last executing test programs: 9.177225431s ago: executing program 1 (id=965): r0 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x81, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0}) 9.176551201s ago: executing program 3 (id=966): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 8.598973018s ago: executing program 3 (id=968): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d3750820c80a2103be6f00"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x3a, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) close(0x3) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x40044160, 0x3) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x158, 0x25, 0x148, 0x158, 0x60, 0x2a0, 0x2a8, 0x2a8, 0x2a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x158, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x32, 0x0, 0x9, 0x0, 0x80ffffff, 0xffffffff, 0x7}}}, @common=@unspec=@realm={{0x30}, {0x3, 0x1, 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, 0x8, 0x10, [0x17, 0x33, 0x1a, 0x40e, 0x1f, 0x5, 0x34, 0x5, 0x3, 0x4, 0x1c, 0x14, 0x18, 0x20, 0x3b, 0x20], 0x0, 0x3, 0x4}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x398) 6.550587013s ago: executing program 2 (id=977): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) link(&(0x7f0000000000)='./file1\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0xfffe, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000001300)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a"], 0x64}}, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6f7665727269113cf3019abb6465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030362c636865636b3d7374725980304ab7006895f75af24c529053fd6963742c756e686964652c757466382c6f76657272696465726f636b7065726d2c73686f776173736f632c73657373696f6e3d3078303030303030303030303030303035302c00"], 0x1, 0x698, &(0x7f0000000a80)="$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") fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x100) 5.621977757s ago: executing program 1 (id=979): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.578732011s ago: executing program 2 (id=980): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r4, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.524113485s ago: executing program 3 (id=981): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101", @ANYRESHEX=0x0], 0x0) 5.322346721s ago: executing program 4 (id=982): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x9d315000) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x230040, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) r5 = socket(0xa, 0x3, 0xff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000009d43cd55d55a329c811e5afc693bb25e8e72a637ee196dc63b08a5c5ca73d2f3775b905608686cf05f856a137491638c84bab14e862186013d1e126be0ce1988220d5aa9351d830725df59de986749564123138dc763a50bc861dc40ae95f8c59b79f8489621ac4aac658c543d7707", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100"/28], 0x50) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x2, &(0x7f0000000840)=ANY=[@ANYRES8=r3, @ANYBLOB="6f280b6927d94a8541b3c6ef6d6d2874ac839b32ca123e8faf7ffcaa22eb53834b6177a371d90156ae60dd852c49d8ced675e9aa728592d28b13c6d3651cc5ad5d74c45e6ca44e3e3a715d4d1729a7239e0fe175bdeb60c601108d70f7e8bad6335677ae546b317585a89f43ade80e8f42a8fbbc1f0d9d894040b3056f89fdc20ff50ea8d5ab57bfe7eff1c9aac8fe47c47a3864aac64b3581f26721d3cc6adcc9083784ecad6599ebef25d3f62a1f07", @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x10) close(r6) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000200)=0x7, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x40010020) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c000000000120010000000000000000000000000000fe8000000000000000000000000000aaff"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="5000000002060500000006000000050005000200000005000400000000000900020073797b31000000000c000300686173683a69700000000000000000000000000000000097d4f066e287807725ba4295094c67c0d561665e0fb33a68bed6e446240b8c354e60cf56b6d71ce9c42dbd071687c729ce07858e11dc11328c97626590139a8c1780498b2f9585407652ccabea53ff200b3b", @ANYRES8=0x0, @ANYBLOB="a08d41de7264a35fa959af05d7008541450a81d18c639e765f5f697f408923db97"], 0x50}}, 0x80004) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wg0\x00'}) socket$inet6(0xa, 0x2, 0xfffffffd) pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r9, 0x5761, &(0x7f0000000100)=ANY=[@ANYRES8=0x0]) 5.184115243s ago: executing program 4 (id=984): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 5.163358524s ago: executing program 4 (id=985): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(&(0x7f0000000140), 0x7f, 0x10000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a707001d0000030640710a069d317ebbaaa6", 0x16}], 0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 4.929882783s ago: executing program 2 (id=986): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') read$FUSE(r4, &(0x7f0000002640)={0x2020}, 0x2020) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000640)="58104053af45d43ac86fac32e9896a21b244f2282a91327f763641d55a372a9ab104fd4c31abfb4148ce7826605fe632c6cc31e66f4706030aaa0320d92b0b8b41fd21ee32f2e3d86cda67dd197273e2e0381241a4220e", 0x57, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x32}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r5, 0x1) recvmmsg(r5, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3f, &(0x7f0000000000)=0x8cf, 0x4) getsockopt$SO_TIMESTAMP(r6, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x29) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r7 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00', 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0xffff, 0x0, 'nq\x00'}, 0x2c) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r10, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 4.893025046s ago: executing program 1 (id=987): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') read$FUSE(r0, &(0x7f0000002640)={0x2020}, 0x2020) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x32}, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000000)=0x8cf, 0x4) r1 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00', 0x11}, 0x2c) 4.194933362s ago: executing program 4 (id=988): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 4.194294202s ago: executing program 1 (id=989): r0 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x92, 0x3, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{}, [@mixer_unit={0x6, 0x24, 0x4, 0x0, 0x0, 'R'}, @selector_unit={0x7, 0x24, 0x5, 0x0, 0x0, "53f1"}, @selector_unit={0xb, 0x24, 0x5, 0x0, 0x0, "133b9bda531c"}, @selector_unit={0x9, 0x24, 0x5, 0x1, 0x5, "96efc359"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7f, 0x2, 0x0, 0x1, "8b7e", "8e"}, @as_header={0x7}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81}}}}}}}]}}, 0x0) syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000001040)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000002080)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000b40)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000a00)={0x20, 0x81, 0x1, 'q'}, 0x0, 0x0, 0x0, 0x0}) 4.073989262s ago: executing program 2 (id=991): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141411e000000100000000180000000000001c0000000007000000440682"], 0x38}, 0x20002880) 3.966215671s ago: executing program 2 (id=992): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') syz_usb_connect(0x0, 0x5a, &(0x7f00000000c0)=ANY=[], 0x0) 3.187584274s ago: executing program 4 (id=993): syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f"], 0x0) r0 = socket(0x2, 0x80805, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r4, 0x3}, &(0x7f0000000240)=0x8) 3.096395211s ago: executing program 0 (id=994): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3583c93cfe21016bfcd43d412da630ffffff9900000000000200", @ANYRES32=0x0, @ANYBLOB="03150000000000002c0012800c0001006d6163766c616e001c00028008000700050000000800030002000000080001001000000008000500", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x68, 0x14, 0x0, 0x70bd28, 0x25dfdbfb, {0x1a, 0x10}, [@INET_DIAG_REQ_BYTECODE={0x54, 0x1, "8f96fac794d1b28b5dfa7aa83107afa60aee8f69bb30c7bc617081b3c38475e91c592ca9698ace0c874e5c8950c41e2b6fcb664b40528c4180e376148101031d406ef2d9c5c1e3c48a1014da64f0cd1e"}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x54) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000003280)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000000)=ANY=[@ANYBLOB="706172744563783030303030303030303031306666666693756d61736b3d30303030303030303030303030303030313137373737372c636f6465706167003d63703836312c696f636861727365743d63703933322c00"], 0x4, 0x343, &(0x7f0000000280)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30"], 0xe0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x840701, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@errors_continue}, {@resgid}, {@nolazytime}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8}}]}, 0x0, 0x44a, &(0x7f0000000400)="$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") r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) bind$rxrpc(r7, &(0x7f0000000b00)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r5, 0x3}}, 0x18) 2.889513618s ago: executing program 0 (id=995): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) 2.843725971s ago: executing program 0 (id=996): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x60, r4, 0xb7a006d1969b963b, 0x1, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x44, 0x33, @probe_request={{{}, {}, @device_a, @device_b}, @val, @val, @void, @val={0x2d, 0x1a, {0x8802, 0x3, 0x6, 0x0, {0x6, 0xd, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x3, 0x1}, 0x1, 0x95ce, 0x9}}, @val={0x72, 0x6}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8011}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.372952029s ago: executing program 3 (id=997): ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 2.291887606s ago: executing program 0 (id=998): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_virt_wifi\x00', 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r1 = socket$inet6(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='neigh_update\x00', r2}, 0x10) sendto$inet6(r1, &(0x7f00000000c0)="900000001c001f4d154a817393278bff0a80a578020000000104740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000760700c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000240), 0x8080, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000000)="be39", 0x2}], 0x1, &(0x7f0000000c80)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0x18}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f00000000c0)="1c0000001d005f0214fffffffffffff8070000000d00000000000600", 0x1c) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$mouse(&(0x7f0000000140), 0x7f, 0x10000) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x8, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r5, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r5, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r5, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a707001d0000030640710a069d317ebbaaa6", 0x16}], 0x1, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) 2.140067628s ago: executing program 0 (id=999): syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x1100042, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646f74732c6572726f72733d636f6e74696e7565f7ff6f646f74732c6e66693d7374616c655f72772c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e6f646f74732c636865636b3d72656c696dff9e29f84b75ff06eb2da803ebfba389185c4afd8f0db09b4677adee848ac5977d106caa59e9101245b013b06f1c147b6b48c8d398404d164e446d50e8977eda2a096bbe3e273be954b23d08ebff6da03f9916b3f65787d9faa4f1ca45db64e37cef36c126d18d4c9bbd68b8e1b6fd44321e3afc495fe39f38126800"/223], 0x1, 0x251, &(0x7f0000000880)="$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") mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x400, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCDARP(r0, 0x8955, &(0x7f00000004c0)={{0x2, 0x4e23, @broadcast}, {0x0, @random="9705000000e8"}, 0x6a, {0x2, 0x0, @broadcast}}) r1 = socket(0x10, 0x2, 0x0) write(r1, &(0x7f0000000800)="240000001e005f031420000000000000000000000100000000000800080008c013000000", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket(0x2b, 0x80801, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = inotify_init() inotify_rm_watch(r6, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000000c0)="b129f436911745a7b63b7ce04501c59d", 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x8, &(0x7f0000000140)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r7}, 0x18) 1.632198989s ago: executing program 3 (id=1000): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = socket$kcm(0x10, 0x2, 0x4) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = getpid() syz_pidfd_open(r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x73656000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$igmp(0x2, 0x3, 0x2) mkdir(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r6 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f0000000140)={0x3, 0xa, 0x2}) ioctl$VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x0, 0xa, 0x0, 0x0, 0x6}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r7, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240c0850}, 0x8000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) sendmsg$inet(r0, 0x0, 0x0) 1.208640703s ago: executing program 0 (id=1001): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() timer_create(0x6, 0x0, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@deltfilter={0x4c, 0x2d, 0x2, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0x8}, {0x7, 0xd}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0xb, 0xd}}, @TCA_RATE={0x6, 0x5, {0x7f, 0xf}}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x805}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000033c0)=[{{&(0x7f0000000440)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/146, 0x92}, {&(0x7f0000000640)=""/119, 0x77}, {&(0x7f00000006c0)=""/217, 0xd9}, {&(0x7f00000007c0)=""/163, 0xa3}, {&(0x7f0000003580)=""/33, 0x21}], 0x6, &(0x7f0000000d00)=""/215, 0xd7}, 0x7fffffff}, {{&(0x7f0000000a00)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a80)=""/186, 0xba}], 0x1}, 0x3763f7b4}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b80)=""/19, 0x13}, {&(0x7f0000000bc0)=""/106, 0x6a}, {&(0x7f0000000c40)=""/107, 0x6b}], 0x3}, 0x9}, {{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000003700)=""/223, 0xdf}, {&(0x7f00000012c0)=""/251, 0xfb}, {&(0x7f0000000e00)=""/23, 0x17}], 0x3, &(0x7f0000001400)=""/182, 0xb6}, 0xb9}, {{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000014c0)=""/7, 0x7}, {&(0x7f0000001500)=""/26, 0x1a}, {&(0x7f0000001540)=""/114, 0x72}, {&(0x7f00000015c0)=""/77, 0x4d}, {&(0x7f0000001640)=""/222, 0xde}, {&(0x7f0000001740)=""/4, 0x4}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x7, &(0x7f0000002800)=""/207, 0xcf}, 0x6}, {{&(0x7f0000002900)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003080)=[{&(0x7f0000002980)=""/39, 0x27}, {&(0x7f00000029c0)=""/98, 0x62}, {&(0x7f0000002a40)=""/121, 0x79}, {&(0x7f0000002ac0)=""/150, 0x96}, {&(0x7f0000002b80)=""/182, 0xb6}, {&(0x7f0000002c40)=""/238, 0xee}, {&(0x7f0000002d40)=""/21, 0x15}, {&(0x7f0000002d80)=""/209, 0xd1}, {&(0x7f0000002e80)=""/219, 0xdb}, {&(0x7f0000002f80)=""/250, 0xfa}], 0xa, &(0x7f0000003140)=""/179, 0xb3}}, {{&(0x7f0000003200)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000003380)=[{&(0x7f0000003280)=""/250, 0xfa}], 0x1}, 0x2}], 0x7, 0x40002000, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000180)) sendto$inet6(r5, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) add_key$fscrypt_v1(0x0, &(0x7f0000000100)={'fscrypt:', @auto=[0x66, 0x63, 0x39, 0x38, 0x34, 0x65, 0x62, 0x65, 0x36, 0x38, 0x65, 0x63, 0x63, 0x0, 0x33]}, 0x0, 0x0, 0xffffffffffffffff) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="3000000001040101000000000000000000050a00020000a7f5a46d2900000500000000050001000100000008000340000000040000867852a66ffe83bf83c4fd57e17abb6acdeeb3c01e706e7e39ea"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000000)=0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x1810754, &(0x7f0000003640)={[{@jqfmt_vfsold}, {@errors_continue}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10}}, {@usrquota}, {@resuid={'resuid', 0x3d, r8}}, {@barrier, 0x5}, {@min_batch_time={'min_batch_time', 0x3d, 0x8000000000000001}}, {@nodiscard}, {@test_dummy_encryption}]}, 0xff, 0x46e, &(0x7f0000000e40)="$eJzs281vFOUfAPDvzG7L249fKyIKgjSisfGlpQWVgxeNJh40MdEDHmtbCLJQQ2sihGg1Bo+GxLvxaOJf4MmTUU8mXvVuSIgSE9CYsGZmZ9ruslsK3bKE/XySaZ9n59mZ57vzPDPPzLMbQN8ayf4kEf+LiF8jYqiRbS4w0vh37cr56b+vnJ9Ool5/84/BvNzVK+eny6Ll+7YVmdE0Iv00KXbSbP7suZNTtdrsmSI/vnDqvfH5s+eeOXFq6vjs8dnTk0eOHD408fxzk892Jc4svqt7Ppzbu/vVty++Pn304js/fpPVd9e+xvqVcXTLSBb4n/Vc67rHu72zHrteX44zqfa6NqxVJSKywzWQ9/+hqMTywRuKVz7paeWADZWdsze1ebn4v1gH7mFJ9LoGQG+UF/zs/rdc7uDwo+cuv9i4AcrivlYsjTXVSIsyAxu4/5GIOLr4z5fZEi3PIZaOz+AGVgAA6DvfZeOfp9uN/9LYtaLc/4u5oeGIuC8idkTE/RGxMyIeiMjLPhgRD93i/lunhm4cf6aXbiuwNcrGfy8Uc1vN479y9BfDlSK3PY9/IDl2ojZ7sPhMRmNgU5afaLfxchMv//J5p/2vHP9lS7b/cixYbORSteUB3czUwlS3BqWXP47YU20Xf7I0E5BExO6I2LPmrS5G8fHkTjz59d5OJW8e/yq6MM9U/yriicbxX4yW+EvJ6vOT45ujNntwvGwVN/rp5wtvdNp/2/ivb19/YGuUHf+tze1/aV0l/zv0V7JyvnY+bvmG5MJvn3W8p6zeZvsfTN7K53TLmnwwtbBwZiJiMHktovX1yeX3lvmyfBb/6IH2/X9H8Z4s/ocjImvE+yLikYjYHxH/FvfQj0bEgVXi/+Glx97ttG5d7T9iyxrLdZTFP9P2/LfU/oebj/+tJyonv//29uPPjv/hPDVavJKf/26ic3U2FyWWWzMAAADc69L8u/FJOraUTtOxscZ3+HfG1rQ2N7/w1LG590/PNL5DPxwDafmka2jF89CJZLHYYiM/WTwrLtcfKp4bf1HZkufHpudqMz2OHfrdtub+v7/s/5nfK72uHbDh/F4L+ldr/097VA/gznP9h/6l/0P/0v+hf7Xr/x+15M0FwL3J9R/6l/4P/Uv/h/6l/0NfWs/v+jcqUV3l1/sSd0si0ruiGhItiUgaF/RN6+zdvT4zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMd/AQAA///gq/is") 1.038234517s ago: executing program 1 (id=1002): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000280)={@mcast2, 0x800, 0x0, 0x103, 0x1}, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') read$FUSE(r3, &(0x7f0000002640)={0x2020}, 0x2020) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000000640)="58104053af45d43ac86fac32e9896a21b244f2282a91327f763641d55a372a9ab104fd4c31abfb4148ce7826605fe632c6cc31e66f4706030aaa0320d92b0b8b41fd21ee32f2e3d86cda67dd197273e2e0381241a4220e", 0x57, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000003c0)=""/118, 0x76}], 0x32}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000000)=0x8cf, 0x4) getsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, 0x0, &(0x7f0000000040)=0x29) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r2}, 0x10) r6 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0x0, 0x0, 'dh\x00', 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x84, @multicast2, 0xffff, 0x0, 'nq\x00'}, 0x2c) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, &(0x7f00000000c0), 0x10) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r9, {0x7, 0x6}, {0xffff}, {0x1}}}, 0x24}}, 0x0) 664.052387ms ago: executing program 2 (id=1003): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_LOCK(r0, 0x6405) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0) ioctl$COMEDI_INSN(r1, 0x8028640c, &(0x7f0000000080)={0xc000003, 0x0, 0x0, 0x0, 0x4}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) migrate_pages(0x0, 0x5, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x272) syz_io_uring_submit(0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 293.563297ms ago: executing program 3 (id=1004): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) link(&(0x7f0000000000)='./file1\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0xfffe, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x240080e0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r2 = getpid() bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, 0x0, &(0x7f0000001300)) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640000000906010800000000000000000600000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a"], 0x64}}, 0x4800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x20000090) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6f7665727269113cf3019abb6465726f636b7065726d2c646d6f64653d3078303030303030303030303030303030362c636865636b3d7374725980304ab7006895f75af24c529053fd6963742c756e686964652c757466382c6f76657272696465726f636b7065726d2c73686f776173736f632c73657373696f6e3d3078303030303030303030303030303035302c00"], 0x1, 0x698, &(0x7f0000000a80)="$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") fchownat(0xffffffffffffff9c, 0x0, 0x0, 0xffffffffffffffff, 0x100) 45.736646ms ago: executing program 1 (id=1005): r0 = io_uring_setup(0x2d54, &(0x7f0000000080)={0x0, 0x569f, 0x2, 0x0, 0x200}) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000140)={[{@grpid}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$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") syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0) r1 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x10}, 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000200)=@v2={0x2, @aes128, 0x0, '\x00', @c}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x10, '\x00', @auto="95c56578fdb4bdc059289c286143902a"}) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x8001, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f00000001c0)={r2, r3}, 0xc) io_uring_setup(0x20002880, &(0x7f0000000000)={0x0, 0x8b07c, 0x7e, 0x0, 0x0, 0x0, r0}) 0s ago: executing program 4 (id=1006): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=ANY=[@ANYBLOB="3583c93cfe21016bfcd43d412da630ffffff9900000000000200", @ANYRES32=0x0, @ANYBLOB="03150000000000002c0012800c0001006d6163766c616e001c00028008000700050000000800030002000000080001001000000008000500", @ANYRES32=r2, @ANYBLOB], 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0x68, 0x14, 0x0, 0x70bd28, 0x25dfdbfb, {0x1a, 0x10}, [@INET_DIAG_REQ_BYTECODE={0x54, 0x1, "8f96fac794d1b28b5dfa7aa83107afa60aee8f69bb30c7bc617081b3c38475e91c592ca9698ace0c874e5c8950c41e2b6fcb664b40528c4180e376148101031d406ef2d9c5c1e3c48a1014da64f0cd1e"}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x54) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x7) ioctl$TIOCSSOFTCAR(r0, 0x541a, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBMODE(r4, 0x4b45, &(0x7f0000003280)=0x1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000000000)=ANY=[@ANYBLOB="706172744563783030303030303030303031306666666693756d61736b3d30303030303030303030303030303030313137373737372c636f6465706167003d63703836312c696f636861727365743d63703933322c00"], 0x4, 0x343, &(0x7f0000000280)="$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") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900010073797a30"], 0xe0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x840701, &(0x7f0000000880)={[{@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x58}}, {@errors_continue}, {@resgid}, {@nolazytime}, {@usrjquota}, {@journal_dev={'journal_dev', 0x3d, 0x8}}]}, 0x0, 0x44a, &(0x7f0000000400)="$eJzs281vG0UbAPBn10n6vv1KKOWjpUCgQkR8JE1aoAcuIJA4FIEEh3IMTlpVdRvUBIlWFQ0IlQsSqgRnxBGJv4AbFwSckLjCHVWqoJcWTkG73m1t106b1rFD/ftJm8x4x555PDve2R07gIE1nv1JIrZGxG8RMVrPNhcYr/+7evls9e/LZ6tJrKy89WeSl7ty+Wy1LFo+b0uRmUgj0k+SopJmi6fPHJ+t1eZPFfmppRPvTS2ePvPssROzR+ePzp+cOXjwwP7pF56fea4rcWZxXdn94cKeXa+9c+H16uEL7/70bdbercX+xji6ZTwL/K+VXOu+J7pdWZ9ta0gnQ31sCGtSiYisu4bz8T8albjeeaPx6sd9bRywrrJz06bOu5dXgLtYEv1uAdAf5Yk+u/4ttx5NPTaESy/VL4CyuK8WW33PUKRFmeGW69tuGo+Iw8v/fJVtsU73IQAAGn1W/fJQPNNu/pfG/Q3lthdrKGMRcU9E7IiIeyNiZ0TcF5GXfSAiHlxj/a1LQzfOf9KLtxXYLcrmfy8Wa1vN879y9hdjlSK3LY9/ODlyrDa/r3hPJmJ4U5afXqWO71/59fNO+xrnf9mW1V/OBYt2XBxquUE3N7s0m09Ku+DSRxG7h9rFn1xbCUgiYldE7F7bS28vE8ee+mZPp0I3j38VXVhnWvk64sl6/y9HS/ylZPX1yan/RW1+31R5VNzo51/Ov9mp/juKvwuy/t/cfPy3FhlLGtdrF9dex/nfP+14TXO7x/9I8nbeLyPFYx/MLi2dmo4YSQ7l+abHZ64/t8yX5bP4J/a2H/87iudk9TwUEdlB/HBEPBIRjxZtfywiHo+IvavE/+PLnfdthP6fa/v5d+34b+n/tScqx3/4rlP9t9b/B/LURPFI/vl3E7fawDt57wAAAOC/Is2/A5+kk9fSaTo5Wf8O/87YnNYWFpeePrLw/sm5+nflx2I4Le90jTbcD51OlotXrOdninvF5f79xX3jLyr/z/OT1YXaXJ9jh0G3pcP4z/xR6XfrgHXXbh1tZqQPDQF6rnX8p83Zc2/0sjFAT/m9Ngyum4z/tFftAHrP+R8GV7vxf64lby0A7k7O/zC4jH8YXMY/DC7jHwbSnfyuX2KQE5FuiGZIrFOi359MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3fFvAAAA//+uEO7O") r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000ac0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file1\x00'}) bind$rxrpc(r7, &(0x7f0000000b00)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @multicast2}}, 0x24) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000002300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r8, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r9, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f00000002c0)={0x5, 0x10, 0xfa00, {&(0x7f0000000040), r5, 0x3}}, 0x18) kernel console output (not intermixed with test programs): rable [ 175.185595][ T6207] sp0: Synchronizing with TNC [ 175.193480][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 175.201004][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 175.215003][ T2420] pvrusb2: Attached sub-driver cx25840 [ 175.215019][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 175.215027][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 175.215080][ T2420] pvrusb2: Invalid write control endpoint [ 175.263484][ T6209] loop1: detected capacity change from 0 to 64 [ 175.279089][ T4258] usb 3-1: USB disconnect, device number 21 [ 175.290158][ T2420] pvrusb2: Invalid write control endpoint [ 175.291962][ T5548] usb 5-1: USB disconnect, device number 19 [ 175.298146][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 175.312864][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 175.321309][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 175.327853][ T5553] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 175.332276][ T2420] pvrusb2: Device being rendered inoperable [ 175.347220][ T5553] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.352557][ T4183] usb 4-1: USB disconnect, device number 20 [ 175.358332][ T2420] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 175.370478][ T2420] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 175.370997][ T5553] usb 1-1: config 0 descriptor?? [ 175.384111][ T6209] hfs: unable to parse mount options [ 175.400325][ T2420] pvrusb2: Attached sub-driver cx25840 [ 175.417926][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 175.433577][ T5553] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 175.435868][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 175.674159][ T6213] netlink: 4 bytes leftover after parsing attributes in process `syz.1.562'. [ 175.716825][ T6220] netlink: 'syz.1.563': attribute type 10 has an invalid length. [ 175.844791][ T6202] xt_hashlimit: max too large, truncated to 1048576 [ 175.851688][ T5553] gspca_vc032x: reg_w err -71 [ 175.859778][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.868944][ T6202] xt_hashlimit: overflow, rate too high: 0 [ 175.881027][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.888729][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.899787][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.905482][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.916884][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.922714][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.928099][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.939290][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.945175][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.950714][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.962081][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.967639][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 175.990782][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.012279][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.017601][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.023744][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.029141][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 176.049040][ T5553] gspca_vc032x: Unknown sensor... [ 176.055251][ T5553] vc032x: probe of 1-1:0.0 failed with error -22 [ 176.138989][ T6229] loop4: detected capacity change from 0 to 764 [ 176.169023][ T6230] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 176.213827][ T5553] usb 1-1: USB disconnect, device number 27 [ 176.664125][ T6232] loop1: detected capacity change from 0 to 512 [ 176.807768][ T6232] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 176.825588][ T6232] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.936892][ T6240] netlink: 96 bytes leftover after parsing attributes in process `syz.2.570'. [ 176.994762][ T6240] tipc: Enabling not permitted [ 177.006504][ T6240] tipc: Enabling of bearer rejected, failed to enable media [ 177.034984][ T6244] sp0: Synchronizing with TNC [ 177.043775][ T6244] loop0: detected capacity change from 0 to 64 [ 177.103168][ T6244] hfs: unable to parse mount options [ 177.161317][ T5553] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 177.461570][ T5553] usb 5-1: Using ep0 maxpacket: 16 [ 177.681455][ T5553] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 177.721944][ T5553] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 177.771640][ T6251] fuse: Bad value for 'user_id' [ 177.971367][ T5553] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 177.980785][ T5553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.989512][ T5553] usb 5-1: Product: syz [ 177.994092][ T5553] usb 5-1: Manufacturer: syz [ 177.998797][ T5553] usb 5-1: SerialNumber: syz [ 178.009309][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.574'. [ 178.051393][ T4183] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 178.070286][ T6262] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 178.078350][ T7] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 178.086151][ T4258] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 178.291308][ T4183] usb 3-1: Using ep0 maxpacket: 16 [ 178.341460][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 178.346908][ T4258] usb 1-1: Using ep0 maxpacket: 8 [ 178.411507][ T4183] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 178.419734][ T4183] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.433852][ T4183] usb 3-1: config 0 has no interface number 0 [ 178.471412][ T4258] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 178.471435][ T5553] usb 5-1: 0:2 : does not exist [ 178.480655][ T4258] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.481509][ T7] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 178.508433][ T7] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.520111][ T7] usb 4-1: config 0 has no interface number 0 [ 178.563286][ T4258] pvrusb2: Hardware description: Terratec Grabster AV400 [ 178.570706][ T4258] pvrusb2: ********** [ 178.575186][ T4258] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 178.585766][ T4258] pvrusb2: Important functionality might not be entirely working. [ 178.594251][ T4258] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 178.606423][ T4258] pvrusb2: ********** [ 178.624080][ T4183] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 178.633411][ T4183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.642087][ T4183] usb 3-1: Product: syz [ 178.646421][ T4183] usb 3-1: Manufacturer: syz [ 178.651034][ T4183] usb 3-1: SerialNumber: syz [ 178.672797][ T4183] usb 3-1: config 0 descriptor?? [ 178.711604][ T7] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 178.723153][ T4183] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 178.729546][ T4183] usb 3-1: No valid video chain found. [ 178.742283][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.767190][ T7] usb 4-1: Product: syz [ 178.773122][ T7] usb 4-1: Manufacturer: syz [ 178.778153][ T7] usb 4-1: SerialNumber: syz [ 178.783835][ T2420] pvrusb2: Invalid write control endpoint [ 178.790970][ T7] usb 4-1: config 0 descriptor?? [ 178.912457][ T6267] loop1: detected capacity change from 0 to 764 [ 179.381047][ T5549] usb 1-1: USB disconnect, device number 28 [ 179.433714][ T5553] usb 3-1: USB disconnect, device number 22 [ 179.457653][ T7] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 179.464239][ T7] usb 4-1: No valid video chain found. [ 179.477821][ T7] usb 4-1: USB disconnect, device number 21 [ 179.484214][ T2420] pvrusb2: Invalid write control endpoint [ 179.493593][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 179.512016][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 179.519962][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 179.538052][ T2420] pvrusb2: Device being rendered inoperable [ 179.544651][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 179.560522][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 179.569319][ T2420] pvrusb2: Attached sub-driver cx25840 [ 179.580629][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 179.613296][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 179.761089][ T4183] usb 5-1: USB disconnect, device number 20 [ 179.884078][ T6282] netlink: 96 bytes leftover after parsing attributes in process `syz.0.583'. [ 179.918000][ T6282] tipc: Enabling not permitted [ 179.924520][ T6282] tipc: Enabling of bearer rejected, failed to enable media [ 179.925856][ T6284] loop2: detected capacity change from 0 to 512 [ 180.021270][ T7] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 180.045528][ T6284] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 180.064054][ T6284] ext4 filesystem being mounted at /104/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 180.101490][ T6288] sp0: Synchronizing with TNC [ 180.123137][ T6288] loop0: detected capacity change from 0 to 64 [ 180.216176][ T6288] hfs: unable to parse mount options [ 180.476195][ T6288] loop0: detected capacity change from 0 to 512 [ 180.943108][ T7] usb 4-1: Using ep0 maxpacket: 32 [ 180.959303][ T6295] netlink: 'syz.1.587': attribute type 10 has an invalid length. [ 181.081504][ T7] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 181.099173][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.232571][ T6303] loop4: detected capacity change from 0 to 764 [ 181.709466][ T6306] netlink: 'syz.0.590': attribute type 10 has an invalid length. [ 181.754724][ T7] usb 4-1: config 0 descriptor?? [ 181.793206][ T7] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 181.981473][ T6316] fuse: Bad value for 'user_id' [ 182.111225][ T5554] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 182.203212][ T6273] xt_hashlimit: max too large, truncated to 1048576 [ 182.210024][ T6273] xt_hashlimit: overflow, rate too high: 0 [ 182.216437][ T7] gspca_vc032x: reg_w err -71 [ 182.221548][ T4258] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 182.229355][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.234821][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.240390][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.246168][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.251294][ T5548] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 182.251539][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.265069][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.270562][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.276232][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.281565][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.286998][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.292479][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.297770][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.303331][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.308633][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.313995][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.319280][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.324715][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.330006][ T7] gspca_vc032x: I2c Bus Busy Wait 00 [ 182.335582][ T7] gspca_vc032x: Unknown sensor... [ 182.340683][ T7] vc032x: probe of 4-1:0.0 failed with error -22 [ 182.351248][ T5554] usb 2-1: Using ep0 maxpacket: 16 [ 182.354492][ T7] usb 4-1: USB disconnect, device number 22 [ 182.380199][ T6318] netlink: 96 bytes leftover after parsing attributes in process `syz.0.595'. [ 182.395949][ T6318] tipc: Enabling not permitted [ 182.401999][ T6318] tipc: Enabling of bearer rejected, failed to enable media [ 182.471310][ T5554] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 182.476283][ T4258] usb 3-1: Using ep0 maxpacket: 16 [ 182.479506][ T5554] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 182.479527][ T5554] usb 2-1: config 0 has no interface number 0 [ 182.501920][ T5548] usb 5-1: Using ep0 maxpacket: 8 [ 182.622021][ T5548] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 182.631726][ T5554] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 182.640802][ T5554] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.649365][ T5548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.658016][ T5554] usb 2-1: Product: syz [ 182.661239][ T4258] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 182.670588][ T5554] usb 2-1: Manufacturer: syz [ 182.677237][ T5554] usb 2-1: SerialNumber: syz [ 182.681116][ T4258] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.688020][ T5554] usb 2-1: config 0 descriptor?? [ 182.703261][ T5548] pvrusb2: Hardware description: Terratec Grabster AV400 [ 182.710428][ T5548] pvrusb2: ********** [ 182.714829][ T5548] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 182.725522][ T5548] pvrusb2: Important functionality might not be entirely working. [ 182.735779][ T5554] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 182.742515][ T5548] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 182.755968][ T5554] usb 2-1: No valid video chain found. [ 182.761848][ T5553] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 182.771965][ T5548] pvrusb2: ********** [ 182.826083][ T6324] loop3: detected capacity change from 0 to 512 [ 182.866442][ T6324] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 182.882979][ T4258] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 182.887168][ T6324] ext4 filesystem being mounted at /121/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 182.893204][ T4258] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.912779][ T4258] usb 3-1: Product: syz [ 182.917079][ T4258] usb 3-1: Manufacturer: syz [ 182.927692][ T4258] usb 3-1: SerialNumber: syz [ 182.932480][ T2420] pvrusb2: Invalid write control endpoint [ 182.946105][ T5554] usb 2-1: USB disconnect, device number 31 [ 183.098157][ T2420] pvrusb2: Invalid write control endpoint [ 183.104242][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 183.113969][ T5553] usb 1-1: Using ep0 maxpacket: 16 [ 183.114005][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 183.291505][ T5553] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 183.339807][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 183.380328][ T5553] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 183.440254][ T2420] pvrusb2: Device being rendered inoperable [ 183.462965][ T5553] usb 1-1: config 0 has no interface number 0 [ 183.487492][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 183.515622][ T5554] usb 5-1: USB disconnect, device number 21 [ 183.598205][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 183.747809][ T2420] pvrusb2: Attached sub-driver cx25840 [ 183.771398][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 183.782433][ T4258] usb 3-1: 0:2 : does not exist [ 183.796851][ T5553] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 183.806597][ T5553] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.815477][ T5553] usb 1-1: Product: syz [ 183.819660][ T5553] usb 1-1: Manufacturer: syz [ 183.824546][ T5553] usb 1-1: SerialNumber: syz [ 183.831596][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 183.849756][ T5553] usb 1-1: config 0 descriptor?? [ 183.903137][ T5553] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 183.927432][ T5553] usb 1-1: No valid video chain found. [ 183.999406][ T6337] sp0: Synchronizing with TNC [ 184.015883][ T6337] loop3: detected capacity change from 0 to 64 [ 184.063700][ T6337] hfs: unable to parse mount options [ 184.104561][ T5554] usb 1-1: USB disconnect, device number 29 [ 184.294577][ T6341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.602'. [ 184.338682][ T6348] netlink: 'syz.3.603': attribute type 10 has an invalid length. [ 184.726716][ T6354] netlink: 'syz.1.606': attribute type 10 has an invalid length. [ 184.852149][ T6357] loop4: detected capacity change from 0 to 764 [ 185.440431][ T5553] usb 3-1: USB disconnect, device number 23 [ 185.539794][ T6364] netlink: 96 bytes leftover after parsing attributes in process `syz.3.608'. [ 185.558736][ T6363] loop2: detected capacity change from 0 to 512 [ 185.586033][ T6369] fuse: Bad value for 'user_id' [ 185.599125][ T6364] tipc: Enabling not permitted [ 185.626499][ T6364] tipc: Enabling of bearer rejected, failed to enable media [ 185.660132][ T6363] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 185.682668][ T6363] ext4 filesystem being mounted at /107/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 185.829806][ T6374] sp0: Synchronizing with TNC [ 185.847796][ T6374] loop3: detected capacity change from 0 to 64 [ 185.871411][ T4258] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 185.901528][ T5548] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 185.901571][ T3519] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 185.975363][ T6374] hfs: unable to parse mount options [ 186.161266][ T3519] usb 1-1: Using ep0 maxpacket: 32 [ 186.292486][ T3519] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 186.427998][ T3519] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.441226][ T5548] usb 5-1: Using ep0 maxpacket: 16 [ 186.453576][ T3519] usb 1-1: config 0 descriptor?? [ 186.493143][ T3519] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 186.570052][ T5548] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 186.583004][ T5548] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.611264][ T5548] usb 5-1: config 0 has no interface number 0 [ 186.709667][ T6379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.614'. [ 186.726552][ T4258] usb 2-1: Using ep0 maxpacket: 8 [ 186.781299][ T5548] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 186.790892][ T5548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.799476][ T5548] usb 5-1: Product: syz [ 186.804156][ T5548] usb 5-1: Manufacturer: syz [ 186.808781][ T5548] usb 5-1: SerialNumber: syz [ 186.815840][ T5548] usb 5-1: config 0 descriptor?? [ 186.861512][ T4258] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 186.863091][ T5548] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 186.871051][ T4258] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.883763][ T5548] usb 5-1: No valid video chain found. [ 186.905141][ T6365] xt_hashlimit: max too large, truncated to 1048576 [ 186.912384][ T6365] xt_hashlimit: overflow, rate too high: 0 [ 186.921353][ T3519] gspca_vc032x: reg_w err -71 [ 186.926075][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.932124][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.937425][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.943266][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.948661][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.953331][ T4258] pvrusb2: Hardware description: Terratec Grabster AV400 [ 186.954443][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.966663][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.966727][ T4258] pvrusb2: ********** [ 186.972139][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972156][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972163][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972171][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972179][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972187][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972193][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972201][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972208][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972216][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972224][ T3519] gspca_vc032x: I2c Bus Busy Wait 00 [ 186.972233][ T3519] gspca_vc032x: Unknown sensor... [ 186.972285][ T3519] vc032x: probe of 1-1:0.0 failed with error -22 [ 186.979835][ T3519] usb 1-1: USB disconnect, device number 30 [ 186.988816][ T4258] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 187.065258][ T4258] pvrusb2: Important functionality might not be entirely working. [ 187.079151][ T4258] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 187.091004][ T4258] pvrusb2: ********** [ 187.097826][ T4183] usb 5-1: USB disconnect, device number 22 [ 187.181328][ T2420] pvrusb2: Invalid write control endpoint [ 187.201804][ T6385] netlink: 40 bytes leftover after parsing attributes in process `syz.3.617'. [ 187.254121][ T2420] pvrusb2: Invalid write control endpoint [ 187.256017][ T7] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 187.260064][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 187.260076][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 187.260082][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 187.260089][ T2420] pvrusb2: Device being rendered inoperable [ 187.260530][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 187.309337][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 187.317047][ T6388] netlink: 'syz.3.618': attribute type 10 has an invalid length. [ 187.326185][ T2420] pvrusb2: Attached sub-driver cx25840 [ 187.332321][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 187.343023][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 187.389265][ T4183] usb 2-1: USB disconnect, device number 32 [ 187.459534][ T6390] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 187.511233][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 187.631411][ T7] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 187.639895][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.653379][ T7] usb 3-1: config 0 has no interface number 0 [ 187.811308][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 187.820912][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.829313][ T7] usb 3-1: Product: syz [ 187.833753][ T7] usb 3-1: Manufacturer: syz [ 187.838370][ T7] usb 3-1: SerialNumber: syz [ 187.845587][ T7] usb 3-1: config 0 descriptor?? [ 187.883143][ T7] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 187.890251][ T7] usb 3-1: No valid video chain found. [ 188.152508][ T6405] loop3: detected capacity change from 0 to 764 [ 188.328655][ T6404] netlink: 96 bytes leftover after parsing attributes in process `syz.0.624'. [ 188.404386][ T5553] usb 3-1: USB disconnect, device number 24 [ 188.699590][ T6404] tipc: Enabling not permitted [ 188.748295][ T6409] loop4: detected capacity change from 0 to 512 [ 188.770163][ T6404] tipc: Enabling of bearer rejected, failed to enable media [ 188.805655][ T6411] sp0: Synchronizing with TNC [ 188.814355][ T6411] loop3: detected capacity change from 0 to 64 [ 188.841243][ T7] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 188.873308][ T6409] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 188.901049][ T6409] ext4 filesystem being mounted at /138/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 188.902898][ T6411] hfs: unable to parse mount options [ 189.051765][ T6411] loop3: detected capacity change from 0 to 512 [ 189.081312][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 189.847583][ T7] usb 2-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 189.858750][ T7] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 189.864049][ T6430] netlink: 40 bytes leftover after parsing attributes in process `syz.0.630'. [ 189.959456][ T6434] netlink: 'syz.0.632': attribute type 10 has an invalid length. [ 190.021397][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 190.030619][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.038995][ T7] usb 2-1: Product: syz [ 190.043422][ T7] usb 2-1: Manufacturer: syz [ 190.048110][ T7] usb 2-1: SerialNumber: syz [ 190.091243][ T5553] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 190.181308][ T5554] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 190.331288][ T5553] usb 4-1: Using ep0 maxpacket: 32 [ 190.384466][ T6436] fuse: Bad value for 'user_id' [ 190.421209][ T5554] usb 5-1: Using ep0 maxpacket: 16 [ 190.451267][ T5553] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 190.460475][ T5553] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.470715][ T5553] usb 4-1: config 0 descriptor?? [ 190.526148][ T5553] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 190.535125][ T6438] netlink: 'syz.0.634': attribute type 10 has an invalid length. [ 190.543539][ T7] usb 2-1: 0:2 : does not exist [ 190.546166][ T5554] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 190.557479][ T5554] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.577260][ T5554] usb 5-1: config 0 has no interface number 0 [ 190.651292][ T4260] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 190.727058][ T6428] xt_hashlimit: max too large, truncated to 1048576 [ 190.731265][ T5553] gspca_vc032x: reg_r err -71 [ 190.735787][ T6428] xt_hashlimit: overflow, rate too high: 0 [ 190.738527][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.750864][ T5554] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 190.760233][ T5554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.768837][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.774918][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.780336][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.785909][ T5554] usb 5-1: Product: syz [ 190.790201][ T5554] usb 5-1: Manufacturer: syz [ 190.795078][ T5554] usb 5-1: SerialNumber: syz [ 190.800113][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.805444][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.810905][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.817254][ T5554] usb 5-1: config 0 descriptor?? [ 190.822717][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.828023][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.833379][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.838851][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.844743][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.850556][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.856282][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.863699][ T5554] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 190.870661][ T5554] usb 5-1: No valid video chain found. [ 190.876273][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.882214][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.887925][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.893319][ T4260] usb 3-1: Using ep0 maxpacket: 8 [ 190.900074][ T5553] gspca_vc032x: I2c Bus Busy Wait 00 [ 190.905580][ T5553] gspca_vc032x: Unknown sensor... [ 190.910785][ T5553] vc032x: probe of 4-1:0.0 failed with error -22 [ 190.930144][ T5553] usb 4-1: USB disconnect, device number 23 [ 191.011315][ T4260] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 191.020577][ T4260] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.069370][ T4260] pvrusb2: Hardware description: Terratec Grabster AV400 [ 191.076656][ T4260] pvrusb2: ********** [ 191.080748][ T4260] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 191.097506][ T4260] pvrusb2: Important functionality might not be entirely working. [ 191.105975][ T4260] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 191.117662][ T4260] pvrusb2: ********** [ 191.124227][ T5554] usb 5-1: USB disconnect, device number 23 [ 191.282550][ T2420] pvrusb2: Invalid write control endpoint [ 191.406070][ T6448] loop0: detected capacity change from 0 to 764 [ 191.643457][ T6447] netlink: 96 bytes leftover after parsing attributes in process `syz.3.637'. [ 191.863740][ T4260] usb 3-1: USB disconnect, device number 25 [ 191.955370][ T6447] tipc: Enabling not permitted [ 191.960975][ T6447] tipc: Enabling of bearer rejected, failed to enable media [ 191.974206][ T5553] usb 2-1: USB disconnect, device number 33 [ 191.982421][ T2420] pvrusb2: Invalid write control endpoint [ 191.988999][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 192.106144][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 192.122345][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 192.135320][ T2420] pvrusb2: Device being rendered inoperable [ 192.153202][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 192.160747][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 192.180691][ T2420] pvrusb2: Attached sub-driver cx25840 [ 192.180898][ T6458] sp0: Synchronizing with TNC [ 192.190528][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 192.213773][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 192.273911][ T6458] loop0: detected capacity change from 0 to 64 [ 192.286776][ T6465] loop2: detected capacity change from 0 to 512 [ 192.322424][ T6458] hfs: unable to parse mount options [ 192.348345][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.641'. [ 192.396261][ T6465] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 192.451264][ T5553] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 192.485275][ T6472] netlink: 40 bytes leftover after parsing attributes in process `syz.3.643'. [ 192.505476][ T6465] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 192.653845][ T6477] netlink: 'syz.0.644': attribute type 10 has an invalid length. [ 192.686317][ T6476] netlink: 'syz.3.645': attribute type 10 has an invalid length. [ 192.801271][ T5553] usb 2-1: Using ep0 maxpacket: 16 [ 193.001772][ T5553] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 193.034797][ T5553] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.207815][ T5553] usb 2-1: config 0 has no interface number 0 [ 193.391338][ T5553] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 193.420923][ T5553] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.462840][ T5553] usb 2-1: Product: syz [ 193.475384][ T5553] usb 2-1: Manufacturer: syz [ 193.480560][ T5553] usb 2-1: SerialNumber: syz [ 193.499845][ T5553] usb 2-1: config 0 descriptor?? [ 193.543908][ T5553] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 193.550868][ T5553] usb 2-1: No valid video chain found. [ 193.679480][ T6491] loop0: detected capacity change from 0 to 764 [ 193.843403][ T5554] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 194.051760][ T4260] usb 2-1: USB disconnect, device number 34 [ 194.161343][ T5554] usb 5-1: Using ep0 maxpacket: 32 [ 194.265247][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.271645][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.319509][ T6496] netlink: 96 bytes leftover after parsing attributes in process `syz.0.652'. [ 194.331405][ T5554] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 194.344652][ T6496] tipc: Enabling not permitted [ 194.350281][ T6496] tipc: Enabling of bearer rejected, failed to enable media [ 194.359399][ T5554] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.370150][ T5554] usb 5-1: config 0 descriptor?? [ 194.413909][ T5554] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 194.440850][ T6498] fuse: Bad value for 'user_id' [ 194.521306][ T5549] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 194.581376][ T7] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 194.621543][ T6485] xt_hashlimit: max too large, truncated to 1048576 [ 194.625957][ T5554] gspca_vc032x: reg_r err -71 [ 194.636333][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.650336][ T6485] xt_hashlimit: overflow, rate too high: 0 [ 194.656450][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.664656][ T6500] sp0: Synchronizing with TNC [ 194.674101][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.675817][ T6500] loop1: detected capacity change from 0 to 64 [ 194.679688][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.679704][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.679713][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.679722][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.679730][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.679737][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.690933][ T6500] hfs: unable to parse mount options [ 194.693114][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.729713][ T5548] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 194.737743][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.743456][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.748889][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.754701][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.759988][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.765342][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.770800][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.776547][ T5549] usb 3-1: Using ep0 maxpacket: 16 [ 194.782101][ T5554] gspca_vc032x: I2c Bus Busy Wait 00 [ 194.787538][ T5554] gspca_vc032x: Unknown sensor... [ 194.792965][ T5554] vc032x: probe of 5-1:0.0 failed with error -22 [ 194.802100][ T5554] usb 5-1: USB disconnect, device number 24 [ 194.824504][ T6500] loop1: detected capacity change from 0 to 512 [ 194.871326][ T7] usb 4-1: Using ep0 maxpacket: 16 [ 194.914157][ T5549] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 194.928131][ T6502] netlink: 40 bytes leftover after parsing attributes in process `syz.1.655'. [ 194.928940][ T5549] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 194.960581][ T5549] usb 3-1: config 0 has no interface number 0 [ 194.991359][ T5548] usb 1-1: Using ep0 maxpacket: 8 [ 195.031297][ T7] usb 4-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 195.042013][ T7] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 195.104356][ T6504] netlink: 4 bytes leftover after parsing attributes in process `syz.1.656'. [ 195.114067][ T5548] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 195.123397][ T5549] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 195.133327][ T5548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.142115][ T5549] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.150725][ T5549] usb 3-1: Product: syz [ 195.156722][ T5549] usb 3-1: Manufacturer: syz [ 195.161427][ T5549] usb 3-1: SerialNumber: syz [ 195.167794][ T5549] usb 3-1: config 0 descriptor?? [ 195.199808][ T5548] pvrusb2: Hardware description: Terratec Grabster AV400 [ 195.213223][ T5549] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 195.219873][ T5548] pvrusb2: ********** [ 195.226301][ T5549] usb 3-1: No valid video chain found. [ 195.232040][ T5548] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 195.241513][ T7] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 195.259370][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.267746][ T5548] pvrusb2: Important functionality might not be entirely working. [ 195.267896][ T7] usb 4-1: Product: syz [ 195.277644][ T5548] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 195.291186][ T7] usb 4-1: Manufacturer: syz [ 195.298735][ T6516] netlink: 'syz.4.658': attribute type 10 has an invalid length. [ 195.301300][ T7] usb 4-1: SerialNumber: syz [ 195.307158][ T5548] pvrusb2: ********** [ 195.401378][ T2420] pvrusb2: Invalid write control endpoint [ 195.415811][ T5548] usb 3-1: USB disconnect, device number 26 [ 195.448731][ T2420] pvrusb2: Invalid write control endpoint [ 195.455257][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 195.466339][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 195.474625][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 195.484950][ T2420] pvrusb2: Device being rendered inoperable [ 195.491026][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 195.498705][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_g) [ 195.506926][ T2420] pvrusb2: Attached sub-driver cx25840 [ 195.512659][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 195.524155][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 195.606063][ T5554] usb 1-1: USB disconnect, device number 31 [ 195.791357][ T7] usb 4-1: 0:2 : does not exist [ 195.976255][ T6523] loop2: detected capacity change from 0 to 512 [ 196.056799][ T6524] loop4: detected capacity change from 0 to 4096 [ 196.111646][ T6526] netlink: 'syz.1.661': attribute type 10 has an invalid length. [ 196.131030][ T6524] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 196.152719][ T6523] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 196.169114][ T6523] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 197.528625][ T6535] loop0: detected capacity change from 0 to 764 [ 197.716580][ T6521] ntfs3: loop4: MftZone: unavailable [ 197.755884][ T5548] usb 4-1: USB disconnect, device number 24 [ 197.847497][ T26] audit: type=1800 audit(1756307411.438:56): pid=6521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.659" name="file1" dev="loop4" ino=30 res=0 errno=0 [ 197.904201][ T6538] netlink: 96 bytes leftover after parsing attributes in process `syz.3.663'. [ 198.013220][ T6540] sp0: Synchronizing with TNC [ 198.013246][ T6545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.666'. [ 198.064744][ T6540] loop1: detected capacity change from 0 to 64 [ 198.071375][ T6538] tipc: Enabling not permitted [ 198.093744][ T6538] tipc: Enabling of bearer rejected, failed to enable media [ 198.137000][ T6540] hfs: unable to parse mount options [ 198.256503][ T6540] loop1: detected capacity change from 0 to 512 [ 198.327296][ T6555] netlink: 'syz.3.669': attribute type 10 has an invalid length. [ 198.441483][ T5548] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 198.454357][ T6560] netlink: 4 bytes leftover after parsing attributes in process `syz.4.667'. [ 198.671189][ T4183] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 198.691197][ T5548] usb 1-1: Using ep0 maxpacket: 32 [ 198.821484][ T5548] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 198.837043][ T5548] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.864767][ T5548] usb 1-1: config 0 descriptor?? [ 198.903311][ T5548] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 198.931386][ T4183] usb 2-1: Using ep0 maxpacket: 16 [ 198.991273][ T7] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 199.071434][ T4183] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 199.079985][ T4183] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.090521][ T4183] usb 2-1: config 0 has no interface number 0 [ 199.111148][ T6549] xt_hashlimit: max too large, truncated to 1048576 [ 199.121305][ T5548] gspca_vc032x: reg_r err -71 [ 199.126239][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.133002][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.135499][ T6549] xt_hashlimit: overflow, rate too high: 0 [ 199.142415][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.149659][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.156622][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.156795][ T6571] fuse: Bad value for 'user_id' [ 199.162236][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162252][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162261][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162269][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162277][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162286][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162293][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162301][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162310][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162318][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162325][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162332][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.162340][ T5548] gspca_vc032x: I2c Bus Busy Wait 00 [ 199.238855][ T5548] gspca_vc032x: Unknown sensor... [ 199.244459][ T5548] vc032x: probe of 1-1:0.0 failed with error -22 [ 199.253612][ T5548] usb 1-1: USB disconnect, device number 32 [ 199.271310][ T7] usb 3-1: Using ep0 maxpacket: 16 [ 199.277111][ T4183] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 199.287141][ T4183] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.295358][ T4183] usb 2-1: Product: syz [ 199.299548][ T4183] usb 2-1: Manufacturer: syz [ 199.304390][ T4183] usb 2-1: SerialNumber: syz [ 199.310431][ T4183] usb 2-1: config 0 descriptor?? [ 199.352662][ T4183] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 199.359315][ T4183] usb 2-1: No valid video chain found. [ 199.414203][ T7] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 199.423137][ T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.436334][ T7] usb 3-1: config 0 has no interface number 0 [ 199.471195][ T4355] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 199.555242][ T5548] usb 2-1: USB disconnect, device number 35 [ 199.601276][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 199.610599][ T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.618714][ T7] usb 3-1: Product: syz [ 199.623054][ T7] usb 3-1: Manufacturer: syz [ 199.627656][ T7] usb 3-1: SerialNumber: syz [ 199.642395][ T7] usb 3-1: config 0 descriptor?? [ 199.683000][ T7] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 199.689493][ T7] usb 3-1: No valid video chain found. [ 199.711224][ T4355] usb 5-1: Using ep0 maxpacket: 8 [ 199.738679][ T6573] loop0: detected capacity change from 0 to 512 [ 199.831351][ T4355] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 199.840515][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.890887][ T7] usb 3-1: USB disconnect, device number 27 [ 199.900996][ T6573] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 199.906886][ T4355] pvrusb2: Hardware description: Terratec Grabster AV400 [ 199.917601][ T6573] ext4 filesystem being mounted at /139/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.933280][ T4355] pvrusb2: ********** [ 199.954246][ T4355] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 199.964998][ T4355] pvrusb2: Important functionality might not be entirely working. [ 199.989548][ T4355] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 200.009632][ T4355] pvrusb2: ********** [ 200.131272][ T2420] pvrusb2: Invalid write control endpoint [ 200.200172][ T2420] pvrusb2: Invalid write control endpoint [ 200.201425][ T5554] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 200.371112][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 200.830937][ T6585] loop1: detected capacity change from 0 to 764 [ 200.912858][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 201.081422][ T5554] usb 4-1: Using ep0 maxpacket: 16 [ 201.132064][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 201.302191][ T5554] usb 4-1: config 1 has an invalid descriptor of length 239, skipping remainder of the config [ 201.351240][ T2420] pvrusb2: Device being rendered inoperable [ 201.357325][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 201.359490][ T5554] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 201.378386][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 201.391239][ T2420] pvrusb2: Attached sub-driver cx25840 [ 201.396850][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 201.406969][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 201.419083][ T6589] netlink: 40 bytes leftover after parsing attributes in process `syz.2.678'. [ 201.483530][ T6590] netlink: 'syz.0.677': attribute type 10 has an invalid length. [ 201.503094][ T4260] usb 5-1: USB disconnect, device number 25 [ 201.511487][ T6592] netlink: 96 bytes leftover after parsing attributes in process `syz.1.679'. [ 201.546958][ T6592] tipc: Enabling not permitted [ 201.586303][ T6592] tipc: Enabling of bearer rejected, failed to enable media [ 201.724697][ T6594] loop2: detected capacity change from 0 to 32768 [ 201.779257][ T6594] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.680 (6594) [ 201.784987][ T6597] sp0: Synchronizing with TNC [ 201.805326][ T6594] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 201.814410][ T6594] BTRFS info (device loop2): enabling auto defrag [ 201.814483][ T6594] BTRFS info (device loop2): max_inline at 0 [ 201.814498][ T6594] BTRFS info (device loop2): force clearing of disk cache [ 201.814514][ T6594] BTRFS info (device loop2): turning on sync discard [ 201.814557][ T6594] BTRFS info (device loop2): using free space tree [ 201.848803][ T6594] BTRFS info (device loop2): has skinny extents [ 201.856460][ T5554] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 201.860801][ T6597] loop1: detected capacity change from 0 to 64 [ 201.865938][ T5554] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.882631][ T6597] hfs: unable to parse mount options [ 201.888640][ T5554] usb 4-1: Product: syz [ 201.893023][ T5554] usb 4-1: Manufacturer: syz [ 201.897684][ T5554] usb 4-1: SerialNumber: syz [ 202.016531][ T6608] netlink: 'syz.4.682': attribute type 10 has an invalid length. [ 202.128400][ T6594] BTRFS info (device loop2): enabling ssd optimizations [ 202.138290][ T6594] BTRFS info (device loop2): clearing free space tree [ 202.145691][ T6594] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.156098][ T6594] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.197092][ T6594] BTRFS info (device loop2): creating free space tree [ 202.207267][ T6594] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 202.217088][ T6594] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 202.371386][ T5554] usb 4-1: 0:2 : does not exist [ 202.640780][ T6640] loop4: detected capacity change from 0 to 512 [ 202.769428][ T6640] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 202.791437][ T6640] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 203.071269][ T6644] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 203.381390][ T6644] usb 1-1: Using ep0 maxpacket: 16 [ 203.581411][ T6644] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 203.617017][ T6644] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.682034][ T6644] usb 1-1: config 0 has no interface number 0 [ 203.747833][ T6661] fuse: Bad value for 'user_id' [ 203.803859][ T6646] usb 4-1: USB disconnect, device number 25 [ 203.968202][ T6663] loop1: detected capacity change from 0 to 764 [ 204.032580][ T6644] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 204.058664][ T6644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.101376][ T6644] usb 1-1: Product: syz [ 204.105750][ T6644] usb 1-1: Manufacturer: syz [ 204.132379][ T6644] usb 1-1: SerialNumber: syz [ 204.156596][ T6644] usb 1-1: config 0 descriptor?? [ 204.201622][ T6646] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 204.251973][ T6644] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 204.258942][ T6644] usb 1-1: No valid video chain found. [ 204.473409][ T6644] usb 1-1: USB disconnect, device number 33 [ 204.499009][ T6665] netlink: 96 bytes leftover after parsing attributes in process `syz.4.691'. [ 204.515884][ T6665] tipc: Enabling not permitted [ 204.522022][ T6665] tipc: Enabling of bearer rejected, failed to enable media [ 204.591350][ T6646] usb 4-1: Using ep0 maxpacket: 16 [ 204.631238][ T4355] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 204.652238][ T6667] sp0: Synchronizing with TNC [ 204.660796][ T6667] loop4: detected capacity change from 0 to 64 [ 204.744228][ T6669] netlink: 'syz.1.695': attribute type 10 has an invalid length. [ 204.761572][ T6646] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 204.762802][ T6667] hfs: unable to parse mount options [ 204.771020][ T6646] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 204.790644][ T6646] usb 4-1: config 0 has no interface number 0 [ 204.902383][ T4355] usb 3-1: Using ep0 maxpacket: 8 [ 204.971416][ T6646] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 204.980932][ T6646] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.989604][ T6646] usb 4-1: Product: syz [ 204.994117][ T6646] usb 4-1: Manufacturer: syz [ 204.998744][ T6646] usb 4-1: SerialNumber: syz [ 205.012526][ T6646] usb 4-1: config 0 descriptor?? [ 205.022116][ T4355] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 205.036555][ T4355] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.059242][ T6676] netlink: 'syz.0.697': attribute type 10 has an invalid length. [ 205.076043][ T6646] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 205.082981][ T6646] usb 4-1: No valid video chain found. [ 205.083239][ T4355] pvrusb2: Hardware description: Terratec Grabster AV400 [ 205.096310][ T4355] pvrusb2: ********** [ 205.100493][ T4355] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 205.111845][ T4355] pvrusb2: Important functionality might not be entirely working. [ 205.119825][ T4355] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 205.131977][ T4355] pvrusb2: ********** [ 205.280766][ T6646] usb 4-1: USB disconnect, device number 26 [ 205.292796][ T2420] pvrusb2: Invalid write control endpoint [ 205.352694][ T2420] pvrusb2: Invalid write control endpoint [ 205.358563][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 205.368635][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 205.376559][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 205.387908][ T2420] pvrusb2: Device being rendered inoperable [ 205.394405][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 205.401837][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 205.409996][ T2420] pvrusb2: Attached sub-driver cx25840 [ 205.416558][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 205.427067][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 205.497059][ T4355] usb 3-1: USB disconnect, device number 28 [ 205.674543][ T6691] loop0: detected capacity change from 0 to 512 [ 205.707441][ T6693] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:0 [ 205.755275][ T6691] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 205.772322][ T6691] ext4 filesystem being mounted at /145/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 206.720967][ T6707] loop3: detected capacity change from 0 to 764 [ 206.951561][ T6705] sp0: Synchronizing with TNC [ 207.327243][ T4355] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 207.337260][ T6708] loop1: detected capacity change from 0 to 64 [ 207.360438][ T6716] netlink: 96 bytes leftover after parsing attributes in process `syz.0.707'. [ 207.374190][ T6716] tipc: Enabling not permitted [ 207.396029][ T6716] tipc: Enabling of bearer rejected, failed to enable media [ 207.458904][ T6708] hfs: unable to parse mount options [ 207.462385][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.708'. [ 207.516321][ T6721] netlink: 'syz.3.709': attribute type 10 has an invalid length. [ 207.576960][ T6723] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 207.691217][ T4355] usb 5-1: Using ep0 maxpacket: 16 [ 207.821315][ T4355] usb 5-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 207.832005][ T4355] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 207.881294][ T6644] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 208.001405][ T4355] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 208.010801][ T4355] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.022041][ T4355] usb 5-1: Product: syz [ 208.026315][ T4355] usb 5-1: Manufacturer: syz [ 208.031017][ T4355] usb 5-1: SerialNumber: syz [ 208.141420][ T6644] usb 2-1: Using ep0 maxpacket: 16 [ 208.189623][ T6733] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 208.201867][ T6733] XFS (loop3): SB validate failed with error -5. [ 208.269300][ T6745] loop2: detected capacity change from 0 to 512 [ 208.296053][ T6644] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 208.304852][ T6644] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 208.330797][ T6644] usb 2-1: config 0 has no interface number 0 [ 208.337244][ T6745] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 208.354430][ T6745] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 208.511514][ T4355] usb 5-1: 0:2 : does not exist [ 208.605042][ T6644] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 208.636088][ T6644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.751350][ T6644] usb 2-1: Product: syz [ 208.854330][ T6644] usb 2-1: Manufacturer: syz [ 208.934954][ T6644] usb 2-1: SerialNumber: syz [ 209.253629][ T6644] usb 2-1: config 0 descriptor?? [ 209.284885][ T6754] fuse: Bad value for 'user_id' [ 209.303157][ T6644] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 209.313088][ T6644] usb 2-1: No valid video chain found. [ 209.507088][ T6645] usb 2-1: USB disconnect, device number 36 [ 209.607872][ T6759] loop2: detected capacity change from 0 to 764 [ 209.614950][ T6644] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 209.901573][ T6644] usb 1-1: Using ep0 maxpacket: 16 [ 210.071669][ T6644] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 210.124836][ T4258] usb 5-1: USB disconnect, device number 26 [ 210.127936][ T6644] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.181287][ T4355] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 210.220764][ T6644] usb 1-1: config 0 has no interface number 0 [ 210.237111][ T6762] netlink: 96 bytes leftover after parsing attributes in process `syz.4.721'. [ 210.280314][ T6764] sp0: Synchronizing with TNC [ 210.306970][ T6762] tipc: Enabling not permitted [ 210.318778][ T6764] loop1: detected capacity change from 0 to 64 [ 210.321460][ T6762] tipc: Enabling of bearer rejected, failed to enable media [ 210.338995][ T6764] hfs: unable to parse mount options [ 210.425123][ T6771] netlink: 'syz.4.724': attribute type 10 has an invalid length. [ 210.441618][ T6644] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 210.451976][ T6644] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.467694][ T6644] usb 1-1: Product: syz [ 210.471210][ T4355] usb 4-1: Using ep0 maxpacket: 8 [ 210.476299][ T6768] netlink: 4 bytes leftover after parsing attributes in process `syz.2.723'. [ 210.480325][ T6764] loop1: detected capacity change from 0 to 512 [ 210.491169][ T6644] usb 1-1: Manufacturer: syz [ 210.496890][ T6644] usb 1-1: SerialNumber: syz [ 210.513403][ T6644] usb 1-1: config 0 descriptor?? [ 210.555636][ T6644] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 210.562301][ T6644] usb 1-1: No valid video chain found. [ 210.569656][ T6775] netlink: 'syz.2.725': attribute type 10 has an invalid length. [ 210.616960][ T4355] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 210.628670][ T4355] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.679028][ T4355] pvrusb2: Hardware description: Terratec Grabster AV400 [ 210.686688][ T4355] pvrusb2: ********** [ 210.690931][ T4355] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 210.702106][ T4355] pvrusb2: Important functionality might not be entirely working. [ 210.710143][ T4355] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 210.722169][ T4355] pvrusb2: ********** [ 210.758007][ T6644] usb 1-1: USB disconnect, device number 34 [ 210.881339][ T2420] pvrusb2: Invalid write control endpoint [ 210.911260][ T2420] pvrusb2: Invalid write control endpoint [ 210.917300][ T2420] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 210.927269][ T2420] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 210.935312][ T2420] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 210.953579][ T2420] pvrusb2: Device being rendered inoperable [ 210.959979][ T2420] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 210.963985][ T6780] netlink: 24 bytes leftover after parsing attributes in process `syz.4.727'. [ 210.971617][ T2420] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_h) [ 210.990623][ T2420] pvrusb2: Attached sub-driver cx25840 [ 210.996986][ T2420] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 211.018170][ T2420] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 211.090550][ T4355] usb 4-1: USB disconnect, device number 27 [ 211.119438][ T6788] loop2: detected capacity change from 0 to 512 [ 211.160547][ T6788] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 211.179739][ T6788] ext4 filesystem being mounted at /129/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 211.321503][ T6796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.731'. [ 212.126077][ T4355] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 212.148509][ T6806] loop1: detected capacity change from 0 to 764 [ 212.179351][ T6808] netlink: 96 bytes leftover after parsing attributes in process `syz.2.734'. [ 212.262509][ T6808] tipc: Enabling not permitted [ 212.303745][ T6808] tipc: Enabling of bearer rejected, failed to enable media [ 212.325959][ T6803] netlink: 4 bytes leftover after parsing attributes in process `syz.4.735'. [ 212.411249][ T4355] usb 1-1: Using ep0 maxpacket: 16 [ 212.461755][ T6817] netlink: 24 bytes leftover after parsing attributes in process `syz.4.738'. [ 212.521654][ T4183] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 212.531520][ T4355] usb 1-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 212.550736][ T6819] sp0: Synchronizing with TNC [ 212.565820][ T4355] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.584054][ T6819] loop2: detected capacity change from 0 to 64 [ 212.622835][ T6819] hfs: unable to parse mount options [ 212.659464][ T6822] netlink: 'syz.4.739': attribute type 10 has an invalid length. [ 212.731538][ T4355] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 212.734533][ T6819] loop2: detected capacity change from 0 to 512 [ 212.741953][ T4355] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.760752][ T4355] usb 1-1: Product: syz [ 212.765244][ T4183] usb 4-1: Using ep0 maxpacket: 16 [ 212.779478][ T4355] usb 1-1: Manufacturer: syz [ 212.784624][ T4355] usb 1-1: SerialNumber: syz [ 212.892372][ T4183] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 212.912413][ T4183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 212.929301][ T4183] usb 4-1: config 0 has no interface number 0 [ 212.960192][ T6824] netlink: 'syz.2.740': attribute type 10 has an invalid length. [ 213.111412][ T4183] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 213.120671][ T4183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.128749][ T4183] usb 4-1: Product: syz [ 213.133042][ T4183] usb 4-1: Manufacturer: syz [ 213.137642][ T4183] usb 4-1: SerialNumber: syz [ 213.143803][ T4183] usb 4-1: config 0 descriptor?? [ 213.183070][ T4183] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 213.189460][ T4183] usb 4-1: No valid video chain found. [ 213.271592][ T4355] usb 1-1: 0:2 : does not exist [ 213.387998][ T4355] usb 4-1: USB disconnect, device number 28 [ 213.525845][ T6837] loop1: detected capacity change from 0 to 512 [ 213.551345][ T5548] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 213.569524][ T6837] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 213.585958][ T6837] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.931327][ T5548] usb 5-1: Using ep0 maxpacket: 16 [ 214.102029][ T5548] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 214.164184][ T5548] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 214.343258][ T5548] usb 5-1: config 0 has no interface number 0 [ 214.523818][ T6645] usb 1-1: USB disconnect, device number 35 [ 214.560461][ T6846] loop3: detected capacity change from 0 to 128 [ 214.580949][ T6848] netlink: 96 bytes leftover after parsing attributes in process `syz.2.747'. [ 214.592820][ T6850] netlink: 24 bytes leftover after parsing attributes in process `syz.0.749'. [ 214.606153][ T6848] tipc: Enabling not permitted [ 214.612242][ T6848] tipc: Enabling of bearer rejected, failed to enable media [ 214.622335][ T6846] affs: Error parsing options [ 214.681627][ T5548] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 214.696366][ T5548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.729652][ T6854] sp0: Synchronizing with TNC [ 214.751561][ T5548] usb 5-1: Product: syz [ 214.772040][ T5548] usb 5-1: Manufacturer: syz [ 214.777202][ T5548] usb 5-1: SerialNumber: syz [ 214.795868][ T5548] usb 5-1: config 0 descriptor?? [ 214.845911][ T5548] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 214.865474][ T5548] usb 5-1: No valid video chain found. [ 214.889283][ T6859] netlink: 4 bytes leftover after parsing attributes in process `syz.1.748'. [ 214.913506][ T6854] loop0: detected capacity change from 0 to 64 [ 215.096139][ T6864] loop2: detected capacity change from 0 to 764 [ 215.224210][ T6854] hfs: unable to parse mount options [ 215.336150][ T6645] usb 5-1: USB disconnect, device number 27 [ 215.822092][ T6868] netlink: 'syz.2.753': attribute type 10 has an invalid length. [ 216.172574][ T6881] netlink: 'syz.1.756': attribute type 10 has an invalid length. [ 216.401359][ T7] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 216.437153][ T6885] loop0: detected capacity change from 0 to 512 [ 216.479405][ T6885] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 216.496245][ T6885] ext4 filesystem being mounted at /154/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 216.651273][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 217.414282][ T4183] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 217.426974][ T6894] netlink: 96 bytes leftover after parsing attributes in process `syz.3.762'. [ 217.436827][ T6895] netlink: 24 bytes leftover after parsing attributes in process `syz.1.761'. [ 217.464881][ T6894] tipc: Enabling not permitted [ 217.470605][ T6894] tipc: Enabling of bearer rejected, failed to enable media [ 217.541414][ T7] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 217.565790][ T7] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 217.598763][ T7] usb 5-1: config 0 has no interface number 0 [ 217.646153][ T6901] sp0: Synchronizing with TNC [ 217.663084][ T6901] loop1: detected capacity change from 0 to 64 [ 217.664644][ T4183] usb 3-1: Using ep0 maxpacket: 16 [ 217.702853][ T6901] hfs: unable to parse mount options [ 217.783269][ T6903] netlink: 12 bytes leftover after parsing attributes in process `syz.0.763'. [ 217.835397][ T6903] loop0: detected capacity change from 0 to 764 [ 218.278045][ T7] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 218.287461][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.311154][ T7] usb 5-1: Product: syz [ 218.315495][ T7] usb 5-1: Manufacturer: syz [ 218.320104][ T7] usb 5-1: SerialNumber: syz [ 218.333292][ T7] usb 5-1: config 0 descriptor?? [ 218.428388][ T4183] usb 3-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 218.441641][ T7] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 218.448249][ T7] usb 5-1: No valid video chain found. [ 218.458377][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.3.765'. [ 218.468290][ T4183] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 218.521205][ T6914] loop1: detected capacity change from 0 to 64 [ 218.644267][ T4355] usb 5-1: USB disconnect, device number 28 [ 218.655466][ T4183] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 218.669385][ T4183] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.684281][ T4183] usb 3-1: Product: syz [ 218.689680][ T4183] usb 3-1: Manufacturer: syz [ 218.695249][ T4183] usb 3-1: SerialNumber: syz [ 218.727857][ T6925] netlink: 'syz.0.770': attribute type 10 has an invalid length. [ 218.861207][ T4243] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 218.891296][ T7] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 219.081281][ T7] usb 4-1: device descriptor read/64, error -71 [ 219.101218][ T4243] usb 2-1: Using ep0 maxpacket: 16 [ 219.181430][ T4183] usb 3-1: 0:2 : does not exist [ 219.221397][ T4243] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 219.234382][ T6930] netlink: 'syz.4.771': attribute type 10 has an invalid length. [ 219.251306][ T4243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 219.271333][ T4243] usb 2-1: config 0 has no interface number 0 [ 219.351650][ T7] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 219.431515][ T4243] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 219.440985][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.452954][ T4243] usb 2-1: Product: syz [ 219.457618][ T4243] usb 2-1: Manufacturer: syz [ 219.464173][ T4243] usb 2-1: SerialNumber: syz [ 219.470234][ T4243] usb 2-1: config 0 descriptor?? [ 219.512568][ T4243] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 219.519367][ T4243] usb 2-1: No valid video chain found. [ 219.541321][ T7] usb 4-1: device descriptor read/64, error -71 [ 219.671343][ T7] usb usb4-port1: attempt power cycle [ 219.715823][ T5548] usb 2-1: USB disconnect, device number 37 [ 219.787363][ T6935] FAULT_INJECTION: forcing a failure. [ 219.787363][ T6935] name failslab, interval 1, probability 0, space 0, times 0 [ 219.806179][ T6935] CPU: 0 PID: 6935 Comm: syz.4.773 Not tainted 5.15.189-syzkaller #0 [ 219.814380][ T6935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 219.824717][ T6935] Call Trace: [ 219.828148][ T6935] [ 219.831187][ T6935] dump_stack_lvl+0x168/0x230 [ 219.831431][ T6937] loop0: detected capacity change from 0 to 512 [ 219.835961][ T6935] ? show_regs_print_info+0x20/0x20 [ 219.847715][ T6935] ? load_image+0x3b0/0x3b0 [ 219.852224][ T6935] ? __lock_acquire+0x7c60/0x7c60 [ 219.857354][ T6935] ? rcu_is_watching+0x11/0xa0 [ 219.862239][ T6935] should_fail+0x38c/0x4c0 [ 219.866658][ T6935] should_failslab+0x5/0x20 [ 219.871293][ T6935] slab_pre_alloc_hook+0x51/0xc0 [ 219.876245][ T6935] ? vm_area_alloc+0x20/0xe0 [ 219.881015][ T6935] kmem_cache_alloc+0x3d/0x290 [ 219.885944][ T6935] vm_area_alloc+0x20/0xe0 [ 219.890552][ T6935] mmap_region+0x945/0x15e0 [ 219.895149][ T6935] do_mmap+0x77a/0xdf0 [ 219.899412][ T6935] vm_mmap_pgoff+0x1b2/0x2b0 [ 219.904091][ T6935] ? account_locked_vm+0xe0/0xe0 [ 219.909236][ T6935] ? __lock_acquire+0x7c60/0x7c60 [ 219.914352][ T6935] ksys_mmap_pgoff+0x140/0x780 [ 219.919451][ T6935] ? mmap_region+0x15e0/0x15e0 [ 219.924306][ T6935] ? lockdep_hardirqs_on+0x94/0x140 [ 219.929618][ T6935] do_syscall_64+0x4c/0xa0 [ 219.934247][ T6935] ? clear_bhb_loop+0x30/0x80 [ 219.939226][ T6935] ? clear_bhb_loop+0x30/0x80 [ 219.943984][ T6935] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 219.950082][ T6935] RIP: 0033:0x7fcab226ac23 [ 219.954520][ T6935] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7 [ 219.974735][ T6935] RSP: 002b:00007fcab04d1e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 219.983223][ T6935] RAX: ffffffffffffffda RBX: 000000000000616e RCX: 00007fcab226ac23 [ 219.991272][ T6935] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000 [ 219.999566][ T6935] RBP: 0000200000006782 R08: 00000000ffffffff R09: 0000000000000000 [ 220.007885][ T6935] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004 [ 220.015877][ T6935] R13: 00007fcab04d1ef0 R14: 00007fcab04d1eb0 R15: 00002000000065c0 [ 220.024323][ T6935] [ 220.069282][ T6937] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 220.086617][ T6937] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 220.095510][ T6942] netlink: 24 bytes leftover after parsing attributes in process `syz.4.775'. [ 220.105190][ T7] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 220.247022][ T7] usb 4-1: device descriptor read/8, error -71 [ 220.943491][ T6950] netlink: 12 bytes leftover after parsing attributes in process `syz.4.776'. [ 220.959869][ T6950] loop4: detected capacity change from 0 to 764 [ 221.550534][ T5548] usb 3-1: USB disconnect, device number 29 [ 221.610252][ T6952] sp0: Synchronizing with TNC [ 221.619526][ T6952] loop0: detected capacity change from 0 to 64 [ 221.636890][ T6956] netlink: 96 bytes leftover after parsing attributes in process `syz.2.778'. [ 221.650794][ T6956] tipc: Enabling not permitted [ 221.664851][ T6952] hfs: unable to parse mount options [ 221.683985][ T6956] tipc: Enabling of bearer rejected, failed to enable media [ 221.748501][ T6952] loop0: detected capacity change from 0 to 512 [ 221.824348][ T6958] netlink: 4 bytes leftover after parsing attributes in process `syz.1.779'. [ 221.951758][ T6974] netlink: 'syz.2.783': attribute type 10 has an invalid length. [ 222.089337][ T6978] netlink: 'syz.0.784': attribute type 10 has an invalid length. [ 222.166066][ T4260] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 222.270479][ T6980] udc-core: couldn't find an available UDC or it's busy [ 222.277722][ T6980] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 222.411237][ T4260] usb 5-1: Using ep0 maxpacket: 16 [ 222.523287][ T6983] loop2: detected capacity change from 0 to 512 [ 222.531274][ T4260] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 222.539651][ T4260] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 222.550807][ T4260] usb 5-1: config 0 has no interface number 0 [ 222.620253][ T6988] netlink: 24 bytes leftover after parsing attributes in process `syz.1.788'. [ 222.641508][ T6983] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 222.679772][ T6983] ext4 filesystem being mounted at /140/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 222.691243][ T7] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 222.884685][ T4260] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 222.894133][ T4260] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.901629][ T7] usb 4-1: Using ep0 maxpacket: 8 [ 222.903378][ T4260] usb 5-1: Product: syz [ 222.912694][ T4260] usb 5-1: Manufacturer: syz [ 222.917607][ T4260] usb 5-1: SerialNumber: syz [ 222.923825][ T4260] usb 5-1: config 0 descriptor?? [ 223.580158][ T6997] netlink: 12 bytes leftover after parsing attributes in process `syz.1.790'. [ 223.596469][ T6997] loop1: detected capacity change from 0 to 764 [ 223.678316][ T4260] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 223.730716][ T4260] usb 5-1: No valid video chain found. [ 224.012936][ T4260] usb 5-1: USB disconnect, device number 29 [ 224.208644][ T4243] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 224.216573][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 224.226726][ T7] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 224.396503][ T4355] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 224.400366][ T7003] tipc: Enabling not permitted [ 224.409821][ T7003] tipc: Enabling of bearer rejected, failed to enable media [ 224.418590][ T7] usb 4-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 224.428371][ T7] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.437207][ T7] usb 4-1: Product: syz [ 224.441907][ T7] usb 4-1: Manufacturer: syz [ 224.446874][ T7] usb 4-1: SerialNumber: syz [ 224.460269][ T7] usb 4-1: config 0 descriptor?? [ 224.471436][ T4243] usb 1-1: Using ep0 maxpacket: 16 [ 224.503253][ T7] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 224.518048][ T7] imon 4-1:0.0: unable to initialize intf0, err -19 [ 224.526414][ T7] imon:imon_probe: failed to initialize context! [ 224.531329][ T6645] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 224.533444][ T7] imon 4-1:0.0: unable to register, err -19 [ 224.591454][ T4243] usb 1-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 224.600197][ T4243] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 224.604717][ T7010] sp0: Synchronizing with TNC [ 224.611245][ T4355] usb 3-1: device descriptor read/64, error -71 [ 224.632826][ T4243] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.647116][ T7010] loop4: detected capacity change from 0 to 64 [ 224.682143][ T7010] hfs: unable to parse mount options [ 224.702271][ T7] usb 4-1: USB disconnect, device number 32 [ 224.791338][ T4243] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.810870][ T4243] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.811292][ T6645] usb 2-1: Using ep0 maxpacket: 16 [ 224.824478][ T4243] usb 1-1: Product: syz [ 224.828700][ T4243] usb 1-1: Manufacturer: syz [ 224.838724][ T4243] usb 1-1: SerialNumber: syz [ 224.894195][ T7012] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 224.901355][ T4355] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 224.943584][ T7019] netlink: 'syz.4.797': attribute type 10 has an invalid length. [ 224.961520][ T6645] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 224.969894][ T6645] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.980625][ T6645] usb 2-1: config 0 has no interface number 0 [ 225.091303][ T4355] usb 3-1: device descriptor read/64, error -71 [ 225.172001][ T6645] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 225.184107][ T6645] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.192716][ T6645] usb 2-1: Product: syz [ 225.196901][ T6645] usb 2-1: Manufacturer: syz [ 225.204401][ T6645] usb 2-1: SerialNumber: syz [ 225.211005][ T6645] usb 2-1: config 0 descriptor?? [ 225.216405][ T4355] usb usb3-port1: attempt power cycle [ 225.253237][ T6645] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 225.259937][ T6645] usb 2-1: No valid video chain found. [ 225.331473][ T4243] usb 1-1: 0:2 : does not exist [ 225.456316][ T6645] usb 2-1: USB disconnect, device number 38 [ 225.506648][ T7023] netlink: 'syz.4.799': attribute type 10 has an invalid length. [ 225.631269][ T4355] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 225.731415][ T4355] usb 3-1: device descriptor read/8, error -71 [ 225.809704][ T7025] netlink: 24 bytes leftover after parsing attributes in process `syz.3.800'. [ 225.859080][ T7028] loop3: detected capacity change from 0 to 512 [ 225.954648][ T7028] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 225.981266][ T7028] ext4 filesystem being mounted at /159/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 226.001288][ T4355] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 226.131474][ T4355] usb 3-1: device descriptor read/8, error -71 [ 226.909281][ T7040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.803'. [ 226.925705][ T7040] loop4: detected capacity change from 0 to 764 [ 227.111620][ T4355] usb usb3-port1: unable to enumerate USB device [ 227.541715][ T4243] usb 1-1: USB disconnect, device number 36 [ 227.576270][ T7042] tipc: Enabling not permitted [ 227.598030][ T7042] tipc: Enabling of bearer rejected, failed to enable media [ 227.731556][ T7051] sp0: Synchronizing with TNC [ 227.759881][ T7051] loop4: detected capacity change from 0 to 64 [ 227.822353][ T7051] hfs: unable to parse mount options [ 227.930087][ T7055] netlink: 'syz.3.809': attribute type 10 has an invalid length. [ 227.966698][ T7033] loop1: detected capacity change from 0 to 32768 [ 227.985620][ T7060] netlink: 4 bytes leftover after parsing attributes in process `syz.0.808'. [ 228.062312][ T7033] jfs: Unrecognized mount option "discard=0x000+000000000006" or missing value [ 228.089165][ T7066] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'. [ 228.252710][ T7074] loop2: detected capacity change from 0 to 512 [ 228.363700][ T7074] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 228.385378][ T7074] ext4 filesystem being mounted at /144/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 228.511166][ T4243] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 228.544698][ T7081] netlink: 'syz.3.816': attribute type 10 has an invalid length. [ 228.581486][ T4260] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 228.791348][ T4260] usb 1-1: device descriptor read/64, error -71 [ 229.370820][ T7086] netlink: 12 bytes leftover after parsing attributes in process `syz.4.817'. [ 229.423405][ T7086] loop4: detected capacity change from 0 to 764 [ 229.433288][ T4260] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 229.631405][ T4260] usb 1-1: device descriptor read/64, error -71 [ 229.764761][ T4260] usb usb1-port1: attempt power cycle [ 229.935880][ T7088] tipc: Enabling not permitted [ 229.941534][ T7088] tipc: Enabling of bearer rejected, failed to enable media [ 229.981132][ T4243] usb 2-1: Using ep0 maxpacket: 16 [ 230.085817][ T7092] sp0: Synchronizing with TNC [ 230.100727][ T7092] loop3: detected capacity change from 0 to 64 [ 230.121670][ T4243] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 230.146946][ T7092] hfs: unable to parse mount options [ 230.161400][ T4243] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.185378][ T4243] usb 2-1: config 0 has no interface number 0 [ 230.211314][ T4260] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 230.233881][ T7094] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'. [ 230.276766][ T7092] loop3: detected capacity change from 0 to 512 [ 230.276937][ T4355] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 230.304603][ T4260] usb 1-1: device descriptor read/8, error -71 [ 230.351342][ T4243] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 230.360774][ T4243] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.369195][ T4243] usb 2-1: Product: syz [ 230.398655][ T4243] usb 2-1: Manufacturer: syz [ 230.403823][ T4243] usb 2-1: SerialNumber: syz [ 230.410157][ T4243] usb 2-1: config 0 descriptor?? [ 230.458436][ T4243] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 230.470401][ T4243] usb 2-1: No valid video chain found. [ 230.536493][ T4355] usb 3-1: Using ep0 maxpacket: 16 [ 230.557618][ T7106] loop3: detected capacity change from 0 to 1024 [ 230.581254][ T4260] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 230.656629][ T5548] usb 2-1: USB disconnect, device number 39 [ 230.661423][ T4355] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 230.677552][ T4355] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 230.688210][ T4355] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 230.691468][ T4260] usb 1-1: device descriptor read/8, error -71 [ 230.831457][ T4260] usb usb1-port1: unable to enumerate USB device [ 230.834146][ T7110] netlink: 24 bytes leftover after parsing attributes in process `syz.4.826'. [ 230.861409][ T4355] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 230.870570][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.891916][ T4355] usb 3-1: Product: syz [ 230.897180][ T4355] usb 3-1: Manufacturer: syz [ 230.917172][ T4355] usb 3-1: SerialNumber: syz [ 230.985188][ T7113] netlink: 'syz.4.827': attribute type 10 has an invalid length. [ 231.067591][ T7108] loop3: detected capacity change from 0 to 32768 [ 231.241612][ T7117] loop1: detected capacity change from 0 to 512 [ 231.309733][ T7117] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 231.327542][ T7117] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 231.332265][ T7120] netlink: 96 bytes leftover after parsing attributes in process `syz.0.830'. [ 231.370294][ T7120] tipc: Enabling not permitted [ 231.378361][ T7120] tipc: Enabling of bearer rejected, failed to enable media [ 231.431481][ T4355] usb 3-1: 0:2 : does not exist [ 232.275451][ T7127] netlink: 12 bytes leftover after parsing attributes in process `syz.0.831'. [ 232.293427][ T7127] loop0: detected capacity change from 0 to 764 [ 232.806023][ T7133] sp0: Synchronizing with TNC [ 232.829675][ T7130] netlink: 'syz.1.832': attribute type 10 has an invalid length. [ 232.840203][ T7133] loop4: detected capacity change from 0 to 64 [ 232.857773][ T7141] netlink: 4 bytes leftover after parsing attributes in process `syz.3.834'. [ 232.938031][ T7149] netlink: 28 bytes leftover after parsing attributes in process `syz.3.837'. [ 232.957752][ T7133] hfs: unable to parse mount options [ 233.108703][ T7160] netlink: 96 bytes leftover after parsing attributes in process `syz.3.841'. [ 233.123119][ T7160] tipc: Enabling not permitted [ 233.128937][ T7160] tipc: Enabling of bearer rejected, failed to enable media [ 233.218891][ T7162] loop3: detected capacity change from 0 to 512 [ 233.296277][ T7162] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 233.314120][ T7162] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 233.466085][ T4260] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 233.500939][ T7171] netlink: 'syz.0.844': attribute type 10 has an invalid length. [ 233.671410][ T4260] usb 5-1: device descriptor read/64, error -71 [ 233.961443][ T4260] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 234.210096][ T6644] usb 3-1: USB disconnect, device number 34 [ 234.216265][ T4260] usb 5-1: device descriptor read/64, error -71 [ 234.381297][ T4355] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 234.383655][ T4260] usb usb5-port1: attempt power cycle [ 234.500418][ T7181] netlink: 28 bytes leftover after parsing attributes in process `syz.3.848'. [ 234.519443][ T7182] netlink: 12 bytes leftover after parsing attributes in process `syz.2.846'. [ 234.575356][ T7182] loop2: detected capacity change from 0 to 764 [ 234.881531][ T4260] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 235.033050][ T4260] usb 5-1: device descriptor read/8, error -71 [ 235.218570][ T7189] sp0: Synchronizing with TNC [ 235.221373][ T7187] loop3: detected capacity change from 0 to 16 [ 235.223608][ T4355] usb 2-1: Using ep0 maxpacket: 16 [ 235.239549][ T7189] loop2: detected capacity change from 0 to 64 [ 235.247151][ T7189] hfs: unable to parse mount options [ 235.271486][ T7187] erofs: (device loop3): mounted with root inode @ nid 36. [ 235.297013][ T7192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 235.346468][ T7189] loop2: detected capacity change from 0 to 512 [ 235.361239][ T4260] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 235.363294][ T4355] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 235.380955][ T4355] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.393132][ T4355] usb 2-1: config 0 has no interface number 0 [ 235.435728][ T7196] netlink: 96 bytes leftover after parsing attributes in process `syz.3.852'. [ 235.484306][ T4260] usb 5-1: device descriptor read/8, error -71 [ 235.513821][ T7196] tipc: Enabling not permitted [ 235.519768][ T7196] tipc: Enabling of bearer rejected, failed to enable media [ 235.551527][ T4355] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 235.563260][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.574589][ T4355] usb 2-1: Product: syz [ 235.578768][ T4355] usb 2-1: Manufacturer: syz [ 235.584026][ T4355] usb 2-1: SerialNumber: syz [ 235.590151][ T4355] usb 2-1: config 0 descriptor?? [ 235.601417][ T4260] usb usb5-port1: unable to enumerate USB device [ 235.606335][ T7200] netlink: 'syz.2.853': attribute type 10 has an invalid length. [ 235.638362][ T4355] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 235.645012][ T4355] usb 2-1: No valid video chain found. [ 235.662153][ T7203] netlink: 'syz.3.855': attribute type 10 has an invalid length. [ 235.841436][ T7] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 235.842100][ T4260] usb 2-1: USB disconnect, device number 40 [ 236.041298][ T7] usb 1-1: device descriptor read/64, error -71 [ 236.146461][ T7207] loop4: detected capacity change from 0 to 512 [ 236.238825][ T7207] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 236.262047][ T7207] ext4 filesystem being mounted at /189/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 236.311182][ T7] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 236.427242][ T7218] netlink: 28 bytes leftover after parsing attributes in process `syz.1.861'. [ 236.436776][ T4355] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 236.511465][ T7] usb 1-1: device descriptor read/64, error -71 [ 237.208337][ T7223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 237.224958][ T7223] loop1: detected capacity change from 0 to 764 [ 237.850959][ T7] usb usb1-port1: attempt power cycle [ 237.901355][ T7225] sp0: Synchronizing with TNC [ 237.908553][ T7230] netlink: 96 bytes leftover after parsing attributes in process `syz.1.865'. [ 237.938275][ T7225] loop4: detected capacity change from 0 to 64 [ 237.945236][ T7230] tipc: Enabling not permitted [ 237.950728][ T7230] tipc: Enabling of bearer rejected, failed to enable media [ 237.971211][ T4355] usb 3-1: Using ep0 maxpacket: 16 [ 237.979840][ T7225] hfs: unable to parse mount options [ 237.995476][ T7234] netlink: 4 bytes leftover after parsing attributes in process `syz.3.864'. [ 238.101396][ T4355] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 238.134125][ T4355] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 238.180970][ T4355] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 238.207174][ T7244] netlink: 'syz.3.868': attribute type 10 has an invalid length. [ 238.216898][ T7246] netlink: 'syz.4.869': attribute type 10 has an invalid length. [ 238.271579][ T7] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 238.351255][ T4355] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 238.360456][ T4355] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.372633][ T7] usb 1-1: device descriptor read/8, error -71 [ 238.378854][ T4355] usb 3-1: Product: syz [ 238.384772][ T4355] usb 3-1: Manufacturer: syz [ 238.389453][ T4355] usb 3-1: SerialNumber: syz [ 238.401421][ T5553] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 238.588208][ T7250] loop0: detected capacity change from 0 to 512 [ 238.599869][ T7250] EXT4-fs (loop0): Test dummy encryption mode enabled [ 238.608598][ T7250] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 238.621435][ T5553] usb 2-1: device descriptor read/64, error -71 [ 238.621823][ T7250] EXT4-fs (loop0): Errors on filesystem, clearing orphan list. [ 238.637591][ T7250] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,errors=continue,delalloc,prjquota,usrquota,resuid=0x000000000000ee00,usrjquota=min_batch_time=0x00000000fffffffc,nodiscard,test_dummy_encryption,,errors=continue. Quota mode: writeback. [ 238.669062][ T7250] FAULT_INJECTION: forcing a failure. [ 238.669062][ T7250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 238.683307][ T7250] CPU: 0 PID: 7250 Comm: syz.0.871 Not tainted 5.15.189-syzkaller #0 [ 238.691501][ T7250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 238.701939][ T7250] Call Trace: [ 238.705234][ T7250] [ 238.708172][ T7250] dump_stack_lvl+0x168/0x230 [ 238.713096][ T7250] ? show_regs_print_info+0x20/0x20 [ 238.718346][ T7250] ? load_image+0x3b0/0x3b0 [ 238.722943][ T7250] ? __lock_acquire+0x7c60/0x7c60 [ 238.728091][ T7250] should_fail+0x38c/0x4c0 [ 238.732611][ T7250] strncpy_from_user+0x32/0x360 [ 238.737594][ T7250] getname_flags+0xef/0x500 [ 238.742221][ T7250] __x64_sys_symlinkat+0x87/0xa0 [ 238.747190][ T7250] do_syscall_64+0x4c/0xa0 [ 238.751592][ T7250] ? clear_bhb_loop+0x30/0x80 [ 238.756249][ T7250] ? clear_bhb_loop+0x30/0x80 [ 238.760905][ T7250] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 238.766873][ T7250] RIP: 0033:0x7fd517c8dbe9 [ 238.771401][ T7250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 238.791257][ T7250] RSP: 002b:00007fd515ef5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 238.799765][ T7250] RAX: ffffffffffffffda RBX: 00007fd517eb4fa0 RCX: 00007fd517c8dbe9 [ 238.807717][ T7250] RDX: 0000200000000200 RSI: ffffffffffffff9c RDI: 0000200000000080 [ 238.815675][ T7250] RBP: 00007fd515ef5090 R08: 0000000000000000 R09: 0000000000000000 [ 238.823636][ T7250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 238.831684][ T7250] R13: 00007fd517eb5038 R14: 00007fd517eb4fa0 R15: 00007fff6df09668 [ 238.839769][ T7250] [ 238.853685][ T4355] usb 3-1: 0:2 : does not exist [ 238.918078][ T7253] loop3: detected capacity change from 0 to 512 [ 238.931432][ T5553] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 239.118533][ T7253] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 239.135564][ T5553] usb 2-1: device descriptor read/64, error -71 [ 239.150403][ T7253] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 239.312318][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.0.875'. [ 239.366145][ T7264] loop0: detected capacity change from 0 to 764 [ 239.989284][ T5554] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 240.001464][ T5553] usb usb2-port1: attempt power cycle [ 240.300575][ T4243] usb 3-1: USB disconnect, device number 35 [ 240.421408][ T5554] usb 5-1: Using ep0 maxpacket: 16 [ 240.441278][ T5553] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 240.515417][ T7276] netlink: 96 bytes leftover after parsing attributes in process `syz.3.876'. [ 240.541514][ T5554] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 240.542832][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.2.877'. [ 240.551298][ T5554] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.563310][ T7276] tipc: Enabling not permitted [ 240.573452][ T5553] usb 2-1: device descriptor read/8, error -71 [ 240.578633][ T7276] tipc: Enabling of bearer rejected, failed to enable media [ 240.605738][ T5554] usb 5-1: config 0 has no interface number 0 [ 240.671835][ T7281] sp0: Synchronizing with TNC [ 240.680482][ T7281] loop3: detected capacity change from 0 to 64 [ 240.757755][ T7281] hfs: unable to parse mount options [ 240.812088][ T5554] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 240.861521][ T5553] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 240.870929][ T5554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.002048][ T5553] usb 2-1: device descriptor read/8, error -71 [ 241.015807][ T5554] usb 5-1: Product: syz [ 241.107481][ T5554] usb 5-1: Manufacturer: syz [ 241.161736][ T5553] usb usb2-port1: unable to enumerate USB device [ 241.233960][ T5554] usb 5-1: SerialNumber: syz [ 241.355074][ T5554] usb 5-1: config 0 descriptor?? [ 241.434326][ T5554] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 241.447415][ T5554] usb 5-1: No valid video chain found. [ 241.509512][ T7289] netlink: 'syz.1.883': attribute type 10 has an invalid length. [ 241.574260][ T7296] netlink: 'syz.2.886': attribute type 10 has an invalid length. [ 241.637371][ T5554] usb 5-1: USB disconnect, device number 34 [ 241.681411][ T6644] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 241.761260][ T7] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 241.871201][ T6644] usb 1-1: device descriptor read/64, error -71 [ 242.057597][ T7298] loop1: detected capacity change from 0 to 512 [ 242.151412][ T6644] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 242.248621][ T7298] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 242.266499][ T7298] ext4 filesystem being mounted at /169/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 242.271356][ T7] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice= 5.76 [ 242.487059][ T7306] loop2: detected capacity change from 0 to 764 [ 243.211371][ T6644] usb 1-1: device descriptor read/64, error -71 [ 243.314896][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.324873][ T7] usb 4-1: config 0 descriptor?? [ 243.344392][ T6644] usb usb1-port1: attempt power cycle [ 243.368289][ T7] usb_8dev 4-1:0.0 can0: sending command message failed [ 243.381999][ T7] usb_8dev 4-1:0.0 can0: can't get firmware version [ 243.506227][ T7311] netlink: 96 bytes leftover after parsing attributes in process `syz.1.890'. [ 243.530729][ T7311] tipc: Enabling not permitted [ 243.542350][ T7311] tipc: Enabling of bearer rejected, failed to enable media [ 243.552662][ T7] usb_8dev: probe of 4-1:0.0 failed with error -22 [ 243.587779][ T7] usb 4-1: USB disconnect, device number 33 [ 243.641329][ T5553] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 243.692473][ T7313] netlink: 4 bytes leftover after parsing attributes in process `syz.2.891'. [ 243.759217][ T7325] sp0: Synchronizing with TNC [ 243.774064][ T7325] loop2: detected capacity change from 0 to 64 [ 243.781577][ T6644] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 243.834966][ T7325] hfs: unable to parse mount options [ 243.883072][ T7325] loop2: detected capacity change from 0 to 512 [ 243.901360][ T6644] usb 1-1: device descriptor read/8, error -71 [ 243.907736][ T5553] usb 5-1: Using ep0 maxpacket: 16 [ 243.921339][ T4243] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 244.041346][ T5553] usb 5-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 244.052120][ T5553] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 244.112286][ T4243] usb 2-1: device descriptor read/64, error -71 [ 244.233882][ T6644] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 244.391313][ T4243] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 244.591429][ T4243] usb 2-1: device descriptor read/64, error -71 [ 244.721846][ T4243] usb usb2-port1: attempt power cycle [ 244.943177][ T5553] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 244.952864][ T6644] usb 1-1: device descriptor read/8, error -71 [ 244.959489][ T5553] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.967559][ T5553] usb 5-1: Product: syz [ 244.971774][ T5553] usb 5-1: Manufacturer: syz [ 245.041419][ T5553] usb 5-1: SerialNumber: syz [ 245.081356][ T6644] usb usb1-port1: unable to enumerate USB device [ 245.089488][ T7335] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 245.114161][ T7339] loop0: detected capacity change from 0 to 512 [ 245.119033][ T7337] netlink: 'syz.2.899': attribute type 10 has an invalid length. [ 245.143019][ T4243] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 245.165785][ T7339] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 245.182549][ T7339] ext4 filesystem being mounted at /182/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 245.231274][ T4243] usb 2-1: device descriptor read/8, error -71 [ 245.581986][ T5553] usb 5-1: 0:2 : does not exist [ 246.113359][ T7348] loop4: detected capacity change from 0 to 764 [ 246.384895][ T5553] usb 5-1: USB disconnect, device number 35 [ 246.759437][ T7357] tipc: Enabling not permitted [ 246.765951][ T7357] tipc: Enabling of bearer rejected, failed to enable media [ 247.319273][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.904'. [ 247.689201][ T7367] sp0: Synchronizing with TNC [ 247.729307][ T7367] loop0: detected capacity change from 0 to 64 [ 247.777565][ T7367] hfs: unable to parse mount options [ 247.867771][ T7378] loop2: detected capacity change from 0 to 512 [ 247.886535][ T7367] loop0: detected capacity change from 0 to 512 [ 247.921417][ T4355] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 248.007388][ T7378] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 248.029832][ T7378] ext4 filesystem being mounted at /162/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 248.071180][ T4183] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 248.114538][ T4355] usb 5-1: device descriptor read/64, error -71 [ 248.216571][ T7383] netlink: 'syz.0.913': attribute type 10 has an invalid length. [ 248.917541][ T7386] netlink: 'syz.1.914': attribute type 10 has an invalid length. [ 248.941417][ T4183] usb 4-1: Using ep0 maxpacket: 16 [ 248.990589][ T7390] befs: (nbd2): No write support. Marking filesystem read-only [ 249.004705][ T264] block nbd2: Attempted send on invalid socket [ 249.011000][ T264] blk_update_request: I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 249.023699][ T7390] befs: (nbd2): unable to read superblock [ 249.041374][ T4355] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 249.060399][ T7392] tipc: Enabling not permitted [ 249.066321][ T7392] tipc: Enabling of bearer rejected, failed to enable media [ 249.067297][ T4183] usb 4-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 249.086528][ T4183] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 249.231252][ T4355] usb 5-1: device descriptor read/64, error -71 [ 249.250572][ T5553] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 249.257623][ T4183] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 249.268244][ T4183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.276401][ T4183] usb 4-1: Product: syz [ 249.280571][ T4183] usb 4-1: Manufacturer: syz [ 249.285328][ T4183] usb 4-1: SerialNumber: syz [ 249.424361][ T7396] loop2: detected capacity change from 0 to 764 [ 249.561303][ T5553] usb 1-1: Using ep0 maxpacket: 32 [ 249.622019][ T5553] usb 1-1: no configurations [ 249.654849][ T5553] usb 1-1: can't read configurations, error -22 [ 249.926953][ T4355] usb usb5-port1: attempt power cycle [ 249.942429][ T5553] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 250.035780][ T4183] usb 4-1: 0:2 : does not exist [ 250.159542][ T7401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.920'. [ 250.271193][ T5553] usb 1-1: Using ep0 maxpacket: 32 [ 250.311268][ T5553] usb 1-1: no configurations [ 250.316103][ T5553] usb 1-1: can't read configurations, error -22 [ 250.328213][ T5553] usb usb1-port1: attempt power cycle [ 250.351211][ T4355] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 250.441385][ T4355] usb 5-1: device descriptor read/8, error -71 [ 250.527224][ T7416] sp0: Synchronizing with TNC [ 250.536678][ T7416] loop1: detected capacity change from 0 to 64 [ 250.572182][ T7416] hfs: unable to parse mount options [ 250.658230][ T7418] netlink: 'syz.2.925': attribute type 10 has an invalid length. [ 250.686254][ T7422] loop1: detected capacity change from 0 to 512 [ 250.751236][ T5553] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 250.767303][ T7422] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 250.789468][ T7422] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 250.951267][ T5553] usb 1-1: Using ep0 maxpacket: 32 [ 251.092444][ T5553] usb 1-1: no configurations [ 251.098498][ T5553] usb 1-1: can't read configurations, error -22 [ 251.281532][ T5553] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 251.452411][ T5553] usb 1-1: Using ep0 maxpacket: 32 [ 251.512774][ T5553] usb 1-1: no configurations [ 251.625000][ T5553] usb 1-1: can't read configurations, error -22 [ 251.665732][ T5553] usb usb1-port1: unable to enumerate USB device [ 251.706728][ T5553] usb 4-1: USB disconnect, device number 34 [ 251.708371][ T7430] tipc: Enabling not permitted [ 251.719385][ T7430] tipc: Enabling of bearer rejected, failed to enable media [ 251.771856][ T7432] netlink: 'syz.4.929': attribute type 10 has an invalid length. [ 251.893081][ T4383] udevd[4383]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.016792][ T7444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.932'. [ 252.058681][ T4374] udevd[4374]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 252.212156][ T7453] loop1: detected capacity change from 0 to 764 [ 252.274956][ T7448] loop0: detected capacity change from 0 to 4096 [ 252.609844][ T7448] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 252.891933][ T7448] ntfs3: loop0: MftZone: unavailable [ 252.925149][ T26] audit: type=1800 audit(1756307466.518:57): pid=7448 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.934" name="file1" dev="loop0" ino=30 res=0 errno=0 [ 252.958837][ T7461] sp0: Synchronizing with TNC [ 252.978838][ T7462] netlink: 'syz.4.939': attribute type 10 has an invalid length. [ 252.990523][ T7461] loop1: detected capacity change from 0 to 64 [ 253.042198][ T7461] hfs: unable to parse mount options [ 253.151174][ T6644] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 253.152090][ T7461] loop1: detected capacity change from 0 to 512 [ 253.276422][ T7470] loop1: detected capacity change from 0 to 512 [ 253.352585][ T7458] loop3: detected capacity change from 0 to 32768 [ 253.357687][ T7470] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 253.376010][ T4183] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 253.391213][ T6644] usb 3-1: Using ep0 maxpacket: 16 [ 253.399368][ T7470] ext4 filesystem being mounted at /184/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 253.442602][ T7458] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 253.504935][ T7458] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 253.625582][ T6644] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 253.634268][ T6644] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.646961][ T6644] usb 3-1: config 0 has no interface number 0 [ 253.651131][ T4183] usb 5-1: Using ep0 maxpacket: 16 [ 253.691743][ T7480] netlink: 96 bytes leftover after parsing attributes in process `syz.0.943'. [ 253.892159][ T6644] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 253.933061][ T6644] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.011301][ T7480] tipc: Enabling not permitted [ 254.047823][ T6644] usb 3-1: Product: syz [ 254.057367][ T7480] tipc: Enabling of bearer rejected, failed to enable media [ 254.196602][ T6644] usb 3-1: Manufacturer: syz [ 254.208024][ T6644] usb 3-1: SerialNumber: syz [ 254.230491][ T6644] usb 3-1: config 0 descriptor?? [ 254.284121][ T6644] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 254.312695][ T6644] usb 3-1: No valid video chain found. [ 254.426618][ T4183] usb 5-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 254.440673][ T4183] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 254.460461][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 254.485953][ T6646] usb 3-1: USB disconnect, device number 36 [ 254.602858][ T7491] netlink: 40 bytes leftover after parsing attributes in process `syz.3.945'. [ 254.661639][ T4183] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 254.680941][ T4183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.689895][ T4183] usb 5-1: Product: syz [ 254.694831][ T4183] usb 5-1: Manufacturer: syz [ 254.699602][ T4183] usb 5-1: SerialNumber: syz [ 254.731302][ T4260] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 254.739288][ T5554] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 254.779844][ T7493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.947'. [ 254.931355][ T4260] usb 1-1: device descriptor read/64, error -71 [ 254.981525][ T5554] usb 2-1: Using ep0 maxpacket: 32 [ 255.080335][ T7502] loop3: detected capacity change from 0 to 764 [ 255.094388][ T5554] usb 2-1: no configurations [ 255.099061][ T5554] usb 2-1: can't read configurations, error -22 [ 255.241962][ T4260] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 255.281269][ T5554] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 255.541585][ T4260] usb 1-1: device descriptor read/64, error -71 [ 255.583072][ T4183] usb 5-1: 0:2 : does not exist [ 255.591201][ T5554] usb 2-1: Using ep0 maxpacket: 32 [ 255.631415][ T5554] usb 2-1: no configurations [ 255.636627][ T5554] usb 2-1: can't read configurations, error -22 [ 255.661289][ T5554] usb usb2-port1: attempt power cycle [ 255.711794][ T1426] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.718116][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.742244][ T4260] usb usb1-port1: attempt power cycle [ 255.770180][ T7507] netlink: 'syz.3.951': attribute type 10 has an invalid length. [ 255.806571][ T7511] sp0: Synchronizing with TNC [ 255.815740][ T7511] loop3: detected capacity change from 0 to 64 [ 255.833506][ T7509] netlink: 'syz.2.950': attribute type 10 has an invalid length. [ 255.901657][ T7511] hfs: unable to parse mount options [ 256.003362][ T7511] loop3: detected capacity change from 0 to 512 [ 256.151230][ T5554] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 256.158911][ T4260] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 256.241375][ T5554] usb 2-1: Using ep0 maxpacket: 32 [ 256.251395][ T4260] usb 1-1: device descriptor read/8, error -71 [ 256.284052][ T5554] usb 2-1: no configurations [ 256.288762][ T5554] usb 2-1: can't read configurations, error -22 [ 256.368499][ T7516] loop2: detected capacity change from 0 to 512 [ 256.402435][ T4183] usb 5-1: USB disconnect, device number 40 [ 256.497946][ T7516] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 256.519697][ T7516] ext4 filesystem being mounted at /174/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 256.566414][ T5554] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 256.708960][ T4260] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 257.151484][ T4260] usb 1-1: device descriptor read/8, error -71 [ 257.211573][ T5554] usb 2-1: Using ep0 maxpacket: 32 [ 257.362738][ T5554] usb 2-1: no configurations [ 257.367384][ T5554] usb 2-1: can't read configurations, error -22 [ 257.389598][ T4260] usb usb1-port1: unable to enumerate USB device [ 257.427156][ T5554] usb usb2-port1: unable to enumerate USB device [ 257.454890][ T7527] netlink: 96 bytes leftover after parsing attributes in process `syz.4.956'. [ 257.579066][ T7529] netlink: 40 bytes leftover after parsing attributes in process `syz.3.957'. [ 257.632072][ T7527] tipc: Enabling not permitted [ 257.681752][ T7527] tipc: Enabling of bearer rejected, failed to enable media [ 257.842657][ T7537] netlink: 4 bytes leftover after parsing attributes in process `syz.1.958'. [ 257.992391][ T7548] loop3: detected capacity change from 0 to 764 [ 258.081371][ T4260] usb 1-1: new low-speed USB device number 57 using dummy_hcd [ 258.169300][ T7549] netlink: 'syz.1.962': attribute type 10 has an invalid length. [ 258.178081][ T5554] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 258.341482][ T4260] usb 1-1: device descriptor read/64, error -71 [ 258.481363][ T5554] usb 3-1: Using ep0 maxpacket: 16 [ 258.560819][ T7553] sp0: Synchronizing with TNC [ 258.596042][ T7553] loop4: detected capacity change from 0 to 64 [ 258.608436][ T5554] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 258.615889][ T7553] hfs: unable to parse mount options [ 258.621229][ T4260] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 258.635696][ T5554] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.646688][ T5554] usb 3-1: config 0 has no interface number 0 [ 258.662943][ T7553] loop4: detected capacity change from 0 to 512 [ 258.678620][ T7557] netlink: 'syz.3.966': attribute type 10 has an invalid length. [ 258.811394][ T5554] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 258.825951][ T4260] usb 1-1: device descriptor read/64, error -71 [ 258.842213][ T5554] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.850748][ T5554] usb 3-1: Product: syz [ 258.855648][ T5554] usb 3-1: Manufacturer: syz [ 258.860406][ T5554] usb 3-1: SerialNumber: syz [ 258.868299][ T5554] usb 3-1: config 0 descriptor?? [ 258.881646][ T4355] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 258.913125][ T5554] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 258.919612][ T5554] usb 3-1: No valid video chain found. [ 258.961489][ T4260] usb usb1-port1: attempt power cycle [ 259.115396][ T4258] usb 3-1: USB disconnect, device number 37 [ 259.141273][ T4355] usb 2-1: Using ep0 maxpacket: 16 [ 259.281379][ T4355] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.292308][ T4355] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.301338][ T4355] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 259.391291][ T4260] usb 1-1: new low-speed USB device number 59 using dummy_hcd [ 259.461713][ T4355] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.471309][ T4355] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.479589][ T4355] usb 2-1: Product: syz [ 259.481361][ T4260] usb 1-1: device descriptor read/8, error -71 [ 259.484334][ T4183] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 259.498059][ T4355] usb 2-1: Manufacturer: syz [ 259.502841][ T4355] usb 2-1: SerialNumber: syz [ 259.647914][ T7565] loop2: detected capacity change from 0 to 512 [ 259.710781][ T7565] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 259.727356][ T4258] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 259.732581][ T7565] ext4 filesystem being mounted at /176/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 259.751315][ T4260] usb 1-1: new low-speed USB device number 60 using dummy_hcd [ 259.751571][ T4183] usb 4-1: Using ep0 maxpacket: 32 [ 259.811407][ T4183] usb 4-1: no configurations [ 259.816589][ T4183] usb 4-1: can't read configurations, error -22 [ 259.961715][ T4260] usb 1-1: device descriptor read/8, error -71 [ 260.082154][ T4260] usb usb1-port1: unable to enumerate USB device [ 260.636732][ T4258] usb 5-1: device descriptor read/64, error -71 [ 260.643633][ T4355] usb 2-1: 0:2 : does not exist [ 260.649515][ T4183] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 260.668904][ T7573] netlink: 40 bytes leftover after parsing attributes in process `syz.0.971'. [ 260.730178][ T7575] netlink: 96 bytes leftover after parsing attributes in process `syz.0.973'. [ 260.744948][ T7575] tipc: Enabling not permitted [ 260.750598][ T7575] tipc: Enabling of bearer rejected, failed to enable media [ 260.931232][ T4258] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 260.937954][ T7585] netlink: 'syz.0.975': attribute type 10 has an invalid length. [ 260.961166][ T4183] usb 4-1: Using ep0 maxpacket: 32 [ 260.967528][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.2.972'. [ 261.011418][ T4183] usb 4-1: no configurations [ 261.016150][ T4183] usb 4-1: can't read configurations, error -22 [ 261.022737][ T4183] usb usb4-port1: attempt power cycle [ 261.131191][ T4258] usb 5-1: device descriptor read/64, error -71 [ 261.211564][ T7592] netlink: 4 bytes leftover after parsing attributes in process `syz.2.976'. [ 261.251396][ T4258] usb usb5-port1: attempt power cycle [ 261.451206][ T4183] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 261.588370][ T7598] loop2: detected capacity change from 0 to 764 [ 262.147494][ T6645] usb 2-1: USB disconnect, device number 53 [ 262.201178][ T7600] sp0: Synchronizing with TNC [ 262.220498][ T4258] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 262.228416][ T4183] usb 4-1: device descriptor read/8, error -71 [ 262.263523][ T7600] loop0: detected capacity change from 0 to 64 [ 262.291996][ T7606] netlink: 'syz.1.979': attribute type 10 has an invalid length. [ 262.331326][ T4258] usb 5-1: device descriptor read/8, error -71 [ 262.361799][ T7600] hfs: unable to parse mount options [ 262.454940][ T7600] loop0: detected capacity change from 0 to 512 [ 262.593415][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.4.984'. [ 262.616667][ T7615] loop0: detected capacity change from 0 to 512 [ 262.660534][ T7615] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 262.681379][ T7619] netlink: 96 bytes leftover after parsing attributes in process `syz.4.985'. [ 262.694203][ T7615] ext4 filesystem being mounted at /197/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.718242][ T7619] tipc: Enabling not permitted [ 262.751442][ T4183] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 262.838973][ T7619] tipc: Enabling of bearer rejected, failed to enable media [ 262.871538][ T4183] usb 4-1: Using ep0 maxpacket: 16 [ 263.589450][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.986'. [ 263.681350][ T4183] usb 4-1: config 0 has an invalid interface number: 105 but max is 0 [ 263.689137][ T7635] netlink: 'syz.4.988': attribute type 10 has an invalid length. [ 263.689812][ T4183] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 263.689832][ T4183] usb 4-1: config 0 has no interface number 0 [ 263.941499][ T4183] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 264.056015][ T7643] loop0: detected capacity change from 0 to 764 [ 264.065443][ T4260] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 264.381591][ T4260] usb 2-1: Using ep0 maxpacket: 16 [ 264.531483][ T4260] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.574764][ T4183] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.582989][ T4183] usb 4-1: Product: syz [ 264.587248][ T4183] usb 4-1: Manufacturer: syz [ 264.592000][ T4183] usb 4-1: SerialNumber: syz [ 264.595224][ T4260] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.602663][ T4183] usb 4-1: config 0 descriptor?? [ 264.645912][ T4260] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping [ 264.690095][ T4183] usb 4-1: Found UVC 0.00 device syz (046d:08f3) [ 264.697190][ T4183] usb 4-1: No valid video chain found. [ 264.738016][ T7647] sp0: Synchronizing with TNC [ 264.747499][ T7647] loop0: detected capacity change from 0 to 64 [ 264.753925][ T7] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 264.826727][ T7647] hfs: unable to parse mount options [ 264.851900][ T4260] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.861845][ T4260] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.869858][ T4260] usb 2-1: Product: syz [ 264.875000][ T4260] usb 2-1: Manufacturer: syz [ 264.879898][ T4260] usb 2-1: SerialNumber: syz [ 264.905155][ T4243] usb 4-1: USB disconnect, device number 38 [ 264.929204][ T7649] netlink: 40 bytes leftover after parsing attributes in process `syz.0.995'. [ 264.951661][ T7] usb 3-1: device descriptor read/64, error -71 [ 265.031251][ T4258] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 265.231336][ T4258] usb 5-1: device descriptor read/64, error -71 [ 265.237763][ T7] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 265.391410][ T4260] usb 2-1: 0:2 : does not exist [ 265.431254][ T7] usb 3-1: device descriptor read/64, error -71 [ 265.467204][ T7653] netlink: 'syz.3.997': attribute type 10 has an invalid length. [ 265.512309][ T4258] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 265.518887][ T7655] netlink: 96 bytes leftover after parsing attributes in process `syz.0.998'. [ 265.534053][ T7655] tipc: Enabling not permitted [ 265.539813][ T7655] tipc: Enabling of bearer rejected, failed to enable media [ 265.551376][ T7] usb usb3-port1: attempt power cycle [ 265.633923][ T7657] loop0: detected capacity change from 0 to 512 [ 265.711242][ T4258] usb 5-1: device descriptor read/64, error -71 [ 265.877002][ T4258] usb usb5-port1: attempt power cycle [ 266.480999][ T7664] loop3: detected capacity change from 0 to 512 [ 266.541013][ T7664] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback. [ 266.563340][ T7664] ext4 filesystem being mounted at /208/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 266.577124][ T7] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 266.676670][ T4355] usb 2-1: USB disconnect, device number 54 [ 266.763923][ T7] usb 3-1: device descriptor read/8, error -71 [ 267.487396][ T4258] usb 5-1: new low-speed USB device number 47 using dummy_hcd [ 267.517314][ T7678] netlink: 'syz.2.1003': attribute type 10 has an invalid length. [ 267.581462][ T4258] usb 5-1: device descriptor read/8, error -71 [ 267.619060][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1002'. [ 267.679024][ T7681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1001'. [ 267.708056][ T7681] block device autoloading is deprecated and will be removed. [ 267.724437][ T7681] loop0: detected capacity change from 0 to 512 [ 267.805552][ T7689] sp0: Synchronizing with TNC [ 267.815741][ T7689] loop4: detected capacity change from 0 to 64 [ 267.824900][ T7681] EXT4-fs (loop0): Mount option "delalloc" incompatible with ext2 [ 267.828808][ T7690] loop1: detected capacity change from 0 to 512 [ 267.945260][ T7692] loop3: detected capacity change from 0 to 764 [ 268.018589][ T7689] hfs: unable to parse mount options [ 268.034807][ T7681] [ 268.037290][ T7681] ====================================================== [ 268.044475][ T7681] WARNING: possible circular locking dependency detected [ 268.051497][ T7681] 5.15.189-syzkaller #0 Not tainted [ 268.056684][ T7681] ------------------------------------------------------ [ 268.063870][ T7681] syz.0.1001/7681 is trying to acquire lock: [ 268.069927][ T7681] ffff8880228bb938 ((wq_completion)loop0){+.+.}-{0:0}, at: flush_workqueue+0x126/0x1380 [ 268.079758][ T7681] [ 268.079758][ T7681] but task is already holding lock: [ 268.087212][ T7681] ffff888147440468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 268.096131][ T7681] [ 268.096131][ T7681] which lock already depends on the new lock. [ 268.096131][ T7681] [ 268.106749][ T7681] [ 268.106749][ T7681] the existing dependency chain (in reverse order) is: [ 268.115785][ T7681] [ 268.115785][ T7681] -> #6 (&lo->lo_mutex){+.+.}-{3:3}: [ 268.123257][ T7681] __mutex_lock_common+0x1eb/0x2390 [ 268.128984][ T7681] mutex_lock_killable_nested+0x17/0x20 [ 268.135065][ T7681] lo_open+0x6a/0x100 [ 268.139566][ T7681] blkdev_get_whole+0x90/0x390 [ 268.144847][ T7681] blkdev_get_by_dev+0x2d0/0xa60 [ 268.150306][ T7681] blkdev_open+0x12d/0x2c0 [ 268.155235][ T7681] do_dentry_open+0x7ff/0xf80 [ 268.160427][ T7681] path_openat+0x2682/0x2f30 [ 268.165651][ T7681] do_filp_open+0x1b3/0x3e0 [ 268.170763][ T7681] do_sys_openat2+0x142/0x4a0 [ 268.175967][ T7681] __x64_sys_openat+0x135/0x160 [ 268.181699][ T7681] do_syscall_64+0x4c/0xa0 [ 268.186636][ T7681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.193049][ T7681] [ 268.193049][ T7681] -> #5 (&disk->open_mutex){+.+.}-{3:3}: [ 268.200963][ T7681] __mutex_lock_common+0x1eb/0x2390 [ 268.206691][ T7681] mutex_lock_nested+0x17/0x20 [ 268.212114][ T7681] blkdev_get_by_dev+0x157/0xa60 [ 268.217573][ T7681] swsusp_check+0x9b/0x2a0 [ 268.222711][ T7681] software_resume+0xc6/0x3b0 [ 268.227901][ T7681] resume_store+0xe4/0x130 [ 268.232893][ T7681] kernfs_fop_write_iter+0x379/0x4c0 [ 268.238702][ T7681] vfs_write+0x712/0xd00 [ 268.243549][ T7681] ksys_write+0x14d/0x250 [ 268.248401][ T7681] do_syscall_64+0x4c/0xa0 [ 268.253593][ T7681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.260006][ T7681] [ 268.260006][ T7681] -> #4 (system_transition_mutex/1){+.+.}-{3:3}: [ 268.268527][ T7681] __mutex_lock_common+0x1eb/0x2390 [ 268.274262][ T7681] mutex_lock_nested+0x17/0x20 [ 268.279539][ T7681] software_resume+0x7c/0x3b0 [ 268.284733][ T7681] resume_store+0xe4/0x130 [ 268.289754][ T7681] kernfs_fop_write_iter+0x379/0x4c0 [ 268.295567][ T7681] vfs_write+0x712/0xd00 [ 268.300425][ T7681] ksys_write+0x14d/0x250 [ 268.305378][ T7681] do_syscall_64+0x4c/0xa0 [ 268.310629][ T7681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.317041][ T7681] [ 268.317041][ T7681] -> #3 (&of->mutex){+.+.}-{3:3}: [ 268.324248][ T7681] __mutex_lock_common+0x1eb/0x2390 [ 268.329975][ T7681] mutex_lock_nested+0x17/0x20 [ 268.335265][ T7681] kernfs_seq_start+0x51/0x3c0 [ 268.340576][ T7681] seq_read_iter+0x3c4/0xd50 [ 268.345773][ T7681] vfs_read+0x725/0xcf0 [ 268.350447][ T7681] ksys_read+0x14d/0x250 [ 268.355200][ T7681] do_syscall_64+0x4c/0xa0 [ 268.360138][ T7681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.366555][ T7681] [ 268.366555][ T7681] -> #2 (&p->lock){+.+.}-{3:3}: [ 268.373686][ T7681] __mutex_lock_common+0x1eb/0x2390 [ 268.379760][ T7681] mutex_lock_nested+0x17/0x20 [ 268.385129][ T7681] seq_read_iter+0xad/0xd50 [ 268.390308][ T7681] do_iter_readv_writev+0x497/0x600 [ 268.396028][ T7681] do_iter_read+0x20b/0x7c0 [ 268.401235][ T7681] loop_process_work+0x18dc/0x2480 [ 268.406959][ T7681] process_one_work+0x863/0x1000 [ 268.412414][ T7681] worker_thread+0xaa8/0x12a0 [ 268.417603][ T7681] kthread+0x436/0x520 [ 268.422368][ T7681] ret_from_fork+0x1f/0x30 [ 268.427347][ T7681] [ 268.427347][ T7681] -> #1 ((work_completion)(&worker->work)){+.+.}-{0:0}: [ 268.436663][ T7681] process_one_work+0x7bf/0x1000 [ 268.442346][ T7681] worker_thread+0xaa8/0x12a0 [ 268.447541][ T7681] kthread+0x436/0x520 [ 268.452216][ T7681] ret_from_fork+0x1f/0x30 [ 268.457149][ T7681] [ 268.457149][ T7681] -> #0 ((wq_completion)loop0){+.+.}-{0:0}: [ 268.465224][ T7681] __lock_acquire+0x2c33/0x7c60 [ 268.470596][ T7681] lock_acquire+0x197/0x3f0 [ 268.475611][ T7681] flush_workqueue+0x142/0x1380 [ 268.481147][ T7681] drain_workqueue+0xcf/0x380 [ 268.486418][ T7681] destroy_workqueue+0x7b/0xb20 [ 268.491796][ T7681] __loop_clr_fd+0x234/0xb90 [ 268.497002][ T7681] lo_ioctl+0xffa/0x1cf0 [ 268.501763][ T7681] blkdev_ioctl+0x33c/0x690 [ 268.506781][ T7681] block_ioctl+0xac/0xf0 [ 268.511627][ T7681] __se_sys_ioctl+0xfa/0x170 [ 268.516742][ T7681] do_syscall_64+0x4c/0xa0 [ 268.521989][ T7681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.528590][ T7681] [ 268.528590][ T7681] other info that might help us debug this: [ 268.528590][ T7681] [ 268.538955][ T7681] Chain exists of: [ 268.538955][ T7681] (wq_completion)loop0 --> &disk->open_mutex --> &lo->lo_mutex [ 268.538955][ T7681] [ 268.552610][ T7681] Possible unsafe locking scenario: [ 268.552610][ T7681] [ 268.560258][ T7681] CPU0 CPU1 [ 268.563762][ T7690] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.1005: casefold flag without casefold feature [ 268.565605][ T7681] ---- ---- [ 268.565612][ T7681] lock(&lo->lo_mutex); [ 268.565626][ T7681] lock(&disk->open_mutex); [ 268.565637][ T7681] lock(&lo->lo_mutex); [ 268.565648][ T7681] lock((wq_completion)loop0); [ 268.578814][ T7690] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.1005: couldn't read orphan inode 15 (err -117) [ 268.583696][ T7681] [ 268.583696][ T7681] *** DEADLOCK *** [ 268.583696][ T7681] [ 268.583704][ T7681] 1 lock held by syz.0.1001/7681: [ 268.583714][ T7681] #0: ffff888147440468 (&lo->lo_mutex){+.+.}-{3:3}, at: __loop_clr_fd+0xaa/0xb90 [ 268.583759][ T7681] [ 268.583759][ T7681] stack backtrace: [ 268.583765][ T7681] CPU: 0 PID: 7681 Comm: syz.0.1001 Not tainted 5.15.189-syzkaller #0 [ 268.589748][ T7690] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,user_xattr,,errors=continue. Quota mode: writeback. [ 268.595345][ T7681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 268.595361][ T7681] Call Trace: [ 268.595368][ T7681] [ 268.595375][ T7681] dump_stack_lvl+0x168/0x230 [ 268.595397][ T7681] ? load_image+0x3b0/0x3b0 [ 268.595412][ T7681] ? show_regs_print_info+0x20/0x20 [ 268.595428][ T7681] ? print_circular_bug+0x12b/0x1a0 [ 268.595442][ T7681] check_noncircular+0x274/0x310 [ 268.595456][ T7681] ? add_chain_block+0x940/0x940 [ 268.595469][ T7681] ? lockdep_lock+0xdc/0x1e0 [ 268.595488][ T7681] ? raw_spin_rq_lock_nested+0x26/0x140 [ 268.595505][ T7681] ? reacquire_held_locks+0x2f9/0x590 [ 268.595519][ T7681] ? mark_lock+0x94/0x320 [ 268.595535][ T7681] __lock_acquire+0x2c33/0x7c60 [ 268.595560][ T7681] ? verify_lock_unused+0x140/0x140 [ 268.595574][ T7681] ? verify_lock_unused+0x140/0x140 [ 268.595591][ T7681] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 268.595606][ T7681] ? verify_lock_unused+0x140/0x140 [ 268.595620][ T7681] ? verify_lock_unused+0x140/0x140 [ 268.595636][ T7681] ? memset+0x1e/0x40 [ 268.595653][ T7681] lock_acquire+0x197/0x3f0 [ 268.595668][ T7681] ? flush_workqueue+0x126/0x1380 [ 268.595685][ T7681] ? read_lock_is_recursive+0x10/0x10 [ 268.595701][ T7681] ? __init_swait_queue_head+0xa5/0x150 [ 268.791750][ T7681] flush_workqueue+0x142/0x1380 [ 268.796607][ T7681] ? flush_workqueue+0x126/0x1380 [ 268.801621][ T7681] ? __lock_acquire+0x7c60/0x7c60 [ 268.806973][ T7681] ? __mutex_lock_common+0x431/0x2390 [ 268.812487][ T7681] ? _raw_spin_lock_irqsave+0x7f/0xf0 [ 268.818096][ T7681] ? lockdep_hardirqs_off+0x70/0x100 [ 268.823373][ T7681] ? rcu_work_rcufn+0x110/0x110 [ 268.828209][ T7681] ? __mutex_unlock_slowpath+0x19e/0x6a0 [ 268.833856][ T7681] ? finish_wait+0xc0/0x1d0 [ 268.838992][ T7681] drain_workqueue+0xcf/0x380 [ 268.843787][ T7681] destroy_workqueue+0x7b/0xb20 [ 268.848673][ T7681] __loop_clr_fd+0x234/0xb90 [ 268.853454][ T7681] lo_ioctl+0xffa/0x1cf0 [ 268.857794][ T7681] ? lo_release+0x1f0/0x1f0 [ 268.862569][ T7681] ? unwind_get_return_address+0x49/0x80 [ 268.868587][ T7681] ? arch_stack_walk+0xf2/0x140 [ 268.873591][ T7681] ? verify_lock_unused+0x140/0x140 [ 268.878890][ T7681] ? rcu_lock_release+0x5/0x20 [ 268.883660][ T7681] ? __lock_acquire+0x7c60/0x7c60 [ 268.888809][ T7681] ? deref_stack_reg+0xd0/0x120 [ 268.893791][ T7681] ? 0xffffffffa00162f8 [ 268.897946][ T7681] ? is_bpf_text_address+0x254/0x270 [ 268.903237][ T7681] ? __kernel_text_address+0x9a/0x100 [ 268.908625][ T7681] ? unwind_get_return_address+0x49/0x80 [ 268.914332][ T7681] ? stack_trace_save+0xe0/0xe0 [ 268.919171][ T7681] ? arch_stack_walk+0xf2/0x140 [ 268.924223][ T7681] ? kfree+0xef/0x2a0 [ 268.928294][ T7681] ? stack_trace_save+0x98/0xe0 [ 268.933262][ T7681] ? stack_trace_snprint+0xf0/0xf0 [ 268.938379][ T7681] ? slab_free_freelist_hook+0xea/0x170 [ 268.943917][ T7681] ? security_file_ioctl+0x6c/0xa0 [ 268.949025][ T7681] ? __se_sys_ioctl+0x48/0x170 [ 268.953775][ T7681] ? do_syscall_64+0x4c/0xa0 [ 268.958435][ T7681] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 268.964659][ T7681] ? kfree+0xef/0x2a0 [ 268.968624][ T7681] ? kasan_set_track+0x62/0x70 [ 268.973460][ T7681] ? kasan_set_track+0x4b/0x70 [ 268.978204][ T7681] ? kasan_set_free_info+0x1f/0x40 [ 268.983299][ T7681] ? ____kasan_slab_free+0xd5/0x110 [ 268.988477][ T7681] ? slab_free_freelist_hook+0xea/0x170 [ 268.994089][ T7681] ? kfree+0xef/0x2a0 [ 268.998083][ T7681] ? tomoyo_path_number_perm+0x48f/0x5d0 [ 269.003712][ T7681] ? security_file_ioctl+0x6c/0xa0 [ 269.008915][ T7681] ? __se_sys_ioctl+0x48/0x170 [ 269.013692][ T7681] ? do_syscall_64+0x4c/0xa0 [ 269.018267][ T7681] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.024498][ T7681] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 269.030586][ T7681] ? lock_chain_count+0x20/0x20 [ 269.035509][ T7681] ? do_vfs_ioctl+0xcc3/0x1de0 [ 269.040371][ T7681] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 269.046068][ T7681] ? rcu_lock_release+0x5/0x20 [ 269.050815][ T7681] ? __lock_acquire+0x7c60/0x7c60 [ 269.055908][ T7681] ? kfree+0xef/0x2a0 [ 269.059957][ T7681] ? blkdev_common_ioctl+0x686/0x1c70 [ 269.065312][ T7681] ? verify_lock_unused+0x140/0x140 [ 269.070493][ T7681] ? blkdev_bszset+0x200/0x200 [ 269.075246][ T7681] ? lo_release+0x1f0/0x1f0 [ 269.079729][ T7681] blkdev_ioctl+0x33c/0x690 [ 269.084212][ T7681] ? blkdev_compat_ptr_ioctl+0xd0/0xd0 [ 269.089656][ T7681] ? blkdev_iopoll+0x100/0x100 [ 269.094401][ T7681] block_ioctl+0xac/0xf0 [ 269.098620][ T7681] __se_sys_ioctl+0xfa/0x170 [ 269.103192][ T7681] do_syscall_64+0x4c/0xa0 [ 269.107689][ T7681] ? clear_bhb_loop+0x30/0x80 [ 269.112342][ T7681] ? clear_bhb_loop+0x30/0x80 [ 269.117000][ T7681] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 269.122964][ T7681] RIP: 0033:0x7fd517c8d7eb [ 269.127361][ T7681] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 269.147392][ T7681] RSP: 002b:00007fd515eb2e10 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.155896][ T7681] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 00007fd517c8d7eb [ 269.163999][ T7681] RDX: 0000000000000000 RSI: 0000000000004c01 RDI: 000000000000000b [ 269.171969][ T7681] RBP: 000000000000000b R08: 0000000000000000 R09: 0000000001810754 [ 269.180030][ T7681] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000016 [ 269.188260][ T7681] R13: 00007fd515eb2eb0 R14: 000000000000046e R15: 0000200000003640 [ 269.196414][ T7681] [ 269.326314][ T7689] loop4: detected capacity change from 0 to 512