last executing test programs: 13.933977973s ago: executing program 0 (id=701): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) connect$unix(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) set_mempolicy(0x8006, 0x0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) gettid() timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) 12.944997343s ago: executing program 0 (id=703): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902f23f8f1a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) memfd_secret(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400a59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200ff02000000000000000000000000000114000100fe8000000000000000000000000000aa86eb75d3dbfe927ef3241a14f6c5b4158f"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 9.121691222s ago: executing program 0 (id=724): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001e40)={0x18, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000100000069"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 9.068386136s ago: executing program 2 (id=725): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/202, 0xca}], 0x1, 0xc, 0x5, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 8.298986788s ago: executing program 3 (id=729): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000056c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 8.229431284s ago: executing program 4 (id=731): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) connect$unix(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) set_mempolicy(0x8006, 0x0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) 8.094754805s ago: executing program 2 (id=732): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000100000000000000000000008500000007000000180100002020642500000000002020207b1af8ff00"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f0000000540)=ANY=[@ANYRES8=0x0, @ANYBLOB="fe4972b80db4bf6b1eddc82c2af0098d87f0a26ae0c0222076760812a5896f1f15ca898ba930bfe5347d8ac8e82fa297b0c51fba0232b83a76b08feb7be4f32cdc26d444eab0ab36a49c005d224906c9762201b554a8a4dad37a9836448974bc9c8b941d5d", @ANYRESOCT, @ANYRESHEX=0x0, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xb95a, &(0x7f0000017a80)="$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") r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000440)) ioctl$DRM_IOCTL_GEM_OPEN(r4, 0xc010640b, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0xa00a2, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x49, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x243082, 0x0, 0x1, 0x0, &(0x7f0000000000)) getdents64(r0, 0xfffffffffffffffe, 0x29) 6.887436183s ago: executing program 4 (id=734): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902f23f8f1a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) memfd_secret(0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 6.668406401s ago: executing program 2 (id=736): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902f23f8f1a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) memfd_secret(0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x3}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="400000001400a59500000000000000000a000000", @ANYRES32=r5, @ANYBLOB="14000200ff02000000000000000000000000000114000100fe8000000000000000000000000000aa86eb75d3dbfe927ef3241a14f6c5b4158f"], 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.723671677s ago: executing program 1 (id=737): syz_open_dev$video(&(0x7f0000000140), 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f0000000280), 0x10) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000540)="bc3009bb66682c9d4233b0cc644f5fdae5b9d17f7ada03bc77aea173022c18232e1fb162caf50d08fda40c6e9c515c4a2c7245660296c0460cbff563b781695432f5a83f5ab8979bf6fd1c17aaa22ada927f1feb5074053514edf573", 0x5c, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) 5.039551242s ago: executing program 3 (id=738): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 4.834705799s ago: executing program 3 (id=739): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 4.708047729s ago: executing program 3 (id=740): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) syz_io_uring_setup(0x174d, &(0x7f0000000180)={0x0, 0x800b2a9, 0x0, 0x0, 0x288}, &(0x7f0000000140)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4007, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r5, &(0x7f00000062c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000004200)={0x50, 0x0, r6, {0x7, 0x29, 0x0, 0x80000}}, 0x50) syz_fuse_handle_req(r5, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x20, 0x0, 0x5, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 4.631467405s ago: executing program 1 (id=741): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1e1a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r4, 0x4048aecb, &(0x7f0000000080)) 4.468252699s ago: executing program 1 (id=742): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/202, 0xca}], 0x1, 0xc, 0x5, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 4.065280711s ago: executing program 0 (id=743): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[], 0x8c}}, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) 3.780800224s ago: executing program 4 (id=744): r0 = openat$full(0xffffffffffffff9c, 0x0, 0x80100, 0x0) connect$unix(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) set_mempolicy(0x8006, 0x0, 0x5) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) close(r3) 3.719111959s ago: executing program 3 (id=745): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x35, 0xff, 0xaa, 0x20, 0xccd, 0x10af, 0x384e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x59, 0x2, 0x1, 0x9b, 0x1e, 0x2a, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f00000001c0)={0x0, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) 3.492546167s ago: executing program 1 (id=746): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008000300070000000800"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) 3.438990752s ago: executing program 1 (id=747): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) fsetxattr(r0, &(0x7f0000000140)=@known='system.sockprotoname\x00', 0x0, 0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r6, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) 3.263570906s ago: executing program 2 (id=748): socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000005780)={0x0, 0x0, &(0x7f0000005740)={&(0x7f00000056c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0xc0}, 0xc0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1004000, 0x0, 0xb49, 0x9, 0x6, 0x0, 0x3}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @dev}, 0x18, 0x0}}], 0x6c00, 0x48) 2.460616901s ago: executing program 1 (id=749): socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000001980)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201010200400010f3044d0740000102030109022400010103300509040008010301010075faa528ea22a52b886b0921"], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newsa={0x138, 0x10, 0x1, 0x0, 0x0, {{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, {@in, 0x0, 0x32}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3c) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, 0x0, 0x18) writev(r2, 0x0, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f00000000c0)={0x2, 0x2, 0x44, 0x0, 0xd}) 2.401115566s ago: executing program 4 (id=750): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x810}, 0x40c4) 2.268778606s ago: executing program 4 (id=751): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x8, 0xfff3}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1.794177725s ago: executing program 4 (id=752): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)={0x0, 0x16, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.516569757s ago: executing program 2 (id=753): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r0) 1.441389323s ago: executing program 2 (id=754): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902f23f8f1a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r1, 0x40045402, &(0x7f0000000140)=0x1) memfd_secret(0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) 933.178185ms ago: executing program 0 (id=755): r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x621c2, 0x0) io_uring_setup(0x39e1, 0x0) ftruncate(r1, 0x8800000) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) sendfile(r2, r1, 0x0, 0x558410e8) close_range(r0, 0xffffffffffffffff, 0x0) 79.954634ms ago: executing program 0 (id=756): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000440)=""/202, 0xca}], 0x1, 0xc, 0x5, 0x1) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) r1 = dup2(r0, r0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5) 0s ago: executing program 3 (id=757): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000010025bd7000fadbdf2500000000", @ANYRES32=r1, @ANYBLOB="138000002b9201002400128009000100626f6e64000000001400028008000300070000000800"], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x4000) kernel console output (not intermixed with test programs): -1: config index 0 descriptor too short (expected 23569, got 27) [ 166.051744][ T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 166.093883][ T22] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 166.112467][ T22] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 166.134881][ T22] usb 4-1: Manufacturer: syz [ 166.155800][ T22] usb 4-1: config 0 descriptor?? [ 166.205262][ T5459] cp210x 3-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 166.234683][ T5459] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 166.292462][ T5459] usb 3-1: cp210x converter now attached to ttyUSB0 [ 166.316080][ T5459] usb 3-1: USB disconnect, device number 14 [ 166.374148][ T5459] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 166.414308][ T5459] cp210x 3-1:0.0: device disconnected [ 166.443582][ T5491] loop1: detected capacity change from 0 to 32768 [ 166.451787][ T22] rc_core: IR keymap rc-hauppauge not found [ 166.457999][ T22] Registered IR keymap rc-empty [ 166.474262][ T22] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 166.492974][ T22] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input29 [ 166.513949][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 166.550754][ T5491] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 166.599298][ T5491] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 166.631392][ T22] usb 4-1: USB disconnect, device number 14 [ 166.632693][ T5491] BTRFS info (device loop1): turning off barriers [ 166.671391][ T5491] BTRFS info (device loop1): setting nodatasum [ 166.691891][ T5491] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 166.732287][ T5491] BTRFS info (device loop1): use zstd compression, level 3 [ 166.759914][ T5491] BTRFS info (device loop1): using free space tree [ 166.771685][ T4331] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 166.981767][ T4331] usb 5-1: Using ep0 maxpacket: 16 [ 166.989666][ T4331] usb 5-1: config index 0 descriptor too short (expected 16370, got 36) [ 167.100432][ T4331] usb 5-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 167.120756][ T4331] usb 5-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 167.136609][ T4331] usb 5-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 167.263150][ T5524] hugetlbfs: Bad value for 'size' [ 167.798058][ T4331] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 167.927387][ T4331] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.961748][ T4331] usb 5-1: Product: syz [ 167.966425][ T5527] loop2: detected capacity change from 0 to 128 [ 167.981838][ T4331] usb 5-1: Manufacturer: syz [ 167.994715][ T5527] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 168.010947][ T4331] usb 5-1: SerialNumber: syz [ 168.027624][ T5529] loop3: detected capacity change from 0 to 128 [ 168.066711][ T5529] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 168.654580][ T4263] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.707889][ T5531] tipc: Enabling of bearer rejected, failed to enable media [ 168.897585][ T5532] device syzkaller0 entered promiscuous mode [ 169.031174][ T5534] overlayfs: missing 'lowerdir' [ 171.175251][ T4331] usb 5-1: USB disconnect, device number 17 [ 171.292410][ T5544] loop6: detected capacity change from 0 to 1 [ 171.329020][ T5544] Dev loop6: unable to read RDB block 1 [ 171.359998][ T5544] loop6: unable to read partition table [ 171.370374][ T5544] loop6: partition table beyond EOD, truncated [ 171.384805][ T5544] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 171.791653][ T5449] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 171.985161][ T5449] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 172.023665][ T5449] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 172.080438][ T5449] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 172.105160][ T5449] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.138355][ T5449] usb 3-1: config 0 descriptor?? [ 172.194935][ T5449] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 172.512322][ T5449] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 172.713327][ T5449] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 172.731719][ T5449] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.784110][ T5449] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 172.814271][ T5449] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 172.825969][ T5449] usb 4-1: Manufacturer: syz [ 172.859531][ T5449] usb 4-1: config 0 descriptor?? [ 173.091906][ T5449] rc_core: IR keymap rc-hauppauge not found [ 173.097840][ T5449] Registered IR keymap rc-empty [ 173.139044][ T5449] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 173.185140][ T5569] loop4: detected capacity change from 0 to 256 [ 173.202701][ T5569] FAT-fs (loop4): Unrecognized mount option "coDepage=865" or missing value [ 173.224121][ T5449] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input30 [ 173.312113][ C0] igorplugusb 4-1:0.0: Error: urb status = -32 [ 173.351459][ T22] usb 4-1: USB disconnect, device number 15 [ 173.794701][ T5569] loop4: detected capacity change from 0 to 32768 [ 173.804965][ T5569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.297 (5569) [ 173.838623][ T5569] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 173.889809][ T5569] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 173.908977][ T5569] BTRFS info (device loop4): turning off barriers [ 173.933537][ T5569] BTRFS info (device loop4): setting nodatasum [ 173.948816][ T5569] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 173.960024][ T5569] BTRFS info (device loop4): use zstd compression, level 3 [ 173.962268][ T5577] loop3: detected capacity change from 0 to 128 [ 173.973416][ T5569] BTRFS info (device loop4): using free space tree [ 174.127146][ T5577] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 174.528919][ T5596] hugetlbfs: Bad value for 'size' [ 174.838409][ T4271] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 174.993560][ T22] usb 3-1: USB disconnect, device number 15 [ 175.153043][ T5600] overlayfs: missing 'lowerdir' [ 175.806837][ T5614] loop4: detected capacity change from 0 to 128 [ 175.826759][ T5614] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 175.921700][ T5464] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 176.351752][ T5464] usb 3-1: Using ep0 maxpacket: 16 [ 176.358960][ T5464] usb 3-1: config index 0 descriptor too short (expected 16370, got 36) [ 176.423097][ T5464] usb 3-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 176.451707][ T5464] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 176.481618][ T5464] usb 3-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 176.853753][ T5464] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 176.872791][ T5464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.880821][ T5464] usb 3-1: Product: syz [ 176.885429][ T5464] usb 3-1: Manufacturer: syz [ 176.891012][ T5464] usb 3-1: SerialNumber: syz [ 176.908248][ T5619] tipc: Enabling of bearer rejected, failed to enable media [ 176.968459][ T5621] device syzkaller0 entered promiscuous mode [ 177.014717][ T5623] loop6: detected capacity change from 0 to 1 [ 177.074592][ T4257] Dev loop6: unable to read RDB block 1 [ 177.080177][ T4257] loop6: unable to read partition table [ 177.096790][ T4257] loop6: partition table beyond EOD, truncated [ 177.123839][ T5623] Dev loop6: unable to read RDB block 1 [ 177.148121][ T5623] loop6: unable to read partition table [ 177.176890][ T5623] loop6: partition table beyond EOD, truncated [ 177.217203][ T5623] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 177.791846][ T5464] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 177.993212][ T5464] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.013954][ T5464] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.063759][ T5464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.091537][ T5464] usb 4-1: config 0 descriptor?? [ 178.113156][ T5464] pwc: Askey VC010 type 2 USB webcam detected. [ 178.521608][ T5464] pwc: recv_control_msg error -32 req 02 val 2b00 [ 178.532138][ T5464] pwc: recv_control_msg error -32 req 02 val 2700 [ 178.559991][ T5464] pwc: recv_control_msg error -32 req 02 val 2c00 [ 178.581425][ T5464] pwc: recv_control_msg error -32 req 04 val 1000 [ 178.612359][ T5464] pwc: recv_control_msg error -32 req 04 val 1300 [ 178.649038][ T5464] pwc: recv_control_msg error -32 req 04 val 1400 [ 178.678350][ T5464] pwc: recv_control_msg error -32 req 02 val 2000 [ 178.714524][ T5464] pwc: recv_control_msg error -32 req 02 val 2100 [ 178.740037][ T5464] pwc: recv_control_msg error -32 req 04 val 1500 [ 178.767178][ T5464] pwc: recv_control_msg error -32 req 02 val 2500 [ 178.790477][ T5464] pwc: recv_control_msg error -32 req 02 val 2400 [ 178.812325][ T5464] pwc: recv_control_msg error -32 req 02 val 2600 [ 178.969256][ T5611] usb 3-1: USB disconnect, device number 16 [ 179.038185][ T5464] pwc: recv_control_msg error -71 req 02 val 2800 [ 179.075698][ T5464] pwc: recv_control_msg error -71 req 04 val 1100 [ 179.106059][ T5464] pwc: recv_control_msg error -71 req 04 val 1200 [ 179.147895][ T5464] pwc: Registered as video103. [ 179.172890][ T5464] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input31 [ 179.251952][ T5464] usb 4-1: USB disconnect, device number 16 [ 179.511705][ T5611] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 179.703163][ T5611] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 179.722805][ T5611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.748983][ T5611] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 179.809242][ T5611] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 179.833800][ T5611] usb 3-1: Manufacturer: syz [ 179.857659][ T5611] usb 3-1: config 0 descriptor?? [ 180.011711][ T5612] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 180.131652][ T5611] rc_core: IR keymap rc-hauppauge not found [ 180.137675][ T5611] Registered IR keymap rc-empty [ 180.168890][ T5611] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 180.199723][ T5611] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input32 [ 180.212530][ T5612] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 180.231850][ T5612] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.266895][ T5612] usb 4-1: config 0 descriptor?? [ 180.272445][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 180.287166][ T5611] usb 3-1: USB disconnect, device number 17 [ 180.305876][ T5612] cp210x 4-1:0.0: cp210x converter detected [ 180.708203][ T5612] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 180.751718][ T26] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 180.941670][ T26] usb 1-1: Using ep0 maxpacket: 16 [ 180.948387][ T26] usb 1-1: config index 0 descriptor too short (expected 16370, got 36) [ 180.988548][ T26] usb 1-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 181.010645][ T26] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 181.036193][ T26] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 181.063846][ T26] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 181.094004][ T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.103389][ T26] usb 1-1: Product: syz [ 181.109123][ T5612] cp210x 4-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 181.117511][ T26] usb 1-1: Manufacturer: syz [ 181.122666][ T5612] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 181.129187][ T26] usb 1-1: SerialNumber: syz [ 181.139542][ T5612] usb 4-1: cp210x converter now attached to ttyUSB0 [ 181.162079][ T5612] usb 4-1: USB disconnect, device number 17 [ 181.179523][ T5612] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 181.192724][ T5612] cp210x 4-1:0.0: device disconnected [ 181.428495][ T5670] loop6: detected capacity change from 0 to 1 [ 181.474954][ T4466] Dev loop6: unable to read RDB block 1 [ 181.483863][ T4466] loop6: unable to read partition table [ 181.499761][ T4466] loop6: partition table beyond EOD, truncated [ 181.523986][ T5670] Dev loop6: unable to read RDB block 1 [ 181.534017][ T5670] loop6: unable to read partition table [ 181.556843][ T5670] loop6: partition table beyond EOD, truncated [ 181.583978][ T5670] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 182.091814][ T5464] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 182.283319][ T5464] usb 3-1: Using ep0 maxpacket: 16 [ 182.291516][ T5464] usb 3-1: config index 0 descriptor too short (expected 16370, got 36) [ 182.306234][ T5464] usb 3-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 182.316341][ T5464] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 182.331358][ T5464] usb 3-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 182.349433][ T5464] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 182.358853][ T5464] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.374240][ T5464] usb 3-1: Product: syz [ 182.378492][ T5464] usb 3-1: Manufacturer: syz [ 182.386343][ T5464] usb 3-1: SerialNumber: syz [ 183.517537][ T26] usb 1-1: USB disconnect, device number 14 [ 183.621656][ T5612] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 184.140229][ T5612] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 184.493991][ T5612] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 184.507567][ T5612] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 184.574711][ T5612] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 184.606301][ T5612] usb 4-1: Manufacturer: syz [ 184.619893][ T5612] usb 4-1: config 0 descriptor?? [ 184.841720][ T5612] rc_core: IR keymap rc-hauppauge not found [ 184.850363][ T5612] Registered IR keymap rc-empty [ 184.861499][ T5464] usb 3-1: USB disconnect, device number 18 [ 184.902410][ T5612] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 184.954606][ T5612] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input33 [ 184.984761][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 185.006479][ T5612] usb 4-1: USB disconnect, device number 18 [ 185.123346][ T5718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 185.132188][ T5611] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 185.314231][ T5611] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 185.327281][ T5611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.365817][ T5611] usb 1-1: config 0 descriptor?? [ 185.393720][ T5611] cp210x 1-1:0.0: cp210x converter detected [ 185.770720][ T5735] device syzkaller0 entered promiscuous mode [ 185.797094][ T5611] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -121 [ 186.378064][ T5611] cp210x 1-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 186.698185][ T5611] cp210x 1-1:0.0: GPIO initialisation failed: -71 [ 186.862388][ T5611] usb 1-1: cp210x converter now attached to ttyUSB0 [ 186.908595][ T5611] usb 1-1: USB disconnect, device number 15 [ 186.941405][ T5611] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 186.985911][ T5611] cp210x 1-1:0.0: device disconnected [ 187.221938][ T5603] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 187.301810][ T5610] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 187.431654][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 187.439133][ T5603] usb 4-1: config index 0 descriptor too short (expected 16370, got 36) [ 187.451531][ T5603] usb 4-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 187.465047][ T5603] usb 4-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 187.485392][ T5603] usb 4-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 187.504422][ T5610] usb 5-1: Using ep0 maxpacket: 32 [ 187.511937][ T5610] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 187.531531][ T5603] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 187.557100][ T5610] usb 5-1: config 0 has no interface number 0 [ 187.570265][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.578781][ T5611] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 187.591282][ T5610] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 187.605251][ T5603] usb 4-1: Product: syz [ 187.610089][ T5610] usb 5-1: config 0 interface 85 has no altsetting 0 [ 187.617196][ T5603] usb 4-1: Manufacturer: syz [ 187.625022][ T5603] usb 4-1: SerialNumber: syz [ 187.635857][ T5610] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 187.666822][ T5610] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.689233][ T5610] usb 5-1: Product: syz [ 187.697515][ T5610] usb 5-1: Manufacturer: syz [ 187.706062][ T5610] usb 5-1: SerialNumber: syz [ 187.725308][ T5610] usb 5-1: config 0 descriptor?? [ 187.783235][ T5611] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 187.798901][ T5611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.846509][ T5611] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 187.879854][ T5611] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 187.921704][ T5611] usb 1-1: Manufacturer: syz [ 187.934853][ T5611] usb 1-1: config 0 descriptor?? [ 188.144606][ T5611] rc_core: IR keymap rc-hauppauge not found [ 188.159844][ T5611] Registered IR keymap rc-empty [ 188.181173][ T5611] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 188.191719][ T5610] appletouch 5-1:0.85: Geyser mode initialized. [ 188.220673][ T5610] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input34 [ 188.239440][ T5611] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input35 [ 188.298398][ C1] igorplugusb 1-1:0.0: Error: urb status = -32 [ 188.318023][ T5611] usb 1-1: USB disconnect, device number 16 [ 188.407922][ T5464] usb 5-1: USB disconnect, device number 18 [ 188.449768][ T5464] appletouch 5-1:0.85: input: appletouch disconnected [ 189.466588][ T26] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 189.653423][ T26] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.675194][ T26] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 189.691646][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.713714][ T26] usb 5-1: config 0 descriptor?? [ 189.725025][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 189.979907][ T5611] usb 4-1: USB disconnect, device number 19 [ 190.125812][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 190.135800][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 190.153579][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 190.204123][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 190.220093][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 190.258259][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 190.318540][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 190.364817][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 190.376629][ T26] pwc: recv_control_msg error -32 req 04 val 1500 [ 190.387215][ T26] pwc: recv_control_msg error -32 req 02 val 2500 [ 190.395543][ T26] pwc: recv_control_msg error -32 req 02 val 2400 [ 190.411890][ T26] pwc: recv_control_msg error -32 req 02 val 2600 [ 190.486691][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 190.549629][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 190.562782][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 190.570328][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 190.588080][ T26] pwc: Registered as video103. [ 190.611437][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input36 [ 190.696734][ T26] usb 5-1: USB disconnect, device number 19 [ 190.761814][ T5464] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 190.954489][ T5464] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 190.984564][ T5464] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.013357][ T5464] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 191.032806][ T5464] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 191.051679][ T5464] usb 2-1: Manufacturer: syz [ 191.081405][ T5464] usb 2-1: config 0 descriptor?? [ 191.232065][ T5464] rc_core: IR keymap rc-hauppauge not found [ 191.238005][ T5464] Registered IR keymap rc-empty [ 191.243511][ T5449] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 191.256734][ T5464] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 191.288726][ T5464] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input37 [ 191.320281][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 191.355668][ T5464] usb 2-1: USB disconnect, device number 14 [ 191.431747][ T5449] usb 4-1: Using ep0 maxpacket: 32 [ 191.448556][ T5449] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 191.478532][ T5449] usb 4-1: config 0 has no interface number 0 [ 191.509845][ T5449] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 191.591200][ T5449] usb 4-1: config 0 interface 85 has no altsetting 0 [ 191.608852][ T5449] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 191.632233][ T5449] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.654356][ T5449] usb 4-1: Product: syz [ 191.660530][ T5449] usb 4-1: Manufacturer: syz [ 191.668890][ T5449] usb 4-1: SerialNumber: syz [ 191.683893][ T5449] usb 4-1: config 0 descriptor?? [ 191.966115][ T5459] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 192.053623][ T5848] device syzkaller0 entered promiscuous mode [ 192.108457][ T5449] appletouch 4-1:0.85: Geyser mode initialized. [ 192.146222][ T5449] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input38 [ 192.165676][ T5459] usb 1-1: Using ep0 maxpacket: 8 [ 192.185224][ T5459] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 192.216375][ T5459] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 192.267243][ T5459] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 192.283667][ T5459] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.321884][ T26] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 192.326341][ T5459] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.338678][ T5459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.364718][ T5464] usb 4-1: USB disconnect, device number 20 [ 192.384346][ T5464] appletouch 4-1:0.85: input: appletouch disconnected [ 192.513238][ T26] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 192.525633][ T26] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 192.535087][ T26] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.551488][ T26] usb 3-1: config 0 descriptor?? [ 192.564018][ T26] pwc: Askey VC010 type 2 USB webcam detected. [ 192.570551][ T5459] usb 1-1: GET_CAPABILITIES returned 0 [ 192.576182][ T5459] usbtmc 1-1:16.0: can't read capabilities [ 192.621671][ T5449] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 192.781214][ T5459] usb 1-1: USB disconnect, device number 17 [ 192.811779][ T5449] usb 2-1: Using ep0 maxpacket: 8 [ 192.820503][ T5449] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 192.830156][ T5449] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.839714][ T5449] usb 2-1: Product: syz [ 192.844513][ T5449] usb 2-1: Manufacturer: syz [ 192.849196][ T5449] usb 2-1: SerialNumber: syz [ 192.862388][ T5449] usb 2-1: config 0 descriptor?? [ 192.964099][ T26] pwc: recv_control_msg error -32 req 02 val 2b00 [ 192.976505][ T26] pwc: recv_control_msg error -32 req 02 val 2700 [ 192.995724][ T26] pwc: recv_control_msg error -32 req 02 val 2c00 [ 193.008815][ T26] pwc: recv_control_msg error -32 req 04 val 1000 [ 193.022856][ T26] pwc: recv_control_msg error -32 req 04 val 1300 [ 193.029879][ T26] pwc: recv_control_msg error -32 req 04 val 1400 [ 193.044393][ T26] pwc: recv_control_msg error -32 req 02 val 2000 [ 193.055349][ T26] pwc: recv_control_msg error -32 req 02 val 2100 [ 193.064499][ T26] pwc: recv_control_msg error -32 req 04 val 1500 [ 193.078829][ T5449] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 193.079029][ T26] pwc: recv_control_msg error -32 req 02 val 2500 [ 193.100667][ T26] pwc: recv_control_msg error -32 req 02 val 2400 [ 193.120171][ T26] pwc: recv_control_msg error -32 req 02 val 2600 [ 193.127279][ T26] pwc: recv_control_msg error -71 req 02 val 2900 [ 193.140254][ T26] pwc: recv_control_msg error -71 req 02 val 2800 [ 193.150357][ T26] pwc: recv_control_msg error -71 req 04 val 1100 [ 193.168147][ T26] pwc: recv_control_msg error -71 req 04 val 1200 [ 193.180385][ T26] pwc: Registered as video103. [ 193.193735][ T26] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input39 [ 193.210879][ T26] usb 3-1: USB disconnect, device number 19 [ 193.550329][ T5875] loop0: detected capacity change from 0 to 128 [ 193.573672][ T5875] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 194.122059][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.128436][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.134906][ T5610] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 194.345170][ T5610] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 194.365290][ T5610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.409819][ T5610] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 194.422520][ T5610] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 194.436104][ T5610] usb 3-1: Manufacturer: syz [ 194.706501][ T5888] overlayfs: missing 'lowerdir' [ 194.819617][ T5449] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 194.936422][ T5449] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 194.977446][ T5449] usb 2-1: media controller created [ 195.060584][ T5449] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 195.061509][ T5610] usb 3-1: config 0 descriptor?? [ 195.191623][ T5610] rc_core: IR keymap rc-hauppauge not found [ 195.197632][ T5610] Registered IR keymap rc-empty [ 195.203074][ T5610] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 195.224990][ T5610] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input40 [ 195.297724][ C1] igorplugusb 3-1:0.0: Error: urb status = -32 [ 195.349779][ T26] usb 3-1: USB disconnect, device number 20 [ 195.421180][ T5449] i2c i2c-1: Added multiplexed i2c bus 2 [ 195.434270][ T5449] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 195.454290][ T5449] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 195.464766][ T5449] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 195.547321][ T5449] DVB: Unable to find symbol r820t_attach() [ 195.681773][ T5459] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 195.751734][ T5610] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 195.781648][ T5611] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 195.871669][ T5459] usb 5-1: Using ep0 maxpacket: 16 [ 195.879439][ T5459] usb 5-1: config index 0 descriptor too short (expected 16370, got 36) [ 195.896890][ T5459] usb 5-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 195.906185][ T5459] usb 5-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 195.916493][ T5459] usb 5-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 195.933640][ T5459] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 195.942909][ T5459] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.950896][ T5459] usb 5-1: Product: syz [ 195.951799][ T5610] usb 1-1: Using ep0 maxpacket: 32 [ 195.955248][ T5459] usb 5-1: Manufacturer: syz [ 195.964935][ T5459] usb 5-1: SerialNumber: syz [ 195.967193][ T5610] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 195.977960][ T5610] usb 1-1: config 0 has no interface number 0 [ 195.985461][ T5611] usb 4-1: Using ep0 maxpacket: 8 [ 195.992298][ T5610] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 196.003758][ T5610] usb 1-1: config 0 interface 85 has no altsetting 0 [ 196.011836][ T5611] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 196.022038][ T5611] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 196.032402][ T5611] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 196.042879][ T5610] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 196.053642][ T5610] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.079325][ T5611] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 196.093221][ T5610] usb 1-1: Product: syz [ 196.097409][ T5610] usb 1-1: Manufacturer: syz [ 196.102408][ T5610] usb 1-1: SerialNumber: syz [ 196.107171][ T5611] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 196.117434][ T5611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.126702][ T5610] usb 1-1: config 0 descriptor?? [ 196.341519][ T5611] usb 4-1: GET_CAPABILITIES returned 0 [ 196.347915][ T5611] usbtmc 4-1:16.0: can't read capabilities [ 196.545131][ T5449] usb 4-1: USB disconnect, device number 21 [ 196.556267][ T5610] appletouch 1-1:0.85: Geyser mode initialized. [ 196.567649][ T5610] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input41 [ 196.738717][ T5610] usb 2-1: USB disconnect, device number 15 [ 196.769556][ T5459] usb 1-1: USB disconnect, device number 18 [ 196.813246][ T5459] appletouch 1-1:0.85: input: appletouch disconnected [ 197.191858][ T5610] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 197.373575][ T5610] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.391428][ T5610] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 197.405614][ T5610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.426328][ T5610] usb 2-1: config 0 descriptor?? [ 197.440027][ T5610] pwc: Askey VC010 type 2 USB webcam detected. [ 197.466080][ T5936] loop0: detected capacity change from 0 to 128 [ 197.479025][ T5938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.398'. [ 197.511944][ T5936] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 198.805633][ T5941] overlayfs: missing 'lowerdir' [ 198.820727][ T5610] pwc: recv_control_msg error -32 req 02 val 2b00 [ 198.843364][ T5610] pwc: recv_control_msg error -32 req 02 val 2700 [ 198.867806][ T5610] pwc: recv_control_msg error -32 req 02 val 2c00 [ 198.869323][ T5464] usb 5-1: USB disconnect, device number 20 [ 198.880474][ T5610] pwc: recv_control_msg error -32 req 04 val 1000 [ 198.891860][ T5610] pwc: recv_control_msg error -32 req 04 val 1300 [ 198.899995][ T5610] pwc: recv_control_msg error -32 req 04 val 1400 [ 198.917837][ T5610] pwc: recv_control_msg error -32 req 02 val 2000 [ 198.980744][ T5610] pwc: recv_control_msg error -32 req 02 val 2100 [ 198.991844][ T5610] pwc: recv_control_msg error -32 req 04 val 1500 [ 198.999036][ T5610] pwc: recv_control_msg error -32 req 02 val 2500 [ 199.006188][ T5610] pwc: recv_control_msg error -32 req 02 val 2400 [ 199.156832][ T5948] binder: 5947:5948 ioctl c0306201 0 returned -14 [ 199.214120][ T5610] pwc: recv_control_msg error -71 req 02 val 2900 [ 199.256587][ T5610] pwc: recv_control_msg error -71 req 02 val 2800 [ 199.296241][ T5610] pwc: recv_control_msg error -71 req 04 val 1100 [ 199.347289][ T5610] pwc: recv_control_msg error -71 req 04 val 1200 [ 199.397497][ T5610] pwc: Registered as video103. [ 199.425989][ T5953] loop6: detected capacity change from 0 to 1 [ 199.427950][ T5610] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input42 [ 199.483799][ T5953] Dev loop6: unable to read RDB block 1 [ 199.498707][ T5610] usb 2-1: USB disconnect, device number 16 [ 199.523955][ T5953] loop6: unable to read partition table [ 199.560420][ T5953] loop6: partition table beyond EOD, truncated [ 199.601754][ T5953] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 199.681771][ T5612] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 199.894054][ T5612] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 199.919616][ T5612] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.953568][ T5612] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 199.975638][ T5612] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 200.010985][ T5612] usb 5-1: Manufacturer: syz [ 200.028334][ T5612] usb 5-1: config 0 descriptor?? [ 200.251689][ T5612] rc_core: IR keymap rc-hauppauge not found [ 200.257824][ T5612] Registered IR keymap rc-empty [ 200.350788][ T5612] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 200.434495][ T5612] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input43 [ 200.510321][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 200.535198][ T5612] usb 5-1: USB disconnect, device number 21 [ 200.651811][ T5611] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 200.732855][ T5464] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 200.841771][ T5611] usb 2-1: Using ep0 maxpacket: 8 [ 200.848672][ T5611] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 200.873474][ T5611] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 200.915746][ T5611] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 200.934193][ T5464] usb 4-1: Using ep0 maxpacket: 32 [ 200.949628][ T5464] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 200.968947][ T5611] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.982023][ T5464] usb 4-1: config 0 has no interface number 0 [ 200.989636][ T5611] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.998811][ T5464] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.998838][ T5464] usb 4-1: config 0 interface 85 has no altsetting 0 [ 201.001059][ T5464] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 201.071004][ T5611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.106415][ T5464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.123599][ T5464] usb 4-1: Product: syz [ 201.127955][ T5464] usb 4-1: Manufacturer: syz [ 201.129331][ T5979] loop4: detected capacity change from 0 to 128 [ 201.132629][ T5464] usb 4-1: SerialNumber: syz [ 201.165707][ T5979] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 201.174980][ T5464] usb 4-1: config 0 descriptor?? [ 201.281662][ T5449] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 201.605881][ T5611] usb 2-1: GET_CAPABILITIES returned 0 [ 201.725653][ T5611] usbtmc 2-1:16.0: can't read capabilities [ 201.866739][ T5611] usb 2-1: USB disconnect, device number 17 [ 201.906242][ T5464] appletouch 4-1:0.85: Geyser mode initialized. [ 201.934747][ T5464] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input44 [ 201.944407][ T5449] usb 3-1: Using ep0 maxpacket: 16 [ 201.951255][ T5449] usb 3-1: config index 0 descriptor too short (expected 16370, got 36) [ 201.960005][ T5449] usb 3-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 201.969057][ T5449] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 201.979427][ T5449] usb 3-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 202.910461][ T5985] overlayfs: missing 'lowerdir' [ 203.039833][ T5449] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 203.151942][ T5449] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.160380][ T5449] usb 3-1: Product: syz [ 203.164897][ T5449] usb 3-1: Manufacturer: syz [ 203.169510][ T5449] usb 3-1: SerialNumber: syz [ 203.193766][ T5464] usb 4-1: USB disconnect, device number 22 [ 203.283921][ T5464] appletouch 4-1:0.85: input: appletouch disconnected [ 203.362143][ T5989] binder: 5988:5989 ioctl c0306201 0 returned -14 [ 203.794539][ T5449] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 203.993073][ T5449] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.005591][ T5449] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 204.019490][ T5449] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.040512][ T5449] usb 2-1: config 0 descriptor?? [ 204.051108][ T5449] pwc: Askey VC010 type 2 USB webcam detected. [ 204.111675][ T5610] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 204.324698][ T5610] usb 4-1: Using ep0 maxpacket: 16 [ 204.333226][ T5610] usb 4-1: config index 0 descriptor too short (expected 16370, got 36) [ 204.345625][ T5610] usb 4-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 204.355198][ T5610] usb 4-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 204.369669][ T5610] usb 4-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 204.390210][ T5610] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 204.399864][ T5610] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.428383][ T5610] usb 4-1: Product: syz [ 204.433359][ T5610] usb 4-1: Manufacturer: syz [ 204.445994][ T5610] usb 4-1: SerialNumber: syz [ 204.452559][ T5449] pwc: recv_control_msg error -32 req 02 val 2b00 [ 204.463024][ T5449] pwc: recv_control_msg error -32 req 02 val 2700 [ 204.483526][ T5449] pwc: recv_control_msg error -32 req 02 val 2c00 [ 204.497798][ T5449] pwc: recv_control_msg error -32 req 04 val 1000 [ 204.508835][ T5449] pwc: recv_control_msg error -32 req 04 val 1300 [ 204.520688][ T5449] pwc: recv_control_msg error -32 req 04 val 1400 [ 204.534383][ T5449] pwc: recv_control_msg error -32 req 02 val 2000 [ 204.545353][ T5449] pwc: recv_control_msg error -32 req 02 val 2100 [ 204.556545][ T5449] pwc: recv_control_msg error -32 req 04 val 1500 [ 204.570030][ T5449] pwc: recv_control_msg error -32 req 02 val 2500 [ 204.581144][ T5449] pwc: recv_control_msg error -32 req 02 val 2400 [ 204.794482][ T5449] pwc: recv_control_msg error -71 req 02 val 2900 [ 204.806599][ T5449] pwc: recv_control_msg error -71 req 02 val 2800 [ 204.818946][ T5449] pwc: recv_control_msg error -71 req 04 val 1100 [ 204.826889][ T5449] pwc: recv_control_msg error -71 req 04 val 1200 [ 204.841413][ T5449] pwc: Registered as video103. [ 204.849468][ T5449] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 204.865516][ T5449] usb 2-1: USB disconnect, device number 18 [ 205.135906][ T5449] usb 3-1: USB disconnect, device number 21 [ 205.337048][ T5464] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 205.402993][ T5608] libceph: connect (1)[c::]:6789 error -101 [ 205.409013][ T5608] libceph: mon0 (1)[c::]:6789 connect error [ 205.427253][ T6020] ceph: No mds server is up or the cluster is laggy [ 205.454458][ T6032] loop6: detected capacity change from 0 to 1 [ 205.455031][ T6032] Dev loop6: unable to read RDB block 1 [ 205.455146][ T6032] loop6: unable to read partition table [ 205.455287][ T6032] loop6: partition table beyond EOD, truncated [ 205.455303][ T6032] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 205.543353][ T5464] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 205.562932][ T5464] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 205.637982][ T5464] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 205.668427][ T5464] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 205.688208][ T5464] usb 5-1: Manufacturer: syz [ 205.694658][ T5464] usb 5-1: config 0 descriptor?? [ 205.801770][ T5464] rc_core: IR keymap rc-hauppauge not found [ 205.807681][ T5464] Registered IR keymap rc-empty [ 205.817486][ T5464] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 205.838119][ T5464] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input46 [ 205.907682][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 205.921711][ T5608] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 205.937134][ T5611] usb 5-1: USB disconnect, device number 22 [ 205.951900][ T5610] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 206.111646][ T5608] usb 1-1: Using ep0 maxpacket: 32 [ 206.113120][ T5608] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 206.113143][ T5608] usb 1-1: config 0 has no interface number 0 [ 206.113171][ T5608] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 206.113195][ T5608] usb 1-1: config 0 interface 85 has no altsetting 0 [ 206.114939][ T5608] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 206.114965][ T5608] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.114983][ T5608] usb 1-1: Product: syz [ 206.114997][ T5608] usb 1-1: Manufacturer: syz [ 206.115010][ T5608] usb 1-1: SerialNumber: syz [ 206.116653][ T5608] usb 1-1: config 0 descriptor?? [ 206.141922][ T5610] usb 3-1: Using ep0 maxpacket: 32 [ 206.145673][ T5610] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 206.145687][ T5610] usb 3-1: config 0 has no interface number 0 [ 206.145699][ T5610] usb 3-1: config 0 interface 89 has no altsetting 0 [ 206.147521][ T5610] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 206.147543][ T5610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.147553][ T5610] usb 3-1: Product: syz [ 206.147561][ T5610] usb 3-1: Manufacturer: syz [ 206.147568][ T5610] usb 3-1: SerialNumber: syz [ 206.149212][ T5610] usb 3-1: config 0 descriptor?? [ 206.540136][ T5608] appletouch 1-1:0.85: Geyser mode initialized. [ 206.540769][ T5608] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input47 [ 206.746908][ T5608] usb 1-1: USB disconnect, device number 19 [ 206.754113][ T5608] appletouch 1-1:0.85: input: appletouch disconnected [ 206.884246][ T5464] usb 4-1: USB disconnect, device number 23 [ 207.671644][ T5449] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 207.861677][ T5449] usb 1-1: Using ep0 maxpacket: 16 [ 207.962474][ T5449] usb 1-1: config index 0 descriptor too short (expected 16370, got 36) [ 207.986110][ T5610] libceph: connect (1)[c::]:6789 error -101 [ 207.994955][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 207.999154][ T5449] usb 1-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 208.011652][ T5449] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 208.029685][ T6075] ceph: No mds server is up or the cluster is laggy [ 208.029857][ T5449] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 208.050807][ T5449] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 208.050834][ T5449] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.050854][ T5449] usb 1-1: Product: syz [ 208.050868][ T5449] usb 1-1: Manufacturer: syz [ 208.050882][ T5449] usb 1-1: SerialNumber: syz [ 208.099175][ T5464] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 208.347303][ T5464] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.370061][ T5464] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 208.380295][ T5464] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.397129][ T5464] usb 5-1: config 0 descriptor?? [ 208.407612][ T5464] pwc: Askey VC010 type 2 USB webcam detected. [ 208.611777][ T5449] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 208.720588][ T5608] usb 3-1: USB disconnect, device number 22 [ 208.794187][ T5449] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 208.817690][ T5449] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.843218][ T5464] pwc: recv_control_msg error -32 req 02 val 2b00 [ 208.860127][ T5464] pwc: recv_control_msg error -32 req 02 val 2700 [ 208.868183][ T5449] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 208.885423][ T5449] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 208.897270][ T5464] pwc: recv_control_msg error -32 req 02 val 2c00 [ 208.906663][ T5449] usb 2-1: Manufacturer: syz [ 208.917833][ T5464] pwc: recv_control_msg error -32 req 04 val 1000 [ 208.927378][ T5449] usb 2-1: config 0 descriptor?? [ 208.933072][ T5464] pwc: recv_control_msg error -32 req 04 val 1300 [ 208.940201][ T5464] pwc: recv_control_msg error -32 req 04 val 1400 [ 208.949397][ T5464] pwc: recv_control_msg error -32 req 02 val 2000 [ 208.961828][ T5464] pwc: recv_control_msg error -32 req 02 val 2100 [ 209.140603][ T6098] vxfs: WRONG superblock magic 00000000 at 1 [ 209.148607][ T6098] vxfs: WRONG superblock magic 00000000 at 8 [ 209.154749][ T6098] vxfs: can't find superblock. [ 209.271208][ T5610] libceph: connect (1)[c::]:6789 error -101 [ 209.277540][ T5608] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 209.366195][ T5610] libceph: mon0 (1)[c::]:6789 connect error [ 209.567042][ T5464] pwc: recv_control_msg error -32 req 04 val 1500 [ 209.575106][ T5464] pwc: recv_control_msg error -32 req 02 val 2500 [ 209.582014][ T5608] usb 3-1: Using ep0 maxpacket: 32 [ 209.593961][ T6096] ceph: No mds server is up or the cluster is laggy [ 209.603643][ T5608] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 209.606273][ T5464] pwc: recv_control_msg error -32 req 02 val 2400 [ 209.617778][ T5608] usb 3-1: config 0 has no interface number 0 [ 209.633044][ T5608] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.644230][ T5608] usb 3-1: config 0 interface 85 has no altsetting 0 [ 209.699886][ T5449] rc_core: IR keymap rc-hauppauge not found [ 209.709984][ T5449] Registered IR keymap rc-empty [ 209.747083][ T5608] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 209.756886][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.765646][ T5608] usb 3-1: Product: syz [ 209.769882][ T5608] usb 3-1: Manufacturer: syz [ 209.774832][ T5449] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 209.775722][ T5608] usb 3-1: SerialNumber: syz [ 209.795546][ T5608] usb 3-1: config 0 descriptor?? [ 209.806555][ T5449] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 209.821106][ C0] igorplugusb 2-1:0.0: Error: urb status = -32 [ 209.836549][ T5464] pwc: recv_control_msg error -71 req 02 val 2900 [ 209.851441][ T5449] usb 2-1: USB disconnect, device number 19 [ 209.858723][ T5464] pwc: recv_control_msg error -71 req 02 val 2800 [ 209.866086][ T5464] pwc: recv_control_msg error -71 req 04 val 1100 [ 209.873869][ T5464] pwc: recv_control_msg error -71 req 04 val 1200 [ 209.912377][ T5464] pwc: Registered as video103. [ 209.934843][ T5464] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input50 [ 209.960076][ T5464] usb 5-1: USB disconnect, device number 23 [ 210.213155][ T5608] appletouch 3-1:0.85: Geyser mode initialized. [ 210.223319][ T5608] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input49 [ 210.425383][ T5449] usb 3-1: USB disconnect, device number 23 [ 210.438996][ T5449] appletouch 3-1:0.85: input: appletouch disconnected [ 210.695638][ T5606] usb 1-1: USB disconnect, device number 20 [ 210.718743][ T6122] ceph: No mds server is up or the cluster is laggy [ 210.722045][ T5608] libceph: connect (1)[c::]:6789 error -101 [ 210.722154][ T5608] libceph: mon0 (1)[c::]:6789 connect error [ 211.101761][ T6140] loop2: detected capacity change from 0 to 256 [ 211.126836][ T6140] FAT-fs (loop2): Unrecognized mount option "coDepage=865" or missing value [ 211.136165][ T5611] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 211.332664][ T5611] usb 5-1: Using ep0 maxpacket: 32 [ 211.339807][ T5611] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 211.364572][ T5611] usb 5-1: config 0 has no interface number 0 [ 211.371340][ T5611] usb 5-1: config 0 interface 89 has no altsetting 0 [ 211.384895][ T5449] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 211.387105][ T5611] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 211.402433][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.410561][ T5611] usb 5-1: Product: syz [ 211.415618][ T6148] netlink: 36 bytes leftover after parsing attributes in process `syz.1.464'. [ 211.424741][ T5611] usb 5-1: Manufacturer: syz [ 211.429420][ T5611] usb 5-1: SerialNumber: syz [ 211.436059][ T5611] usb 5-1: config 0 descriptor?? [ 211.481737][ T5608] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 211.554328][ T6140] loop2: detected capacity change from 0 to 32768 [ 211.567939][ T6140] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.461 (6140) [ 211.583393][ T5449] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 211.599293][ T5449] usb 1-1: config 0 has no interfaces? [ 211.615405][ T5449] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 211.631754][ T5449] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.663927][ T6140] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 211.674983][ T5449] usb 1-1: config 0 descriptor?? [ 211.702263][ T6140] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 211.714843][ T5608] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 211.721166][ T6140] BTRFS info (device loop2): turning off barriers [ 211.731709][ T6140] BTRFS info (device loop2): setting nodatasum [ 211.738001][ T6140] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 211.752238][ T5608] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.762163][ T6140] BTRFS info (device loop2): use zstd compression, level 3 [ 211.778573][ T6140] BTRFS info (device loop2): using free space tree [ 211.782932][ T5608] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 211.794579][ T5608] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 211.802830][ T5608] usb 4-1: Manufacturer: syz [ 211.809248][ T5608] usb 4-1: config 0 descriptor?? [ 212.017553][ T5608] rc_core: IR keymap rc-hauppauge not found [ 212.027948][ T5608] Registered IR keymap rc-empty [ 212.037187][ T5608] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 212.050208][ T5608] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input51 [ 212.064895][ C1] igorplugusb 4-1:0.0: Error: urb status = -32 [ 212.143582][ T6178] hugetlbfs: Bad value for 'size' [ 212.436368][ T5611] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 212.485216][ T4275] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 212.518472][ T5608] usb 4-1: USB disconnect, device number 24 [ 212.632170][ T5611] usb 2-1: Using ep0 maxpacket: 16 [ 212.652735][ T5611] usb 2-1: config index 0 descriptor too short (expected 16370, got 36) [ 212.671815][ T5611] usb 2-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 212.680613][ T5611] usb 2-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 212.690892][ T5611] usb 2-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 212.703086][ T5611] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 212.712663][ T5611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.720667][ T5611] usb 2-1: Product: syz [ 212.724934][ T5611] usb 2-1: Manufacturer: syz [ 212.729533][ T5611] usb 2-1: SerialNumber: syz [ 213.033125][ T5464] libceph: connect (1)[c::]:6789 error -101 [ 213.039520][ T5464] libceph: mon0 (1)[c::]:6789 connect error [ 213.069108][ T6187] ceph: No mds server is up or the cluster is laggy [ 213.603435][ T6206] loop6: detected capacity change from 0 to 1 [ 213.610897][ T4466] Dev loop6: unable to read RDB block 1 [ 213.617628][ T4466] loop6: unable to read partition table [ 213.623637][ T4466] loop6: partition table beyond EOD, truncated [ 213.631169][ T6206] Dev loop6: unable to read RDB block 1 [ 213.638785][ T6206] loop6: unable to read partition table [ 213.650418][ T6206] loop6: partition table beyond EOD, truncated [ 213.669662][ T6206] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 213.911885][ T5608] usb 5-1: USB disconnect, device number 24 [ 213.928794][ T6211] netlink: 36 bytes leftover after parsing attributes in process `syz.2.475'. [ 214.176567][ T5455] usb 1-1: USB disconnect, device number 21 [ 214.230983][ T6217] loop4: detected capacity change from 0 to 256 [ 214.247480][ T6217] FAT-fs (loop4): Unrecognized mount option "coDepage=865" or missing value [ 214.559460][ T5608] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 214.786455][ T6222] ceph: No mds server is up or the cluster is laggy [ 214.793518][ T5464] libceph: connect (1)[c::]:6789 error -101 [ 214.798444][ T5604] usb 2-1: USB disconnect, device number 20 [ 214.799496][ T5464] libceph: mon0 (1)[c::]:6789 connect error [ 214.851627][ T5608] usb 3-1: Using ep0 maxpacket: 8 [ 214.858535][ T5608] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 214.905226][ T5608] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 215.015770][ T5608] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 215.026355][ T6232] loop3: detected capacity change from 0 to 128 [ 215.056030][ T6232] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 215.065166][ T5608] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.114833][ T5608] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.164370][ T5608] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.294129][ T6217] loop4: detected capacity change from 0 to 32768 [ 215.363382][ T6217] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.478 (6217) [ 215.430273][ T5608] usb 3-1: GET_CAPABILITIES returned 0 [ 215.435985][ T5608] usbtmc 3-1:16.0: can't read capabilities [ 215.542286][ T6217] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 215.613716][ T6217] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 215.641347][ T5608] usb 3-1: USB disconnect, device number 24 [ 215.683920][ T6217] BTRFS info (device loop4): turning off barriers [ 215.752170][ T6217] BTRFS info (device loop4): setting nodatasum [ 215.758409][ T6217] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 215.838104][ T6217] BTRFS info (device loop4): use zstd compression, level 3 [ 215.846444][ T6217] BTRFS info (device loop4): using free space tree [ 216.609341][ T6263] hugetlbfs: Bad value for 'size' [ 216.801257][ T6265] netlink: 36 bytes leftover after parsing attributes in process `syz.3.488'. [ 217.116536][ T4271] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 217.174240][ T5611] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 217.371646][ T5611] usb 3-1: Using ep0 maxpacket: 32 [ 217.378792][ T5611] usb 3-1: config 0 has an invalid interface number: 89 but max is 0 [ 217.401168][ T5611] usb 3-1: config 0 has no interface number 0 [ 217.418964][ T5611] usb 3-1: config 0 interface 89 has no altsetting 0 [ 217.439148][ T5611] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 217.461632][ T5608] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 217.469647][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.490869][ T5611] usb 3-1: Product: syz [ 217.524749][ T5611] usb 3-1: Manufacturer: syz [ 217.549950][ T5611] usb 3-1: SerialNumber: syz [ 217.571505][ T5611] usb 3-1: config 0 descriptor?? [ 217.661636][ T5608] usb 2-1: Using ep0 maxpacket: 16 [ 217.678074][ T5608] usb 2-1: config index 0 descriptor too short (expected 16370, got 36) [ 217.700339][ T5608] usb 2-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 217.718728][ T5608] usb 2-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 217.743312][ T5608] usb 2-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 217.767992][ T5608] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 217.791067][ T5608] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.811130][ T5608] usb 2-1: Product: syz [ 217.819132][ T5608] usb 2-1: Manufacturer: syz [ 217.827962][ T5608] usb 2-1: SerialNumber: syz [ 218.361974][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e33b400: rx timeout, send abort [ 218.671658][ T5611] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 218.871243][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801e33b400: abort rx timeout. Force session deactivation [ 218.881643][ T5611] usb 5-1: Using ep0 maxpacket: 16 [ 219.201669][ T5464] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 219.340317][ T6304] loop0: detected capacity change from 0 to 128 [ 219.357451][ T6304] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 219.698283][ T5464] usb 4-1: Using ep0 maxpacket: 8 [ 219.782877][ T5464] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 219.792906][ T5464] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 219.802807][ T5464] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 219.815082][ T5464] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 219.830132][ T5464] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 219.840016][ T5464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.071798][ T5464] usb 4-1: GET_CAPABILITIES returned 0 [ 221.091487][ T5464] usbtmc 4-1:16.0: can't read capabilities [ 221.129140][ T5464] usb 3-1: USB disconnect, device number 25 [ 221.155923][ T5612] usb 2-1: USB disconnect, device number 21 [ 221.274433][ T5608] usb 4-1: USB disconnect, device number 25 [ 221.371278][ T6313] netlink: 36 bytes leftover after parsing attributes in process `syz.0.501'. [ 221.393257][ T6312] device syzkaller0 entered promiscuous mode [ 222.070883][ T5611] usb 5-1: unable to get BOS descriptor or descriptor too short [ 222.109817][ T5611] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 222.132149][ T5611] usb 5-1: can't read configurations, error -71 [ 222.251726][ T5464] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 222.299889][ T6337] loop4: detected capacity change from 0 to 128 [ 222.330311][ T6337] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 222.443319][ T5464] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.457006][ T5464] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 222.466372][ T5464] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.496961][ T5464] usb 4-1: config 0 descriptor?? [ 222.550899][ T5464] pwc: Askey VC010 type 2 USB webcam detected. [ 222.831304][ T6342] overlayfs: missing 'lowerdir' [ 222.861729][ T5612] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 222.950720][ T5464] pwc: recv_control_msg error -32 req 02 val 2b00 [ 222.964288][ T5464] pwc: recv_control_msg error -32 req 02 val 2700 [ 222.993851][ T5464] pwc: recv_control_msg error -32 req 02 val 2c00 [ 223.024835][ T5464] pwc: recv_control_msg error -32 req 04 val 1000 [ 223.053919][ T5464] pwc: recv_control_msg error -32 req 04 val 1300 [ 223.071732][ T5612] usb 2-1: Using ep0 maxpacket: 32 [ 223.078401][ T5612] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 223.098397][ T5464] pwc: recv_control_msg error -32 req 04 val 1400 [ 223.124364][ T5612] usb 2-1: config 0 has no interface number 0 [ 223.132098][ T5612] usb 2-1: config 0 interface 89 has no altsetting 0 [ 223.167075][ T5464] pwc: recv_control_msg error -32 req 02 val 2000 [ 223.173185][ T5612] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 223.207273][ T5612] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.208746][ T5464] pwc: recv_control_msg error -32 req 02 val 2100 [ 223.239747][ T5612] usb 2-1: Product: syz [ 223.259674][ T5612] usb 2-1: Manufacturer: syz [ 223.259682][ T5464] pwc: recv_control_msg error -32 req 04 val 1500 [ 223.269372][ T6345] loop0: detected capacity change from 0 to 128 [ 223.277597][ T5612] usb 2-1: SerialNumber: syz [ 223.288935][ T5612] usb 2-1: config 0 descriptor?? [ 223.309879][ T5612] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 223.310738][ T5464] pwc: recv_control_msg error -32 req 02 val 2500 [ 223.332547][ T6345] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 223.367360][ T5612] em28xx 2-1:0.89: Video interface 89 found: bulk [ 223.376393][ T5464] pwc: recv_control_msg error -32 req 02 val 2400 [ 223.715898][ T5464] pwc: recv_control_msg error -71 req 02 val 2900 [ 223.930698][ T5464] pwc: recv_control_msg error -71 req 02 val 2800 [ 223.960790][ T5464] pwc: recv_control_msg error -71 req 04 val 1100 [ 223.971299][ T5464] pwc: recv_control_msg error -71 req 04 val 1200 [ 224.701813][ T5464] pwc: Registered as video103. [ 224.707699][ T5464] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input52 [ 224.751831][ T5464] usb 4-1: USB disconnect, device number 26 [ 224.772419][ T5612] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 224.840964][ T6356] netlink: 36 bytes leftover after parsing attributes in process `syz.4.513'. [ 225.099707][ T6358] device syzkaller0 entered promiscuous mode [ 225.193840][ T5612] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 225.202395][ T5612] em28xx 2-1:0.89: board has no eeprom [ 225.298381][ T6370] loop6: detected capacity change from 0 to 1 [ 225.308924][ T6370] Dev loop6: unable to read RDB block 1 [ 225.317751][ T6370] loop6: unable to read partition table [ 225.325099][ T6370] loop6: partition table beyond EOD, truncated [ 225.340681][ T6370] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 225.431874][ T5462] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 225.506385][ T5612] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 225.519167][ T5612] em28xx 2-1:0.89: analog set to bulk mode. [ 225.533748][ T5612] em28xx 2-1:0.89: Registering V4L2 extension [ 225.611731][ T5462] usb 5-1: Using ep0 maxpacket: 8 [ 225.620270][ T5462] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 225.632521][ T5612] em28xx 2-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 225.646545][ T5462] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 225.647149][ T5612] em28xx 2-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 225.661767][ T5462] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.671897][ T5612] em28xx 2-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 225.675011][ T5462] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.697076][ T5462] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.706377][ T5462] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.715852][ T5464] usb 2-1: USB disconnect, device number 22 [ 225.722818][ T5464] em28xx 2-1:0.89: Disconnecting em28xx [ 225.830560][ T5612] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 225.838000][ T5612] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 225.845089][ T5612] em28xx 2-1:0.89: No AC97 audio processor [ 225.856822][ T5612] usb 2-1: Decoder not found [ 225.861450][ T5612] em28xx 2-1:0.89: failed to create media graph [ 225.867792][ T5612] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 225.883152][ T5612] em28xx 2-1:0.89: Registering snapshot button... [ 225.891206][ T5612] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input53 [ 225.936809][ T5612] em28xx 2-1:0.89: Remote control support is not available for this card. [ 225.958194][ T5462] usb 5-1: GET_CAPABILITIES returned 0 [ 225.958226][ T5462] usbtmc 5-1:16.0: can't read capabilities [ 226.001484][ T6383] ceph: No mds server is up or the cluster is laggy [ 226.008551][ T5462] libceph: connect (1)[c::]:6789 error -101 [ 226.014908][ T5462] libceph: mon0 (1)[c::]:6789 connect error [ 226.022960][ T5464] em28xx 2-1:0.89: Closing input extension [ 226.028967][ T5464] em28xx 2-1:0.89: Deregistering snapshot button [ 226.082973][ T6391] loop3: detected capacity change from 0 to 128 [ 226.089043][ T5464] em28xx 2-1:0.89: Freeing device [ 226.109231][ T6391] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 226.604953][ T5464] usb 5-1: USB disconnect, device number 27 [ 227.021666][ T5612] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 227.963307][ T6403] device syzkaller0 entered promiscuous mode [ 228.093199][ T5612] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 228.116575][ T5612] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 228.131903][ T5612] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.168965][ T5612] usb 2-1: config 0 descriptor?? [ 228.208772][ T5612] pwc: Askey VC010 type 2 USB webcam detected. [ 228.376214][ T6412] loop6: detected capacity change from 0 to 1 [ 228.408008][ T4466] Dev loop6: unable to read RDB block 1 [ 228.416876][ T4466] loop6: unable to read partition table [ 228.435900][ T4466] loop6: partition table beyond EOD, truncated [ 228.464217][ T6412] Dev loop6: unable to read RDB block 1 [ 228.480048][ T6412] loop6: unable to read partition table [ 228.512452][ T6412] loop6: partition table beyond EOD, truncated [ 228.527514][ T6412] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 228.603468][ T5612] pwc: recv_control_msg error -32 req 02 val 2b00 [ 228.620954][ T5612] pwc: recv_control_msg error -32 req 02 val 2700 [ 228.658032][ T5612] pwc: recv_control_msg error -32 req 02 val 2c00 [ 228.710576][ T5612] pwc: recv_control_msg error -32 req 04 val 1000 [ 228.740433][ T5612] pwc: recv_control_msg error -32 req 04 val 1300 [ 228.799334][ T5612] pwc: recv_control_msg error -32 req 04 val 1400 [ 228.829303][ T5612] pwc: recv_control_msg error -32 req 02 val 2000 [ 228.849514][ T5612] pwc: recv_control_msg error -32 req 02 val 2100 [ 228.869336][ T5612] pwc: recv_control_msg error -32 req 04 val 1500 [ 228.894905][ T5612] pwc: recv_control_msg error -32 req 02 val 2500 [ 228.915224][ T5612] pwc: recv_control_msg error -32 req 02 val 2400 [ 229.139537][ T5612] pwc: recv_control_msg error -71 req 02 val 2900 [ 229.147839][ T5612] pwc: recv_control_msg error -71 req 02 val 2800 [ 229.164929][ T5612] pwc: recv_control_msg error -71 req 04 val 1100 [ 229.189191][ T5612] pwc: recv_control_msg error -71 req 04 val 1200 [ 229.205144][ T5612] pwc: Registered as video103. [ 229.218009][ T5612] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input54 [ 229.265517][ T5612] usb 2-1: USB disconnect, device number 23 [ 229.278731][ T6430] loop2: detected capacity change from 0 to 512 [ 229.321500][ T6430] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 229.371781][ T6430] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c11c, mo2=0102] [ 229.423396][ T6430] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2195: inode #15: comm syz.2.538: corrupted in-inode xattr [ 229.459213][ T6430] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.538: couldn't read orphan inode 15 (err -117) [ 229.564233][ T6430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 229.767922][ T6438] loop0: detected capacity change from 0 to 128 [ 229.870261][ T6438] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 230.593241][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 230.911679][ T5463] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 231.471745][ T5463] usb 2-1: Using ep0 maxpacket: 8 [ 231.479506][ T5463] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 231.541821][ T5463] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 231.557568][ T5463] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.568652][ T5463] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.591378][ T5463] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.600491][ T5463] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.640944][ T6452] loop6: detected capacity change from 0 to 1 [ 231.677320][ T6452] Dev loop6: unable to read RDB block 1 [ 231.695274][ T6452] loop6: unable to read partition table [ 231.709854][ T6455] loop2: detected capacity change from 0 to 128 [ 231.721821][ T6452] loop6: partition table beyond EOD, truncated [ 231.749350][ T6452] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 231.759222][ T6455] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 231.863041][ T5463] usb 2-1: GET_CAPABILITIES returned 0 [ 231.868567][ T5463] usbtmc 2-1:16.0: can't read capabilities [ 232.079594][ T5463] usb 2-1: USB disconnect, device number 24 [ 232.788363][ T6478] loop1: detected capacity change from 0 to 256 [ 232.840427][ T6478] FAT-fs (loop1): Unrecognized mount option "coDepage=865" or missing value [ 233.146616][ T6487] loop3: detected capacity change from 0 to 128 [ 233.177782][ T6487] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 234.927190][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.0.559'. [ 235.984664][ T6498] loop6: detected capacity change from 0 to 1 [ 236.020777][ T6498] Dev loop6: unable to read RDB block 1 [ 236.070143][ T6498] loop6: unable to read partition table [ 236.093721][ T6498] loop6: partition table beyond EOD, truncated [ 236.130443][ T6498] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 236.511747][ T5611] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 236.701497][ T6526] loop1: detected capacity change from 0 to 128 [ 236.708126][ T5612] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 236.715913][ T5611] usb 3-1: Using ep0 maxpacket: 8 [ 236.723038][ T5611] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 236.762358][ T6526] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 236.784495][ T5611] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 236.831644][ T5608] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 236.913400][ T5612] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 237.197014][ T5612] usb 1-1: config 0 has no interfaces? [ 237.301690][ T5611] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 237.321737][ T5612] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 237.371671][ T5608] usb 5-1: Using ep0 maxpacket: 16 [ 238.007802][ T5611] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 238.033867][ T5612] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.167711][ T5612] usb 1-1: config 0 descriptor?? [ 238.173511][ T5611] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 238.183251][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.290600][ T6530] loop1: detected capacity change from 0 to 256 [ 238.302910][ T6530] FAT-fs (loop1): Unrecognized mount option "coDepage=865" or missing value [ 238.410074][ T5611] usb 3-1: GET_CAPABILITIES returned 0 [ 238.415874][ T5611] usbtmc 3-1:16.0: can't read capabilities [ 238.621628][ T5611] usb 3-1: USB disconnect, device number 26 [ 238.961472][ T6530] loop1: detected capacity change from 0 to 32768 [ 238.995137][ T6530] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.572 (6530) [ 239.083505][ T6530] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 239.122183][ T6530] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 239.177178][ T6530] BTRFS info (device loop1): turning off barriers [ 239.233688][ T6530] BTRFS info (device loop1): setting nodatasum [ 239.290868][ T6530] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 239.310987][ T6530] BTRFS info (device loop1): use zstd compression, level 3 [ 239.318414][ T6530] BTRFS info (device loop1): using free space tree [ 239.431660][ T5463] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 239.711781][ T5463] usb 4-1: Using ep0 maxpacket: 32 [ 239.723881][ T5463] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 240.208644][ T5463] usb 4-1: config 0 has no interface number 0 [ 240.216476][ T5463] usb 4-1: config 0 interface 89 has no altsetting 0 [ 240.247935][ T26] usb 1-1: USB disconnect, device number 22 [ 240.248884][ T5463] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 240.361660][ T5463] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 240.369689][ T5463] usb 4-1: Product: syz [ 240.382474][ T5463] usb 4-1: Manufacturer: syz [ 240.408667][ T4263] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 240.420147][ T5463] usb 4-1: SerialNumber: syz [ 240.454815][ T5463] usb 4-1: config 0 descriptor?? [ 240.502762][ T5463] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 240.561717][ T5463] em28xx 4-1:0.89: Video interface 89 found: bulk [ 240.676790][ T6561] loop6: detected capacity change from 0 to 1 [ 240.728184][ T4464] Dev loop6: unable to read RDB block 1 [ 240.756477][ T4464] loop6: unable to read partition table [ 240.803903][ T4464] loop6: partition table beyond EOD, truncated [ 240.826487][ T6561] Dev loop6: unable to read RDB block 1 [ 240.839458][ T6561] loop6: unable to read partition table [ 240.862872][ T6561] loop6: partition table beyond EOD, truncated [ 240.881804][ T6561] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 240.891520][ T6566] syz.0.578 uses obsolete (PF_INET,SOCK_PACKET) [ 240.929152][ T5608] usb 5-1: unable to get BOS descriptor or descriptor too short [ 240.981363][ T5608] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 241.001477][ T5608] usb 5-1: can't read configurations, error -71 [ 241.103792][ T5463] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 241.516856][ T5463] em28xx 4-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 241.529696][ T5463] em28xx 4-1:0.89: board has no eeprom [ 241.581680][ T26] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 241.693547][ T5608] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 241.721918][ T5611] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 241.731703][ T26] usb 1-1: device descriptor read/64, error -71 [ 241.831652][ T5463] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 241.841670][ T5463] em28xx 4-1:0.89: analog set to bulk mode. [ 241.851931][ T5451] em28xx 4-1:0.89: Registering V4L2 extension [ 241.893697][ T5608] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 241.911815][ T5611] usb 3-1: Using ep0 maxpacket: 8 [ 241.919292][ T5611] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 241.930847][ T5608] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.945743][ T5611] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 241.957181][ T5451] em28xx 4-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 241.963568][ T5608] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.973856][ T5611] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 241.976842][ T5451] em28xx 4-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 241.991001][ T5608] usb 5-1: config 0 descriptor?? [ 242.001812][ T5611] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 242.014979][ T5451] em28xx 4-1:0.89: reading from i2c device at 0x42 failed (error=-5) [ 242.015196][ T26] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 242.032631][ T5608] pwc: Askey VC010 type 2 USB webcam detected. [ 242.041707][ T5611] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 242.051843][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.057004][ T5451] em28xx 4-1:0.89: reading from i2c device at 0x40 failed (error=-5) [ 242.071367][ T5604] usb 4-1: USB disconnect, device number 27 [ 242.084560][ T5604] em28xx 4-1:0.89: Disconnecting em28xx [ 242.101477][ T5451] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 242.118590][ T5451] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 242.133119][ T5451] em28xx 4-1:0.89: No AC97 audio processor [ 242.179713][ T5451] usb 4-1: Decoder not found [ 242.198032][ T5451] em28xx 4-1:0.89: failed to create media graph [ 242.211709][ T5451] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 242.211843][ T26] usb 1-1: device descriptor read/64, error -71 [ 242.233090][ T5451] em28xx 4-1:0.89: Registering snapshot button... [ 242.254557][ T6588] loop1: detected capacity change from 0 to 128 [ 242.256940][ T5451] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input55 [ 242.263121][ T6588] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 242.285833][ T5611] usb 3-1: GET_CAPABILITIES returned 0 [ 242.291407][ T5611] usbtmc 3-1:16.0: can't read capabilities [ 242.324705][ T5451] em28xx 4-1:0.89: Remote control support is not available for this card. [ 242.353692][ T5604] em28xx 4-1:0.89: Closing input extension [ 242.359719][ T5604] em28xx 4-1:0.89: Deregistering snapshot button [ 242.366665][ T26] usb usb1-port1: attempt power cycle [ 242.408248][ T5604] em28xx 4-1:0.89: Freeing device [ 242.445328][ T5608] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.459608][ T5608] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.468726][ T5608] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.517449][ T5611] usb 3-1: USB disconnect, device number 27 [ 242.523723][ T5608] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.541960][ T5608] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.567842][ T5608] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.591043][ T5608] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.609950][ T5608] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.620257][ T5608] pwc: recv_control_msg error -32 req 04 val 1500 [ 242.638143][ T5608] pwc: recv_control_msg error -32 req 02 val 2500 [ 242.734233][ T5608] pwc: recv_control_msg error -32 req 02 val 2400 [ 242.802406][ T26] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 242.842639][ T26] usb 1-1: device descriptor read/8, error -71 [ 242.951290][ T5608] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.973633][ T5608] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.999760][ T5608] pwc: recv_control_msg error -71 req 04 val 1100 [ 243.048303][ T5608] pwc: recv_control_msg error -71 req 04 val 1200 [ 243.079702][ T5608] pwc: Registered as video103. [ 243.119374][ T5608] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 243.129281][ T26] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 243.165298][ T26] usb 1-1: device descriptor read/8, error -71 [ 243.199739][ T5608] usb 5-1: USB disconnect, device number 29 [ 243.311728][ T26] usb usb1-port1: unable to enumerate USB device [ 243.531719][ T5611] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 243.741783][ T5611] usb 3-1: Using ep0 maxpacket: 16 [ 244.811652][ T5451] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 245.001820][ T5451] usb 1-1: Using ep0 maxpacket: 32 [ 245.009644][ T5451] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 245.009962][ T6633] loop1: detected capacity change from 0 to 128 [ 245.059838][ T5451] usb 1-1: config 0 has no interface number 0 [ 245.075931][ T5451] usb 1-1: config 0 interface 89 has no altsetting 0 [ 245.099802][ T5451] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 245.143512][ T6633] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 245.169142][ T5451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.206250][ T5451] usb 1-1: Product: syz [ 245.220642][ T5451] usb 1-1: Manufacturer: syz [ 245.241887][ T5451] usb 1-1: SerialNumber: syz [ 246.474025][ T5451] usb 1-1: config 0 descriptor?? [ 246.497840][ T5451] em28xx 1-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 246.507526][ T5451] em28xx 1-1:0.89: Video interface 89 found: bulk [ 246.894355][ T6639] device syzkaller0 entered promiscuous mode [ 247.094065][ T5451] em28xx 1-1:0.89: unknown em28xx chip ID (0) [ 247.121816][ T5608] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 247.333237][ T5608] usb 4-1: Using ep0 maxpacket: 8 [ 247.339782][ T5608] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 247.385328][ T5611] usb 3-1: unable to get BOS descriptor or descriptor too short [ 247.396557][ T5608] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 247.411484][ T5611] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 247.429545][ T5611] usb 3-1: can't read configurations, error -71 [ 247.435973][ T5608] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 247.461233][ T5608] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 247.490375][ T5608] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.500850][ T5608] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.512657][ T5451] em28xx 1-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 247.522314][ T5451] em28xx 1-1:0.89: board has no eeprom [ 247.724800][ T5608] usb 4-1: GET_CAPABILITIES returned 0 [ 247.730461][ T5608] usbtmc 4-1:16.0: can't read capabilities [ 247.821706][ T5611] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 247.831805][ T5451] em28xx 1-1:0.89: Identified as Terratec Grabby (card=67) [ 247.839123][ T5451] em28xx 1-1:0.89: analog set to bulk mode. [ 247.845814][ T5463] em28xx 1-1:0.89: Registering V4L2 extension [ 247.928926][ T5604] usb 4-1: USB disconnect, device number 28 [ 247.939073][ T5463] em28xx 1-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 247.951983][ T5451] usb 1-1: USB disconnect, device number 27 [ 247.959738][ T5463] em28xx 1-1:0.89: reading from i2c device at 0x48 failed (error=-5) [ 247.968674][ T5451] em28xx 1-1:0.89: Disconnecting em28xx [ 247.974386][ T5463] em28xx 1-1:0.89: Config register raw data: 0xffffffed [ 247.981445][ T5463] em28xx 1-1:0.89: AC97 chip type couldn't be determined [ 247.988539][ T5463] em28xx 1-1:0.89: No AC97 audio processor [ 247.995247][ T5463] usb 1-1: Decoder not found [ 248.006926][ T5611] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 248.017227][ T5463] em28xx 1-1:0.89: failed to create media graph [ 248.019939][ T5611] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 248.023550][ T5463] em28xx 1-1:0.89: V4L2 device video103 deregistered [ 248.043633][ T5611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.052960][ T5463] em28xx 1-1:0.89: Registering snapshot button... [ 248.060211][ T5463] input: em28xx snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.89/input/input57 [ 248.073207][ T5611] usb 3-1: config 0 descriptor?? [ 248.089935][ T5611] pwc: Askey VC010 type 2 USB webcam detected. [ 248.138947][ T5463] em28xx 1-1:0.89: Remote control support is not available for this card. [ 248.154415][ T5451] em28xx 1-1:0.89: Closing input extension [ 248.160265][ T5451] em28xx 1-1:0.89: Deregistering snapshot button [ 248.179927][ T5451] em28xx 1-1:0.89: Freeing device [ 248.547292][ T5611] pwc: recv_control_msg error -32 req 02 val 2b00 [ 248.554767][ T5611] pwc: recv_control_msg error -32 req 02 val 2700 [ 248.562416][ T5611] pwc: recv_control_msg error -32 req 02 val 2c00 [ 248.569457][ T5611] pwc: recv_control_msg error -32 req 04 val 1000 [ 248.576704][ T5611] pwc: recv_control_msg error -32 req 04 val 1300 [ 248.583789][ T5611] pwc: recv_control_msg error -32 req 04 val 1400 [ 248.590695][ T5611] pwc: recv_control_msg error -32 req 02 val 2000 [ 248.597858][ T5611] pwc: recv_control_msg error -32 req 02 val 2100 [ 248.605218][ T5611] pwc: recv_control_msg error -32 req 04 val 1500 [ 248.631637][ T5611] pwc: recv_control_msg error -32 req 02 val 2500 [ 248.649683][ T5604] libceph: connect (1)[c::]:6789 error -101 [ 248.655766][ T5611] pwc: recv_control_msg error -32 req 02 val 2400 [ 248.663999][ T6658] ceph: No mds server is up or the cluster is laggy [ 248.664503][ T5604] libceph: mon0 (1)[c::]:6789 connect error [ 248.695605][ T6667] loop3: detected capacity change from 0 to 128 [ 248.710848][ T6667] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 248.729400][ T6664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.609'. [ 248.758538][ T6666] binder: 6662:6666 ioctl c0306201 0 returned -14 [ 249.189531][ T5611] pwc: recv_control_msg error -71 req 02 val 2900 [ 249.306944][ T5611] pwc: recv_control_msg error -71 req 02 val 2800 [ 249.313902][ T5611] pwc: recv_control_msg error -71 req 04 val 1100 [ 249.320642][ T5611] pwc: recv_control_msg error -71 req 04 val 1200 [ 249.335316][ T5611] pwc: Registered as video103. [ 249.477317][ T5611] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 250.632134][ T5611] usb 3-1: USB disconnect, device number 29 [ 251.061654][ T5459] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 251.101702][ T5604] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 251.151619][ T5611] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 251.262011][ T5459] usb 2-1: Using ep0 maxpacket: 16 [ 251.303094][ T5604] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 251.331681][ T5604] usb 4-1: config 0 has no interfaces? [ 251.361603][ T5611] usb 3-1: Using ep0 maxpacket: 16 [ 251.368659][ T5611] usb 3-1: config index 0 descriptor too short (expected 16370, got 36) [ 251.381325][ T5604] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 251.439924][ T5611] usb 3-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 251.458393][ T5604] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.466711][ T5611] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 251.493491][ T5604] usb 4-1: config 0 descriptor?? [ 251.517992][ T5611] usb 3-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 251.592161][ T5611] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 251.721727][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.740187][ T5611] usb 3-1: Product: syz [ 251.750288][ T5611] usb 3-1: Manufacturer: syz [ 251.762600][ T5611] usb 3-1: SerialNumber: syz [ 252.732673][ T5611] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 252.921745][ T5611] usb 5-1: Using ep0 maxpacket: 32 [ 252.931159][ T5611] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 252.957262][ T5611] usb 5-1: config 0 has no interface number 0 [ 252.976992][ T5611] usb 5-1: config 0 interface 89 has no altsetting 0 [ 252.996253][ T5611] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 253.039296][ T5611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.070241][ T5611] usb 5-1: Product: syz [ 253.088328][ T5611] usb 5-1: Manufacturer: syz [ 253.101617][ T5611] usb 5-1: SerialNumber: syz [ 253.127597][ T5611] usb 5-1: config 0 descriptor?? [ 253.158744][ T5459] usb 2-1: unable to get BOS descriptor or descriptor too short [ 253.184325][ T5611] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 253.187100][ T5459] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 253.217635][ T5611] em28xx 5-1:0.89: Video interface 89 found: bulk [ 253.219561][ T5459] usb 2-1: can't read configurations, error -71 [ 253.248564][ T6707] binder: 6706:6707 ioctl c0306201 0 returned -14 [ 253.310597][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz.1.623'. [ 253.779847][ T5611] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 253.826826][ T5462] usb 3-1: USB disconnect, device number 30 [ 253.832961][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3d8000: rx timeout, send abort [ 253.953185][ T5612] usb 4-1: USB disconnect, device number 29 [ 253.965248][ T6716] loop2: detected capacity change from 0 to 128 [ 253.979384][ T6716] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 254.333043][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801d3d8000: abort rx timeout. Force session deactivation [ 254.879740][ T5611] em28xx 5-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 254.931672][ T5611] em28xx 5-1:0.89: board has no eeprom [ 255.093223][ T6722] loop6: detected capacity change from 0 to 1 [ 255.319707][ T6726] overlayfs: missing 'lowerdir' [ 255.563811][ T4257] Dev loop6: unable to read RDB block 1 [ 255.578128][ T4257] loop6: unable to read partition table [ 255.590674][ T4257] loop6: partition table beyond EOD, truncated [ 255.741888][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.748209][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.770807][ T6722] Dev loop6: unable to read RDB block 1 [ 255.778554][ T6735] binder: 6733:6735 ioctl c0306201 0 returned -14 [ 255.811727][ T6722] loop6: unable to read partition table [ 255.831631][ T6722] loop6: partition table beyond EOD, truncated [ 255.837891][ T6722] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 255.852069][ T5611] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 255.859319][ T5611] em28xx 5-1:0.89: analog set to bulk mode. [ 255.869584][ T5611] em28xx 5-1:0.89: Registering V4L2 extension [ 256.017894][ T5611] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-5) [ 256.033659][ T5612] usb 5-1: USB disconnect, device number 30 [ 256.043158][ T5612] em28xx 5-1:0.89: Disconnecting em28xx [ 256.048749][ T5611] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 256.062183][ T5611] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 256.106028][ T5611] em28xx 5-1:0.89: No AC97 audio processor [ 256.128444][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 256.147112][ T5611] usb 5-1: Decoder not found [ 256.151761][ T5611] em28xx 5-1:0.89: failed to create media graph [ 256.168628][ T5611] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 256.182548][ T5611] em28xx 5-1:0.89: Registering snapshot button... [ 256.195035][ T5611] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input59 [ 256.264493][ T5611] em28xx 5-1:0.89: Remote control support is not available for this card. [ 256.290782][ T5612] em28xx 5-1:0.89: Closing input extension [ 256.296685][ T5612] em28xx 5-1:0.89: Deregistering snapshot button [ 256.363578][ T5612] em28xx 5-1:0.89: Freeing device [ 256.531670][ T5462] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 256.618412][ T5611] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 256.951874][ T5611] usb 4-1: Using ep0 maxpacket: 16 [ 257.261602][ T5462] usb 1-1: Using ep0 maxpacket: 16 [ 257.297521][ T5462] usb 1-1: config index 0 descriptor too short (expected 16370, got 36) [ 257.403668][ T5462] usb 1-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 257.447756][ T5462] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 257.469783][ T5462] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 257.492900][ T5462] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 257.511419][ T5462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.526305][ T5462] usb 1-1: Product: syz [ 257.530785][ T5462] usb 1-1: Manufacturer: syz [ 257.535241][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801cf45400: rx timeout, send abort [ 257.561247][ T5462] usb 1-1: SerialNumber: syz [ 258.021693][ T5612] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 258.043628][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801cf45400: abort rx timeout. Force session deactivation [ 258.222011][ T5612] usb 3-1: Using ep0 maxpacket: 8 [ 258.232031][ T5612] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 258.279399][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.326473][ T5612] usb 3-1: Product: syz [ 258.353528][ T5612] usb 3-1: Manufacturer: syz [ 258.374218][ T5612] usb 3-1: SerialNumber: syz [ 258.409487][ T5612] usb 3-1: config 0 descriptor?? [ 258.626426][ T5612] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 258.668373][ T6773] loop4: detected capacity change from 0 to 128 [ 258.706432][ T6773] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 259.424905][ T6775] overlayfs: missing 'lowerdir' [ 259.962280][ T5462] usb 1-1: USB disconnect, device number 28 [ 260.191002][ T5611] usb 4-1: unable to get BOS descriptor or descriptor too short [ 260.222428][ T5611] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 260.230058][ T5611] usb 4-1: can't read configurations, error -71 [ 260.240230][ T6783] loop6: detected capacity change from 0 to 1 [ 260.255151][ T4257] Dev loop6: unable to read RDB block 1 [ 260.260803][ T4257] loop6: unable to read partition table [ 260.286100][ T4257] loop6: partition table beyond EOD, truncated [ 260.300367][ T6783] Dev loop6: unable to read RDB block 1 [ 260.320082][ T6783] loop6: unable to read partition table [ 260.324416][ T6785] netlink: 8 bytes leftover after parsing attributes in process `syz.3.649'. [ 260.344754][ T6783] loop6: partition table beyond EOD, truncated [ 260.364109][ T6783] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 260.382269][ T5612] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 260.411868][ T5612] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 260.428901][ T5612] usb 3-1: media controller created [ 260.431740][ T5462] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 260.511234][ T5612] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.641637][ T5462] usb 1-1: Using ep0 maxpacket: 16 [ 260.649877][ T5462] usb 1-1: config index 0 descriptor too short (expected 16370, got 36) [ 260.689700][ T5462] usb 1-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 261.206251][ T5612] i2c i2c-1: Added multiplexed i2c bus 2 [ 261.240032][ T5612] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 261.292306][ T5612] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 261.313340][ T5612] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 261.326243][ T5462] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 261.406416][ T5462] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 261.441343][ T5462] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 261.474284][ T5462] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.496971][ T5462] usb 1-1: Product: syz [ 261.515391][ T5462] usb 1-1: Manufacturer: syz [ 261.538255][ T5462] usb 1-1: SerialNumber: syz [ 261.610341][ T5612] DVB: Unable to find symbol r820t_attach() [ 261.801899][ T5612] usb 3-1: USB disconnect, device number 31 [ 262.050181][ T6804] tipc: Started in network mode [ 262.078146][ T6804] tipc: Node identity ca30bbe5e511, cluster identity 4711 [ 262.143746][ T6804] tipc: Enabled bearer , priority 0 [ 262.182379][ T6808] tipc: Resetting bearer [ 262.259217][ T6812] loop1: detected capacity change from 0 to 128 [ 262.265897][ T6803] tipc: Disabling bearer [ 262.287709][ T6812] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 262.855429][ T5611] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 262.973952][ T6817] overlayfs: missing 'lowerdir' [ 264.016454][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055be1800: rx timeout, send abort [ 264.093463][ T5606] usb 1-1: USB disconnect, device number 29 [ 264.111659][ T5611] usb 4-1: Using ep0 maxpacket: 16 [ 264.118529][ T5611] usb 4-1: config index 0 descriptor too short (expected 16370, got 36) [ 264.138923][ T6823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.661'. [ 264.201768][ T5611] usb 4-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 264.210596][ T5611] usb 4-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 264.220815][ T5611] usb 4-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 264.266338][ T5611] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 264.295906][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.411232][ T5611] usb 4-1: Product: syz [ 264.416074][ T5611] usb 4-1: Manufacturer: syz [ 264.420687][ T5611] usb 4-1: SerialNumber: syz [ 264.524759][ C0] vcan0: j1939_tp_rxtimer: 0xffff888055be1800: abort rx timeout. Force session deactivation [ 264.834438][ T5611] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 265.111812][ T5463] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 265.281731][ T5611] usb 3-1: Using ep0 maxpacket: 8 [ 265.291264][ T5611] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 265.304044][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.314246][ T5611] usb 3-1: Product: syz [ 265.318424][ T5611] usb 3-1: Manufacturer: syz [ 265.323380][ T5611] usb 3-1: SerialNumber: syz [ 265.329709][ T5611] usb 3-1: config 0 descriptor?? [ 265.411703][ T5463] usb 5-1: Using ep0 maxpacket: 16 [ 265.512611][ T5606] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 265.539247][ T5611] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 265.704975][ T5606] usb 1-1: Using ep0 maxpacket: 32 [ 265.717654][ T5606] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 265.729873][ T5606] usb 1-1: config 0 has no interface number 0 [ 265.737660][ T5606] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 265.756760][ T5606] usb 1-1: config 0 interface 85 has no altsetting 0 [ 265.769285][ T5606] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 265.781431][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.794262][ T5606] usb 1-1: Product: syz [ 265.798772][ T5606] usb 1-1: Manufacturer: syz [ 265.805001][ T5606] usb 1-1: SerialNumber: syz [ 265.816028][ T5606] usb 1-1: config 0 descriptor?? [ 266.231150][ T5606] appletouch 1-1:0.85: Geyser mode initialized. [ 266.247641][ T5606] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input60 [ 266.435744][ T5606] usb 1-1: USB disconnect, device number 30 [ 266.466216][ T5606] appletouch 1-1:0.85: input: appletouch disconnected [ 266.519311][ T26] usb 4-1: USB disconnect, device number 32 [ 266.650975][ T6847] tipc: Started in network mode [ 266.656741][ T6847] tipc: Node identity 0e4cbbe7f0b2, cluster identity 4711 [ 266.670388][ T6847] tipc: Enabled bearer , priority 0 [ 266.691179][ T6847] tipc: Resetting bearer [ 266.711384][ T6846] tipc: Disabling bearer [ 266.982631][ T5611] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 267.008251][ T5611] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 267.016186][ T5611] usb 3-1: media controller created [ 267.050186][ T6857] loop0: detected capacity change from 0 to 128 [ 267.058582][ T5611] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.081123][ T6857] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 267.513263][ T26] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 267.818205][ T5611] i2c i2c-1: Added multiplexed i2c bus 2 [ 267.824405][ T5611] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 267.832247][ T5611] usb 3-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 267.841277][ T5611] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 267.940351][ T26] usb 2-1: Using ep0 maxpacket: 16 [ 268.003719][ T6866] overlayfs: missing 'lowerdir' [ 268.967340][ T5463] usb 5-1: unable to get BOS descriptor or descriptor too short [ 268.988777][ T26] usb 2-1: config index 0 descriptor too short (expected 16370, got 36) [ 268.995356][ T5463] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 269.014198][ T5463] usb 5-1: can't read configurations, error -71 [ 269.059970][ T26] usb 2-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 269.080953][ T5611] DVB: Unable to find symbol r820t_attach() [ 269.116989][ T26] usb 2-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 269.149243][ T26] usb 2-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 269.253282][ T26] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 269.284267][ T5611] usb 3-1: USB disconnect, device number 32 [ 269.305607][ T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.333273][ T26] usb 2-1: Product: syz [ 269.342674][ T26] usb 2-1: Manufacturer: syz [ 269.351862][ T26] usb 2-1: SerialNumber: syz [ 269.466716][ T5463] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 269.664721][ T5463] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.685274][ T5463] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 269.697765][ T5463] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.710634][ T5463] usb 5-1: config 0 descriptor?? [ 269.727659][ T5463] pwc: Askey VC010 type 2 USB webcam detected. [ 269.797725][ T6886] tipc: Started in network mode [ 269.803305][ T6886] tipc: Node identity da21aa7a2715, cluster identity 4711 [ 269.812047][ T6886] tipc: Enabled bearer , priority 0 [ 269.819404][ T6886] device syzkaller0 entered promiscuous mode [ 269.839311][ T6885] tipc: Resetting bearer [ 269.851672][ T5462] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 269.875881][ T6885] tipc: Disabling bearer [ 270.051708][ T5462] usb 3-1: Using ep0 maxpacket: 16 [ 270.058352][ T5462] usb 3-1: config index 0 descriptor too short (expected 16370, got 36) [ 270.066875][ T5462] usb 3-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 270.075812][ T5462] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 270.086190][ T5462] usb 3-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 270.097894][ T5462] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 270.107392][ T5462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.115798][ T5462] usb 3-1: Product: syz [ 270.121048][ T5462] usb 3-1: Manufacturer: syz [ 270.131410][ T5463] pwc: recv_control_msg error -32 req 02 val 2b00 [ 270.140674][ T5462] usb 3-1: SerialNumber: syz [ 270.147614][ T5463] pwc: recv_control_msg error -32 req 02 val 2700 [ 270.157567][ T5463] pwc: recv_control_msg error -32 req 02 val 2c00 [ 270.167580][ T5463] pwc: recv_control_msg error -32 req 04 val 1000 [ 270.176818][ T5463] pwc: recv_control_msg error -32 req 04 val 1300 [ 270.195789][ T5463] pwc: recv_control_msg error -32 req 04 val 1400 [ 270.203626][ T5463] pwc: recv_control_msg error -32 req 02 val 2000 [ 270.211490][ T5463] pwc: recv_control_msg error -32 req 02 val 2100 [ 270.226114][ T5463] pwc: recv_control_msg error -32 req 04 val 1500 [ 270.236956][ T5463] pwc: recv_control_msg error -32 req 02 val 2500 [ 270.248631][ T5463] pwc: recv_control_msg error -32 req 02 val 2400 [ 270.273917][ T5611] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 270.441739][ T5612] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 270.459286][ T5463] pwc: recv_control_msg error -71 req 02 val 2900 [ 270.470310][ T5463] pwc: recv_control_msg error -71 req 02 val 2800 [ 270.481688][ T5611] usb 4-1: Using ep0 maxpacket: 32 [ 270.489804][ T5611] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 270.499673][ T5611] usb 4-1: config 0 has no interface number 0 [ 270.499768][ T5463] pwc: recv_control_msg error -71 req 04 val 1100 [ 270.508054][ T5611] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 270.534095][ T5463] pwc: recv_control_msg error -71 req 04 val 1200 [ 270.540611][ T5611] usb 4-1: config 0 interface 85 has no altsetting 0 [ 270.548246][ T5463] pwc: Registered as video103. [ 270.558299][ T5611] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 270.565554][ T5463] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input61 [ 270.577215][ T5611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.589301][ T5611] usb 4-1: Product: syz [ 270.594935][ T5611] usb 4-1: Manufacturer: syz [ 270.599562][ T5611] usb 4-1: SerialNumber: syz [ 270.609560][ T5463] usb 5-1: USB disconnect, device number 32 [ 270.621791][ T5612] usb 1-1: Using ep0 maxpacket: 16 [ 270.649907][ T5611] usb 4-1: config 0 descriptor?? [ 271.068044][ T5611] appletouch 4-1:0.85: Geyser mode initialized. [ 271.096521][ T5611] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input62 [ 271.227264][ T6903] loop4: detected capacity change from 0 to 128 [ 271.258369][ T6903] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 271.274339][ T5606] usb 4-1: USB disconnect, device number 33 [ 271.325206][ T5606] appletouch 4-1:0.85: input: appletouch disconnected [ 271.331114][ T5463] usb 2-1: USB disconnect, device number 27 [ 272.044226][ T6907] overlayfs: missing 'lowerdir' [ 272.649483][ T5464] usb 3-1: USB disconnect, device number 33 [ 272.662380][ T5463] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 272.861655][ T5463] usb 2-1: Using ep0 maxpacket: 8 [ 272.878759][ T5463] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 272.934044][ T5463] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.992953][ T5463] usb 2-1: Product: syz [ 273.017141][ T5463] usb 2-1: Manufacturer: syz [ 273.111717][ T5463] usb 2-1: SerialNumber: syz [ 273.261730][ T5463] usb 2-1: config 0 descriptor?? [ 274.013187][ T5463] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 274.042416][ T5612] usb 1-1: unable to get BOS descriptor or descriptor too short [ 274.078274][ T5612] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 274.096187][ T5612] usb 1-1: can't read configurations, error -71 [ 274.154813][ T5451] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 274.443058][ T5451] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 274.459785][ T5451] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 274.484685][ T5451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 274.511781][ T5451] usb 5-1: config 0 descriptor?? [ 274.541748][ T5451] pwc: Askey VC010 type 2 USB webcam detected. [ 274.969114][ T5451] pwc: recv_control_msg error -32 req 02 val 2b00 [ 274.982250][ T5451] pwc: recv_control_msg error -32 req 02 val 2700 [ 275.018418][ T5451] pwc: recv_control_msg error -32 req 02 val 2c00 [ 275.046372][ T5451] pwc: recv_control_msg error -32 req 04 val 1000 [ 275.090112][ T5451] pwc: recv_control_msg error -32 req 04 val 1300 [ 275.127522][ T5451] pwc: recv_control_msg error -32 req 04 val 1400 [ 275.147768][ T5451] pwc: recv_control_msg error -32 req 02 val 2000 [ 275.171411][ T5451] pwc: recv_control_msg error -32 req 02 val 2100 [ 275.183468][ T5451] pwc: recv_control_msg error -32 req 04 val 1500 [ 275.191205][ T5451] pwc: recv_control_msg error -32 req 02 val 2500 [ 275.218357][ T5451] pwc: recv_control_msg error -32 req 02 val 2400 [ 275.319731][ T5463] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 275.341920][ T5463] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 275.349828][ T5463] usb 2-1: media controller created [ 275.435622][ T5463] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 275.446840][ T5451] pwc: recv_control_msg error -71 req 02 val 2900 [ 275.460311][ T5451] pwc: recv_control_msg error -71 req 02 val 2800 [ 275.471091][ T5451] pwc: recv_control_msg error -71 req 04 val 1100 [ 275.471617][ T5612] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 275.484997][ T5451] pwc: recv_control_msg error -71 req 04 val 1200 [ 275.530944][ T5451] pwc: Registered as video103. [ 275.540424][ T5451] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input63 [ 275.610775][ T5463] i2c i2c-1: Added multiplexed i2c bus 2 [ 275.618250][ T5451] usb 5-1: USB disconnect, device number 33 [ 275.624846][ T5463] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 275.637192][ T5463] usb 2-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 275.646552][ T5463] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 275.681663][ T5612] usb 1-1: Using ep0 maxpacket: 16 [ 275.688647][ T5612] usb 1-1: config index 0 descriptor too short (expected 16370, got 36) [ 275.727658][ T5612] usb 1-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 275.772898][ T5612] usb 1-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 275.814128][ T5612] usb 1-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 275.837400][ T5463] DVB: Unable to find symbol r820t_attach() [ 275.845047][ T5612] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 275.866002][ T5612] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.882106][ T5612] usb 1-1: Product: syz [ 275.891621][ T5612] usb 1-1: Manufacturer: syz [ 275.896231][ T5612] usb 1-1: SerialNumber: syz [ 276.179180][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d52800: rx timeout, send abort [ 276.797543][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d52800: abort rx timeout. Force session deactivation [ 276.921911][ T5463] usb 2-1: USB disconnect, device number 28 [ 277.276942][ T6987] netlink: 40 bytes leftover after parsing attributes in process `syz.1.716'. [ 277.350609][ T6990] binder: 6989:6990 ioctl c0306201 0 returned -14 [ 277.761598][ T5462] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 277.921609][ T5462] usb 2-1: device descriptor read/64, error -71 [ 278.846108][ T5462] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 278.864955][ T5606] usb 1-1: USB disconnect, device number 33 [ 279.031697][ T5462] usb 2-1: device descriptor read/64, error -71 [ 279.037844][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055903800: rx timeout, send abort [ 279.171840][ T5462] usb usb2-port1: attempt power cycle [ 279.401797][ T5606] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 279.546195][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055903800: abort rx timeout. Force session deactivation [ 279.581640][ T5462] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 279.605747][ T5606] usb 1-1: Using ep0 maxpacket: 8 [ 279.612305][ T5462] usb 2-1: device descriptor read/8, error -71 [ 279.622572][ T5606] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 279.632041][ T5606] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.661902][ T5606] usb 1-1: Product: syz [ 279.666152][ T5606] usb 1-1: Manufacturer: syz [ 279.676242][ T5606] usb 1-1: SerialNumber: syz [ 279.688836][ T5606] usb 1-1: config 0 descriptor?? [ 279.746656][ T7025] binder: 7024:7025 ioctl c0306201 0 returned -14 [ 279.897012][ T7031] loop2: detected capacity change from 0 to 128 [ 279.905304][ T5606] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 279.906610][ T5462] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 279.943074][ T7031] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 279.993582][ T5462] usb 2-1: device descriptor read/8, error -71 [ 280.427002][ T5462] usb usb2-port1: unable to enumerate USB device [ 281.114754][ T7035] overlayfs: missing 'lowerdir' [ 281.387039][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880545a6800: rx timeout, send abort [ 281.492262][ T5464] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 281.792033][ T5612] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 282.139835][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880545a6800: abort rx timeout. Force session deactivation [ 282.151037][ T5606] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 282.183953][ T5606] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 282.193559][ T5606] usb 1-1: media controller created [ 282.269002][ T5606] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 282.271950][ T5464] usb 5-1: Using ep0 maxpacket: 16 [ 282.323712][ T5464] usb 5-1: config index 0 descriptor too short (expected 16370, got 36) [ 282.349479][ T5464] usb 5-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 282.351672][ T5612] usb 3-1: Using ep0 maxpacket: 16 [ 282.382597][ T5464] usb 5-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 282.383201][ T5612] usb 3-1: config index 0 descriptor too short (expected 16370, got 36) [ 282.399758][ T5464] usb 5-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 282.431583][ T5612] usb 3-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 282.438495][ T5464] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 282.456447][ T5612] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 282.459790][ T5464] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.487602][ T5606] i2c i2c-1: Added multiplexed i2c bus 2 [ 282.502871][ T5612] usb 3-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 282.515317][ T5606] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 282.515321][ T5464] usb 5-1: Product: syz [ 282.533940][ T5464] usb 5-1: Manufacturer: syz [ 282.552240][ T5606] usb 1-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 282.562959][ T5464] usb 5-1: SerialNumber: syz [ 282.563719][ T5612] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 282.603254][ T5606] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 282.616714][ T5612] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.630746][ T5612] usb 3-1: Product: syz [ 282.645714][ T5612] usb 3-1: Manufacturer: syz [ 282.650311][ T5612] usb 3-1: SerialNumber: syz [ 282.691854][ T5606] DVB: Unable to find symbol r820t_attach() [ 283.914420][ T5611] usb 1-1: USB disconnect, device number 34 [ 284.205919][ T5462] usb 5-1: USB disconnect, device number 34 [ 284.371741][ T5611] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 284.535819][ T5611] usb 1-1: device descriptor read/64, error -71 [ 284.647558][ T5464] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 284.706102][ T5462] usb 3-1: USB disconnect, device number 34 [ 284.931660][ T5611] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 285.101723][ T5611] usb 1-1: device descriptor read/64, error -71 [ 285.232942][ T5611] usb usb1-port1: attempt power cycle [ 285.571618][ T5464] usb 4-1: Using ep0 maxpacket: 32 [ 285.578997][ T5464] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 285.590608][ T5464] usb 4-1: config 0 has no interface number 0 [ 285.611256][ T5464] usb 4-1: config 0 interface 89 has no altsetting 0 [ 285.620721][ T5464] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 285.642053][ T5611] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 285.664623][ T5464] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.685335][ T5611] usb 1-1: device descriptor read/8, error -71 [ 285.696528][ T5464] usb 4-1: Product: syz [ 285.700691][ T5464] usb 4-1: Manufacturer: syz [ 285.723423][ T5464] usb 4-1: SerialNumber: syz [ 285.762725][ T5464] usb 4-1: config 0 descriptor?? [ 285.791026][ T5464] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 285.826285][ T5464] em28xx 4-1:0.89: Video interface 89 found: bulk [ 285.962144][ T5611] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 286.002223][ T5611] usb 1-1: device descriptor read/8, error -71 [ 286.031707][ T5463] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 286.100608][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d22000: rx timeout, send abort [ 286.145981][ T5611] usb usb1-port1: unable to enumerate USB device [ 286.242448][ T5463] usb 2-1: Using ep0 maxpacket: 16 [ 286.376994][ T5464] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 286.542271][ T5611] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 286.608832][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056d22000: abort rx timeout. Force session deactivation [ 286.733208][ T5611] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 286.747849][ T5611] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 286.765629][ T5611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.782750][ T5611] usb 5-1: config 0 descriptor?? [ 286.796752][ T5611] pwc: Askey VC010 type 2 USB webcam detected. [ 286.921697][ T5608] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 287.111676][ T5608] usb 3-1: Using ep0 maxpacket: 16 [ 287.121291][ T5608] usb 3-1: config index 0 descriptor too short (expected 16370, got 36) [ 287.156680][ T5608] usb 3-1: config 26 has too many interfaces: 143, using maximum allowed: 32 [ 287.187219][ T5608] usb 3-1: config 26 has an invalid descriptor of length 0, skipping remainder of the config [ 287.202430][ T5611] pwc: recv_control_msg error -32 req 02 val 2b00 [ 287.210475][ T5611] pwc: recv_control_msg error -32 req 02 val 2700 [ 287.230425][ T5611] pwc: recv_control_msg error -32 req 02 val 2c00 [ 287.238987][ T5608] usb 3-1: config 26 has 0 interfaces, different from the descriptor's value: 143 [ 287.260709][ T5611] pwc: recv_control_msg error -32 req 04 val 1000 [ 287.277733][ T5608] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 287.290886][ T5611] pwc: recv_control_msg error -32 req 04 val 1300 [ 287.309118][ T5608] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 287.317918][ T5611] pwc: recv_control_msg error -32 req 04 val 1400 [ 287.334860][ T5611] pwc: recv_control_msg error -32 req 02 val 2000 [ 287.344226][ T5608] usb 3-1: Product: syz [ 287.355076][ T5608] usb 3-1: Manufacturer: syz [ 287.361292][ T5611] pwc: recv_control_msg error -32 req 02 val 2100 [ 287.377616][ T5608] usb 3-1: SerialNumber: syz [ 287.391652][ T5611] pwc: recv_control_msg error -32 req 04 val 1500 [ 287.404783][ T5464] em28xx 4-1:0.89: failed to get i2c transfer status from bridge register (error=-5) [ 287.429998][ T5464] em28xx 4-1:0.89: board has no eeprom [ 287.445191][ T5611] pwc: recv_control_msg error -32 req 02 val 2500 [ 287.456782][ T5611] pwc: recv_control_msg error -32 req 02 val 2400 [ 287.541612][ T5464] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 287.551465][ T5464] em28xx 4-1:0.89: analog set to bulk mode. [ 287.591874][ T5464] usb 4-1: USB disconnect, device number 34 [ 287.614308][ T5451] em28xx 4-1:0.89: Registering V4L2 extension [ 287.623867][ T5464] em28xx 4-1:0.89: Disconnecting em28xx [ 287.666641][ T5611] pwc: recv_control_msg error -71 req 02 val 2900 [ 287.676112][ T5611] pwc: recv_control_msg error -71 req 02 val 2800 [ 287.691294][ T5611] pwc: recv_control_msg error -71 req 04 val 1100 [ 287.708315][ T5611] pwc: recv_control_msg error -71 req 04 val 1200 [ 287.725583][ T5611] pwc: Registered as video103. [ 287.741363][ T5451] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 287.742607][ T5611] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input64 [ 287.767425][ T5611] usb 5-1: USB disconnect, device number 35 [ 287.785788][ T5451] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 287.819629][ T5451] em28xx 4-1:0.89: No AC97 audio processor [ 287.867336][ T5451] usb 4-1: Decoder not found [ 287.900383][ T5451] em28xx 4-1:0.89: failed to create media graph [ 287.990259][ T5451] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 288.063881][ T5451] em28xx 4-1:0.89: Registering snapshot button... [ 288.065110][ T7120] ================================================================== [ 288.078418][ T7120] BUG: KASAN: use-after-free in v4l2_fh_open+0xc6/0x430 [ 288.085370][ T7120] Read of size 8 at addr ffff8880272a4738 by task v4l_id/7120 [ 288.092830][ T7120] [ 288.095157][ T7120] CPU: 1 PID: 7120 Comm: v4l_id Not tainted 6.1.147-syzkaller #0 [ 288.102860][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 288.112916][ T7120] Call Trace: [ 288.116199][ T7120] [ 288.119125][ T7120] dump_stack_lvl+0x168/0x22e [ 288.123801][ T7120] ? __lock_acquire+0x7c50/0x7c50 [ 288.128808][ T7120] ? show_regs_print_info+0x12/0x12 [ 288.133998][ T7120] ? load_image+0x3b0/0x3b0 [ 288.138486][ T7120] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 288.143846][ T7120] ? __virt_addr_valid+0x188/0x540 [ 288.148939][ T7120] ? __virt_addr_valid+0x465/0x540 [ 288.154058][ T7120] ? v4l2_fh_open+0xc6/0x430 [ 288.158624][ T7120] print_report+0xa8/0x200 [ 288.163022][ T7120] kasan_report+0x10b/0x140 [ 288.167504][ T7120] ? v4l2_fh_open+0xc6/0x430 [ 288.172071][ T7120] v4l2_fh_open+0xc6/0x430 [ 288.176465][ T7120] em28xx_v4l2_open+0x152/0x990 [ 288.181294][ T7120] ? __lock_acquire+0x7c50/0x7c50 [ 288.186302][ T7120] v4l2_open+0x20b/0x360 [ 288.190545][ T7120] chrdev_open+0x597/0x670 [ 288.194948][ T7120] ? cd_forget+0x160/0x160 [ 288.199344][ T7120] ? tomoyo_file_open+0xe9/0x170 [ 288.204263][ T7120] ? fsnotify_perm+0x39b/0x550 [ 288.209078][ T7120] ? cd_forget+0x160/0x160 [ 288.213481][ T7120] do_dentry_open+0x7e9/0x10d0 [ 288.218229][ T7120] path_openat+0x25c6/0x2e70 [ 288.222807][ T7120] ? do_sys_openat2+0xcf/0x490 [ 288.227554][ T7120] ? __x64_sys_openat+0x135/0x160 [ 288.232558][ T7120] ? do_syscall_64+0x4c/0xa0 [ 288.237145][ T7120] ? do_filp_open+0x3c0/0x3c0 [ 288.241810][ T7120] do_filp_open+0x1c1/0x3c0 [ 288.246320][ T7120] ? vfs_tmpfile+0x480/0x480 [ 288.250893][ T7120] ? _raw_spin_unlock+0x24/0x40 [ 288.255733][ T7120] ? alloc_fd+0x58f/0x630 [ 288.260051][ T7120] do_sys_openat2+0x142/0x490 [ 288.264737][ T7120] ? up_read+0x20/0x20 [ 288.268783][ T7120] ? do_faccessat+0x681/0xa40 [ 288.273440][ T7120] ? kmem_cache_free+0xf7/0x290 [ 288.278271][ T7120] ? do_sys_open+0xe0/0xe0 [ 288.282666][ T7120] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 288.288626][ T7120] ? lock_chain_count+0x20/0x20 [ 288.293474][ T7120] __x64_sys_openat+0x135/0x160 [ 288.298325][ T7120] do_syscall_64+0x4c/0xa0 [ 288.302739][ T7120] ? clear_bhb_loop+0x60/0xb0 [ 288.307429][ T7120] ? clear_bhb_loop+0x60/0xb0 [ 288.312104][ T7120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.318008][ T7120] RIP: 0033:0x7f315afce407 [ 288.322439][ T7120] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 288.342054][ T7120] RSP: 002b:00007fff94504f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 288.350462][ T7120] RAX: ffffffffffffffda RBX: 00007f315af42880 RCX: 00007f315afce407 [ 288.358421][ T7120] RDX: 0000000000000000 RSI: 00007fff94505f1d RDI: ffffffffffffff9c [ 288.366398][ T7120] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 288.374361][ T7120] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 288.382323][ T7120] R13: 00007fff94505150 R14: 00007f315b21f000 R15: 00005637f49ec4d8 [ 288.390304][ T7120] [ 288.393314][ T7120] [ 288.395626][ T7120] Allocated by task 5451: [ 288.399929][ T7120] kasan_set_track+0x4b/0x70 [ 288.404528][ T7120] __kasan_kmalloc+0x8e/0xa0 [ 288.409116][ T7120] em28xx_v4l2_init+0x107/0x2e70 [ 288.414058][ T7120] em28xx_init_extension+0x118/0x1b0 [ 288.419332][ T7120] process_one_work+0x898/0x1160 [ 288.424266][ T7120] worker_thread+0xaa2/0x1250 [ 288.428938][ T7120] kthread+0x29d/0x330 [ 288.433005][ T7120] ret_from_fork+0x1f/0x30 [ 288.437406][ T7120] [ 288.439713][ T7120] Freed by task 5451: [ 288.443689][ T7120] kasan_set_track+0x4b/0x70 [ 288.448274][ T7120] kasan_save_free_info+0x2d/0x50 [ 288.453300][ T7120] ____kasan_slab_free+0x126/0x1e0 [ 288.458397][ T7120] slab_free_freelist_hook+0x131/0x1a0 [ 288.463852][ T7120] __kmem_cache_free+0xb6/0x1f0 [ 288.468692][ T7120] em28xx_v4l2_init+0x166c/0x2e70 [ 288.473712][ T7120] em28xx_init_extension+0x118/0x1b0 [ 288.478997][ T7120] process_one_work+0x898/0x1160 [ 288.483927][ T7120] worker_thread+0xaa2/0x1250 [ 288.488605][ T7120] kthread+0x29d/0x330 [ 288.492675][ T7120] ret_from_fork+0x1f/0x30 [ 288.497098][ T7120] [ 288.499403][ T7120] Last potentially related work creation: [ 288.505111][ T7120] kasan_save_stack+0x3a/0x60 [ 288.509793][ T7120] __kasan_record_aux_stack+0xb2/0xc0 [ 288.515158][ T7120] insert_work+0x54/0x3c0 [ 288.519497][ T7120] __queue_work+0xba3/0xfb0 [ 288.523997][ T7120] queue_delayed_work_on+0x126/0x1e0 [ 288.529284][ T7120] queue_con_delay+0xbc/0x1a0 [ 288.533958][ T7120] ceph_con_workfn+0xae5/0x1030 [ 288.538793][ T7120] process_one_work+0x898/0x1160 [ 288.543711][ T7120] worker_thread+0xaa2/0x1250 [ 288.548373][ T7120] kthread+0x29d/0x330 [ 288.552434][ T7120] ret_from_fork+0x1f/0x30 [ 288.556868][ T7120] [ 288.559186][ T7120] Second to last potentially related work creation: [ 288.565761][ T7120] kasan_save_stack+0x3a/0x60 [ 288.570429][ T7120] __kasan_record_aux_stack+0xb2/0xc0 [ 288.575792][ T7120] insert_work+0x54/0x3c0 [ 288.580150][ T7120] __queue_work+0xba3/0xfb0 [ 288.584638][ T7120] queue_delayed_work_on+0x126/0x1e0 [ 288.589925][ T7120] queue_con_delay+0xbc/0x1a0 [ 288.594652][ T7120] __open_session+0x2c9/0x7d0 [ 288.599316][ T7120] ceph_monc_open_session+0x25e/0x4d0 [ 288.604673][ T7120] __ceph_open_session+0xd4/0x7c0 [ 288.609692][ T7120] ceph_get_tree+0xa7e/0x13f0 [ 288.614361][ T7120] vfs_get_tree+0x88/0x270 [ 288.618761][ T7120] vfs_fsconfig_locked+0x22f/0x3f0 [ 288.623868][ T7120] __se_sys_fsconfig+0x61b/0x750 [ 288.628785][ T7120] do_syscall_64+0x4c/0xa0 [ 288.633208][ T7120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 288.639102][ T7120] [ 288.641407][ T7120] The buggy address belongs to the object at ffff8880272a4000 [ 288.641407][ T7120] which belongs to the cache kmalloc-8k of size 8192 [ 288.655453][ T7120] The buggy address is located 1848 bytes inside of [ 288.655453][ T7120] 8192-byte region [ffff8880272a4000, ffff8880272a6000) [ 288.668882][ T7120] [ 288.671192][ T7120] The buggy address belongs to the physical page: [ 288.677590][ T7120] page:ffffea00009ca800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x272a0 [ 288.687722][ T7120] head:ffffea00009ca800 order:3 compound_mapcount:0 compound_pincount:0 [ 288.696042][ T7120] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 288.704016][ T7120] raw: 00fff00000010200 ffffea000069c200 dead000000000003 ffff888017442280 [ 288.712606][ T7120] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 288.721276][ T7120] page dumped because: kasan: bad access detected [ 288.727696][ T7120] page_owner tracks the page as allocated [ 288.733401][ T7120] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4013, tgid 4013 (S50sshd), ts 33478494430, free_ts 33454825910 [ 288.753530][ T7120] post_alloc_hook+0x173/0x1a0 [ 288.758302][ T7120] get_page_from_freelist+0x1a26/0x1ac0 [ 288.763841][ T7120] __alloc_pages+0x1df/0x4e0 [ 288.768424][ T7120] alloc_slab_page+0x5d/0x160 [ 288.773092][ T7120] new_slab+0x87/0x2c0 [ 288.777161][ T7120] ___slab_alloc+0xbc6/0x1220 [ 288.781836][ T7120] __kmem_cache_alloc_node+0x1a0/0x260 [ 288.787297][ T7120] kmalloc_trace+0x26/0xe0 [ 288.791705][ T7120] tomoyo_init_log+0x1081/0x1f50 [ 288.796624][ T7120] tomoyo_supervisor+0x326/0x10b0 [ 288.801634][ T7120] tomoyo_env_perm+0x146/0x1e0 [ 288.806388][ T7120] tomoyo_find_next_domain+0x157a/0x1a40 [ 288.812015][ T7120] tomoyo_bprm_check_security+0x100/0x150 [ 288.817736][ T7120] security_bprm_check+0x5e/0x90 [ 288.822673][ T7120] bprm_execve+0xa77/0x18a0 [ 288.827177][ T7120] do_execveat_common+0x51b/0x6c0 [ 288.832236][ T7120] page last free stack trace: [ 288.836909][ T7120] free_unref_page_prepare+0x8b4/0x9a0 [ 288.842364][ T7120] free_unref_page+0x2e/0x3f0 [ 288.847027][ T7120] __unfreeze_partials+0x1a5/0x200 [ 288.852117][ T7120] put_cpu_partial+0x17c/0x250 [ 288.856868][ T7120] qlist_free_all+0x76/0xe0 [ 288.861369][ T7120] kasan_quarantine_reduce+0x144/0x160 [ 288.866818][ T7120] __kasan_slab_alloc+0x1e/0x80 [ 288.871677][ T7120] slab_post_alloc_hook+0x4b/0x480 [ 288.876792][ T7120] __kmem_cache_alloc_node+0x140/0x260 [ 288.882350][ T7120] kmalloc_trace+0x26/0xe0 [ 288.886773][ T7120] tomoyo_init_log+0x171/0x1f50 [ 288.891607][ T7120] tomoyo_supervisor+0x326/0x10b0 [ 288.896621][ T7120] tomoyo_path_permission+0x25a/0x380 [ 288.901983][ T7120] tomoyo_path_perm+0x403/0x550 [ 288.906830][ T7120] security_inode_getattr+0xcf/0x120 [ 288.912095][ T7120] vfs_getattr+0x26/0x3a0 [ 288.916408][ T7120] [ 288.918714][ T7120] Memory state around the buggy address: [ 288.924333][ T7120] ffff8880272a4600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.932383][ T7120] ffff8880272a4680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.940452][ T7120] >ffff8880272a4700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.948510][ T7120] ^ [ 288.954483][ T7120] ffff8880272a4780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.962549][ T7120] ffff8880272a4800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 288.970598][ T7120] ================================================================== [ 289.034675][ T5451] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input65 [ 289.081004][ T5451] em28xx 4-1:0.89: Remote control support is not available for this card. [ 289.109028][ T5464] em28xx 4-1:0.89: Closing input extension [ 289.120359][ T5464] em28xx 4-1:0.89: Deregistering snapshot button [ 289.294728][ T7120] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 289.301933][ T7120] CPU: 0 PID: 7120 Comm: v4l_id Not tainted 6.1.147-syzkaller #0 [ 289.309646][ T7120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 289.319684][ T7120] Call Trace: [ 289.322957][ T7120] [ 289.325893][ T7120] dump_stack_lvl+0x168/0x22e [ 289.330582][ T7120] ? memcpy+0x3c/0x60 [ 289.334575][ T7120] ? show_regs_print_info+0x12/0x12 [ 289.339815][ T7120] ? load_image+0x3b0/0x3b0 [ 289.344333][ T7120] panic+0x2c9/0x710 [ 289.348233][ T7120] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 289.354393][ T7120] ? bpf_jit_dump+0xd0/0xd0 [ 289.358900][ T7120] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 289.364778][ T7120] ? _raw_spin_unlock+0x40/0x40 [ 289.369621][ T7120] check_panic_on_warn+0x80/0xa0 [ 289.374556][ T7120] ? v4l2_fh_open+0xc6/0x430 [ 289.379126][ T7120] end_report+0x66/0x110 [ 289.383359][ T7120] kasan_report+0x118/0x140 [ 289.387840][ T7120] ? v4l2_fh_open+0xc6/0x430 [ 289.392412][ T7120] v4l2_fh_open+0xc6/0x430 [ 289.396808][ T7120] em28xx_v4l2_open+0x152/0x990 [ 289.401641][ T7120] ? __lock_acquire+0x7c50/0x7c50 [ 289.406660][ T7120] v4l2_open+0x20b/0x360 [ 289.410886][ T7120] chrdev_open+0x597/0x670 [ 289.415285][ T7120] ? cd_forget+0x160/0x160 [ 289.419729][ T7120] ? tomoyo_file_open+0xe9/0x170 [ 289.424666][ T7120] ? fsnotify_perm+0x39b/0x550 [ 289.429424][ T7120] ? cd_forget+0x160/0x160 [ 289.433821][ T7120] do_dentry_open+0x7e9/0x10d0 [ 289.438570][ T7120] path_openat+0x25c6/0x2e70 [ 289.443140][ T7120] ? do_sys_openat2+0xcf/0x490 [ 289.447908][ T7120] ? __x64_sys_openat+0x135/0x160 [ 289.452914][ T7120] ? do_syscall_64+0x4c/0xa0 [ 289.457484][ T7120] ? do_filp_open+0x3c0/0x3c0 [ 289.462141][ T7120] do_filp_open+0x1c1/0x3c0 [ 289.466628][ T7120] ? vfs_tmpfile+0x480/0x480 [ 289.471198][ T7120] ? _raw_spin_unlock+0x24/0x40 [ 289.476069][ T7120] ? alloc_fd+0x58f/0x630 [ 289.480415][ T7120] do_sys_openat2+0x142/0x490 [ 289.485073][ T7120] ? up_read+0x20/0x20 [ 289.489117][ T7120] ? do_faccessat+0x681/0xa40 [ 289.493771][ T7120] ? kmem_cache_free+0xf7/0x290 [ 289.498596][ T7120] ? do_sys_open+0xe0/0xe0 [ 289.502999][ T7120] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 289.508964][ T7120] ? lock_chain_count+0x20/0x20 [ 289.513799][ T7120] __x64_sys_openat+0x135/0x160 [ 289.518632][ T7120] do_syscall_64+0x4c/0xa0 [ 289.523029][ T7120] ? clear_bhb_loop+0x60/0xb0 [ 289.527684][ T7120] ? clear_bhb_loop+0x60/0xb0 [ 289.532342][ T7120] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 289.538223][ T7120] RIP: 0033:0x7f315afce407 [ 289.542617][ T7120] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 289.562208][ T7120] RSP: 002b:00007fff94504f00 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 289.570609][ T7120] RAX: ffffffffffffffda RBX: 00007f315af42880 RCX: 00007f315afce407 [ 289.578562][ T7120] RDX: 0000000000000000 RSI: 00007fff94505f1d RDI: ffffffffffffff9c [ 289.586522][ T7120] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 289.594472][ T7120] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 289.602424][ T7120] R13: 00007fff94505150 R14: 00007f315b21f000 R15: 00005637f49ec4d8 [ 289.610375][ T7120] [ 289.613505][ T7120] Kernel Offset: disabled [ 289.617818][ T7120] Rebooting in 86400 seconds..