last executing test programs: 1m25.363627943s ago: executing program 3 (id=707): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x34, &(0x7f00000002c0)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m15.866116593s ago: executing program 3 (id=718): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000000) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000380)={{0x0, 0x400, 0x4b, 0x9}, 'syz0\x00', 0x11}) ioctl$UI_DEV_SETUP(r2, 0x5501, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000540), 0x4, 0x280283) dup3(r3, r2, 0x80000) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') socket$inet6(0xa, 0xa, 0x0) getrlimit(0xf, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'gretap0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x1d, r4}, 0x10, &(0x7f00000005c0)={&(0x7f0000000200)=@can={{0x2, 0x0, 0x1, 0x1}, 0x85, 0x0, 0x0, 0x0, "dc8e4602bd767428"}, 0x10}, 0x118, 0x0, 0x0, 0x400c095}, 0x20000000) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x8401) r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "35b65fa92acbe858", "bf50c104b8769e3fb8adda3a2351bd1bbca0285fc4208f95d5d68994bed26fb2", "d1da889b", "4e686058cc1cf383"}, 0x38) r7 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) close(r7) r8 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$PPPIOCSMRU(r5, 0x40047452, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r8, 0xc018643a, &(0x7f0000000240)={0x1, 0x101}) ioctl$DRM_IOCTL_MODE_SETCRTC(r7, 0xc06864a2, &(0x7f0000000740)={0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "65366a50432b7ee2c7feddd91df868e7cfc6fa7272f3bf0a71b5d0c19323a260"}}) syz_usb_control_io$cdc_ecm(r6, &(0x7f00000001c0)={0xc, &(0x7f0000000180)={0x40, 0x0, 0x30, {0x30, 0x24, "1e3fbf86a9fa12de316ed4b2e8c44fe299ecec14f642e5d0f803cd27b08bf962da36cd4ea75c3c86eb147b6301e4"}}, 0x0}, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x814400, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r10, @ANYBLOB=',rootmode=00000000000000000140000,use', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) 1m13.423732675s ago: executing program 3 (id=723): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup(r0) r1 = socket$kcm(0xa, 0x3, 0x3a) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r2, 0x114, 0x8, &(0x7f0000000400)=0x2, 0x4) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)='\x00', 0x1}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x40090) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x4, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0400}, {0x3, 0xec, 0x1, 0x7}, {0xbdd, 0x80, 0x80, 0x800}, {0x3, 0xa, 0xae, 0x101}]}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x2710, @host}, 0x10) listen(r4, 0x7ff) socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000140), 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @multicast2, 0x15, 0x3, 'sh\x00', 0x1, 0x4, 0x6d}, 0x2c) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r7, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010100, 0x4e20, 0x3, 'lc\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0x12d59, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @remote, 0x4}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000240)="a03b651928b530a85e4d628889413ef58c303ae12f278bc1be79f42391a56f1ce221178f41fd122c4625296ba307fd594d93230f3083339cd0a529a3840547a13a73f0e0ea013a7de699dfeff0ec2b1ab6a4cfdde63488db3149de81d1a64cd71186d959077d5b3d09cf908eb34a46dc105f63d8af58c94e52b61f6bf9bf81da5dcfcc7871b4bd", 0x87}, {&(0x7f0000000380)="1569f6df3b3a5514851062cd9f4f302b57a7579e37676e8aa2977a5cd3222d254f171583b6395c55bfcba636ff37c01375af68d2e8a73321bbcfd4cdcfd9f76a6d09290c5690931d876d809a21ec8ae78ca41bd67688329e720d297177bdff772c6f5da57ca99b94bb64bab5b045a9", 0x6f}], 0x2}, 0x4048043) dup(r0) r8 = openat$ptp0(0xffffff9c, &(0x7f0000000040), 0xc00, 0x0) ioctl$FS_IOC_FSSETXATTR(r8, 0x401c5820, &(0x7f0000000100)={0x3, 0x3, 0x8, 0x4, 0x8}) 1m13.264179482s ago: executing program 3 (id=724): socket(0x15, 0x80000, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000003c0)=""/206) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000002480), 0xce4, r1}, 0x38) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x800088a) timer_create(0xb, &(0x7f0000000200)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000380)) truncate(&(0x7f00000000c0)='./file1\x00', 0x4) rename(&(0x7f000001fb00)='./file1\x00', &(0x7f000001fb40)='./file2\x00') 1m11.956746536s ago: executing program 3 (id=729): socket(0x15, 0x80000, 0x0) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004000000fc"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x5, 0x10f5, &(0x7f0000001180)="$eJzs2DGLE0EYBuB3dgNyVWSuXw+0sJDjjvgHrlBIY2FtF6zsTKXk5/hz5Cr743qvCNgrmxgSJGKRxUB4Hlh252Xm+2bKnQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBvlHwvyXmT1E3WJClJ191O75N0m/zx17ZJydv30/mrj5PX8/W09FmT0q9ajev101ondVKv68vzm2d1/unzh3anZUmXu+VidvbmYdCj9L3bQSsCAADAafh5sPGR+wMAAAD/MthFAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6uajSVKSrrud3ifpjrstAAAA4EAlTd6N9+Xra4CtF/k2LimPtsmP0s+5ypc96/+iLzk6aMMAAABwosrO//jznOXJTn6RUS4v1+PfrzzcJG2Sqz/q3C0Xs9VzsZiV/3kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAACYKgAA//87RdIO") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file1\x00', &(0x7f0000000000), 0x0, 0x0, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x800088a) timer_gettime(0x0, 0x0) truncate(&(0x7f00000000c0)='./file1\x00', 0x4) rename(&(0x7f000001fb00)='./file1\x00', &(0x7f000001fb40)='./file2\x00') 1m4.955644611s ago: executing program 3 (id=733): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c880) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000"], 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet(0x2, 0x1, 0x0) listen(r3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80800020) keyctl$session_to_parent(0x12) close_range(r0, 0xffffffffffffffff, 0x0) 49.674809913s ago: executing program 32 (id=733): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2000c880) syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000082505a3a440000102030109023b000101000000"], 0x0) syz_open_dev$loop(0x0, 0x2, 0x0) r3 = socket$inet(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r3, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) socket$inet(0x2, 0x1, 0x0) listen(r3, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80800020) keyctl$session_to_parent(0x12) close_range(r0, 0xffffffffffffffff, 0x0) 14.101665228s ago: executing program 1 (id=1028): unshare(0x22020600) r0 = syz_open_procfs(0x0, &(0x7f0000001080)='net/icmp6\x00') preadv(r0, &(0x7f0000001140)=[{&(0x7f0000000080)=""/4081, 0xff1}], 0x1, 0x9, 0x20000003) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) utimensat(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0) 13.059247121s ago: executing program 1 (id=1030): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x80d8, 0x4, 0x0, 0x0, 0x101}) 12.189609228s ago: executing program 5 (id=1031): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000001c0)=0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000004c0)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000002140)=""/4090, 0xffa}, {0x0}], 0x2) 12.161945159s ago: executing program 4 (id=1032): io_setup(0x7ff, &(0x7f0000000040)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup\x00', 0x210b00, 0x6c) r2 = openat$cgroup_pressure(r1, &(0x7f0000000140)='memory.pressure\x00', 0x2, 0x0) r3 = dup(r2) io_submit(r0, 0x1, &(0x7f0000002b40)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, r3, &(0x7f0000000000)='/', 0x1, 0x2}]) 12.099918922s ago: executing program 1 (id=1033): bind$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f000001b700)=""/102392, 0x18ff8) syz_open_dev$vbi(0x0, 0x2, 0x2) socket$netlink(0x10, 0x3, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 11.497556477s ago: executing program 4 (id=1034): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write(0xffffffffffffffff, &(0x7f0000000680), 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000040)=0x90000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x4c, r0, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x87}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5}, 0x48) 9.896471465s ago: executing program 1 (id=1037): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000034700)=""/102392, 0x18ff8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x3, 0x9, 0x64, 0xffffff0d, 0x9, 0x0, 0x4, 0x5]) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000580)) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000240)=0x9) 9.811381268s ago: executing program 4 (id=1039): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 8.265565323s ago: executing program 5 (id=1042): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000400)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x2, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x20000, 0x57, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0xfeffffff}, 0x94) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x200, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e00, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000700)=ANY=[], 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, 0x0, 0x0) 8.10591684s ago: executing program 1 (id=1043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_getparam(0x0, 0x0) r4 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) getpid() prctl$PR_SET_SECUREBITS(0x1c, 0x15) syz_emit_ethernet(0x5a, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x2e, 0x4c, 0x65, 0x0, 0x2, 0x6, 0x0, @private=0xa010102, @remote}, {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0xe, 0x8, 0xfffd, 0x0, 0x57, {[@md5sig={0x13, 0x12, "6115f2ef9c9189d5145445c7a87089e3"}, @md5sig={0x13, 0x12, "6b61d7821e40f5d5e945c3a129827126"}]}}}}}}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) pselect6(0x40, &(0x7f0000000100)={0x2, 0x3, 0x1, 0x5, 0xa, 0x6, 0xe1b, 0x80000000}, &(0x7f0000000140)={0x6f, 0xa4d, 0x0, 0x1, 0x0, 0x5, 0xffffffffffffffff, 0x10000}, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f0000000300)={&(0x7f0000000280)={[0x36]}, 0x8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000700)={0x1, 0x0}, 0x8) r9 = fsmount(0xffffffffffffffff, 0x0, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x20, 0x1e, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0x8, 0xcc, &(0x7f0000000580)=""/204, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2c, r0, 0x8, &(0x7f0000000680)={0x0, 0x4}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x7, 0x1, 0x4}, 0x10, r8, r6, 0x0, &(0x7f0000000740)=[r4, r9], &(0x7f0000000780), 0x10, 0xfff}, 0x94) setsockopt$inet_tcp_int(r7, 0x6, 0x4, &(0x7f0000000040)=0x67, 0x4) setuid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r10, &(0x7f0000000080)='tasks\x00', 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) 5.972975549s ago: executing program 2 (id=1044): bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(ecb-aes-aesni)\x00'}, 0x58) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="18", 0x48, 0x0, &(0x7f00000000c0)={0x11, 0xd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 5.833515045s ago: executing program 2 (id=1045): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xfffffff7, 0x2003ff, 0xfffffffd, 0xc4cf, 0x90, "000008ecff000000150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xa) 5.788576007s ago: executing program 4 (id=1047): write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x119) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5991ee20139b401046a89606ffcf92e", "2c5be7c6", "a0ca05c0707e52f4"}, 0x28) recvfrom$inet6(r2, &(0x7f00000000c0)=""/3, 0x3, 0x300, 0x0, 0x0) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) 5.72202449s ago: executing program 2 (id=1048): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) move_pages(0x0, 0x1, &(0x7f0000000000)=[&(0x7f000064f000/0x3000)=nil], 0x0, &(0x7f0000000600), 0x0) 3.81367206s ago: executing program 2 (id=1049): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000006c0)='./file0\x00', 0x2, &(0x7f000009f300)=ANY=[@ANYBLOB="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"], 0xfd, 0x652, &(0x7f0000000700)="$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") 3.730621923s ago: executing program 1 (id=1050): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x70, 0xb8, 0xa4, 0x40, 0x50d, 0x8053, 0xa5b5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x7a, 0x0, 0x0, 0xe6, 0x2b, 0xc3}}]}}]}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x800, 0x2000000, 0x2d5}, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.711786334s ago: executing program 5 (id=1051): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='tmpfs\x00', 0x0, &(0x7f00000001c0)='grpquota') r0 = creat(&(0x7f0000000440)='./file0/file0\x00', 0x188) quotactl_fd$Q_SETINFO(r0, 0xffffffff80000601, 0xee01, &(0x7f0000000300)={0xffffffffffff8001, 0x7, 0x0, 0x7}) quotactl$Q_SYNC(0xffffffff80000101, 0x0, 0x0, 0x0) 2.698422757s ago: executing program 0 (id=1052): mknod(&(0x7f00000000c0)='./file0\x00', 0x4, 0x4) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000040)) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, 0x0, 0x0, &(0x7f0000000580)=""/254, 0xfe}, 0x10000) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0xa, 0x200000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080), 0x4008, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 1.649453341s ago: executing program 0 (id=1053): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x455, 0x8001000, r0, 0x0) fanotify_mark(0xffffffffffffffff, 0x7e, 0x8001010, r0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffffd}, 0x1c) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$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") open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x8840) syz_mount_image$squashfs(&(0x7f0000001d80), &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f0000001e80)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT=0x0, @ANYRES32, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32, @ANYRES8, @ANYRESDEC, @ANYBLOB="39008872e533a1", @ANYBLOB="90b5d3dcc0ea444178fea9304fbc98511b3462bd2f2dfec83f1f8d155f"], 0x1, 0x1d6, &(0x7f0000000f80)="$eJzsVb/OEkEQ/+3dwoFSUNtKhEaBIzGWdvIAPoAETiQe/uEuUQiJaENjYXwJEp/CwkR7C2NMbLDQRAuMFYZg9nZ23QskKIF835fsLyHzm5mdmR32dvZO9DDyAKwW4zaKSMBQwCfGwAGUmbQts1L+JLkmfOVSr5P9FckvJKPh6P1zSUd3W2EYDKLhDsIYsGtNimya+D8X20LePUtbGIg4sg/snfnQJHblhjZdL1IWb9sa15PBJ97FMcivQvqYvh26RAbH7gLQlt+F3cf08aU8zq1rXArPn6avdy/i/FdUBBpf0Y2nDn4kyofFuC3ILZpiwtaRP7pOco1Q3hhrLlxX3rXOw5NpCZQBVOP+g2o0HF3u9VvdoBvc8/3G1drb83RF10+AXhjUmLGNZKBwaIgbmTf8GQCf//onMMCMrQmcA5iKVSFqOFcuGoF5wDFizRwy72tVf6UcLvq4iUvIAXg0EW4f8t8qQWTjuC1aa4LBJaXOjX0CSzjIJY4r7fthZwoGpsJm4DpHfY6MVnxSRKGgcU23PyVZItkkOSM5J6neLvUm8STDd9IqEyCLx604HiSPl2Ta5mubX9SVHaqqXkOmduLBwsLCwsLCwuKM4E8AAAD//yhrTN0=") r1 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x3) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x175) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r2, 0x40086e81, &(0x7f00000000c0)={@id={0x2, 0x0, @auto="5894b862e4dc560762902c6762eeb812"}}) connect$unix(r2, 0x0, 0x0) 1.635414362s ago: executing program 2 (id=1054): setrlimit(0x8, &(0x7f0000000000)={0x0, 0x3}) mlock(&(0x7f0000bff000/0x400000)=nil, 0x400000) 1.628240622s ago: executing program 5 (id=1055): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) socket$inet6_sctp(0xa, 0x1, 0x84) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x89a, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.514354956s ago: executing program 0 (id=1056): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@mpls_newroute={0x1c, 0x18, 0xd51c3488c6154b87, 0x70bd2a, 0x25dfdbfc, {0x1c, 0x80, 0x20, 0x2, 0xfe, 0x0, 0xc8, 0x2, 0x2100}}, 0x1c}}, 0x0) 1.506111637s ago: executing program 4 (id=1066): openat$sequencer(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) ioprio_set$pid(0x36e721c18eb4dfa4, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x800, &(0x7f0000000000)={[{@shortad}, {@gid}, {@uid}, {@gid_forget}, {@uid}, {@nostrict}, {}, {@lastblock={'lastblock', 0x3d, 0x2}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}]}, 0x1, 0xc32, &(0x7f000001fd40)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) socket$nl_route(0x10, 0x3, 0x0) 1.401472791s ago: executing program 0 (id=1057): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) lseek(r0, 0x3, 0x1) getdents64(r0, 0x0, 0x0) 1.211823759s ago: executing program 0 (id=1058): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xfffffff7, 0x2003ff, 0xfffffffd, 0xc4cf, 0x90, "000008ecff000000150000000100", 0x240000, 0x1fd}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0xa) 418.806203ms ago: executing program 5 (id=1059): openat$ppp(0xffffffffffffff9c, 0x0, 0x101042, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4004743a, &(0x7f0000000300)) 310.009028ms ago: executing program 0 (id=1060): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000040000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x18) signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1010008, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x1, 0x369, &(0x7f0000000a80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000200002) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) gettid() 253.36763ms ago: executing program 2 (id=1061): msgget$private(0x0, 0x404) syz_usb_connect(0x0, 0x24, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000600)=""/102400, 0x19000) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socket$alg(0x26, 0x5, 0x0) socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0x7d, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043ef50d"], 0xf8) 164.912933ms ago: executing program 4 (id=1062): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8bf, 0x10008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) socket$phonet_pipe(0x23, 0x5, 0x2) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023892) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0xffff, 0x0, 0x1, 0x9, '\x00', 0x0, r2, 0x1, 0x1}, 0x50) 0s ago: executing program 5 (id=1063): accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x800) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x24040089}, 0x20008000) shutdown(r4, 0x1) kernel console output (not intermixed with test programs): created [ 303.962279][ T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 303.972847][ T4230] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 304.215885][ T6293] No such timeout policy "syz1" [ 304.518230][ T13] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 304.524612][ T13] gspca_zc3xx: probe of 1-1:0.0 failed with error -71 [ 304.711121][ T7] i2c i2c-1: Added multiplexed i2c bus 3 [ 304.716852][ T7] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 304.736007][ T6292] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 304.738717][ T13] usb 1-1: USB disconnect, device number 46 [ 304.762506][ T7] usb 4-1: DVB: registering adapter 2 frontend 0 (Realtek RTL2832 (DVB-T))... [ 304.825740][ T4230] i2c i2c-2: Added multiplexed i2c bus 4 [ 304.837208][ T4230] rtl2832 2-0010: Realtek RTL2832 successfully attached [ 304.846908][ T7] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 304.859841][ T4230] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 304.988223][ T4230] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 305.038263][ T7] DVB: Unable to find symbol r820t_attach() [ 305.199432][ T7] usb 4-1: USB disconnect, device number 43 [ 305.233409][ T6307] netlink: 56 bytes leftover after parsing attributes in process `syz.1.537'. [ 305.287644][ T4230] DVB: Unable to find symbol r820t_attach() [ 305.302586][ T6309] netlink: 24 bytes leftover after parsing attributes in process `syz.0.538'. [ 305.618375][ T7] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 305.708710][ T4230] usb 2-1: USB disconnect, device number 46 [ 305.765639][ T6313] input: syz0 as /devices/virtual/input/input42 [ 305.928127][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 305.958239][ T1111] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 306.058289][ T7] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 306.073566][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.119979][ T7] usb 4-1: config 0 descriptor?? [ 306.148133][ T1326] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 306.159794][ T7] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 306.488379][ T1111] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 306.497675][ T1111] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.518272][ T1111] usb 1-1: Product: syz [ 306.523117][ T1111] usb 1-1: Manufacturer: syz [ 306.538302][ T1326] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 306.547773][ T1326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.557089][ T1111] usb 1-1: SerialNumber: syz [ 306.568232][ T4230] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 306.585150][ T1111] usb 1-1: config 0 descriptor?? [ 306.600036][ T1326] usb 3-1: config 0 descriptor?? [ 306.688308][ T7] gspca_vc032x: reg_r err -110 [ 306.693960][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.699780][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.705173][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.711247][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.716652][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.722500][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.728512][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.734008][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.739556][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.744873][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.750406][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.755758][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.761311][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.766649][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.771989][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.777681][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.783245][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.788617][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 306.794027][ T7] gspca_vc032x: Unknown sensor... [ 306.799219][ T7] vc032x: probe of 4-1:0.0 failed with error -22 [ 306.807218][ T7] usb 4-1: USB disconnect, device number 44 [ 306.813442][ T4230] usb 5-1: Using ep0 maxpacket: 16 [ 306.938265][ T1326] [drm] vendor descriptor length:c3 data:30 24 1e 3f bf 86 a9 fa 12 de 31 [ 306.947104][ T4230] usb 5-1: config 0 has an invalid interface number: 61 but max is 0 [ 306.956719][ T4230] usb 5-1: config 0 has no interface number 0 [ 306.963415][ T1326] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 306.971731][ T4230] usb 5-1: config 0 interface 61 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 307.139076][ T4230] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 307.150194][ T6313] fuse: Unknown parameter 'use00000000000000000000' [ 307.154078][ T4230] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.178236][ T1326] [drm:udl_init] *ERROR* Selecting channel failed [ 307.191143][ T1326] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 307.198821][ T4230] usb 5-1: Product: syz [ 307.198844][ T4230] usb 5-1: Manufacturer: syz [ 307.198860][ T4230] usb 5-1: SerialNumber: syz [ 307.209261][ T4230] usb 5-1: config 0 descriptor?? [ 307.210495][ T1326] [drm] Initialized udl on minor 2 [ 307.228452][ T6318] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 307.231792][ T1326] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 307.265320][ T1326] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 307.275633][ T1326] usb 3-1: USB disconnect, device number 35 [ 307.282995][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 307.292204][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 307.301321][ T4230] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 307.311567][ T7] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 307.436225][ T6329] netlink: 24 bytes leftover after parsing attributes in process `syz.3.542'. [ 307.482086][ T6318] udc-core: couldn't find an available UDC or it's busy [ 307.489796][ T6318] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 307.500507][ T7] usb 5-1: USB disconnect, device number 45 [ 307.528347][ T5846] usb 5-1: Failed to submit usb control message: -71 [ 307.535652][ T5846] usb 5-1: unable to send the bmi data to the device: -71 [ 307.543785][ T5846] usb 5-1: unable to get target info from device [ 307.550471][ T5846] usb 5-1: could not get target info (-71) [ 307.556360][ T5846] usb 5-1: could not probe fw (-71) [ 307.638627][ T4230] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 307.729362][ T5456] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 308.008378][ T1326] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 308.094643][ T4307] usb 1-1: USB disconnect, device number 47 [ 308.149071][ T6335] device syzkaller0 entered promiscuous mode [ 308.168462][ T4230] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 308.183326][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.191830][ T4230] usb 2-1: Product: syz [ 308.196123][ T4230] usb 2-1: Manufacturer: syz [ 308.201203][ T4230] usb 2-1: SerialNumber: syz [ 308.209718][ T4230] usb 2-1: config 0 descriptor?? [ 308.318560][ T4238] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 308.338486][ T5456] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 308.349024][ T5456] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.357903][ T5456] usb 4-1: Product: syz [ 308.363324][ T5456] usb 4-1: Manufacturer: syz [ 308.368683][ T5456] usb 4-1: SerialNumber: syz [ 308.498792][ T4230] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 308.529954][ T1326] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 308.549804][ T1326] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.582486][ T1326] usb 3-1: Product: syz [ 308.599358][ T1326] usb 3-1: Manufacturer: syz [ 308.622430][ T1326] usb 3-1: SerialNumber: syz [ 308.721630][ T1326] usb 3-1: config 0 descriptor?? [ 308.860159][ T6341] loop0: detected capacity change from 0 to 8192 [ 308.925622][ T4238] usb 5-1: config 0 has no interfaces? [ 309.051312][ T6341] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 309.061204][ T6341] REISERFS (device loop0): using ordered data mode [ 309.068344][ T6341] reiserfs: using flush barriers [ 309.090806][ T6341] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 309.109320][ T6341] REISERFS (device loop0): checking transaction log (loop0) [ 309.309000][ T1326] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 309.744285][ T6341] REISERFS (device loop0): Using tea hash to sort names [ 309.756627][ T6341] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 310.562560][ T5456] usb 4-1: config 0 descriptor?? [ 310.598968][ T5456] usb 4-1: can't set config #0, error -71 [ 310.607520][ T5456] usb 4-1: USB disconnect, device number 45 [ 310.798316][ T4238] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 310.807503][ T4238] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.808148][ T4230] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 310.823327][ T4238] usb 5-1: Product: syz [ 310.827838][ T4238] usb 5-1: Manufacturer: syz [ 310.832853][ T4238] usb 5-1: SerialNumber: syz [ 310.834679][ T4230] usb 2-1: USB disconnect, device number 47 [ 310.859671][ T4238] usb 5-1: config 0 descriptor?? [ 310.987470][ T6346] netlink: 56 bytes leftover after parsing attributes in process `syz.3.549'. [ 311.073820][ T4230] usb 5-1: USB disconnect, device number 46 [ 311.419539][ T1326] usb 3-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 311.473103][ T1326] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 311.473160][ T6355] input: syz0 as /devices/virtual/input/input43 [ 311.491931][ T1326] usb 3-1: media controller created [ 311.576937][ T1326] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 311.847267][ T1326] i2c i2c-1: Added multiplexed i2c bus 2 [ 311.863596][ T1326] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 311.884302][ T1326] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 311.884409][ T1326] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 312.015862][ T1326] DVB: Unable to find symbol r820t_attach() [ 312.121584][ T1326] usb 3-1: USB disconnect, device number 36 [ 312.178375][ T4230] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 312.608346][ T4230] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 312.617645][ T4230] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.627926][ T4230] usb 2-1: config 0 descriptor?? [ 312.647670][ T6374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.556'. [ 312.698372][ T5456] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 312.768465][ T4287] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 312.788460][ T4238] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 312.928359][ T7] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 312.938241][ T5456] usb 5-1: Using ep0 maxpacket: 32 [ 312.968376][ T4230] [drm] vendor descriptor length:c3 data:30 24 1e 3f bf 86 a9 fa 12 de 31 [ 312.977701][ T4230] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 313.018108][ T4287] usb 4-1: Using ep0 maxpacket: 32 [ 313.038248][ T4238] usb 1-1: Using ep0 maxpacket: 16 [ 313.068385][ T5456] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 313.078603][ T5456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.093111][ T5456] usb 5-1: config 0 descriptor?? [ 313.140667][ T5456] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 313.158542][ T4238] usb 1-1: config 0 has an invalid interface number: 61 but max is 0 [ 313.166886][ T4238] usb 1-1: config 0 has no interface number 0 [ 313.173534][ T4238] usb 1-1: config 0 interface 61 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 255 [ 313.175171][ T6355] fuse: Unknown parameter 'use00000000000000000000' [ 313.208367][ T4230] [drm:udl_init] *ERROR* Selecting channel failed [ 313.221579][ T4230] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 313.230301][ T4230] [drm] Initialized udl on minor 2 [ 313.258663][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 313.267349][ T4230] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 313.275621][ T4230] usb 2-1: USB disconnect, device number 48 [ 313.283061][ T1326] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 313.292539][ T1326] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 313.298421][ T4287] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 313.314643][ T1326] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 313.316320][ T4287] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.336259][ T4287] usb 4-1: Product: syz [ 313.340762][ T4287] usb 4-1: Manufacturer: syz [ 313.345410][ T4287] usb 4-1: SerialNumber: syz [ 313.356690][ T4238] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 313.367602][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.381572][ T4287] usb 4-1: config 0 descriptor?? [ 313.390255][ T4238] usb 1-1: Product: syz [ 313.394463][ T4238] usb 1-1: Manufacturer: syz [ 313.403526][ T4238] usb 1-1: SerialNumber: syz [ 313.414670][ T4238] usb 1-1: config 0 descriptor?? [ 313.425923][ T4287] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 313.448507][ T6371] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 313.476897][ T4238] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 313.498286][ T7] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 313.514856][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.523318][ T7] usb 3-1: Product: syz [ 313.527696][ T7] usb 3-1: Manufacturer: syz [ 313.539008][ T7] usb 3-1: SerialNumber: syz [ 313.546159][ T7] usb 3-1: config 0 descriptor?? [ 313.598205][ T5456] gspca_vc032x: reg_r err -71 [ 313.603054][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.608644][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.614045][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.620080][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.630063][ T6369] binder: 6368:6369 ioctl c018620c 0 returned -14 [ 313.637027][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.642680][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.648454][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.653958][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.664092][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.669584][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.675059][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.680463][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.685948][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.696260][ T6371] udc-core: couldn't find an available UDC or it's busy [ 313.703411][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.708919][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.711736][ T6371] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 313.714321][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.728876][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.734213][ T5456] gspca_vc032x: I2c Bus Busy Wait 00 [ 313.741730][ T1326] usb 1-1: USB disconnect, device number 48 [ 313.748292][ T5846] usb 1-1: Failed to submit usb control message: -71 [ 313.755291][ T5846] usb 1-1: unable to send the bmi data to the device: -71 [ 313.767495][ T5456] gspca_vc032x: Unknown sensor... [ 313.773323][ T5456] vc032x: probe of 5-1:0.0 failed with error -22 [ 313.780095][ T5846] usb 1-1: unable to get target info from device [ 313.797625][ T5846] usb 1-1: could not get target info (-71) [ 313.810089][ T5456] usb 5-1: USB disconnect, device number 47 [ 313.818159][ T5846] usb 1-1: could not probe fw (-71) [ 313.819780][ T6379] device syzkaller0 entered promiscuous mode [ 314.618499][ T4287] gspca_stk1135: reg_w 0x5 err -110 [ 315.012834][ T4287] gspca_stk1135: serial bus timeout: status=0x00 [ 315.032421][ T4287] gspca_stk1135: Sensor write failed [ 315.048135][ T4287] gspca_stk1135: serial bus timeout: status=0x00 [ 315.060301][ T4287] gspca_stk1135: Sensor write failed [ 315.075497][ T4287] gspca_stk1135: serial bus timeout: status=0x00 [ 315.178644][ T4287] gspca_stk1135: Sensor read failed [ 315.183965][ T4287] gspca_stk1135: serial bus timeout: status=0x00 [ 315.190571][ T4287] gspca_stk1135: Sensor read failed [ 315.195819][ T4287] gspca_stk1135: Detected sensor type unknown (0x0) [ 315.202859][ T4287] gspca_stk1135: serial bus timeout: status=0x00 [ 315.209493][ T4287] gspca_stk1135: Sensor read failed [ 315.214958][ T4287] gspca_stk1135: serial bus timeout: status=0x00 [ 315.221440][ T4287] gspca_stk1135: Sensor read failed [ 315.246276][ T4287] gspca_stk1135: serial bus timeout: status=0x00 [ 315.258267][ T4287] gspca_stk1135: Sensor write failed [ 315.273170][ T4287] gspca_stk1135: serial bus timeout: status=0x00 [ 315.295647][ T4287] gspca_stk1135: Sensor write failed [ 315.304578][ T4287] stk1135: probe of 4-1:0.0 failed with error -110 [ 315.387724][ T6391] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 315.508966][ T4287] usb 4-1: USB disconnect, device number 46 [ 315.545966][ T6395] netlink: 56 bytes leftover after parsing attributes in process `syz.1.559'. [ 315.598151][ T5456] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 315.693903][ T1111] usb 3-1: USB disconnect, device number 37 [ 315.708200][ T1326] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 315.864654][ T6399] input: syz0 as /devices/virtual/input/input44 [ 315.988187][ T5456] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 316.000821][ T5456] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.035948][ T5456] usb 1-1: config 0 has no interface number 0 [ 316.079297][ T7] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 316.248256][ T1326] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 316.278228][ T5456] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 316.291240][ T5456] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.298156][ T1326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.317170][ T5456] usb 1-1: Product: syz [ 316.326631][ T5456] usb 1-1: Manufacturer: syz [ 316.328100][ T1111] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 316.344862][ T5456] usb 1-1: SerialNumber: syz [ 316.361257][ T1326] usb 5-1: Product: syz [ 316.362119][ T5456] usb 1-1: config 0 descriptor?? [ 316.368450][ T1326] usb 5-1: Manufacturer: syz [ 316.438426][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 316.556468][ T1326] usb 5-1: SerialNumber: syz [ 316.764965][ T7] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 316.808373][ T5456] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 316.814230][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.827564][ T1326] usb 5-1: config 0 descriptor?? [ 316.833937][ T5846] usb 1-1: Failed to submit usb control message: -71 [ 316.858300][ T1111] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 316.878437][ T5456] usb 1-1: USB disconnect, device number 49 [ 316.882920][ T5846] usb 1-1: unable to send the bmi data to the device: -71 [ 316.894189][ T7] usb 4-1: config 0 descriptor?? [ 316.915561][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.932837][ T5846] usb 1-1: unable to get target info from device [ 316.939527][ T5846] usb 1-1: could not get target info (-71) [ 316.945662][ T1111] usb 3-1: config 0 descriptor?? [ 316.949715][ T5846] usb 1-1: could not probe fw (-71) [ 316.970829][ T7] pwc: Askey VC010 type 2 USB webcam detected. [ 317.138355][ T1326] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 317.188306][ T4307] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 317.243733][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.250263][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.298228][ T1111] [drm] vendor descriptor length:c3 data:30 24 1e 3f bf 86 a9 fa 12 de 31 [ 317.306830][ T1111] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 317.369439][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 317.391791][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 317.398275][ T7] pwc: recv_control_msg error -32 req 02 val 2b00 [ 317.407861][ T6411] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 317.438215][ T7] pwc: recv_control_msg error -32 req 02 val 2700 [ 317.478396][ T7] pwc: recv_control_msg error -32 req 02 val 2c00 [ 317.502322][ T6399] fuse: Unknown parameter 'use00000000000000000000' [ 317.518971][ T1111] [drm:udl_init] *ERROR* Selecting channel failed [ 317.525478][ T7] pwc: recv_control_msg error -32 req 04 val 1000 [ 317.575467][ T1111] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2 [ 317.583481][ T7] pwc: recv_control_msg error -32 req 04 val 1300 [ 317.596924][ T1111] [drm] Initialized udl on minor 2 [ 317.618227][ T1111] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 317.628257][ T7] pwc: recv_control_msg error -32 req 04 val 1400 [ 317.636550][ T1111] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 317.666325][ T1111] usb 3-1: USB disconnect, device number 38 [ 317.678202][ T7] pwc: recv_control_msg error -32 req 02 val 2000 [ 317.689530][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 317.703976][ T4230] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 317.718301][ T7] pwc: recv_control_msg error -32 req 02 val 2100 [ 317.732584][ T4230] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 317.758219][ T7] pwc: recv_control_msg error -32 req 04 val 1500 [ 317.788757][ T4307] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 317.798194][ T7] pwc: recv_control_msg error -32 req 02 val 2500 [ 317.806375][ T4307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.822839][ T4307] usb 2-1: Product: syz [ 317.829680][ T4307] usb 2-1: Manufacturer: syz [ 317.836828][ T4307] usb 2-1: SerialNumber: syz [ 317.838201][ T7] pwc: recv_control_msg error -32 req 02 val 2400 [ 317.864157][ T4307] usb 2-1: config 0 descriptor?? [ 317.888194][ T7] pwc: recv_control_msg error -32 req 02 val 2600 [ 317.928156][ T7] pwc: recv_control_msg error -32 req 02 val 2900 [ 318.128398][ T4307] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 318.248231][ T7] pwc: recv_control_msg error -71 req 04 val 1100 [ 318.268172][ T7] pwc: recv_control_msg error -71 req 04 val 1200 [ 318.282521][ T7] pwc: Registered as video103. [ 318.305448][ T7] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input45 [ 318.358209][ T7] usb 4-1: USB disconnect, device number 47 [ 318.587491][ T6416] netlink: 56 bytes leftover after parsing attributes in process `syz.2.567'. [ 318.888513][ T6418] netlink: 24 bytes leftover after parsing attributes in process `syz.3.568'. [ 319.188212][ T4230] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 319.331564][ T1326] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 319.767589][ T1326] usb 5-1: USB disconnect, device number 48 [ 319.773813][ T4230] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 319.801282][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.848160][ T4230] usb 4-1: Product: syz [ 319.852687][ T4230] usb 4-1: Manufacturer: syz [ 319.870882][ T4230] usb 4-1: SerialNumber: syz [ 320.168397][ T6421] loop4: detected capacity change from 0 to 8192 [ 320.197730][ T4307] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 321.180805][ T4307] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 321.214380][ T6421] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 321.224067][ T6421] REISERFS (device loop4): using ordered data mode [ 321.230838][ T6421] reiserfs: using flush barriers [ 321.241320][ T6421] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 321.259801][ T6421] REISERFS (device loop4): checking transaction log (loop4) [ 321.316638][ T4230] usb 4-1: config 0 descriptor?? [ 321.520853][ T4307] usb 2-1: media controller created [ 321.663953][ T4307] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 321.737068][ T6421] REISERFS (device loop4): Using tea hash to sort names [ 321.745879][ T6421] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 322.398199][ T4230] usb 4-1: can't set config #0, error -71 [ 322.405205][ T4230] usb 4-1: USB disconnect, device number 48 [ 322.412927][ T6426] input: syz0 as /devices/virtual/input/input46 [ 322.427101][ T6430] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 322.442729][ T4307] i2c i2c-1: Added multiplexed i2c bus 2 [ 322.478630][ T4307] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 322.653495][ T4307] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 322.662601][ T4307] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 322.788162][ T1111] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 322.810220][ T6442] No such timeout policy "syz1" [ 323.198142][ T1111] usb 3-1: Using ep0 maxpacket: 32 [ 323.398055][ T4307] DVB: Unable to find symbol r820t_attach() [ 323.508407][ T1111] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 323.613697][ T4307] usb 2-1: USB disconnect, device number 49 [ 324.098107][ T4307] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 324.458208][ T4307] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 324.477869][ T4307] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.506125][ T6459] input: syz0 as /devices/virtual/input/input47 [ 324.523984][ T4307] usb 2-1: config 0 descriptor?? [ 324.943824][ T4247] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 325.020686][ T4307] [drm] vendor descriptor length:c3 data:30 24 1e 3f bf 86 a9 fa 12 de 31 [ 325.033123][ T4307] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 325.237203][ T6426] fuse: Unknown parameter 'use00000000000000000000' [ 325.308694][ T4247] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 325.373527][ T4247] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.418495][ T4307] [drm:udl_init] *ERROR* Selecting channel failed [ 325.524037][ T4247] usb 1-1: config 0 descriptor?? [ 325.617474][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.626137][ T4307] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 325.638135][ T1111] usb 3-1: Product: syz [ 325.642438][ T1111] usb 3-1: Manufacturer: syz [ 325.647070][ T1111] usb 3-1: SerialNumber: syz [ 325.666039][ T1111] usb 3-1: config 0 descriptor?? [ 325.671887][ T4307] [drm] Initialized udl on minor 2 [ 325.688258][ T1111] usb 3-1: can't set config #0, error -71 [ 325.699729][ T1111] usb 3-1: USB disconnect, device number 39 [ 325.728253][ T4307] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 325.757168][ T4307] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 325.778769][ T4307] usb 2-1: USB disconnect, device number 50 [ 325.810710][ T5456] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 325.811271][ T6469] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 325.833375][ T5456] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 325.854792][ T5456] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 325.921409][ T6465] netlink: 'syz.3.580': attribute type 2 has an invalid length. [ 325.923709][ T6471] fuse: Bad value for 'group_id' [ 325.931528][ T6465] netlink: 'syz.3.580': attribute type 8 has an invalid length. [ 325.958790][ T6465] netlink: 132 bytes leftover after parsing attributes in process `syz.3.580'. [ 326.008517][ T4247] [drm] vendor descriptor length:c3 data:30 24 1e 3f bf 86 a9 fa 12 de 31 [ 326.247187][ T6459] fuse: Unknown parameter 'use00000000000000000000' [ 326.254229][ T4230] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 326.518266][ T4230] usb 4-1: Using ep0 maxpacket: 16 [ 326.638687][ T4230] usb 4-1: config 0 has an invalid interface number: 61 but max is 0 [ 326.669972][ T4230] usb 4-1: config 0 has no interface number 0 [ 326.771362][ T4230] usb 4-1: config 0 interface 61 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 326.919301][ T4247] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 326.938226][ T4247] [drm:udl_init] *ERROR* Selecting channel failed [ 326.949611][ T4247] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 3 [ 326.961138][ T4247] [drm] Initialized udl on minor 3 [ 326.988286][ T4247] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 327.001449][ T4247] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 327.017788][ T4247] usb 1-1: USB disconnect, device number 50 [ 327.025620][ T4238] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 327.034947][ T4238] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 327.043830][ T4238] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 327.178305][ T4230] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 327.291512][ T6485] netlink: 56 bytes leftover after parsing attributes in process `syz.1.585'. [ 327.575244][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.678219][ T4307] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 328.001640][ T6489] loop0: detected capacity change from 0 to 8192 [ 328.569188][ T4307] usb 3-1: Using ep0 maxpacket: 8 [ 328.878220][ T6489] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 328.888537][ T6489] REISERFS (device loop0): using ordered data mode [ 328.895175][ T6489] reiserfs: using flush barriers [ 328.915347][ T6489] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 328.933461][ T6489] REISERFS (device loop0): checking transaction log (loop0) [ 329.098645][ T4307] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 329.338739][ T4307] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 329.426828][ T4307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.466232][ T6489] REISERFS (device loop0): Using tea hash to sort names [ 329.480883][ T6489] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 329.581981][ T4307] usb 3-1: Product: syz [ 329.635888][ T4307] usb 3-1: Manufacturer: syz [ 329.696508][ T4307] usb 3-1: SerialNumber: syz [ 329.808865][ T4230] usb 4-1: Product: syz [ 329.813196][ T4230] usb 4-1: Manufacturer: syz [ 329.820315][ T4307] usb 3-1: config 0 descriptor?? [ 329.928359][ T4307] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 330.279448][ T4230] usb 4-1: SerialNumber: syz [ 330.300980][ T4230] usb 4-1: config 0 descriptor?? [ 330.308843][ T4307] gspca_zc3xx: reg_w_i err -71 [ 330.328213][ T4230] usb 4-1: can't set config #0, error -71 [ 330.342908][ T4230] usb 4-1: USB disconnect, device number 49 [ 330.780715][ T6501] loop2: detected capacity change from 0 to 8192 [ 330.872571][ T6501] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 330.882560][ T6501] REISERFS (device loop2): using ordered data mode [ 330.889259][ T6501] reiserfs: using flush barriers [ 330.895082][ T4230] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 330.910822][ T6501] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 330.928139][ T4307] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 330.934607][ T4307] gspca_zc3xx: probe of 3-1:0.0 failed with error -71 [ 330.942377][ T6501] REISERFS (device loop2): checking transaction log (loop2) [ 331.158404][ T4328] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 331.238331][ T4230] usb 4-1: Using ep0 maxpacket: 32 [ 331.268651][ T6501] REISERFS (device loop2): Using tea hash to sort names [ 331.277282][ T6501] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 331.578697][ T4230] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 331.628694][ T4230] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.742644][ T4230] usb 4-1: Product: syz [ 331.789868][ T4230] usb 4-1: Manufacturer: syz [ 331.839615][ T4307] usb 3-1: USB disconnect, device number 40 [ 331.855150][ T4230] usb 4-1: SerialNumber: syz [ 331.870505][ T4230] usb 4-1: config 0 descriptor?? [ 332.088132][ T4328] usb 5-1: Using ep0 maxpacket: 32 [ 332.139617][ T4230] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 332.182938][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 332.218373][ T4328] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 332.228751][ T4328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.239939][ T4328] usb 5-1: config 0 descriptor?? [ 332.255442][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 332.280179][ T4328] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 332.297117][ T6511] netlink: 56 bytes leftover after parsing attributes in process `syz.0.593'. [ 332.344468][ T6500] binder: 6499:6500 ioctl c018620c 0 returned -14 [ 332.435860][ T6510] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 332.488187][ T4328] gspca_vc032x: reg_r err -32 [ 332.493036][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.500090][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.516215][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.522089][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.527550][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.534579][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.540757][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.546316][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.552102][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.557762][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.563619][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.578234][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.584049][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.589682][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.595542][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.604917][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.612860][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.618360][ T4328] gspca_vc032x: I2c Bus Busy Wait 00 [ 332.624320][ T4328] gspca_vc032x: Unknown sensor... [ 332.630085][ T4328] vc032x: probe of 5-1:0.0 failed with error -22 [ 333.312332][ T6514] loop2: detected capacity change from 0 to 4096 [ 333.488932][ T6514] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 333.582025][ T6514] ntfs3: loop2: Failed to load $Extend. [ 333.612271][ T7] usb 5-1: USB disconnect, device number 49 [ 333.798803][ T6519] input: syz0 as /devices/virtual/input/input48 [ 333.934259][ T6523] input: syz0 as /devices/virtual/input/input49 [ 334.168278][ T4241] usb 1-1: new full-speed USB device number 51 using dummy_hcd [ 334.248137][ T4307] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 334.298096][ T1111] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 334.614001][ T4307] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 334.625974][ T4307] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.639869][ T4307] usb 5-1: config 0 descriptor?? [ 334.690579][ T4241] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 334.703204][ T4241] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.708325][ T1111] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 334.716196][ T4241] usb 1-1: Product: syz [ 334.727251][ T1111] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.727270][ T4241] usb 1-1: Manufacturer: syz [ 334.727289][ T4241] usb 1-1: SerialNumber: syz [ 334.756172][ T4241] usb 1-1: config 0 descriptor?? [ 334.770789][ T1111] usb 3-1: config 0 descriptor?? [ 334.978228][ T4307] [drm] vendor descriptor length:c3 data:30 24 1e 3f bf 86 a9 fa 12 de 31 [ 334.988778][ T4307] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 335.027879][ T4241] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 335.040496][ T4230] gspca_stk1135: reg_w 0x300 err -71 [ 335.054137][ T4230] gspca_stk1135: serial bus timeout: status=0x00 [ 335.061455][ T4230] gspca_stk1135: Sensor write failed [ 335.066807][ T4230] gspca_stk1135: serial bus timeout: status=0x00 [ 335.076029][ T4230] gspca_stk1135: Sensor write failed [ 335.081670][ T4230] gspca_stk1135: serial bus timeout: status=0x00 [ 335.088848][ T4230] gspca_stk1135: Sensor read failed [ 335.094277][ T4230] gspca_stk1135: serial bus timeout: status=0x00 [ 335.100886][ T1111] [drm] vendor descriptor length:c3 data:30 24 1e 3f bf 86 a9 fa 12 de 31 [ 335.109610][ T4230] gspca_stk1135: Sensor read failed [ 335.114876][ T4230] gspca_stk1135: Detected sensor type unknown (0x0) [ 335.121610][ T1111] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 335.129708][ T4230] gspca_stk1135: serial bus timeout: status=0x00 [ 335.136148][ T4230] gspca_stk1135: Sensor read failed [ 335.141467][ T4230] gspca_stk1135: serial bus timeout: status=0x00 [ 335.147806][ T4230] gspca_stk1135: Sensor read failed [ 335.153215][ T4230] gspca_stk1135: serial bus timeout: status=0x00 [ 335.159693][ T4230] gspca_stk1135: Sensor write failed [ 335.164990][ T4230] gspca_stk1135: serial bus timeout: status=0x00 [ 335.171694][ T4230] gspca_stk1135: Sensor write failed [ 335.177082][ T4230] stk1135: probe of 4-1:0.0 failed with error -71 [ 335.185377][ T6519] fuse: Unknown parameter 'use00000000000000000000' [ 335.185764][ T4230] usb 4-1: USB disconnect, device number 50 [ 335.208382][ T4307] [drm:udl_init] *ERROR* Selecting channel failed [ 335.222663][ T4307] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 335.230496][ T4307] [drm] Initialized udl on minor 2 [ 335.248446][ T4307] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 335.257535][ T4307] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 335.267656][ T4307] usb 5-1: USB disconnect, device number 50 [ 335.278359][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 335.287088][ T21] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 335.302316][ T6523] fuse: Unknown parameter 'use00000000000000000000' [ 335.303402][ T21] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 335.320675][ T1111] [drm:udl_init] *ERROR* Selecting channel failed [ 335.324654][ T4328] usb 2-1: new full-speed USB device number 51 using dummy_hcd [ 335.352856][ T1111] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 3 [ 335.360579][ T1111] [drm] Initialized udl on minor 3 [ 335.379130][ T1111] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 335.388074][ T1111] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 335.405209][ T1111] usb 3-1: USB disconnect, device number 41 [ 335.411798][ T1326] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 335.439212][ T1326] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 335.449374][ T1326] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 335.748177][ T21] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 335.848449][ T4328] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 335.867956][ T4328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.890374][ T4328] usb 2-1: Product: syz [ 335.894891][ T4328] usb 2-1: Manufacturer: syz [ 335.903684][ T4328] usb 2-1: SerialNumber: syz [ 335.915789][ T4328] usb 2-1: config 0 descriptor?? [ 335.986845][ T6539] netlink: 'syz.4.603': attribute type 2 has an invalid length. [ 335.997653][ T21] usb 4-1: Using ep0 maxpacket: 8 [ 336.006880][ T6539] netlink: 'syz.4.603': attribute type 8 has an invalid length. [ 336.024573][ T6539] netlink: 132 bytes leftover after parsing attributes in process `syz.4.603'. [ 336.128525][ T21] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 336.178385][ T4328] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 336.198216][ T6544] No such timeout policy "syz1" [ 336.288604][ T21] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 336.308203][ T4187] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 336.328765][ T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.382548][ T21] usb 4-1: Product: syz [ 336.412217][ T21] usb 4-1: Manufacturer: syz [ 336.449117][ T21] usb 4-1: SerialNumber: syz [ 336.542277][ T21] usb 4-1: config 0 descriptor?? [ 336.578681][ T4187] usb 5-1: Using ep0 maxpacket: 16 [ 336.635369][ T21] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 336.698777][ T4187] usb 5-1: config 0 has an invalid interface number: 61 but max is 0 [ 336.717499][ T4187] usb 5-1: config 0 has no interface number 0 [ 336.804788][ T4187] usb 5-1: config 0 interface 61 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 336.968363][ T4187] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 336.977813][ T4187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.985961][ T4187] usb 5-1: Product: syz [ 336.990799][ T4187] usb 5-1: Manufacturer: syz [ 337.007173][ T4187] usb 5-1: SerialNumber: syz [ 337.015033][ T4187] usb 5-1: config 0 descriptor?? [ 337.038525][ T6539] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 337.080386][ T4187] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 337.095860][ T6553] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 337.258331][ T4241] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 337.279999][ T4241] usb 1-1: USB disconnect, device number 51 [ 337.335082][ T6540] udc-core: couldn't find an available UDC or it's busy [ 337.343142][ T6540] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 337.355238][ T4230] usb 5-1: USB disconnect, device number 51 [ 337.361875][ T5394] usb 5-1: Failed to submit usb control message: -71 [ 337.369806][ T5394] usb 5-1: unable to send the bmi data to the device: -71 [ 337.376947][ T5394] usb 5-1: unable to get target info from device [ 337.383524][ T5394] usb 5-1: could not get target info (-71) [ 337.389588][ T5394] usb 5-1: could not probe fw (-71) [ 337.438333][ T4187] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 337.678239][ T4187] usb 3-1: Using ep0 maxpacket: 32 [ 337.798304][ T4187] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 337.807544][ T4187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.825804][ T4187] usb 3-1: config 0 descriptor?? [ 337.873965][ T4187] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 338.088163][ T4187] gspca_vc032x: reg_r err -32 [ 338.093089][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.106588][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.116765][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.126960][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.137126][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.148751][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.158094][ T7] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 338.161816][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.172732][ T4328] usb 2-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 338.193061][ T4328] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 338.226244][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.232106][ T4328] usb 2-1: media controller created [ 338.242685][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.250652][ T4328] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 338.263456][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.269246][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.278281][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.289046][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.298273][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.303611][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.328202][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.338407][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.351330][ T4328] i2c i2c-1: Added multiplexed i2c bus 2 [ 338.361454][ T4187] gspca_vc032x: I2c Bus Busy Wait 00 [ 338.371974][ T4328] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 338.385120][ T4187] gspca_vc032x: Unknown sensor... [ 338.394943][ T4328] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 338.409771][ T4187] vc032x: probe of 3-1:0.0 failed with error -22 [ 338.424637][ T4328] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 338.435248][ T4187] usb 3-1: USB disconnect, device number 42 [ 338.438104][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 338.482609][ T4328] DVB: Unable to find symbol r820t_attach() [ 338.578260][ T7] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 338.585944][ T4328] usb 2-1: USB disconnect, device number 51 [ 338.615058][ T7] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 338.788189][ T21] gspca_zc3xx: reg_r err -32 [ 338.855998][ T7] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 338.871176][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.883974][ T7] usb 1-1: Product: syz [ 338.894245][ T7] usb 1-1: Manufacturer: syz [ 338.899017][ T7] usb 1-1: SerialNumber: syz [ 339.092806][ T6571] fuse: Bad value for 'group_id' [ 339.144307][ T6573] tipc: Enabling of bearer rejected, failed to enable media [ 339.186136][ T6573] device syzkaller0 entered promiscuous mode [ 339.274152][ T1326] usb 1-1: USB disconnect, device number 52 [ 339.510142][ T21] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 339.524664][ T21] gspca_zc3xx: probe of 4-1:0.0 failed with error -32 [ 339.581444][ T4328] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 339.655005][ T6582] netlink: 56 bytes leftover after parsing attributes in process `syz.1.614'. [ 339.848324][ T4328] usb 3-1: Using ep0 maxpacket: 32 [ 339.850982][ T1326] usb 4-1: USB disconnect, device number 51 [ 340.148234][ T4328] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 340.183998][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.213391][ T4328] usb 3-1: Product: syz [ 340.362459][ T4328] usb 3-1: Manufacturer: syz [ 340.367482][ T4328] usb 3-1: SerialNumber: syz [ 340.373520][ T6592] fuse: Bad value for 'user_id' [ 340.408717][ T4328] usb 3-1: config 0 descriptor?? [ 340.477325][ T6594] No such timeout policy "syz1" [ 341.157146][ T4328] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 341.354641][ T6577] binder: 6576:6577 ioctl c018620c 0 returned -14 [ 341.615449][ T4187] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 341.819994][ T6603] loop4: detected capacity change from 0 to 8192 [ 341.998080][ T21] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 342.242793][ T6603] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 342.252501][ T6603] REISERFS (device loop4): using ordered data mode [ 342.259558][ T6603] reiserfs: using flush barriers [ 342.271284][ T6603] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 342.289074][ T6603] REISERFS (device loop4): checking transaction log (loop4) [ 343.142595][ T6603] REISERFS (device loop4): Using tea hash to sort names [ 343.152028][ T6603] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 343.508139][ T4187] usb 4-1: device descriptor read/64, error -71 [ 343.848195][ T4328] gspca_stk1135: reg_w 0x300 err -71 [ 343.854700][ T4328] gspca_stk1135: serial bus timeout: status=0x00 [ 344.002803][ T4328] gspca_stk1135: Sensor write failed [ 344.008623][ T4328] gspca_stk1135: serial bus timeout: status=0x00 [ 344.015095][ T4328] gspca_stk1135: Sensor write failed [ 344.020853][ T4328] gspca_stk1135: serial bus timeout: status=0x00 [ 344.027434][ T4328] gspca_stk1135: Sensor read failed [ 344.032733][ T4328] gspca_stk1135: serial bus timeout: status=0x00 [ 344.039565][ T4328] gspca_stk1135: Sensor read failed [ 344.044781][ T4328] gspca_stk1135: Detected sensor type unknown (0x0) [ 344.051686][ T4328] gspca_stk1135: serial bus timeout: status=0x00 [ 344.058372][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 344.068589][ T4328] gspca_stk1135: Sensor read failed [ 344.078486][ T21] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 344.087919][ T4328] gspca_stk1135: serial bus timeout: status=0x00 [ 344.097245][ T4328] gspca_stk1135: Sensor read failed [ 344.104066][ T4328] gspca_stk1135: serial bus timeout: status=0x00 [ 344.110613][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.120899][ T21] usb 1-1: config 0 descriptor?? [ 344.126003][ T4328] gspca_stk1135: Sensor write failed [ 344.131484][ T4328] gspca_stk1135: serial bus timeout: status=0x00 [ 344.138323][ T4328] gspca_stk1135: Sensor write failed [ 344.143773][ T4328] stk1135: probe of 3-1:0.0 failed with error -71 [ 344.150413][ T4187] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 344.159958][ T4328] usb 3-1: USB disconnect, device number 43 [ 344.167761][ T1326] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 344.169973][ T21] pwc: Askey VC010 type 2 USB webcam detected. [ 344.368240][ T4187] usb 4-1: device descriptor read/64, error -71 [ 344.418195][ T1326] usb 2-1: Using ep0 maxpacket: 32 [ 344.498465][ T4187] usb usb4-port1: attempt power cycle [ 344.538232][ T1326] usb 2-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 344.547352][ T1326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.557642][ T1326] usb 2-1: config 0 descriptor?? [ 344.588255][ T4241] usb 5-1: new full-speed USB device number 52 using dummy_hcd [ 344.599868][ T1326] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 344.608379][ T21] pwc: recv_control_msg error -32 req 02 val 2b00 [ 344.659001][ T21] pwc: recv_control_msg error -32 req 02 val 2700 [ 344.708240][ T21] pwc: recv_control_msg error -32 req 02 val 2c00 [ 344.748375][ T21] pwc: recv_control_msg error -32 req 04 val 1000 [ 344.758425][ T4328] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 344.798422][ T21] pwc: recv_control_msg error -32 req 04 val 1300 [ 344.828280][ T1326] gspca_vc032x: reg_r err -71 [ 344.833030][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.838251][ T21] pwc: recv_control_msg error -32 req 04 val 1400 [ 344.839377][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.850568][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.855966][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.861790][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.867322][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.873101][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.878155][ T21] pwc: recv_control_msg error -32 req 02 val 2000 [ 344.878582][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.890430][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.895859][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.901202][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.906745][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.912269][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.917582][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.918208][ T21] pwc: recv_control_msg error -32 req 02 val 2100 [ 344.923494][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.923512][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.923521][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.923532][ T1326] gspca_vc032x: I2c Bus Busy Wait 00 [ 344.923541][ T1326] gspca_vc032x: Unknown sensor... [ 344.923591][ T1326] vc032x: probe of 2-1:0.0 failed with error -22 [ 344.934019][ T1326] usb 2-1: USB disconnect, device number 52 [ 344.937119][ T4187] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 345.018700][ T21] pwc: recv_control_msg error -32 req 04 val 1500 [ 345.058406][ T21] pwc: recv_control_msg error -32 req 02 val 2500 [ 345.068850][ T4187] usb 4-1: Using ep0 maxpacket: 8 [ 345.098445][ T21] pwc: recv_control_msg error -32 req 02 val 2400 [ 345.138227][ T4241] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 345.147499][ T21] pwc: recv_control_msg error -32 req 02 val 2600 [ 345.154663][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.163691][ T4241] usb 5-1: Product: syz [ 345.168776][ T4241] usb 5-1: Manufacturer: syz [ 345.173526][ T4241] usb 5-1: SerialNumber: syz [ 345.182925][ T4241] usb 5-1: config 0 descriptor?? [ 345.188432][ T4187] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 345.198263][ T21] pwc: recv_control_msg error -32 req 02 val 2900 [ 345.308437][ T4328] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 345.318298][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.326731][ T4328] usb 3-1: Product: syz [ 345.332794][ T4328] usb 3-1: Manufacturer: syz [ 345.337832][ T4328] usb 3-1: SerialNumber: syz [ 345.358345][ T4187] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 345.367853][ T4187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.377225][ T4328] usb 3-1: config 0 descriptor?? [ 345.382796][ T4187] usb 4-1: Product: syz [ 345.387060][ T4187] usb 4-1: Manufacturer: syz [ 345.391783][ T4187] usb 4-1: SerialNumber: syz [ 345.398179][ T4187] usb 4-1: config 0 descriptor?? [ 345.440363][ T4187] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 345.449422][ T4241] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 345.458203][ T21] pwc: recv_control_msg error -71 req 04 val 1100 [ 345.478268][ T21] pwc: recv_control_msg error -71 req 04 val 1200 [ 345.487712][ T21] pwc: Registered as video103. [ 345.494777][ T21] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input50 [ 345.535985][ T21] usb 1-1: USB disconnect, device number 53 [ 345.638388][ T4328] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 346.208216][ T21] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 346.568601][ T21] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 346.576772][ T21] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.590209][ T21] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 346.600040][ T21] usb 2-1: config 1 has no interface number 1 [ 346.606127][ T21] usb 2-1: config 1 interface 5 has no altsetting 0 [ 346.708533][ T21] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 346.717791][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 346.726020][ T21] usb 2-1: SerialNumber: syz [ 347.012835][ T21] usb 2-1: 0:2 : does not exist [ 347.017897][ T21] usb 2-1: unit 5 not found! [ 347.071213][ T21] usb 2-1: USB disconnect, device number 53 [ 347.299374][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 347.410325][ T4241] usb 5-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 347.420086][ T4241] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 347.427910][ T4241] usb 5-1: media controller created [ 347.434414][ T4241] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 347.466932][ T4241] i2c i2c-1: Added multiplexed i2c bus 2 [ 347.472793][ T4241] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 347.482281][ T4241] usb 5-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 347.491371][ T4241] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 347.526909][ T4241] DVB: Unable to find symbol r820t_attach() [ 347.598191][ T4187] gspca_zc3xx: reg_r err -32 [ 347.628238][ T4328] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 347.896438][ T6629] loop1: detected capacity change from 0 to 8192 [ 348.063606][ T6629] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 348.073905][ T6629] REISERFS (device loop1): using ordered data mode [ 348.080694][ T6629] reiserfs: using flush barriers [ 348.090229][ T6629] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 348.108557][ T6629] REISERFS (device loop1): checking transaction log (loop1) [ 348.449863][ T6629] REISERFS (device loop1): Using tea hash to sort names [ 348.458430][ T6629] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 349.778093][ T4187] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 349.947540][ T4328] usb 3-1: USB disconnect, device number 44 [ 349.955021][ T4187] gspca_zc3xx: probe of 4-1:0.0 failed with error -32 [ 349.971940][ T4241] usb 5-1: USB disconnect, device number 52 [ 350.009359][ T4187] usb 4-1: USB disconnect, device number 54 [ 350.158096][ T4238] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 350.448201][ T4187] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 350.528316][ T4238] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.544133][ T4238] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 350.554980][ T4238] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.571530][ T4238] usb 1-1: config 0 descriptor?? [ 350.600599][ T4238] usb 1-1: can't set config #0, error -71 [ 350.620619][ T4238] usb 1-1: USB disconnect, device number 54 [ 350.778095][ T4241] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 350.848181][ T4187] usb 4-1: config 0 has an invalid interface number: 87 but max is 0 [ 351.049474][ T6652] loop0: detected capacity change from 0 to 8192 [ 351.466902][ T6652] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 351.477005][ T6652] REISERFS (device loop0): using ordered data mode [ 351.483873][ T6652] reiserfs: using flush barriers [ 351.493824][ T6652] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 351.511499][ T6652] REISERFS (device loop0): checking transaction log (loop0) [ 352.463462][ T6652] REISERFS (device loop0): Using tea hash to sort names [ 352.473304][ T6652] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 352.598289][ T4237] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 352.693296][ T4187] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.838130][ T4241] usb 2-1: Using ep0 maxpacket: 8 [ 352.868186][ T4237] usb 5-1: Using ep0 maxpacket: 32 [ 353.148633][ T4237] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 353.200668][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.297649][ T4237] usb 5-1: Product: syz [ 353.322514][ T4187] usb 4-1: config 0 has no interface number 0 [ 353.328997][ T4187] usb 4-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 353.340750][ T4187] usb 4-1: config 0 interface 87 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 204 [ 353.354619][ T4187] usb 4-1: config 0 interface 87 has no altsetting 0 [ 353.405374][ T4241] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 354.277695][ T4237] usb 5-1: Manufacturer: syz [ 354.282825][ T4237] usb 5-1: SerialNumber: syz [ 354.308094][ T4237] usb 5-1: config 0 descriptor?? [ 354.360313][ T4237] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 354.378199][ T4187] usb 4-1: string descriptor 0 read error: -71 [ 354.384493][ T4187] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 354.393906][ T4241] usb 2-1: string descriptor 0 read error: -71 [ 354.401414][ T4241] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 354.426252][ T4241] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.435143][ T4187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.454738][ T4241] usb 2-1: config 0 descriptor?? [ 354.469154][ T4187] usb 4-1: config 0 descriptor?? [ 354.488299][ T4187] usb 4-1: can't set config #0, error -71 [ 354.495827][ T4241] usb 2-1: can't set config #0, error -71 [ 354.669209][ T4187] usb 4-1: USB disconnect, device number 55 [ 354.678768][ T4241] usb 2-1: USB disconnect, device number 54 [ 354.960389][ T6655] binder: 6654:6655 ioctl c018620c 0 returned -14 [ 355.311067][ T4237] gspca_stk1135: reg_w 0x2 err -110 [ 355.317483][ T4237] gspca_stk1135: serial bus timeout: status=0x00 [ 355.324529][ T4237] gspca_stk1135: Sensor write failed [ 355.329916][ T4237] gspca_stk1135: serial bus timeout: status=0x00 [ 355.336572][ T4237] gspca_stk1135: Sensor write failed [ 355.341937][ T4237] gspca_stk1135: serial bus timeout: status=0x00 [ 355.348537][ T4237] gspca_stk1135: Sensor read failed [ 355.353777][ T4237] gspca_stk1135: serial bus timeout: status=0x00 [ 355.360457][ T4237] gspca_stk1135: Sensor read failed [ 355.365974][ T4237] gspca_stk1135: Detected sensor type unknown (0x0) [ 355.389472][ T4237] gspca_stk1135: serial bus timeout: status=0x00 [ 355.395861][ T4237] gspca_stk1135: Sensor read failed [ 355.412125][ T4237] gspca_stk1135: serial bus timeout: status=0x00 [ 355.428070][ T4237] gspca_stk1135: Sensor read failed [ 355.453701][ T4237] gspca_stk1135: serial bus timeout: status=0x00 [ 355.463319][ T4237] gspca_stk1135: Sensor write failed [ 355.481111][ T4237] gspca_stk1135: serial bus timeout: status=0x00 [ 355.491207][ T4237] gspca_stk1135: Sensor write failed [ 355.511557][ T4237] stk1135: probe of 5-1:0.0 failed with error -110 [ 355.818306][ T1111] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 355.888178][ T7] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 356.078240][ T1111] usb 2-1: Using ep0 maxpacket: 8 [ 356.138189][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 356.762452][ T4238] usb 5-1: USB disconnect, device number 53 [ 356.955342][ T1111] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 357.138374][ T1111] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 357.147609][ T7] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 357.169290][ T7] usb 3-1: can't read configurations, error -71 [ 357.189740][ T1111] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.228838][ T6694] loop2: detected capacity change from 0 to 8192 [ 357.248162][ T1111] usb 2-1: Product: syz [ 357.252393][ T1111] usb 2-1: Manufacturer: syz [ 357.257027][ T1111] usb 2-1: SerialNumber: syz [ 357.308214][ T4328] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 357.355823][ T6694] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 357.365413][ T6694] REISERFS (device loop2): using ordered data mode [ 357.372324][ T6694] reiserfs: using flush barriers [ 357.381502][ T6694] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 357.397937][ T6694] REISERFS (device loop2): checking transaction log (loop2) [ 357.483965][ T1111] usb 2-1: config 0 descriptor?? [ 357.630143][ T1111] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 357.799177][ T6699] loop4: detected capacity change from 0 to 8192 [ 357.995678][ T6694] REISERFS (device loop2): Using tea hash to sort names [ 358.003339][ T6694] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 358.581674][ T6699] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 358.591420][ T6699] REISERFS (device loop4): using ordered data mode [ 358.598374][ T6699] reiserfs: using flush barriers [ 358.808847][ T6699] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 358.826651][ T6699] REISERFS (device loop4): checking transaction log (loop4) [ 359.130461][ T6699] REISERFS (device loop4): Using tea hash to sort names [ 359.139228][ T6699] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 359.298299][ T4230] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 359.668768][ T4328] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.678212][ T4230] usb 1-1: config 0 has an invalid interface number: 87 but max is 0 [ 359.701436][ T4230] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 359.778586][ T1111] gspca_zc3xx: reg_r err -32 [ 359.794182][ T4230] usb 1-1: config 0 has no interface number 0 [ 359.844409][ T4230] usb 1-1: too many endpoints for config 0 interface 87 altsetting 28: 204, using maximum allowed: 30 [ 359.892757][ T4328] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 359.902366][ T4328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.913020][ T4328] usb 4-1: config 0 descriptor?? [ 359.927477][ T4230] usb 1-1: config 0 interface 87 altsetting 28 has 0 endpoint descriptors, different from the interface descriptor's value: 204 [ 359.970501][ T4328] pwc: Askey VC010 type 2 USB webcam detected. [ 359.972168][ T4230] usb 1-1: config 0 interface 87 has no altsetting 0 [ 360.093190][ T4328] pwc: send_video_command error -71 [ 360.098716][ T4328] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 360.112623][ T4328] Philips webcam: probe of 4-1:0.0 failed with error -71 [ 360.141196][ T4230] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=8c.f4 [ 360.159457][ T4328] usb 4-1: USB disconnect, device number 56 [ 360.175972][ T4230] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.230851][ T4230] usb 1-1: Product: syz [ 360.246297][ T4230] usb 1-1: Manufacturer: syz [ 360.298119][ T4230] usb 1-1: SerialNumber: syz [ 360.398380][ T1111] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 360.413476][ T1111] gspca_zc3xx: probe of 2-1:0.0 failed with error -32 [ 360.436400][ T4230] usb 1-1: config 0 descriptor?? [ 360.539102][ T4238] usb 2-1: USB disconnect, device number 55 [ 360.548119][ T4328] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 360.629891][ T4230] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 360.848536][ T4328] usb 4-1: Using ep0 maxpacket: 8 [ 360.968882][ T4328] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 361.209074][ T4328] usb 4-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 361.247774][ T4328] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.338288][ T4328] usb 4-1: Product: syz [ 361.376097][ T4328] usb 4-1: Manufacturer: syz [ 361.425810][ T4328] usb 4-1: SerialNumber: syz [ 361.486976][ T4328] usb 4-1: config 0 descriptor?? [ 361.558860][ T4383] usb 1-1: Failed to submit usb control message: -71 [ 361.575723][ T4383] usb 1-1: unable to send the bmi data to the device: -71 [ 361.597145][ T4328] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 361.663194][ T4383] usb 1-1: unable to get target info from device [ 361.688575][ T21] usb 1-1: USB disconnect, device number 55 [ 361.773213][ T4383] usb 1-1: could not get target info (-71) [ 361.861781][ T4383] usb 1-1: could not probe fw (-71) [ 361.959125][ T6727] loop4: detected capacity change from 0 to 8192 [ 362.171312][ T6727] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 362.181562][ T6727] REISERFS (device loop4): using ordered data mode [ 362.188348][ T6727] reiserfs: using flush barriers [ 362.198779][ T6727] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 362.218638][ T6727] REISERFS (device loop4): checking transaction log (loop4) [ 362.258391][ T23] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 362.528711][ T23] usb 2-1: Using ep0 maxpacket: 32 [ 362.613790][ T6727] REISERFS (device loop4): Using tea hash to sort names [ 362.622496][ T6727] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 362.819276][ T23] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 362.896218][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.995212][ T23] usb 2-1: Product: syz [ 363.041828][ T23] usb 2-1: Manufacturer: syz [ 363.095190][ T23] usb 2-1: SerialNumber: syz [ 363.208284][ T23] usb 2-1: config 0 descriptor?? [ 363.308747][ T23] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 363.543868][ T6728] binder: 6725:6728 ioctl c018620c 0 returned -14 [ 363.838180][ T4328] gspca_zc3xx: reg_r err -32 [ 364.468186][ T4328] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 364.482637][ T4328] gspca_zc3xx: probe of 4-1:0.0 failed with error -32 [ 364.826016][ T1111] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 364.883969][ T4328] usb 4-1: USB disconnect, device number 57 [ 364.899540][ T4230] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 365.168110][ T4230] usb 1-1: Using ep0 maxpacket: 16 [ 365.327202][ T6747] loop4: detected capacity change from 0 to 8192 [ 365.533735][ T6747] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 365.544495][ T6747] REISERFS (device loop4): using ordered data mode [ 365.551463][ T6747] reiserfs: using flush barriers [ 365.563900][ T6747] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 365.581685][ T6747] REISERFS (device loop4): checking transaction log (loop4) [ 366.068399][ T23] gspca_stk1135: reg_w 0x300 err -71 [ 366.075560][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 366.411013][ T23] gspca_stk1135: Sensor write failed [ 367.959214][ T6752] loop3: detected capacity change from 0 to 8192 [ 368.488126][ T6752] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 368.498358][ T6752] REISERFS (device loop3): using ordered data mode [ 368.505097][ T6752] reiserfs: using flush barriers [ 368.516370][ T6752] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 368.535176][ T6752] REISERFS (device loop3): checking transaction log (loop3) [ 368.848524][ T6747] REISERFS (device loop4): Using tea hash to sort names [ 368.952393][ T6747] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 369.070724][ T6752] REISERFS (device loop3): Using tea hash to sort names [ 369.079337][ T6752] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 369.178115][ T4237] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 369.214857][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 369.745461][ T23] gspca_stk1135: Sensor write failed [ 369.750916][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 369.757533][ T23] gspca_stk1135: Sensor read failed [ 369.762873][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 369.770307][ T23] gspca_stk1135: Sensor read failed [ 369.775893][ T23] gspca_stk1135: Detected sensor type unknown (0x0) [ 369.782680][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 369.789491][ T23] gspca_stk1135: Sensor read failed [ 369.794731][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 369.805962][ T23] gspca_stk1135: Sensor read failed [ 369.808227][ T4230] usb 1-1: device descriptor read/all, error -71 [ 369.811361][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 369.818141][ T4237] usb 3-1: device descriptor read/all, error -71 [ 369.824258][ T23] gspca_stk1135: Sensor write failed [ 369.840262][ T23] gspca_stk1135: serial bus timeout: status=0x00 [ 369.846646][ T23] gspca_stk1135: Sensor write failed [ 369.852221][ T23] stk1135: probe of 2-1:0.0 failed with error -71 [ 369.864575][ T23] usb 2-1: USB disconnect, device number 56 [ 369.891881][ T6761] loop0: detected capacity change from 0 to 16 [ 370.184096][ T6761] erofs: (device loop0): mounted with root inode @ nid 36. [ 370.238279][ T23] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 370.299455][ T6763] loop2: detected capacity change from 0 to 8192 [ 370.462136][ T6763] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 370.471862][ T6763] REISERFS (device loop2): using ordered data mode [ 370.478760][ T6763] reiserfs: using flush barriers [ 370.488868][ T6763] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 370.505235][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 370.512025][ T6763] REISERFS (device loop2): checking transaction log (loop2) [ 370.628361][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 371.272743][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 371.519692][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.236095][ T6763] REISERFS (device loop2): Using tea hash to sort names [ 372.246333][ T6763] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 372.288980][ T23] usb 2-1: Product: syz [ 372.788323][ T23] usb 2-1: Manufacturer: syz [ 372.836276][ T23] usb 2-1: SerialNumber: syz [ 372.870035][ T6770] erofs: (device loop0): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 8 of nid 36 [ 372.969164][ T23] usb 2-1: config 0 descriptor?? [ 373.285158][ T23] usb 2-1: can't set config #0, error -71 [ 373.315620][ T23] usb 2-1: USB disconnect, device number 57 [ 373.695617][ T6782] loop3: detected capacity change from 0 to 8192 [ 376.119028][ T6787] loop0: detected capacity change from 0 to 8192 [ 376.457290][ T6787] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 376.467500][ T6787] REISERFS (device loop0): using ordered data mode [ 376.474271][ T6787] reiserfs: using flush barriers [ 376.484362][ T6787] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 376.502169][ T6787] REISERFS (device loop0): checking transaction log (loop0) [ 377.748289][ T6787] REISERFS (device loop0): Using tea hash to sort names [ 377.757020][ T6787] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 378.681116][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.689448][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.700926][ T6782] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 378.710611][ T6782] REISERFS (device loop3): using ordered data mode [ 378.718989][ T6782] reiserfs: using flush barriers [ 378.728155][ T1111] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 378.739909][ T6782] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 378.762116][ T6782] REISERFS (device loop3): checking transaction log (loop3) [ 378.988217][ T1111] usb 3-1: Using ep0 maxpacket: 8 [ 379.078334][ T6116] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 379.111282][ T1111] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 379.288360][ T1111] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 379.318087][ T1111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.341882][ T1111] usb 3-1: Product: syz [ 379.355498][ T1111] usb 3-1: Manufacturer: syz [ 379.380890][ T1111] usb 3-1: SerialNumber: syz [ 379.402393][ T6782] REISERFS (device loop3): Using tea hash to sort names [ 379.421870][ T1111] usb 3-1: config 0 descriptor?? [ 379.437381][ T6782] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 379.463484][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 379.471018][ T6116] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.471073][ T6116] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 379.493364][ T1111] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 379.534923][ T6116] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.569350][ T6116] usb 2-1: config 0 descriptor?? [ 379.719205][ T6116] pwc: Askey VC010 type 2 USB webcam detected. [ 379.767734][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 379.776531][ T6800] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 380.262643][ T6809] loop3: detected capacity change from 0 to 8192 [ 380.330815][ T6116] pwc: recv_control_msg error -32 req 02 val 2b00 [ 380.698324][ T1111] gspca_zc3xx: reg_w_i err -110 [ 382.219941][ T6809] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 382.238177][ T6116] pwc: recv_control_msg error -71 req 02 val 2700 [ 382.288288][ T6116] pwc: recv_control_msg error -71 req 02 val 2c00 [ 382.352285][ T6817] netlink: 56 bytes leftover after parsing attributes in process `syz.0.677'. [ 382.369361][ T6116] pwc: recv_control_msg error -71 req 04 val 1000 [ 382.532245][ T6809] REISERFS (device loop3): using ordered data mode [ 382.567026][ T6116] pwc: recv_control_msg error -71 req 04 val 1300 [ 382.668453][ T1111] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 382.674898][ T1111] gspca_zc3xx: probe of 3-1:0.0 failed with error -110 [ 382.682362][ T6116] pwc: recv_control_msg error -71 req 04 val 1400 [ 382.751156][ T6116] pwc: recv_control_msg error -71 req 02 val 2000 [ 383.341811][ T6809] reiserfs: using flush barriers [ 383.356536][ T21] usb 3-1: USB disconnect, device number 50 [ 383.362076][ T6116] pwc: recv_control_msg error -71 req 02 val 2100 [ 383.368126][ T6809] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 383.404188][ T6116] pwc: recv_control_msg error -71 req 04 val 1500 [ 383.468163][ T6116] pwc: recv_control_msg error -71 req 02 val 2500 [ 383.490736][ T6116] pwc: recv_control_msg error -71 req 02 val 2400 [ 383.506740][ T6809] REISERFS (device loop3): checking transaction log (loop3) [ 383.519875][ T6116] pwc: recv_control_msg error -71 req 02 val 2600 [ 383.549553][ T6116] pwc: recv_control_msg error -71 req 02 val 2900 [ 383.648371][ T6116] pwc: recv_control_msg error -71 req 02 val 2800 [ 383.699201][ T6116] pwc: recv_control_msg error -71 req 04 val 1100 [ 383.706051][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 384.738864][ T6116] pwc: recv_control_msg error -71 req 04 val 1200 [ 384.749183][ T6116] pwc: Registered as video103. [ 384.750651][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 384.755689][ T6116] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input51 [ 384.799621][ T6116] usb 2-1: USB disconnect, device number 58 [ 384.812324][ T6821] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 384.869397][ T6809] REISERFS (device loop3): Using tea hash to sort names [ 384.923288][ T6809] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 386.502064][ T6837] loop0: detected capacity change from 0 to 8192 [ 387.508289][ T6837] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 387.518129][ T6837] REISERFS (device loop0): using ordered data mode [ 387.524748][ T6837] reiserfs: using flush barriers [ 387.535939][ T6837] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 387.554055][ T6837] REISERFS (device loop0): checking transaction log (loop0) [ 388.004465][ T6837] REISERFS (device loop0): Using tea hash to sort names [ 388.014100][ T6837] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 389.758351][ T6850] loop4: detected capacity change from 0 to 8192 [ 390.731619][ T6850] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 390.741287][ T6850] REISERFS (device loop4): using ordered data mode [ 390.748125][ T6850] reiserfs: using flush barriers [ 390.759423][ T6850] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 390.777595][ T6850] REISERFS (device loop4): checking transaction log (loop4) [ 391.668077][ T4237] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 392.168300][ T4237] usb 2-1: Using ep0 maxpacket: 32 [ 392.189517][ T6850] REISERFS (device loop4): Using tea hash to sort names [ 392.199038][ T6850] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 392.308434][ T4237] usb 2-1: config 0 has no interfaces? [ 392.389048][ T4237] usb 2-1: config 0 has no interfaces? [ 392.708645][ T4237] usb 2-1: string descriptor 0 read error: -71 [ 392.720885][ T4237] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 392.798277][ T4230] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 392.859902][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.013985][ T4237] usb 2-1: config 0 descriptor?? [ 393.088641][ T4237] usb 2-1: can't set config #0, error -71 [ 393.105558][ T6859] fuse: Unknown parameter '00000000000000000000004' [ 393.151208][ T4237] usb 2-1: USB disconnect, device number 59 [ 393.190297][ T4230] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.241989][ T4230] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 393.303296][ T4230] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.345431][ T4230] usb 4-1: config 0 descriptor?? [ 393.415381][ T4230] pwc: Askey VC010 type 2 USB webcam detected. [ 393.545635][ T6862] tipc: Enabled bearer , priority 0 [ 393.554109][ T6862] device syzkaller0 entered promiscuous mode [ 393.621476][ T6862] tipc: Resetting bearer [ 393.644871][ T6861] tipc: Resetting bearer [ 393.660963][ T6861] tipc: Disabling bearer [ 393.848125][ T4230] pwc: recv_control_msg error -32 req 02 val 2b00 [ 393.888179][ T4328] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 394.060926][ T6869] loop2: detected capacity change from 0 to 8192 [ 394.178143][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 394.212603][ T6869] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 394.222472][ T6869] REISERFS (device loop2): using ordered data mode [ 394.229160][ T6869] reiserfs: using flush barriers [ 394.240799][ T6869] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 394.258942][ T6869] REISERFS (device loop2): checking transaction log (loop2) [ 394.368249][ T4328] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 394.634624][ T6869] REISERFS (device loop2): Using tea hash to sort names [ 394.643117][ T6869] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 394.668565][ T4328] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 394.714345][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.849286][ T4328] usb 1-1: Product: syz [ 394.911975][ T4328] usb 1-1: Manufacturer: syz [ 394.985250][ T4328] usb 1-1: SerialNumber: syz [ 395.099302][ T4328] usb 1-1: config 0 descriptor?? [ 395.192849][ T4230] pwc: recv_control_msg error -32 req 02 val 2700 [ 395.264452][ T4328] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 395.338171][ T23] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 395.472392][ T6876] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 395.628258][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 395.658262][ T4230] pwc: recv_control_msg error -71 req 02 val 2c00 [ 395.685532][ T4230] pwc: recv_control_msg error -71 req 04 val 1000 [ 395.715024][ T4230] pwc: recv_control_msg error -71 req 04 val 1300 [ 395.745515][ T6881] loop4: detected capacity change from 0 to 16 [ 395.751906][ T4230] pwc: recv_control_msg error -71 req 04 val 1400 [ 395.768182][ T4230] pwc: recv_control_msg error -71 req 02 val 2000 [ 395.768542][ T23] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 395.808128][ T4230] pwc: recv_control_msg error -71 req 02 val 2100 [ 395.843444][ T4230] pwc: recv_control_msg error -71 req 04 val 1500 [ 395.878602][ T6881] erofs: (device loop4): mounted with root inode @ nid 36. [ 395.948512][ T4230] pwc: recv_control_msg error -71 req 02 val 2500 [ 395.958209][ T23] usb 2-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 395.967712][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.207337][ T6883] loop3: detected capacity change from 0 to 8192 [ 396.408147][ T4328] gspca_zc3xx: reg_w_i err -110 [ 396.608310][ T4230] pwc: recv_control_msg error -71 req 02 val 2400 [ 396.638260][ T4230] pwc: recv_control_msg error -71 req 02 val 2600 [ 396.674856][ T6886] erofs: (device loop4): z_erofs_get_extent_decompressedlen: unknown type 3 @ lcn 8 of nid 36 [ 396.691553][ T6883] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 396.701563][ T6883] REISERFS (device loop3): using ordered data mode [ 396.708270][ T6883] reiserfs: using flush barriers [ 396.718759][ T6883] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 396.737073][ T6883] REISERFS (device loop3): checking transaction log (loop3) [ 396.779335][ T4230] pwc: recv_control_msg error -71 req 02 val 2900 [ 397.148275][ T4230] pwc: recv_control_msg error -71 req 02 val 2800 [ 397.289543][ T4230] pwc: recv_control_msg error -71 req 04 val 1100 [ 397.438343][ T4230] pwc: recv_control_msg error -71 req 04 val 1200 [ 397.473426][ T6883] REISERFS (device loop3): Using tea hash to sort names [ 397.483080][ T6883] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 397.558068][ T4328] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 397.564628][ T4328] gspca_zc3xx: probe of 1-1:0.0 failed with error -110 [ 397.613209][ T4230] pwc: Registered as video103. [ 397.765191][ T4230] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 398.318896][ T23] usb 2-1: Product: syz [ 398.323212][ T23] usb 2-1: Manufacturer: syz [ 398.327930][ T23] usb 2-1: SerialNumber: syz [ 398.431931][ T4328] usb 1-1: USB disconnect, device number 58 [ 398.443016][ T23] usb 2-1: config 0 descriptor?? [ 398.468872][ T23] usb 2-1: can't set config #0, error -71 [ 398.950912][ T23] usb 2-1: USB disconnect, device number 60 [ 398.966162][ T4230] usb 4-1: USB disconnect, device number 58 [ 399.141466][ T6903] loop4: detected capacity change from 0 to 8192 [ 399.257327][ T6896] loop1: detected capacity change from 0 to 8192 [ 399.264053][ T13] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 399.275578][ T6903] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 399.284865][ T6903] REISERFS (device loop4): using ordered data mode [ 399.291441][ T6903] reiserfs: using flush barriers [ 399.301672][ T6903] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 399.318427][ T6903] REISERFS (device loop4): checking transaction log (loop4) [ 399.389055][ T6896] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 399.398799][ T6896] REISERFS (device loop1): using ordered data mode [ 399.405303][ T6896] reiserfs: using flush barriers [ 399.412776][ T6896] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 399.429753][ T6896] REISERFS (device loop1): checking transaction log (loop1) [ 399.458327][ T4328] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 399.558133][ T13] usb 3-1: Using ep0 maxpacket: 32 [ 399.718420][ T13] usb 3-1: config 0 has no interfaces? [ 399.798702][ T13] usb 3-1: config 0 has no interfaces? [ 399.947691][ T6903] REISERFS (device loop4): Using tea hash to sort names [ 399.955025][ T6903] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 400.049194][ T13] usb 3-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 400.136237][ T6911] loop3: detected capacity change from 0 to 8192 [ 400.229725][ T4328] usb 1-1: Using ep0 maxpacket: 8 [ 400.611424][ T6911] REISERFS (device loop3): found reiserfs format "3.6" with non-standard journal [ 400.621816][ T6911] REISERFS (device loop3): using ordered data mode [ 400.628755][ T6911] reiserfs: using flush barriers [ 400.638797][ T6911] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 400.656717][ T6911] REISERFS (device loop3): checking transaction log (loop3) [ 400.802381][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.155326][ T6896] REISERFS (device loop1): Using tea hash to sort names [ 401.162801][ T6896] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 401.188374][ T4328] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 401.273381][ T13] usb 3-1: Product: syz [ 401.350028][ T13] usb 3-1: Manufacturer: syz [ 401.440644][ T13] usb 3-1: SerialNumber: syz [ 401.644431][ T13] usb 3-1: config 0 descriptor?? [ 401.684081][ T6911] REISERFS (device loop3): Using tea hash to sort names [ 401.693049][ T6911] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage. [ 402.298297][ T13] usb 3-1: can't set config #0, error -71 [ 402.346297][ T13] usb 3-1: USB disconnect, device number 51 [ 402.708265][ T4328] usb 1-1: string descriptor 0 read error: -71 [ 402.714595][ T4328] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 402.733220][ T4328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.744349][ T4328] usb 1-1: config 0 descriptor?? [ 402.769266][ T4328] usb 1-1: can't set config #0, error -71 [ 402.778319][ T4328] usb 1-1: USB disconnect, device number 59 [ 403.161235][ T6926] loop2: detected capacity change from 0 to 8192 [ 405.133730][ T6929] netlink: 36 bytes leftover after parsing attributes in process `syz.0.708'. [ 405.514927][ T6926] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 405.612214][ T6924] loop1: detected capacity change from 0 to 8192 [ 405.974365][ T6924] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 405.984283][ T6924] REISERFS (device loop1): using ordered data mode [ 405.991286][ T6924] reiserfs: using flush barriers [ 406.004031][ T6924] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 406.022453][ T6924] REISERFS (device loop1): checking transaction log (loop1) [ 406.520657][ T6926] REISERFS (device loop2): using ordered data mode [ 406.527478][ T6926] reiserfs: using flush barriers [ 406.892113][ T6926] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 407.197414][ T6924] REISERFS (device loop1): Using tea hash to sort names [ 407.206142][ T6924] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 407.492003][ T6926] REISERFS (device loop2): checking transaction log (loop2) [ 408.168119][ T13] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 408.368902][ T6926] REISERFS (device loop2): Using tea hash to sort names [ 408.389292][ T6926] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 408.548266][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 408.600195][ T13] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 408.658343][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.719908][ T13] usb 4-1: config 0 descriptor?? [ 408.881279][ T13] pwc: Askey VC010 type 2 USB webcam detected. [ 409.028112][ T4328] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 409.298067][ T4328] usb 3-1: Using ep0 maxpacket: 8 [ 409.318273][ T13] pwc: recv_control_msg error -32 req 02 val 2b00 [ 409.479486][ T6954] loop0: detected capacity change from 0 to 8192 [ 410.519285][ T13] pwc: recv_control_msg error -32 req 02 val 2700 [ 410.528394][ T4328] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 410.588355][ T13] pwc: recv_control_msg error -32 req 02 val 2c00 [ 410.638604][ T13] pwc: recv_control_msg error -32 req 04 val 1000 [ 410.708788][ T13] pwc: recv_control_msg error -32 req 04 val 1300 [ 410.778465][ T13] pwc: recv_control_msg error -32 req 04 val 1400 [ 410.848626][ T13] pwc: recv_control_msg error -32 req 02 val 2000 [ 410.959224][ T13] pwc: recv_control_msg error -32 req 02 val 2100 [ 411.028636][ T13] pwc: recv_control_msg error -32 req 04 val 1500 [ 411.074141][ T13] pwc: recv_control_msg error -32 req 02 val 2500 [ 411.158748][ T13] pwc: recv_control_msg error -32 req 02 val 2400 [ 411.208558][ T13] pwc: recv_control_msg error -32 req 02 val 2600 [ 411.208619][ T4237] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 411.258471][ T13] pwc: recv_control_msg error -32 req 02 val 2900 [ 411.498144][ T4237] usb 5-1: Using ep0 maxpacket: 32 [ 411.539028][ T13] pwc: recv_control_msg error -71 req 04 val 1100 [ 411.587190][ T13] pwc: recv_control_msg error -71 req 04 val 1200 [ 411.638459][ T4237] usb 5-1: config 0 has no interfaces? [ 411.712023][ T13] pwc: Registered as video103. [ 411.738792][ T4237] usb 5-1: config 0 has no interfaces? [ 411.813896][ T13] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input53 [ 411.918456][ T4237] usb 5-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 411.968122][ T4328] usb 3-1: string descriptor 0 read error: -71 [ 411.974550][ T4328] usb 3-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 411.977539][ T13] usb 4-1: USB disconnect, device number 59 [ 411.995973][ T4328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.006393][ T4328] usb 3-1: config 0 descriptor?? [ 412.011115][ T4237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.028178][ T4328] usb 3-1: can't set config #0, error -71 [ 412.034601][ T6954] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 412.038468][ T4328] usb 3-1: USB disconnect, device number 52 [ 412.132894][ T6954] REISERFS (device loop0): using ordered data mode [ 412.156346][ T4237] usb 5-1: Product: syz [ 412.200427][ T6962] input: syz0 as /devices/virtual/input/input54 [ 412.207283][ T6954] reiserfs: using flush barriers [ 412.212523][ T4237] usb 5-1: Manufacturer: syz [ 412.212548][ T4237] usb 5-1: SerialNumber: syz [ 412.222751][ T4237] usb 5-1: config 0 descriptor?? [ 412.318990][ T6965] input: syz0 as /devices/virtual/input/input55 [ 412.337191][ T6954] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 412.436734][ T6954] REISERFS (device loop0): checking transaction log (loop0) [ 412.496024][ T6965] fuse: Unknown parameter 'use00000000000000000000' [ 412.512202][ T4237] usb 5-1: USB disconnect, device number 54 [ 412.698092][ T21] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 412.876092][ T6954] REISERFS (device loop0): Using tea hash to sort names [ 412.893862][ T6954] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 412.948124][ T21] usb 3-1: device descriptor read/64, error -71 [ 413.101667][ T6978] netlink: 36 bytes leftover after parsing attributes in process `syz.1.720'. [ 414.557961][ C1] sched: RT throttling activated [ 414.558027][ T21] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 414.848047][ T21] usb 3-1: device descriptor read/64, error -71 [ 414.988296][ T21] usb usb3-port1: attempt power cycle [ 416.408084][ T21] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 416.525189][ T7006] loop0: detected capacity change from 0 to 8192 [ 417.597619][ T7006] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 417.607420][ T7006] REISERFS (device loop0): using ordered data mode [ 417.614511][ T7006] reiserfs: using flush barriers [ 417.628222][ T7006] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 417.646248][ T7006] REISERFS (device loop0): checking transaction log (loop0) [ 417.814389][ T6981] netlink: 56 bytes leftover after parsing attributes in process `syz.1.722'. [ 418.123590][ T21] usb 3-1: Using ep0 maxpacket: 8 [ 418.668119][ T21] usb 3-1: device descriptor read/all, error -71 [ 419.220837][ T7019] loop2: detected capacity change from 0 to 8192 [ 420.329206][ T7019] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 420.341829][ T7019] REISERFS (device loop2): using ordered data mode [ 420.348614][ T7019] reiserfs: using flush barriers [ 420.359414][ T7019] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 420.377642][ T7019] REISERFS (device loop2): checking transaction log (loop2) [ 421.121140][ T7006] REISERFS (device loop0): Using tea hash to sort names [ 421.140725][ T7019] REISERFS (device loop2): Using tea hash to sort names [ 421.149933][ T7019] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 421.517430][ T7026] loop4: detected capacity change from 0 to 8192 [ 422.945790][ T7026] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 422.955911][ T7026] REISERFS (device loop4): using ordered data mode [ 422.962535][ T7026] reiserfs: using flush barriers [ 422.972231][ T7026] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 422.990233][ T7026] REISERFS (device loop4): checking transaction log (loop4) [ 423.591821][ T7031] netlink: 36 bytes leftover after parsing attributes in process `syz.1.732'. [ 425.067615][ T7026] REISERFS (device loop4): Using tea hash to sort names [ 425.075904][ T7026] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 426.088571][ T7006] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 426.338376][ T7039] loop1: detected capacity change from 0 to 8192 [ 427.267195][ T7039] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 427.276920][ T7039] REISERFS (device loop1): using ordered data mode [ 427.283717][ T7039] reiserfs: using flush barriers [ 427.293701][ T7039] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 427.312513][ T7039] REISERFS (device loop1): checking transaction log (loop1) [ 427.902137][ T7039] REISERFS (device loop1): Using tea hash to sort names [ 427.912115][ T7039] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 429.401960][ T7047] loop2: detected capacity change from 0 to 8192 [ 430.539973][ T7047] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 430.551094][ T7047] REISERFS (device loop2): using ordered data mode [ 430.557875][ T7047] reiserfs: using flush barriers [ 430.617293][ T7047] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 430.636073][ T7047] REISERFS (device loop2): checking transaction log (loop2) [ 431.705713][ T7047] REISERFS (device loop2): Using tea hash to sort names [ 431.732003][ T7047] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 433.358077][ T4230] usb 2-1: new full-speed USB device number 61 using dummy_hcd [ 433.942449][ T7070] loop4: detected capacity change from 0 to 8192 [ 434.068346][ T4230] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 435.027461][ T7070] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 435.037594][ T7070] REISERFS (device loop4): using ordered data mode [ 435.044373][ T7070] reiserfs: using flush barriers [ 435.054007][ T7070] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 435.072432][ T7070] REISERFS (device loop4): checking transaction log (loop4) [ 435.128722][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.279970][ T4230] usb 2-1: Product: syz [ 435.345652][ T4230] usb 2-1: Manufacturer: syz [ 435.415175][ T4230] usb 2-1: SerialNumber: syz [ 435.501940][ T7070] REISERFS (device loop4): Using tea hash to sort names [ 435.510278][ T7070] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 435.576148][ T4230] usb 2-1: config 0 descriptor?? [ 435.998556][ T4230] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 436.501355][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.744'. [ 438.528671][ T4230] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 438.573161][ T4230] usb 2-1: USB disconnect, device number 61 [ 438.743509][ T7086] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 439.387337][ T7098] loop0: detected capacity change from 0 to 8192 [ 440.119570][ T1429] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.126122][ T1429] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.706279][ T7098] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 440.715968][ T7098] REISERFS (device loop0): using ordered data mode [ 440.722627][ T7098] reiserfs: using flush barriers [ 440.734575][ T7098] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 440.754000][ T7098] REISERFS (device loop0): checking transaction log (loop0) [ 440.918091][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 441.814338][ T7098] REISERFS (device loop0): Using tea hash to sort names [ 441.848791][ T7098] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 441.869796][ T4383] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.133868][ T4383] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.230388][ T7113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.756'. [ 442.329996][ T7113] netlink: 60 bytes leftover after parsing attributes in process `syz.1.756'. [ 442.388407][ T4383] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.431804][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.756'. [ 442.450377][ T7118] netlink: 60 bytes leftover after parsing attributes in process `syz.1.756'. [ 442.493495][ T4383] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.628446][ T7123] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 442.654379][ T7089] chnl_net:caif_netlink_parms(): no params data found [ 442.908590][ T7133] netlink: 'syz.1.764': attribute type 11 has an invalid length. [ 443.054164][ T7089] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.117763][ T7089] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.147054][ T7089] device bridge_slave_0 entered promiscuous mode [ 443.175630][ T7089] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.197229][ T7089] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.217321][ T7089] device bridge_slave_1 entered promiscuous mode [ 443.237581][ T7149] netlink: 830 bytes leftover after parsing attributes in process `syz.2.770'. [ 443.368989][ T7089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 443.430485][ T7089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 443.638713][ T4307] Bluetooth: hci5: command 0x041b tx timeout [ 443.819765][ T7089] team0: Port device team_slave_0 added [ 443.931001][ T7089] team0: Port device team_slave_1 added [ 444.090246][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.097527][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.258069][ T7089] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.318748][ T7089] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.375145][ T7089] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.527836][ T7089] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.744874][ T7089] device hsr_slave_0 entered promiscuous mode [ 444.819797][ T7089] device hsr_slave_1 entered promiscuous mode [ 444.828720][ T7089] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.862472][ T7089] Cannot create hsr debugfs directory [ 444.913480][ T7235] netlink: 132 bytes leftover after parsing attributes in process `syz.4.802'. [ 444.991271][ T7237] netlink: 703 bytes leftover after parsing attributes in process `syz.2.804'. [ 445.121218][ T7244] syz.2.806 uses obsolete (PF_INET,SOCK_PACKET) [ 445.624725][ T7265] netlink: 'syz.0.816': attribute type 29 has an invalid length. [ 445.698694][ T7265] netlink: 'syz.0.816': attribute type 29 has an invalid length. [ 445.745160][ T4307] Bluetooth: hci5: command 0x040f tx timeout [ 445.854503][ T7270] netlink: 'syz.0.816': attribute type 29 has an invalid length. [ 446.022137][ T4383] device hsr_slave_0 left promiscuous mode [ 446.041931][ T4383] device hsr_slave_1 left promiscuous mode [ 446.108961][ T4383] device veth1_macvtap left promiscuous mode [ 446.139362][ T4383] device veth0_macvtap left promiscuous mode [ 447.083413][ T4383] bond0 (unregistering): Released all slaves [ 447.154210][ T7296] netlink: 'syz.2.825': attribute type 13 has an invalid length. [ 447.162704][ T7296] netlink: 164 bytes leftover after parsing attributes in process `syz.2.825'. [ 447.172546][ T7296] syz_tun: refused to change device tx_queue_len [ 447.184067][ T7308] netlink: 'syz.4.827': attribute type 39 has an invalid length. [ 447.292056][ T7089] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 447.355554][ T7089] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 447.428589][ T7089] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 447.459460][ T7089] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 447.546230][ T7321] netlink: 'syz.2.832': attribute type 1 has an invalid length. [ 447.573752][ T7321] netlink: 'syz.2.832': attribute type 4 has an invalid length. [ 447.591887][ T7321] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.832'. [ 447.808360][ T4187] Bluetooth: hci5: command 0x0419 tx timeout [ 447.988838][ T7358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.845'. [ 448.022552][ T7089] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.048406][ T7358] netlink: 60 bytes leftover after parsing attributes in process `syz.0.845'. [ 448.078831][ T7363] netlink: 60 bytes leftover after parsing attributes in process `syz.0.845'. [ 448.131966][ T7371] netlink: 60 bytes leftover after parsing attributes in process `syz.0.845'. [ 448.154499][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.184941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.240580][ T7089] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.274423][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.299322][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.337610][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.344862][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.392150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 448.492717][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 448.512042][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 448.550135][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.557486][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.644447][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 448.698882][ T7390] netlink: 128 bytes leftover after parsing attributes in process `syz.4.856'. [ 448.746145][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 448.793394][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 448.819022][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 448.849132][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 448.884206][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 448.947395][ T7089] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 448.989309][ T7089] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.040402][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.058963][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.076255][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.099081][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.128786][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.151815][ T5399] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 449.191865][ T7418] veth1_macvtap: mtu less than device minimum [ 449.556353][ T7443] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 449.563326][ T7443] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 449.636893][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.2.881'. [ 449.782458][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.798203][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.846928][ T7089] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.899541][ T7461] syz.4.886[7461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 449.899679][ T7461] syz.4.886[7461] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 450.305653][ T7488] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 450.709867][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 450.750412][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 450.853890][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 450.873236][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 450.952299][ T7089] device veth0_vlan entered promiscuous mode [ 450.970819][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 450.994915][ T5846] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 451.082460][ T7089] device veth1_vlan entered promiscuous mode [ 451.274435][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 451.314527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 451.398455][ T7089] device veth0_macvtap entered promiscuous mode [ 451.476196][ T7089] device veth1_macvtap entered promiscuous mode [ 451.613409][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 451.683546][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 451.705932][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 451.773100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 451.844403][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 451.946930][ T7089] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 451.970905][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 452.013327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 452.121696][ T7089] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.157344][ T7089] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.221544][ T7089] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.266359][ T7089] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.615739][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.715987][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.780119][ T1222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 452.789541][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 452.797851][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.880220][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 453.112809][ T7613] TCP: TCP_TX_DELAY enabled [ 453.589399][ T7618] loop5: detected capacity change from 0 to 8192 [ 453.700414][ T7618] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 453.710136][ T7618] REISERFS (device loop5): using ordered data mode [ 453.716943][ T7618] reiserfs: using flush barriers [ 453.727366][ T7618] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 453.745806][ T7618] REISERFS (device loop5): checking transaction log (loop5) [ 454.297541][ T7618] REISERFS (device loop5): Using tea hash to sort names [ 454.308358][ T7618] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 455.715880][ T7677] loop1: detected capacity change from 0 to 2048 [ 455.750200][ T7677] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=27485, location=27485 [ 455.776355][ T7677] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 458.393148][ T7708] process 'syz.5.964' launched '/dev/fd/5' with NULL argv: empty string added [ 458.678687][ T4241] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 458.706967][ T7719] loop5: detected capacity change from 0 to 128 [ 458.821081][ T7719] ======================================================= [ 458.821081][ T7719] WARNING: The mand mount option has been deprecated and [ 458.821081][ T7719] and is ignored by this kernel. Remove the mand [ 458.821081][ T7719] option from the mount to silence this warning. [ 458.821081][ T7719] ======================================================= [ 458.896647][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 458.922698][ T7719] FAT-fs (loop5): Filesystem has been set read-only [ 458.961196][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 458.994312][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 459.012105][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 459.032719][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 459.051062][ T4241] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 459.066352][ T4241] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 459.110400][ T4241] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 459.128148][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 459.154423][ T4241] usb 5-1: config 220 has no interface number 2 [ 459.183680][ T4241] usb 5-1: config 220 interface 1 altsetting 5 bulk endpoint 0x1 has invalid maxpacket 16 [ 459.196336][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 459.219840][ T4241] usb 5-1: config 220 interface 1 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 459.241632][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 459.256736][ T4241] usb 5-1: config 220 interface 0 has no altsetting 0 [ 459.264883][ T4241] usb 5-1: config 220 interface 76 has no altsetting 0 [ 459.280946][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 459.296540][ T7719] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 550, start 05000006) [ 459.298188][ T4241] usb 5-1: config 220 interface 1 has no altsetting 0 [ 459.310802][ T26] audit: type=1800 audit(1763923621.880:2): pid=7719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.971" name="file2" dev="loop5" ino=1048592 res=0 errno=0 [ 459.342839][ T26] audit: type=1326 audit(1763923621.910:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0eed2749 code=0x7ffc0000 [ 459.387891][ T7719] syz.5.971 (7719) used greatest stack depth: 20392 bytes left [ 459.397000][ T26] audit: type=1326 audit(1763923621.910:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7745 comm="syz.1.975" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7eff0eed2749 code=0x7ffc0000 [ 459.498204][ T4241] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 459.522455][ T4241] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.641717][ T4241] usb 5-1: Product: syz [ 459.746517][ T4241] usb 5-1: Manufacturer: syz [ 459.792423][ T4241] usb 5-1: SerialNumber: syz [ 459.903535][ T7754] loop5: detected capacity change from 0 to 32768 [ 459.962987][ T7754] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.976 (7754) [ 460.198499][ T7754] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 460.207672][ T7754] BTRFS info (device loop5): using free space tree [ 460.214432][ T7754] BTRFS info (device loop5): has skinny extents [ 460.224058][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 460.299040][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 460.328598][ T4241] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 460.336301][ T4241] usb 5-1: No valid video chain found. [ 460.338439][ T7762] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 460.347581][ T4241] usb 5-1: selecting invalid altsetting 0 [ 461.321596][ T7754] BTRFS info (device loop5): enabling ssd optimizations [ 461.639844][ T4241] usb 5-1: selecting invalid altsetting 0 [ 461.645764][ T4241] usbtest: probe of 5-1:220.1 failed with error -22 [ 461.690071][ T4241] usb 5-1: USB disconnect, device number 55 [ 463.103595][ T7828] x_tables: ip_tables: socket.0 match: invalid size 0 (kernel) != (user) 8 [ 463.351877][ T7834] loop2: detected capacity change from 0 to 128 [ 467.827533][ T7881] loop2: detected capacity change from 0 to 128 [ 469.721950][ T7901] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1010'. [ 471.448061][ T7934] loop1: detected capacity change from 0 to 64 [ 472.620493][ T7959] netlink: 'syz.2.1021': attribute type 4 has an invalid length. [ 472.677473][ T7943] loop5: detected capacity change from 0 to 32768 [ 473.952825][ T7943] XFS (loop5): Mounting V5 Filesystem [ 474.268253][ T4187] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 474.538178][ T4187] usb 3-1: Using ep0 maxpacket: 8 [ 475.008176][ T4187] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 475.017900][ T4187] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.096163][ T4187] usb 3-1: Product: syz [ 475.136513][ T4187] usb 3-1: Manufacturer: syz [ 475.218037][ T4187] usb 3-1: SerialNumber: syz [ 475.252793][ T4187] usb 3-1: config 0 descriptor?? [ 475.326410][ T4187] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 475.335216][ T4187] usb 3-1: setting power ON [ 475.345730][ T4187] dvb-usb: bulk message failed: -22 (2/0) [ 475.389934][ T4187] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 475.419656][ T4187] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 475.452655][ T4187] usb 3-1: media controller created [ 475.587895][ T4187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 475.592067][ T7978] dvb-usb: bulk message failed: -22 (3/0) [ 475.764692][ T7943] XFS (loop5): Ending clean mount [ 475.772513][ T8001] overlayfs: failed to resolve './file0': -2 [ 475.779387][ T7978] dvb-usb: bulk message failed: -22 (3/0) [ 475.791830][ T4187] usb 3-1: selecting invalid altsetting 6 [ 475.798969][ T4187] usb 3-1: digital interface selection failed (-22) [ 475.818192][ T4187] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 475.862526][ T7089] XFS (loop5): Unmounting Filesystem [ 475.878356][ T4187] usb 3-1: setting power OFF [ 475.887344][ T4187] dvb-usb: bulk message failed: -22 (2/0) [ 475.947440][ T4187] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 475.986131][ T4187] (NULL device *): no alternate interface [ 476.062638][ T4187] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 476.176151][ T4187] usb 3-1: USB disconnect, device number 57 [ 476.180519][ T8013] overlayfs: overlapping lowerdir path [ 478.173388][ T8031] netlink: 'syz.0.1036': attribute type 4 has an invalid length. [ 479.184175][ T8041] loop4: detected capacity change from 0 to 128 [ 479.968540][ T8041] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 479.980713][ T8041] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 481.255148][ T8058] loop5: detected capacity change from 0 to 16 [ 482.337653][ T8058] erofs: (device loop5): mounted with root inode @ nid 36. [ 484.566768][ T8081] loop2: detected capacity change from 0 to 764 [ 485.409596][ T8087] tmpfs: Unknown parameter 'grpquota' [ 485.640237][ T4230] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 486.493806][ T4230] usb 2-1: config 0 has an invalid interface number: 122 but max is 0 [ 486.548894][ T4230] usb 2-1: config 0 has no interface number 0 [ 486.918497][ T4230] usb 2-1: New USB device found, idVendor=050d, idProduct=8053, bcdDevice=a5.b5 [ 486.927904][ T4230] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.936828][ T4230] usb 2-1: Product: syz [ 486.944707][ T4230] usb 2-1: Manufacturer: syz [ 487.041004][ T8117] loop4: detected capacity change from 0 to 2048 [ 487.124923][ T4230] usb 2-1: SerialNumber: syz [ 487.190605][ T4230] usb 2-1: config 0 descriptor?? [ 487.662158][ T4230] usb 2-1: USB disconnect, device number 62 [ 487.703112][ T8117] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 489.644868][ T7090] ================================================================== [ 489.653394][ T7090] BUG: KASAN: slab-out-of-bounds in hci_le_meta_evt+0x12c0/0x3b80 [ 489.661367][ T7090] Read of size 1 at addr ffff88802325b40a by task kworker/u5:1/7090 [ 489.669388][ T7090] [ 489.671737][ T7090] CPU: 1 PID: 7090 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 489.679418][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 489.689571][ T7090] Workqueue: hci3 hci_rx_work [ 489.694357][ T7090] Call Trace: [ 489.697850][ T7090] [ 489.700849][ T7090] dump_stack_lvl+0x168/0x230 [ 489.705648][ T7090] ? show_regs_print_info+0x20/0x20 [ 489.710964][ T7090] ? load_image+0x3b0/0x3b0 [ 489.715473][ T7090] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 489.720871][ T7090] print_address_description+0x60/0x2d0 [ 489.726429][ T7090] ? hci_le_meta_evt+0x12c0/0x3b80 [ 489.731554][ T7090] kasan_report+0xdf/0x130 [ 489.736014][ T7090] ? hci_le_meta_evt+0x12c0/0x3b80 [ 489.741172][ T7090] hci_le_meta_evt+0x12c0/0x3b80 [ 489.746198][ T7090] ? hci_event_packet+0x2a0/0x12f0 [ 489.751621][ T7090] ? hci_remote_host_features_evt+0x280/0x280 [ 489.757704][ T7090] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 489.763341][ T7090] ? mark_lock+0x94/0x320 [ 489.767668][ T7090] ? mutex_unlock+0x10/0x10 [ 489.772169][ T7090] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 489.778147][ T7090] ? lock_chain_count+0x20/0x20 [ 489.783022][ T7090] ? __rwlock_init+0x140/0x140 [ 489.787982][ T7090] hci_event_packet+0xe05/0x12f0 [ 489.792948][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 489.798154][ T7090] ? rcu_lock_release+0x20/0x20 [ 489.803050][ T7090] ? hci_send_to_monitor+0x9c/0x4a0 [ 489.808291][ T7090] hci_rx_work+0x255/0xa10 [ 489.812717][ T7090] process_one_work+0x863/0x1000 [ 489.817662][ T7090] ? worker_detach_from_pool+0x240/0x240 [ 489.823424][ T7090] ? lockdep_hardirqs_off+0x70/0x100 [ 489.828835][ T7090] ? _raw_spin_lock_irq+0xab/0xe0 [ 489.833876][ T7090] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 489.839267][ T7090] ? wq_worker_running+0x97/0x170 [ 489.844439][ T7090] worker_thread+0xaa8/0x12a0 [ 489.849129][ T7090] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 489.855022][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 489.860452][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 489.865746][ T7090] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 489.871757][ T7090] kthread+0x436/0x520 [ 489.875930][ T7090] ? rcu_lock_release+0x20/0x20 [ 489.880773][ T7090] ? kthread_blkcg+0xd0/0xd0 [ 489.885360][ T7090] ret_from_fork+0x1f/0x30 [ 489.889778][ T7090] [ 489.892791][ T7090] [ 489.895105][ T7090] Allocated by task 8126: [ 489.899590][ T7090] __kasan_kmalloc+0xb5/0xf0 [ 489.904173][ T7090] __alloc_skb+0x22c/0x750 [ 489.908585][ T7090] vhci_write+0xbc/0x450 [ 489.912840][ T7090] vfs_write+0x712/0xd00 [ 489.917073][ T7090] ksys_write+0x14d/0x250 [ 489.921421][ T7090] do_syscall_64+0x4c/0xa0 [ 489.925848][ T7090] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 489.931738][ T7090] [ 489.934054][ T7090] The buggy address belongs to the object at ffff88802325b000 [ 489.934054][ T7090] which belongs to the cache kmalloc-1k of size 1024 [ 489.948095][ T7090] The buggy address is located 10 bytes to the right of [ 489.948095][ T7090] 1024-byte region [ffff88802325b000, ffff88802325b400) [ 489.962084][ T7090] The buggy address belongs to the page: [ 489.968043][ T7090] page:ffffea00008c9600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23258 [ 489.978378][ T7090] head:ffffea00008c9600 order:3 compound_mapcount:0 compound_pincount:0 [ 489.987134][ T7090] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 489.995485][ T7090] raw: 00fff00000010200 ffffea0001e5ba00 0000000700000007 ffff888016841dc0 [ 490.004064][ T7090] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 490.012634][ T7090] page dumped because: kasan: bad access detected [ 490.019041][ T7090] page_owner tracks the page as allocated [ 490.024764][ T7090] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 5340, ts 298023294679, free_ts 296411831399 [ 490.043726][ T7090] get_page_from_freelist+0x1b77/0x1c60 [ 490.049280][ T7090] __alloc_pages+0x1e1/0x470 [ 490.053863][ T7090] new_slab+0xc0/0x4b0 [ 490.057950][ T7090] ___slab_alloc+0x81e/0xdf0 [ 490.062579][ T7090] __kmalloc+0x1cd/0x330 [ 490.066905][ T7090] ieee802_11_parse_elems_crc+0xab/0x10c0 [ 490.073001][ T7090] ieee80211_bss_info_update+0x75d/0xaa0 [ 490.078647][ T7090] ieee80211_ibss_rx_queued_mgmt+0x16d0/0x29c0 [ 490.084802][ T7090] ieee80211_iface_work+0x70e/0xc60 [ 490.090000][ T7090] process_one_work+0x863/0x1000 [ 490.095740][ T7090] worker_thread+0xaa8/0x12a0 [ 490.100419][ T7090] kthread+0x436/0x520 [ 490.104499][ T7090] ret_from_fork+0x1f/0x30 [ 490.109122][ T7090] page last free stack trace: [ 490.113793][ T7090] free_unref_page_prepare+0x637/0x6c0 [ 490.119345][ T7090] free_unref_page+0x94/0x280 [ 490.124128][ T7090] __unfreeze_partials+0x1a5/0x200 [ 490.129320][ T7090] put_cpu_partial+0x12d/0x190 [ 490.134201][ T7090] qlist_free_all+0x35/0x90 [ 490.138696][ T7090] kasan_quarantine_reduce+0x150/0x160 [ 490.144241][ T7090] __kasan_slab_alloc+0x2f/0xd0 [ 490.149100][ T7090] slab_post_alloc_hook+0x4c/0x380 [ 490.154286][ T7090] kmem_cache_alloc_node+0x12d/0x2d0 [ 490.159581][ T7090] __alloc_skb+0xf4/0x750 [ 490.164031][ T7090] alloc_skb_with_frags+0xa7/0x730 [ 490.169134][ T7090] sock_alloc_send_pskb+0x853/0x980 [ 490.174843][ T7090] unix_dgram_sendmsg+0x5ef/0x1890 [ 490.180035][ T7090] ____sys_sendmsg+0x5a2/0x8c0 [ 490.185148][ T7090] ___sys_sendmsg+0x1f0/0x260 [ 490.189901][ T7090] __sys_sendmmsg+0x27c/0x4a0 [ 490.194916][ T7090] [ 490.197317][ T7090] Memory state around the buggy address: [ 490.203080][ T7090] ffff88802325b300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.211334][ T7090] ffff88802325b380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 490.219522][ T7090] >ffff88802325b400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 490.227731][ T7090] ^ [ 490.232307][ T7090] ffff88802325b480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 490.240374][ T7090] ffff88802325b500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 490.248441][ T7090] ================================================================== [ 490.256601][ T7090] Disabling lock debugging due to kernel taint [ 490.292117][ T7090] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 490.299381][ T7090] CPU: 0 PID: 7090 Comm: kworker/u5:1 Tainted: G B syzkaller #0 [ 490.307612][ T8140] 9pnet: Insufficient options for proto=fd [ 490.308341][ T7090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 490.308356][ T7090] Workqueue: hci3 hci_rx_work [ 490.308382][ T7090] Call Trace: [ 490.308389][ T7090] [ 490.336085][ T7090] dump_stack_lvl+0x168/0x230 [ 490.340790][ T7090] ? show_regs_print_info+0x20/0x20 [ 490.346067][ T7090] ? load_image+0x3b0/0x3b0 [ 490.350612][ T7090] panic+0x2c9/0x7f0 [ 490.355081][ T7090] ? bpf_jit_dump+0xd0/0xd0 [ 490.359614][ T7090] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 490.365624][ T7090] ? _raw_spin_unlock+0x40/0x40 [ 490.370511][ T7090] ? hci_le_meta_evt+0x12c0/0x3b80 [ 490.375775][ T7090] check_panic_on_warn+0x80/0xa0 [ 490.380753][ T7090] ? hci_le_meta_evt+0x12c0/0x3b80 [ 490.385900][ T7090] end_report+0x6d/0xf0 [ 490.390176][ T7090] kasan_report+0x102/0x130 [ 490.394728][ T7090] ? hci_le_meta_evt+0x12c0/0x3b80 [ 490.399958][ T7090] hci_le_meta_evt+0x12c0/0x3b80 [ 490.405098][ T7090] ? hci_event_packet+0x2a0/0x12f0 [ 490.410345][ T7090] ? hci_remote_host_features_evt+0x280/0x280 [ 490.416810][ T7090] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 490.422482][ T7090] ? mark_lock+0x94/0x320 [ 490.426850][ T7090] ? mutex_unlock+0x10/0x10 [ 490.431395][ T7090] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 490.437416][ T7090] ? lock_chain_count+0x20/0x20 [ 490.442389][ T7090] ? __rwlock_init+0x140/0x140 [ 490.447280][ T7090] hci_event_packet+0xe05/0x12f0 [ 490.452353][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 490.457845][ T7090] ? rcu_lock_release+0x20/0x20 [ 490.462733][ T7090] ? hci_send_to_monitor+0x9c/0x4a0 [ 490.467964][ T7090] hci_rx_work+0x255/0xa10 [ 490.472687][ T7090] process_one_work+0x863/0x1000 [ 490.477765][ T7090] ? worker_detach_from_pool+0x240/0x240 [ 490.483599][ T7090] ? lockdep_hardirqs_off+0x70/0x100 [ 490.489012][ T7090] ? _raw_spin_lock_irq+0xab/0xe0 [ 490.494302][ T7090] ? _raw_spin_lock_irqsave+0xf0/0xf0 [ 490.499720][ T7090] ? wq_worker_running+0x97/0x170 [ 490.504788][ T7090] worker_thread+0xaa8/0x12a0 [ 490.509500][ T7090] ? _raw_spin_unlock_irqrestore+0x82/0x100 [ 490.515432][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 490.520671][ T7090] ? lockdep_hardirqs_on+0x94/0x140 [ 490.525903][ T7090] ? _raw_spin_unlock_irqrestore+0xaa/0x100 [ 490.531925][ T7090] kthread+0x436/0x520 [ 490.536143][ T7090] ? rcu_lock_release+0x20/0x20 [ 490.541245][ T7090] ? kthread_blkcg+0xd0/0xd0 [ 490.545871][ T7090] ret_from_fork+0x1f/0x30 [ 490.550328][ T7090] [ 490.553716][ T7090] Kernel Offset: disabled [ 490.558056][ T7090] Rebooting in 86400 seconds..