last executing test programs: 17.855745954s ago: executing program 0 (id=1146): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x40, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f000000430000000100000000000000", @ANYRES32, @ANYBLOB="0000000000e2ffffffff", @ANYRES32=0x0, @ANYBLOB], 0x50) syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r3 = openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 15.915006684s ago: executing program 3 (id=1150): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r1, &(0x7f0000000040)={0x2020}, 0x229) 15.308125734s ago: executing program 3 (id=1151): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x34, 0x70, 0x9d, 0x40, 0x55f, 0xc230, 0xb6ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf2, 0xa7, 0xcc}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x21, 0x1, 0x9}}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000dc0)={0x2c, &(0x7f0000000ac0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f00000005c0)={0x0, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 12.076427951s ago: executing program 3 (id=1154): getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0xffffffffffffffff, &(0x7f0000000000)=0x6d) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x10, 0x30}, 0xc) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x100e099, 0x0, 0x3, 0xb7}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffff73, 0x0, 0x4) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000780)=@IORING_OP_WRITE={0x17, 0x14, 0x4007, @fd_index=0x5, 0xffffffff, &(0x7f0000000700)="db7fc8906647a2f807b38c18eb9ae193a1ee85e97c4ca2de0f458bb494444bf7db89bffc9dee6f499872dfd5e46dde8ad1e53f40ea6b9000"/67, 0x43, 0x19}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) 11.868495177s ago: executing program 2 (id=1155): getpgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r3) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100040000002c00048005000300010000000500030080ffffff05000300016900000500030080ffffff0500030004e300000800020003"], 0x50}}, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x181800) 11.486318896s ago: executing program 0 (id=1156): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r0 = getpid() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source\x1c\xe9S_\xa0F\x1a\xff\x00\x00\x00\x80\xfey\x89\xb1,\b\xb0}\xb9\x14w\xcaHu\xe0\xdcLD\x0eHY\xbb\x1a\xb3\xd3IzP\x00\xcc\x1a\x04\"\xa2\xe2M\x00\x00o\x8a\x0e\x7f\x80S\xf0|\x13\xeb\x1a\xeb\xcb\x9dY3\x82]\xd2BW\xd1b{\xaf6\x9a\xaf\xf8\xb8m\xdf\x11}\x92Y\x7fI\x8d\x9b\xacC\xec\xf4`\x01\xef|c\xa5\x00^\x16\xbf\xa3y\x8c%x&\xca\t\x02\x1b\xee\xdfu\xe3\x13\x018\x00\x00\x00\x19*~\x01>\x81\xd4\xc1\xd5\x1d\x82\xdewe\xf5x\xf1aB\x16\xc4\x90I\xe6\x99T\x14\x1c`\xf5\xb0\xf1\x967\xaf\x97q\xb5`@q\x84\x9b\x1e\xfayhNH\xae5at\xae\xe8\x90\xc1\x02\xeb\f\xc7\x1d\x01\xe7e1*:\xa8\x80VQ\xa78A\x10]\x1eRy\x87\xa6\xd4\xad#2\x06\'\x99\xdch\xe2\xa3\xeal\xc58\x8dK\x82l\xa9\xe1/$\f\x89\x85\x10\xa6', &(0x7f0000000340)='//\xf2b\x06\b\xba\xdfjD\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14//\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x101, 0x0, 0x1}, {0x9c}, {0x6}, {0x8, 0x0, 0x1}, {0x800}, {0x8, 0x0, 0x1}, {0xcd896}, {0x1, 0x0, 0x1}, {0xfffad, 0x0, 0x1}, {0x7704, 0x0, 0x1}, {0x2b5, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x95e}, {0x3}, {0x7, 0x0, 0x1}, {0x5}, {0x4, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xc0c8, 0x0, 0x1}, {0xf0, 0x0, 0x1}, {0x7}, {0xffff}, {0x4}, {0x52fd, 0x0, 0x1}, {0x6}, {0x800}, {0x101, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}]}]}, 0xa0}}, 0x0) 10.712389257s ago: executing program 2 (id=1157): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffffff, &(0x7f0000000080)='./file1\x00', 0xe2) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40046f41, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @local, @initdev}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) userfaultfd(0x80001) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r5, r6, 0x4001, 0x10, 0xfffffffc, 0x804, {0x1d1ba, 0x1, 0x3, 0xc629, 0xf48, 0x2, 0x0, 0x6, 0x4130, 0xe154, 0x200, 0x7f, 0x158, 0xffffffff, "fe1d00003413000000000020b40000000000db36d92a00"}}) 10.227073529s ago: executing program 3 (id=1158): socket$inet_tcp(0x2, 0x1, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) fallocate(0xffffffffffffffff, 0x0, 0x100000000, 0x2000402) 10.187892782s ago: executing program 2 (id=1159): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}], [], 0x6b}}) 8.564142966s ago: executing program 3 (id=1160): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x1c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000180)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000100)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000580)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(0xffffffffffffffff, 0x40184810, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 6.870229666s ago: executing program 1 (id=1163): syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="043e07"], 0x9) 6.847534026s ago: executing program 4 (id=1164): r0 = gettid() openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x8000) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc) r2 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x465e, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x6000, @fd=r1, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r2, 0x40f9, 0x217, 0xa5, 0x0, 0xf5) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r5, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x3938700}}, 0x0) 6.552092154s ago: executing program 1 (id=1165): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$inet6(0xa, 0x802, 0x0) connect$inet6(r1, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r1, &(0x7f0000001840), 0x3b, 0x0) 6.416901738s ago: executing program 2 (id=1166): socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$vim2m_VIDIOC_G_FMT(0xffffffffffffffff, 0xc0d05604, 0x0) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x200) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r2, 0xc0a45352, &(0x7f0000000040)={{0x0, 0xff}, 'port1\x00', 0x0, 0x40, 0x1, 0x5, 0x6, 0x8, 0x9, 0x0, 0x2, 0x4}) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, 0x0, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000f40)=ANY=[@ANYBLOB="050000007f000000430000000100000000000000", @ANYRES32, @ANYBLOB="0000000000e2ffffffff", @ANYRES32=0x0, @ANYBLOB], 0x50) syz_usb_connect(0x5, 0x4a, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109023800010000000009043200019740a400052406000105240000000d240f0109000000020009004e06241a00b51409058203ff"], 0x0) r3 = openat$vnet(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) r7 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r7, &(0x7f0000000000)={0x1d, r8}, 0x10) setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0x6}, {0xffff, 0xfff9}, {0x1}}}, 0x24}}, 0x0) 5.755795777s ago: executing program 4 (id=1167): socket(0x2, 0x80805, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, 0x0, 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) 5.714015467s ago: executing program 0 (id=1168): getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0xffffffffffffffff, &(0x7f0000000000)=0x6d) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x1) connect$unix(0xffffffffffffffff, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x10, 0x30}, 0xc) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x100e099, 0x0, 0x3, 0xb7}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xffffff73, 0x0, 0x4) ioctl$VIDIOC_QUERY_EXT_CTRL(0xffffffffffffffff, 0xc0445624, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000780)=@IORING_OP_WRITE={0x17, 0x14, 0x4007, @fd_index=0x5, 0xffffffff, &(0x7f0000000700)="db7fc8906647a2f807b38c18eb9ae193a1ee85e97c4ca2de0f458bb494444bf7db89bffc9dee6f499872dfd5e46dde8ad1e53f40ea6b9000"/67, 0x43, 0x19}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000640)=@IORING_OP_ASYNC_CANCEL) syz_open_dev$sndctrl(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x627, 0x4c1, 0x43, 0x0, 0x30) 5.476346629s ago: executing program 4 (id=1169): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000940)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="500000001000370400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="01f5050000000000300012800b00010067656e6576650000200002800500040001000000140007"], 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x40004) r3 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r3, &(0x7f0000000440)="bad330fbc9b55400040000ea0756", 0xe, 0x0, &(0x7f00000001c0)={0x11, 0x8100, r2, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 5.194850167s ago: executing program 0 (id=1170): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) select(0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x200c80c0, &(0x7f0000000280)={0xa, 0x4e22, 0x8021, @mcast2}, 0x1c) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000640)=0x2, 0x4) setsockopt$inet6_udp_int(r1, 0x88, 0x1, &(0x7f0000000080), 0x4) 5.106967755s ago: executing program 4 (id=1171): syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x4, 0xfff, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x111, 0x5}}, 0xffffffffffffff5a) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x200000) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)=""/189}]}, 0x3}], 0x1, 0x2, 0x0) r2 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000100)={0x3, 0x2, 0x1}) r3 = dup(r2) mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, r3, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0585609, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$xdp(r5, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000008c0)=[{0x0}, {&(0x7f0000000680), 0xfc3f}, {&(0x7f0000000180)="f689c52faf3dff8a0a010e5ad621dbd20e3fe2baf5686a720dfbbd4a85151aad1bcfdbbbee953e6c9487c995de9130e12540469a9dec0c5e94245cf1851605edd0fc4b78878f71ce04012ab5a87b5e292f53ee4ad2fef90d472031dd73f72b830bb43ce8015b5e7af0466f828f38279c1fa8978085a51cbfb1aebe31401955fd1bd425e4f3e396610d198f12da72063f420099a462cf", 0x96}, {&(0x7f0000000780)}, {&(0x7f00000007c0)="4bbb2000f12c3a5dd8c2711c3ecf2f16e7670c2d164ed42aab88586a75d8d755d4408fd4d1547f922c4eea8b81d0408756bb2bd4e8d4ca6e503d2f0bb1e1f8283b9313ebdbd6494f6afb58427cc9a6b3331c81d8ac3cd679530970ce7bfbc529170a55a1edf67f2750a4e7e6e81164ba4befe5f8d988f80c83a8295ee37d0d88aedd585ce8193df46df33df4547215318c341626284ec36118a02c4b893fdd3206972af2824305ef6522df3151b67286724fa19b25fcc245bd96467fc10b2815ca80c387e44ca0d0f3d87355508d521e0473b76d2e589e462bc801ac74700477d3715e6ac68efdadd234f467", 0xec}], 0x5, 0x0, 0x0, 0x81}, 0x4008060) recvfrom(0xffffffffffffffff, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0) ioctl$SG_SET_TIMEOUT(r3, 0x2201, &(0x7f0000000240)=0xfffffff1) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000440)={0xf, {"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", 0x1000}}, 0x1006) 3.307512534s ago: executing program 4 (id=1172): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000005d40)='./file0\x00', 0x4000, &(0x7f0000004180)=ANY=[@ANYBLOB="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"/2303, @ANYRESHEX, @ANYRES8, @ANYRES8, @ANYRES32, @ANYBLOB="5c942c5b941ad4ae095c521154fc46c2a6df52af7e0b920a7a8a60eb550e6e0902163cdbb3f7"], 0xff, 0x5e0a, &(0x7f000000c740)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0) sendfile(r0, r1, 0x0, 0x20fffe81) read$FUSE(r0, &(0x7f0000005d80)={0x2020}, 0x2020) 3.306172147s ago: executing program 1 (id=1182): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xfff3}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x53a8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x440e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf4a31accbe1ba0777cfbf6ae77256da82f6184b8a34f9015cc99e570000002b21c90b000000000000721a5dbb56a3d9e16e7c2179c9b5b24722944820e624fc5b17d0822ca4232c98a9936ba722475ca5", 0x72}, {&(0x7f0000000880)="63f805d7649496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000000640)="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", 0x168}], 0x3}, 0x0) 2.862888798s ago: executing program 1 (id=1173): r0 = io_uring_setup(0x516, &(0x7f0000000640)={0x0, 0xddaa, 0x1, 0x503fa, 0x8100014e}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f0000001600)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000180)={r1, r2}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001380)={0xffffffffffffffff}) sendmsg$nl_route_sched(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000980)=@newtclass={0x24, 0x28, 0x4, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xa}, {0x5, 0xa}, {0xe, 0xffe0}}}, 0xfdef}, 0x1, 0x0, 0x0, 0x40d1}, 0x40d8) close_range(r0, 0xffffffffffffffff, 0x0) 2.687317195s ago: executing program 0 (id=1174): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000003c0)={0xc}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r3, &(0x7f0000000040)={0x2020}, 0x229) 2.499789092s ago: executing program 1 (id=1175): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) socket$inet_sctp(0x2, 0x5, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) 1.382791163s ago: executing program 0 (id=1176): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000054000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4509c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a900d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a3c0db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05fea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848022e8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0000000000000000000000000001545f0ec539c3b58facd2f62dc3307a6c91d6b"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup(r1) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@dfltgid}], [], 0x6b}}) 1.378198731s ago: executing program 3 (id=1177): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4e20, @multicast2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x100000001, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EVIOCGLED(0xffffffffffffffff, 0x40284504, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1.243847568s ago: executing program 1 (id=1178): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) r0 = getpid() fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000240)='source\x1c\xe9S_\xa0F\x1a\xff\x00\x00\x00\x80\xfey\x89\xb1,\b\xb0}\xb9\x14w\xcaHu\xe0\xdcLD\x0eHY\xbb\x1a\xb3\xd3IzP\x00\xcc\x1a\x04\"\xa2\xe2M\x00\x00o\x8a\x0e\x7f\x80S\xf0|\x13\xeb\x1a\xeb\xcb\x9dY3\x82]\xd2BW\xd1b{\xaf6\x9a\xaf\xf8\xb8m\xdf\x11}\x92Y\x7fI\x8d\x9b\xacC\xec\xf4`\x01\xef|c\xa5\x00^\x16\xbf\xa3y\x8c%x&\xca\t\x02\x1b\xee\xdfu\xe3\x13\x018\x00\x00\x00\x19*~\x01>\x81\xd4\xc1\xd5\x1d\x82\xdewe\xf5x\xf1aB\x16\xc4\x90I\xe6\x99T\x14\x1c`\xf5\xb0\xf1\x967\xaf\x97q\xb5`@q\x84\x9b\x1e\xfayhNH\xae5at\xae\xe8\x90\xc1\x02\xeb\f\xc7\x1d\x01\xe7e1*:\xa8\x80VQ\xa78A\x10]\x1eRy\x87\xa6\xd4\xad#2\x06\'\x99\xdch\xe2\xa3\xeal\xc58\x8dK\x82l\xa9\xe1/$\f\x89\x85\x10\xa6', &(0x7f0000000340)='//\xf2b\x06\b\xba\xdfjD\xdc\xea\x95\x9a\x9b/Q9\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce\x14//\\\x00\x00\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000040)}, 0x10) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000f00)=@mpls_getroute={0xa0, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_NEWDST={0x84, 0x13, [{0x101, 0x0, 0x1}, {0x9c}, {0x6}, {0x8, 0x0, 0x1}, {0x800}, {0x8, 0x0, 0x1}, {0xcd896}, {0x1, 0x0, 0x1}, {0xfffad, 0x0, 0x1}, {0x7704, 0x0, 0x1}, {0x2b5, 0x0, 0x1}, {0xf, 0x0, 0x1}, {0x95e}, {0x3}, {0x7, 0x0, 0x1}, {0x5}, {0x4, 0x0, 0x1}, {0x2}, {0x6, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0xc0c8, 0x0, 0x1}, {0xf0, 0x0, 0x1}, {0x7}, {0xffff}, {0x4}, {0x52fd, 0x0, 0x1}, {0x6}, {0x800}, {0x101, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x8}, {0x9, 0x0, 0x1}]}]}, 0xa0}}, 0x0) 1.157054869s ago: executing program 2 (id=1179): socket(0x2, 0x80805, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, 0x0) readv(r2, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) 232.598844ms ago: executing program 2 (id=1180): socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d) syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x6, 0x1fc, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a800800028008000200080000003e127a510800020010"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[], 0xa0}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) 0s ago: executing program 4 (id=1181): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index=0x1, 0x8, 0x1, 0x7ffe, 0x5, 0x0, {0x2}}) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000)) kernel console output (not intermixed with test programs): lNumber=3 [ 309.303845][ T796] usb 5-1: Product: syz [ 309.303861][ T796] usb 5-1: Manufacturer: syz [ 309.303877][ T796] usb 5-1: SerialNumber: syz [ 309.309197][ T796] usb 5-1: config 0 descriptor?? [ 309.320575][ T796] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 309.320605][ T796] usb 5-1: selecting invalid altsetting 1 [ 309.320622][ T796] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 309.353996][ T796] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 309.354342][ T796] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 309.354402][ T796] usb 5-1: media controller created [ 309.463829][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 309.565981][ T5827] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 309.583899][ T796] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 309.583974][ T796] zl10353_read_register: readreg error (reg=127, ret==-71) [ 309.593650][ T796] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 309.717112][ T8466] loop0: detected capacity change from 0 to 131072 [ 309.796971][ T8466] F2FS-fs (loop0): invalid crc value [ 309.815416][ T796] usb 5-1: USB disconnect, device number 43 [ 309.875467][ T8466] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 309.890924][ T8466] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 309.983930][ T8466] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 309.989848][ T8466] F2FS-fs (loop0): lookup inode (7) has corrupted xattr [ 310.050712][ T29] audit: type=1800 audit(1769862241.072:2): pid=8466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.638" name="file1" dev="loop0" ino=7 res=0 errno=0 [ 310.178067][ T8478] netlink: 8 bytes leftover after parsing attributes in process `syz.2.639'. [ 310.579650][ T796] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 310.823021][ T796] usb 2-1: Using ep0 maxpacket: 8 [ 310.899697][ T796] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 310.929070][ T796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.982970][ T796] usb 2-1: Product: syz [ 311.013966][ T796] usb 2-1: Manufacturer: syz [ 311.018700][ T796] usb 2-1: SerialNumber: syz [ 311.187275][ T796] usb 2-1: config 0 descriptor?? [ 311.218321][ T796] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 312.963026][ T5829] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 313.038687][ T796] gspca_sonixj: reg_r err -32 [ 313.083007][ T796] sonixj 2-1:0.0: probe with driver sonixj failed with error -32 [ 313.128169][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 313.165806][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 313.187769][ T5829] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 313.198513][ T5829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.367595][ T5829] usb 4-1: config 0 descriptor?? [ 313.465021][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.644'. [ 314.132625][ T5829] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 314.216033][ T796] usb 2-1: USB disconnect, device number 53 [ 316.291336][ T8537] Cannot find add_set index 0 as target [ 316.316404][ T8537] netdevsim netdevsim4: Direct firmware load for / [ 316.316404][ T8537] failed with error -2 [ 316.437798][ T8537] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 316.437798][ T8537] [ 316.518414][ T5829] usb 4-1: USB disconnect, device number 47 [ 317.775394][ T5829] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 317.992990][ T5829] usb 4-1: device descriptor read/64, error -71 [ 318.723736][ T5829] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 318.892979][ T5829] usb 4-1: device descriptor read/64, error -71 [ 319.003379][ T5829] usb usb4-port1: attempt power cycle [ 319.102910][ T796] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 319.294830][ T796] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 319.352887][ T796] usb 1-1: config 0 has no interface number 0 [ 319.381792][ T796] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.432990][ T5829] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 319.445188][ T796] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 319.463709][ T5829] usb 4-1: device descriptor read/8, error -71 [ 319.493386][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.523293][ T796] usb 1-1: Product: syz [ 319.541175][ T796] usb 1-1: Manufacturer: syz [ 319.561942][ T796] usb 1-1: SerialNumber: syz [ 319.595574][ T796] usb 1-1: config 0 descriptor?? [ 319.646130][ T796] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 319.702945][ T5829] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 319.988432][ T5829] usb 4-1: device not accepting address 51, error -71 [ 319.996309][ T5829] usb usb4-port1: unable to enumerate USB device [ 321.022351][ T8584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.661'. [ 321.380936][ T8595] ======================================================= [ 321.380936][ T8595] WARNING: The mand mount option has been deprecated and [ 321.380936][ T8595] and is ignored by this kernel. Remove the mand [ 321.380936][ T8595] option from the mount to silence this warning. [ 321.380936][ T8595] ======================================================= [ 321.436548][ T8595] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 321.519429][ T8596] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 60 seconds [ 321.548474][ T8596] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 60 seconds [ 321.649720][ T8596] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 60 seconds [ 321.722333][ T8596] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 60 seconds [ 321.823135][ T5829] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 322.052906][ T5829] usb 5-1: Using ep0 maxpacket: 8 [ 322.081430][ T5829] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 322.127290][ T5829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.166590][ T5829] usb 5-1: Product: syz [ 322.220015][ T5829] usb 5-1: Manufacturer: syz [ 322.273079][ T5829] usb 5-1: SerialNumber: syz [ 322.384209][ T5829] usb 5-1: config 0 descriptor?? [ 322.422391][ T5829] gspca_main: se401-2.14.0 probing 047d:5003 [ 322.785641][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.793452][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.815656][ T5829] gspca_se401: Wrong descriptor type [ 322.894322][ T5829] usb 1-1: USB disconnect, device number 56 [ 322.905068][ T5829] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 323.027405][ T87] usb 5-1: USB disconnect, device number 44 [ 323.532988][ T87] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 323.674741][ T87] usb 3-1: device descriptor read/64, error -71 [ 323.923328][ T87] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 324.126696][ T87] usb 3-1: device descriptor read/64, error -71 [ 324.278758][ T87] usb usb3-port1: attempt power cycle [ 324.643252][ T87] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 324.673705][ T87] usb 3-1: device descriptor read/8, error -71 [ 324.933172][ T87] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 324.977557][ T87] usb 3-1: device descriptor read/8, error -71 [ 325.036218][ T8612] loop3: detected capacity change from 0 to 32768 [ 325.116951][ T8612] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 325.130745][ T87] usb usb3-port1: unable to enumerate USB device [ 325.300695][ T8612] XFS (loop3): Ending clean mount [ 326.238472][ T5824] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 327.103577][ T8647] loop2: detected capacity change from 0 to 131072 [ 327.125191][ T8647] F2FS-fs (loop2): invalid crc value [ 327.216313][ T8647] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 327.234632][ T8647] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 327.334280][ T8647] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 327.341741][ T29] audit: type=1800 audit(1769862258.422:3): pid=8647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.684" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 327.373642][ T8647] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 327.763126][ T9] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 327.934133][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 327.974691][ T9] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 327.992088][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.014424][ T9] usb 1-1: Product: syz [ 328.024339][ T9] usb 1-1: Manufacturer: syz [ 328.038702][ T9] usb 1-1: SerialNumber: syz [ 328.061154][ T9] usb 1-1: config 0 descriptor?? [ 328.078274][ T9] gspca_main: se401-2.14.0 probing 047d:5003 [ 328.192968][ T87] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 328.466247][ T87] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 328.481844][ T87] usb 4-1: config 0 has no interface number 0 [ 328.496756][ T87] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 328.739257][ T9] gspca_se401: Wrong descriptor type [ 328.746234][ T87] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 328.763056][ T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.884294][ T87] usb 4-1: Product: syz [ 328.912875][ T87] usb 4-1: Manufacturer: syz [ 328.933009][ T87] usb 4-1: SerialNumber: syz [ 328.959590][ T87] usb 4-1: config 0 descriptor?? [ 328.969200][ T9] usb 1-1: USB disconnect, device number 57 [ 329.063477][ T87] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 330.180785][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.683'. [ 330.399240][ T5908] usb 4-1: USB disconnect, device number 52 [ 330.408139][ T5908] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 331.996481][ T8695] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 332.159391][ T8679] loop4: detected capacity change from 0 to 32768 [ 332.290402][ T8679] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.691 (8679) [ 332.319499][ T8699] syzkaller0: entered promiscuous mode [ 332.341347][ T8703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 332.353987][ T8699] syzkaller0: entered allmulticast mode [ 332.378560][ T8679] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 332.410670][ T8679] BTRFS info (device loop4): using sha256 checksum algorithm [ 332.440099][ T8679] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 332.492983][ T5829] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 332.601155][ T8679] BTRFS info (device loop4): rebuilding free space tree [ 332.634896][ T8679] BTRFS info (device loop4): disabling free space tree [ 332.649584][ T8679] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 332.659802][ T8679] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 332.705730][ T5829] usb 2-1: Using ep0 maxpacket: 32 [ 332.782716][ T5829] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 332.791341][ T8679] BTRFS info (device loop4): checking UUID tree [ 332.822532][ T5829] usb 2-1: config 0 has no interface number 0 [ 332.913181][ T8679] BTRFS info (device loop4): setting nodatasum [ 332.916264][ T5829] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 332.930013][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.941324][ T5829] usb 2-1: Product: syz [ 332.945624][ T5829] usb 2-1: Manufacturer: syz [ 332.950304][ T5829] usb 2-1: SerialNumber: syz [ 332.973458][ T8679] BTRFS info (device loop4): setting nodatacow [ 332.992701][ T5829] usb 2-1: config 0 descriptor?? [ 333.007095][ T8679] BTRFS info (device loop4): enabling ssd optimizations [ 333.021097][ T5829] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 333.053034][ T8679] BTRFS info (device loop4): enabling disk space caching [ 333.063048][ T5829] usb 2-1: selecting invalid altsetting 1 [ 333.069237][ T5829] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 333.090369][ T8679] BTRFS info (device loop4): force clearing of disk cache [ 333.101756][ T8679] BTRFS info (device loop4): enabling auto defrag [ 333.111464][ T5829] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 333.122081][ T5829] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 333.134001][ T5829] usb 2-1: media controller created [ 333.196269][ T5829] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 333.253638][ T5826] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 333.294283][ T5829] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 333.301408][ T5829] zl10353_read_register: readreg error (reg=127, ret==-71) [ 333.332473][ T5829] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 333.788178][ T5829] usb 2-1: USB disconnect, device number 54 [ 335.212976][ T5901] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 335.417224][ T5901] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 335.466534][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.493242][ T5901] usb 2-1: Product: syz [ 335.523027][ T5901] usb 2-1: Manufacturer: syz [ 335.527713][ T5901] usb 2-1: SerialNumber: syz [ 336.020820][ T8756] netlink: 12 bytes leftover after parsing attributes in process `syz.2.705'. [ 336.634410][ T5901] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 336.802926][ T5901] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 336.872940][ T5908] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 337.075079][ T5908] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 337.097693][ T5908] usb 5-1: config 0 has no interface number 0 [ 337.110863][ T5908] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 337.142969][ T5908] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 337.159506][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.191953][ T5908] usb 5-1: Product: syz [ 337.209989][ T5908] usb 5-1: Manufacturer: syz [ 337.222982][ T5908] usb 5-1: SerialNumber: syz [ 337.249077][ T5908] usb 5-1: config 0 descriptor?? [ 337.305632][ T5908] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 337.644049][ T5901] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 337.685282][ T5901] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 337.707102][ T8752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'. [ 337.728347][ T5901] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 337.781702][ T5901] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 338.369756][ T8777] loop2: detected capacity change from 0 to 512 [ 338.422936][ T5881] usb 5-1: USB disconnect, device number 45 [ 338.442222][ T5881] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 339.511279][ T5901] usb 2-1: USB disconnect, device number 55 [ 340.973076][ T5881] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 341.213564][ T5881] usb 2-1: Using ep0 maxpacket: 16 [ 341.240698][ T5881] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.328620][ T5881] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 341.382895][ T5881] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 341.593848][ T5881] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 341.690180][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.726518][ T5881] usb 2-1: Product: syz [ 341.737275][ T5881] usb 2-1: Manufacturer: syz [ 341.801273][ T5881] usb 2-1: SerialNumber: syz [ 341.824630][ T5881] usb 2-1: config 0 descriptor?? [ 341.852539][ T5881] mcba_usb 2-1:0.0: Can't find endpoints [ 342.882999][ T5881] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 343.327961][ T5881] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 343.348130][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.371199][ T5881] usb 1-1: Product: syz [ 343.384621][ T5881] usb 1-1: Manufacturer: syz [ 343.389321][ T5881] usb 1-1: SerialNumber: syz [ 343.962049][ T5908] usb 2-1: USB disconnect, device number 56 [ 344.083001][ T5901] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 344.327762][ T5881] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 344.341421][ T5881] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 345.162468][ T5881] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 345.174547][ T5881] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 345.201046][ T5881] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 345.203364][ T5901] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 345.275265][ T5901] usb 4-1: config 0 has no interface number 0 [ 345.293631][ T5881] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 345.306166][ T5901] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 345.988689][ T8838] loop2: detected capacity change from 0 to 131072 [ 346.035389][ T8838] F2FS-fs (loop2): invalid crc value [ 346.114891][ T8838] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 346.137435][ T5901] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 346.150554][ T8838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 346.160368][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.169537][ T5901] usb 4-1: Product: syz [ 346.177660][ T5901] usb 4-1: Manufacturer: syz [ 346.184374][ T5901] usb 4-1: SerialNumber: syz [ 346.260363][ T5901] usb 4-1: config 0 descriptor?? [ 346.295634][ T8838] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 346.304639][ T8838] F2FS-fs (loop2): lookup inode (7) has corrupted xattr [ 346.312947][ T29] audit: type=1800 audit(1769862277.392:4): pid=8838 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.728" name="file1" dev="loop2" ino=7 res=0 errno=0 [ 346.336151][ T5901] usb 4-1: can't set config #0, error -71 [ 346.424565][ T5901] usb 4-1: USB disconnect, device number 53 [ 346.718185][ T5829] usb 1-1: USB disconnect, device number 58 [ 346.873125][ T5901] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 347.147339][ T8857] loop4: detected capacity change from 0 to 32768 [ 347.163809][ T8857] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.735 (8857) [ 347.196878][ T8857] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 347.207039][ T8857] BTRFS info (device loop4): using sha256 checksum algorithm [ 347.234003][ T5901] usb 4-1: Using ep0 maxpacket: 8 [ 347.260122][ T5901] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 347.304098][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.340422][ T5901] usb 4-1: Product: syz [ 347.368231][ T5901] usb 4-1: Manufacturer: syz [ 347.369286][ T8857] BTRFS info (device loop4): enabling ssd optimizations [ 347.380989][ T8857] BTRFS info (device loop4): turning on async discard [ 347.387981][ T8857] BTRFS info (device loop4): enabling free space tree [ 347.401146][ T5901] usb 4-1: SerialNumber: syz [ 347.415649][ T5901] usb 4-1: config 0 descriptor?? [ 347.453097][ T5829] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 347.528038][ T5901] gspca_main: se401-2.14.0 probing 047d:5003 [ 347.838939][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 347.927983][ T5829] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 347.973262][ T5829] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.019899][ T5829] usb 1-1: config 0 descriptor?? [ 348.078812][ T5829] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 348.153169][ T5901] gspca_se401: Wrong descriptor type [ 348.357922][ T9] usb 4-1: USB disconnect, device number 54 [ 348.469009][ T5826] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 349.098075][ T8889] SET target dimension over the limit! [ 349.110643][ T8889] netdevsim netdevsim3: Direct firmware load for / [ 349.110643][ T8889] failed with error -2 [ 349.121969][ T8889] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 349.121969][ T8889] [ 349.242916][ T5829] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 349.422966][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 349.436489][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.459513][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 349.505151][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.627089][ T5829] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 349.636520][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.644929][ T5829] usb 2-1: Product: syz [ 349.649115][ T5829] usb 2-1: Manufacturer: syz [ 349.673705][ T5829] usb 2-1: SerialNumber: syz [ 349.685807][ T5829] usb 2-1: config 0 descriptor?? [ 349.737292][ T5829] mcba_usb 2-1:0.0: Can't find endpoints [ 350.109321][ T5829] usb 1-1: USB disconnect, device number 59 [ 351.574264][ T1674] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 90 seconds [ 351.653126][ T1674] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 90 seconds [ 351.723128][ T1674] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 90 seconds [ 351.805514][ T1674] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 90 seconds [ 351.922924][ T5829] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 352.113032][ T5901] usb 4-1: new low-speed USB device number 55 using dummy_hcd [ 352.196810][ T5829] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 352.225516][ T5829] usb 1-1: config 0 has no interface number 0 [ 352.248517][ T5829] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 352.284227][ T5829] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 352.296283][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 352.306939][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.315266][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 352.337238][ T5829] usb 1-1: Product: syz [ 352.357042][ T5901] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.371055][ T5829] usb 1-1: Manufacturer: syz [ 352.384069][ T5829] usb 1-1: SerialNumber: syz [ 352.407624][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 352.436070][ T5829] usb 1-1: config 0 descriptor?? [ 352.481057][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 352.556462][ T5829] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 352.568529][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 352.597798][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 352.651924][ T5901] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.710303][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 352.759743][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 352.830869][ T5901] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 352.885920][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 352.910039][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.742'. [ 352.937453][ T5829] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 352.951016][ T5901] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 352.966778][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 352.982238][ T5901] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 353.009758][ T5901] usb 4-1: string descriptor 0 read error: -22 [ 353.025060][ T5901] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 353.041641][ T5901] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.131612][ T5901] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 353.158279][ T24] usb 2-1: USB disconnect, device number 57 [ 353.205155][ T5829] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 353.228211][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.288254][ T5901] usb 4-1: USB disconnect, device number 55 [ 353.321876][ T5829] usb 3-1: Product: syz [ 353.348399][ T5829] usb 3-1: Manufacturer: syz [ 353.369613][ T5829] usb 3-1: SerialNumber: syz [ 354.250766][ T8921] loop1: detected capacity change from 0 to 131072 [ 354.302641][ T8921] F2FS-fs (loop1): invalid crc value [ 354.385019][ T8921] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 354.401275][ T8921] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 354.432328][ T8921] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 354.440348][ T29] audit: type=1800 audit(1769862285.522:5): pid=8921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.745" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 354.461338][ T8921] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 354.634803][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 354.703021][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 354.818688][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.747'. [ 355.413453][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 356.080089][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 356.110171][ T5829] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 356.202911][ T5829] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 356.294886][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.4.748'. [ 356.430250][ T9] usb 3-1: USB disconnect, device number 45 [ 359.064097][ T9] usb 1-1: USB disconnect, device number 60 [ 359.121378][ T9] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 361.717026][ T8979] loop1: detected capacity change from 0 to 131072 [ 361.752560][ T8979] F2FS-fs (loop1): invalid crc value [ 361.943134][ T8979] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 361.954346][ T8979] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 361.982284][ T8979] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 361.989744][ T29] audit: type=1800 audit(1769862293.072:6): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.757" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 362.011069][ T8979] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 362.024427][ T5881] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 362.183095][ T5881] usb 1-1: Using ep0 maxpacket: 8 [ 362.253101][ T5881] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 362.312944][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.753368][ T5881] usb 1-1: Product: syz [ 362.770306][ T5881] usb 1-1: Manufacturer: syz [ 362.787975][ T5881] usb 1-1: SerialNumber: syz [ 362.810632][ T5881] usb 1-1: config 0 descriptor?? [ 362.826773][ T5881] gspca_main: se401-2.14.0 probing 047d:5003 [ 363.230818][ T5881] gspca_se401: ExtraFeatures: 215 [ 363.236046][ T5881] gspca_se401: Too many frame sizes [ 363.448090][ T8995] loop3: detected capacity change from 0 to 32768 [ 363.477357][ T5881] usb 1-1: USB disconnect, device number 61 [ 363.513422][ T8995] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.762 (8995) [ 363.752104][ T8995] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 363.762343][ T8995] BTRFS info (device loop3): using sha256 checksum algorithm [ 364.364139][ T8995] BTRFS info (device loop3): enabling ssd optimizations [ 364.371189][ T8995] BTRFS info (device loop3): turning on async discard [ 364.379047][ T8995] BTRFS info (device loop3): enabling free space tree [ 365.002941][ T5829] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 365.360611][ T5829] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 365.369499][ T5829] usb 1-1: config 0 has no interface number 0 [ 365.370037][ T5824] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 365.400299][ T5829] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 365.451958][ T5829] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 365.479551][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.514179][ T5829] usb 1-1: Product: syz [ 365.518558][ T5829] usb 1-1: Manufacturer: syz [ 365.540839][ T5829] usb 1-1: SerialNumber: syz [ 365.596243][ T5829] usb 1-1: config 0 descriptor?? [ 365.662758][ T5829] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 366.091792][ T5829] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 366.226416][ T9027] netlink: 4 bytes leftover after parsing attributes in process `syz.0.764'. [ 366.329300][ T5829] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 366.364473][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.392961][ T5829] usb 4-1: Product: syz [ 366.403327][ T5829] usb 4-1: Manufacturer: syz [ 366.425246][ T5829] usb 4-1: SerialNumber: syz [ 366.481257][ T5829] usb 4-1: config 0 descriptor?? [ 366.515863][ T5829] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 366.832933][ T5881] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 367.011789][ T5881] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 367.032888][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.049110][ T5881] usb 2-1: Product: syz [ 367.054075][ T5881] usb 2-1: Manufacturer: syz [ 367.058955][ T5881] usb 2-1: SerialNumber: syz [ 367.111988][ T5829] gspca_sunplus: reg_r err -32 [ 367.128287][ T5829] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 367.481898][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 367.516011][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 367.601548][ T5829] usb 1-1: USB disconnect, device number 62 [ 367.665744][ T5829] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 368.666428][ T9045] loop4: detected capacity change from 0 to 131072 [ 368.700476][ T9045] F2FS-fs (loop4): invalid crc value [ 368.930935][ T9045] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 368.943151][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 368.963423][ T9045] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 368.967344][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 369.013863][ T9045] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 369.042250][ T5881] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 369.063438][ T5829] usb 4-1: USB disconnect, device number 56 [ 369.096838][ T5881] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 370.567639][ T5829] usb 2-1: USB disconnect, device number 58 [ 371.922933][ T5829] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 372.149557][ T9080] loop4: detected capacity change from 0 to 32768 [ 372.175108][ T9080] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.774 (9080) [ 372.212971][ T9080] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 372.223172][ T9080] BTRFS info (device loop4): using sha256 checksum algorithm [ 372.242877][ T5829] usb 4-1: Using ep0 maxpacket: 16 [ 372.250591][ T5829] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.398220][ T5829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 372.433559][ T5829] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 372.490899][ T5829] usb 4-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 372.501501][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.517407][ T5829] usb 4-1: Product: syz [ 372.521731][ T5829] usb 4-1: Manufacturer: syz [ 372.535845][ T5829] usb 4-1: SerialNumber: syz [ 372.566976][ T5829] usb 4-1: config 0 descriptor?? [ 372.580166][ T5829] mcba_usb 4-1:0.0: Can't find endpoints [ 372.655195][ T9080] BTRFS info (device loop4): enabling ssd optimizations [ 372.662422][ T9080] BTRFS info (device loop4): turning on async discard [ 372.669349][ T9080] BTRFS info (device loop4): enabling free space tree [ 373.542920][ T9] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 373.717816][ T5826] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 373.837434][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.867721][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.975245][ T5881] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 374.063611][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 374.087977][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.150766][ T9] usb 1-1: config 0 descriptor?? [ 374.228706][ T5881] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 374.279028][ T5881] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.321352][ T5881] usb 2-1: Product: syz [ 374.338060][ T5881] usb 2-1: Manufacturer: syz [ 374.353455][ T5881] usb 2-1: SerialNumber: syz [ 374.388015][ T5881] usb 2-1: config 0 descriptor?? [ 374.405378][ T5881] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 374.705218][ T9] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor [ 374.723184][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000B/input/input23 [ 375.072171][ T5881] gspca_sunplus: reg_r err -110 [ 375.114100][ T5881] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 375.228971][ T5881] usb 4-1: USB disconnect, device number 57 [ 375.314968][ T9] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 375.396672][ T9] usb 1-1: USB disconnect, device number 63 [ 375.582526][ T9122] fido_id[9122]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 375.612978][ T5881] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 375.788496][ T5881] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 375.798934][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.807455][ T5881] usb 3-1: Product: syz [ 375.817412][ T5881] usb 3-1: Manufacturer: syz [ 375.822160][ T5881] usb 3-1: SerialNumber: syz [ 376.403064][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 376.431102][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 376.514233][ T5829] usb 2-1: USB disconnect, device number 59 [ 377.978096][ T9145] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 378.029599][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000000. ret = -EPIPE [ 378.050454][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 378.060768][ T5881] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 378.171840][ T5881] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 379.033104][ T9] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 379.072419][ T24] usb 3-1: USB disconnect, device number 46 [ 379.102910][ T5829] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 379.274056][ T5829] usb 2-1: Using ep0 maxpacket: 16 [ 379.299003][ T9] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 379.313649][ T5829] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.324119][ T9] usb 5-1: config 0 has no interface number 0 [ 379.332374][ T5829] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 379.365865][ T9] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 379.367357][ T5829] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 379.427592][ T5829] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 379.437190][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.473266][ T5829] usb 2-1: Product: syz [ 379.477593][ T5829] usb 2-1: Manufacturer: syz [ 379.482428][ T5829] usb 2-1: SerialNumber: syz [ 379.535405][ T5829] usb 2-1: config 0 descriptor?? [ 379.536197][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 379.551746][ T5829] mcba_usb 2-1:0.0: Can't find endpoints [ 379.553083][ T10] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 379.589553][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.605945][ T9] usb 5-1: Product: syz [ 379.611717][ T9] usb 5-1: Manufacturer: syz [ 379.621242][ T9] usb 5-1: SerialNumber: syz [ 379.639891][ T9] usb 5-1: config 0 descriptor?? [ 379.756549][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 379.782538][ T10] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 379.798844][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.827469][ T10] usb 4-1: Product: syz [ 379.835722][ T10] usb 4-1: Manufacturer: syz [ 379.845906][ T10] usb 4-1: SerialNumber: syz [ 379.863852][ T10] usb 4-1: config 0 descriptor?? [ 379.875804][ T10] gspca_main: se401-2.14.0 probing 047d:5003 [ 379.942506][ T9] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 380.295999][ T9179] netlink: 4 bytes leftover after parsing attributes in process `syz.4.799'. [ 380.319538][ T10] gspca_se401: ExtraFeatures: 215 [ 380.324900][ T10] gspca_se401: Too many frame sizes [ 380.522080][ T5829] usb 5-1: USB disconnect, device number 46 [ 380.551391][ T5829] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 380.562456][ T87] usb 4-1: USB disconnect, device number 58 [ 380.953886][ T10] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 381.429098][ T10] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 381.447192][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.479373][ T10] usb 1-1: Product: syz [ 381.496566][ T10] usb 1-1: Manufacturer: syz [ 381.508397][ T10] usb 1-1: SerialNumber: syz [ 381.541265][ T10] usb 1-1: config 0 descriptor?? [ 381.560096][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 381.617442][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.808'. [ 381.663436][ T1674] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 120 seconds [ 381.674449][ T1674] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 120 seconds [ 381.753091][ T1674] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 120 seconds [ 381.823269][ T1674] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 120 seconds [ 381.886075][ T5829] usb 2-1: USB disconnect, device number 60 [ 382.169951][ T10] gspca_sunplus: reg_r err -32 [ 382.181331][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 382.742890][ T5829] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 383.057767][ T5829] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 383.182971][ T5829] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.191255][ T5829] usb 2-1: Product: syz [ 383.195942][ T5829] usb 2-1: Manufacturer: syz [ 383.201138][ T5829] usb 2-1: SerialNumber: syz [ 383.712081][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 383.741514][ T5908] usb 1-1: USB disconnect, device number 64 [ 383.817718][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 384.362372][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.369054][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.867212][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 385.183038][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 385.233942][ T5829] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 385.291683][ T5829] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 385.665345][ T24] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 385.854648][ T24] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 385.864371][ T24] usb 3-1: config 0 has no interface number 0 [ 385.882594][ T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 385.925747][ T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 385.939541][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.950231][ T24] usb 3-1: Product: syz [ 385.966063][ T24] usb 3-1: Manufacturer: syz [ 385.985801][ T24] usb 3-1: SerialNumber: syz [ 385.999699][ T5881] usb 2-1: USB disconnect, device number 61 [ 386.171418][ T24] usb 3-1: config 0 descriptor?? [ 386.208584][ T24] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 386.535217][ T9252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.819'. [ 386.869111][ T87] usb 3-1: USB disconnect, device number 47 [ 386.904709][ T87] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 389.189457][ T9278] loop0: detected capacity change from 0 to 164 [ 390.016255][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 390.344131][ T9275] loop4: detected capacity change from 0 to 131072 [ 390.355195][ T9275] F2FS-fs (loop4): invalid crc value [ 390.428014][ T9275] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 390.440842][ T9275] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 390.482247][ T9275] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 390.491007][ T9275] F2FS-fs (loop4): lookup inode (7) has corrupted xattr [ 390.502175][ T29] audit: type=1800 audit(1769862321.572:7): pid=9275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.830" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 390.583844][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 390.617062][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.666001][ T10] usb 3-1: Product: syz [ 390.670240][ T10] usb 3-1: Manufacturer: syz [ 390.832870][ T10] usb 3-1: SerialNumber: syz [ 390.854187][ T10] usb 3-1: config 0 descriptor?? [ 390.911861][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 391.084674][ T10] gspca_sunplus: reg_r err -71 [ 391.089690][ T10] sunplus 3-1:0.0: probe with driver sunplus failed with error -71 [ 391.166080][ T10] usb 3-1: USB disconnect, device number 48 [ 391.207295][ T9291] loop1: detected capacity change from 0 to 512 [ 392.442928][ T87] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 392.589950][ T5901] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 392.960940][ T87] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 392.983237][ T87] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.009081][ T87] usb 4-1: Product: syz [ 393.024094][ T87] usb 4-1: Manufacturer: syz [ 393.036666][ T87] usb 4-1: SerialNumber: syz [ 393.296629][ T9306] loop2: detected capacity change from 0 to 32768 [ 393.310402][ T9306] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.839 (9306) [ 393.327051][ T9306] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 393.337355][ T9306] BTRFS info (device loop2): using sha256 checksum algorithm [ 393.350864][ T5901] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 393.363194][ T5901] usb 2-1: config 0 has no interface number 0 [ 393.370446][ T5901] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 393.430359][ T5901] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 393.450205][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.462275][ T5901] usb 2-1: Product: syz [ 393.466915][ T5901] usb 2-1: Manufacturer: syz [ 393.471585][ T5901] usb 2-1: SerialNumber: syz [ 393.515815][ T9306] BTRFS info (device loop2): enabling ssd optimizations [ 393.523103][ T9306] BTRFS info (device loop2): turning on async discard [ 393.530699][ T9306] BTRFS info (device loop2): enabling free space tree [ 393.549559][ T5901] usb 2-1: config 0 descriptor?? [ 393.678799][ T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 394.091000][ T5901] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 394.163126][ T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 394.306540][ T9300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.837'. [ 394.502257][ T5825] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 394.969933][ T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 395.009717][ T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 395.043830][ T87] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 395.065520][ T10] usb 2-1: USB disconnect, device number 62 [ 395.101205][ T10] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 395.125296][ T87] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 395.971813][ T10] usb 4-1: USB disconnect, device number 59 [ 396.788788][ T9342] loop3: detected capacity change from 0 to 131072 [ 396.808612][ T9342] F2FS-fs (loop3): invalid crc value [ 396.922703][ T9342] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 396.933220][ T9347] netlink: 8 bytes leftover after parsing attributes in process `syz.1.845'. [ 396.962671][ T9342] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 396.983554][ T9342] F2FS-fs (loop3): lookup inode (7) has corrupted xattr [ 396.991381][ T29] audit: type=1800 audit(1769862328.072:8): pid=9342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.844" name="file1" dev="loop3" ino=7 res=0 errno=0 [ 397.011820][ T9342] F2FS-fs (loop3): lookup inode (7) has corrupted xattr [ 398.178053][ T9356] loop1: detected capacity change from 0 to 512 [ 400.423824][ T5881] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 400.872078][ T5908] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 401.025318][ T5881] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 401.047310][ T5881] usb 5-1: config 0 has no interface number 0 [ 401.063068][ T10] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 401.072990][ T5881] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.115934][ T5908] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 401.152626][ T5881] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 401.162700][ T5908] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.182891][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.196596][ T5908] usb 1-1: Product: syz [ 401.200822][ T5908] usb 1-1: Manufacturer: syz [ 401.224110][ T5881] usb 5-1: Product: syz [ 401.237821][ T5881] usb 5-1: Manufacturer: syz [ 401.243293][ T5908] usb 1-1: SerialNumber: syz [ 401.255588][ T10] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 401.266644][ T5881] usb 5-1: SerialNumber: syz [ 401.278578][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.298410][ T5881] usb 5-1: config 0 descriptor?? [ 401.331162][ T10] usb 4-1: Product: syz [ 401.342448][ T10] usb 4-1: Manufacturer: syz [ 401.362916][ T10] usb 4-1: SerialNumber: syz [ 401.367914][ T5881] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 401.391427][ T10] usb 4-1: config 0 descriptor?? [ 401.476017][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 401.701684][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 401.784080][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 401.933919][ T9373] netlink: 4 bytes leftover after parsing attributes in process `syz.4.854'. [ 403.037661][ T9394] loop1: detected capacity change from 0 to 131072 [ 403.052992][ T10] gspca_sunplus: reg_r err -110 [ 403.058436][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): timeout on completion of LiteReset [ 403.074701][ T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -110 [ 403.088121][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 403.107698][ T9394] F2FS-fs (loop1): invalid crc value [ 403.117509][ T5908] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 403.183683][ T9394] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 403.195354][ T9394] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 403.213825][ T5908] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -110 [ 403.233427][ T9394] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 403.244164][ T9394] F2FS-fs (loop1): lookup inode (7) has corrupted xattr [ 403.271228][ T29] audit: type=1800 audit(1769862334.322:9): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.857" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 403.580848][ T5901] usb 5-1: USB disconnect, device number 47 [ 403.617492][ T5901] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 403.725354][ T9404] netdevsim netdevsim2: Direct firmware load for / [ 403.725354][ T9404] failed with error -2 [ 403.737249][ T9404] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 403.737249][ T9404] [ 404.316117][ T10] usb 4-1: USB disconnect, device number 60 [ 404.368613][ T24] usb 1-1: USB disconnect, device number 65 [ 406.026289][ T9431] ptrace attach of "./syz-executor exec"[5824] was attempted by " [ 407.542984][ T5908] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 407.791298][ T9432] loop2: detected capacity change from 0 to 32768 [ 407.852931][ T9432] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.868 (9432) [ 407.993319][ T9432] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 408.004023][ T87] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 408.050400][ T9432] BTRFS info (device loop2): using sha256 checksum algorithm [ 408.091827][ T5908] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 408.109740][ T9432] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 408.132968][ T5908] usb 5-1: config 0 has no interface number 0 [ 408.139237][ T5908] usb 5-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 408.198383][ T5908] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 408.212262][ T87] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 408.229085][ T5908] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.258986][ T5908] usb 5-1: Product: syz [ 408.269155][ T87] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.287883][ T87] usb 2-1: Product: syz [ 408.289369][ T5908] usb 5-1: Manufacturer: syz [ 408.298047][ T87] usb 2-1: Manufacturer: syz [ 408.298071][ T87] usb 2-1: SerialNumber: syz [ 408.312921][ T24] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 408.326422][ T87] usb 2-1: config 0 descriptor?? [ 408.364850][ T87] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 408.383211][ T5908] usb 5-1: SerialNumber: syz [ 408.416414][ T5908] usb 5-1: config 0 descriptor?? [ 408.496895][ T9432] BTRFS info (device loop2): rebuilding free space tree [ 408.504411][ T24] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 408.533165][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.541866][ T24] usb 1-1: Product: syz [ 408.546960][ T24] usb 1-1: Manufacturer: syz [ 408.552048][ T24] usb 1-1: SerialNumber: syz [ 408.584364][ T5908] yurex 5-1:0.50: USB YUREX device now attached to Yurex #0 [ 408.667574][ T9432] BTRFS info (device loop2): disabling free space tree [ 408.703022][ T9432] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 408.752992][ T9432] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 408.810414][ T9432] BTRFS info (device loop2): setting nodatasum [ 408.862976][ T9432] BTRFS info (device loop2): setting nodatacow [ 408.869680][ T9432] BTRFS info (device loop2): enabling ssd optimizations [ 408.948939][ T9432] BTRFS info (device loop2): enabling disk space caching [ 408.995831][ T9432] BTRFS info (device loop2): force clearing of disk cache [ 409.029192][ T9432] BTRFS info (device loop2): enabling auto defrag [ 409.047892][ T9471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.871'. [ 409.057949][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 409.092583][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 409.223610][ T87] gspca_sunplus: reg_r err -32 [ 409.229232][ T87] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 409.266098][ T5825] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 409.929820][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 409.943721][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 409.982230][ T24] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 410.009246][ T24] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 410.711169][ T9481] loop2: detected capacity change from 0 to 32768 [ 410.743109][ T9481] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 410.786855][ T10] usb 2-1: USB disconnect, device number 63 [ 410.955324][ T9481] XFS (loop2): Ending clean mount [ 411.161827][ T5908] usb 1-1: USB disconnect, device number 66 [ 411.168290][ T5825] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 411.496141][ T5908] usb 5-1: USB disconnect, device number 48 [ 411.548082][ T5908] yurex 5-1:0.50: USB YUREX #0 now disconnected [ 411.865589][ T9510] loop0: detected capacity change from 0 to 32768 [ 411.893208][ T1674] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 150 seconds [ 411.904390][ T1674] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 150 seconds [ 411.915559][ T1674] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 150 seconds [ 411.926926][ T1674] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 150 seconds [ 411.938994][ T9510] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.886 (9510) [ 411.965129][ T9510] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 411.975461][ T9510] BTRFS info (device loop0): using sha256 checksum algorithm [ 412.384469][ T9510] BTRFS info (device loop0): enabling ssd optimizations [ 412.391485][ T9510] BTRFS info (device loop0): turning on async discard [ 412.398354][ T9510] BTRFS info (device loop0): enabling free space tree [ 413.202666][ T5834] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 413.794013][ T9537] loop0: detected capacity change from 0 to 32768 [ 413.808570][ T9537] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.888 (9537) [ 413.844809][ T9537] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 413.855122][ T9537] BTRFS info (device loop0): using sha256 checksum algorithm [ 413.933544][ T5908] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 413.998692][ T9537] BTRFS info (device loop0): enabling ssd optimizations [ 414.005798][ T9537] BTRFS info (device loop0): turning on async discard [ 414.012603][ T9537] BTRFS info (device loop0): enabling free space tree [ 414.234810][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 414.253274][ T5908] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 414.264524][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.625212][ T5908] usb 4-1: config 0 descriptor?? [ 414.708297][ T9557] syzkaller0: entered promiscuous mode [ 414.714140][ T9557] syzkaller0: entered allmulticast mode [ 414.731598][ T5834] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 414.854577][ T9562] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 415.012093][ T10] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 415.066856][ T5908] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor [ 415.081990][ T5908] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000C/input/input24 [ 415.200436][ T10] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 415.210215][ T796] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 415.248702][ T5908] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 415.271679][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.292092][ T10] usb 2-1: Product: syz [ 415.306761][ T10] usb 2-1: Manufacturer: syz [ 415.311541][ T10] usb 2-1: SerialNumber: syz [ 415.364779][ T10] usb 2-1: config 0 descriptor?? [ 415.383411][ T796] usb 5-1: Using ep0 maxpacket: 32 [ 415.402898][ T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 415.411464][ T10] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 415.422249][ T796] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 415.441806][ T796] usb 5-1: config 0 has no interface number 0 [ 415.455023][ T796] usb 5-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 415.464574][ T796] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.472749][ T796] usb 5-1: Product: syz [ 415.478756][ T796] usb 5-1: Manufacturer: syz [ 415.485046][ T796] usb 5-1: SerialNumber: syz [ 415.498771][ T796] usb 5-1: config 0 descriptor?? [ 415.514668][ T796] usb 5-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 415.523644][ T796] usb 5-1: selecting invalid altsetting 1 [ 415.530103][ T796] usb 5-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 415.541475][ T796] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 415.554863][ T796] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 415.563687][ T796] usb 5-1: media controller created [ 415.588571][ T9] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 415.605244][ T796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 415.614107][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.622241][ T9] usb 3-1: Product: syz [ 415.628928][ T9] usb 3-1: Manufacturer: syz [ 415.633822][ T9] usb 3-1: SerialNumber: syz [ 415.646349][ T87] usb 4-1: USB disconnect, device number 61 [ 416.100280][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 416.131343][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 416.412350][ T9576] loop0: detected capacity change from 0 to 32768 [ 416.425459][ T9576] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.898 (9576) [ 416.449574][ T9576] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 416.460043][ T9576] BTRFS info (device loop0): using sha256 checksum algorithm [ 416.490470][ T10] gspca_sunplus: reg_r err -32 [ 416.498098][ T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 416.593413][ T9576] BTRFS info (device loop0): enabling ssd optimizations [ 416.600427][ T9576] BTRFS info (device loop0): turning on async discard [ 416.607795][ T9576] BTRFS info (device loop0): enabling free space tree [ 416.850962][ T796] usb 5-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 416.858371][ T796] zl10353_read_register: readreg error (reg=127, ret==-110) [ 417.078749][ T796] usb 5-1: USB disconnect, device number 49 [ 417.116859][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 417.208088][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 417.237599][ T9] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 417.684349][ T9] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -32 [ 417.889379][ T9] usb 2-1: USB disconnect, device number 64 [ 417.965353][ T5834] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 418.347659][ T9605] loop1: detected capacity change from 0 to 32768 [ 418.360068][ T9605] BTRFS info: device /dev/loop1 (7:1) using temp-fsid b0511052-ecd9-4c4c-ba8a-9b6bd64c306d [ 418.370687][ T9605] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.903 (9605) [ 418.612830][ T9605] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 418.623253][ T9605] BTRFS info (device loop1): using sha256 checksum algorithm [ 418.775688][ T9] usb 3-1: USB disconnect, device number 49 [ 418.836235][ T9605] BTRFS info (device loop1): enabling ssd optimizations [ 418.843674][ T9605] BTRFS info (device loop1): turning on async discard [ 418.850752][ T9605] BTRFS info (device loop1): enabling free space tree [ 419.620526][ T9630] syzkaller0: entered promiscuous mode [ 419.669726][ T9630] syzkaller0: entered allmulticast mode [ 420.587133][ T5827] BTRFS info (device loop1): last unmount of filesystem b0511052-ecd9-4c4c-ba8a-9b6bd64c306d [ 421.327084][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.4.908'. [ 421.522935][ T5901] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 421.705460][ T5901] usb 1-1: Using ep0 maxpacket: 16 [ 421.827704][ T5901] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 422.085334][ T5901] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 422.122945][ T5901] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.149936][ T5901] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 422.169543][ T5901] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.182230][ T5901] usb 1-1: Product: syz [ 422.191818][ T5901] usb 1-1: Manufacturer: syz [ 422.207750][ T5901] usb 1-1: SerialNumber: syz [ 422.248225][ T5901] usb 1-1: config 0 descriptor?? [ 422.265088][ T5901] mcba_usb 1-1:0.0: Can't find endpoints [ 422.298074][ T9661] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 422.642903][ T5901] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 422.803523][ T5901] usb 2-1: Using ep0 maxpacket: 32 [ 422.821137][ T5901] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 422.831324][ T5901] usb 2-1: config 0 has no interface number 0 [ 422.854441][ T5901] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 422.870501][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.896537][ T5901] usb 2-1: Product: syz [ 422.900753][ T5901] usb 2-1: Manufacturer: syz [ 422.903232][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 422.924444][ T5901] usb 2-1: SerialNumber: syz [ 422.940587][ T5901] usb 2-1: config 0 descriptor?? [ 422.967191][ T5901] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 422.988153][ T5901] usb 2-1: selecting invalid altsetting 1 [ 423.001230][ T5901] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 423.025118][ T5901] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 423.049922][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 423.072975][ T5901] usb 2-1: media controller created [ 423.108405][ T9] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 423.129143][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.147617][ T9] usb 4-1: Product: syz [ 423.157745][ T9] usb 4-1: Manufacturer: syz [ 423.168721][ T9] usb 4-1: SerialNumber: syz [ 423.197196][ T9] usb 4-1: config 0 descriptor?? [ 423.216093][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 423.246818][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 423.331023][ T5901] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 423.346391][ T5901] zl10353_read_register: readreg error (reg=127, ret==-71) [ 423.369270][ T5901] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 423.473347][ T5901] usb 2-1: USB disconnect, device number 65 [ 423.983369][ T9384] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 424.257411][ T9384] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 424.377613][ T9] gspca_sunplus: reg_r err -32 [ 424.570682][ T9673] loop2: detected capacity change from 0 to 32768 [ 424.583026][ T9673] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.914 (9673) [ 424.601929][ T9] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 424.613532][ T9384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.630454][ T9384] usb 5-1: Product: syz [ 424.638239][ T9673] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 424.648668][ T9673] BTRFS info (device loop2): using sha256 checksum algorithm [ 424.745687][ T9384] usb 5-1: Manufacturer: syz [ 424.750462][ T9384] usb 5-1: SerialNumber: syz [ 424.767649][ T5829] usb 1-1: USB disconnect, device number 67 [ 424.803284][ T9673] BTRFS info (device loop2): enabling ssd optimizations [ 424.810498][ T9673] BTRFS info (device loop2): turning on async discard [ 424.817582][ T9673] BTRFS info (device loop2): enabling free space tree [ 425.302916][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 425.416298][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 425.750053][ T9693] loop0: detected capacity change from 0 to 32768 [ 425.768984][ T9693] BTRFS info: device /dev/loop0 (7:0) using temp-fsid aa39c050-e783-4fea-bea4-e232cf520007 [ 425.779999][ T9693] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.918 (9693) [ 425.857712][ T87] usb 4-1: USB disconnect, device number 62 [ 425.871342][ T9693] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 425.881936][ T9693] BTRFS info (device loop0): using sha256 checksum algorithm [ 425.960205][ T5825] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 426.104346][ T9693] BTRFS info (device loop0): enabling ssd optimizations [ 426.111519][ T9693] BTRFS info (device loop0): turning on async discard [ 426.118774][ T9693] BTRFS info (device loop0): enabling free space tree [ 426.271501][ T9710] syzkaller0: entered promiscuous mode [ 426.330527][ T9710] syzkaller0: entered allmulticast mode [ 426.718144][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPIPE [ 426.789268][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 426.841950][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 426.914887][ T9384] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 427.234577][ T9724] ptrace attach of "./syz-executor exec"[5825] was attempted by " [ 428.429032][ T9384] usb 5-1: USB disconnect, device number 50 [ 428.664142][ T5834] BTRFS info (device loop0): last unmount of filesystem aa39c050-e783-4fea-bea4-e232cf520007 [ 428.734819][ T9729] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 428.828978][ T9732] netdevsim netdevsim4: Direct firmware load for / [ 428.828978][ T9732] failed with error -2 [ 428.852655][ T9732] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 428.852655][ T9732] [ 429.303107][ T5901] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 429.483208][ T5901] usb 3-1: Using ep0 maxpacket: 32 [ 429.754866][ T5901] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 429.771984][ T5901] usb 3-1: config 0 has no interface number 0 [ 430.039920][ T5901] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 430.281210][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.342900][ T5901] usb 3-1: Product: syz [ 430.347219][ T5901] usb 3-1: Manufacturer: syz [ 430.366711][ T5901] usb 3-1: SerialNumber: syz [ 430.398172][ T5901] usb 3-1: config 0 descriptor?? [ 430.427893][ T5901] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 430.451510][ T5901] usb 3-1: selecting invalid altsetting 1 [ 430.483039][ T5901] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 430.522091][ T5901] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 430.550587][ T5901] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 430.569846][ T5901] usb 3-1: media controller created [ 430.645526][ T5901] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 430.807144][ T5901] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 430.817953][ T5901] zl10353_read_register: readreg error (reg=127, ret==-71) [ 430.825805][ T5901] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 430.935552][ T5901] usb 3-1: USB disconnect, device number 50 [ 431.371281][ T9747] loop3: detected capacity change from 0 to 32768 [ 431.386354][ T9747] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.930 (9747) [ 431.401925][ T9747] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 431.412686][ T9747] BTRFS info (device loop3): using sha256 checksum algorithm [ 431.503700][ T9747] BTRFS info (device loop3): enabling ssd optimizations [ 431.510742][ T9747] BTRFS info (device loop3): turning on async discard [ 431.517716][ T9747] BTRFS info (device loop3): enabling free space tree [ 432.298059][ T5824] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 432.477794][ T9742] loop1: detected capacity change from 0 to 32768 [ 432.585225][ T9742] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 432.614222][ T9384] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 432.716024][ T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 432.757097][ T9742] XFS (loop1): Ending clean mount [ 432.817373][ T9384] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 432.847114][ T9384] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.876587][ T9384] usb 5-1: Product: syz [ 432.903886][ T9384] usb 5-1: Manufacturer: syz [ 432.908966][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 432.919156][ T9384] usb 5-1: SerialNumber: syz [ 432.926372][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 432.962915][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 433.039738][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 433.081332][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 433.117681][ T5827] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 433.132826][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 433.151429][ T9] usb 3-1: Manufacturer: syz [ 433.169711][ T9] usb 3-1: config 0 descriptor?? [ 433.374320][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 433.393116][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 434.012138][ T9795] ptrace attach of "./syz-executor exec"[5827] was attempted by " [ 435.089267][ T9800] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 435.218977][ T9801] syzkaller0: entered promiscuous mode [ 435.224897][ T9801] syzkaller0: entered allmulticast mode [ 435.396429][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPIPE [ 435.421664][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 435.465379][ T9384] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 435.477445][ T5901] usb 3-1: USB disconnect, device number 51 [ 435.496723][ T9384] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 435.583048][ T9] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 435.788768][ T9808] loop2: detected capacity change from 0 to 32768 [ 435.796779][ T9808] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.944 (9808) [ 435.817839][ T9808] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 435.828136][ T9808] BTRFS info (device loop2): using sha256 checksum algorithm [ 435.931727][ T9808] BTRFS info (device loop2): enabling ssd optimizations [ 435.939087][ T9808] BTRFS info (device loop2): turning on async discard [ 435.946224][ T9808] BTRFS info (device loop2): enabling free space tree [ 436.023425][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 436.141816][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 436.184414][ T9829] loop0: detected capacity change from 0 to 16 [ 436.190801][ T9] usb 2-1: config 0 has no interface number 0 [ 436.483610][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 436.494871][ T9829] erofs (device loop0): mounted with root inode @ nid 36. [ 436.511065][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.545637][ T87] usb 5-1: USB disconnect, device number 51 [ 436.562851][ T9] usb 2-1: Product: syz [ 436.567109][ T9] usb 2-1: Manufacturer: syz [ 436.571757][ T9] usb 2-1: SerialNumber: syz [ 436.789318][ T9] usb 2-1: config 0 descriptor?? [ 437.217393][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 437.251917][ T9] usb 2-1: selecting invalid altsetting 1 [ 437.259169][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 437.270210][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 437.653261][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 437.661644][ T9] usb 2-1: media controller created [ 437.732104][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 437.749917][ T5825] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 438.056694][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 438.073687][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 438.081563][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 438.088323][ T9847] syzkaller0: entered promiscuous mode [ 438.109102][ T9847] syzkaller0: entered allmulticast mode [ 438.244752][ T9] usb 2-1: USB disconnect, device number 66 [ 438.613334][ T9] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 439.728923][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 439.993251][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 440.050071][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 440.122877][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 440.175243][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 440.194771][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 440.215603][ T9] usb 2-1: Manufacturer: syz [ 440.560810][ T9] usb 2-1: config 0 descriptor?? [ 440.641391][ T9849] loop2: detected capacity change from 0 to 32768 [ 440.719511][ T9849] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 440.908699][ T9873] loop0: detected capacity change from 0 to 32768 [ 440.937660][ T9873] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.960 (9873) [ 440.967455][ T9873] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 440.977690][ T9873] BTRFS info (device loop0): using sha256 checksum algorithm [ 441.518361][ T9873] BTRFS info (device loop0): enabling ssd optimizations [ 441.525430][ T9873] BTRFS info (device loop0): turning on async discard [ 441.532262][ T9873] BTRFS info (device loop0): enabling free space tree [ 442.068552][ T9849] XFS (loop2): Ending clean mount [ 442.203894][ T5825] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 442.227326][ T5834] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 442.340827][ T9905] netdevsim netdevsim4: Direct firmware load for / [ 442.340827][ T9905] failed with error -2 [ 442.403993][ T9905] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 442.403993][ T9905] [ 442.453107][ T1674] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 180 seconds [ 442.464191][ T1674] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 180 seconds [ 442.475542][ T1674] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 180 seconds [ 442.487218][ T1674] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 180 seconds [ 442.528032][ T5901] usb 2-1: USB disconnect, device number 67 [ 442.767409][ T9909] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 442.839389][ T9910] loop1: detected capacity change from 0 to 512 [ 443.324122][ T9384] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 443.499907][ T9384] usb 1-1: Using ep0 maxpacket: 32 [ 443.518462][ T9384] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 443.542556][ T9384] usb 1-1: config 0 has no interface number 0 [ 443.551887][ T9384] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 443.576469][ T9384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.601203][ T9384] usb 1-1: Product: syz [ 443.605712][ T9384] usb 1-1: Manufacturer: syz [ 443.613229][ T9384] usb 1-1: SerialNumber: syz [ 443.704568][ T9384] usb 1-1: config 0 descriptor?? [ 443.752564][ T9384] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 443.790300][ T9384] usb 1-1: selecting invalid altsetting 1 [ 443.821128][ T9384] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 443.861624][ T9384] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 443.884037][ T9384] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 443.898155][ T9923] syzkaller0: entered promiscuous mode [ 443.898679][ T9384] usb 1-1: media controller created [ 443.972958][ T9923] syzkaller0: entered allmulticast mode [ 443.983957][ T9384] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 444.022925][ T5901] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 444.081160][ T9384] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 444.093764][ T9384] zl10353_read_register: readreg error (reg=127, ret==-71) [ 444.122062][ T9384] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 444.226497][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.278938][ T5901] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 444.326810][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.367222][ T9384] usb 1-1: USB disconnect, device number 68 [ 444.375022][ T5901] usb 2-1: config 0 descriptor?? [ 445.163499][ T5901] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor [ 445.417890][ T5901] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000D/input/input25 [ 445.707048][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.723822][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.675181][ T5901] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 446.773078][ T5901] usb 2-1: USB disconnect, device number 68 [ 447.044556][ T9952] loop0: detected capacity change from 0 to 32768 [ 447.057173][ T9952] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.976 (9952) [ 447.072628][ T9952] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 447.083094][ T9952] BTRFS info (device loop0): using sha256 checksum algorithm [ 447.159148][ T9950] fido_id[9950]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 447.356726][ T9965] loop1: detected capacity change from 0 to 32768 [ 447.385632][ T9965] BTRFS info: device /dev/loop1 (7:1) using temp-fsid 47c65c2c-c402-450e-8390-b8f74cf026a5 [ 447.397024][ T9965] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.975 (9965) [ 447.458756][ T9965] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 447.468963][ T9965] BTRFS info (device loop1): using sha256 checksum algorithm [ 447.532114][ T9952] BTRFS info (device loop0): enabling ssd optimizations [ 447.539166][ T9952] BTRFS info (device loop0): turning on async discard [ 447.546044][ T9952] BTRFS info (device loop0): enabling free space tree [ 448.081301][ T9965] BTRFS info (device loop1): enabling ssd optimizations [ 448.091288][ T9965] BTRFS info (device loop1): turning on async discard [ 448.100630][ T9965] BTRFS info (device loop1): enabling free space tree [ 448.866727][ T5834] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 448.927783][ T5827] BTRFS info (device loop1): last unmount of filesystem 47c65c2c-c402-450e-8390-b8f74cf026a5 [ 449.362688][ T9995] syzkaller0: entered promiscuous mode [ 449.382318][ T9995] syzkaller0: entered allmulticast mode [ 449.713878][T10002] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 450.336803][ T10] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 451.123073][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 451.151309][ T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 451.199441][ T10] usb 2-1: config 0 has no interface number 0 [ 451.216818][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 451.242966][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.251157][ T10] usb 2-1: Product: syz [ 451.439576][T10017] loop0: detected capacity change from 0 to 32768 [ 451.450607][T10017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.988 (10017) [ 451.465879][T10017] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 451.476236][T10017] BTRFS info (device loop0): using sha256 checksum algorithm [ 451.501313][ T10] usb 2-1: Manufacturer: syz [ 451.532272][ T10] usb 2-1: SerialNumber: syz [ 451.569930][ T10] usb 2-1: config 0 descriptor?? [ 451.604003][ T10] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 451.662521][T10017] BTRFS info (device loop0): enabling ssd optimizations [ 451.670200][T10017] BTRFS info (device loop0): turning on async discard [ 451.677086][T10017] BTRFS info (device loop0): enabling free space tree [ 451.721080][ T10] usb 2-1: selecting invalid altsetting 1 [ 451.835183][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 452.182654][ T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 452.210065][ T10] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 452.233253][ T10] usb 2-1: media controller created [ 452.263668][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 452.333356][ T10] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 452.387259][ T10] zl10353_read_register: readreg error (reg=127, ret==-71) [ 452.416381][ T10] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 452.425404][ T5834] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 452.728263][T10037] loop2: detected capacity change from 0 to 32768 [ 452.741181][T10037] BTRFS info: device /dev/loop2 (7:2) using temp-fsid 4781b558-4c98-450d-b8ae-45ca02173b8e [ 452.751332][T10037] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.989 (10037) [ 452.783146][T10037] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 452.793300][T10037] BTRFS info (device loop2): using sha256 checksum algorithm [ 452.908864][ T10] usb 2-1: USB disconnect, device number 69 [ 453.058986][T10037] BTRFS info (device loop2): enabling ssd optimizations [ 453.067907][T10037] BTRFS info (device loop2): turning on async discard [ 453.074864][T10037] BTRFS info (device loop2): enabling free space tree [ 453.909947][ T5825] BTRFS info (device loop2): last unmount of filesystem 4781b558-4c98-450d-b8ae-45ca02173b8e [ 454.106470][T10062] syzkaller0: entered promiscuous mode [ 454.112013][T10062] syzkaller0: entered allmulticast mode [ 455.914341][T10082] loop3: detected capacity change from 0 to 32768 [ 455.926499][T10082] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1000 (10082) [ 455.953444][T10082] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 455.963749][T10082] BTRFS info (device loop3): using sha256 checksum algorithm [ 456.082390][T10082] BTRFS info (device loop3): enabling ssd optimizations [ 456.091632][T10082] BTRFS info (device loop3): turning on async discard [ 456.098537][T10082] BTRFS info (device loop3): enabling free space tree [ 456.794222][ T5824] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 456.884755][ T796] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 457.103514][ T796] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 457.111668][ T796] usb 1-1: config 0 has no interface number 0 [ 457.163233][ T796] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 457.202467][ T796] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 457.216376][ T796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.234141][ T796] usb 1-1: Product: syz [ 457.243123][ T796] usb 1-1: Manufacturer: syz [ 457.253355][ T796] usb 1-1: SerialNumber: syz [ 457.293702][ T796] usb 1-1: config 0 descriptor?? [ 457.325070][ T796] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 457.403352][ T5901] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 457.595185][ T5901] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 457.637308][ T5901] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 457.682837][ T5901] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 457.701539][T10121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1001'. [ 457.742668][ T5901] usb 2-1: config 0 descriptor?? [ 459.185451][T10133] syzkaller0: entered promiscuous mode [ 459.192291][T10133] syzkaller0: entered allmulticast mode [ 459.350690][ T87] usb 1-1: USB disconnect, device number 69 [ 459.362897][ T5950] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 459.391782][ T87] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 459.552955][ T5950] usb 3-1: Using ep0 maxpacket: 32 [ 459.571755][ T5950] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.620454][ T5950] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.641100][ T5950] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 459.669968][ T5950] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 459.679981][ T5950] usb 3-1: Product: syz [ 459.684647][ T5950] usb 3-1: Manufacturer: syz [ 459.703178][ T5950] hub 3-1:4.0: USB hub found [ 459.770120][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1015'. [ 459.913158][ T5950] hub 3-1:4.0: 2 ports detected [ 460.130745][ T5901] usbhid 2-1:0.0: can't add hid device: -71 [ 460.144018][ T5950] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 460.161955][ T5901] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 460.185074][ T5950] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 460.239258][ T5901] usb 2-1: USB disconnect, device number 70 [ 460.275023][ T5950] usb 3-1: USB disconnect, device number 52 [ 462.723607][ T5901] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 462.907528][ T5901] usb 4-1: Using ep0 maxpacket: 16 [ 462.970157][ T5901] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 462.992511][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 463.028111][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 463.053882][ T5901] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 463.134505][ T5901] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 463.162019][ T5901] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 463.171921][ T5901] usb 4-1: Manufacturer: syz [ 463.217883][ T5901] usb 4-1: config 0 descriptor?? [ 464.928844][T10179] netdevsim netdevsim2: Direct firmware load for / [ 464.928844][T10179] failed with error -2 [ 464.939611][T10179] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 464.939611][T10179] [ 465.094953][ T10] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 465.473091][ T9384] usb 4-1: USB disconnect, device number 63 [ 465.513444][ T10] usb 2-1: config 0 has an invalid interface number: 50 but max is 0 [ 465.521816][ T10] usb 2-1: config 0 has no interface number 0 [ 465.569316][ T10] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.670738][ T10] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 465.681139][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.696135][ T10] usb 2-1: Product: syz [ 465.700761][ T10] usb 2-1: Manufacturer: syz [ 465.705968][ T10] usb 2-1: SerialNumber: syz [ 465.785029][ T10] usb 2-1: config 0 descriptor?? [ 465.838770][ T10] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0 [ 465.892952][ T9384] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 466.054734][ T9384] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 466.079648][ T9384] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 466.113002][ T9384] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.131907][ T9384] usb 4-1: config 0 descriptor?? [ 466.241342][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1024'. [ 467.074939][T10201] loop2: detected capacity change from 0 to 512 [ 468.055121][ T796] usb 2-1: USB disconnect, device number 71 [ 468.103556][ T796] yurex 2-1:0.50: USB YUREX #0 now disconnected [ 468.824383][ T9384] usbhid 4-1:0.0: can't add hid device: -71 [ 468.830600][ T9384] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 468.900212][ T9384] usb 4-1: USB disconnect, device number 64 [ 469.101353][T10229] netdevsim netdevsim3: Direct firmware load for / [ 469.101353][T10229] failed with error -2 [ 469.126853][T10229] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 469.126853][T10229] [ 469.217920][T10233] loop1: detected capacity change from 0 to 16 [ 469.220456][T10231] loop4: detected capacity change from 0 to 512 [ 469.274163][T10233] erofs (device loop1): mounted with root inode @ nid 36. [ 470.542949][ T9384] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 470.712886][ T796] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 470.750721][ T9384] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 470.780388][ T9384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 470.835741][ T9384] usb 2-1: Product: syz [ 470.847553][ T9384] usb 2-1: Manufacturer: syz [ 470.883692][ T9384] usb 2-1: SerialNumber: syz [ 470.911482][ T9384] usb 2-1: config 0 descriptor?? [ 470.952727][ T9384] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 470.995833][ T796] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 471.033502][ T796] usb 3-1: config 0 has no interface number 0 [ 471.063020][ T796] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 471.156645][ T796] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 471.166042][ T796] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.194952][ T796] usb 3-1: Product: syz [ 471.212811][ T796] usb 3-1: Manufacturer: syz [ 471.217534][ T796] usb 3-1: SerialNumber: syz [ 471.254597][ T796] usb 3-1: config 0 descriptor?? [ 471.300702][ T796] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 471.513066][ T24] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 471.681055][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.785614][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1047'. [ 471.821667][ T24] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 471.831121][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.843983][ T24] usb 1-1: config 0 descriptor?? [ 471.937315][ T9384] gspca_sunplus: reg_r err -32 [ 471.942676][ T9384] sunplus 2-1:0.0: probe with driver sunplus failed with error -32 [ 472.746884][T10267] loop3: detected capacity change from 0 to 32768 [ 472.762565][T10267] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1054 (10267) [ 472.777615][ T1674] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 210 seconds [ 472.789724][ T1674] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 210 seconds [ 472.801174][ T1674] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 210 seconds [ 472.812735][ T1674] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 210 seconds [ 472.827505][T10267] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 472.838075][T10267] BTRFS info (device loop3): using sha256 checksum algorithm [ 472.976436][T10267] BTRFS info (device loop3): enabling ssd optimizations [ 472.983814][T10267] BTRFS info (device loop3): turning on async discard [ 472.990670][T10267] BTRFS info (device loop3): enabling free space tree [ 473.158130][ T5824] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 473.368533][ T796] usb 2-1: USB disconnect, device number 72 [ 474.347771][ T24] usbhid 1-1:0.0: can't add hid device: -71 [ 474.369654][ T24] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 474.427119][ T24] usb 1-1: USB disconnect, device number 70 [ 474.524650][ T796] usb 3-1: USB disconnect, device number 53 [ 474.564013][ T796] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 475.213429][T10304] netdevsim netdevsim4: Direct firmware load for / [ 475.213429][T10304] failed with error -2 [ 475.235089][T10304] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 475.235089][T10304] [ 476.268789][T10312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1064'. [ 477.256253][T10320] loop1: detected capacity change from 0 to 512 [ 477.672924][ T9384] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 477.989925][ T9384] usb 3-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 478.041151][ T9384] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 478.066848][ T9384] usb 3-1: Product: syz [ 478.087574][ T9384] usb 3-1: Manufacturer: syz [ 478.092261][ T9384] usb 3-1: SerialNumber: syz [ 479.548197][ T9] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 479.602258][ T9384] usb 3-1: config 0 descriptor?? [ 479.689017][ T9384] usb 3-1: can't set config #0, error -71 [ 479.719303][ T9384] usb 3-1: USB disconnect, device number 54 [ 479.745710][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.772942][ T9] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 479.788611][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.834018][ T9] usb 2-1: config 0 descriptor?? [ 482.167552][ T9] usbhid 2-1:0.0: can't add hid device: -71 [ 482.189575][ T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 482.219056][T10352] loop0: detected capacity change from 0 to 512 [ 482.332959][ T9] usb 2-1: USB disconnect, device number 73 [ 483.601681][T10363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 485.195671][ T9] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 485.356957][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 485.366123][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.367408][ T24] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 485.381951][ T9] usb 1-1: Product: syz [ 485.422888][ T9] usb 1-1: Manufacturer: syz [ 485.443031][ T9] usb 1-1: SerialNumber: syz [ 485.455602][ T9] usb 1-1: config 0 descriptor?? [ 485.497478][ T9] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 486.012923][ T24] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 486.021162][ T24] usb 4-1: config 0 has no interface number 0 [ 486.173076][ T24] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 486.207518][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 486.226372][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.240879][ T24] usb 4-1: Product: syz [ 486.247198][ T24] usb 4-1: Manufacturer: syz [ 486.258668][ T24] usb 4-1: SerialNumber: syz [ 486.283838][ T24] usb 4-1: config 0 descriptor?? [ 487.005614][ T9] gspca_sunplus: reg_r err -32 [ 487.010536][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -32 [ 487.053609][ T9] usb 1-1: USB disconnect, device number 71 [ 487.685476][ T24] usb 4-1: can't set config #0, error -71 [ 487.828587][ T24] usb 4-1: USB disconnect, device number 65 [ 487.846865][T10388] loop1: detected capacity change from 0 to 16 [ 487.918341][T10388] erofs (device loop1): mounted with root inode @ nid 36. [ 488.072949][ T5829] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 488.934446][ T24] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 488.972883][ T5829] usb 1-1: Using ep0 maxpacket: 16 [ 489.019834][ T5829] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 489.033690][ T5829] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 489.054950][ T5829] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 489.100688][ T5829] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 489.132797][ T5829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.142453][ T5829] usb 1-1: Product: syz [ 489.149414][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 489.166447][ T5829] usb 1-1: Manufacturer: syz [ 489.171224][ T24] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 489.278703][ T5829] usb 1-1: SerialNumber: syz [ 489.703183][T10402] loop1: detected capacity change from 0 to 512 [ 489.722939][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.760653][ T5829] usb 1-1: config 0 descriptor?? [ 489.773847][ T24] usb 4-1: config 0 descriptor?? [ 489.793624][ T5829] mcba_usb 1-1:0.0: Can't find endpoints [ 490.165177][ T5829] usb 1-1: USB disconnect, device number 72 [ 491.662261][ T24] usbhid 4-1:0.0: can't add hid device: -71 [ 491.678579][ T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 491.723231][ T24] usb 4-1: USB disconnect, device number 66 [ 492.423033][ T24] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 492.787777][T10424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1101'. [ 492.948847][ T24] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 492.988351][ T24] usb 4-1: config 0 has no interface number 0 [ 493.008611][ T24] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 493.072226][ T24] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 493.088391][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.125597][ T24] usb 4-1: Product: syz [ 493.146180][ T24] usb 4-1: Manufacturer: syz [ 493.160820][ T24] usb 4-1: SerialNumber: syz [ 493.177300][ T24] usb 4-1: config 0 descriptor?? [ 493.371083][T10430] loop2: detected capacity change from 0 to 32768 [ 493.394509][T10430] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1102 (10430) [ 493.411339][T10430] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 493.421671][T10430] BTRFS info (device loop2): using sha256 checksum algorithm [ 493.461054][ T24] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 493.614229][T10430] BTRFS info (device loop2): enabling ssd optimizations [ 493.621691][T10430] BTRFS info (device loop2): turning on async discard [ 493.628564][T10430] BTRFS info (device loop2): enabling free space tree [ 494.855529][T10453] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1100'. [ 495.253470][ T5825] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 497.987332][ T9] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 498.672903][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 498.704879][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.735750][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 498.825057][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 498.861575][ T9] usb 1-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 498.891674][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.911725][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 498.923663][ T9] usb 1-1: Product: syz [ 498.927896][ T9] usb 1-1: Manufacturer: syz [ 498.973338][ T9] usb 1-1: SerialNumber: syz [ 498.996436][ T9] usb 1-1: config 0 descriptor?? [ 499.028057][ T9] mcba_usb 1-1:0.0: Can't find endpoints [ 499.083835][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.123486][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 499.143761][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.176280][ T10] usb 2-1: config 0 descriptor?? [ 499.476735][ T5908] usb 1-1: USB disconnect, device number 73 [ 500.300504][ T9384] usb 4-1: USB disconnect, device number 67 [ 500.353841][ T9384] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 500.530340][ T10] keytouch 0003:0926:3333.000E: fixing up Keytouch IEC report descriptor [ 500.642538][ T10] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000E/input/input26 [ 501.227194][ T10] keytouch 0003:0926:3333.000E: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 501.264309][ T10] usb 2-1: USB disconnect, device number 74 [ 501.663146][T10493] fido_id[10493]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 501.741846][T10501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1116'. [ 503.381247][ T1674] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 240 seconds [ 503.393608][ T1674] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 240 seconds [ 503.404760][ T1674] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 240 seconds [ 503.416549][ T1674] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 240 seconds [ 505.940790][ T10] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 506.738476][T10536] loop2: detected capacity change from 0 to 32768 [ 506.752966][T10536] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1126 (10536) [ 506.816068][ T10] usb 4-1: config 0 has an invalid interface number: 50 but max is 0 [ 506.843438][T10536] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 506.853884][T10536] BTRFS info (device loop2): using sha256 checksum algorithm [ 506.917535][ T10] usb 4-1: config 0 has no interface number 0 [ 507.001488][ T10] usb 4-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 507.043963][T10536] BTRFS info (device loop2): enabling ssd optimizations [ 507.051191][T10536] BTRFS info (device loop2): turning on async discard [ 507.058505][T10536] BTRFS info (device loop2): enabling free space tree [ 507.132221][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 507.141482][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.163828][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.170361][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.179933][ T10] usb 4-1: Product: syz [ 507.205074][ T10] usb 4-1: Manufacturer: syz [ 507.209917][ T10] usb 4-1: SerialNumber: syz [ 507.696244][ T10] usb 4-1: config 0 descriptor?? [ 507.924393][ T10] yurex 4-1:0.50: USB YUREX device now attached to Yurex #0 [ 508.180476][T10569] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1124'. [ 508.224361][ T9] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 508.353265][ T5901] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 508.413070][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.466814][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 508.550726][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.640826][ T5825] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 508.657605][ T5901] usb 5-1: Using ep0 maxpacket: 16 [ 508.709370][ T9] usb 1-1: config 0 descriptor?? [ 509.260659][ T5901] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.316972][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 509.363052][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 509.465369][ T5901] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 509.522151][ T9] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor [ 509.538420][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.572219][ T5901] usb 5-1: Product: syz [ 509.588123][ T5901] usb 5-1: Manufacturer: syz [ 509.607659][ T5901] usb 5-1: SerialNumber: syz [ 509.646130][ T5901] usb 5-1: config 0 descriptor?? [ 509.722020][ T5901] mcba_usb 5-1:0.0: Can't find endpoints [ 509.746027][ T9] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000F/input/input27 [ 509.993201][ T5901] usb 5-1: USB disconnect, device number 52 [ 510.089977][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1133'. [ 510.501376][ T9] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0 [ 510.961570][ T9] usb 1-1: USB disconnect, device number 74 [ 512.319833][T10585] fido_id[10585]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 512.924105][ T9384] usb 4-1: USB disconnect, device number 68 [ 512.942683][ T9384] yurex 4-1:0.50: USB YUREX #0 now disconnected [ 515.579813][T10612] loop0: detected capacity change from 0 to 32768 [ 515.606281][T10612] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1142 (10612) [ 515.637014][T10612] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 515.647245][T10612] BTRFS info (device loop0): using sha256 checksum algorithm [ 516.680729][T10612] BTRFS info (device loop0): enabling ssd optimizations [ 516.687777][T10612] BTRFS info (device loop0): turning on async discard [ 516.694709][T10612] BTRFS info (device loop0): enabling free space tree [ 516.975318][ T5834] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 519.039433][T10640] loop1: detected capacity change from 0 to 32768 [ 519.050360][T10640] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1149 (10640) [ 519.074533][T10640] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 519.084801][T10640] BTRFS info (device loop1): using sha256 checksum algorithm [ 519.518519][T10640] BTRFS info (device loop1): enabling ssd optimizations [ 519.525740][T10640] BTRFS info (device loop1): turning on async discard [ 519.532575][T10640] BTRFS info (device loop1): enabling free space tree [ 519.936357][ T9384] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 520.192933][ T5829] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 520.412527][ T9384] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 520.425899][ T5829] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 520.436459][ T9384] usb 1-1: config 0 has no interface number 0 [ 520.457002][ T9384] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 520.493342][T10672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1147'. [ 520.517145][ T5829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.526749][ T9384] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 520.529309][ T5829] usb 4-1: Product: syz [ 520.563989][ T9384] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.594132][ T5827] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 520.604715][ T9384] usb 1-1: Product: syz [ 520.608909][ T9384] usb 1-1: Manufacturer: syz [ 520.638953][ T5829] usb 4-1: Manufacturer: syz [ 520.644161][ T5829] usb 4-1: SerialNumber: syz [ 520.649262][ T9384] usb 1-1: SerialNumber: syz [ 520.694608][ T5829] usb 4-1: config 0 descriptor?? [ 520.707406][ T9384] usb 1-1: config 0 descriptor?? [ 520.734144][ T5829] gspca_main: sunplus-2.14.0 probing 055f:c230 [ 520.780133][ T9384] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 521.026707][T10665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1146'. [ 521.927127][ T5829] gspca_sunplus: reg_r err -32 [ 521.932283][ T5829] sunplus 4-1:0.0: probe with driver sunplus failed with error -32 [ 521.964597][ T5829] usb 4-1: USB disconnect, device number 69 [ 523.025108][ T5829] usb 1-1: USB disconnect, device number 75 [ 523.146975][T10683] loop1: detected capacity change from 0 to 32768 [ 523.279726][ T5829] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 524.130730][ T29] audit: type=1800 audit(1769862455.212:10): pid=10683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1153" name="file1" dev="loop1" ino=7 res=0 errno=0 [ 526.716837][T10708] loop4: detected capacity change from 0 to 32768 [ 526.743130][T10708] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1162 (10708) [ 526.760675][T10708] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 526.770982][T10708] BTRFS info (device loop4): using sha256 checksum algorithm [ 526.915382][T10708] BTRFS info (device loop4): enabling ssd optimizations [ 526.922400][T10708] BTRFS info (device loop4): turning on async discard [ 526.929255][T10708] BTRFS info (device loop4): enabling free space tree [ 527.977272][ T5826] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 528.887965][ T5829] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 529.044338][ T24] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 529.086638][ T5829] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 529.125776][ T5829] usb 3-1: config 0 has no interface number 0 [ 529.132045][ T5829] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 529.264478][ T5829] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 529.297940][ T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 529.322822][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.330959][ T5829] usb 3-1: Product: syz [ 529.342806][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.375262][ T5829] usb 3-1: Manufacturer: syz [ 529.381469][ T24] usb 4-1: Product: syz [ 529.392256][T10752] geneve2: entered promiscuous mode [ 529.397735][ T5829] usb 3-1: SerialNumber: syz [ 529.402151][ T24] usb 4-1: Manufacturer: syz [ 529.409756][ T5829] usb 3-1: config 0 descriptor?? [ 529.455084][ T24] usb 4-1: SerialNumber: syz [ 529.507916][ T5829] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 529.893941][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 529.906526][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1166'. [ 530.097965][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 531.258587][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 531.299771][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPIPE [ 531.596922][T10772] syzkaller0: entered promiscuous mode [ 531.610905][T10772] syzkaller0: entered allmulticast mode [ 531.958700][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -EPROTO [ 532.003038][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 532.033639][ T24] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 532.118460][ T24] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 532.171780][ T24] usb 4-1: USB disconnect, device number 70 [ 532.603790][T10780] loop1: detected capacity change from 0 to 32768 [ 532.628134][T10780] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1175 (10780) [ 532.655356][T10780] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 532.665583][T10780] BTRFS info (device loop1): using sha256 checksum algorithm [ 532.780349][T10780] BTRFS info (device loop1): enabling ssd optimizations [ 532.787568][T10780] BTRFS info (device loop1): turning on async discard [ 532.794805][T10780] BTRFS info (device loop1): enabling free space tree [ 533.557165][ T9] usb 3-1: USB disconnect, device number 55 [ 533.566758][ T5827] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 533.616258][T10773] loop4: detected capacity change from 0 to 32768 [ 533.640695][ T9] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 534.058577][ T1674] block nbd0: Possible stuck request ffff888027980000: control (read@0,1024B). Runtime 270 seconds [ 534.073435][ T1674] block nbd0: Possible stuck request ffff888027980200: control (read@1024,1024B). Runtime 270 seconds [ 534.097221][ T1674] block nbd0: Possible stuck request ffff888027980400: control (read@2048,1024B). Runtime 270 seconds [ 534.167740][ T1674] block nbd0: Possible stuck request ffff888027980600: control (read@3072,1024B). Runtime 270 seconds [ 534.278477][ T29] audit: type=1800 audit(1769862465.342:11): pid=10773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1172" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 534.811967][ T112] ================================================================== [ 534.820101][ T112] BUG: KASAN: slab-use-after-free in jfs_lazycommit+0x749/0xaa0 [ 534.827759][ T112] Read of size 4 at addr ffff888079ea0e94 by task jfsCommit/112 [ 534.835427][ T112] [ 534.837799][ T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 534.837823][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 534.837840][ T112] Call Trace: [ 534.837848][ T112] [ 534.837855][ T112] dump_stack_lvl+0xe8/0x150 [ 534.837882][ T112] print_report+0xba/0x230 [ 534.837899][ T112] ? jfs_lazycommit+0x749/0xaa0 [ 534.837917][ T112] kasan_report+0x117/0x150 [ 534.837934][ T112] ? jfs_lazycommit+0x749/0xaa0 [ 534.837954][ T112] jfs_lazycommit+0x749/0xaa0 [ 534.837973][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 534.837991][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 534.838009][ T112] ? __kthread_parkme+0x7a/0x1f0 [ 534.838032][ T112] kthread+0x388/0x470 [ 534.838044][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 534.838060][ T112] ? __pfx_kthread+0x10/0x10 [ 534.838081][ T112] ret_from_fork+0x51b/0xa40 [ 534.838100][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 534.838117][ T112] ? __switch_to+0xc7d/0x1400 [ 534.838132][ T112] ? __pfx_kthread+0x10/0x10 [ 534.838153][ T112] ret_from_fork_asm+0x1a/0x30 [ 534.838179][ T112] [ 534.838185][ T112] [ 534.951399][ T112] Allocated by task 10773: [ 534.955834][ T112] kasan_save_track+0x3e/0x80 [ 534.960548][ T112] __kasan_kmalloc+0x93/0xb0 [ 534.965416][ T112] __kmalloc_cache_noprof+0x31c/0x660 [ 534.970825][ T112] jfs_fill_super+0xc2/0xd80 [ 534.975447][ T112] get_tree_bdev_flags+0x431/0x4f0 [ 534.980587][ T112] vfs_get_tree+0x92/0x2a0 [ 534.985031][ T112] do_new_mount+0x341/0xd30 [ 534.989569][ T112] __se_sys_mount+0x31d/0x420 [ 534.994277][ T112] do_syscall_64+0xe2/0xf80 [ 534.998824][ T112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.004761][ T112] [ 535.007114][ T112] Freed by task 5826: [ 535.011214][ T112] kasan_save_track+0x3e/0x80 [ 535.016049][ T112] kasan_save_free_info+0x46/0x50 [ 535.021283][ T112] __kasan_slab_free+0x5c/0x80 [ 535.026079][ T112] kfree+0x1c1/0x610 [ 535.030002][ T112] generic_shutdown_super+0x13d/0x2d0 [ 535.035493][ T112] kill_block_super+0x44/0x90 [ 535.040196][ T112] deactivate_locked_super+0xbc/0x130 [ 535.045594][ T112] cleanup_mnt+0x437/0x4d0 [ 535.050037][ T112] task_work_run+0x1d9/0x270 [ 535.054708][ T112] exit_to_user_mode_loop+0xed/0x480 [ 535.060023][ T112] do_syscall_64+0x2b7/0xf80 [ 535.064658][ T112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.070977][ T112] [ 535.073334][ T112] The buggy address belongs to the object at ffff888079ea0e00 [ 535.073334][ T112] which belongs to the cache kmalloc-256 of size 256 [ 535.087522][ T112] The buggy address is located 148 bytes inside of [ 535.087522][ T112] freed 256-byte region [ffff888079ea0e00, ffff888079ea0f00) [ 535.101614][ T112] [ 535.103968][ T112] The buggy address belongs to the physical page: [ 535.110517][ T112] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79ea0 [ 535.119387][ T112] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 535.127913][ T112] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 535.135661][ T112] page_type: f5(slab) [ 535.139839][ T112] raw: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 535.148443][ T112] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 535.157050][ T112] head: 00fff00000000040 ffff88813ffa6b40 dead000000000100 dead000000000122 [ 535.165830][ T112] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 535.174620][ T112] head: 00fff00000000001 ffffea0001e7a801 00000000ffffffff 00000000ffffffff [ 535.183408][ T112] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 535.192094][ T112] page dumped because: kasan: bad access detected [ 535.198536][ T112] page_owner tracks the page as allocated [ 535.204357][ T112] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5826, tgid 5826 (syz-executor), ts 95221983184, free_ts 95172693114 [ 535.225916][ T112] post_alloc_hook+0x231/0x280 [ 535.230805][ T112] get_page_from_freelist+0x24dc/0x2580 [ 535.236379][ T112] __alloc_frozen_pages_noprof+0x18d/0x380 [ 535.242396][ T112] allocate_slab+0x7b/0x660 [ 535.246921][ T112] refill_objects+0x331/0x3c0 [ 535.251622][ T112] __pcs_replace_empty_main+0x2b9/0x620 [ 535.257197][ T112] __kmalloc_noprof+0x474/0x760 [ 535.262081][ T112] fib_create_info+0x171d/0x31f0 [ 535.267129][ T112] fib_table_insert+0xc8/0x1b50 [ 535.272007][ T112] fib_magic+0x434/0x510 [ 535.276303][ T112] fib_add_ifaddr+0x3fb/0x5f0 [ 535.281006][ T112] fib_netdev_event+0x382/0x490 [ 535.285876][ T112] notifier_call_chain+0x19d/0x3a0 [ 535.291015][ T112] __dev_notify_flags+0x1a9/0x310 [ 535.296161][ T112] netif_change_flags+0xe8/0x1a0 [ 535.301223][ T112] do_setlink+0xf82/0x4590 [ 535.305669][ T112] page last free pid 5185 tgid 5185 stack trace: [ 535.312296][ T112] __free_frozen_pages+0xc01/0xd80 [ 535.317445][ T112] __slab_free+0x263/0x2b0 [ 535.321878][ T112] qlist_free_all+0x97/0x100 [ 535.326569][ T112] kasan_quarantine_reduce+0x148/0x160 [ 535.332498][ T112] __kasan_slab_alloc+0x22/0x80 [ 535.337565][ T112] kmem_cache_alloc_node_noprof+0x384/0x690 [ 535.343769][ T112] __alloc_skb+0x1d0/0x7d0 [ 535.348310][ T112] alloc_skb_with_frags+0xca/0x890 [ 535.353527][ T112] sock_alloc_send_pskb+0x878/0x990 [ 535.358757][ T112] unix_dgram_sendmsg+0x460/0x18e0 [ 535.363932][ T112] sock_sendmsg_nosec+0x18f/0x1d0 [ 535.368988][ T112] __sys_sendto+0x3ff/0x590 [ 535.373600][ T112] __x64_sys_sendto+0xde/0x100 [ 535.378402][ T112] do_syscall_64+0xe2/0xf80 [ 535.382930][ T112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.388848][ T112] [ 535.391188][ T112] Memory state around the buggy address: [ 535.396924][ T112] ffff888079ea0d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 535.405262][ T112] ffff888079ea0e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.413521][ T112] >ffff888079ea0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 535.421802][ T112] ^ [ 535.426516][ T112] ffff888079ea0f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 535.434605][ T112] ffff888079ea0f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 535.442697][ T112] ================================================================== [ 535.450967][ T112] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 535.458300][ T112] CPU: 0 UID: 0 PID: 112 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) [ 535.467605][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 535.477681][ T112] Call Trace: [ 535.480989][ T112] [ 535.483946][ T112] vpanic+0x56c/0xa60 [ 535.488054][ T112] ? __pfx_vpanic+0x10/0x10 [ 535.492596][ T112] panic+0xc5/0xd0 [ 535.496354][ T112] ? __pfx_panic+0x10/0x10 [ 535.500886][ T112] ? jfs_lazycommit+0x749/0xaa0 [ 535.505769][ T112] ? rcu_is_watching+0x15/0xb0 [ 535.510654][ T112] ? jfs_lazycommit+0x749/0xaa0 [ 535.515566][ T112] ? jfs_lazycommit+0x749/0xaa0 [ 535.520442][ T112] check_panic_on_warn+0x89/0xb0 [ 535.525451][ T112] ? jfs_lazycommit+0x749/0xaa0 [ 535.530435][ T112] end_report+0x6f/0x140 [ 535.534891][ T112] kasan_report+0x128/0x150 [ 535.539465][ T112] ? jfs_lazycommit+0x749/0xaa0 [ 535.544350][ T112] jfs_lazycommit+0x749/0xaa0 [ 535.549069][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 535.554438][ T112] ? __pfx_default_wake_function+0x10/0x10 [ 535.560273][ T112] ? __kthread_parkme+0x7a/0x1f0 [ 535.565275][ T112] kthread+0x388/0x470 [ 535.569569][ T112] ? __pfx_jfs_lazycommit+0x10/0x10 [ 535.574792][ T112] ? __pfx_kthread+0x10/0x10 [ 535.579683][ T112] ret_from_fork+0x51b/0xa40 [ 535.584314][ T112] ? __pfx_ret_from_fork+0x10/0x10 [ 535.589480][ T112] ? __switch_to+0xc7d/0x1400 [ 535.594183][ T112] ? __pfx_kthread+0x10/0x10 [ 535.598890][ T112] ret_from_fork_asm+0x1a/0x30 [ 535.603726][ T112] [ 535.607380][ T112] Kernel Offset: disabled [ 535.611828][ T112] Rebooting in 86400 seconds..