last executing test programs: 1m23.733927253s ago: executing program 0 (id=1775): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4084, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x11, 0x4427, &(0x7f0000004480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) pwrite64(r0, &(0x7f0000000000)='c', 0x1, 0x709c) open(&(0x7f00000000c0)='./file1\x00', 0x1e1a42, 0x86) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x80044940, &(0x7f0000001b00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000180), &(0x7f00000006c0)='.\x00', 0x1a4243c, &(0x7f0000000700)=ANY=[@ANYRES16=r3, @ANYRESDEC=r4, @ANYRESHEX=r5, @ANYRESDEC, @ANYBLOB="b1f1563f8cf9b3df43707e277e3870d9bbeca08c7c9e5ebdd62801631c9f6ff697c8ea4da0047f1529a0c7", @ANYRES8=r2, @ANYRES64=r2, @ANYRES8=0x0, @ANYRES64, @ANYRES8=r5], 0x0, 0x0, &(0x7f0000000080)) 1m23.175589369s ago: executing program 0 (id=1779): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) write$binfmt_script(r0, &(0x7f0000000200), 0xfffffd9d) 1m22.975088998s ago: executing program 0 (id=1780): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[], 0x68}}, 0x0) sendto$packet(r0, &(0x7f00000001c0)="a6bea8a120e5f831", 0x8, 0x20000000, &(0x7f0000000140)={0x11, 0xed, r2, 0x1, 0x3d}, 0x14) 1m22.800946385s ago: executing program 0 (id=1781): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="2001"], 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000180)={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m22.159121358s ago: executing program 0 (id=1792): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000780)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x22) read$FUSE(r3, 0x0, 0xeffd) 1m21.997733956s ago: executing program 0 (id=1794): r0 = socket$xdp(0x2c, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m6.630792703s ago: executing program 32 (id=1794): r0 = socket$xdp(0x2c, 0x3, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000004200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000001c0)='./file0\x00') acct(0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.315952921s ago: executing program 4 (id=2071): r0 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1ed842, 0x77) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r3 = gettid() ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000240)=0x401) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) socket(0x1d, 0x2, 0x6) openat$vcsu(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x11, 0x2, 0x0) 12.858283965s ago: executing program 4 (id=2091): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) getdents(r0, 0xfffffffffffffffd, 0xbb) 12.354964155s ago: executing program 4 (id=2096): sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x4084, &(0x7f00000001c0)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119, @ANYRESOCT, @ANYRES32, @ANYRESHEX], 0x11, 0x4427, &(0x7f0000004480)="$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") openat(0xffffffffffffff9c, 0x0, 0x143042, 0x0) open(&(0x7f00000000c0)='./file1\x00', 0x1e1a42, 0x86) 12.333692532s ago: executing program 5 (id=2097): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@func_proto={0x0, 0x3, 0x0, 0xd, 0x2, [{0x5, 0x4}, {0x4, 0x1}, {0xb}]}]}}, &(0x7f0000000f40)=""/4089, 0x3e, 0xff9, 0x6, 0x7ff}, 0x28) 11.745399805s ago: executing program 5 (id=2098): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000980)={'ipvlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = gettid() sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000304fdfffffffedbdf2500007400", @ANYRES32=r1, @ANYBLOB="51f003000750050008001300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x4802}, 0x4040010) 11.675823957s ago: executing program 6 (id=2099): unshare(0x22020600) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlinkat(&(0x7f0000000b00)='./file7\x00', r1, &(0x7f0000000b40)='./file7\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x1, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x10fd02, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r2, 0xffffffffffffffff, 0x7}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) 11.169149235s ago: executing program 5 (id=2102): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000280)={0x0, 0x0, 0x1, "12"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 9.091205889s ago: executing program 4 (id=2104): r0 = syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000040), &(0x7f00000000c0)=0xc) r2 = socket$kcm(0x10, 0x2, 0x4) close(r2) socket$kcm(0x10, 0x2, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x1ed842, 0x77) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffff7ffffffd]}, 0x0, 0x8) r3 = gettid() ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f0000000240)=0x401) timer_create(0x3, &(0x7f000049efa0)={0x0, 0x14, 0x4, @tid=r3}, &(0x7f0000044000)) socket(0x1d, 0x2, 0x6) openat$vcsu(0xffffffffffffff9c, 0x0, 0x8000, 0x0) syz_usb_connect$cdc_ecm(0x5, 0x5a, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000006, 0x31, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, 0x0) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x11, 0x2, 0x0) 8.443857649s ago: executing program 6 (id=2107): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) r0 = syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f00000008c0), 0x0, 0x51ab, &(0x7f000000a440)="$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") ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000440)={0x2, 0x4, {0xc000000000000002, @struct={0x7, 0x180}, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, @struct={0x1d, 0xce82}, 0x4000, 0x5, [0x2, 0x8, 0x9c]}, {0xfffffffffffffffe, @struct={0x6, 0x802e}, 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x8, 0x58a, @struct={0x2, 0xf136}, 0x9, 0xa, [0x4, 0x1, 0x2, 0xfffffffffffffffc, 0x0, 0x1]}, {0x6, @struct={0x4, 0x8}, 0x0, 0x7, 0x807fc, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4f, @struct={0x2f, 0x8}, 0xffffffff, 0x4, [0x880000000, 0x800004, 0x0, 0x3ff, 0x8080]}, {0x0, 0x0, 0x6}}) 7.556416145s ago: executing program 3 (id=2110): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x2, [{0x5, 0x4}, {0x4, 0x1}, {0xb}]}]}}, 0x0, 0x4a, 0x0, 0x6, 0x7ff}, 0x28) 6.723040907s ago: executing program 2 (id=2111): setresuid(0xee00, 0xee01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) 6.519760763s ago: executing program 3 (id=2112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x4d, &(0x7f0000000140)=[{&(0x7f0000000300)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000003140)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)='my~', 0x3}], 0x1, &(0x7f00000008c0)=[{0x10, 0x116, 0xd}], 0x10}}], 0x1, 0x4004815) 6.419167885s ago: executing program 2 (id=2114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x381, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) io_setup(0x8, &(0x7f0000000100)=0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[], 0x24}}, 0x0) io_submit(r1, 0x1, &(0x7f00000001c0)=[&(0x7f00000000c0)={0x20000000, 0x0, 0x7, 0x8, 0x0, r0, &(0x7f0000000080)='\x00\x00', 0x2}]) 6.208042193s ago: executing program 3 (id=2115): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r5}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r9, 0x8933, 0x0) sendmsg$nl_route(r8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, 0x0, &(0x7f0000000580)=r7}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 6.064896239s ago: executing program 2 (id=2116): syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) r0 = syz_io_uring_setup(0x304, &(0x7f0000000240)={0x0, 0x0, 0x10100, 0x2, 0xe1}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x12, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5.113068386s ago: executing program 1 (id=2117): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="42a002000000000008001b0000000000640016806000018014"], 0x8c}, 0x1, 0x0, 0x0, 0x5f6f10198e283ca3}, 0xd0) 4.966456634s ago: executing program 5 (id=2118): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x5, 0x8, 0x0, 0xb}, 0x0) epoll_create(0x101) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000100000000000000000000a6c000000060a09040000000000000000020000000900010073797a30000000000900020073797a3200000000400004803c0001800c0001007061796c6f6164002c000280080004400000000008000640000f4240080002400000000008000540000000"], 0x94}}, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(0xffffffffffffffff, 0xc008561c, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x4000}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x9200000000000000) recvfrom(0xffffffffffffffff, &(0x7f0000000140)=""/104, 0x68, 0x12020, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) umount2(&(0x7f0000000180)='./file0\x00', 0x9) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000021c0)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3fe0000000000, 0xfffffffd}}, 0x30) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) 4.766512782s ago: executing program 3 (id=2119): unshare(0x22020600) landlock_restrict_self(0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) symlinkat(&(0x7f0000000b00)='./file7\x00', r1, &(0x7f0000000b40)='./file7\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x20104, 0x4, 0x1, 0x1}, 0x48) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x3}, {}, {0x0, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x98) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0x4) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000400)={{{@in6=@private0, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xffffffffffffffff}, {}, 0x5, 0x0, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r7 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) pwritev2(r7, &(0x7f00000001c0)=[{&(0x7f0000000040)='4', 0x1}], 0x1, 0x1, 0x0, 0x0) openat$fb0(0xffffff9c, &(0x7f00000000c0), 0x10fd02, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@map=r2, 0xffffffffffffffff, 0x7}, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="12010900875b0d20d8130100220e010203010902120001000000000904"], 0x0) 4.734471658s ago: executing program 2 (id=2120): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff0000000000010902"], 0x0) socket(0x2b, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000280)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$sndctrl(0x0, 0x84, 0x121840) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="d1ffacd516de50ac9d15bc75316da4defa1e72f65a65cdd26dcc389aacf7856da9aecf3765d4c032e1960faf25bad906b7d3440b6e71a82f1d8f8b8db35b6091f3af94c6b46b9ab10fe3923f268771078d2668be7bd3eb941d4bb5baa8547e36283a065ce5766cbff3a8fc37fc4507643d3786bbf231d3ed88cb8b01eab14e4372cf4f89bd1b853caa5d9f07f523b9dfa8cc09053ff36fde08e96fb6b3acc196b1bd1e2d3a6c65f585df7e2b8b17439a7ab29a7dfe642c2f0ac7a81eca8073b559663f2daf7a0832b2b09557794a21bf114831f8e6db3922d0cd169e5a8b4adc95d7322ee75944de15f57780b88fef7f3d9b256705ccfa2125b43ce8e3aacaead963cdd7f792f14c9b24493f9f830f6de8da93bbd4357095631adec14224dd9bb049e826f3a49624393e6a031103faff0902ba88ae30af4a61caa77ff956214196fcf3c5536d823284306f367afcb46fb43231911cc53091671e7d853ebf015241b18e9fb6ac6d9a7a1b05dfd6d9e56a51567cd8837dd045abf6b85550f0dd8dded43147ab9bfadc18b9984699d5d875cb21a95a7f584d8c466d033df75193f9ae58b85cfacc54f6c6e12a0debe40ee361a839563bc2cb64271672a55370c2b035b482074ce2487ef8a3bc1c68856e6e09539276d961a0c647f1ee3237496fc99623e8fd33faf7797d86a88dcee152d15e10739bcbbd6077b76867e291f350d999024c12faf81f83792f48f7f6dd66aa6854e460ef7f8c755f3a6dd76509ea0d2db39057a5129185b2fb11546cd5d6cc59f640e9028ae6c7075fba5e5b5593d7f79ec387833f465d09bde464112821eaec5e6e8f2aee8d7358f9c14afe2018856f610848706c71cda62493aef2e39efb71b4a8e804847eda66b2b5b1d75b478f19208ee1ac43afb2dbbba5dd0f29f6946022e09fb853cb176ca3474ba2fa67cb245fe85ec61a095d6fd9ac2ac5685920201617342fe56072427b9bd3626a1a371e67041fcda781be0c234d6feb5ad500e8bc7074381fd0d04983a4a6cdb6c8e03d59dc50925e9e4b24e6f8e455f02818959f2927f0a2d9ff62ec3c5c399077048f7d3dad0830b2e6563693f2f9d48eca8c34804a7626282a4a214d13786993c011a88194dbf7b23e25f592e62186c9fb565fac7632de356153c89a6be0b6b26ba48c2427424769fcbd7ee072ed4bd4d0731d06c8537d616b1145a6c70edb13fb4dba3565221b3a2897a23861cd0e8e0060021cdd7de002d5e785e5d6d3d07f4e445ada9c8d9ba8b819d0b5c7b5d15a5192d3a83c125c8e117c823a9e33316b8c9154e7330d3a865048dbd9c14757691bfe56f10423f6ab717bec5eebeac6ba9ad1aeb6cde09d7fda8e475a71ac48d46b8d9a40879c9dec2db5c4799e5fc8e8b3d419031c1033fce88ae2c93d7ca62c9302e6b45ca8dfebe5b92724f035e8e9d7704efb23f445999fe08cfa28404874d8acc8d37870d394d9fcc8dbe763bc85c37f0f3bcc2cbea420cd073db598e7d89c14a31e5bf57cbefa301427c93091505f1f3e5cdf712958b2e8fc56684d3388107c1728f0e5a3be2164246071653e256ed3bf3000c17301da9a5a3d9ca475867c4f311a24e5ae909a62047a9e6bb71cbcb4f159c2ef0f66b4d0f9da51aba99cd9448443dd277362af18d32f111c48a952ef555b2c7c58b997ce61e74cc7551b57eaffe411219baddf490926d8e260dcd87c069e617195c352950f9b51ce88c12c4f7997ba515f77e68d44f831cdf4d7ee8b1b7cedcb4c4fc7e85ba288c8555d49d5b4b9bb70dc4b688bd12e6b38e37150f3ea457a76b23d5abe6551ea598e090aed87822b0954b8db1a7c605c925b7f9240b0e7a020f292a1fd4a37c74139bc6e7ff08373ebfc8feea371ae0b6c61c715f6f1f4b0b994c7e2e129f87db959aae6ff48664d824b29ba9f255890f9c537178db9c5302097891557f8175a46f308b1a2530aa726ea9d4cfce76db50637369724d0c5f51c97edb58ff5eb9b2434b3721b61688ba12471b97c6a65ba085e15406568ac852590701f2ef8451c5cf1191d70f51eaea9ddc4cbdd7428f627db5069111f65062d5cc34581826af3e670613dda99e31c42736aabd87be56e214ed606862a152455f91891b7430bae03284569c234588f495a5ecc4a23fad6ba34e2ee9ebde8c7f5f62c9344659375c2a1fe6fa6e4ef68712223b9471c513bb11429dbb8a45463c8882f462275ee0da567c60c2d8038843e0c20486676e9978f2aec9187820c94a6e7e519d06daf2ab198f5cafcab4d9c90a479800906192d66a3301a34fa6c5a931cea0a479a4d98d86d9de3e061323504b57186dd33df7a16ccb688c0de203666cb0a6b543a9d069dded44a3b432cbb71da921dcab6be1c2d7494d3b07841d9b4f9d659b5d3d3b2ed916f91588d589128e4b2d4448e6aab5a8160eddca0f6e022abb85e251a11cd6bae57a09b2c434ab5bdf6264afb20d5ab022d152e345bd32ba9283aa5b3cd9118bd271a8ac9083c98b8a83064e65428f7ad7b35bf1d60d4e703f22d2d316fc12bd68bcced82cf0962a3d5769c6a3d75d59f7a7b76454661fd3574b8c8e26d20c372407854505ea6c2406fbd8a1ba7bb017c565228aa6d03d18ed309a308ffb1ecec73c246413e7c70f25070eafed9e70d22e9e8b44125c44eceff37e65bf073bc6fad1ea2b72675af4bf70586a8f7e0f35700de94c802522897576ed115fa21b3d23a367844520b33f5b9aedc0245096765f4cb3b2ff4e54f39bd7346c2347875d75a931b17c6c424ddb4767e0e63cc7725a8fc4b1dbe7929b2f909cc5be8b09e63330341e6471dcac0f8b44693d01805a1467b71612260e2a273861b3697440a5f75497796bffcf79d62a4a50a6ed5ef2efe8c83374f2ecd08d8d628aa03b01a11caeb2bdecc0ab2abcecfa15627979d7c3f9dec5389fc6625e957f8075e23e636dd5514596189d568e14d33ae518e6e9978c6a36a74b49fdbd1260095c9abe447e618878039b75e305b1d2c9ddeb9e5cedb11802e0833739d8595d57d749c890c9290cca4aa96e6718747543796a187e54a66c2f71beefddf911a7a74b59c48ba642d5ecd4d415f48dfbde5baac8a4ba063c1b985d9f9f3180e8a1c8b2cf6a25c2ff17688cc858ac8b9c67960f09a1ca5f28f8e877159e00fe7fb10cca73b391508895e7e52c22f9b38d73dabd6ff7c55ebf4e1611daee8d52b4ceee49a6df7daeb81bf9d1c943a74c03d3dda52c5b99f3225c1b87074f5cef6187878bc5b665ec0561adcc9781280dd1c6592555d327afea78b21beeeb66a0af3eab3249245f41cdbca309d3fba5d4b345319dd0a26134c0c896f2c8d32fda28600013f6a4c95b4038faba70d6c480b360c55bdc0595f7ca636e85521ba505d894f9c5f0a90719bc9944f386ad7491422ff12f34a3c048708d51305a8cc5b2a502ac1575a14c75e9fb7219ede2f6d9c1b362230b6189e0d8cd8ccd11fd0325182c6e46c9977bf63aa02f7024aeb4389f989f5733a198b45e4329c4c1a538a009f216ad3ac09cac39547b4fd21a5d7146ea307ad9b9339f39d5161d17b59860a0aed38cd89d1b68c6438346d51a3a283074e34ee01d2eca527b1b3836ccdf7e807007152c79d14324e3d887c9551a9447527db4434810f5b0b73d855f32a0c89aa784e43f4c1657d408dd33f88aeae1e5186bbcc2a348b708e3cec9080e12ee3676beb5ee86a9b5cc4a3496c242b95a248906ed62f984b22373bdfd97515441f34e01006d8d1244aa88403f207cd8820ffe07634fc86d00f871c1e4c9e8fc1a00d295e36d98119599b62379cda10ada85efe7b50c5f38d8d010a2cd53db900939db1ffce14feffb7940d12842f4f2b507e1fa49e526752d1e3d80a0c2a75e870d85f77fd91fc46ac1b1288dd33338cdad154d6b80b5a925431868d62a3fb0036f28fe259a3f555f767526a9ea230c33843efc49ac3182a357845ea122d606ab22c9f937b2b905e02dd1cb07d380e3486be6167f00b6e6d90a3c1d6aee15da439a55542ce177e498998ba8ac69a848e63e4c7564e4dc04aad595fa1ab81275edafa0d352029c304200d2f2c5881cbf5a26b2141bdb117879cc11e7c13bd62f221ae1ac04dca3d8d58a13c130557ecf5f36184c7366d3852d0cbd6ca42f2a971d87c0bb204097af1a3abdab7b95d07fcdbf5f42607695dedcd26e30b8fc5cfd7b333a95f3ee69d5ba7911dadb1394285c437a0f26fc027737ba5ee7d63333f80acb59f1a7faf2ec3031c6533107502bffc92d8726a48ce00cdb5f1258d85ff8eb72bfb162e122022f1f3e8a72b41d2689d5228b1130fbc946384401f3bbe726314bb09d430333ad78de07b3cec5c18a4f4abb69507b6451ca4e610b8fc988c983426e0cc3b9d15393026eb75d3d08634b8a7495cef69aab83d27ea1b5b41f40b996dd10023d81f77d61192930ffc25cae1e149412322fcb0aa47bee3afc44ec3dda96c9294854e2cbaebfea6f9a90f0b3797d5f505824b4de964151569f881f87f9dd9d30a2a2f9ed01059a909cba157902903c77f2f3d056231e7c7483a3f35e04360e084f0d3f94a92c92c77b3f06479fbc417366d7fe87ddfcdfd86274f87a5f817b0f947924cbe2329f16f6b00c8a0ab96164f7b35fed38a388380af05c3600abc37a944c9e75a691728c26896ac3615297766f406aeb0f2fd147d68fad3fb3b032880280ebb4bf89252a36b0d9eb393daae72829b8da870b886676244897d5322b32703fcf138b66eedeb3024666a88fd99d8962f696ab7b34e19ced1bd27488aa2ffe5bfa11f8f9289bd8c052d4e88316cc33b0255ef1bfca4c17067d7f78175c56db481fe8dc6f73b1cbdf9d5823f115c9e03f2dfd07bc1ad88564d48b18cd9a30d83cbd5e6a3eedcb0ee86e5dd47f32820cb74dcf730b2052b31297b529e5e24f042335d13915e4048132fe1a101841e919c7870bb680eddead9a6111394bc12e274fbd88abaf2d254721c42e82abf4d1e319a631794ed6ce319ddd844ac5e9b1fc96dd9aaad42f2e087abe1b85430c4a00631970e3e74a6ed923f49e0df75685e044fae3fcea0af4dbfeebe0a9c2e73e8a89b89603a75f585e3ebba5453ae595da1469ea90ea3c9fb6a22411c56c58dfbf504caa629dbfc73ebbedc91669f2babf8b8215c525edf8feb366f104ffa9eb2bb79232660aece4730ef1ae8585c629ffe1390356a58e900da145b83ad177c7bb2d125e59d7ff4d3a8562efc620b4cf9b33c2305bbf1957e0f8b06f0fbe9c80db73b08fdd0be4a1ea4f91f52af47160040424aed8ac3c10251fb0b5d9be08247edf3dda5d1750d0597d60c8a0d9418a4e0c9325bb90f0886f9e5dda9e88ac1942ec1e53da0cf5ccad66b9cdfc2fdca784dd06a73713ef73785706d024873ddca5ccfcf0b91748a2c1fbd8c241934b5b473007b29d76aec5addf7b945a5f7abd6ddeccc8d0ccb26d69d4793b7224c27ba7bf45aac8a2be56086ab8c65ea69fdd593a01a29e2912378002d824bd98e6ed1c5dd5f33be529e640997f5f1bbde051fb2a669145966db4889bf32aa13777ac6c077c51bb8b2523954cea3adc307cfe53b8cbb00edf0c04c456392aea6613e8078a309dc538a6a24f80fc1b7f9fce3e3291ca6dab8090a634fcdb24e7a9de8aecd595b988f597cd623d148a8841b0a5203953166ea2e85316928f28dd2604d37c9ec80a49c0d91cbfe6d584b9b6a321b97bf99ae1d67985fd441976a828c97456003a7892c7c7f4a51bb49e3d3ea1e95ec29c89a2676", 0x1001}], 0x3) 4.488173886s ago: executing program 1 (id=2121): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, 0x0, 0x0) 4.424676826s ago: executing program 4 (id=2122): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)={0x20, 0x11}, 0x0, 0x0}) 4.207042673s ago: executing program 6 (id=2123): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x80010000}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) 4.206757383s ago: executing program 1 (id=2124): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="030000000400000004000000"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r0, @ANYBLOB="000000000000000018100000", @ANYRES32=r1, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r2, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000001240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3.989438634s ago: executing program 6 (id=2125): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fchownat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = mq_open(&(0x7f0000000040)='!se\xf7ih,\x17i\xacP\xe6lNnuxselinux\x00', 0x6e93ebbbcc0884f2, 0x2, &(0x7f0000000300)={0x0, 0x1, 0x6}) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r1, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x4}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d000000180100002020732600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='mm_page_alloc\x00', r5}, 0x18) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000640000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000e0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.93153272s ago: executing program 2 (id=2126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x188, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x158, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x1c, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x49}]}]}, @TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x5}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10c, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x3c}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x2c, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x86}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x0, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0xffffffffffffff32, 0x1, 0x19d}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x4}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xe7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x2c, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x46}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x79}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x34, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x3}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x11a8}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x81}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x18, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0xb5}]}]}, @TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}]}}]}, 0x188}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x4) 3.783090075s ago: executing program 1 (id=2127): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x10) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 3.634587261s ago: executing program 1 (id=2128): r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x37, @time={0x65757100, 0x4}}) 3.515855988s ago: executing program 2 (id=2129): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xcd}) fsopen(&(0x7f0000000100)='proc\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket(0x6, 0x80805, 0x10000000) socket(0x11, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup=r3, 0x3, 0x0, 0x6, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r3, r3, 0x1d, 0x28, 0x0, @void, @void, @void, @value=0xffffffffffffffff, r4}, 0x20) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r6 = epoll_create(0x80) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000040)={0x40000000}) 3.286995994s ago: executing program 1 (id=2130): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/disk', 0x121a02, 0x0) sendfile(r3, r2, &(0x7f0000002700)=0x23, 0x1c) dup(0xffffffffffffffff) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) ftruncate(r5, 0x1000006) fcntl$addseals(r5, 0x409, 0x7) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x1000000}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x34, 0x0, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}]}]}, 0x34}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb47, 0x2000000009, 0x8, 0x80000001, 0x7}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 2.715161486s ago: executing program 6 (id=2131): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_io_uring_setup(0x49a, &(0x7f0000000680)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r5}, 0x18) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r6}, &(0x7f0000000540), 0x0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f0000000780)}, 0x20) io_uring_enter(r2, 0x627, 0xc1040000, 0x43, 0x0, 0x0) 2.626471465s ago: executing program 3 (id=2132): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8a", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000008000000850000006a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000580)="b9ff03076003008cb89e08f086dd2dc2c7a98f9184b363900c80b7ddb58250336be5613d695e47a031ef7aed36a5c639ef39f65a3ab7", 0x0, 0xfe2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1.296853861s ago: executing program 6 (id=2133): sigaltstack(0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x2, 0x8, 0x0, 0x3}, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000140)='.dead\x00', 0x0) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) add_key$user(0x0, &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x28, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce231633"}, @NFTA_MATCH_NAME={0xb, 0x1, 'helper\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa8}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1.135130694s ago: executing program 3 (id=2134): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3e616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1.12748277s ago: executing program 4 (id=2135): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280), 0x800c42, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x2000, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) read$dsp(r1, &(0x7f0000001380)=""/229, 0xe5) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$sndctrl(&(0x7f0000000040), 0x80000000, 0x0) openat$mice(0xffffffffffffff9c, 0x0, 0x80882) creat(&(0x7f00000001c0)='./file0\x00', 0x0) 416.160872ms ago: executing program 5 (id=2136): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="8c00000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="42a002000000000008001b0000000000640016806000018014000a"], 0x8c}, 0x1, 0x0, 0x0, 0x5f6f10198e283ca3}, 0xd0) 0s ago: executing program 5 (id=2137): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0x80010000}, 0x18) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x14) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) kernel console output (not intermixed with test programs): 00000000000. [ 518.336602][T10613] fido_id[10613]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 518.785444][ T30] audit: type=1326 audit(1752831718.459:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791598e929 code=0x7fc00000 [ 519.189346][ T30] audit: type=1326 audit(1752831718.459:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791598e929 code=0x7fc00000 [ 519.212033][ T30] audit: type=1326 audit(1752831718.459:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791598e929 code=0x7fc00000 [ 519.234649][ T30] audit: type=1326 audit(1752831718.459:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791598e929 code=0x7fc00000 [ 519.257162][ T30] audit: type=1326 audit(1752831718.459:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791598e929 code=0x7fc00000 [ 519.280615][ T30] audit: type=1326 audit(1752831718.459:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791598e929 code=0x7fc00000 [ 519.305104][ T30] audit: type=1326 audit(1752831718.459:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791598e929 code=0x7fc00000 [ 519.331728][ T30] audit: type=1326 audit(1752831718.459:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10604 comm="syz.1.1391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f791598e929 code=0x7fc00000 [ 519.720717][T10623] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1394'. [ 519.782574][T10623] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1394'. [ 520.059086][T10623] netlink: 204 bytes leftover after parsing attributes in process `syz.3.1394'. [ 520.118957][T10623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1394'. [ 520.140035][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 520.859279][ T5829] usb 3-1: USB disconnect, device number 32 [ 520.860385][ T5913] vhci_hcd: vhci_device speed not set [ 521.124683][T10640] loop3: detected capacity change from 0 to 4096 [ 521.154999][T10648] netlink: 'syz.2.1403': attribute type 6 has an invalid length. [ 521.258631][T10652] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 521.419058][ T9927] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 521.608875][ T9927] usb 6-1: Using ep0 maxpacket: 16 [ 521.653155][ T9927] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 521.705940][ T9927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.729669][ T9927] usb 6-1: Product: syz [ 521.768858][ T9927] usb 6-1: Manufacturer: syz [ 521.776119][ T9927] usb 6-1: SerialNumber: syz [ 521.808252][ T9927] r8152-cfgselector 6-1: Unknown version 0x0000 [ 521.870821][ T9927] r8152-cfgselector 6-1: config 0 descriptor?? [ 522.484754][ T5957] r8152-cfgselector 6-1: USB disconnect, device number 28 [ 523.639844][ T13] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 523.857593][T10685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1415'. [ 524.172493][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'. [ 524.263682][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'. [ 524.312126][T10697] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1419'. [ 524.324636][T10697] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1419'. [ 524.372397][T10688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1416'. [ 525.079004][ T9927] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 525.616654][ T9927] usb 5-1: config index 0 descriptor too short (expected 8192, got 77) [ 525.669167][ T5913] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 525.728897][ T9927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 525.856108][ T9927] usb 5-1: config 0 has no interfaces? [ 525.995140][ T5913] usb 4-1: Using ep0 maxpacket: 32 [ 526.141571][ T5913] usb 4-1: config 0 has no interfaces? [ 526.157647][ T9927] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 526.279543][ T5913] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 526.334444][ T9927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.421020][ T5913] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 526.455303][ T9927] usb 5-1: Product: syz [ 527.532370][ T9927] usb 5-1: Manufacturer: syz [ 527.537079][ T5913] usb 4-1: Product: syz [ 527.616335][ T9927] usb 5-1: SerialNumber: syz [ 527.622131][ T5913] usb 4-1: Manufacturer: syz [ 527.716169][ T5913] usb 4-1: SerialNumber: syz [ 527.722692][ T9927] usb 5-1: config 0 descriptor?? [ 527.769974][ T5913] usb 4-1: config 0 descriptor?? [ 527.990946][ T5913] usb 4-1: USB disconnect, device number 32 [ 528.054417][ T9927] usb 5-1: can't set config #0, error -71 [ 528.090004][ T5942] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 528.115396][ T9927] usb 5-1: USB disconnect, device number 42 [ 528.319097][T10729] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1427'. [ 528.346118][ T5942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 528.360461][ T5942] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 528.395255][ T5942] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 528.433555][ T5942] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 528.544294][ T5942] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 528.557958][ T5942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.584180][ T5942] usb 3-1: Product: syz [ 528.664601][ T5942] usb 3-1: Manufacturer: syz [ 528.682623][ T5942] usb 3-1: SerialNumber: syz [ 528.722717][T10720] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 528.957993][T10720] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 529.049027][T10720] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 529.671024][T10720] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 529.689181][T10720] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 530.006681][ T5942] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 530.019053][ T5942] cdc_ncm 3-1:1.0: dwNtbInMaxSize=4 is too small. Using 2048 [ 530.031131][ T5942] cdc_ncm 3-1:1.0: setting rx_max = 2048 [ 530.133332][T10756] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1438'. [ 530.900197][ T5942] cdc_ncm 3-1:1.0: setting tx_max = 88 [ 530.938387][ T5942] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 531.035577][ T5942] usb 3-1: USB disconnect, device number 33 [ 531.124546][ T5942] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP) [ 531.692196][T10762] fuse: Invalid rootmode [ 531.775552][T10766] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1441'. [ 531.788527][T10766] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1441'. [ 531.939410][ T5942] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 532.105637][ T5829] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 532.247736][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 532.258960][ T5942] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 532.258993][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.271006][ T5942] usb 3-1: config 0 descriptor?? [ 532.285210][ T5829] usb 2-1: config index 0 descriptor too short (expected 8192, got 77) [ 532.285241][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.285266][ T5829] usb 2-1: config 0 has no interfaces? [ 532.301318][ T5829] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 532.301350][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.301376][ T5829] usb 2-1: Product: syz [ 532.301394][ T5829] usb 2-1: Manufacturer: syz [ 532.301413][ T5829] usb 2-1: SerialNumber: syz [ 532.301750][ T5942] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 532.307695][ T5829] usb 2-1: config 0 descriptor?? [ 532.436337][T10772] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1444'. [ 533.139655][ T5942] gspca_nw80x: reg_r err -71 [ 533.144371][ T5942] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 533.157841][ T5942] usb 3-1: USB disconnect, device number 34 [ 533.431229][T10779] loop5: detected capacity change from 0 to 1024 [ 533.614308][ T1152] hfsplus: b-tree write err: -5, ino 4 [ 534.288294][T10796] fuse: Invalid rootmode [ 534.629712][ T5942] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 534.732957][T10785] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.788347][T10785] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.843946][T10785] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.853094][ T5942] usb 3-1: Using ep0 maxpacket: 32 [ 534.869248][T10785] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.887582][ T5942] usb 3-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 534.925646][ T5942] usb 3-1: config 0 interface 0 has no altsetting 0 [ 534.961294][ T5942] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 534.997288][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.032559][ T5942] usb 3-1: config 0 descriptor?? [ 535.228989][ T9927] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 535.619571][T10821] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1459'. [ 535.660472][ T9927] usb 4-1: Using ep0 maxpacket: 8 [ 535.691953][ T9927] usb 4-1: unable to get BOS descriptor or descriptor too short [ 535.753562][ T9927] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 535.848883][ T9927] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 535.897438][ T5942] corsair-psu 0003:1B1C:1C0D.0004: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.2-1/input0 [ 535.981968][ T9927] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 536.047756][ T9927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.075833][ T5942] corsair-psu 0003:1B1C:1C0D.0004: unable to initialize device (-38) [ 536.115315][ T9927] usb 4-1: Product: syz [ 536.147974][ T9927] usb 4-1: Manufacturer: syz [ 536.161431][ T5942] corsair-psu 0003:1B1C:1C0D.0004: probe with driver corsair-psu failed with error -38 [ 536.189352][ T9927] usb 4-1: SerialNumber: syz [ 536.244516][ T9927] usb 4-1: config 0 descriptor?? [ 536.301657][ T5942] usb 3-1: USB disconnect, device number 35 [ 536.324740][ T9927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 536.504028][T10836] loop5: detected capacity change from 0 to 1024 [ 536.623879][T10832] fido_id[10832]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 536.745079][ T9927] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 536.813308][ T7066] hfsplus: b-tree write err: -5, ino 4 [ 537.253224][T10805] usb 4-1: USB disconnect, device number 33 [ 537.258236][ T6209] udevd[6209]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 538.035751][T10852] fuse: Bad value for 'fd' [ 538.433624][T10808] usb 2-1: USB disconnect, device number 50 [ 539.049754][T10869] loop5: detected capacity change from 0 to 256 [ 539.085022][T10869] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 541.559308][ T9927] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 541.761925][ T9927] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 541.805780][ T9927] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 541.938944][ T9927] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.975403][T10908] loop4: detected capacity change from 0 to 1024 [ 541.986611][ T9927] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.060007][T10897] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 542.093939][ T9927] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 542.121078][ T6508] hfsplus: b-tree write err: -5, ino 4 [ 542.395511][T10913] loop4: detected capacity change from 0 to 764 [ 542.560486][T10808] usb 4-1: USB disconnect, device number 34 [ 542.825822][T10920] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1494'. [ 543.611789][T10913] rock: directory entry would overflow storage [ 543.688101][T10913] rock: sig=0x4f50, size=4, remaining=3 [ 543.696145][T10913] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 544.340727][T10808] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 544.549512][T10808] usb 1-1: device descriptor read/64, error -71 [ 545.895910][T10808] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 546.069094][T10808] usb 1-1: device descriptor read/64, error -71 [ 546.180131][T10808] usb usb1-port1: attempt power cycle [ 546.241376][T10806] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 546.409239][T10806] usb 2-1: Using ep0 maxpacket: 32 [ 546.423237][T10806] usb 2-1: config 0 has no interfaces? [ 546.435335][T10806] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 546.464852][T10806] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 546.478940][T10806] usb 2-1: Product: syz [ 546.492601][T10806] usb 2-1: Manufacturer: syz [ 546.500754][T10806] usb 2-1: SerialNumber: syz [ 546.522502][T10806] usb 2-1: config 0 descriptor?? [ 546.579585][T10808] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 546.598934][ T5829] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 546.619881][T10808] usb 1-1: device descriptor read/8, error -71 [ 546.765896][T10806] usb 2-1: USB disconnect, device number 51 [ 546.772039][ T5829] usb 5-1: Using ep0 maxpacket: 32 [ 546.833399][ T5829] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 546.854202][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.863957][T10808] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 546.879795][ T5829] usb 5-1: Product: syz [ 546.890630][ T5829] usb 5-1: Manufacturer: syz [ 546.917183][T10808] usb 1-1: device descriptor read/8, error -71 [ 546.939706][ T5829] usb 5-1: SerialNumber: syz [ 546.967559][ T5829] usb 5-1: config 0 descriptor?? [ 547.000049][ T5829] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 547.059557][T10808] usb usb1-port1: unable to enumerate USB device [ 547.615156][T10963] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 547.658500][T10964] loop3: detected capacity change from 0 to 256 [ 547.825397][T10964] FAT-fs (loop3): Directory bread(block 64) failed [ 547.836070][T10964] FAT-fs (loop3): Directory bread(block 65) failed [ 547.864265][T10964] FAT-fs (loop3): Directory bread(block 66) failed [ 547.920583][T10964] FAT-fs (loop3): Directory bread(block 67) failed [ 547.962842][T10964] FAT-fs (loop3): Directory bread(block 68) failed [ 548.049050][ T5829] gspca_stk1135: reg_w 0x7 err -71 [ 548.051111][T10964] FAT-fs (loop3): Directory bread(block 69) failed [ 548.070726][T10971] loop5: detected capacity change from 0 to 1024 [ 548.070889][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 548.098633][T10964] FAT-fs (loop3): Directory bread(block 70) failed [ 548.147360][T10964] FAT-fs (loop3): Directory bread(block 71) failed [ 548.187283][ T5829] gspca_stk1135: Sensor write failed [ 548.192449][T10964] FAT-fs (loop3): Directory bread(block 72) failed [ 548.212210][T10964] FAT-fs (loop3): Directory bread(block 73) failed [ 548.284633][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 548.325815][ T7066] hfsplus: b-tree write err: -5, ino 4 [ 548.328869][ T5829] gspca_stk1135: Sensor write failed [ 549.727794][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 549.734487][ T5829] gspca_stk1135: Sensor read failed [ 549.740237][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 549.746574][ T5829] gspca_stk1135: Sensor read failed [ 549.751846][ T5829] gspca_stk1135: Detected sensor type unknown (0x0) [ 549.758474][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 549.764848][ T5829] gspca_stk1135: Sensor read failed [ 549.770155][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 549.776472][ T5829] gspca_stk1135: Sensor read failed [ 549.782281][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 549.788601][ T5829] gspca_stk1135: Sensor write failed [ 549.795591][ T5829] gspca_stk1135: serial bus timeout: status=0x00 [ 549.801955][ T5829] gspca_stk1135: Sensor write failed [ 549.807357][ T5829] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 549.819307][ T5829] usb 5-1: USB disconnect, device number 43 [ 550.501719][T10827] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 550.558893][T10808] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 550.674495][T10827] usb 5-1: config 0 has no interfaces? [ 550.690646][T10827] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 550.736365][T10827] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 550.778935][T10808] usb 4-1: Using ep0 maxpacket: 8 [ 550.805369][T10808] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 550.806419][T10827] usb 5-1: Manufacturer: syz [ 550.866507][T10827] usb 5-1: SerialNumber: syz [ 550.922097][T10808] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 550.954107][T10827] usb 5-1: config 0 descriptor?? [ 550.973818][T10808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 551.194932][T10808] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 551.226687][T10982] sctp: [Deprecated]: syz.4.1520 (pid 10982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 551.226687][T10982] Use struct sctp_sack_info instead [ 551.269357][T10808] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 551.309930][ T9927] usb 5-1: USB disconnect, device number 44 [ 551.347947][T10808] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 551.370532][T10808] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 551.401320][T10808] usb 4-1: Product: syz [ 551.415734][T10808] usb 4-1: Manufacturer: syz [ 551.440840][T10808] usb 4-1: SerialNumber: syz [ 551.485762][T10808] usb 4-1: config 0 descriptor?? [ 551.713173][T10808] radio-si470x 4-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 551.749325][T10808] radio-si470x 4-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 551.929365][T10808] radio-si470x 4-1:0.0: software version 0, hardware version 0 [ 551.936963][T10808] radio-si470x 4-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 552.039474][T10808] radio-si470x 4-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 552.123674][T10808] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 552.175157][T10808] radio-si470x 4-1:0.0: submitting int urb failed (-90) [ 552.207687][T10808] radio-si470x 4-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 552.265919][T10808] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -22 [ 552.378885][ T9927] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 553.091317][T11005] loop2: detected capacity change from 0 to 1024 [ 553.134074][T10808] usb 4-1: USB disconnect, device number 35 [ 553.198967][T10806] IPVS: starting estimator thread 0... [ 553.229686][T11008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1528'. [ 553.275883][ T9927] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.327679][ T9927] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 553.359834][T11009] IPVS: using max 32 ests per chain, 76800 per kthread [ 553.375317][ T9927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.420722][ T7053] hfsplus: b-tree write err: -5, ino 4 [ 553.469565][ T9927] usb 5-1: config 0 descriptor?? [ 553.526929][ T9927] pwc: Askey VC010 type 2 USB webcam detected. [ 553.580345][T10827] usb 1-1: new low-speed USB device number 40 using dummy_hcd [ 553.756426][T10827] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 553.756459][T10827] usb 1-1: config 0 has no interface number 0 [ 553.756506][T10827] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 553.756567][T10827] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 553.756623][T10827] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 553.756652][T10827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.761567][T10827] usb 1-1: config 0 descriptor?? [ 553.911053][ T9927] pwc: recv_control_msg error -32 req 02 val 2b00 [ 553.918498][ T9927] pwc: recv_control_msg error -32 req 02 val 2700 [ 553.922864][ T9927] pwc: recv_control_msg error -32 req 02 val 2c00 [ 553.930965][T11012] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 553.939751][T10827] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 554.029319][ T30] kauditd_printk_skb: 58 callbacks suppressed [ 554.029340][ T30] audit: type=1326 audit(554.015:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79b8e929 code=0x7ffc0000 [ 554.059363][ T30] audit: type=1326 audit(554.035:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f7d79b8e929 code=0x7ffc0000 [ 554.064052][ T30] audit: type=1326 audit(554.045:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79b8e929 code=0x7ffc0000 [ 554.064226][ T30] audit: type=1326 audit(554.045:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11026 comm="syz.2.1537" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d79b8e929 code=0x7ffc0000 [ 554.086923][T11029] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1539'. [ 554.125237][ T9927] pwc: recv_control_msg error -71 req 04 val 1300 [ 554.418696][ T9927] pwc: recv_control_msg error -71 req 04 val 1400 [ 554.421153][ T9927] pwc: recv_control_msg error -71 req 02 val 2000 [ 554.422626][ T9927] pwc: recv_control_msg error -71 req 02 val 2100 [ 554.423272][ T9927] pwc: recv_control_msg error -71 req 04 val 1500 [ 554.423729][ T9927] pwc: recv_control_msg error -71 req 02 val 2500 [ 554.424145][ T9927] pwc: recv_control_msg error -71 req 02 val 2400 [ 554.424552][ T9927] pwc: recv_control_msg error -71 req 02 val 2600 [ 554.424973][ T9927] pwc: recv_control_msg error -71 req 02 val 2900 [ 554.426169][ T9927] pwc: recv_control_msg error -71 req 02 val 2800 [ 554.426818][ T9927] pwc: recv_control_msg error -71 req 04 val 1100 [ 554.427693][ T9927] pwc: recv_control_msg error -71 req 04 val 1200 [ 554.454569][ T9927] pwc: Registered as video103. [ 554.473342][ T9927] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input29 [ 554.482263][ T9927] usb 5-1: USB disconnect, device number 45 [ 555.699046][T10806] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 555.909351][T10806] usb 5-1: Using ep0 maxpacket: 16 [ 555.945827][T10806] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 555.969438][T10806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.977704][T10806] usb 5-1: Product: syz [ 555.982458][T10808] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 555.992508][T10806] usb 5-1: Manufacturer: syz [ 556.020317][T10806] usb 5-1: SerialNumber: syz [ 556.065353][T10806] usb 5-1: config 0 descriptor?? [ 556.113383][T10806] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 556.189445][T10808] usb 2-1: Using ep0 maxpacket: 8 [ 556.216019][T10808] usb 2-1: unable to get BOS descriptor or descriptor too short [ 556.250273][T10808] usb 2-1: config 9 has an invalid interface number: 20 but max is 2 [ 556.316219][T10808] usb 2-1: config 9 contains an unexpected descriptor of type 0x1, skipping [ 556.351982][ C1] iowarrior 1-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 556.362223][T10808] usb 2-1: config 9 has an invalid interface number: 173 but max is 2 [ 556.366687][T10827] usb 1-1: USB disconnect, device number 40 [ 556.370440][T10808] usb 2-1: config 9 has 2 interfaces, different from the descriptor's value: 3 [ 556.370468][T10808] usb 2-1: config 9 has no interface number 0 [ 556.370489][T10808] usb 2-1: config 9 has no interface number 1 [ 556.370543][T10808] usb 2-1: config 9 interface 20 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 556.370621][T10808] usb 2-1: config 9 interface 173 altsetting 5 bulk endpoint 0x9 has invalid maxpacket 16 [ 556.370651][T10808] usb 2-1: config 9 interface 20 has no altsetting 0 [ 556.370674][T10808] usb 2-1: config 9 interface 173 has no altsetting 0 [ 556.373771][T10808] usb 2-1: Dual-Role OTG device on HNP port [ 556.577676][T10808] usb 2-1: New USB device found, idVendor=0499, idProduct=1059, bcdDevice=47.94 [ 556.620746][T10808] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.653929][T10808] usb 2-1: Product: syz [ 556.658142][T10808] usb 2-1: Manufacturer: syz [ 556.685090][T10808] usb 2-1: SerialNumber: syz [ 556.729852][T11082] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1555'. [ 556.786927][T11076] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.794748][T11076] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.967683][T10808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 556.997360][T10808] snd-usb-audio 2-1:9.20: probe with driver snd-usb-audio failed with error -2 [ 557.022467][T10808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 557.127598][T10808] snd-usb-audio 2-1:9.173: probe with driver snd-usb-audio failed with error -2 [ 557.138594][T10806] ssu100 5-1:0.0: probe with driver ssu100 failed with error -71 [ 557.152409][T10806] usb 5-1: USB disconnect, device number 46 [ 557.203115][T11076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.212129][T10808] usb 2-1: USB disconnect, device number 52 [ 557.258290][T10799] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 557.271137][T11076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.345046][ T6210] udevd[6210]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.173/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 557.474118][T10799] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 557.508580][T10799] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 557.569587][T10799] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 557.612036][T11076] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.644538][T11076] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.656465][T10799] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 557.683019][T10799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 557.694134][T11076] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.751032][T10799] usb 3-1: Product: syz [ 557.898420][T11076] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.927978][T10799] usb 3-1: Manufacturer: syz [ 557.960737][T10799] usb 3-1: SerialNumber: syz [ 558.311369][T10799] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 36 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 558.714683][ T5920] usb 3-1: USB disconnect, device number 36 [ 558.761941][T11112] Illegal XDP return value 4294967274 on prog (id 54) dev syz_tun, expect packet loss! [ 558.778020][ T5920] usblp0: removed [ 559.379621][T11124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 560.270949][T11130] overlayfs: failed to resolve './file0': -2 [ 560.490708][ T51] Bluetooth: hci2: unexpected cc 0x0c24 length: 3 > 1 [ 560.497851][ T51] Bluetooth: hci2: unexpected event for opcode 0x0c24 [ 561.419283][T11152] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 561.899657][T11146] loop4: detected capacity change from 0 to 4096 [ 562.153598][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.160998][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.273579][T11146] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 562.718864][ T5861] ntfs3(loop4): ino=9, ntfs_sync_fs failed, -22. [ 562.993746][T11179] overlayfs: failed to resolve './file0': -2 [ 563.208959][ T5934] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 563.369161][ T5934] usb 6-1: Using ep0 maxpacket: 32 [ 563.569229][ T5934] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 563.704702][ T5934] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 563.783881][T10807] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 563.800478][ T5934] usb 6-1: Product: syz [ 563.831277][ T5934] usb 6-1: Manufacturer: syz [ 563.856504][ T5934] usb 6-1: SerialNumber: syz [ 564.018907][T10806] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 564.181425][ T5934] usb 6-1: config 0 descriptor?? [ 564.720281][ T5934] usb 6-1: selecting invalid altsetting 3 [ 564.749037][ T5934] comedi comedi5: could not set alternate setting 3 in high speed [ 564.781703][ T5934] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 564.829177][T10807] usb 2-1: Using ep0 maxpacket: 32 [ 564.836195][T10806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.847775][T10806] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 564.863381][T10807] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 564.866036][ T5934] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 564.897148][T10806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.905385][T10807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.944244][ T5934] usb 6-1: USB disconnect, device number 29 [ 564.961652][T10807] usb 2-1: Product: syz [ 564.971312][T10807] usb 2-1: Manufacturer: syz [ 565.002379][T10806] usb 3-1: config 0 descriptor?? [ 565.022561][T10807] usb 2-1: SerialNumber: syz [ 565.029515][T11178] Bluetooth: hci3: command 0x0406 tx timeout [ 565.050574][T10807] usb 2-1: config 0 descriptor?? [ 565.074355][T10806] pwc: Askey VC010 type 2 USB webcam detected. [ 565.081845][T10807] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 565.168947][ T9927] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 565.250711][T10806] pwc: send_video_command error -71 [ 565.320773][T10806] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 565.343264][ T9927] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 565.368677][T10806] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71 [ 565.391348][ T9927] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 565.425622][ T9927] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 565.460880][ T9927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.528044][T11203] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 565.583311][T10806] usb 3-1: USB disconnect, device number 37 [ 565.585673][ T9927] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 565.859885][ T9927] usb 1-1: USB disconnect, device number 41 [ 565.969091][T10806] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 566.155878][T10807] gspca_stk1135: reg_w 0x7 err -71 [ 566.168429][T10807] gspca_stk1135: serial bus timeout: status=0x00 [ 566.190327][T10806] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.205010][T10807] gspca_stk1135: Sensor write failed [ 566.216944][T10806] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 566.231830][T10807] gspca_stk1135: serial bus timeout: status=0x00 [ 566.238169][T10807] gspca_stk1135: Sensor write failed [ 566.252129][T10806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.262723][T10807] gspca_stk1135: serial bus timeout: status=0x00 [ 566.281046][T10807] gspca_stk1135: Sensor read failed [ 566.286422][T10807] gspca_stk1135: serial bus timeout: status=0x00 [ 566.293560][T10807] gspca_stk1135: Sensor read failed [ 566.300524][T10806] usb 3-1: config 0 descriptor?? [ 566.305768][T10807] gspca_stk1135: Detected sensor type unknown (0x0) [ 566.316599][T10806] pwc: Askey VC010 type 2 USB webcam detected. [ 566.323138][T10807] gspca_stk1135: serial bus timeout: status=0x00 [ 566.329968][T10807] gspca_stk1135: Sensor read failed [ 566.336422][T10807] gspca_stk1135: serial bus timeout: status=0x00 [ 566.628538][T10807] gspca_stk1135: Sensor read failed [ 566.639384][T10807] gspca_stk1135: serial bus timeout: status=0x00 [ 566.646011][T10807] gspca_stk1135: Sensor write failed [ 566.651905][T10807] gspca_stk1135: serial bus timeout: status=0x00 [ 566.658330][T10807] gspca_stk1135: Sensor write failed [ 566.680611][T10807] stk1135 2-1:0.0: probe with driver stk1135 failed with error -71 [ 566.720650][T10806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 566.740026][T10806] pwc: recv_control_msg error -32 req 02 val 2700 [ 566.750604][T10806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 566.758265][T10807] usb 2-1: USB disconnect, device number 53 [ 566.765343][T10806] pwc: recv_control_msg error -32 req 04 val 1000 [ 566.773518][T10806] pwc: recv_control_msg error -32 req 04 val 1300 [ 566.783260][T10806] pwc: recv_control_msg error -32 req 04 val 1400 [ 566.792905][T10806] pwc: recv_control_msg error -32 req 02 val 2000 [ 566.800715][T10806] pwc: recv_control_msg error -32 req 02 val 2100 [ 566.808761][T10806] pwc: recv_control_msg error -32 req 04 val 1500 [ 566.816327][T10806] pwc: recv_control_msg error -32 req 02 val 2500 [ 566.823889][T10806] pwc: recv_control_msg error -32 req 02 val 2400 [ 566.830630][T10808] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 566.847629][T10806] pwc: recv_control_msg error -32 req 02 val 2600 [ 567.026766][T10808] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.041107][T10808] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 567.057349][T10806] pwc: recv_control_msg error -71 req 02 val 2800 [ 567.103078][T10806] pwc: recv_control_msg error -71 req 04 val 1100 [ 567.111259][T10808] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 567.133291][T10808] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 567.152373][T10806] pwc: recv_control_msg error -71 req 04 val 1200 [ 567.159969][T10808] usb 6-1: SerialNumber: syz [ 567.179073][T10806] pwc: Registered as video103. [ 567.187504][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 567.205442][T10806] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input30 [ 567.339270][T10806] usb 3-1: USB disconnect, device number 38 [ 567.397765][T10808] usb 6-1: 0:2 : does not exist [ 567.484381][T10808] usb 6-1: USB disconnect, device number 30 [ 568.682140][ T6210] udevd[6210]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 569.572595][T10808] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 569.768982][T10808] usb 3-1: Using ep0 maxpacket: 8 [ 569.782408][T11267] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1619'. [ 569.782923][T10808] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 569.812447][T10808] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 569.977249][T10808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 570.111873][T10808] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 570.161910][T10808] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 570.223020][T10808] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 570.232704][T10808] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 570.241462][T10808] usb 3-1: Product: syz [ 570.245963][T10808] usb 3-1: Manufacturer: syz [ 570.299317][T10808] usb 3-1: SerialNumber: syz [ 570.317120][T10808] usb 3-1: config 0 descriptor?? [ 570.598414][T10808] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 570.649036][T10808] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 570.792412][T10808] radio-si470x 3-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 570.832584][T10808] radio-si470x 3-1:0.0: si470x_get_scratch: si470x_get_report returned -71 [ 570.875602][T10808] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -5 [ 570.942310][T10808] usb 3-1: USB disconnect, device number 39 [ 574.007685][T11306] loop2: detected capacity change from 0 to 1024 [ 574.014247][ T5941] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 574.171257][ T5941] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 574.246188][ T7066] hfsplus: b-tree write err: -5, ino 3 [ 574.255279][ T5941] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 574.296152][ T5941] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.348666][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 574.365100][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 574.376645][ T5941] usb 2-1: Product: syz [ 574.403256][ T5941] usb 2-1: Manufacturer: syz [ 574.423752][ T5941] usb 2-1: SerialNumber: syz [ 574.656195][ T5941] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 54 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 574.747512][T11314] loop5: detected capacity change from 0 to 1764 [ 574.930529][ T5941] usb 2-1: USB disconnect, device number 54 [ 574.964228][ T5941] usblp0: removed [ 575.340807][T10806] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 575.387324][T11323] loop5: detected capacity change from 0 to 4096 [ 575.423733][T11323] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512). [ 575.524542][T10806] usb 4-1: Using ep0 maxpacket: 32 [ 575.638480][T10806] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 575.722427][T10806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 575.811308][T10806] usb 4-1: Product: syz [ 575.857149][T10806] usb 4-1: Manufacturer: syz [ 575.921319][T10806] usb 4-1: SerialNumber: syz [ 576.186176][T10806] usb 4-1: config 0 descriptor?? [ 576.343948][T11323] ntfs3(loop5): ino=19, mi_enum_attr [ 576.349407][T11323] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 576.400598][T10806] usb 4-1: selecting invalid altsetting 3 [ 576.468923][T10806] comedi comedi5: could not set alternate setting 3 in high speed [ 576.514352][T10806] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 576.570908][T10806] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 576.651361][ T9927] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 576.695948][ T9927] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 576.893401][T11350] fido_id[11350]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 577.318986][ T5941] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 577.422710][ T30] audit: type=1326 audit(577.405:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11343 comm="syz.4.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6fe6f8e929 code=0x7fc00000 [ 577.479226][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 577.484402][ T9927] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 577.495428][ T5941] usb 2-1: config 0 has an invalid interface number: 132 but max is 0 [ 577.515128][ T5941] usb 2-1: config 0 has no interface number 0 [ 577.534126][ T5941] usb 2-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 577.554101][ T5941] usb 2-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 577.563419][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 577.588857][ T5941] usb 2-1: Product: syz [ 577.593033][ T5941] usb 2-1: Manufacturer: syz [ 577.597631][ T5941] usb 2-1: SerialNumber: syz [ 577.613611][ T5941] usb 2-1: config 0 descriptor?? [ 577.642221][ T5941] em28xx 2-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 577.658873][ T5941] em28xx 2-1:0.132: Video interface 132 found: [ 577.671158][ T9927] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 577.688149][T11371] loop4: detected capacity change from 0 to 4096 [ 577.697576][ T9927] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 577.728894][ T9927] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 577.737022][ T9927] usb 3-1: Product: syz [ 577.768716][ T9927] usb 3-1: Manufacturer: syz [ 577.778003][ T9927] usb 3-1: SerialNumber: syz [ 578.116992][ T5941] em28xx 2-1:0.132: unknown em28xx chip ID (0) [ 578.732066][ T9927] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 578.760244][ T9927] usb 3-1: USB disconnect, device number 40 [ 578.766024][T10806] usb 4-1: USB disconnect, device number 36 [ 578.809672][ T9927] usblp0: removed [ 578.973907][ T5941] em28xx 2-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 579.022269][ T5941] em28xx 2-1:0.132: board has no eeprom [ 579.099704][ T5941] em28xx 2-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 579.137835][ T5941] em28xx 2-1:0.132: analog set to bulk mode. [ 579.168035][ T9927] em28xx 2-1:0.132: Registering V4L2 extension [ 579.612137][ T5941] usb 2-1: USB disconnect, device number 55 [ 579.656948][ T5941] em28xx 2-1:0.132: Disconnecting em28xx [ 580.346664][T11412] netlink: 'syz.3.1671': attribute type 4 has an invalid length. [ 580.420909][T11412] netlink: 'syz.3.1671': attribute type 4 has an invalid length. [ 580.463518][ T9927] em28xx 2-1:0.132: Config register raw data: 0xffffffed [ 580.477362][ T9927] em28xx 2-1:0.132: AC97 chip type couldn't be determined [ 580.504498][ T9927] em28xx 2-1:0.132: No AC97 audio processor [ 580.636452][ T9927] usb 2-1: Decoder not found [ 580.658309][ T9927] em28xx 2-1:0.132: failed to create media graph [ 580.678888][ T9927] em28xx 2-1:0.132: V4L2 device video103 deregistered [ 580.727974][ T9927] em28xx 2-1:0.132: Remote control support is not available for this card. [ 580.851835][ T5941] em28xx 2-1:0.132: Closing input extension [ 580.890775][ T5941] em28xx 2-1:0.132: Freeing device [ 580.979960][T11431] loop4: detected capacity change from 0 to 1024 [ 581.004445][T11431] EXT4-fs: Ignoring removed oldalloc option [ 581.026413][T11431] EXT4-fs: Ignoring removed bh option [ 581.092709][T11431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.269378][ T5941] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 581.464466][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 581.486033][ T5941] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 581.536969][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 581.586629][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 581.643350][ T5941] usb 2-1: Product: syz [ 581.647545][ T5941] usb 2-1: Manufacturer: syz [ 581.700048][ T5941] usb 2-1: SerialNumber: syz [ 581.994093][ T5941] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 582.052157][T11460] loop5: detected capacity change from 0 to 512 [ 582.069277][ T5941] usb 2-1: USB disconnect, device number 56 [ 582.098273][T11460] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 582.127697][ T5941] usblp0: removed [ 582.170953][T11460] EXT4-fs (loop5): orphan cleanup on readonly fs [ 582.232870][T11460] EXT4-fs error (device loop5): ext4_orphan_get:1419: comm syz.5.1686: bad orphan inode 15 [ 582.274376][T11460] ext4_test_bit(bit=14, block=18) = 1 [ 582.298210][T11460] is_bad_inode(inode)=0 [ 582.305970][T11460] NEXT_ORPHAN(inode)=1023 [ 582.319219][T11460] max_ino=32 [ 582.322431][T11460] i_nlink=0 [ 582.338150][T11460] EXT4-fs error (device loop5): ext4_xattr_delete_inode:2962: inode #15: comm syz.5.1686: corrupted xattr block 19: e_value size too large [ 582.382783][T11460] EXT4-fs warning (device loop5): ext4_evict_inode:274: xattr delete (err -117) [ 582.388884][ T9927] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 582.396812][T11460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 582.532289][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.595992][ T9927] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 582.609701][T10806] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 582.640482][ T9927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 582.689429][ T9927] usb 1-1: config 0 descriptor?? [ 582.810310][T10806] usb 5-1: Using ep0 maxpacket: 32 [ 582.844072][T10806] usb 5-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 582.858176][T10806] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.886707][T10806] usb 5-1: Product: syz [ 582.894059][T10806] usb 5-1: Manufacturer: syz [ 582.898723][T10806] usb 5-1: SerialNumber: syz [ 582.912098][T10806] usb 5-1: config 0 descriptor?? [ 582.925877][T10806] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 583.093781][T10805] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 583.179673][T10807] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 583.279095][T10805] usb 4-1: Using ep0 maxpacket: 8 [ 583.296246][T10805] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 583.314641][T10805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.329021][T10805] usb 4-1: Product: syz [ 583.333239][T10805] usb 4-1: Manufacturer: syz [ 583.337869][T10805] usb 4-1: SerialNumber: syz [ 583.367011][T10805] usb 4-1: config 0 descriptor?? [ 583.386804][T10807] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 583.399450][T10805] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 583.405874][T10807] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 583.419018][T10807] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 583.446563][T10807] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 583.462789][T10807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 583.472026][T10807] usb 2-1: Product: syz [ 583.476480][T10807] usb 2-1: Manufacturer: syz [ 583.482869][T10807] usb 2-1: SerialNumber: syz [ 583.718414][T10807] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 583.727243][ T9927] pegasus 1-1:0.0: probe with driver pegasus failed with error -71 [ 583.920828][ T9927] usb 1-1: USB disconnect, device number 42 [ 583.951377][T10806] gspca_stk1135: reg_w 0x7 err -71 [ 583.963762][T10806] gspca_stk1135: serial bus timeout: status=0x00 [ 583.985754][T10807] usb 2-1: USB disconnect, device number 57 [ 584.029871][T10806] gspca_stk1135: Sensor write failed [ 584.045189][T10807] usblp0: removed [ 584.059196][T10806] gspca_stk1135: serial bus timeout: status=0x00 [ 584.087037][T10806] gspca_stk1135: Sensor write failed [ 584.104811][T10806] gspca_stk1135: serial bus timeout: status=0x00 [ 584.127394][T10806] gspca_stk1135: Sensor read failed [ 584.137577][T10806] gspca_stk1135: serial bus timeout: status=0x00 [ 584.148639][T10806] gspca_stk1135: Sensor read failed [ 584.158766][T10806] gspca_stk1135: Detected sensor type unknown (0x0) [ 584.173019][T10806] gspca_stk1135: serial bus timeout: status=0x00 [ 584.186414][T10806] gspca_stk1135: Sensor read failed [ 584.200515][T10806] gspca_stk1135: serial bus timeout: status=0x00 [ 584.207058][T10806] gspca_stk1135: Sensor read failed [ 584.212942][T10806] gspca_stk1135: serial bus timeout: status=0x00 [ 584.219436][T10806] gspca_stk1135: Sensor write failed [ 584.225031][T10806] gspca_stk1135: serial bus timeout: status=0x00 [ 584.231528][T10806] gspca_stk1135: Sensor write failed [ 584.236981][T10806] stk1135 5-1:0.0: probe with driver stk1135 failed with error -71 [ 584.278410][T10806] usb 5-1: USB disconnect, device number 47 [ 584.858910][ T9927] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 585.032608][ T9927] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 585.094295][ T9927] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 585.154605][ T9927] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 585.222976][ T9927] usb 5-1: Product: syz [ 585.253602][ T9927] usb 5-1: Manufacturer: syz [ 585.289592][T10805] gspca_sonixj: reg_r err -71 [ 585.303892][ T9927] usb 5-1: SerialNumber: syz [ 585.315000][T10805] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 585.349667][T10805] usb 4-1: USB disconnect, device number 37 [ 585.731440][ T9927] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 585.781425][T10806] usb 5-1: USB disconnect, device number 48 [ 585.843798][T10805] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 585.874397][T10806] usblp0: removed [ 586.070081][T10805] usb 1-1: no configurations [ 586.089319][T10805] usb 1-1: can't read configurations, error -22 [ 586.269101][T10805] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 586.439964][T10805] usb 1-1: no configurations [ 586.439988][T10805] usb 1-1: can't read configurations, error -22 [ 586.440381][T10805] usb usb1-port1: attempt power cycle [ 586.778893][T10805] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 586.820494][T10805] usb 1-1: no configurations [ 586.820515][T10805] usb 1-1: can't read configurations, error -22 [ 586.899155][ T5934] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 586.958965][T10805] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 587.000360][T10805] usb 1-1: no configurations [ 587.009310][T10805] usb 1-1: can't read configurations, error -22 [ 587.025179][T10805] usb usb1-port1: unable to enumerate USB device [ 587.029101][ T5934] usb 5-1: device descriptor read/64, error -71 [ 587.079438][T10807] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 587.096868][T11548] loop2: detected capacity change from 0 to 512 [ 587.157682][T11548] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 587.196788][T11548] EXT4-fs (loop2): orphan cleanup on readonly fs [ 587.226468][T11548] EXT4-fs error (device loop2): ext4_orphan_get:1419: comm syz.2.1721: bad orphan inode 15 [ 587.243171][T11548] ext4_test_bit(bit=14, block=18) = 1 [ 587.248671][T11548] is_bad_inode(inode)=0 [ 587.254892][T11548] NEXT_ORPHAN(inode)=1023 [ 587.259652][T11548] max_ino=32 [ 587.262855][T11548] i_nlink=0 [ 587.269601][ T5934] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 587.277348][T11548] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.1721: corrupted xattr block 19: e_value size too large [ 587.278864][T10807] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 587.315046][T11548] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117) [ 587.336839][T10807] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 587.350237][T11548] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 587.354781][T10807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 587.378200][T10807] usb 6-1: Product: syz [ 587.386054][T10807] usb 6-1: Manufacturer: syz [ 587.395451][T10807] usb 6-1: SerialNumber: syz [ 587.419499][ T5934] usb 5-1: device descriptor read/64, error -71 [ 587.489415][ T5847] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.539242][ T5934] usb usb5-port1: attempt power cycle [ 587.642660][T10807] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 587.743353][ T9927] usb 6-1: USB disconnect, device number 31 [ 587.765239][ T9927] usblp0: removed [ 587.878954][ T5934] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 587.920611][ T5934] usb 5-1: device descriptor read/8, error -71 [ 588.028912][T10806] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 588.176690][ T5934] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 588.199478][ T5934] usb 5-1: device descriptor read/8, error -71 [ 588.219064][T10806] usb 4-1: Using ep0 maxpacket: 8 [ 588.233264][T10806] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 588.268053][T10806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.282559][T10806] usb 4-1: Product: syz [ 588.308073][T10806] usb 4-1: Manufacturer: syz [ 588.315041][T10806] usb 4-1: SerialNumber: syz [ 588.319497][ T5934] usb usb5-port1: unable to enumerate USB device [ 588.342104][T10806] usb 4-1: config 0 descriptor?? [ 588.362196][T10806] usb 4-1: selecting invalid altsetting 3 [ 588.368032][T10806] comedi comedi5: could not set alternate setting 3 in high speed [ 588.396069][T10806] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 588.449975][T10806] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 588.567490][T10805] usb 4-1: USB disconnect, device number 38 [ 588.678547][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1733'. [ 588.744641][T10806] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 588.920932][T10806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 588.934601][T10806] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 588.995025][T10806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 589.064230][T10806] usb 2-1: config 0 descriptor?? [ 589.083485][T10806] pwc: Askey VC010 type 2 USB webcam detected. [ 589.289367][T10806] pwc: send_video_command error -71 [ 589.300349][T10806] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 589.359385][T10806] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 589.383465][T10806] usb 2-1: USB disconnect, device number 58 [ 590.139089][T10806] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 590.279314][ T5920] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 590.312489][T10806] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.328474][T10806] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 590.409360][T10806] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.429811][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 590.435630][ T5920] usb 5-1: no configurations [ 590.447465][ T5920] usb 5-1: can't read configurations, error -22 [ 590.478159][T10806] usb 2-1: config 0 descriptor?? [ 590.513438][T10806] pwc: Askey VC010 type 2 USB webcam detected. [ 590.579181][ T5920] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 590.738936][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 590.780010][ T5920] usb 5-1: no configurations [ 590.790851][ T5920] usb 5-1: can't read configurations, error -22 [ 590.838766][ T5920] usb usb5-port1: attempt power cycle [ 590.903464][T10806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 590.912611][T10806] pwc: recv_control_msg error -32 req 02 val 2700 [ 590.922885][T10806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 590.932983][T10806] pwc: recv_control_msg error -32 req 04 val 1000 [ 590.941646][T10806] pwc: recv_control_msg error -32 req 04 val 1300 [ 590.949576][T10806] pwc: recv_control_msg error -32 req 04 val 1400 [ 590.965744][T10806] pwc: recv_control_msg error -32 req 02 val 2000 [ 590.973129][T10806] pwc: recv_control_msg error -32 req 02 val 2100 [ 590.985264][T10806] pwc: recv_control_msg error -32 req 04 val 1500 [ 591.000375][T10806] pwc: recv_control_msg error -32 req 02 val 2500 [ 591.010210][T10806] pwc: recv_control_msg error -32 req 02 val 2400 [ 591.019632][T10806] pwc: recv_control_msg error -32 req 02 val 2600 [ 591.038730][T10806] pwc: recv_control_msg error -71 req 02 val 2900 [ 591.068893][T10806] pwc: recv_control_msg error -71 req 02 val 2800 [ 591.105327][T10806] pwc: recv_control_msg error -71 req 04 val 1100 [ 591.130885][T10806] pwc: recv_control_msg error -71 req 04 val 1200 [ 591.233035][T10806] pwc: Registered as video103. [ 591.264176][T10806] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input31 [ 591.359078][T10806] usb 2-1: USB disconnect, device number 59 [ 591.449076][ T5920] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 591.553089][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 591.589185][ T5920] usb 5-1: no configurations [ 591.602443][ T5920] usb 5-1: can't read configurations, error -22 [ 591.759057][T10805] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 591.759379][ T5920] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 591.807411][ T5920] usb 5-1: Using ep0 maxpacket: 32 [ 591.815159][ T5920] usb 5-1: no configurations [ 591.823136][ T5920] usb 5-1: can't read configurations, error -22 [ 591.831048][ T5920] usb usb5-port1: unable to enumerate USB device [ 591.936995][T10805] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 591.999089][ T5934] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 592.013385][T10805] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 592.029771][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 592.054081][T10805] usb 6-1: Product: syz [ 592.058254][T10805] usb 6-1: Manufacturer: syz [ 592.073806][T10805] usb 6-1: SerialNumber: syz [ 592.175930][ T5934] usb 4-1: no configurations [ 592.185478][ T5934] usb 4-1: can't read configurations, error -22 [ 592.302993][T10805] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 592.328909][ T5934] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 592.401813][T10805] usb 6-1: USB disconnect, device number 32 [ 592.433205][T10805] usblp0: removed [ 593.299633][ T5934] usb 4-1: no configurations [ 593.304268][ T5934] usb 4-1: can't read configurations, error -22 [ 593.311513][ T5934] usb usb4-port1: attempt power cycle [ 594.038930][T10806] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 594.114585][ T5934] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 594.150757][ T5934] usb 4-1: no configurations [ 594.155374][ T5934] usb 4-1: can't read configurations, error -22 [ 594.224842][T10806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.254197][T10806] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 594.277068][T10806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.294702][T10806] usb 5-1: config 0 descriptor?? [ 594.309108][ T5934] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 594.315940][T10806] pwc: Askey VC010 type 2 USB webcam detected. [ 594.350887][ T5934] usb 4-1: no configurations [ 594.362612][ T5934] usb 4-1: can't read configurations, error -22 [ 594.376305][ T5934] usb usb4-port1: unable to enumerate USB device [ 594.523621][T10806] pwc: send_video_command error -71 [ 594.540517][T10806] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 594.560772][T10806] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 594.591960][T11650] netlink: 'syz.0.1764': attribute type 4 has an invalid length. [ 594.597887][T10806] usb 5-1: USB disconnect, device number 57 [ 594.618461][T11650] netlink: 'syz.0.1764': attribute type 4 has an invalid length. [ 594.706172][ T51] Bluetooth: hci3: Malformed Event: 0x02 [ 594.719594][ T51] Bluetooth: hci3: unexpected event for opcode 0x0428 [ 594.868989][T10805] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 595.029249][T10806] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 595.038903][T10805] usb 6-1: Using ep0 maxpacket: 32 [ 595.052537][T10805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.063481][T10805] usb 6-1: config 0 has no interfaces? [ 595.075399][T10805] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 595.100785][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 595.118446][T10805] usb 6-1: Product: syz [ 595.128914][T10805] usb 6-1: Manufacturer: syz [ 595.138915][T10805] usb 6-1: SerialNumber: syz [ 595.158017][T10805] usb 6-1: config 0 descriptor?? [ 595.185597][T10806] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.204305][T10806] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 595.223717][T10806] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.248318][T10806] usb 5-1: config 0 descriptor?? [ 595.270568][T10806] pwc: Askey VC010 type 2 USB webcam detected. [ 595.752028][T10806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 595.787851][T10806] pwc: recv_control_msg error -32 req 02 val 2700 [ 595.798628][T10806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 595.818307][T10806] pwc: recv_control_msg error -32 req 04 val 1000 [ 595.836462][T10806] pwc: recv_control_msg error -32 req 04 val 1300 [ 595.846025][T10806] pwc: recv_control_msg error -32 req 04 val 1400 [ 595.861329][T10806] pwc: recv_control_msg error -32 req 02 val 2000 [ 595.880326][T10806] pwc: recv_control_msg error -32 req 02 val 2100 [ 595.887561][T10806] pwc: recv_control_msg error -32 req 04 val 1500 [ 595.900582][T10806] pwc: recv_control_msg error -32 req 02 val 2500 [ 595.908317][T10806] pwc: recv_control_msg error -32 req 02 val 2400 [ 595.923199][T10806] pwc: recv_control_msg error -32 req 02 val 2600 [ 595.932251][ C1] raw-gadget.1 gadget.4: ignoring, device is not running [ 595.944759][T10806] pwc: recv_control_msg error -32 req 02 val 2900 [ 595.954865][T10806] pwc: recv_control_msg error -71 req 02 val 2800 [ 595.969539][T10806] pwc: recv_control_msg error -71 req 04 val 1100 [ 595.988334][T10806] pwc: recv_control_msg error -71 req 04 val 1200 [ 595.999979][T10806] pwc: Registered as video103. [ 596.012539][T10806] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input32 [ 596.047372][T10806] usb 5-1: USB disconnect, device number 58 [ 596.139050][ T5920] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 596.304635][ T5920] usb 4-1: no configurations [ 596.309823][ T5920] usb 4-1: can't read configurations, error -22 [ 596.441251][ T5920] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 596.610323][ T5920] usb 4-1: no configurations [ 596.618335][ T5920] usb 4-1: can't read configurations, error -22 [ 596.641859][ T5920] usb usb4-port1: attempt power cycle [ 596.718731][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1788'. [ 596.937521][T11711] netfs: Couldn't get user pages (rc=-14) [ 596.964432][T11711] netfs: Zero-sized read [R=1] [ 597.001023][T11715] binder: 11706:11715 unknown command 0 [ 597.006671][T11715] binder: 11706:11715 ioctl c0306201 200000000480 returned -22 [ 597.032339][ T5920] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 597.065771][ T5920] usb 4-1: no configurations [ 597.083811][ T5920] usb 4-1: can't read configurations, error -22 [ 597.278943][ T5920] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 597.330359][ T5920] usb 4-1: no configurations [ 597.334988][ T5920] usb 4-1: can't read configurations, error -22 [ 597.357893][ T5920] usb usb4-port1: unable to enumerate USB device [ 597.419319][T10806] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 597.581122][T10806] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 597.600275][T10806] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 597.613087][T10806] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 597.623625][T10806] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 597.650855][T11717] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 597.665654][T10806] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.705475][ T5920] usb 6-1: USB disconnect, device number 33 [ 598.094196][T10806] usb 3-1: USB disconnect, device number 41 [ 598.307243][T11724] loop4: detected capacity change from 0 to 512 [ 598.406939][T11724] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 598.483499][T11724] EXT4-fs (loop4): orphan cleanup on readonly fs [ 598.564004][T11724] EXT4-fs error (device loop4): ext4_orphan_get:1419: comm syz.4.1797: bad orphan inode 15 [ 598.594004][T11724] ext4_test_bit(bit=14, block=18) = 1 [ 598.615565][T11724] is_bad_inode(inode)=0 [ 598.636676][T11724] NEXT_ORPHAN(inode)=1023 [ 598.712867][T11724] max_ino=32 [ 598.721588][T11724] i_nlink=0 [ 598.777956][T11724] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.1797: corrupted xattr block 19: e_value size too large [ 598.793091][ T51] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 598.804160][ T51] Bluetooth: hci3: Injecting HCI hardware error event [ 598.837893][ T51] Bluetooth: hci3: hardware error 0x00 [ 598.851247][T11724] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117) [ 598.890931][T11724] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 599.019217][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 599.215981][T10806] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 599.254583][T10806] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 600.028520][ T30] audit: type=1326 audit(600.005:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.079044][ T30] audit: type=1326 audit(600.005:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.155176][ T30] audit: type=1326 audit(600.005:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.198021][ T30] audit: type=1326 audit(600.005:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.268320][ T30] audit: type=1326 audit(600.005:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.284790][T11178] Bluetooth: hci5: unexpected event for opcode 0x2010 [ 600.368390][ T30] audit: type=1326 audit(600.005:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.478702][ T30] audit: type=1326 audit(600.005:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.589842][ T30] audit: type=1326 audit(600.005:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.677997][ T30] audit: type=1326 audit(600.005:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.694581][T11756] loop3: detected capacity change from 0 to 512 [ 600.706784][T11754] loop4: detected capacity change from 0 to 2048 [ 600.736551][ T30] audit: type=1326 audit(600.005:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11728 comm="syz.3.1800" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe7c658e929 code=0x7fc00000 [ 600.761561][T11756] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 600.826512][T11756] EXT4-fs (loop3): orphan cleanup on readonly fs [ 600.850049][T11756] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.1811: bad orphan inode 15 [ 600.869001][ T51] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 600.878358][T11763] warning: `syz.2.1813' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 600.911211][T11754] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 600.957344][T11756] ext4_test_bit(bit=14, block=18) = 1 [ 600.987582][T11756] is_bad_inode(inode)=0 [ 601.017779][T11756] NEXT_ORPHAN(inode)=1023 [ 601.033300][ T51] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 601.033632][T11756] max_ino=32 [ 601.076215][T11756] i_nlink=0 [ 601.081164][T11756] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2962: inode #15: comm syz.3.1811: corrupted xattr block 19: e_value size too large [ 601.129983][ T7053] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 601.159015][T11756] EXT4-fs warning (device loop3): ext4_evict_inode:274: xattr delete (err -117) [ 601.204104][T11756] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 601.211105][ T7053] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 601.236818][ T7053] EXT4-fs (loop4): This should not happen!! Data will be lost [ 601.236818][ T7053] [ 601.246835][ T7053] EXT4-fs (loop4): Total free blocks count 0 [ 601.293563][ T7053] EXT4-fs (loop4): Free/Dirty block details [ 601.301681][ T7053] EXT4-fs (loop4): free_blocks=66060288 [ 601.307336][ T7053] EXT4-fs (loop4): dirty_blocks=32 [ 601.317799][ T7053] EXT4-fs (loop4): Block reservation details [ 601.325721][ T7053] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 601.384243][ T7053] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 1 with error 28 [ 601.472025][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.518887][ T5941] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 601.767119][T11784] binder: 11775:11784 unknown command 0 [ 601.796050][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 601.845911][T11784] binder: 11775:11784 ioctl c0306201 200000000480 returned -22 [ 601.854298][ T5941] usb 2-1: config 0 has an invalid interface number: 37 but max is 0 [ 601.869322][ T5941] usb 2-1: config 0 has no interface number 0 [ 601.876604][ T5941] usb 2-1: config 0 interface 37 altsetting 2 endpoint 0x2 has an invalid bInterval 158, changing to 11 [ 602.018881][ T5920] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 602.068217][T11786] loop4: detected capacity change from 0 to 32768 [ 602.120351][T11786] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 602.138269][ T5941] usb 2-1: config 0 interface 37 altsetting 2 endpoint 0x2 has invalid maxpacket 9903, setting to 1024 [ 602.169914][T11786] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 602.246841][ T5941] usb 2-1: config 0 interface 37 has no altsetting 0 [ 602.362098][ T5920] usb 4-1: Using ep0 maxpacket: 8 [ 602.369031][ T9927] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 602.417943][ T5861] ocfs2: Unmounting device (7,4) on (node local) [ 602.457854][ T5941] usb 2-1: New USB device found, idVendor=07b8, idProduct=401a, bcdDevice=10.8f [ 602.467145][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=1 [ 602.485301][ T5920] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 602.494603][ T5941] usb 2-1: Product: syz [ 602.503236][ T5941] usb 2-1: Manufacturer: syz [ 602.513315][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.522777][ T5941] usb 2-1: SerialNumber: syz [ 602.602072][ T9927] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 602.650254][ T5920] usb 4-1: Product: syz [ 602.655612][ T5941] usb 2-1: config 0 descriptor?? [ 602.746612][ T5920] usb 4-1: Manufacturer: syz [ 602.768533][ T9927] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 602.786042][T11774] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 602.803529][ T5920] usb 4-1: SerialNumber: syz [ 602.823159][ T9927] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 602.836777][ T9927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.855587][ T5920] usb 4-1: config 0 descriptor?? [ 602.987204][ T5920] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 603.008508][T11774] netlink: 'syz.1.1814': attribute type 10 has an invalid length. [ 603.016665][T11774] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1814'. [ 603.488958][ T9927] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 603.896761][ T9927] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 603.917623][ T9927] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 603.952056][ T9927] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 604.059275][T10806] usb 6-1: new low-speed USB device number 34 using dummy_hcd [ 604.071525][ T9927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.255764][ T5920] usb 4-1: USB disconnect, device number 47 [ 604.309232][ T51] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 604.319093][ T51] Bluetooth: hci5: Injecting HCI hardware error event [ 604.327137][T11178] Bluetooth: hci5: hardware error 0x00 [ 604.375713][T10806] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 604.393525][T10806] usb 6-1: config 0 has no interface number 0 [ 604.411957][T10806] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 604.438753][T10806] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 604.459549][T11795] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 604.481751][ T9927] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 604.589176][T10806] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 604.601296][T10806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.831557][T10806] usb 6-1: config 0 descriptor?? [ 604.843372][T11796] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 604.901330][ T9927] usb 5-1: USB disconnect, device number 59 [ 605.004607][T10806] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 605.109109][ T51] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 605.118471][ T51] Bluetooth: hci2: Injecting HCI hardware error event [ 605.126492][ T51] Bluetooth: hci2: hardware error 0x00 [ 606.468940][T11178] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 607.960233][ T51] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 608.033575][ T5941] rtl8150 2-1:0.37: couldn't find required endpoints [ 608.069192][ T5941] rtl8150 2-1:0.37: probe with driver rtl8150 failed with error -5 [ 608.201575][ T9927] usb 3-1: USB disconnect, device number 42 [ 608.325696][T10806] usb 6-1: USB disconnect, device number 34 [ 608.531487][ T51] Bluetooth: hci1: unexpected event for opcode 0x0024 [ 608.710945][ T5941] usb 2-1: USB disconnect, device number 60 [ 608.816063][T11819] netlink: 'syz.2.1831': attribute type 4 has an invalid length. [ 608.861134][T11823] netlink: 'syz.2.1831': attribute type 4 has an invalid length. [ 609.029324][T11829] loop5: detected capacity change from 0 to 512 [ 609.055412][T11829] EXT4-fs: Ignoring removed i_version option [ 609.100854][T11829] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 609.142776][T11829] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 609.164560][T11829] EXT4-fs (loop5): 1 truncate cleaned up [ 609.224121][T11829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 609.303979][ T5846] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 611.868907][T10806] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 612.018907][T10806] usb 3-1: Using ep0 maxpacket: 16 [ 612.028534][T10806] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.050767][T10806] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 612.076782][T10806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 612.091560][T10806] usb 3-1: Product: syz [ 612.102807][T10806] usb 3-1: Manufacturer: syz [ 612.111787][T10806] usb 3-1: SerialNumber: syz [ 612.125977][T10806] usb 3-1: config 0 descriptor?? [ 612.927907][T11178] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 612.937096][T11178] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 612.944949][T11178] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 612.953247][T11178] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 612.961573][T11178] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 613.039278][ T5941] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 613.244808][ T5941] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 613.273724][ T5941] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 613.365271][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 613.437582][ T5941] usb 2-1: Product: syz [ 613.650425][T11894] loop4: detected capacity change from 0 to 32768 [ 613.663038][T11894] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1862 (11894) [ 613.685471][ T5941] usb 2-1: Manufacturer: syz [ 613.692386][T11894] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 613.702763][T11894] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 613.712020][T11894] BTRFS info (device loop4): using free-space-tree [ 613.728749][ T5941] usb 2-1: SerialNumber: syz [ 613.941224][T11894] BTRFS info (device loop4): balance: start -sprofiles=system|metadata,usage=34359738372,devid=0,drange=7..526332,limit=47..8 [ 613.954926][T11894] BTRFS info (device loop4): balance: ended with status: 0 [ 613.982189][ T5941] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 61 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 614.047829][ T5861] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 614.240811][ T5941] usb 2-1: USB disconnect, device number 61 [ 614.326342][ T5941] usblp0: removed [ 614.471441][T11921] loop3: detected capacity change from 0 to 1024 [ 614.669336][T10807] usb 3-1: USB disconnect, device number 43 [ 614.733723][T10806] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 614.829435][ T5920] usb 6-1: new full-speed USB device number 35 using dummy_hcd [ 614.889068][T10806] usb 5-1: device descriptor read/64, error -71 [ 614.894828][T11885] chnl_net:caif_netlink_parms(): no params data found [ 615.001842][ T5920] usb 6-1: config 0 has an invalid interface number: 84 but max is 0 [ 615.001872][ T5920] usb 6-1: config 0 has no interface number 0 [ 615.001904][ T5920] usb 6-1: config 0 interface 84 has no altsetting 0 [ 615.004218][ T5920] usb 6-1: New USB device found, idVendor=0565, idProduct=0003, bcdDevice=fb.88 [ 615.039751][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.039780][ T5920] usb 6-1: Product: syz [ 615.039800][ T5920] usb 6-1: Manufacturer: syz [ 615.039819][ T5920] usb 6-1: SerialNumber: syz [ 615.049009][T11178] Bluetooth: hci6: command tx timeout [ 615.078008][ T5920] usb 6-1: config 0 descriptor?? [ 615.118882][T10807] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 615.133923][T10806] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 615.268864][T10806] usb 5-1: device descriptor read/64, error -71 [ 615.268946][T10807] usb 3-1: Using ep0 maxpacket: 8 [ 615.273465][T10807] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 615.273498][T10807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 615.273524][T10807] usb 3-1: Product: syz [ 615.273543][T10807] usb 3-1: Manufacturer: syz [ 615.273562][T10807] usb 3-1: SerialNumber: syz [ 615.276988][T10807] usb 3-1: config 0 descriptor?? [ 615.343934][T11885] bridge0: port 1(bridge_slave_0) entered blocking state [ 615.356286][T11885] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.356476][T11885] bridge_slave_0: entered allmulticast mode [ 615.360112][T11885] bridge_slave_0: entered promiscuous mode [ 615.370858][T11885] bridge0: port 2(bridge_slave_1) entered blocking state [ 615.370993][T11885] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.371170][T11885] bridge_slave_1: entered allmulticast mode [ 615.377977][T11885] bridge_slave_1: entered promiscuous mode [ 615.379351][T10806] usb usb5-port1: attempt power cycle [ 615.404923][ T5920] kaweth 6-1:0.84: Firmware present in device. [ 615.497764][T10807] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 615.594462][T11885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 615.620103][T11885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 615.637618][ T5920] kaweth 6-1:0.84: Statistics collection: 0 [ 615.637641][ T5920] kaweth 6-1:0.84: Multicast filter limit: 0 [ 615.637661][ T5920] kaweth 6-1:0.84: MTU: 0 [ 615.637679][ T5920] kaweth 6-1:0.84: Read MAC address 00:00:00:00:00:00 [ 615.729368][T10806] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 615.750510][T10806] usb 5-1: device descriptor read/8, error -71 [ 615.782016][T11885] team0: Port device team_slave_0 added [ 615.786606][T11885] team0: Port device team_slave_1 added [ 615.840675][ T5920] kaweth 6-1:0.84: probe with driver kaweth failed with error -5 [ 615.980508][ T5920] usb 6-1: USB disconnect, device number 35 [ 615.991883][T10806] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 616.010085][T11885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 616.017039][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.050659][T11885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.065195][T11885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.072397][T11885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.079288][T10806] usb 5-1: device descriptor read/8, error -71 [ 616.157475][T11885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 616.250112][T10806] usb usb5-port1: unable to enumerate USB device [ 616.271843][T11885] hsr_slave_0: entered promiscuous mode [ 616.278681][T11885] hsr_slave_1: entered promiscuous mode [ 616.291404][T11885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 616.302626][T11885] Cannot create hsr debugfs directory [ 616.389071][ T5941] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 616.570587][ T5941] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 616.779196][T10807] gspca_sunplus: reg_w_riv err -71 [ 616.790437][T10807] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 616.793117][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 616.818732][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 616.837559][T10807] usb 3-1: USB disconnect, device number 44 [ 616.854076][ T5941] usb 4-1: Product: syz [ 616.874854][ T5941] usb 4-1: Manufacturer: syz [ 616.888566][ T5941] usb 4-1: SerialNumber: syz [ 617.002874][T11885] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 617.026020][T11885] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 617.044884][T11885] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 617.074319][T11885] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 617.110751][T11178] Bluetooth: hci6: command tx timeout [ 617.152618][ T5941] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 617.327150][T11885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.387880][T11885] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.418612][ T5920] usb 4-1: USB disconnect, device number 48 [ 617.431528][ T5920] usblp0: removed [ 617.472178][ T7074] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.479353][ T7074] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.532134][ T7074] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.539364][ T7074] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.768882][T10807] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 617.930340][T11966] loop4: detected capacity change from 0 to 32768 [ 618.127956][T11966] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 618.127983][T11966] allowing incompatible features above 0.0: (unknown version) [ 618.127995][T11966] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 618.171548][T11966] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0 [ 618.179799][T11966] bcachefs (loop4): initializing new filesystem [ 618.192807][T11966] bcachefs (loop4): going read-write [ 618.238979][T10807] usb 6-1: Using ep0 maxpacket: 16 [ 618.262826][T11966] bcachefs (loop4): marking superblocks [ 618.280177][T11966] bcachefs (loop4): initializing freespace [ 618.289235][T11966] bcachefs (loop4): done initializing freespace [ 618.298645][T11966] bcachefs (loop4): reading snapshots table [ 618.304655][T11966] bcachefs (loop4): reading snapshots done [ 618.349882][T11966] bcachefs (loop4): done starting filesystem [ 618.368171][T10807] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.479380][T10807] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 618.522140][T10807] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.564518][T11966] syz.4.1880 (11966) used greatest stack depth: 16376 bytes left [ 618.597145][ T5861] bcachefs (loop4): shutting down [ 618.610042][T10807] usb 6-1: Product: syz [ 618.633065][ T5861] bcachefs (loop4): going read-only [ 618.634124][T10807] usb 6-1: Manufacturer: syz [ 618.658197][ T5861] bcachefs (loop4): finished waiting for writes to stop [ 618.681585][T10807] usb 6-1: SerialNumber: syz [ 618.768251][T10807] usb 6-1: config 0 descriptor?? [ 618.776039][T11989] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1883'. [ 618.792315][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1883'. [ 618.855533][ T5861] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3 [ 619.008401][T11885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 619.057354][ T5861] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3 [ 619.207741][ T51] Bluetooth: hci6: command tx timeout [ 619.279887][T10807] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 619.315352][ T5861] bcachefs (loop4): clean shutdown complete, journal seq 4 [ 619.339952][ T5861] bcachefs (loop4): marking filesystem clean [ 619.539313][T10807] usb 3-1: config index 0 descriptor too short (expected 8192, got 77) [ 619.547601][T10807] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.601803][T10807] usb 3-1: config 0 has no interfaces? [ 619.612541][ T5861] bcachefs (loop4): shutdown complete [ 619.626387][T10807] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 619.638105][T10807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.661514][T10807] usb 3-1: Product: syz [ 619.682556][T10807] usb 3-1: Manufacturer: syz [ 619.918307][T10807] usb 3-1: SerialNumber: syz [ 619.949913][T10807] usb 3-1: config 0 descriptor?? [ 620.559322][T10808] usb 6-1: USB disconnect, device number 36 [ 620.760166][T11885] veth0_vlan: entered promiscuous mode [ 620.936010][T11885] veth1_vlan: entered promiscuous mode [ 621.059881][T11885] veth0_macvtap: entered promiscuous mode [ 621.095610][T11885] veth1_macvtap: entered promiscuous mode [ 621.124504][T11885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 621.145544][T11885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 621.215714][T11885] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.275939][ T5920] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 621.284958][ T51] Bluetooth: hci6: command tx timeout [ 621.332086][T11885] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.373329][T11885] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.415228][T11885] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.812893][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 621.832454][ T5920] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 621.858580][ T5920] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 621.872508][ T5920] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 621.883856][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.901771][ T5920] usb 4-1: Product: syz [ 621.905945][ T5920] usb 4-1: Manufacturer: syz [ 621.911272][ T5920] usb 4-1: SerialNumber: syz [ 621.918738][ T5920] usb 4-1: config 0 descriptor?? [ 622.127075][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.172587][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.341930][ T7056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.398087][ T7056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 623.206879][T10807] usb 3-1: USB disconnect, device number 45 [ 623.278908][T10805] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 623.464039][T10805] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 623.480328][T10805] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 623.480372][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 623.480401][T10805] usb 6-1: Product: syz [ 623.480421][T10805] usb 6-1: Manufacturer: syz [ 623.480440][T10805] usb 6-1: SerialNumber: syz [ 623.593867][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.593980][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.689109][ T5941] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 623.712685][T10805] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 37 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 623.838953][ T5941] usb 2-1: Using ep0 maxpacket: 16 [ 623.843419][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 623.867092][ T5941] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 623.867124][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 623.867150][ T5941] usb 2-1: Product: syz [ 623.867190][ T5941] usb 2-1: Manufacturer: syz [ 623.867211][ T5941] usb 2-1: SerialNumber: syz [ 623.871716][ T5941] usb 2-1: config 0 descriptor?? [ 623.976121][ T5941] usb 6-1: USB disconnect, device number 37 [ 623.988533][ T5941] usblp0: removed [ 624.061129][T10805] usb 4-1: USB disconnect, device number 49 [ 626.112142][T12069] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1908'. [ 626.200469][T12068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1908'. [ 626.518982][ T5920] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 626.699961][ T5920] usb 6-1: config index 0 descriptor too short (expected 8192, got 77) [ 626.708433][ T5920] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 626.737273][ T5920] usb 6-1: config 0 has no interfaces? [ 626.776930][ T5920] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 626.788048][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.793904][T10806] usb 2-1: USB disconnect, device number 62 [ 626.859004][ T5920] usb 6-1: Product: syz [ 626.883687][ T5920] usb 6-1: Manufacturer: syz [ 626.921054][ T5920] usb 6-1: SerialNumber: syz [ 627.062795][ T5920] usb 6-1: config 0 descriptor?? [ 627.289023][T10807] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 627.330333][T12086] loop4: detected capacity change from 0 to 2048 [ 627.447017][T12086] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 627.471094][T10807] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 627.500723][T10807] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 627.536322][T10807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 627.566440][T10807] usb 3-1: Product: syz [ 627.604807][T10807] usb 3-1: Manufacturer: syz [ 627.628213][T10807] usb 3-1: SerialNumber: syz [ 627.916465][T10807] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 46 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 628.185224][T10806] usb 3-1: USB disconnect, device number 46 [ 628.214040][T10806] usblp0: removed [ 629.252314][ T5941] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 629.429752][ T5941] usb 3-1: Using ep0 maxpacket: 16 [ 629.436684][ T5941] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 629.993899][ T5941] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 630.018921][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.069809][ T5941] usb 3-1: Product: syz [ 630.116127][ T5941] usb 3-1: Manufacturer: syz [ 630.169623][T10805] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 630.316537][ T5941] usb 3-1: SerialNumber: syz [ 630.341868][T10805] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 630.352427][T10805] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 630.404542][ T5941] usb 3-1: config 0 descriptor?? [ 630.430846][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1932'. [ 630.432161][T10805] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 630.518130][T10805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 632.230573][ T5920] usb 6-1: USB disconnect, device number 38 [ 632.665571][T10806] usb 3-1: USB disconnect, device number 47 [ 633.219752][ T5920] usb 6-1: new low-speed USB device number 39 using dummy_hcd [ 633.388865][ T5920] usb 6-1: device descriptor read/64, error -71 [ 633.708935][ T5920] usb 6-1: new low-speed USB device number 40 using dummy_hcd [ 633.863953][ T5920] usb 6-1: device descriptor read/64, error -71 [ 633.988584][ T9927] usb 4-1: USB disconnect, device number 50 [ 633.995592][ T5920] usb usb6-port1: attempt power cycle [ 634.139006][ T5934] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 634.298921][ T5934] usb 2-1: Using ep0 maxpacket: 32 [ 634.331646][ T5934] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 634.340744][ T5920] usb 6-1: new low-speed USB device number 41 using dummy_hcd [ 634.392513][ T5934] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 634.403109][ T5920] usb 6-1: device descriptor read/8, error -71 [ 634.413923][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 634.422619][ T5934] usb 2-1: Product: syz [ 634.426918][ T5934] usb 2-1: Manufacturer: syz [ 634.442019][ T5934] usb 2-1: SerialNumber: syz [ 634.469783][ T5934] usb 2-1: config 0 descriptor?? [ 634.669130][ T5920] usb 6-1: new low-speed USB device number 42 using dummy_hcd [ 634.753323][ T5920] usb 6-1: device descriptor read/8, error -71 [ 634.882319][ T5920] usb usb6-port1: unable to enumerate USB device [ 635.177414][T12198] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1949'. [ 635.648979][ T5941] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 635.899714][ T5941] usb 5-1: Using ep0 maxpacket: 16 [ 636.054641][ T5941] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 636.360736][ T5941] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 636.370128][ T5941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 636.400395][ T5941] usb 5-1: Product: syz [ 636.419473][ T5941] usb 5-1: Manufacturer: syz [ 636.441113][ T5941] usb 5-1: SerialNumber: syz [ 636.477262][ T5941] usb 5-1: config 0 descriptor?? [ 636.905051][ T5941] usb 2-1: USB disconnect, device number 63 [ 638.319409][ T5941] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 638.327483][ T5934] usb 5-1: USB disconnect, device number 64 [ 638.539075][ T5941] usb 4-1: Using ep0 maxpacket: 8 [ 638.568737][ T5941] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 638.615337][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.628658][ T5941] usb 4-1: Product: syz [ 638.644711][ T5941] usb 4-1: Manufacturer: syz [ 638.667369][ T5941] usb 4-1: SerialNumber: syz [ 638.696258][ T5941] usb 4-1: config 0 descriptor?? [ 638.718219][ T5941] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 638.730610][ T5934] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 638.902985][ T5934] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 638.931462][ T5934] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 638.953282][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 638.977819][ T5934] usb 5-1: Product: syz [ 638.998097][ T5934] usb 5-1: Manufacturer: syz [ 639.026010][ T5934] usb 5-1: SerialNumber: syz [ 639.311724][ T5934] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 65 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 639.570894][ T5934] usb 5-1: USB disconnect, device number 65 [ 639.602901][ T5934] usblp0: removed [ 640.429304][ T5941] gspca_sonixj: i2c_w8 err -71 [ 640.458967][ T5941] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 640.486808][ T5941] usb 4-1: USB disconnect, device number 51 [ 641.186797][T12260] loop5: detected capacity change from 0 to 40427 [ 641.208448][T12260] F2FS-fs (loop5): heap/no_heap options were deprecated [ 641.215690][T12260] F2FS-fs (loop5): build fault injection rate: 19 [ 641.222399][T12260] F2FS-fs (loop5): build fault injection type: 0x3bfe8c [ 641.241120][T12260] F2FS-fs (loop5): invalid crc value [ 641.259899][T12260] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 641.275223][T12254] loop4: detected capacity change from 0 to 32768 [ 641.324791][T12260] F2FS-fs (loop5): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 641.354818][T12270] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1971'. [ 641.375620][T12260] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 641.458893][T12254] JBD2: Ignoring recovery information on journal [ 641.638067][ C0] F2FS-fs (loop5): inject write IO error in f2fs_write_end_io of blk_update_request+0x5eb/0xe70 [ 641.648998][ C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 641.649030][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 641.649045][ C0] Call Trace: [ 641.649055][ C0] [ 641.649065][ C0] dump_stack_lvl+0x189/0x250 [ 641.649099][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.649132][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.649159][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.649190][ C0] ? __pfx_queue_work_on+0x10/0x10 [ 641.649222][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.649250][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 641.649292][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 641.649335][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.649364][ C0] ? f2fs_hw_is_readonly+0x39b/0x470 [ 641.649412][ C0] f2fs_handle_critical_error+0x37c/0x540 [ 641.649445][ C0] f2fs_write_end_io+0x495/0x810 [ 641.649473][ C0] ? blkg_put+0x22/0x240 [ 641.649528][ C0] blk_update_request+0x5eb/0xe70 [ 641.649569][ C0] blk_mq_end_request+0x3e/0x70 [ 641.649594][ C0] blk_flush_complete_seq+0x678/0xcc0 [ 641.649638][ C0] flush_end_io+0xbaf/0xe60 [ 641.649679][ C0] __blk_mq_end_request+0x426/0x600 [ 641.649710][ C0] blk_done_softirq+0x10a/0x160 [ 641.649751][ C0] handle_softirqs+0x286/0x870 [ 641.649779][ C0] ? schedule+0x165/0x360 [ 641.649806][ C0] ? run_ksoftirqd+0x9b/0x100 [ 641.649847][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 641.649880][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 641.649908][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.649942][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 641.649969][ C0] run_ksoftirqd+0x9b/0x100 [ 641.650003][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 641.650045][ C0] smpboot_thread_fn+0x542/0xa60 [ 641.650077][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 641.650117][ C0] kthread+0x711/0x8a0 [ 641.650158][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 641.650188][ C0] ? __pfx_kthread+0x10/0x10 [ 641.650222][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.650256][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 641.650295][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 641.650324][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 641.650349][ C0] ? __pfx_kthread+0x10/0x10 [ 641.650387][ C0] ret_from_fork+0x3fc/0x770 [ 641.650417][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 641.650451][ C0] ? __switch_to_asm+0x39/0x70 [ 641.650483][ C0] ? __switch_to_asm+0x33/0x70 [ 641.650516][ C0] ? __pfx_kthread+0x10/0x10 [ 641.650553][ C0] ret_from_fork_asm+0x1a/0x30 [ 641.650612][ C0] [ 641.650621][ C0] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 641.919046][ T5846] F2FS-fs (loop5): do_checkpoint failed err:-5, stop checkpoint [ 642.007768][T12254] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 642.059062][ T5934] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 642.215201][ T5934] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 642.237876][ T5934] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 642.247605][ T5934] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 642.331638][ T5934] usb 2-1: Product: syz [ 642.335828][ T5934] usb 2-1: Manufacturer: syz [ 642.342654][ T5861] ocfs2: Unmounting device (7,4) on (node local) [ 642.351532][ T5934] usb 2-1: SerialNumber: syz [ 642.594275][ T5934] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 64 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 642.857750][ T5934] usb 2-1: USB disconnect, device number 64 [ 642.896695][ T5934] usblp0: removed [ 643.515733][ T7074] Bluetooth: hci7: Frame reassembly failed (-84) [ 644.024122][T12317] loop6: detected capacity change from 0 to 512 [ 644.437348][T12328] input: syz1 as /devices/virtual/input/input33 [ 644.687350][T12328] loop5: detected capacity change from 0 to 32768 [ 644.747056][T12328] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1992 (12328) [ 644.769568][T12328] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 644.779768][T12328] BTRFS info (device loop5): using sha256 (sha256-x86_64) checksum algorithm [ 644.788556][T12328] BTRFS info (device loop5): disk space caching is enabled [ 644.796029][T12328] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 644.976935][T12328] BTRFS info (device loop5): rebuilding free space tree [ 645.002761][T12328] BTRFS info (device loop5): disabling free space tree [ 645.009782][T12328] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 645.019659][T12328] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 645.059255][T10805] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 645.240384][T10805] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 645.303650][T10805] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 645.366492][T10805] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 645.416202][T10805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.459335][T12325] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 645.499869][ T5846] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 645.548096][T10805] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 645.589077][T11178] Bluetooth: hci7: command 0x1003 tx timeout [ 645.595589][ T51] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 645.833327][T10805] usb 2-1: USB disconnect, device number 65 [ 646.549859][T12369] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1997'. [ 646.625183][ T51] Bluetooth: hci0: Invalid connection link type handle 0x00c9 [ 646.848936][T10805] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 647.046670][T10805] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 647.167737][T10805] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 647.224307][T10805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 647.253423][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 647.266597][T10805] usb 6-1: Product: syz [ 647.285683][T12391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2005'. [ 647.298060][T10805] usb 6-1: Manufacturer: syz [ 647.315656][T10805] usb 6-1: SerialNumber: syz [ 647.553451][T10805] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 647.836549][T10805] usb 6-1: USB disconnect, device number 43 [ 647.932475][T10805] usblp0: removed [ 648.509387][T12416] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2011'. [ 650.910385][ T5941] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 651.100889][ T5941] usb 5-1: config 0 has no interfaces? [ 651.148719][ T5941] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 651.197807][ T5941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.281004][ T5941] usb 5-1: config 0 descriptor?? [ 651.598656][T10805] usb 5-1: USB disconnect, device number 66 [ 651.889152][ T5941] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 652.062047][ T5941] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 652.101978][ T5941] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 652.137494][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 652.147115][ T5941] usb 4-1: Product: syz [ 652.175394][ T5941] usb 4-1: Manufacturer: syz [ 652.186202][ T5941] usb 4-1: SerialNumber: syz [ 652.238421][T12458] overlayfs: workdir and upperdir must reside under the same mount [ 652.427579][ T5941] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 52 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 652.590983][T12471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2028'. [ 652.704925][ T5941] usb 4-1: USB disconnect, device number 52 [ 652.729691][ T5941] usblp0: removed [ 653.993175][T12501] loop5: detected capacity change from 0 to 64 [ 654.149020][T10805] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 654.314398][T10805] usb 2-1: config 0 has no interfaces? [ 654.334648][T10805] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 654.396180][T10805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.527888][T10805] usb 2-1: config 0 descriptor?? [ 655.122579][ T5934] usb 2-1: USB disconnect, device number 66 [ 656.119298][T12526] netlink: 'syz.5.2046': attribute type 4 has an invalid length. [ 656.275935][T12526] netlink: 'syz.5.2046': attribute type 4 has an invalid length. [ 656.729851][ T5934] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 656.865982][T12537] loop3: detected capacity change from 0 to 4096 [ 656.974967][T10806] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 657.003477][ T5934] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 657.023408][ T5934] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 657.035305][ T5934] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 657.060417][ T5934] usb 5-1: Product: syz [ 657.086876][ T5934] usb 5-1: Manufacturer: syz [ 657.099094][ T5934] usb 5-1: SerialNumber: syz [ 657.254122][T10806] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 657.345919][T10806] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 657.368709][ T5934] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 657.400036][T12557] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2055'. [ 657.471433][T10806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.553545][T10806] usb 6-1: config 0 descriptor?? [ 657.565476][T10806] pwc: Askey VC010 type 2 USB webcam detected. [ 657.623978][ T5941] usb 5-1: USB disconnect, device number 67 [ 657.700423][ T5941] usblp0: removed [ 657.768103][T10806] pwc: send_video_command error -71 [ 657.806205][T10806] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 657.848700][T10806] Philips webcam 6-1:0.0: probe with driver Philips webcam failed with error -71 [ 658.080248][T12567] loop6: detected capacity change from 0 to 32768 [ 658.089138][T12567] bcachefs (/dev/loop6): error reading superblock: error opening /dev/loop6: EACCES [ 658.098577][T12567] bcachefs: bch2_fs_get_tree() error: EACCES [ 658.206366][T10806] usb 6-1: USB disconnect, device number 44 [ 658.505958][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2058'. [ 658.578922][T10806] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 658.791927][T10806] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 658.842814][T10806] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 658.880403][T10806] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.973109][T10806] usb 6-1: config 0 descriptor?? [ 659.021269][T10806] pwc: Askey VC010 type 2 USB webcam detected. [ 659.047676][T12585] netlink: 'syz.4.2064': attribute type 4 has an invalid length. [ 659.108719][T12585] netlink: 'syz.4.2064': attribute type 4 has an invalid length. [ 659.391860][T10806] pwc: recv_control_msg error -32 req 02 val 2b00 [ 659.424844][T10806] pwc: recv_control_msg error -32 req 02 val 2700 [ 659.483114][T10806] pwc: recv_control_msg error -32 req 02 val 2c00 [ 659.519644][T10806] pwc: recv_control_msg error -32 req 04 val 1000 [ 659.549749][T10806] pwc: recv_control_msg error -32 req 04 val 1300 [ 659.579672][T10806] pwc: recv_control_msg error -32 req 04 val 1400 [ 659.608290][T10806] pwc: recv_control_msg error -32 req 02 val 2000 [ 659.628628][T10806] pwc: recv_control_msg error -32 req 02 val 2100 [ 659.674414][T10806] pwc: recv_control_msg error -32 req 04 val 1500 [ 659.721946][T10806] pwc: recv_control_msg error -32 req 02 val 2500 [ 659.750195][T10806] pwc: recv_control_msg error -32 req 02 val 2400 [ 659.783940][T10806] pwc: recv_control_msg error -32 req 02 val 2600 [ 659.813857][T10806] pwc: recv_control_msg error -32 req 02 val 2900 [ 659.842122][T10806] pwc: recv_control_msg error -32 req 02 val 2800 [ 660.073209][T10806] pwc: recv_control_msg error -71 req 04 val 1200 [ 660.128536][T10806] pwc: Registered as video103. [ 660.165924][T10806] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input34 [ 660.291806][T10806] usb 6-1: USB disconnect, device number 45 [ 660.309019][T12617] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2073'. [ 660.969041][T12617] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2073'. [ 662.409222][T10806] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 662.629249][T10806] usb 6-1: Using ep0 maxpacket: 8 [ 662.652655][T10806] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 662.663824][T10806] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.689667][T10806] usb 6-1: Product: syz [ 662.693847][T10806] usb 6-1: Manufacturer: syz [ 662.723477][T10806] usb 6-1: SerialNumber: syz [ 662.773821][T10806] usb 6-1: config 0 descriptor?? [ 662.820897][T10806] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 663.748994][T10808] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 664.356896][T10808] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 664.468898][T10806] gspca_sonixj: i2c_w8 err -71 [ 664.991226][T10806] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 665.918325][T10808] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 665.929679][T10806] usb 6-1: USB disconnect, device number 46 [ 665.969626][T10808] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 665.982669][T10808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.044167][T12661] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 666.193203][T10808] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 666.303063][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2088'. [ 666.405512][T12673] fuse: Bad value for 'fd' [ 666.471665][ T5920] usb 2-1: USB disconnect, device number 67 [ 667.034172][T12687] loop6: detected capacity change from 0 to 32768 [ 667.470388][T12694] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2099'. [ 667.852779][ T5941] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 669.058920][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 669.137523][ T5941] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 669.199397][T12689] loop4: detected capacity change from 0 to 32768 [ 669.228283][T12689] JBD2: Ignoring recovery information on journal [ 669.240766][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.334576][T12689] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 669.403177][ T5941] usb 2-1: config 0 descriptor?? [ 669.435696][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 669.442133][ T5920] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 669.566912][T12708] input: syz1 as /devices/virtual/input/input35 [ 669.833024][T12708] loop3: detected capacity change from 0 to 32768 [ 669.840979][ T5920] usb 6-1: Using ep0 maxpacket: 8 [ 669.860496][T12708] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2103 (12708) [ 669.887932][ T5920] usb 6-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 669.899378][T12708] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 669.911614][T12708] BTRFS info (device loop3): using sha256 (sha256-x86_64) checksum algorithm [ 669.920500][T12708] BTRFS info (device loop3): disk space caching is enabled [ 669.927706][T12708] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 669.954131][ T5941] pwc: send_video_command error -71 [ 669.978375][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.993450][ T5941] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 670.040026][ T5861] ocfs2: Unmounting device (7,4) on (node local) [ 670.051605][ T5920] usb 6-1: Product: syz [ 670.056164][ T5920] usb 6-1: Manufacturer: syz [ 670.078716][ T5941] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 670.106519][ T5920] usb 6-1: SerialNumber: syz [ 670.155195][ T5920] usb 6-1: config 0 descriptor?? [ 670.162893][ T5941] usb 2-1: USB disconnect, device number 68 [ 670.199193][T12708] BTRFS info (device loop3): rebuilding free space tree [ 670.215041][T12708] BTRFS info (device loop3): disabling free space tree [ 670.222868][T12708] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 670.232537][T12708] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 670.248259][ T5920] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 670.467355][ T5853] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 670.569034][ T5941] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 670.790559][ T5941] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 670.828538][ T5941] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 670.886882][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.931790][ T5941] usb 2-1: config 0 descriptor?? [ 671.291789][ T5941] pwc: Askey VC010 type 2 USB webcam detected. [ 671.468917][ T5941] pwc: send_video_command error -71 [ 671.502256][ T5941] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 671.558924][ T5941] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71 [ 672.274702][ T5941] usb 2-1: USB disconnect, device number 69 [ 672.698885][ T5920] gspca_sonixj: i2c_w8 err -71 [ 672.734330][ T5920] sonixj 6-1:0.0: probe with driver sonixj failed with error -71 [ 672.850433][ T5920] usb 6-1: USB disconnect, device number 47 [ 674.230145][T12771] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2117'. [ 674.284470][T12771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 674.498178][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2118'. [ 674.879558][ T5920] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 675.049265][ T5920] usb 4-1: Using ep0 maxpacket: 32 [ 675.166326][ T5920] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 675.175815][ T5934] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 675.197810][ T5920] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.235521][ T5920] usb 4-1: Product: syz [ 675.259468][ T5920] usb 4-1: Manufacturer: syz [ 675.264085][ T5920] usb 4-1: SerialNumber: syz [ 675.313864][ T5920] usb 4-1: config 0 descriptor?? [ 675.367547][ T5920] usb 4-1: selecting invalid altsetting 3 [ 675.392198][ T5934] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 675.415945][ T5920] comedi comedi5: could not set alternate setting 3 in high speed [ 675.450443][ T5934] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 675.459723][ T5920] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 675.498297][ T5934] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.545070][ T5920] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 675.563280][ T5934] usb 5-1: config 0 descriptor?? [ 675.589815][ T5934] pwc: Askey VC010 type 2 USB webcam detected. [ 675.596914][ T5920] usb 4-1: USB disconnect, device number 53 [ 675.785655][ T5934] pwc: send_video_command error -71 [ 675.803937][ T5934] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 675.842113][ T5934] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 675.884186][ T5934] usb 5-1: USB disconnect, device number 68 [ 676.629009][ T5934] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 677.922094][ T5934] usb 5-1: device descriptor read/all, error -71 [ 678.279258][T10806] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 678.569038][T10806] usb 4-1: Using ep0 maxpacket: 8 [ 678.581687][T10806] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 678.593797][T10806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.606398][T10806] usb 4-1: Product: syz [ 678.620926][T10806] usb 4-1: Manufacturer: syz [ 678.648481][T10806] usb 4-1: SerialNumber: syz [ 678.684305][T10806] usb 4-1: config 0 descriptor?? [ 678.725553][T10806] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 678.888246][T12832] netlink: 72 bytes leftover after parsing attributes in process `syz.5.2136'. [ 678.935665][T12832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 679.088818][ C0] ================================================================== [ 679.096909][ C0] BUG: KASAN: vmalloc-out-of-bounds in copy_play_buf+0x528/0xa70 [ 679.104637][ C0] Write of size 128 at addr ffffc9001ecc1000 by task swapper/0/0 [ 679.112344][ C0] [ 679.114662][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 679.114690][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.114702][ C0] Call Trace: [ 679.114709][ C0] [ 679.114717][ C0] dump_stack_lvl+0x189/0x250 [ 679.114742][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.114774][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.114803][ C0] ? __pfx__printk+0x10/0x10 [ 679.114836][ C0] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 679.114867][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.114888][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 679.114920][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.114948][ C0] ? __virt_addr_valid+0x4a5/0x5c0 [ 679.114979][ C0] print_report+0xca/0x230 [ 679.114998][ C0] ? copy_play_buf+0x528/0xa70 [ 679.115021][ C0] kasan_report+0x118/0x150 [ 679.115049][ C0] ? rcu_core+0xc34/0x1710 [ 679.115078][ C0] ? copy_play_buf+0x528/0xa70 [ 679.115114][ C0] kasan_check_range+0x2b0/0x2c0 [ 679.115145][ C0] ? copy_play_buf+0x528/0xa70 [ 679.115169][ C0] __asan_memcpy+0x40/0x70 [ 679.115192][ C0] copy_play_buf+0x528/0xa70 [ 679.115239][ C0] loopback_jiffies_timer_pos_update+0xc0f/0x1350 [ 679.115306][ C0] loopback_jiffies_timer_function+0x62/0x250 [ 679.115335][ C0] call_timer_fn+0x17e/0x5f0 [ 679.115359][ C0] ? __pfx_loopback_jiffies_timer_function+0x10/0x10 [ 679.115394][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.115421][ C0] ? call_timer_fn+0xbe/0x5f0 [ 679.115443][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 679.115462][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.115485][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.115521][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.115548][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.115572][ C0] ? __pfx_loopback_jiffies_timer_function+0x10/0x10 [ 679.115603][ C0] __run_timer_base+0x61a/0x860 [ 679.115640][ C0] ? ktime_get+0x3e/0x1f0 [ 679.115682][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 679.115715][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 679.115748][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.115774][ C0] run_timer_softirq+0xb7/0x180 [ 679.115808][ C0] handle_softirqs+0x286/0x870 [ 679.115839][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 679.115868][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 679.115893][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.115915][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 679.115947][ C0] __irq_exit_rcu+0xca/0x1f0 [ 679.115976][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 679.116006][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.116033][ C0] irq_exit_rcu+0x9/0x30 [ 679.116052][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 679.116070][ C0] [ 679.116076][ C0] [ 679.116084][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 679.116112][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 679.116136][ C0] Code: 3e bc a2 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 1a 00 f3 0f 1e fa fb f4 13 bc a2 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 679.116156][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 679.116177][ C0] RAX: 1031fab533705800 RBX: ffffffff81976a48 RCX: 1031fab533705800 [ 679.116192][ C0] RDX: 0000000000000001 RSI: ffffffff8d996134 RDI: ffffffff8be28c00 [ 679.116205][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 679.116219][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1d6f0 [ 679.116235][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 679.116255][ C0] ? do_idle+0x1e8/0x510 [ 679.116289][ C0] default_idle+0x13/0x20 [ 679.116316][ C0] default_idle_call+0x74/0xb0 [ 679.116340][ C0] do_idle+0x1e8/0x510 [ 679.116364][ C0] ? __pfx_do_idle+0x10/0x10 [ 679.116399][ C0] cpu_startup_entry+0x44/0x60 [ 679.116428][ C0] rest_init+0x2de/0x300 [ 679.116458][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 679.116481][ C0] start_kernel+0x47d/0x500 [ 679.116506][ C0] x86_64_start_reservations+0x24/0x30 [ 679.116539][ C0] x86_64_start_kernel+0x143/0x1c0 [ 679.116579][ C0] common_startup_64+0x13e/0x147 [ 679.116625][ C0] [ 679.116633][ C0] [ 679.525691][ C0] The buggy address ffffc9001ecc1000 belongs to a vmalloc virtual mapping [ 679.530122][T10806] gspca_sonixj: reg_r err -32 [ 679.534162][ C0] Memory state around the buggy address: [ 679.534178][ C0] ffffc9001ecc0f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 679.534196][ C0] ffffc9001ecc0f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 679.534214][ C0] >ffffc9001ecc1000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 679.534229][ C0] ^ [ 679.534242][ C0] ffffc9001ecc1080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 679.534259][ C0] ffffc9001ecc1100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 679.534274][ C0] ================================================================== [ 679.534303][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 679.534321][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc6-syzkaller-00121-g6832a9317eee #0 PREEMPT(full) [ 679.534356][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 679.534372][ C0] Call Trace: [ 679.534382][ C0] [ 679.534393][ C0] dump_stack_lvl+0x99/0x250 [ 679.534427][ C0] ? __asan_memcpy+0x40/0x70 [ 679.534458][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 679.534489][ C0] ? __pfx__printk+0x10/0x10 [ 679.534529][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.534562][ C0] panic+0x2db/0x790 [ 679.534595][ C0] ? __pfx_panic+0x10/0x10 [ 679.534622][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.534655][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.534684][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 679.534723][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.534753][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 679.534795][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 679.534840][ C0] ? copy_play_buf+0x528/0xa70 [ 679.534873][ C0] check_panic_on_warn+0x89/0xb0 [ 679.534913][ C0] ? copy_play_buf+0x528/0xa70 [ 679.534946][ C0] end_report+0x78/0x160 [ 679.534983][ C0] kasan_report+0x129/0x150 [ 679.535018][ C0] ? rcu_core+0xc34/0x1710 [ 679.535046][ C0] ? copy_play_buf+0x528/0xa70 [ 679.535085][ C0] kasan_check_range+0x2b0/0x2c0 [ 679.535123][ C0] ? copy_play_buf+0x528/0xa70 [ 679.535157][ C0] __asan_memcpy+0x40/0x70 [ 679.535188][ C0] copy_play_buf+0x528/0xa70 [ 679.535237][ C0] loopback_jiffies_timer_pos_update+0xc0f/0x1350 [ 679.535284][ C0] loopback_jiffies_timer_function+0x62/0x250 [ 679.535326][ C0] call_timer_fn+0x17e/0x5f0 [ 679.535371][ C0] ? __pfx_loopback_jiffies_timer_function+0x10/0x10 [ 679.535408][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.535436][ C0] ? call_timer_fn+0xbe/0x5f0 [ 679.535461][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 679.535488][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.535520][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 679.535558][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.535587][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 679.535612][ C0] ? __pfx_loopback_jiffies_timer_function+0x10/0x10 [ 679.535650][ C0] __run_timer_base+0x61a/0x860 [ 679.535687][ C0] ? ktime_get+0x3e/0x1f0 [ 679.535727][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 679.535764][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 679.535803][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.535838][ C0] run_timer_softirq+0xb7/0x180 [ 679.535877][ C0] handle_softirqs+0x286/0x870 [ 679.535908][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 679.535940][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 679.535971][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.536000][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 679.536040][ C0] __irq_exit_rcu+0xca/0x1f0 [ 679.536069][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 679.536101][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 679.536132][ C0] irq_exit_rcu+0x9/0x30 [ 679.536158][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 679.536184][ C0] [ 679.536193][ C0] [ 679.536204][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 679.536231][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 679.536258][ C0] Code: 3e bc a2 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 ad 1a 00 f3 0f 1e fa fb f4 13 bc a2 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 679.536279][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c2 [ 679.536303][ C0] RAX: 1031fab533705800 RBX: ffffffff81976a48 RCX: 1031fab533705800 [ 679.536323][ C0] RDX: 0000000000000001 RSI: ffffffff8d996134 RDI: ffffffff8be28c00 [ 679.536342][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 679.536368][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa1d6f0 [ 679.536388][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 679.536408][ C0] ? do_idle+0x1e8/0x510 [ 679.536443][ C0] default_idle+0x13/0x20 [ 679.536472][ C0] default_idle_call+0x74/0xb0 [ 679.536503][ C0] do_idle+0x1e8/0x510 [ 679.536536][ C0] ? __pfx_do_idle+0x10/0x10 [ 679.536575][ C0] cpu_startup_entry+0x44/0x60 [ 679.536608][ C0] rest_init+0x2de/0x300 [ 679.536639][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 679.536668][ C0] start_kernel+0x47d/0x500 [ 679.536704][ C0] x86_64_start_reservations+0x24/0x30 [ 679.536744][ C0] x86_64_start_kernel+0x143/0x1c0 [ 679.536784][ C0] common_startup_64+0x13e/0x147 [ 679.536829][ C0] [ 679.540135][ C0] Kernel Offset: disabled