][ T126] usb 5-1: USB disconnect, device number 13 [ 316.451021][ T5566] usb 4-1: new full-speed USB device number 23 using dummy_hcd [ 316.831644][ T5566] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 316.839716][ T5566] usb 4-1: config 0 has no interface number 0 [ 317.235102][ T7134] trusted_key: encrypted_key: insufficient parameters specified [ 317.262174][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.272528][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.280864][ T5566] usb 4-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 317.298445][ T5566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.324495][ T5566] usb 4-1: config 0 descriptor?? [ 317.345678][ T5566] usb 4-1: selecting invalid altsetting 1 [ 317.356936][ T5566] dvb_ttusb_budget: ttusb_init_controller: error [ 317.365127][ T5566] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 318.370668][ T7145] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 318.436539][ T5566] DVB: Unable to find symbol cx22700_attach() [ 318.644530][ T7143] loop2: detected capacity change from 0 to 8192 [ 318.688551][ T5566] DVB: Unable to find symbol tda10046_attach() [ 318.700174][ T5566] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 318.716496][ T7143] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 318.857979][ T5566] usb 4-1: USB disconnect, device number 23 [ 318.873966][ T7143] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 318.886118][ T7143] REISERFS (device loop2): using ordered data mode [ 318.899223][ T7143] reiserfs: using flush barriers [ 318.916721][ T7143] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 318.947760][ T7143] REISERFS (device loop2): checking transaction log (loop2) [ 319.185453][ T7143] REISERFS (device loop2): Using r5 hash to sort names [ 319.195827][ T7143] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 319.282568][ T7169] trusted_key: encrypted_key: insufficient parameters specified [ 319.895583][ T7156] ceph: No mds server is up or the cluster is laggy [ 320.996194][ T7184] input: syz0 as /devices/virtual/input/input9 [ 321.285500][ T7189] trusted_key: encrypted_key: insufficient parameters specified [ 324.513937][ T7212] loop0: detected capacity change from 0 to 64 [ 325.187647][ T7225] trusted_key: encrypted_key: insufficient parameters specified [ 327.735498][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 327.737557][ T26] audit: type=1326 audit(1759850863.789:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7238 comm="syz.2.839" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x0 [ 327.866085][ T7243] tmpfs: Unknown parameter 'usrquota' [ 328.695459][ T7256] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 331.409971][ T7271] trusted_key: encrypted_key: insufficient parameters specified [ 331.951574][ T26] audit: type=1326 audit(1759850867.949:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 331.974003][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.216884][ T26] audit: type=1326 audit(1759850867.959:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 332.306577][ T26] audit: type=1326 audit(1759850868.169:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 332.390513][ T26] audit: type=1326 audit(1759850868.169:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 332.581810][ T26] audit: type=1326 audit(1759850868.169:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 332.604039][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.703819][ T26] audit: type=1326 audit(1759850868.169:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 332.762994][ T26] audit: type=1326 audit(1759850868.169:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 332.816863][ T26] audit: type=1326 audit(1759850868.179:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 332.839071][ C1] vkms_vblank_simulate: vblank timer overrun [ 332.876375][ T26] audit: type=1326 audit(1759850868.179:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 332.923363][ T26] audit: type=1326 audit(1759850868.179:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 333.002187][ T26] audit: type=1326 audit(1759850868.179:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 333.030027][ T26] audit: type=1326 audit(1759850868.179:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 333.403035][ T26] audit: type=1326 audit(1759850868.179:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 333.771026][ T26] audit: type=1326 audit(1759850868.179:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 333.814201][ T26] audit: type=1326 audit(1759850868.179:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 333.908830][ T26] audit: type=1326 audit(1759850868.179:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7269 comm="syz.2.846" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 334.128100][ T7289] input: syz0 as /devices/virtual/input/input10 [ 336.132931][ T7312] trusted_key: encrypted_key: insufficient parameters specified [ 338.093684][ T7307] loop0: detected capacity change from 0 to 32768 [ 338.167507][ T7307] XFS (loop0): Mounting V5 Filesystem [ 338.237582][ T7307] XFS (loop0): Ending clean mount [ 338.527303][ T4269] XFS (loop0): Unmounting Filesystem [ 339.068161][ T26] kauditd_printk_skb: 57 callbacks suppressed [ 339.068179][ T26] audit: type=1326 audit(1759850875.139:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 339.098069][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.145434][ T26] audit: type=1326 audit(1759850875.189:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 339.167837][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.225154][ T26] audit: type=1326 audit(1759850875.189:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 339.247362][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.335248][ T26] audit: type=1326 audit(1759850875.189:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 339.418905][ T26] audit: type=1326 audit(1759850875.189:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 339.493416][ T26] audit: type=1326 audit(1759850875.189:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 339.515854][ C0] vkms_vblank_simulate: vblank timer overrun [ 339.740720][ T26] audit: type=1326 audit(1759850875.189:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 340.276781][ T26] audit: type=1326 audit(1759850875.189:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 340.299151][ C0] vkms_vblank_simulate: vblank timer overrun [ 340.493347][ T26] audit: type=1326 audit(1759850875.189:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 340.515772][ T26] audit: type=1326 audit(1759850875.189:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7336 comm="syz.2.863" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 340.941077][ T7360] trusted_key: encrypted_key: insufficient parameters specified [ 342.436181][ T5566] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 342.771064][ T5566] usb 3-1: Using ep0 maxpacket: 8 [ 342.836100][ T5566] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 342.894206][ T5566] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 342.927288][ T5566] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 342.950093][ T5566] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 342.974899][ T5566] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 342.984787][ T5566] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.621226][ T2184] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 343.737681][ T5566] usb 3-1: GET_CAPABILITIES returned 0 [ 343.743434][ T5566] usbtmc 3-1:16.0: can't read capabilities [ 343.832177][ T2184] usb 4-1: config index 0 descriptor too short (expected 8192, got 18) [ 344.011168][ T2184] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.653329][ T2184] usb 4-1: config 0 has no interfaces? [ 344.673291][ T2184] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 344.737917][ T2184] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.759614][ T2184] usb 4-1: Product: syz [ 344.781775][ T2184] usb 4-1: Manufacturer: syz [ 344.802027][ T2184] usb 4-1: SerialNumber: syz [ 344.874506][ T2184] usb 4-1: config 0 descriptor?? [ 344.898774][ T126] usb 3-1: USB disconnect, device number 22 [ 349.545781][ T2184] usb 4-1: USB disconnect, device number 24 [ 350.070021][ T7436] tipc: Started in network mode [ 350.099438][ T7436] tipc: Node identity 080211, cluster identity 4711 [ 350.160548][ T7436] tipc: Enabled bearer , priority 0 [ 350.303842][ T7436] tipc: Resetting bearer [ 351.153234][ T5566] tipc: Node number set to 134353152 [ 351.471091][ T7454] overlayfs: failed to clone upperpath [ 354.121120][ T7481] raw_sendmsg: syz.1.905 forgot to set AF_INET. Fix it! [ 356.377356][ T7500] netlink: 'syz.0.912': attribute type 10 has an invalid length. [ 356.447413][ T7500] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 357.929355][ T7518] tipc: Enabling of bearer rejected, failed to enable media [ 358.638484][ T7516] loop0: detected capacity change from 0 to 8192 [ 358.695792][ T7516] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 358.730275][ T7516] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 358.755650][ T7516] REISERFS (device loop0): using ordered data mode [ 358.839776][ T7516] reiserfs: using flush barriers [ 358.891673][ T7516] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 358.941485][ T7516] REISERFS (device loop0): checking transaction log (loop0) [ 358.969732][ T7516] REISERFS (device loop0): Using r5 hash to sort names [ 358.981318][ T7516] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 361.716521][ T7550] trusted_key: encrypted_key: insufficient parameters specified [ 362.603210][ T7554] loop0: detected capacity change from 0 to 256 [ 365.473460][ T7579] overlayfs: failed to clone upperpath [ 365.905333][ T7580] device syzkaller0 entered promiscuous mode [ 366.166476][ T7580] tipc: Resetting bearer [ 366.206298][ T4897] tipc: Resetting bearer [ 366.256800][ T7585] loop2: detected capacity change from 0 to 2048 [ 366.317627][ T7585] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.338973][ T7588] netlink: 'syz.1.939': attribute type 10 has an invalid length. [ 366.408803][ T7585] loop7: detected capacity change from 0 to 16384 [ 366.585564][ T7591] netlink: 'syz.2.938': attribute type 2 has an invalid length. [ 366.906166][ T7597] tipc: Enabling of bearer rejected, already enabled [ 367.996699][ T7607] loop0: detected capacity change from 0 to 1764 [ 369.344970][ T7623] trusted_key: encrypted_key: insufficient parameters specified [ 371.601055][ T22] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 371.827195][ T22] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 371.834053][ T7640] loop4: detected capacity change from 0 to 40427 [ 371.881012][ T7640] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 371.929972][ T7640] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 372.008643][ T7640] F2FS-fs (loop4): invalid crc value [ 372.162297][ T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.173142][ T22] usb 4-1: config 0 descriptor?? [ 372.181674][ T22] cp210x 4-1:0.0: cp210x converter detected [ 372.201292][ T7640] F2FS-fs (loop4): Found nat_bits in checkpoint [ 372.311164][ T7655] tipc: Started in network mode [ 372.329328][ T7640] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 372.339245][ T7655] tipc: Node identity 080211, cluster identity 4711 [ 372.350579][ T7640] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 372.389504][ T7655] tipc: Enabled bearer , priority 0 [ 372.430540][ T7640] syz.4.952: attempt to access beyond end of device [ 372.430540][ T7640] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 372.586435][ T22] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 372.616411][ T22] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 372.656916][ T22] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 372.698140][ T22] usb 4-1: cp210x converter now attached to ttyUSB0 [ 372.747771][ T22] usb 4-1: USB disconnect, device number 25 [ 372.790605][ T22] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 372.830287][ T22] cp210x 4-1:0.0: device disconnected [ 372.909674][ T4273] syz-executor: attempt to access beyond end of device [ 372.909674][ T4273] loop4: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 372.991568][ T4273] F2FS-fs (loop4): Issue discard(5637, 5637, 1) failed, ret: -5 [ 373.371729][ T5567] tipc: Node number set to 134353152 [ 375.546243][ T7687] device syzkaller0 entered promiscuous mode [ 375.632698][ T7687] tipc: Resetting bearer [ 376.072074][ T7696] loop2: detected capacity change from 0 to 4096 [ 376.134439][ T7699] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 378.686429][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.693013][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 387.168823][ T7762] loop2: detected capacity change from 0 to 32768 [ 387.713909][ T7762] XFS (loop2): Mounting V5 Filesystem [ 387.884022][ T7762] XFS (loop2): Ending clean mount [ 387.902022][ T7762] XFS (loop2): Quotacheck needed: Please wait. [ 388.142108][ T7762] XFS (loop2): Quotacheck: Done. [ 389.540109][ T4270] XFS (loop2): Unmounting Filesystem [ 389.650961][ T5566] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 389.850958][ T5566] usb 5-1: Using ep0 maxpacket: 8 [ 389.870700][ T5566] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 389.895123][ T5566] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 389.906814][ T5566] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.917226][ T5566] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.930702][ T5566] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.940088][ T5566] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.176501][ T5566] usb 5-1: GET_CAPABILITIES returned 0 [ 390.183974][ T5566] usbtmc 5-1:16.0: can't read capabilities [ 391.700013][ T7824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.999'. [ 393.486511][ T7836] kvm: pic: non byte write [ 393.803520][ T5566] usb 5-1: USB disconnect, device number 14 [ 395.091164][ T5562] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 395.098988][ T5566] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 395.428964][ T5566] usb 5-1: config 0 has an invalid interface number: 237 but max is 0 [ 395.437402][ T5562] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 395.468393][ T5566] usb 5-1: config 0 has no interface number 0 [ 395.482707][ T5562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.513986][ T5566] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 395.543056][ T5562] usb 3-1: config 0 descriptor?? [ 395.577744][ T5562] cp210x 3-1:0.0: cp210x converter detected [ 395.585259][ T5566] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 395.628031][ T5566] usb 5-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 395.709092][ T5566] usb 5-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.b6 [ 395.764062][ T5566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.813798][ T5566] usb 5-1: Product: syz [ 395.818263][ T5566] usb 5-1: Manufacturer: syz [ 395.859129][ T5566] usb 5-1: SerialNumber: syz [ 395.911388][ T5566] usb 5-1: config 0 descriptor?? [ 395.955693][ T5562] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 395.981489][ T5562] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 396.091081][ T5562] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 396.109639][ T5562] usb 3-1: cp210x converter now attached to ttyUSB0 [ 396.127542][ T2184] usb 5-1: USB disconnect, device number 15 [ 396.201539][ T5562] usb 3-1: USB disconnect, device number 23 [ 396.251822][ T5562] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 396.270416][ T5562] cp210x 3-1:0.0: device disconnected [ 396.840936][ T7866] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 396.850376][ T7866] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 400.321091][ T2184] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 400.540995][ T2184] usb 5-1: Using ep0 maxpacket: 8 [ 400.552118][ T2184] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 400.584840][ T2184] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 400.584876][ T2184] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.584901][ T2184] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.584945][ T2184] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 400.584980][ T2184] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.923118][ T2184] usb 5-1: GET_CAPABILITIES returned 0 [ 400.994358][ T7903] loop0: detected capacity change from 0 to 4096 [ 401.088943][ T7905] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 401.136172][ T2184] usbtmc 5-1:16.0: can't read capabilities [ 401.145224][ T26] kauditd_printk_skb: 54 callbacks suppressed [ 401.145242][ T26] audit: type=1800 audit(1759850937.229:315): pid=7903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1022" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 402.615274][ T7924] overlayfs: filesystem on './file0' not supported as upperdir [ 405.318609][ T5566] usb 5-1: USB disconnect, device number 16 [ 405.512703][ T7935] trusted_key: encrypted_key: insufficient parameters specified [ 407.061494][ T7951] loop4: detected capacity change from 0 to 1024 [ 407.480739][ T7956] loop2: detected capacity change from 0 to 4096 [ 407.723969][ T7956] ntfs3: Unknown parameter 'iì5ý¿' [ 408.028927][ T7960] overlayfs: failed to clone upperpath [ 411.277514][ T7971] trusted_key: encrypted_key: insufficient parameters specified [ 413.700253][ T7993] netlink: 'syz.4.1049': attribute type 10 has an invalid length. [ 415.210418][ T8008] loop0: detected capacity change from 0 to 512 [ 415.233356][ T8008] EXT4-fs: Ignoring removed orlov option [ 415.290027][ T8008] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 415.366340][ T8008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c119, mo2=0002] [ 415.416965][ T8008] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.1052: corrupted in-inode xattr [ 415.531114][ T8008] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1052: couldn't read orphan inode 15 (err -117) [ 415.576673][ T8008] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 415.682574][ T8008] Bluetooth: MGMT ver 1.22 [ 417.122784][ T4269] EXT4-fs (loop0): unmounting filesystem. [ 417.505826][ T8028] trusted_key: encrypted_key: insufficient parameters specified [ 418.873487][ T8038] overlayfs: failed to clone upperpath [ 420.740931][ T5562] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 420.930965][ T5562] usb 3-1: Using ep0 maxpacket: 8 [ 420.938303][ T5562] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 420.992506][ T5562] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 421.079016][ T5562] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.529861][ T5562] usb 3-1: config 0 descriptor?? [ 421.645923][ T5562] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 422.561230][ T8064] overlayfs: failed to clone upperpath [ 423.982173][ T5562] gspca_vc032x: reg_r err -110 [ 423.987152][ T5562] vc032x: probe of 3-1:0.0 failed with error -110 [ 424.207247][ T8078] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 424.227879][ T5562] usb 3-1: USB disconnect, device number 24 [ 428.642177][ T8109] tipc: Started in network mode [ 428.647203][ T8109] tipc: Node identity 080211, cluster identity 4711 [ 428.720181][ T8109] tipc: Enabled bearer , priority 0 [ 429.841084][ T5562] tipc: Node number set to 134353152 [ 429.981066][ T5566] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 430.042428][ T8127] netlink: 'syz.3.1085': attribute type 10 has an invalid length. [ 430.190995][ T5566] usb 1-1: Using ep0 maxpacket: 32 [ 430.198417][ T5566] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 430.247253][ T5566] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 430.283280][ T5566] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 430.320334][ T5566] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 430.344596][ T5566] usb 1-1: Product: syz [ 430.348852][ T5566] usb 1-1: Manufacturer: syz [ 430.531871][ T5566] hub 1-1:4.0: USB hub found [ 430.934998][ T5566] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 431.271456][ T5566] usb 1-1: USB disconnect, device number 30 [ 432.821064][ T41] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 433.026709][ T41] usb 3-1: config 0 has no interfaces? [ 433.045788][ T41] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 433.076116][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.046406][ T41] usb 3-1: Product: syz [ 434.055404][ T41] usb 3-1: Manufacturer: syz [ 434.116487][ T41] usb 3-1: SerialNumber: syz [ 434.136161][ T41] usb 3-1: config 0 descriptor?? [ 440.155636][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.162143][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.002883][ T5566] usb 3-1: USB disconnect, device number 25 [ 442.106918][ T8240] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 442.116594][ T8243] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 442.121514][ T5567] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 442.322725][ T5567] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 442.342245][ T5567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.374820][ T5567] usb 1-1: config 0 descriptor?? [ 442.384454][ T5567] cp210x 1-1:0.0: cp210x converter detected [ 442.791745][ T5567] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 442.849787][ T5567] usb 1-1: cp210x converter now attached to ttyUSB0 [ 443.008193][ T5567] usb 1-1: USB disconnect, device number 31 [ 443.020504][ T5567] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 443.106733][ T5567] cp210x 1-1:0.0: device disconnected [ 445.524578][ T8273] loop4: detected capacity change from 0 to 512 [ 445.643751][ T8273] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e842c11c, mo2=0002] [ 445.679404][ T8273] System zones: 0-2, 18-18, 34-34 [ 445.756276][ T8273] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1131: bg 0: block 248: padding at end of block bitmap is not set [ 445.791281][ T8273] Quota error (device loop4): write_blk: dquota write failed [ 445.801506][ T8273] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 445.853247][ T8273] EXT4-fs error (device loop4): ext4_acquire_dquot:6816: comm syz.4.1131: Failed to acquire dquot type 1 [ 445.925511][ T8273] EXT4-fs (loop4): 1 truncate cleaned up [ 445.951354][ T8273] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 445.976378][ T8268] loop3: detected capacity change from 0 to 32768 [ 445.988786][ T8273] ext4 filesystem being mounted at /212/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 446.081596][ T8284] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 446.146936][ T4273] EXT4-fs (loop4): unmounting filesystem. [ 446.202633][ T8268] XFS (loop3): Mounting V5 Filesystem [ 446.391679][ T8268] XFS (loop3): Ending clean mount [ 446.411034][ T41] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 446.475551][ T8268] XFS (loop3): Quotacheck needed: Please wait. [ 446.597934][ T8268] XFS (loop3): Quotacheck: Done. [ 446.663908][ T41] usb 1-1: config 0 has no interfaces? [ 446.672198][ T41] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 446.721010][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.776995][ T41] usb 1-1: Product: syz [ 446.795437][ T41] usb 1-1: Manufacturer: syz [ 446.800119][ T41] usb 1-1: SerialNumber: syz [ 446.819359][ T41] usb 1-1: config 0 descriptor?? [ 446.995720][ T4272] XFS (loop3): Unmounting Filesystem [ 449.909754][ T5567] usb 1-1: USB disconnect, device number 32 [ 451.579501][ T8328] delete_channel: no stack [ 452.409711][ T8340] loop0: detected capacity change from 0 to 32768 [ 452.609837][ T8331] loop3: detected capacity change from 0 to 32768 [ 452.629669][ T8351] loop2: detected capacity change from 0 to 256 [ 452.646800][ T8340] XFS (loop0): Mounting V5 Filesystem [ 452.760273][ T8340] XFS (loop0): Ending clean mount [ 452.773948][ T8340] XFS (loop0): Quotacheck needed: Please wait. [ 453.768548][ T8340] XFS (loop0): Quotacheck: Done. [ 454.356583][ T8336] syz.0.1149 (8336): drop_caches: 2 [ 454.363013][ T26] audit: type=1800 audit(1759850990.359:316): pid=8366 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1149" name="file1" dev="loop0" ino=9286 res=0 errno=0 [ 454.382776][ C0] vkms_vblank_simulate: vblank timer overrun [ 454.567531][ T4269] XFS (loop0): Unmounting Filesystem [ 456.664811][ T8384] loop3: detected capacity change from 0 to 2048 [ 456.708476][ T8384] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 456.775952][ T8385] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 457.370990][ T41] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 457.601329][ T41] usb 3-1: config index 0 descriptor too short (expected 8192, got 18) [ 457.609738][ T41] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.590088][ T41] usb 3-1: config 0 has no interfaces? [ 460.785882][ T8406] loop0: detected capacity change from 0 to 32768 [ 460.947122][ T8406] XFS (loop0): Mounting V5 Filesystem [ 461.301004][ T8406] XFS (loop0): Ending clean mount [ 461.330776][ T8406] XFS (loop0): Quotacheck needed: Please wait. [ 461.402361][ T8424] overlayfs: upper fs does not support tmpfile. [ 462.448940][ T8406] XFS (loop0): Quotacheck: Done. [ 463.672832][ T4269] XFS (loop0): Unmounting Filesystem [ 463.726385][ T41] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 463.771129][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.835122][ T41] usb 3-1: config 0 descriptor?? [ 463.856245][ T41] usb 3-1: can't set config #0, error -32 [ 464.055165][ T8437] input: syz0 as /devices/virtual/input/input12 [ 464.191283][ T41] usb 3-1: USB disconnect, device number 26 [ 466.041240][ T5566] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 466.291476][ T5566] usb 5-1: Using ep0 maxpacket: 8 [ 466.679307][ T5566] usb 5-1: New USB device found, idVendor=0c45, idProduct=6128, bcdDevice=c4.6d [ 466.711465][ T5566] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.738792][ T5566] usb 5-1: Product: syz [ 466.748956][ T5566] usb 5-1: Manufacturer: syz [ 466.769737][ T5566] usb 5-1: SerialNumber: syz [ 466.812784][ T5566] usb 5-1: config 0 descriptor?? [ 466.834746][ T5566] gspca_main: sonixj-2.14.0 probing 0c45:6128 [ 467.816000][ T8469] loop0: detected capacity change from 0 to 4096 [ 467.901824][ T8470] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 468.042167][ T5566] gspca_sonixj: reg_w1 err -71 [ 468.047955][ T5566] sonixj: probe of 5-1:0.0 failed with error -71 [ 468.074858][ T5566] usb 5-1: USB disconnect, device number 17 [ 470.528338][ T8498] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 470.535918][ T41] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 470.733440][ T41] usb 1-1: config index 0 descriptor too short (expected 8192, got 18) [ 470.767842][ T41] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.838555][ T41] usb 1-1: config 0 has no interfaces? [ 471.022861][ T41] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 471.052461][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.070960][ T41] usb 1-1: Product: syz [ 471.075606][ T41] usb 1-1: Manufacturer: syz [ 471.080300][ T41] usb 1-1: SerialNumber: syz [ 471.786651][ T41] usb 1-1: config 0 descriptor?? [ 473.530912][ T5566] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 473.799420][ T5566] usb 4-1: Using ep0 maxpacket: 32 [ 473.816799][ T5566] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 473.835661][ T5566] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 473.856184][ T5566] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 473.870969][ T5566] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 473.892868][ T5566] usb 4-1: Product: syz [ 473.897287][ T5566] usb 4-1: Manufacturer: syz [ 473.933667][ T5566] hub 4-1:4.0: USB hub found [ 474.245240][ T5566] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 475.032360][ T5566] usb 4-1: USB disconnect, device number 26 [ 476.194339][ T8536] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 476.203484][ T41] usb 1-1: USB disconnect, device number 33 [ 476.429883][ T8539] ..@ÿ: renamed from bond_slave_0 [ 482.553540][ T8582] sch_tbf: burst 1023 is lower than device lo mtu (1550) ! [ 482.638433][ T8583] overlayfs: upper fs does not support tmpfile. [ 485.012424][ T8600] fuse: Unknown parameter 'group_id00000000000000000000' [ 485.162554][ T8589] input: syz0 as /devices/virtual/input/input13 [ 489.789763][ T8638] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 490.786557][ T8651] fuse: Unknown parameter 'group_id00000000000000000000' [ 492.505391][ T8671] trusted_key: encrypted_key: insufficient parameters specified [ 493.896198][ T8689] fuse: Bad value for 'user_id' [ 498.369151][ T8731] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1251'. [ 498.398521][ T8731] device bridge_slave_1 left promiscuous mode [ 498.440731][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.488903][ T8731] device bridge_slave_0 left promiscuous mode [ 498.693964][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.068455][ T8739] trusted_key: encrypted_key: insufficient parameters specified [ 499.391167][ T8742] fuse: Bad value for 'user_id' [ 501.564006][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.571647][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.169868][ T8789] fuse: Bad value for 'user_id' [ 507.294731][ T8816] trusted_key: encrypted_key: insufficient parameters specified [ 508.941209][ T8834] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1280'. [ 509.551811][ T8842] netlink: 'syz.4.1283': attribute type 10 has an invalid length. [ 516.473118][ T8897] loop2: detected capacity change from 0 to 8192 [ 521.083769][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1305'. [ 524.514243][ T26] audit: type=1326 audit(1759851060.589:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 524.593078][ T26] audit: type=1326 audit(1759851060.619:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 524.707282][ T26] audit: type=1326 audit(1759851060.619:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 524.810933][ T26] audit: type=1326 audit(1759851060.629:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 525.800909][ T26] audit: type=1326 audit(1759851060.629:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 525.987156][ T26] audit: type=1326 audit(1759851060.699:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 526.165025][ T26] audit: type=1326 audit(1759851060.709:323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 526.258094][ T26] audit: type=1326 audit(1759851060.709:324): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 526.362730][ T26] audit: type=1326 audit(1759851061.049:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 526.445933][ T26] audit: type=1326 audit(1759851061.049:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8956 comm="syz.2.1313" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb56798eec9 code=0x7ffc0000 [ 532.059060][ T9014] usb usb8: usbfs: process 9014 (syz.2.1324) did not claim interface 0 before use [ 532.333841][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1326'. [ 534.509619][ T9037] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 534.725581][ T9041] fuse: Invalid rootmode [ 538.228958][ T9073] loop0: detected capacity change from 0 to 2048 [ 540.113650][ T9078] overlayfs: failed to clone upperpath [ 540.490573][ T9071] loop2: detected capacity change from 0 to 32768 [ 540.676776][ T9086] fuse: Invalid rootmode [ 540.775904][ T9071] XFS (loop2): Mounting V5 Filesystem [ 541.727983][ T9071] XFS (loop2): log mount failed [ 544.787939][ T9130] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 544.902544][ T9126] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1352'. [ 548.293596][ T9157] fuse: Invalid rootmode [ 549.426292][ T9171] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1366'. [ 549.509535][ T9172] input: syz0 as /devices/virtual/input/input14 [ 551.758941][ T9195] fuse: Bad value for 'rootmode' [ 552.112818][ T9202] device syzkaller0 entered promiscuous mode [ 553.502776][ T9213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1376'. [ 553.752004][ T9222] loop2: detected capacity change from 0 to 64 [ 556.115044][ T9237] fuse: Bad value for 'rootmode' [ 557.494399][ T9251] device syzkaller0 entered promiscuous mode [ 558.960926][ T5567] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 559.050728][ T9267] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 559.360946][ T5567] usb 3-1: device descriptor read/64, error -71 [ 559.653796][ T5567] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 559.820913][ T5567] usb 3-1: device descriptor read/64, error -71 [ 559.951928][ T5567] usb usb3-port1: attempt power cycle [ 560.404330][ T5567] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 560.471704][ T5567] usb 3-1: device descriptor read/8, error -71 [ 560.555327][ T9284] fuse: Bad value for 'rootmode' [ 560.741002][ T5567] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 560.797647][ T5567] usb 3-1: device descriptor read/8, error -71 [ 560.921075][ T5567] usb usb3-port1: unable to enumerate USB device [ 563.004916][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.011602][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.145426][ T9321] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1407'. [ 564.788138][ T9344] overlayfs: failed to clone upperpath [ 569.086216][ T5566] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 569.300858][ T5566] usb 4-1: Using ep0 maxpacket: 8 [ 569.313018][ T5566] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.339677][ T5566] usb 4-1: config 0 has no interfaces? [ 569.481094][ T5566] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 569.490221][ T5566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 569.505655][ T5566] usb 4-1: config 0 descriptor?? [ 571.916402][ T9394] delete_channel: no stack [ 571.949819][ T5567] usb 4-1: USB disconnect, device number 27 [ 573.404407][ T9422] loop4: detected capacity change from 0 to 64 [ 574.786690][ T9436] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 580.545724][ T9479] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1454'. [ 581.748092][ T9490] loop0: detected capacity change from 0 to 4096 [ 581.783122][ T9491] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 581.795882][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 581.795897][ T26] audit: type=1800 audit(1759851117.869:328): pid=9490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1455" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 583.741200][ T9505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 583.752580][ T9505] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 587.481244][ T9532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1466'. [ 593.334458][ T9584] overlayfs: filesystem on './file0' not supported as upperdir [ 596.741327][ T9612] input: syz0 as /devices/virtual/input/input15 [ 598.103037][ T9636] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 598.112569][ T9636] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 600.178550][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1497'. [ 601.081200][ T9655] loop2: detected capacity change from 0 to 4096 [ 601.175102][ T9657] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 601.194470][ T26] audit: type=1800 audit(1759851137.269:329): pid=9655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1501" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 603.211669][ T9662] loop3: detected capacity change from 0 to 32768 [ 603.516359][ T9662] XFS (loop3): Mounting V5 Filesystem [ 603.652456][ T9690] overlayfs: filesystem on './file0' not supported as upperdir [ 604.615142][ T9662] XFS (loop3): Ending clean mount [ 604.636232][ T9662] XFS (loop3): Quotacheck needed: Please wait. [ 604.826319][ T9662] XFS (loop3): Quotacheck: Done. [ 604.945819][ T4272] XFS (loop3): Unmounting Filesystem [ 606.770936][ T5566] usb 1-1: new full-speed USB device number 34 using dummy_hcd [ 606.813304][ T9714] input: syz0 as /devices/virtual/input/input16 [ 606.972592][ T5566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 607.001733][ T5566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 607.030994][ T5567] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 607.044573][ T5566] usb 1-1: New USB device found, idVendor=10c4, idProduct=8acf, bcdDevice= 0.00 [ 607.086775][ T5566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.123409][ T5566] usb 1-1: config 0 descriptor?? [ 607.250949][ T5567] usb 5-1: Using ep0 maxpacket: 8 [ 607.258073][ T5567] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 607.308655][ T5567] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 607.345087][ T5567] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 607.370706][ T5567] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 607.406953][ T5567] usb 5-1: config 0 descriptor?? [ 607.547172][ T5566] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 607.574629][ T5566] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 607.600195][ T5566] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 607.674468][ T5566] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 607.740926][ T5566] hid-u2fzero 0003:10C4:8ACF.0003: unknown main item tag 0x0 [ 607.826079][ T5566] hid-u2fzero 0003:10C4:8ACF.0003: hidraw0: USB HID v0.00 Device [HID 10c4:8acf] on usb-dummy_hcd.0-1/input0 [ 607.860108][ T5566] hid-u2fzero 0003:10C4:8ACF.0003: U2F Zero LED initialised [ 607.888454][ T5566] general protection fault, probably for non-canonical address 0xdffffc0000000015: 0000 [#1] PREEMPT SMP KASAN [ 607.900249][ T5566] KASAN: null-ptr-deref in range [0x00000000000000a8-0x00000000000000af] [ 607.908841][ T5566] CPU: 0 PID: 5566 Comm: kworker/0:17 Not tainted syzkaller #0 [ 607.916436][ T5566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 607.926548][ T5566] Workqueue: usb_hub_wq hub_event [ 607.931645][ T5566] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 607.937336][ T5566] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 ae 5e 2c fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 06 5f 2c fa 48 8d 84 24 80 00 00 00 [ 607.956994][ T5566] RSP: 0018:ffffc9000c26e7c0 EFLAGS: 00010202 [ 607.963089][ T5566] RAX: 0000000000000015 RBX: ffff8880247a8030 RCX: dffffc0000000000 [ 607.971069][ T5566] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88801f310869 [ 607.979045][ T5566] RBP: ffffc9000c26e970 R08: 0000000000000001 R09: ffff88801f31082e [ 607.987207][ T5566] R10: ffffed1003e6210d R11: 1ffff11003e62105 R12: 1ffff110048f5006 [ 607.995197][ T5566] R13: dffffc0000000000 R14: 1ffff110048f5005 R15: 00000000000000a8 [ 608.003184][ T5566] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 608.012125][ T5566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.018802][ T5566] CR2: 0000200000063030 CR3: 000000004dadb000 CR4: 00000000003506f0 [ 608.026805][ T5566] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.034795][ T5566] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.042799][ T5566] Call Trace: [ 608.046085][ T5566] [ 608.049024][ T5566] ? rcu_is_watching+0x11/0xa0 [ 608.053813][ T5566] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 608.059393][ T5566] ? mutex_lock_nested+0x10/0x10 [ 608.064393][ T5566] ? u2fzero_brightness_set+0x2c0/0x2c0 [ 608.069989][ T5566] add_early_randomness+0x7a/0x150 [ 608.075223][ T5566] hwrng_register+0x398/0x440 [ 608.080003][ T5566] devm_hwrng_register+0x43/0xb0 [ 608.085016][ T5566] u2fzero_probe+0x355/0x470 [ 608.089673][ T5566] ? twinhan_input_mapping+0x2210/0x2210 [ 608.095365][ T5566] hid_device_probe+0x25c/0x350 [ 608.100270][ T5566] ? hid_uevent+0x340/0x340 [ 608.104823][ T5566] really_probe+0x2aa/0xc70 [ 608.109377][ T5566] ? pm_runtime_barrier+0x147/0x1c0 [ 608.114651][ T5566] __driver_probe_device+0x18c/0x330 [ 608.120008][ T5566] driver_probe_device+0x4f/0x420 [ 608.125206][ T5566] __device_attach_driver+0x2c6/0x510 [ 608.130646][ T5566] ? coredump_store+0x90/0x90 [ 608.135382][ T5566] bus_for_each_drv+0x175/0x200 [ 608.140290][ T5566] ? _raw_spin_unlock+0x40/0x40 [ 608.145228][ T5566] ? subsys_find_device_by_id+0x350/0x350 [ 608.151019][ T5566] __device_attach+0x29b/0x460 [ 608.156061][ T5566] ? device_attach+0x20/0x20 [ 608.160719][ T5566] ? __kmem_cache_free+0xb6/0x1f0 [ 608.165851][ T5566] ? kobject_uevent_env+0x35f/0x8a0 [ 608.171176][ T5566] bus_probe_device+0xbc/0x1e0 [ 608.176018][ T5566] ? device_add+0x97c/0xfb0 [ 608.180659][ T5566] device_add+0xa00/0xfb0 [ 608.185047][ T5566] hid_add_device+0x389/0x530 [ 608.189799][ T5566] usbhid_probe+0xc09/0xfe0 [ 608.194384][ T5566] usb_probe_interface+0x5a0/0xaf0 [ 608.199586][ T5566] ? usb_register_driver+0x3d0/0x3d0 [ 608.204921][ T5566] really_probe+0x2aa/0xc70 [ 608.209501][ T5566] ? pm_runtime_barrier+0x147/0x1c0 [ 608.214760][ T5566] __driver_probe_device+0x18c/0x330 [ 608.220097][ T5566] driver_probe_device+0x4f/0x420 [ 608.225273][ T5566] __device_attach_driver+0x2c6/0x510 [ 608.230719][ T5566] ? coredump_store+0x90/0x90 [ 608.235595][ T5566] bus_for_each_drv+0x175/0x200 [ 608.240509][ T5566] ? _raw_spin_unlock+0x40/0x40 [ 608.245417][ T5566] ? subsys_find_device_by_id+0x350/0x350 [ 608.251200][ T5566] __device_attach+0x29b/0x460 [ 608.256045][ T5566] ? device_attach+0x20/0x20 [ 608.260710][ T5566] ? kobject_uevent_env+0x35f/0x8a0 [ 608.265985][ T5566] bus_probe_device+0xbc/0x1e0 [ 608.270771][ T5566] ? device_add+0x97c/0xfb0 [ 608.275295][ T5566] device_add+0xa00/0xfb0 [ 608.279633][ T5566] usb_set_configuration+0x1991/0x1fd0 [ 608.285112][ T5566] usb_generic_driver_probe+0x89/0x150 [ 608.290580][ T5566] usb_probe_device+0x139/0x270 [ 608.295504][ T5566] ? usb_register_device_driver+0x230/0x230 [ 608.301414][ T5566] really_probe+0x2aa/0xc70 [ 608.305940][ T5566] ? pm_runtime_barrier+0x147/0x1c0 [ 608.311160][ T5566] __driver_probe_device+0x18c/0x330 [ 608.316468][ T5566] driver_probe_device+0x4f/0x420 [ 608.321686][ T5566] __device_attach_driver+0x2c6/0x510 [ 608.327076][ T5566] ? coredump_store+0x90/0x90 [ 608.331778][ T5566] bus_for_each_drv+0x175/0x200 [ 608.336669][ T5566] ? _raw_spin_unlock+0x40/0x40 [ 608.341543][ T5566] ? subsys_find_device_by_id+0x350/0x350 [ 608.347456][ T5566] __device_attach+0x29b/0x460 [ 608.352243][ T5566] ? device_attach+0x20/0x20 [ 608.356846][ T5566] ? __kmem_cache_free+0xb6/0x1f0 [ 608.361883][ T5566] ? kobject_uevent_env+0x35f/0x8a0 [ 608.367172][ T5566] bus_probe_device+0xbc/0x1e0 [ 608.371972][ T5566] ? device_add+0x97c/0xfb0 [ 608.376516][ T5566] device_add+0xa00/0xfb0 [ 608.380892][ T5566] usb_new_device+0xd4d/0x1620 [ 608.385710][ T5566] ? lock_chain_count+0x20/0x20 [ 608.390585][ T5566] ? usb_disconnect+0x8a0/0x8a0 [ 608.395449][ T5566] ? _raw_spin_unlock_irq+0x1f/0x40 [ 608.400712][ T5566] ? lockdep_hardirqs_on+0x94/0x140 [ 608.405960][ T5566] hub_event+0x2d5e/0x54e0 [ 608.410507][ T5566] ? hub_post_resume+0x120/0x120 [ 608.415563][ T5566] ? read_lock_is_recursive+0x10/0x10 [ 608.420994][ T5566] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 608.426947][ T5566] ? _raw_spin_unlock+0x40/0x40 [ 608.431817][ T5566] ? _raw_spin_unlock_irq+0x1f/0x40 [ 608.437126][ T5566] ? process_one_work+0x7a1/0x1160 [ 608.442333][ T5566] process_one_work+0x898/0x1160 [ 608.447283][ T5566] ? worker_detach_from_pool+0x240/0x240 [ 608.452927][ T5566] ? _raw_spin_lock_irq+0xab/0xe0 [ 608.458004][ T5566] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 608.463391][ T5566] ? kthread_data+0x4b/0xc0 [ 608.467922][ T5566] worker_thread+0xaa2/0x1250 [ 608.472625][ T5566] kthread+0x29d/0x330 [ 608.476706][ T5566] ? worker_clr_flags+0x1a0/0x1a0 [ 608.481738][ T5566] ? kthread_blkcg+0xd0/0xd0 [ 608.486374][ T5566] ret_from_fork+0x1f/0x30 [ 608.490817][ T5566] [ 608.493857][ T5566] Modules linked in: [ 608.683021][ T9720] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 608.706171][ T5566] ---[ end trace 0000000000000000 ]--- [ 608.712349][ T5566] RIP: 0010:u2fzero_rng_read+0x26c/0x6f0 [ 608.725700][ T5566] Code: 03 43 80 3c 2c 00 74 08 48 89 df e8 ae 5e 2c fa 41 bf a8 00 00 00 4c 03 3b 4c 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 ff e8 06 5f 2c fa 48 8d 84 24 80 00 00 00 [ 608.748079][ T5566] RSP: 0018:ffffc9000c26e7c0 EFLAGS: 00010202 [ 608.759493][ T5566] RAX: 0000000000000015 RBX: ffff8880247a8030 RCX: dffffc0000000000 [ 608.774041][ T5566] RDX: 000000000000003b RSI: 0000000000000000 RDI: ffff88801f310869 [ 608.788731][ T5566] RBP: ffffc9000c26e970 R08: 0000000000000001 R09: ffff88801f31082e [ 608.797151][ T5566] R10: ffffed1003e6210d R11: 1ffff11003e62105 R12: 1ffff110048f5006 [ 608.813166][ T5566] R13: dffffc0000000000 R14: 1ffff110048f5005 R15: 00000000000000a8 [ 608.823995][ T5566] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 608.833420][ T5566] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 608.840446][ T5566] CR2: 00002000000e4030 CR3: 000000002f700000 CR4: 00000000003506f0 [ 608.850096][ T5566] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 608.867092][ T5566] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 608.875719][ T5566] Kernel panic - not syncing: Fatal exception [ 608.882199][ T5566] Kernel Offset: disabled [ 608.886544][ T5566] Rebooting in 86400 seconds..